last executing test programs: 2m33.952399225s ago: executing program 0 (id=5322): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000003c0)) 2m33.711172253s ago: executing program 0 (id=5326): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc0505510, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 'syz1\x00'}) 2m33.385393906s ago: executing program 0 (id=5331): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 2m33.055160403s ago: executing program 0 (id=5336): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@force}, {@barrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'macturkish'}}, {@type={'type', 0x3d, "f1aefc87"}}, {}, {@nodecompose}, {@nobarrier}]}, 0x3, 0x6bc, &(0x7f0000001240)="$eJzs3U9sHFcZAPBvJpu1N0jutk3TgJBiNVIFjUhsr0pSCakBIeRDhCK49GolTmNlk1a2i9wKkQ1QkDhxQj1wKELm0BNCCKmcEOWMhMSFk++RuHGIELBo/uzueL121onjdZvfT5qdN/vevPfNl/mzOxtrAnhqLb4RxzuRxOK5KxvZ8tZmq7212brdK0fEVESkEbViFkkjIvkk4nIUU3w+e7PsLtltnFfvf5zUPvioVSzVyilvn+613g4jW3YipvsLxyJitij+Z4wO09H95VPez7VBf48o6cedJexsL3Ewad0dOoPKUYfGduMft8CRdbe4bu7QjDgRxdU1+xwQ5dnh4WeGydvz3NQ5vDgAAADgSRn5Xb7qmQfxIDZi5nDCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM+GpHhmYFJOaa88G0nv+f/1yjP16xMO9zG9fyOffeeZSQcCAAAAAAAAAI/lzIN4EBsx01vuJvlv/i/lCyfz18/FO7EWy7Ea52MjlmI91mM15iOiWemovrG0vr46v3PNX0S2ZrfbvVuuuTByzYXtcXWGAx31Pw12NAIAAAAAAACAp9YPY3Hw+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwFScSxYpZPJ3vlZqS1iJiOiHoy229en2iwB+BPkw4AAAAAnrxGOZ9J/lcUukn+nf9U/r1/Ot6JO7EeK7Ee7ViO6/m9gOJbf/q3Tqu9tdm6nU07O/76P/cVR95jFPceRo88l7d4ob/GYnwrvhvnYjauxmqsxPdiKdZjOWbjm3lpKZJolncvmlubjejFujPey9uWrg7HdqZSzno7nUfSiBuxksd2Pq7Ve6GnZbvTldH+UI8YGvFelp3k9dKYObpeieHn5fxoaOZbfryfkbky91k2nq3mfWfuR+8n/+4WHjrSfKT9e1AnB6Nki8MjPVLOT5TzLNc/ebI53+ettO2Z6PwsW+rtfaf2znnEl//+56s30zu3bt5YO3d0dqNHNLxPtCqZeHGsTLSzTHQeIxPTjxP/wbhc7kLN/ll0f2fLl/J1Z2Ilvh1vxfVYjosxF/NxKebitViIVixU8vrC3nnNj7V0f8fa2S+Vheya9NPKtenQTO1WkeX12Upeq2e6Zl5XfWeQpefGyFJSj6EsvVbM/jEylNoXykI2xo/uDa44kzeciflKJp7fOxO/+m92ql9r37m1enPp7THHe7mcZ4ft+9vPzb8+kA3av3Jzs/3luewfK4rLRnXvyOqe79UN5ate/uJSKzvbVleP/Hgu6h52pGY9nbo3qqei7sWRo7TyutOVum2fcuKtaPc/hZQO/SAFYAwnXjlRb9xv/LXxYePHjZuNK9PfmLo09cV6HP9L7Y/Hfpv+Jv1a8kp8GD+ImUlHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnwVr7753a6ndXl49goVID7jDeyOreqko3qmPaHMmjkA2Ph2Fqb32qN9F8bimXVavTyLmRuwaz+EWonYIY03FiKor/XcaEWk/noi4dQQecAc8KRfWb799Ye3d976ycnvpzeU3l+8sXLr4+sXWV+fvXrix0l6eK17LxrUJBwscqMHHgElHAgAAAAAAAAAAAIzrMP68YcSwSWcC2woAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8Oi2+Ecc7kcT83Pm5bHlrs9XOpl550LIWEWlEJN+PSD6JuBzFFM1Kd8lu47x6/+NfvvzBR61BX7Ve+3Rovd//q9vd51Z0yilmI+JYOX+4qbH6u1bpr7OfXvqS/hZmCTvbSxxM2v8DAAD//7sjDnk=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m32.563863004s ago: executing program 0 (id=5342): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ed071, 0xffffffffffffffff, 0xfffff000) mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x3e, 0x1, @thr={0x0, 0x0}}) 2m31.78807775s ago: executing program 0 (id=5355): r0 = syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xea84, 0xb, 0x1, "3c2c6700f3ffa9ffe6fffff4dd4007ff0000e4000000adaf04008f097a8800", 0x492c3349}) 2m31.282381819s ago: executing program 32 (id=5355): r0 = syz_open_dev$swradio(&(0x7f00000003c0), 0x1, 0x2) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xea84, 0xb, 0x1, "3c2c6700f3ffa9ffe6fffff4dd4007ff0000e4000000adaf04008f097a8800", 0x492c3349}) 3.288541606s ago: executing program 1 (id=7133): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400010000000009040002"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card3/oss_mixer\x00', 0x802, 0x0) 2.144169576s ago: executing program 6 (id=7151): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000006e7"], 0x14}}, 0x80) 2.128069767s ago: executing program 5 (id=7152): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8, 0x17, 0xffffffff}]}, 0x24}}, 0x0) 2.012212548s ago: executing program 4 (id=7154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000780)={0x7, {{0xa, 0x4e20, 0x8001, @mcast2, 0x1a8}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x0, @local, 0x20000}}]}, 0x110) 1.900991685s ago: executing program 6 (id=7155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 1.842181004s ago: executing program 3 (id=7156): r0 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xffffffffffffffff) 1.808365625s ago: executing program 5 (id=7157): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000000)=0xfff, 0x4) 1.808004425s ago: executing program 4 (id=7158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x40, 0xfe, 0x3, 0x0, 0x3, 0x3000}}, 0x1c}}, 0xc004) 1.709310991s ago: executing program 2 (id=7159): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) 1.588715928s ago: executing program 3 (id=7160): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000001800"/198, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1.577077578s ago: executing program 6 (id=7161): r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000002000), 0x200, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, &(0x7f0000002080)={{}, 0x9}) 1.570714981s ago: executing program 4 (id=7162): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x1000000, 0x0, 0x0) 1.489755617s ago: executing program 5 (id=7163): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 1.48499549s ago: executing program 1 (id=7164): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2004c13, &(0x7f0000002b40)={[{@session={'session', 0x3d, 0x3b}}, {@session={'session', 0x3d, 0x34}}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@map_normal}, {@unhide}, {@overriderock}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@overriderock}, {@session={'session', 0x3d, 0x5f}}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@mode={'mode', 0x3d, 0xe2f}}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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") stat(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x0) 1.429394369s ago: executing program 2 (id=7165): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) mount$9p_tcp(0x0, &(0x7f0000001340)='./file1\x00', &(0x7f0000001380), 0x2800000, &(0x7f00000013c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose}]}}) 1.295542366s ago: executing program 6 (id=7166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000004c80)={0x0, 0x0, &(0x7f0000004c40)={&(0x7f0000004780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.279312197s ago: executing program 4 (id=7167): r0 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x2) ioctl$FE_READ_SIGNAL_STRENGTH(r0, 0x80026f47, &(0x7f0000000040)) 1.120420547s ago: executing program 5 (id=7168): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, 0x140b, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.105967252s ago: executing program 3 (id=7169): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) read$eventfd(r0, &(0x7f0000000280), 0x8) 1.076086997s ago: executing program 2 (id=7170): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f00000001c0)={0x23c, 0x7d, 0x0, {{0x500, 0xfb, 0x0, 0x200000, {0x10}, 0x8400000, 0x0, 0x0, 0x1282, 0x29, '\x04nodev{c\x14\x00\x00\x00\x00\x00\x00\x00\x81\b\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00\xe4\xe2\xef9\b\xe4\x18)s\v', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\x045\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x88\x06\xb4\x94\xe1', 0x12, '\x00\x00\x00\xadk\xa9p\x00'/18, 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\x83\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\a9\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23c) 1.008745565s ago: executing program 1 (id=7171): syz_emit_vhci(&(0x7f0000000340)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_SCAN_ENABLE={{0x8}, 0x6}}}, 0x7) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.007431743s ago: executing program 4 (id=7172): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000fc0)={0x0, 0x0, '\x00', @raw_data=[0x6, 0x9, 0x7, 0x1, 0x6, 0xf909, 0x341f, 0x0, 0x400, 0x2, 0x8, 0x248, 0x9, 0xffff, 0x6, 0x80000001, 0x9, 0x80, 0x5, 0xff, 0x6, 0x7fffffff, 0xffff7fff, 0x9, 0x8, 0x9, 0xe, 0x1, 0xcda, 0x5, 0x8, 0x4]}) 996.531183ms ago: executing program 6 (id=7173): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000003780)) 824.36762ms ago: executing program 5 (id=7174): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) 794.343607ms ago: executing program 3 (id=7175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x8000}]}}}]}, 0x44}}, 0x0) 749.420485ms ago: executing program 2 (id=7176): r0 = syz_io_uring_setup(0x3b1, &(0x7f0000000f00)={0x0, 0x9584, 0x8, 0x2, 0x281}, &(0x7f0000000f80), &(0x7f0000000fc0)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0xffffffffffffffff, 0x1) 702.908787ms ago: executing program 4 (id=7177): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x210004, &(0x7f00000000c0)={[{@usrquota}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@quota}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@usrquota}, {@usrquota}, {@gid}]}, 0x3, 0x62b5, &(0x7f00000069c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 657.834199ms ago: executing program 6 (id=7178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x10}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 626.730176ms ago: executing program 1 (id=7179): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0x21, 0x0, &(0x7f00000007c0)) 466.768958ms ago: executing program 5 (id=7180): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xdd, 0x8a, 0x7a, 0x20, 0x867, 0x9812, 0x240f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf4, 0x8, 0x20, 0x10, [{{0x9, 0x4, 0x44, 0x3, 0x0, 0xb7, 0x9d, 0xb5, 0x5}}]}}]}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05c2380c"], 0x8) 361.871158ms ago: executing program 2 (id=7181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 281.665962ms ago: executing program 1 (id=7182): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) setsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000440)=0x9, 0x4) 209.807388ms ago: executing program 3 (id=7183): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="c1dfb080cd21d308098e000008007e227f3ad7a9", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 55.715779ms ago: executing program 2 (id=7184): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x65, 0x62, 0x62, 0x86cc4097e8288a3a, 0x31, 0x66, 0x34, 0x34, 0x30, 0x62, 0x0, 0x0, 0x64, 0x61, 0x3f]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x16}, 0x48, 0xfffffffffffffffe) keyctl$clear(0x7, r0) 40.628247ms ago: executing program 1 (id=7185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x7}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1f}]}, 0x24}}, 0x60) 0s ago: executing program 3 (id=7186): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private0}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): l 0, changing to 7 [ 729.001516][ T6626] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 729.003406][T18709] loop4: detected capacity change from 0 to 2048 [ 729.015759][ T6626] usb 6-1: string descriptor 0 read error: -22 [ 729.015917][ T6626] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 729.015961][ T6626] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.024275][ T6365] udevd[6365]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 729.027506][ T6356] udevd[6356]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 729.036296][T18709] loop4: p3 < > p4 < > [ 729.036339][T18709] loop4: partition table partially beyond EOD, truncated [ 729.036566][T18709] loop4: p3 start 4284289 is beyond EOD, truncated [ 729.055201][ T6626] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 729.074587][ T5186] loop4: p3 < > p4 < > [ 729.074630][ T5186] loop4: partition table partially beyond EOD, truncated [ 729.074905][ T5186] loop4: p3 start 4284289 is beyond EOD, truncated [ 729.082418][ T6364] udevd[6364]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 729.089282][ T8415] udevd[8415]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 729.223526][ T6365] udevd[6365]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 729.234998][ T8415] udevd[8415]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 729.248919][ T6358] udevd[6358]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 729.250346][T10400] udevd[10400]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 729.403085][ T6626] usb 6-1: USB disconnect, device number 125 [ 729.437253][ T6356] udevd[6356]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 729.562141][ T8415] udevd[8415]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 729.912739][T18728] loop2: detected capacity change from 0 to 2048 [ 730.462766][T18746] loop2: detected capacity change from 0 to 512 [ 730.496232][T18746] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 730.565946][T18746] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz.2.5617: Invalid block bitmap block 0 in block_group 0 [ 730.582904][T18746] loop2: lost filesystem error report for type 5 error -117 [ 730.593309][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 730.607348][ C0] EXT4-fs (loop2): initial error at time 2000000668: ext4_read_block_bitmap_nowait:482 [ 730.617076][ C0] EXT4-fs (loop2): last error at time 2000000668: ext4_read_block_bitmap_nowait:482 [ 730.647781][ T5136] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 730.662338][T18746] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 730.696357][T18758] xt_TCPMSS: Only works on TCP SYN packets [ 730.715869][T18746] loop2: lost filesystem error report for type 5 error -117 [ 730.726656][T18746] EXT4-fs error (device loop2): ext4_clear_blocks:874: inode #11: comm syz.2.5617: attempt to clear invalid blocks 983261 len 1 [ 730.842718][T18746] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 730.914366][T18746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4781: comm syz.2.5617: Invalid inode table block 0 in block_group 0 [ 731.005673][T18746] loop2: lost filesystem error report for type 5 error -117 [ 731.020870][T18746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 731.080406][T18746] loop2: lost filesystem error report for type 5 error -117 [ 731.082605][T18746] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 731.130475][T18764] loop1: detected capacity change from 0 to 4096 [ 731.138604][T18746] loop2: lost filesystem error report for type 5 error -117 [ 731.139143][T18746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4781: comm syz.2.5617: Invalid inode table block 0 in block_group 0 [ 731.153543][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5630'. [ 731.213197][T18746] loop2: lost filesystem error report for type 5 error -117 [ 731.223845][T18746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 731.277641][T18746] loop2: lost filesystem error report for type 5 error -117 [ 731.286769][T18746] EXT4-fs error (device loop2): ext4_truncate:4587: inode #11: comm syz.2.5617: mark_inode_dirty error [ 731.305695][ T6023] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 731.362180][T18746] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 731.362829][T18746] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 731.397767][T18764] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 731.449536][T18764] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 731.476086][T18746] loop2: lost filesystem error report for type 5 error -117 [ 731.479957][T18746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4781: comm syz.2.5617: Invalid inode table block 0 in block_group 0 [ 731.500598][ T6023] usb 6-1: Using ep0 maxpacket: 8 [ 731.531803][ T6023] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 731.570162][ T6023] usb 6-1: config 0 has no interface number 0 [ 731.580882][T18746] loop2: lost filesystem error report for type 5 error -117 [ 731.581525][T18746] EXT4-fs (loop2): 1 truncate cleaned up [ 731.595230][ T30] audit: type=1800 audit(2000000668.967:43): pid=18764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5628" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 731.632275][T18764] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex [ 731.639337][T18764] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex [ 731.664822][T18746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 731.677335][ T6023] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 731.704997][ T6023] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.723148][ T6023] usb 6-1: Product: syz [ 731.736988][ T6023] usb 6-1: Manufacturer: syz [ 731.752974][ T6023] usb 6-1: SerialNumber: syz [ 731.810332][ T6023] usb 6-1: config 0 descriptor?? [ 731.891614][T18746] EXT4-fs error (device loop2): __ext4_get_inode_loc:4781: comm syz.2.5617: Invalid inode table block 0 in block_group 0 [ 731.950596][T18785] netlink: 10 bytes leftover after parsing attributes in process `syz.6.5635'. [ 732.019780][T18746] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 732.068537][ T6023] uvcvideo 6-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 732.096894][ T6023] uvcvideo 6-1:0.31: Failed to initialize entity for entity 32774 [ 732.136145][ T6023] uvcvideo 6-1:0.31: Failed to register entities (-22). [ 732.244334][ T6424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 732.341204][ T6023] usb 6-1: USB disconnect, device number 126 [ 733.089573][T18816] loop2: detected capacity change from 0 to 1764 [ 733.204112][T18821] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5648'. [ 733.213462][T18820] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5649'. [ 733.224302][ T6023] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 733.310149][T18825] netlink: 'syz.4.5650': attribute type 10 has an invalid length. [ 733.466104][ T6023] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 733.475651][ T6023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.535734][ T6023] usb 2-1: Product: syz [ 733.539969][ T6023] usb 2-1: Manufacturer: syz [ 733.596428][ T6023] usb 2-1: SerialNumber: syz [ 733.629394][ T6023] usb 2-1: config 0 descriptor?? [ 733.854761][ T6023] hso 2-1:0.0: Can't find BULK IN endpoint [ 733.885333][ T6023] usb-storage 2-1:0.0: USB Mass Storage device detected [ 733.927430][ T29] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 734.111849][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 734.131185][ T6023] usb 2-1: USB disconnect, device number 102 [ 734.165223][ T29] usb 7-1: unable to get BOS descriptor or descriptor too short [ 734.194387][T18853] nftables ruleset with unbound chain [ 734.196121][T18852] loop5: detected capacity change from 0 to 256 [ 734.207225][ T29] usb 7-1: config 8 has an invalid interface number: 61 but max is 2 [ 734.242194][ T29] usb 7-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 734.260028][T18852] exfat: Deprecated parameter 'utf8' [ 734.271206][ T29] usb 7-1: config 8 has no interface number 0 [ 734.277746][T18852] exfat: Deprecated parameter 'namecase' [ 734.299289][T18852] exfat: Deprecated parameter 'namecase' [ 734.310002][ T29] usb 7-1: config 8 interface 61 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 734.346609][ T29] usb 7-1: config 8 interface 61 altsetting 8 endpoint 0x5 has invalid wMaxPacketSize 0 [ 734.377134][T18852] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 734.408278][ T29] usb 7-1: config 8 interface 61 has no altsetting 0 [ 734.449764][ T29] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=e9.1f [ 734.485311][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.525797][ T29] usb 7-1: Product: syz [ 734.539516][ T29] usb 7-1: Manufacturer: syz [ 734.559435][ T29] usb 7-1: SerialNumber: syz [ 734.569822][T18863] loop3: detected capacity change from 0 to 256 [ 734.646241][T18863] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 734.718765][T18863] FAT-fs (loop3): Filesystem has been set read-only [ 734.789278][T18868] netlink: 'syz.2.5666': attribute type 2 has an invalid length. [ 734.854766][ T29] bfusb 7-1:8.61: probe with driver bfusb failed with error -5 [ 734.924521][ T29] usb 7-1: USB disconnect, device number 3 [ 735.001542][T18874] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.5668'. [ 735.057303][T18874] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.5668'. [ 735.728465][T18895] loop6: detected capacity change from 0 to 256 [ 735.855907][T18900] loop1: detected capacity change from 0 to 128 [ 736.018923][T18889] loop3: detected capacity change from 0 to 8192 [ 736.838628][ T6529] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 736.932388][T18930] netlink: 'syz.6.5691': attribute type 4 has an invalid length. [ 737.060721][ T6529] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 737.125989][ T6529] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 737.173155][ T6529] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 737.198429][ T6529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.370242][T18921] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 737.436893][ T6529] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 737.469039][T18945] geneve2: entered promiscuous mode [ 737.511552][T18945] geneve2: entered allmulticast mode [ 737.872923][ T6529] usb 3-1: USB disconnect, device number 5 [ 738.696656][T18926] loop3: detected capacity change from 0 to 40427 [ 738.762188][T18926] F2FS-fs (loop3): Invalid log blocks per segment (4278190089) [ 738.803302][T18926] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 738.894391][T18926] F2FS-fs (loop3): invalid crc value [ 738.943050][T18974] ieee802154 phy0 wpan0: encryption failed: -90 [ 739.323207][T18986] overlayfs: missing 'workdir' [ 739.385493][T18926] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 739.395384][T18989] loop2: detected capacity change from 0 to 512 [ 739.460340][T18926] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 739.484428][T18989] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 739.503300][T18926] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 739.574066][T18989] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 739.575619][T18926] F2FS-fs (loop3): Corrupted max_depth of 3: 255 [ 739.583230][T18989] System zones: 0-1, 15-15, 18-18, 34-34 [ 739.583702][T18989] EXT4-fs (loop2): orphan cleanup on readonly fs [ 739.583809][T18989] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 739.615683][T18989] EXT4-fs warning (device loop2): ext4_enable_quotas:7232: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 739.631375][T18989] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 739.671760][T18989] EXT4-fs (loop2): 1 truncate cleaned up [ 739.692492][T18989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 739.702759][T18926] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 739.905096][T18989] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 740.106413][ T6424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 740.130246][T18968] loop5: detected capacity change from 0 to 32768 [ 740.276466][T18968] JBD2: Ignoring recovery information on journal [ 740.284744][T18968] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 740.435666][T18968] JBD2: bad block at offset 32 [ 740.466520][T18968] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 740.598810][T18968] (syz.5.5705,18968,0):ocfs2_check_dir_entry:334 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 740.735642][T18968] (syz.5.5705,18968,0):ocfs2_prepare_dir_for_insert:4335 ERROR: status = -2 [ 740.809396][T18968] (syz.5.5705,18968,0):ocfs2_mknod:302 ERROR: status = -2 [ 740.841485][T18968] (syz.5.5705,18968,0):ocfs2_mknod:506 ERROR: status = -2 [ 740.914480][T18968] (syz.5.5705,18968,0):ocfs2_mkdir:662 ERROR: status = -2 [ 741.044300][ T6529] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 741.259423][ T6529] usb 7-1: Using ep0 maxpacket: 32 [ 741.292761][ T6529] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 741.357614][ T6529] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 741.368480][ T6435] ocfs2: Unmounting device (7,5) on (node local) [ 741.393694][ T6529] usb 7-1: config 0 has no interface number 0 [ 741.453823][ T6529] usb 7-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 741.569977][ T6529] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 741.605319][ T6529] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 741.654074][ T6529] usb 7-1: Product: syz [ 741.658738][ T6529] usb 7-1: Manufacturer: syz [ 741.663719][ T6529] usb 7-1: SerialNumber: syz [ 741.761825][ T6529] usb 7-1: config 0 descriptor?? [ 741.791005][ T6529] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input54 [ 741.813215][T18999] loop4: detected capacity change from 0 to 32768 [ 741.837272][T19031] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.993386][T19036] loop1: detected capacity change from 0 to 512 [ 742.134865][T19036] EXT4-fs error (device loop1): ext4_iget_extra_inode:5024: inode #15: comm syz.1.5727: corrupted in-inode xattr: invalid ea_ino [ 742.242249][T19036] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 742.245576][T19036] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.5727: couldn't read orphan inode 15 (err -117) [ 742.254978][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 742.255019][ C1] EXT4-fs (loop1): initial error at time 2000000678: ext4_iget_extra_inode:5024: inode 15 [ 742.255079][ C1] EXT4-fs (loop1): last error at time 2000000678: ext4_iget_extra_inode:5024: inode 15 [ 742.255212][T15559] usb 7-1: USB disconnect, device number 4 [ 742.438001][T19036] loop1: lost filesystem error report for type 5 error -117 [ 742.440729][T19036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.912797][ T6431] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.011123][T19054] libceph: secret too big 289 [ 743.678563][T19072] kAFS: No cell specified [ 744.012620][T19080] program syz.3.5746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 744.090971][T19083] 9p: Unknown access argument o: -22 [ 744.104371][T19084] netlink: 'syz.4.5749': attribute type 3 has an invalid length. [ 744.165168][T19084] netlink: 'syz.4.5749': attribute type 1 has an invalid length. [ 744.173408][T19084] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5749'. [ 744.716566][T19096] loop5: detected capacity change from 0 to 4096 [ 744.819235][T19096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 745.171312][ T6435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.404239][ T6381] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 745.456541][T19126] loop6: detected capacity change from 0 to 64 [ 745.465614][T19124] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5767'. [ 745.597691][ T6381] usb 2-1: Using ep0 maxpacket: 16 [ 745.625341][ T6381] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 745.663842][ T6381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.682044][ T6381] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.714088][ T6381] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 745.735680][ T6381] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 745.762775][ T6381] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.804007][ T6381] usb 2-1: config 0 descriptor?? [ 745.863340][ T6381] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input55 [ 745.949741][ T5171] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 746.000572][ T5171] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 746.113978][ T5171] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 746.206237][T19115] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 746.227481][T19141] netlink: 'syz.6.5775': attribute type 11 has an invalid length. [ 746.307112][ T5171] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 746.343723][ T6529] usb 2-1: USB disconnect, device number 103 [ 747.135440][T15559] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 747.333157][T15559] usb 3-1: Using ep0 maxpacket: 32 [ 747.350880][T15559] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 747.400652][T15559] usb 3-1: config 0 has no interface number 0 [ 747.423012][T15559] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 747.480195][T15559] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 747.526447][T15559] usb 3-1: config 0 interface 85 has no altsetting 0 [ 747.548990][T19179] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.5794'. [ 747.572919][T15559] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 747.593955][T15559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.615717][T15559] usb 3-1: Product: syz [ 747.634023][T15559] usb 3-1: Manufacturer: syz [ 747.659089][T15559] usb 3-1: SerialNumber: syz [ 747.696792][T15559] usb 3-1: config 0 descriptor?? [ 747.908757][T19188] loop6: detected capacity change from 0 to 164 [ 748.191221][T15559] appletouch 3-1:0.85: Failed to request geyser raw mode [ 748.220961][T15559] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 748.388516][T15559] usb 3-1: USB disconnect, device number 6 [ 748.697713][T19173] loop3: detected capacity change from 0 to 32768 [ 748.737939][T19173] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5791 (19173) [ 748.834734][T19173] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 748.868534][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5808'. [ 748.887995][T19173] BTRFS info (device loop3): using blake2b checksum algorithm [ 748.935024][T19207] netlink: 'syz.4.5808': attribute type 5 has an invalid length. [ 748.994172][T19207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5808'. [ 749.089555][T19207] geneve2: entered promiscuous mode [ 749.157745][T19207] geneve2: entered allmulticast mode [ 749.170815][T19173] BTRFS info (device loop3): enabling ssd optimizations [ 749.209369][T19187] loop1: detected capacity change from 0 to 40427 [ 749.209443][ T13] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 749.234511][T19173] BTRFS info (device loop3): turning on async discard [ 749.274860][T19173] BTRFS info (device loop3): enabling free space tree [ 749.281758][T19173] BTRFS info (device loop3): use lzo compression, level 1 [ 749.289627][ T13] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 749.305605][T19173] BTRFS info (device loop3): max_inline set to 0 [ 749.324763][ T13] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 749.352040][ T13] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 749.504696][T19173] BTRFS info (device loop3 state M): max_inline set to 0 [ 749.810064][ T6432] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 749.816453][T19187] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 749.885718][T19187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 750.004468][T19246] IPv6: NLM_F_CREATE should be specified when creating new route [ 750.292015][T19254] loop6: detected capacity change from 0 to 22 [ 750.315562][T19254] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 750.356817][T19254] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 750.604400][T19256] loop2: detected capacity change from 0 to 4096 [ 750.683132][T19256] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 751.112392][T19269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5830'. [ 751.544578][T19276] delete_channel: no stack [ 752.044164][T19297] loop5: detected capacity change from 0 to 64 [ 752.290478][T19301] loop2: detected capacity change from 0 to 1024 [ 752.332681][T19301] hfsplus: extend alloc file! (8192,512,17039360) [ 752.670879][T15559] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 752.891103][T15559] usb 5-1: Using ep0 maxpacket: 8 [ 752.911374][T15559] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 752.930910][T15559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.959448][T15559] usb 5-1: Product: syz [ 752.980943][T15559] usb 5-1: Manufacturer: syz [ 752.998902][T15559] usb 5-1: SerialNumber: syz [ 753.097757][T15559] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 753.439007][T19341] netlink: 'syz.6.5863': attribute type 1 has an invalid length. [ 753.550142][T15559] gspca_m5602: Failed to find a sensor [ 753.588165][T15559] ALi m5602 5-1:8.0: ALi m5602 webcam failed [ 753.623331][T15559] usb 5-1: USB disconnect, device number 118 [ 753.900122][ T6626] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 754.113500][ T6626] usb 2-1: Using ep0 maxpacket: 8 [ 754.140780][T19358] netlink: 'syz.3.5871': attribute type 4 has an invalid length. [ 754.142524][ T6626] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 754.236206][ T6626] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 754.270196][ T6626] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.319456][ T6626] usb 2-1: Product: syz [ 754.323703][ T6626] usb 2-1: Manufacturer: syz [ 754.337997][T15559] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 754.359490][ T6626] usb 2-1: SerialNumber: syz [ 754.399679][ T6626] usb 2-1: config 0 descriptor?? [ 754.421706][ T6626] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 754.455443][ T6626] usb 2-1: selecting invalid altsetting 1 [ 754.496394][T19334] loop2: detected capacity change from 0 to 32768 [ 754.559584][T19334] JBD2: Ignoring recovery information on journal [ 754.587733][T15559] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 754.630296][T19334] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 754.640035][T19334] JBD2: bad block at offset 32 [ 754.655261][T19369] loop5: detected capacity change from 0 to 512 [ 754.668561][T15559] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 754.691384][ T6626] gspca_stk014: init reg: 0x00 [ 754.692130][T19334] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 754.707698][ T6626] stk014 2-1:0.0: probe with driver stk014 failed with error -5 [ 754.727648][T15559] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 754.757886][T19369] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 754.809060][T15559] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.836586][T19369] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.5874: invalid indirect mapped block 2683928664 (level 1) [ 754.879762][T19334] (syz.2.5860,19334,0):ocfs2_check_dir_entry:334 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=3344, name_len=0 [ 754.907023][T19355] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 754.934414][T19369] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 754.936232][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 754.937667][ T6626] usb 2-1: USB disconnect, device number 104 [ 754.945509][ C1] EXT4-fs (loop5): initial error at time 2000000690: ext4_free_branches:1020: inode 13 [ 754.967569][ C1] EXT4-fs (loop5): last error at time 2000000690: ext4_free_branches:1020: inode 13 [ 754.975227][T15559] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 754.996474][T19334] (syz.2.5860,19334,1):ocfs2_prepare_dir_for_insert:4335 ERROR: status = -2 [ 755.067141][T19369] EXT4-fs (loop5): Remounting filesystem read-only [ 755.095806][T19334] (syz.2.5860,19334,0):ocfs2_mknod:302 ERROR: status = -2 [ 755.136839][T19369] EXT4-fs (loop5): 1 truncate cleaned up [ 755.173244][T19334] (syz.2.5860,19334,0):ocfs2_mknod:506 ERROR: status = -2 [ 755.192197][T19369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 755.243221][T19334] (syz.2.5860,19334,0):ocfs2_mkdir:662 ERROR: status = -2 [ 755.537797][ T6435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.578029][ T29] usb 7-1: USB disconnect, device number 5 [ 755.640748][ T6424] ocfs2: Unmounting device (7,2) on (node local) [ 755.737825][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5882'. [ 756.107033][T19395] loop1: detected capacity change from 0 to 4096 [ 756.125071][ T29] usb 6-1: new full-speed USB device number 127 using dummy_hcd [ 756.329829][ T29] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 756.364567][ T29] usb 6-1: config 0 has no interface number 0 [ 756.414860][T19403] binder: 19402:19403 ioctl c018620c 2000000002c0 returned -1 [ 756.438951][ T29] usb 6-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=2f.1f [ 756.472206][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.515080][ T29] usb 6-1: Product: syz [ 756.565264][ T29] usb 6-1: Manufacturer: syz [ 756.569920][ T29] usb 6-1: SerialNumber: syz [ 756.605092][ T29] usb 6-1: config 0 descriptor?? [ 756.838454][ T29] usb 6-1: USB disconnect, device number 127 [ 757.813550][T19433] loop3: detected capacity change from 0 to 8192 [ 757.941464][T19433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.021527][T19433] FAT-fs (loop3): Filesystem has been set read-only [ 758.055405][T19407] loop2: detected capacity change from 0 to 32768 [ 758.067280][T19433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.113838][T19407] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5879 (19407) [ 758.131432][T19433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.209527][T19433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.232500][T19407] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 758.289578][T19407] BTRFS info (device loop2): using sha256 checksum algorithm [ 758.304690][T19433] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 758.400169][ T30] audit: type=1800 audit(2000000694.065:44): pid=19433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5897" name="file2" dev="loop3" ino=1048729 res=0 errno=0 [ 758.798981][T19407] BTRFS info (device loop2): enabling ssd optimizations [ 758.823784][T19459] loop4: detected capacity change from 0 to 4096 [ 758.830373][T19407] BTRFS info (device loop2): turning on async discard [ 758.862803][T19407] BTRFS info (device loop2): enabling free space tree [ 758.880111][T19459] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 758.889631][T19478] loop1: detected capacity change from 0 to 4096 [ 758.894338][T19467] loop5: detected capacity change from 0 to 4096 [ 758.968166][T19459] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 758.990322][T19467] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 759.057641][T19478] ntfs3(loop1): ino=1a, mi_enum_attr [ 759.103233][T19478] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 759.145095][T19467] ntfs3(loop5): ino=1a, mi_enum_attr [ 759.159642][ T6424] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 759.172216][T19467] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 759.197744][T19467] ntfs3(loop5): ino=1a, mi_enum_attr [ 759.264242][T19467] ntfs3(loop5): Failed to initialize $Extend/$Reparse. [ 759.470728][T19467] ntfs3(loop5): ino=1b, mi_enum_attr [ 759.501780][T19467] ntfs3(loop5): ino=1b, mi_enum_attr [ 759.506923][ T30] audit: type=1326 audit(2000000695.085:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 759.716336][ T30] audit: type=1326 audit(2000000695.132:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 759.755562][T15559] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 759.877359][ T30] audit: type=1326 audit(2000000695.132:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 760.028397][ T30] audit: type=1326 audit(2000000695.132:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 760.055295][T15559] usb 7-1: Using ep0 maxpacket: 8 [ 760.136859][T15559] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 256, setting to 64 [ 760.184121][T15559] usb 7-1: config 0 interface 0 has no altsetting 0 [ 760.193825][ T30] audit: type=1326 audit(2000000695.132:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 760.266687][T15559] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 760.304418][T15559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.342727][ T30] audit: type=1326 audit(2000000695.132:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 760.362754][T15559] usb 7-1: Product: syz [ 760.397520][T15559] usb 7-1: Manufacturer: syz [ 760.402181][T15559] usb 7-1: SerialNumber: syz [ 760.478545][T15559] usb 7-1: config 0 descriptor?? [ 760.501734][ T30] audit: type=1326 audit(2000000695.132:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 760.520496][T15559] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 760.633979][ T30] audit: type=1326 audit(2000000695.132:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 760.766038][T15559] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 760.790564][ T30] audit: type=1326 audit(2000000695.132:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19491 comm="syz.3.5915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 760.826972][T15559] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 761.066810][T19529] loop5: detected capacity change from 0 to 512 [ 761.094205][ T29] usb 7-1: USB disconnect, device number 6 [ 761.236289][T19531] netlink: 'syz.2.5929': attribute type 1 has an invalid length. [ 761.250904][T19529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.341576][T19531] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5929'. [ 761.358704][T19529] ext4 filesystem being mounted at /920/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 761.540705][T19512] loop4: detected capacity change from 0 to 40427 [ 761.549581][T19512] F2FS-fs (loop4): Invalid log blocks per segment (4278190089) [ 761.584585][T19512] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 761.648381][T19512] F2FS-fs (loop4): invalid crc value [ 761.755123][ T6435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.143853][T19512] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 762.208496][T19512] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 762.256185][T19512] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 762.383148][T19560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5938'. [ 762.435818][T19564] lo: entered promiscuous mode [ 762.437984][T19512] F2FS-fs (loop4): Corrupted max_depth of 3: 255 [ 762.477288][T19512] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 762.508294][T19564] tunl0: entered promiscuous mode [ 762.551732][T19564] gre0: entered promiscuous mode [ 762.585926][T19568] loop5: detected capacity change from 0 to 256 [ 762.620838][T19564] gretap0: entered promiscuous mode [ 762.693319][T19564] erspan0: entered promiscuous mode [ 762.725041][T19564] ip_vti0: entered promiscuous mode [ 762.752814][T15559] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 762.961524][T15559] usb 2-1: Using ep0 maxpacket: 32 [ 762.974941][T15559] usb 2-1: unable to get BOS descriptor or descriptor too short [ 763.001309][T15559] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 763.036243][T15559] usb 2-1: config 7 has no interface number 0 [ 763.068300][T15559] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 763.092856][T15559] usb 2-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 0 [ 763.126244][T15559] usb 2-1: config 7 interface 187 has no altsetting 0 [ 763.196903][T15559] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 763.228650][T15559] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.236979][T15559] usb 2-1: Product: syz [ 763.266853][T15559] usb 2-1: Manufacturer: syz [ 763.275547][T15559] usb 2-1: SerialNumber: syz [ 763.588152][T15559] usb 2-1: Unknown endpoint type found, address 0x07 [ 763.641120][T15559] usb 2-1: Not enough endpoints found in device, aborting! [ 763.884736][T15559] usb 2-1: USB disconnect, device number 105 [ 763.982257][T19603] loop2: detected capacity change from 0 to 128 [ 764.750038][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5972'. [ 765.078861][ T30] audit: type=1326 audit(2000000700.316:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19639 comm="syz.4.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259f99c799 code=0x7ffc0000 [ 765.183556][ T30] audit: type=1326 audit(2000000700.354:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19639 comm="syz.4.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f259f99c799 code=0x7ffc0000 [ 765.262786][ T30] audit: type=1326 audit(2000000700.354:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19639 comm="syz.4.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259f99c799 code=0x7ffc0000 [ 765.376452][ T30] audit: type=1326 audit(2000000700.354:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19639 comm="syz.4.5979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259f99c799 code=0x7ffc0000 [ 765.804435][T19667] loop1: detected capacity change from 0 to 256 [ 765.826404][T15559] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 765.915003][T19667] FAT-fs (loop1): Directory bread(block 64) failed [ 765.975633][T19667] FAT-fs (loop1): Directory bread(block 65) failed [ 765.983459][T19667] FAT-fs (loop1): Directory bread(block 66) failed [ 766.023835][T19667] FAT-fs (loop1): Directory bread(block 67) failed [ 766.036162][T19667] FAT-fs (loop1): Directory bread(block 68) failed [ 766.055000][T15559] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 766.065733][T15559] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 766.083294][T19667] FAT-fs (loop1): Directory bread(block 69) failed [ 766.109656][T15559] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 766.111703][T19667] FAT-fs (loop1): Directory bread(block 70) failed [ 766.151257][T15559] usb 5-1: config 1 has no interface number 1 [ 766.178029][T15559] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 766.191216][T19667] FAT-fs (loop1): Directory bread(block 71) failed [ 766.197879][T19667] FAT-fs (loop1): Directory bread(block 72) failed [ 766.238823][T19667] FAT-fs (loop1): Directory bread(block 73) failed [ 766.256978][T15559] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 766.312619][T15559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.332603][T15559] usb 5-1: Product: syz [ 766.359634][T15559] usb 5-1: Manufacturer: syz [ 766.364291][T15559] usb 5-1: SerialNumber: syz [ 766.674102][T15559] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 766.682211][T15559] usb 5-1: MIDIStreaming interface descriptor not found [ 766.990088][T15559] usb 5-1: USB disconnect, device number 119 [ 767.049815][T19661] loop5: detected capacity change from 0 to 32768 [ 767.096404][T19661] (syz.5.5987,19661,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 767.153830][T19661] (syz.5.5987,19661,0):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 767.235114][T19661] JBD2: Ignoring recovery information on journal [ 767.312350][ T6369] udevd[6369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.332316][T19702] loop3: detected capacity change from 0 to 1024 [ 767.560559][T19661] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 767.686806][ T129] hfsplus: b-tree write err: -5, ino 25 [ 767.692695][ T129] hfsplus: b-tree write err: -5, ino 4 [ 767.727451][ T129] hfsplus: b-tree write err: -5, ino 2 [ 768.294154][ T6435] ocfs2: Unmounting device (7,5) on (node local) [ 768.933453][T19741] IPVS: length: 228 != 24 [ 769.536816][T19713] loop6: detected capacity change from 0 to 32768 [ 770.025028][T19759] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 770.160343][T19733] loop3: detected capacity change from 0 to 32768 [ 770.240179][T19737] loop2: detected capacity change from 0 to 32768 [ 770.248970][T19737] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6022 (19737) [ 770.255363][T19733] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 770.371620][T19733] XFS (loop3): Ending clean mount [ 770.400480][T19778] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 770.408019][T19737] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 770.470108][T19737] BTRFS info (device loop2): using sha256 checksum algorithm [ 770.812434][ T6432] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 770.856168][T19737] BTRFS info (device loop2): enabling ssd optimizations [ 770.889641][T19762] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 770.893828][T19737] BTRFS info (device loop2): turning on async discard [ 770.964492][T19737] BTRFS info (device loop2): enabling free space tree [ 771.315392][ T6424] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 771.451809][T19809] loop4: detected capacity change from 0 to 64 [ 771.968119][T19813] loop6: detected capacity change from 0 to 4096 [ 772.018000][T19820] loop5: detected capacity change from 0 to 128 [ 772.040024][T19813] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 772.085802][T19782] loop1: detected capacity change from 0 to 32768 [ 772.098055][T19820] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 772.151069][T19782] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6042 (19782) [ 772.221858][T19813] ntfs3(loop6): ino=19, mi_enum_attr [ 772.248672][T19813] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 772.334426][T19782] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 772.404406][T19782] BTRFS info (device loop1): using blake2b checksum algorithm [ 772.639288][T19843] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 772.693988][T19782] BTRFS info (device loop1): enabling ssd optimizations [ 772.732914][T19782] BTRFS info (device loop1): turning on async discard [ 772.784664][T19782] BTRFS info (device loop1): enabling free space tree [ 772.791586][T19782] BTRFS info (device loop1): use lzo compression, level 1 [ 772.878278][T19782] BTRFS info (device loop1): max_inline set to 0 [ 773.121058][T19782] BTRFS info (device loop1 state M): max_inline set to 0 [ 773.192423][T19858] loop4: detected capacity change from 0 to 2048 [ 773.310618][T19858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 773.344162][ T6431] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 774.003294][ T30] audit: type=1326 audit(2000000708.654:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.3.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 774.068937][T19876] loop1: detected capacity change from 0 to 4096 [ 774.125758][ T30] audit: type=1326 audit(2000000708.701:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.3.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 774.230753][T19887] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 774.269653][ T30] audit: type=1326 audit(2000000708.701:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.3.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 774.344253][T19876] syz.1.6069: attempt to access beyond end of device [ 774.344253][T19876] loop1: rw=8388608, sector=26388279066816, nr_sectors = 8 limit=4096 [ 774.394992][ T30] audit: type=1326 audit(2000000708.701:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19879 comm="syz.3.6075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc785b9c799 code=0x7ffc0000 [ 774.438501][T19876] NILFS (loop1): I/O error reading meta-data file (ino=6, block-offset=1) [ 774.688369][T19895] netlink: 'syz.3.6081': attribute type 10 has an invalid length. [ 774.888095][T19895] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 775.147185][T19907] loop5: detected capacity change from 0 to 128 [ 775.234676][T19907] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 775.338726][T19907] System zones: 1-3, 19-19, 35-36 [ 775.377004][T19907] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 775.377994][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6089'. [ 775.448107][T19907] ext4 filesystem being mounted at /947/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 775.681721][ T6435] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 775.904502][T15559] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 776.054741][T19899] loop2: detected capacity change from 0 to 32768 [ 776.090034][T19899] jfs_strtoUCS: char2uni returned -22. [ 776.097995][T15559] usb 7-1: Using ep0 maxpacket: 8 [ 776.106089][T15559] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 776.124289][T19899] charset = cp864, char = 0x9f [ 776.152206][T15559] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 776.211161][T15559] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 776.245907][T15559] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.299012][T15559] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 776.340557][T15559] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.350188][T15559] usb 7-1: Product: syz [ 776.393935][T15559] usb 7-1: Manufacturer: syz [ 776.398841][T15559] usb 7-1: SerialNumber: syz [ 776.445087][T19918] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 776.463913][T15559] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 776.486703][T19939] netlink: 'syz.1.6103': attribute type 10 has an invalid length. [ 776.512466][T15559] usbtest 7-1:1.0: Linux user mode ISO test driver [ 776.536373][T15559] usbtest 7-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 776.675255][T19939] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 776.824102][T19947] loop2: detected capacity change from 0 to 164 [ 776.835165][ T6528] usb 7-1: USB disconnect, device number 7 [ 776.908272][T19947] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 777.117749][T19951] loop5: detected capacity change from 0 to 1024 [ 777.398942][T14113] hfsplus: b-tree write err: -5, ino 25 [ 777.417710][T19960] netlink: 'syz.1.6113': attribute type 10 has an invalid length. [ 777.427774][T14113] hfsplus: b-tree write err: -5, ino 4 [ 777.464162][T14113] hfsplus: b-tree write err: -5, ino 2 [ 777.593230][T19933] loop4: detected capacity change from 0 to 32768 [ 777.654843][T19933] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 25f62640-1b05-4a20-891f-6866c46c4ccb [ 777.734414][T19968] ksmbd: Unknown IPC event: 1, ignore. [ 777.749735][T19933] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6099 (19933) [ 777.839891][T19933] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 777.900571][T19933] BTRFS info (device loop4): using crc32c checksum algorithm [ 778.155322][T19933] BTRFS info (device loop4): setting nodatasum [ 778.203969][T19933] BTRFS info (device loop4): setting nodatacow [ 778.238430][T19933] BTRFS info (device loop4): enabling ssd optimizations [ 778.295843][T19933] BTRFS info (device loop4): turning on sync discard [ 778.303202][T19933] BTRFS info (device loop4): enabling free space tree [ 778.379747][T19933] BTRFS info (device loop4): enabling auto defrag [ 778.437975][T19933] BTRFS info (device loop4): max_inline set to 0 [ 778.549119][T19933] BTRFS info (device loop4 state M): max_inline set to 0 [ 778.659333][T19999] loop2: detected capacity change from 0 to 4096 [ 778.740867][T19999] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 778.820616][ T6427] BTRFS info (device loop4): last unmount of filesystem 25f62640-1b05-4a20-891f-6866c46c4ccb [ 778.854782][T19999] ntfs3(loop2): ino=1a, mi_enum_attr [ 778.860984][T19999] ntfs3(loop2): ino=1a, mi_enum_attr [ 778.893041][T19999] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 780.047481][T20035] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 780.133862][T20035] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 780.259849][T20007] loop5: detected capacity change from 0 to 32768 [ 780.273919][T20007] xfs: Deprecated parameter 'ikeep' [ 780.297841][T20007] XFS: ikeep mount option is deprecated. [ 780.405248][T20007] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 780.535597][T20007] XFS (loop5): Ending clean mount [ 780.572991][ T6545] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 780.618365][T20007] XFS (loop5): Quotacheck needed: Please wait. [ 780.744468][ T6545] usb 7-1: Using ep0 maxpacket: 16 [ 780.766070][ T6545] usb 7-1: config 0 has an invalid interface number: 216 but max is 0 [ 780.774797][ T6545] usb 7-1: config 0 has no interface number 0 [ 780.789137][ T30] audit: type=1326 audit(2000000715.008:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20064 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259f99c799 code=0x7ffc0000 [ 780.834909][T20007] XFS (loop5): Quotacheck: Done. [ 780.842029][ T6545] usb 7-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 780.863391][T20067] loop2: detected capacity change from 0 to 512 [ 780.873999][ T30] audit: type=1326 audit(2000000715.092:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20064 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f259f99c799 code=0x7ffc0000 [ 780.892521][ T6545] usb 7-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 780.898397][ T30] audit: type=1326 audit(2000000715.121:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20064 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259f99c799 code=0x7ffc0000 [ 780.932030][ T30] audit: type=1326 audit(2000000715.121:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20064 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f259f99c799 code=0x7ffc0000 [ 780.954641][T20067] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 780.965693][T20067] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.6153: bad orphan inode 131083 [ 780.978859][ T6545] usb 7-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 781.008043][T20067] loop2: lost filesystem error report for type 5 error -117 [ 781.011725][ T6545] usb 7-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 781.030772][T20067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 781.043556][ T6545] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.063781][ T6545] usb 7-1: Product: syz [ 781.068294][ T6545] usb 7-1: Manufacturer: syz [ 781.073018][ T6545] usb 7-1: SerialNumber: syz [ 781.077038][T20067] EXT4-fs error (device loop2): ext4_find_dest_de:2049: inode #2: block 13: comm syz.2.6153: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 781.115857][ T6545] usb 7-1: config 0 descriptor?? [ 781.128532][T20043] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 781.147380][T20043] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 781.197208][ T6545] usb-storage 7-1:0.216: USB Mass Storage device detected [ 781.232011][ T6435] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 781.287704][ T6545] scsi host1: usb-storage 7-1:0.216 [ 781.393768][T20078] netlink: 'syz.4.6155': attribute type 10 has an invalid length. [ 781.471511][ T6424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 781.500612][ T6528] usb 7-1: USB disconnect, device number 8 [ 781.574901][T20078] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 782.106782][T20095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 782.120111][T20098] usb usb9: usbfs: process 20098 (syz.1.6166) did not claim interface 0 before use [ 782.311477][T20101] loop2: detected capacity change from 0 to 2048 [ 782.349134][T20101] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 782.382171][T20105] loop6: detected capacity change from 0 to 1024 [ 782.409782][T20105] EXT4-fs: Ignoring removed oldalloc option [ 782.417817][T20109] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 782.494156][T20105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 782.500446][T20114] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 782.568864][T20101] NILFS (loop2): the device already has a read/write mount. [ 782.665843][T20105] EXT4-fs warning (device loop6): ext4_empty_dir:3097: inode #11: comm syz.6.6170: directory missing '..' [ 782.676372][T20117] lo: entered promiscuous mode [ 782.698812][ T30] audit: type=1326 audit(2000000716.777:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.1.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 782.762230][T20117] tunl0: entered promiscuous mode [ 782.800192][ T30] audit: type=1326 audit(2000000716.777:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.1.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 782.817164][T20117] gre0: entered promiscuous mode [ 782.860945][T20122] netlink: 388 bytes leftover after parsing attributes in process `syz.4.6177'. [ 782.909862][ T30] audit: type=1326 audit(2000000716.777:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.1.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 782.993137][T18122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.013317][ T30] audit: type=1326 audit(2000000716.777:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.1.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 783.016145][T20124] loop1: detected capacity change from 0 to 512 [ 783.060893][T20117] gretap0: entered promiscuous mode [ 783.097148][ T30] audit: type=1326 audit(2000000716.777:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20116 comm="syz.1.6175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 783.128907][T20117] erspan0: entered promiscuous mode [ 783.149621][T20117] ip_vti0: entered promiscuous mode [ 783.155748][T20124] FAT-fs (loop1): Directory bread(block 199916) failed [ 783.177841][T20126] overlayfs: cannot append lower layer [ 783.243046][T20124] FAT-fs (loop1): Directory bread(block 199917) failed [ 783.283612][T20124] FAT-fs (loop1): Directory bread(block 199918) failed [ 783.346882][T20124] FAT-fs (loop1): Directory bread(block 199919) failed [ 783.384929][T20124] FAT-fs (loop1): Directory bread(block 199920) failed [ 783.424690][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6180'. [ 783.449704][T20124] FAT-fs (loop1): Directory bread(block 199921) failed [ 783.456994][T20124] FAT-fs (loop1): Directory bread(block 199922) failed [ 783.528566][T20124] FAT-fs (loop1): Directory bread(block 199923) failed [ 783.561638][T20124] FAT-fs (loop1): Directory bread(block 199916) failed [ 783.578705][T20135] loop2: detected capacity change from 0 to 512 [ 783.600879][T20124] FAT-fs (loop1): Directory bread(block 199917) failed [ 783.610825][T20137] IPv6: NLM_F_CREATE should be specified when creating new route [ 783.716467][T20135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.746099][T20135] ext4 filesystem being mounted at /950/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 783.910204][T20148] netlink: 124 bytes leftover after parsing attributes in process `syz.4.6188'. [ 783.911232][T20135] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.6183: directory missing '.' [ 784.173507][ T6424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.334115][ T29] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 784.493786][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 784.528882][ T29] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 784.566071][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 784.600643][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 784.672563][ T29] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 784.707500][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.715549][ T29] usb 2-1: Product: syz [ 784.750287][ T29] usb 2-1: Manufacturer: syz [ 784.755023][ T29] usb 2-1: SerialNumber: syz [ 784.819759][ T29] usb 2-1: config 0 descriptor?? [ 784.836733][T20152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 784.869154][ T29] hub 2-1:0.0: bad descriptor, ignoring hub [ 784.891683][ T29] hub 2-1:0.0: probe with driver hub failed with error -5 [ 784.904997][ T29] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input59 [ 785.028536][ T6545] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 785.148608][ T6626] usb 2-1: USB disconnect, device number 106 [ 785.148688][ C1] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 785.262002][ T6545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 785.279552][T15559] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 785.296227][ T6545] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 785.325422][ T6545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 785.379453][ T6545] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 785.413384][ T6545] usb 4-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 785.432757][ T6545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.456027][ T6545] usb 4-1: Product: syz [ 785.460323][ T6545] usb 4-1: Manufacturer: syz [ 785.470754][ T6545] usb 4-1: SerialNumber: syz [ 785.506525][T15559] usb 5-1: unable to get BOS descriptor or descriptor too short [ 785.515666][ T6545] usb 4-1: config 0 descriptor?? [ 785.531638][T15559] usb 5-1: not running at top speed; connect to a high speed hub [ 785.545644][ T6545] ums-isd200 4-1:0.0: USB Mass Storage device detected [ 785.547957][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.554705][T15559] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 785.559133][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 785.578008][T15559] usb 5-1: config 1 interface 0 has no altsetting 0 [ 785.604321][T15559] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 785.613848][T15559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.623244][T15559] usb 5-1: Product: syz [ 785.628898][T15559] usb 5-1: Manufacturer: syz [ 785.633567][T15559] usb 5-1: SerialNumber: syz [ 785.764098][T20201] loop5: detected capacity change from 0 to 2048 [ 785.773575][T20201] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=27485, location=27485 [ 785.794380][ T6545] scsi host1: usb-storage 4-1:0.0 [ 785.805676][T20201] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 785.868611][ T6545] usb 4-1: USB disconnect, device number 6 [ 785.971246][T15559] usb 5-1: USB disconnect, device number 120 [ 786.674423][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6224'. [ 786.997836][T20232] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6229'. [ 787.027029][T20232] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 787.158657][T20234] loop4: detected capacity change from 0 to 2048 [ 787.174325][T20236] lo: entered promiscuous mode [ 787.199883][T20236] tunl0: entered promiscuous mode [ 787.279630][T20236] gre0: entered promiscuous mode [ 787.288695][T20234] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.364556][T20236] gretap0: entered promiscuous mode [ 787.399305][ T30] audit: type=1800 audit(2000000721.194:71): pid=20234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6230" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 787.428817][T20236] erspan0: entered promiscuous mode [ 787.431813][T20242] loop1: detected capacity change from 0 to 164 [ 787.463402][T20236] ip_vti0: entered promiscuous mode [ 787.530392][T20242] rock: directory entry would overflow storage [ 787.536731][T20242] rock: sig=0x4f50, size=4, remaining=3 [ 787.561675][T20242] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 787.594232][T20244] netlink: 'syz.3.6235': attribute type 23 has an invalid length. [ 787.920678][T20250] loop5: detected capacity change from 0 to 128 [ 788.169930][ T29] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 788.286451][T20268] netlink: 'syz.1.6247': attribute type 11 has an invalid length. [ 788.374837][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 788.436974][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 788.447247][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 788.522546][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 788.525796][T20272] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6249'. [ 788.571394][ T29] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 788.574965][T20272] unsupported nlmsg_type 40 [ 788.597185][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.617416][ T29] usb 7-1: Product: syz [ 788.631271][ T29] usb 7-1: Manufacturer: syz [ 788.635919][ T29] usb 7-1: SerialNumber: syz [ 788.673362][ T29] usb 7-1: config 0 descriptor?? [ 788.697787][ T29] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 788.747790][T20280] lo: entered promiscuous mode [ 788.800305][T20280] tunl0: entered promiscuous mode [ 788.923486][T20280] gre0: entered promiscuous mode [ 788.939753][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 788.960130][ T29] scsi host1: usb-storage 7-1:0.0 [ 788.995303][ T29] usb 7-1: USB disconnect, device number 9 [ 789.042559][T20280] gretap0: entered promiscuous mode [ 789.121381][T20280] erspan0: entered promiscuous mode [ 789.168963][T20280] ip_vti0: entered promiscuous mode [ 789.380008][T20304] loop3: detected capacity change from 0 to 16 [ 789.446297][T20304] erofs (device loop3): mounted with root inode @ nid 36. [ 789.586855][T20309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6262'. [ 789.644906][T20309] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6262'. [ 789.695093][T20309] netlink: 'syz.4.6262': attribute type 3 has an invalid length. [ 789.747361][T20309] netlink: 'syz.4.6262': attribute type 2 has an invalid length. [ 789.789836][T20309] netlink: 31 bytes leftover after parsing attributes in process `syz.4.6262'. [ 790.039091][T20321] loop3: detected capacity change from 0 to 1024 [ 790.067023][T20323] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 790.087387][T20321] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 790.118030][T20321] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 790.197231][T20321] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #32: comm syz.3.6267: iget: special inode unallocated [ 790.239889][T20321] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 790.240909][T20321] EXT4-fs (loop3): Remounting filesystem read-only [ 790.250349][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 790.250389][ C1] EXT4-fs (loop3): initial error at time 2000000723: ext4_get_journal_inode:5863: inode 32 [ 790.250451][ C1] EXT4-fs (loop3): last error at time 2000000723: ext4_get_journal_inode:5863: inode 32 [ 790.366962][T20321] EXT4-fs (loop3): no journal found [ 790.377685][T20321] EXT4-fs (loop3): can't get journal size [ 790.393029][T20321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 790.579283][ T6432] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.344950][T20363] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 791.437068][T20368] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6291'. [ 791.667985][ T5136] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 791.678690][T20375] loop2: detected capacity change from 0 to 1024 [ 791.770989][T20375] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 791.781135][T20375] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 791.851107][T20375] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.6292: iget: special inode unallocated [ 791.902580][T20375] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 791.906940][T20375] EXT4-fs (loop2): Remounting filesystem read-only [ 791.916303][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 791.916344][ C1] EXT4-fs (loop2): initial error at time 2000000725: ext4_get_journal_inode:5863: inode 32 [ 791.916402][ C1] EXT4-fs (loop2): last error at time 2000000725: ext4_get_journal_inode:5863: inode 32 [ 792.016968][T20375] EXT4-fs (loop2): no journal found [ 792.022226][T20375] EXT4-fs (loop2): can't get journal size [ 792.095899][T20375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 792.297402][ T6424] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.540879][T20401] lo: entered promiscuous mode [ 792.579087][T20401] tunl0: entered promiscuous mode [ 792.605673][T20401] gre0: entered promiscuous mode [ 792.664774][T20401] gretap0: entered promiscuous mode [ 792.699341][T20401] erspan0: entered promiscuous mode [ 792.708955][T20408] loop1: detected capacity change from 0 to 2048 [ 792.733072][T20401] ip_vti0: entered promiscuous mode [ 792.744551][T20408] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 792.840147][T20412] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 792.912698][T20414] loop6: detected capacity change from 0 to 164 [ 792.961603][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 792.989555][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.097293][T20408] Remounting filesystem read-only [ 793.122094][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.136446][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.147155][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.152583][T20420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6316'. [ 793.161122][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.211350][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.269018][T20399] orangefs_mount: mount request failed with -4 [ 793.278710][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.317419][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.375380][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.440169][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.500273][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.573198][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.623211][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.698573][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.723900][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.747170][T20432] ALSA: mixer_oss: invalid OSS volume '' [ 793.771530][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.818055][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.886776][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 793.922534][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 793.995397][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 794.041967][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.088038][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 794.100638][T20444] netlink: 'syz.3.6327': attribute type 4 has an invalid length. [ 794.114113][T20447] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6329'. [ 794.130548][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.141106][T20444] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6327'. [ 794.168765][T20441] loop4: detected capacity change from 0 to 4096 [ 794.196703][T20441] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 794.210440][T20449] vlan0: entered promiscuous mode [ 794.211425][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 794.250365][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.306962][T20408] NILFS (loop1): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 794.357711][T20408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 794.413360][ T30] audit: type=1800 audit(2000000727.763:72): pid=20408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6309" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 794.488697][T20451] QAT: failed to copy from user cfg_data. [ 794.840071][T20459] sctp: [Deprecated]: syz.1.6335 (pid 20459) Use of int in maxseg socket option. [ 794.840071][T20459] Use struct sctp_assoc_value instead [ 795.216094][ T30] audit: type=1326 audit(2000000728.512:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 795.281949][ T30] audit: type=1326 audit(2000000728.512:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 795.327572][T20477] ip6t_rpfilter: unknown options [ 795.338542][ T30] audit: type=1326 audit(2000000728.540:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 795.440257][ T30] audit: type=1326 audit(2000000728.540:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 795.554428][ T30] audit: type=1326 audit(2000000728.540:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20472 comm="syz.2.6342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 795.614788][T20484] loop2: detected capacity change from 0 to 1024 [ 795.979274][T20493] loop1: detected capacity change from 0 to 1024 [ 796.094638][T20493] hfsplus: cannot replace xattr [ 796.281277][ T13] hfsplus: b-tree write err: -5, ino 25 [ 796.287243][ T13] hfsplus: b-tree write err: -5, ino 4 [ 796.318756][ T13] hfsplus: b-tree write err: -5, ino 2 [ 796.386865][T20501] loop2: detected capacity change from 0 to 4096 [ 796.564816][T20501] ntfs3(loop2): new label is too long [ 796.740077][ T6545] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 796.944111][ T6545] usb 7-1: config 4 has an invalid interface number: 28 but max is 0 [ 796.979709][ T6545] usb 7-1: config 4 has no interface number 0 [ 797.060660][ T6545] usb 7-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 797.092739][ T6545] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.100840][ T6545] usb 7-1: Product: syz [ 797.145993][ T6545] usb 7-1: Manufacturer: syz [ 797.171746][ T6545] usb 7-1: SerialNumber: syz [ 797.264134][ T6545] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:4.28/input/input61 [ 797.370924][T20535] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 797.490827][ T5171] bcm5974 7-1:4.28: could not read from device [ 797.582930][ T6545] bcm5974 7-1:4.28: could not read from device [ 797.676186][ T5171] bcm5974 7-1:4.28: could not read from device [ 797.793643][ T6545] input: failed to attach handler mousedev to device input61, error: -5 [ 797.861999][ T6545] usb 7-1: USB disconnect, device number 10 [ 797.867797][ T5171] bcm5974 7-1:4.28: could not read from device [ 797.984501][T20552] usb usb1: usbfs: process 20552 (syz.3.6381) did not claim interface 0 before use [ 798.081554][ T6356] udevd[6356]: Error opening device "/dev/input/event4": No such file or directory [ 798.112315][ T6356] udevd[6356]: Unable to EVIOCGABS device "/dev/input/event4" [ 798.151926][ T6356] udevd[6356]: Unable to EVIOCGABS device "/dev/input/event4" [ 798.181332][ T6356] udevd[6356]: Unable to EVIOCGABS device "/dev/input/event4" [ 798.211200][ T6356] udevd[6356]: Unable to EVIOCGABS device "/dev/input/event4" [ 798.452756][T20560] loop2: detected capacity change from 0 to 4096 [ 799.057051][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6395'. [ 799.813707][T20608] ip6t_srh: unknown srh match flags 5F28 [ 800.039287][T20613] loop1: detected capacity change from 0 to 4096 [ 800.488442][T20632] loop2: detected capacity change from 0 to 256 [ 800.577528][T20632] exfat: Deprecated parameter 'namecase' [ 800.922414][T20632] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 801.032670][T20648] netlink: 'syz.4.6428': attribute type 4 has an invalid length. [ 801.412876][T20658] loop4: detected capacity change from 0 to 16 [ 801.449415][T20658] erofs (device loop4): DAX unsupported by block device. Turning off DAX. [ 801.495621][T20658] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 801.537637][T20658] erofs (device loop4): mounted with root inode @ nid 36. [ 801.580851][ T29] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 801.621142][T20658] erofs (device loop4): read error -117 @ 0 of nid 36 [ 801.786581][ T29] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 801.807518][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24933, setting to 1024 [ 801.844735][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 801.892438][ T29] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 801.920208][ T29] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 801.954482][ T29] usb 7-1: Manufacturer: syz [ 802.037272][ T29] usb 7-1: config 0 descriptor?? [ 802.079699][T20656] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 802.109473][ T29] igorplugusb 7-1:0.0: endpoint incorrect [ 802.141023][T20676] kAFS: unable to lookup cell '.S•jË¡8' [ 802.360995][T20290] usb 7-1: USB disconnect, device number 11 [ 802.523061][T20684] trusted_key: encrypted_key: master key parameter is missing [ 802.648473][T20687] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 802.895774][T20690] openvswitch: netlink: IP tunnel dst address not specified [ 803.440272][T20706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.540263][T20712] loop4: detected capacity change from 0 to 64 [ 803.712724][T20714] loop1: detected capacity change from 0 to 16 [ 803.781244][T20714] erofs (device loop1): mounted with root inode @ nid 36. [ 804.466652][T20737] loop5: detected capacity change from 0 to 2048 [ 804.530627][T20737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 804.573009][T20742] netlink: 'syz.6.6486': attribute type 1 has an invalid length. [ 804.611822][ T30] audit: type=1800 audit(2000000737.299:78): pid=20737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6472" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 805.560407][T20292] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 805.774935][T20292] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.832612][T20292] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 805.863958][T20292] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 805.912378][T20292] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 805.945571][T20292] usb 5-1: SerialNumber: syz [ 806.211715][T20292] usb 5-1: 0:2 : does not exist [ 806.241311][T20292] usb 5-1: unit 5: unexpected type 0x03 [ 806.357438][T20292] usb 5-1: USB disconnect, device number 121 [ 806.504566][T20795] loop6: detected capacity change from 0 to 4096 [ 806.531185][T20795] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 806.584655][T20804] netlink: 'syz.1.6503': attribute type 2 has an invalid length. [ 806.627750][ T8415] udevd[8415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 807.191248][T20818] loop4: detected capacity change from 0 to 64 [ 808.456085][T20858] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 808.574477][T20864] loop6: detected capacity change from 0 to 256 [ 808.640707][T20864] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 808.842002][T20872] openvswitch: netlink: Multiple metadata blocks provided [ 809.330642][T20888] binder: binder_mmap: 20887 200000000000-200000b36000 bad vm_flags failed -1 [ 809.698703][T20901] cgroup: name respecified [ 809.886406][T20906] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 810.334379][T20925] loop5: detected capacity change from 0 to 256 [ 810.406946][T20925] FAT-fs (loop5): Directory bread(block 64) failed [ 810.446189][T20925] FAT-fs (loop5): Directory bread(block 65) failed [ 810.457556][T20925] FAT-fs (loop5): Directory bread(block 66) failed [ 810.487327][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6562'. [ 810.496594][T20925] FAT-fs (loop5): Directory bread(block 67) failed [ 810.503244][T20925] FAT-fs (loop5): Directory bread(block 68) failed [ 810.545521][T20928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6562'. [ 810.562996][T20925] FAT-fs (loop5): Directory bread(block 69) failed [ 810.588228][T20925] FAT-fs (loop5): Directory bread(block 70) failed [ 810.612073][T20925] FAT-fs (loop5): Directory bread(block 71) failed [ 810.633806][T20925] FAT-fs (loop5): Directory bread(block 72) failed [ 810.664346][T20925] FAT-fs (loop5): Directory bread(block 73) failed [ 810.817764][ T30] audit: type=1800 audit(2000000743.110:79): pid=20925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6561" name="bus" dev="loop5" ino=1048737 res=0 errno=0 [ 811.013057][T20942] loop4: detected capacity change from 0 to 64 [ 811.213456][T20950] loop5: detected capacity change from 0 to 64 [ 811.934345][T20972] loop3: detected capacity change from 0 to 128 [ 811.997777][T20972] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 812.078374][T20972] ext4 filesystem being mounted at /1031/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 812.204399][T20972] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop3 blocksize: 1024 [ 812.240639][T20982] libceph: resolve '00' (ret=-3): failed [ 812.290394][T20956] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 812.297055][T20972] grow_buffers: requested out-of-range block 144115188075855872 for device loop3 [ 812.330621][T20988] openvswitch: netlink: IP tunnel TTL not specified. [ 812.384460][T20972] EXT4-fs warning (device loop3): ext4_resize_fs:2018: can't read last block, resize aborted [ 812.567319][T20992] loop1: detected capacity change from 0 to 256 [ 812.576741][ T29] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 812.594080][ T6432] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 812.640999][T20992] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 812.745567][T20992] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 812.768349][ T29] usb 7-1: config 16 has an invalid interface number: 168 but max is 0 [ 812.798335][T20992] FAT-fs (loop1): Filesystem has been set read-only [ 812.811928][ T29] usb 7-1: config 16 has no interface number 0 [ 812.838899][ T29] usb 7-1: config 16 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 812.854637][T20992] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 812.886602][ T29] usb 7-1: config 16 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 812.887789][T20992] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 812.959050][T20992] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 812.961527][ T29] usb 7-1: config 16 interface 168 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.989578][T20992] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 812.996492][ T29] usb 7-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=14.0a [ 813.020291][T20992] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 813.029328][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.054379][ T29] HFC-S_USB 7-1:16.168: probe with driver HFC-S_USB failed with error -5 [ 813.095597][T21002] netlink: 'syz.5.6598': attribute type 9 has an invalid length. [ 813.105233][ T6545] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 813.113169][T20992] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 813.122539][T20992] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 813.143039][ T30] audit: type=1800 audit(2000000745.281:80): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6593" name="file1" dev="loop1" ino=1048738 res=0 errno=0 [ 813.280994][T20290] usb 7-1: USB disconnect, device number 12 [ 813.303934][ T6545] usb 4-1: Using ep0 maxpacket: 16 [ 813.311319][ T6545] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 813.329982][ T6545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 813.367483][ T6545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 813.386260][ T6545] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 813.426919][ T6545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.453293][ T6545] usb 4-1: Product: syz [ 813.458950][T21010] netlink: 'syz.4.6602': attribute type 10 has an invalid length. [ 813.467558][ T6545] usb 4-1: Manufacturer: syz [ 813.483252][ T6545] usb 4-1: SerialNumber: syz [ 813.488738][T21010] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6602'. [ 813.504910][ T6545] usb 4-1: config 0 descriptor?? [ 813.540916][ T6545] appledisplay 4-1:0.0: Submitting URB failed [ 813.550910][ T6545] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5 [ 813.582018][T21010] bridge0: port 3(ipvlan1) entered blocking state [ 813.588686][T21010] bridge0: port 3(ipvlan1) entered disabled state [ 813.620548][ T30] audit: type=1326 audit(2000000745.731:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.2.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 813.624266][T21010] ipvlan1: entered allmulticast mode [ 813.648875][T21010] veth0_vlan: entered allmulticast mode [ 813.663670][T21010] ipvlan1: left allmulticast mode [ 813.669747][T21010] veth0_vlan: left allmulticast mode [ 813.675777][T21010] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 813.709496][ T30] audit: type=1326 audit(2000000745.787:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.2.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 813.816438][ T30] audit: type=1326 audit(2000000745.805:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.2.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 813.929747][ T30] audit: type=1326 audit(2000000745.805:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.2.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 813.937981][T21020] netlink: 'syz.5.6607': attribute type 1 has an invalid length. [ 814.029950][ T30] audit: type=1326 audit(2000000745.805:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21013 comm="syz.2.6604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 814.034460][T21020] netlink: 'syz.5.6607': attribute type 2 has an invalid length. [ 814.115002][ T29] usb 4-1: USB disconnect, device number 7 [ 814.655475][T21037] loop5: detected capacity change from 0 to 4096 [ 814.742599][T21043] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 815.146828][T21050] loop6: detected capacity change from 0 to 4096 [ 815.164495][T21050] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 815.301059][T21050] process 'syz.6.6621' launched './file1' with NULL argv: empty string added [ 815.378545][ T6545] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 815.570795][ T6545] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 815.589979][ T6545] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 815.632638][ T6545] usb 6-1: config 220 has no interface number 2 [ 815.663131][ T6545] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 815.678142][ T6545] usb 6-1: config 220 interface 0 has no altsetting 0 [ 815.684957][ T6545] usb 6-1: config 220 interface 76 has no altsetting 0 [ 815.719724][ T6545] usb 6-1: config 220 interface 1 has no altsetting 0 [ 815.736010][ T6545] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 815.761680][ T6545] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.803059][ T6545] usb 6-1: Product: syz [ 815.813305][ T6545] usb 6-1: Manufacturer: syz [ 815.824467][ T6545] usb 6-1: SerialNumber: syz [ 816.132560][ T6545] usb 6-1: selecting invalid altsetting 0 [ 816.157437][ T6545] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 816.180011][ T6545] uvcvideo 6-1:220.0: No valid video chain found. [ 816.210511][ T6545] usb 6-1: selecting invalid altsetting 0 [ 816.240931][ T6545] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 816.313295][ T6545] usb 6-1: USB disconnect, device number 2 [ 816.353963][T21060] loop4: detected capacity change from 0 to 32768 [ 816.435645][T21060] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 816.449320][T21086] loop2: detected capacity change from 0 to 2048 [ 816.559243][T21086] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 816.583751][T21060] XFS (loop4): Ending clean mount [ 816.591010][T21086] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 816.627076][T21086] UDF-fs: Scanning with blocksize 512 failed [ 816.639668][T21060] XFS (loop4): Quotacheck needed: Please wait. [ 816.694602][T21086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.809916][T21060] XFS (loop4): Quotacheck: Done. [ 817.032776][ T6545] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 817.059722][ T6427] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 817.251377][ T6545] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 817.287743][ T6545] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.311351][ T6545] usb 4-1: Product: syz [ 817.315555][ T6545] usb 4-1: Manufacturer: syz [ 817.389566][T21115] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6650'. [ 817.577791][ T6545] usb 4-1: SerialNumber: syz [ 817.613721][ T6545] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 817.633930][T20290] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 818.181353][T20300] usb 4-1: USB disconnect, device number 8 [ 818.689157][ T29] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 818.732439][T21149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6665'. [ 818.806639][T20290] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 818.835455][T20290] ath9k_htc: Failed to initialize the device [ 818.857778][T20300] usb 4-1: ath9k_htc: USB layer deinitialized [ 818.892568][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 818.911334][ T29] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 818.932265][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.952463][ T29] usb 5-1: config 0 descriptor?? [ 819.016995][ T29] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 819.087372][T21155] netlink: 'syz.2.6670': attribute type 33 has an invalid length. [ 819.155551][T21155] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6670'. [ 819.195842][T21161] program syz.3.6672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.206277][T21159] loop6: detected capacity change from 0 to 1024 [ 819.240345][ T29] usb 5-1: Detected FT232A [ 819.264129][ T29] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 819.409718][T21142] loop5: detected capacity change from 0 to 32768 [ 819.437990][ T36] hfsplus: b-tree write err: -5, ino 25 [ 819.450351][T21142] ERROR: (device loop5): diRead: i_ino != di_number [ 819.450351][T21142] [ 819.469688][ T36] hfsplus: b-tree write err: -5, ino 4 [ 819.486640][ T36] hfsplus: b-tree write err: -5, ino 2 [ 819.489240][ T29] usb 5-1: USB disconnect, device number 122 [ 819.575425][ T29] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 819.622945][ T29] ftdi_sio 5-1:0.0: device disconnected [ 819.907909][T21177] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 819.939340][ T6433] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 819.973830][T21179] Illegal XDP return value 218 on prog (id 302) dev N/A, expect packet loss! [ 820.160266][ T6433] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 820.179441][ T6433] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 820.226960][ T6433] usb 2-1: config 0 has no interface number 0 [ 820.260449][ T6433] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 820.302465][ T6433] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 820.379331][ T6433] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 820.422633][ T6433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.430737][ T6433] usb 2-1: Product: syz [ 820.483975][ T6433] usb 2-1: Manufacturer: syz [ 820.496353][ T6433] usb 2-1: SerialNumber: syz [ 820.524470][ T6433] usb 2-1: config 0 descriptor?? [ 820.564479][T21193] loop6: detected capacity change from 0 to 1024 [ 820.585423][T21193] hfsplus: extend alloc file! (16384,256,150995124) [ 820.594175][T21193] hfsplus: failed to extend attributes file [ 820.710494][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 820.895817][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 820.939992][ T5136] Bluetooth: hci1: unexpected event for opcode 0x0404 [ 820.943508][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 821.010492][ T29] usb 3-1: no configurations [ 821.020225][ T29] usb 3-1: can't read configurations, error -22 [ 821.047214][T20290] usb 2-1: USB disconnect, device number 107 [ 821.380609][T21220] loop4: detected capacity change from 0 to 64 [ 821.400735][T21221] nbd: illegal input index 2958377 [ 821.759596][T21227] loop4: detected capacity change from 0 to 2048 [ 821.904945][T21227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 821.957625][T21239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6708'. [ 822.018480][T21227] EXT4-fs error (device loop4): ext4_iget_extra_inode:5024: inode #12: comm syz.4.6704: corrupted in-inode xattr: e_value size too large [ 822.142794][T21247] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 822.196893][ T6427] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 822.204820][ T29] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 822.369748][T21244] loop2: detected capacity change from 0 to 4096 [ 822.397994][T20290] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 822.402794][ T29] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.7f [ 822.431107][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.485410][ T29] usb 4-1: config 0 descriptor?? [ 822.510419][T21244] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 822.570933][T20290] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 822.596613][T20290] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 822.627450][T20290] usb 6-1: config 0 has no interface number 0 [ 822.649701][T20290] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 822.701948][T21244] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB [ 822.722038][T20290] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 822.760550][ T29] usb 4-1: string descriptor 0 read error: -71 [ 822.765146][T20290] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 822.766814][ T29] ldusb 4-1:0.0: Interrupt in endpoint not found [ 822.823985][T20290] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 822.867972][T20290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.870236][ T29] usb 4-1: USB disconnect, device number 9 [ 822.926076][T20290] usb 6-1: config 0 descriptor?? [ 822.966428][T21248] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 823.448208][T20290] usb 6-1: USB disconnect, device number 3 [ 823.492340][T21282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 823.798251][T21290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6732'. [ 823.807177][T21290] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6732'. [ 824.225073][T21306] misc userio: Invalid payload size [ 824.325090][T21311] usb usb8: usbfs: process 21311 (syz.2.6742) did not claim interface 0 before use [ 825.283460][T21351] loop1: detected capacity change from 0 to 8 [ 825.301630][T21348] loop3: detected capacity change from 0 to 1024 [ 825.453856][ T30] audit: type=1800 audit(783.903:86): pid=21351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6762" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 825.909591][T21369] misc userio: No port type given on /dev/userio [ 826.062907][ T6433] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 826.144582][T21371] vti0: entered promiscuous mode [ 826.150749][T21371] vti0: entered allmulticast mode [ 826.250254][ T6433] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 826.318933][ T6433] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.348959][ T6433] usb 7-1: config 0 descriptor?? [ 826.373475][ T6433] cp210x 7-1:0.0: cp210x converter detected [ 826.384282][T21378] loop5: detected capacity change from 0 to 4096 [ 826.504233][T21378] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 826.603767][T21378] ntfs3(loop5): Failed to load $Extend (-22). [ 826.627916][T21378] ntfs3(loop5): Failed to initialize $Extend. [ 826.810211][ T6433] cp210x 7-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 826.852128][ T6433] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 826.894913][ T6433] usb 7-1: cp210x converter now attached to ttyUSB0 [ 826.924554][T21395] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6784'. [ 826.933838][T21397] CIFS: VFS: Malformed UNC in devname [ 826.934930][ T6433] usb 7-1: USB disconnect, device number 13 [ 827.005272][ T6433] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 827.057831][ T6433] cp210x 7-1:0.0: device disconnected [ 827.402239][T21409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.977165][T21423] loop5: detected capacity change from 0 to 4096 [ 828.148313][ T30] audit: type=1400 audit(786.458:87): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21424 comm="syz.1.6798" [ 828.267501][T21393] loop4: detected capacity change from 0 to 32768 [ 828.312056][T21393] BTRFS info: device /dev/loop4 (7:4) using temp-fsid a05fc84d-f99f-408e-a748-c33daf1d2074 [ 828.366709][T21393] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.6783 (21393) [ 828.405022][T21429] netlink: 'syz.3.6800': attribute type 2 has an invalid length. [ 828.434774][T21429] netlink: 'syz.3.6800': attribute type 3 has an invalid length. [ 828.491094][T21393] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 828.541645][T21393] BTRFS info (device loop4): using crc32c checksum algorithm [ 828.800534][T21393] BTRFS info (device loop4): enabling ssd optimizations [ 828.807543][T21393] BTRFS info (device loop4): turning on async discard [ 828.905065][T21393] BTRFS info (device loop4): enabling free space tree [ 829.348064][T21470] loop2: detected capacity change from 0 to 1024 [ 829.448362][T21470] hfsplus: can't free extent: start 134, count 1 [ 829.644559][T21476] Unknown options in mask b7f2 [ 829.646342][ T6427] BTRFS info (device loop4): last unmount of filesystem a05fc84d-f99f-408e-a748-c33daf1d2074 [ 829.945598][T21482] netlink: 'syz.2.6821': attribute type 1 has an invalid length. [ 829.994049][T21482] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6821'. [ 830.115455][T21491] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6819'. [ 830.520905][T21497] loop2: detected capacity change from 0 to 256 [ 830.637231][T20292] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 830.867391][T20292] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 830.897420][T20292] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 830.945961][T20292] usb 2-1: config 0 has no interface number 0 [ 830.971960][T20292] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 14385, setting to 64 [ 831.027099][T20292] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 831.087714][T21502] xt_CT: No such helper "snmp_trap" [ 831.091853][T21474] loop6: detected capacity change from 0 to 32768 [ 831.103800][T20292] usb 2-1: config 0 interface 52 has no altsetting 0 [ 831.142214][T21474] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6816 (21474) [ 831.148979][T20292] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 831.219603][T21474] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 831.223770][T20292] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 831.287938][T20292] usb 2-1: Manufacturer: syz [ 831.288167][T21474] BTRFS info (device loop6): using sha256 checksum algorithm [ 831.348185][T20292] usb 2-1: config 0 descriptor?? [ 831.408434][T20292] hub 2-1:0.52: bad descriptor, ignoring hub [ 831.414480][T20292] hub 2-1:0.52: probe with driver hub failed with error -5 [ 831.541805][T21474] BTRFS info (device loop6): enabling ssd optimizations [ 831.544458][T21533] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6837'. [ 831.560468][T21525] Zero length message leads to an empty skb [ 831.576596][T21474] BTRFS info (device loop6): turning on async discard [ 831.629979][T21474] BTRFS info (device loop6): enabling free space tree [ 831.637581][T20292] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input64 [ 832.089226][T18122] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 832.170665][T20290] usb 2-1: USB disconnect, device number 108 [ 832.405762][T21550] loop3: detected capacity change from 0 to 512 [ 832.615813][T21550] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.823672][T21566] netlink: 88 bytes leftover after parsing attributes in process `syz.4.6852'. [ 832.951070][ T6432] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.581135][T21587] loop3: detected capacity change from 0 to 1024 [ 833.997415][T21599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6868'. [ 834.002332][T21598] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6869'. [ 834.489849][T21615] loop5: detected capacity change from 0 to 256 [ 834.621462][T21615] FAT-fs (loop5): Directory bread(block 64) failed [ 834.648030][T21615] FAT-fs (loop5): Directory bread(block 65) failed [ 834.684473][T21615] FAT-fs (loop5): Directory bread(block 66) failed [ 834.728967][T21626] netlink: 'syz.6.6880': attribute type 2 has an invalid length. [ 834.731273][T21615] FAT-fs (loop5): Directory bread(block 67) failed [ 834.783380][T21615] FAT-fs (loop5): Directory bread(block 68) failed [ 834.819721][T21615] FAT-fs (loop5): Directory bread(block 69) failed [ 834.849417][T21615] FAT-fs (loop5): Directory bread(block 70) failed [ 834.856359][T21615] FAT-fs (loop5): Directory bread(block 71) failed [ 834.909257][T21615] FAT-fs (loop5): Directory bread(block 72) failed [ 834.937178][T21615] FAT-fs (loop5): Directory bread(block 73) failed [ 834.981533][T21633] netdevsim netdevsim3 ì: renamed from netdevsim0 (while UP) [ 836.322616][ T6433] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 836.503747][ T6433] usb 5-1: Using ep0 maxpacket: 32 [ 836.529625][ T6433] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 836.561242][ T6433] usb 5-1: config 0 has no interface number 0 [ 836.602406][ T6433] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 836.620858][T21693] loop3: detected capacity change from 0 to 256 [ 836.650573][ T6433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.673725][ T6433] usb 5-1: Product: syz [ 836.678001][ T6433] usb 5-1: Manufacturer: syz [ 836.689897][ T6433] usb 5-1: SerialNumber: syz [ 836.716749][T21693] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 836.754203][ T6433] usb 5-1: config 0 descriptor?? [ 836.760129][T21693] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 836.801648][ T6433] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 836.835551][ T6433] usb 5-1: selecting invalid altsetting 1 [ 836.837142][T21693] exFAT-fs (loop3): start_clu is invalid cluster(0x400) [ 836.841325][ T6433] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 836.868927][ T6433] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 836.902765][ T6433] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 836.940946][ T6433] usb 5-1: media controller created [ 836.999417][ T6433] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.177158][ T6433] usb 5-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 837.198235][ T6433] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 837.449028][ T6433] DVB: Unable to find symbol mxl5005s_attach() [ 837.502232][ T6433] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 837.687506][ T6433] usb 5-1: USB disconnect, device number 123 [ 837.729570][T21727] loop5: detected capacity change from 0 to 2048 [ 837.853301][T21727] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 838.221113][T21742] loop3: detected capacity change from 0 to 64 [ 838.248613][T21740] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 838.259634][T21740] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 838.300146][T21740] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 838.350424][T21744] ip6t_srh: unknown srh invflags 4000 [ 839.439971][T21779] loop6: detected capacity change from 0 to 16 [ 839.474827][T21780] overlay: Bad value for 'workdir' [ 839.498770][T21779] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 66700) [ 839.733726][T21788] SET target dimension over the limit! [ 840.136096][T20292] IPVS: starting estimator thread 0... [ 840.254651][T21803] IPVS: using max 25 ests per chain, 60000 per kthread [ 840.383880][T21806] delete_channel: no stack [ 840.466289][T21813] loop1: detected capacity change from 0 to 2048 [ 840.540659][T21813] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485 [ 840.595111][T21813] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 841.237573][ T30] audit: type=1326 audit(798.717:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.2.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 841.343710][ T30] audit: type=1326 audit(798.763:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.2.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 841.420319][ T30] audit: type=1326 audit(798.763:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.2.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 841.443288][ T6433] usb 5-1: new low-speed USB device number 124 using dummy_hcd [ 841.514490][ T30] audit: type=1326 audit(798.763:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.2.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 841.593877][T21851] IPv6: NLM_F_CREATE should be specified when creating new route [ 841.603088][ T30] audit: type=1326 audit(798.763:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21836 comm="syz.2.6982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c3059c799 code=0x7ffc0000 [ 841.605226][T21853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6989'. [ 841.696865][ T6433] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 841.705088][ T6433] usb 5-1: config 0 has no interface number 0 [ 841.754797][ T6433] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 841.809751][ T6433] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 841.854777][ T6433] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 841.906872][ T6433] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 841.952105][ T6433] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 841.973981][T20300] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 841.992653][ T6433] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 842.019616][T21864] loop5: detected capacity change from 0 to 64 [ 842.032393][ T6433] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 842.061259][ T6433] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.095922][ T6433] usb 5-1: config 0 descriptor?? [ 842.113533][T21835] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 842.120850][T21835] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 842.171208][T20300] usb 7-1: Using ep0 maxpacket: 32 [ 842.185282][ T6433] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 842.202312][T20300] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 842.224711][T20300] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.256355][T20300] usb 7-1: config 0 descriptor?? [ 842.287569][T20300] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 842.400385][T21875] kAFS: unable to lookup cell 'syz1' [ 842.524368][T20290] usb 5-1: USB disconnect, device number 124 [ 842.587510][T20290] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 842.674056][T21884] loop5: detected capacity change from 0 to 256 [ 842.718293][T21884] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 842.738523][T20300] gspca_nw80x: reg_r err -71 [ 842.754717][T20300] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 842.783551][T21884] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 842.819741][T20300] usb 7-1: USB disconnect, device number 14 [ 843.085562][T20290] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 843.137422][T21896] loop2: detected capacity change from 0 to 16 [ 843.172720][T21896] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 843.227085][T21896] cramfs: Unknown parameter 'ÿÿ184467440737095516151844674407370955161518446744073709551615±ñV?Œù³ßCp~'~8pٻ젌|ž^½Ö(cŸoö—ÈêM ) ÇsCez;£üzU±®õÚm´vÃòmu á ©E*šˆq“]ºLD^9üìŒN‰A’ ×”z¨ùc-˜zQúëtŒañ7ßÉÃWâî‰Qxf·ùˆc¬_^{MŸ¼&†.øìƒqI‡jŠgΆ١ Ÿ' [ 843.291079][T20290] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 843.315463][T21898] m1Ie5èÿá: entered promiscuous mode [ 843.323464][T20290] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 843.355861][T20290] usb 2-1: config 220 has no interface number 2 [ 843.374313][T20290] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 843.431189][T20290] usb 2-1: config 220 interface 0 has no altsetting 0 [ 843.473131][T20290] usb 2-1: config 220 interface 76 has no altsetting 0 [ 843.480146][T20290] usb 2-1: config 220 interface 1 has no altsetting 0 [ 843.505841][T20290] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 843.526442][T20290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.562317][T20290] usb 2-1: Product: syz [ 843.573587][T20290] usb 2-1: Manufacturer: syz [ 843.587944][T20290] usb 2-1: SerialNumber: syz [ 843.859549][T20290] usb 2-1: selecting invalid altsetting 0 [ 843.888679][T20290] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 843.918223][T20290] uvcvideo 2-1:220.0: No valid video chain found. [ 843.955653][T20290] usb 2-1: selecting invalid altsetting 0 [ 843.983470][T20290] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 844.063036][T20290] usb 2-1: USB disconnect, device number 109 [ 844.781519][T21942] loop5: detected capacity change from 0 to 512 [ 844.906655][T21942] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.7033: iget: bad extra_isize 50264 (inode size 256) [ 844.977269][T21942] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 844.978705][T21948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7037'. [ 844.992599][T21942] EXT4-fs (loop5): Remounting filesystem read-only [ 845.004897][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 845.004934][ C0] EXT4-fs (loop5): initial error at time 802: ext4_orphan_get:1391: inode 15 [ 845.004990][ C0] EXT4-fs (loop5): last error at time 802: ext4_orphan_get:1391: inode 15 [ 845.092171][T21953] loop2: detected capacity change from 0 to 16 [ 845.124385][T21953] erofs (device loop2): rootino(nid 36) is not a directory(i_mode 66700) [ 845.186607][T21959] loop6: detected capacity change from 0 to 64 [ 845.198472][T21942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 845.440378][ T6435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.386819][T21957] loop3: detected capacity change from 0 to 32768 [ 846.466491][T21957] ea_get: invalid extended attribute [ 846.485459][ T30] audit: type=1800 audit(803.611:93): pid=21957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7040" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 846.693375][T21993] loop2: detected capacity change from 0 to 736 [ 846.764734][T21997] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7058'. [ 846.819461][T21997] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7058'. [ 846.884464][T21999] loop5: detected capacity change from 0 to 1024 [ 846.920899][T21999] hfsplus: invalid length 32517 has been corrected to 255 [ 846.973711][T21999] hfsplus: b-tree write err: -5, ino 2 [ 847.055757][T22005] netlink: 'syz.1.7064': attribute type 1 has an invalid length. [ 847.268520][ T36] hfsplus: b-tree write err: -5, ino 25 [ 847.285119][ T36] hfsplus: b-tree write err: -5, ino 4 [ 847.307597][ T36] hfsplus: b-tree write err: -5, ino 2 [ 848.087641][T22009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 848.603816][T22052] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 848.641726][T22052] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 848.697258][T22052] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 848.919949][ T6433] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 849.108338][ T6433] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 849.122997][ T6433] usb 5-1: config 0 has no interface number 0 [ 849.148199][ T6433] usb 5-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=f0.54 [ 849.177296][ T6433] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.208497][ T6433] usb 5-1: Product: syz [ 849.221540][ T6433] usb 5-1: Manufacturer: syz [ 849.255770][ T6433] usb 5-1: SerialNumber: syz [ 849.266223][T22073] netlink: 'syz.1.7094': attribute type 4 has an invalid length. [ 849.293336][ T6433] usb 5-1: config 0 descriptor?? [ 849.485366][T22045] loop3: detected capacity change from 0 to 32768 [ 849.518399][T20300] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 849.532921][ T6433] cdc_subset 5-1:0.1: probe with driver cdc_subset failed with error -22 [ 849.595314][T22045] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 849.734384][T20300] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 849.802111][T20300] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.819267][T20296] usb 5-1: USB disconnect, device number 125 [ 849.865386][T20300] usb 3-1: Product: syz [ 849.869636][T20300] usb 3-1: Manufacturer: syz [ 849.898287][T22045] XFS (loop3): Ending clean mount [ 849.907341][T20300] usb 3-1: SerialNumber: syz [ 849.907495][T22095] loop6: detected capacity change from 0 to 512 [ 849.934952][T20300] usb 3-1: config 0 descriptor?? [ 849.938102][T22045] XFS (loop3): Quotacheck needed: Please wait. [ 850.060361][T22095] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.120572][T22045] XFS (loop3): Quotacheck: Done. [ 850.334019][T18122] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 850.490380][ T6432] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 850.556863][T20290] usb 3-1: USB disconnect, device number 9 [ 850.967824][ T6433] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 851.185353][ T6433] usb 6-1: Using ep0 maxpacket: 8 [ 851.194161][ T30] audit: type=1326 audit(808.009:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 851.218093][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.224456][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 851.242328][ T6433] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.273894][ T6433] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 851.300149][ T6433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.334926][ T30] audit: type=1326 audit(808.018:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 851.357899][ T6433] usb 6-1: config 0 descriptor?? [ 851.383479][ T6433] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 851.455942][ T30] audit: type=1326 audit(808.084:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 851.551986][T22140] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 851.573171][ T30] audit: type=1326 audit(808.084:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 851.600701][T22143] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 851.654097][ T30] audit: type=1326 audit(808.084:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 851.713192][ T30] audit: type=1326 audit(808.084:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 851.816054][ T6433] gspca_vc032x: reg_w err -71 [ 851.820856][ T6433] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 851.829068][ T30] audit: type=1326 audit(808.084:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 851.892945][ T6433] usb 6-1: USB disconnect, device number 4 [ 851.908814][T22150] loop6: detected capacity change from 0 to 64 [ 851.933409][ T30] audit: type=1326 audit(808.084:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 852.033006][ T30] audit: type=1326 audit(808.084:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 852.165159][ T30] audit: type=1326 audit(808.084:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22129 comm="syz.1.7113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f7f45d9c799 code=0x7ffc0000 [ 852.426824][T22167] xt_recent: Unsupported userspace flags (000000de) [ 852.463315][T22170] ipvlan0: entered promiscuous mode [ 852.499752][T22170] ipvlan0: entered allmulticast mode [ 852.521417][T22170] veth0_vlan: entered allmulticast mode [ 852.676697][T22177] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 853.040255][T22193] xt_cluster: node mask cannot exceed total number of nodes [ 853.119601][T20290] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 853.322788][T20290] usb 2-1: Using ep0 maxpacket: 8 [ 853.345662][T20290] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 853.376760][T20290] usb 2-1: config 0 interface 0 has no altsetting 0 [ 853.421504][T20290] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 853.449764][T20290] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.483937][T20290] usb 2-1: Product: syz [ 853.488961][T20290] usb 2-1: Manufacturer: syz [ 853.527116][T20290] usb 2-1: SerialNumber: syz [ 853.551737][T20290] usb 2-1: config 0 descriptor?? [ 853.596274][T20290] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 853.801047][T20290] snd_usb_toneport 2-1:0.0: set_interface failed [ 853.808068][T20290] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 853.823246][T20290] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 853.878540][T20290] usb 2-1: USB disconnect, device number 110 [ 854.602690][T22245] xt_hashlimit: max too large, truncated to 1048576 [ 854.702514][T22247] loop1: detected capacity change from 0 to 1764 [ 854.776893][T22247] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 855.115839][ T5136] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 855.489021][T22272] bond1: down delay (32768) is not a multiple of miimon (100), value rounded to 32700 ms [ 855.521233][T22272] bond1: entered promiscuous mode [ 855.538441][T22272] 8021q: adding VLAN 0 to HW filter on device bond1 [ 855.844520][T20290] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 855.928390][T22275] loop4: detected capacity change from 0 to 32768 [ 855.957550][T14113] [ 855.959918][T14113] ====================================================== [ 855.966946][T14113] WARNING: possible circular locking dependency detected [ 855.973968][T14113] syzkaller #0 Tainted: G L [ 855.979944][T14113] ------------------------------------------------------ [ 855.986958][T14113] kworker/u8:6/14113 is trying to acquire lock: [ 855.993191][T14113] ffff888036dc0950 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x17c/0x230 [ 856.002993][T14113] [ 856.002993][T14113] but task is already holding lock: [ 856.010709][T14113] ffff888036dc2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 856.020723][T14113] [ 856.020723][T14113] which lock already depends on the new lock. [ 856.020723][T14113] [ 856.031124][T14113] [ 856.031124][T14113] the existing dependency chain (in reverse order) is: [ 856.040246][T14113] [ 856.040246][T14113] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 856.048698][T14113] ext4_writepages+0x21d/0x790 [ 856.054103][T14113] do_writepages+0x278/0x600 [ 856.059241][T14113] __writeback_single_inode+0x164/0x13c0 [ 856.065526][T14113] writeback_single_inode+0x4d3/0xf30 [ 856.071609][T14113] write_inode_now+0x174/0x1f0 [ 856.076913][T14113] iput.part.0+0x7f3/0xf50 [ 856.081948][T14113] iput+0x35/0x40 [ 856.086104][T14113] ext4_xattr_block_set+0x6f7/0x3660 [ 856.092073][T14113] ext4_expand_extra_isize_ea+0x17c6/0x1d70 [ 856.098515][T14113] __ext4_expand_extra_isize+0x346/0x480 [ 856.104693][T14113] __ext4_mark_inode_dirty+0x693/0x8b0 [ 856.111124][T14113] ext4_evict_inode+0x860/0x17c0 [ 856.116692][T14113] evict+0x3c2/0xad0 [ 856.121204][T14113] iput.part.0+0x605/0xf50 [ 856.126161][T14113] iput+0x35/0x40 [ 856.130407][T14113] ext4_orphan_cleanup+0x71e/0x11e0 [ 856.136148][T14113] ext4_fill_super+0x9009/0xb470 [ 856.141670][T14113] get_tree_bdev_flags+0x38c/0x620 [ 856.147319][T14113] vfs_get_tree+0x92/0x320 [ 856.152264][T14113] path_mount+0x7d0/0x23d0 [ 856.157235][T14113] __x64_sys_mount+0x293/0x310 [ 856.162544][T14113] do_syscall_64+0x106/0xf80 [ 856.167670][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.174094][T14113] [ 856.174094][T14113] -> #1 (&ei->xattr_sem){++++}-{4:4}: [ 856.181676][T14113] down_read+0x99/0x460 [ 856.186372][T14113] ext4_setattr+0x80f/0x2660 [ 856.191500][T14113] notify_change+0xb25/0x1330 [ 856.196709][T14113] chown_common+0x51e/0x6e0 [ 856.201760][T14113] do_fchownat+0x18e/0x1f0 [ 856.206714][T14113] __x64_sys_chown+0x7b/0xc0 [ 856.211849][T14113] do_syscall_64+0x106/0xf80 [ 856.216981][T14113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.223402][T14113] [ 856.223402][T14113] -> #0 (jbd2_handle){++++}-{0:0}: [ 856.230722][T14113] __lock_acquire+0x14b8/0x2630 [ 856.236126][T14113] lock_acquire+0x1cf/0x380 [ 856.241172][T14113] wait_transaction_locked+0x191/0x230 [ 856.247174][T14113] add_transaction_credits+0x110/0xe60 [ 856.253177][T14113] start_this_handle+0x3de/0x13a0 [ 856.258753][T14113] jbd2__journal_start+0x394/0x6a0 [ 856.264413][T14113] __ext4_journal_start_sb+0x382/0x6a0 [ 856.270414][T14113] ext4_do_writepages+0xc1c/0x3f50 [ 856.276153][T14113] ext4_writepages+0x347/0x790 [ 856.281449][T14113] do_writepages+0x278/0x600 [ 856.286587][T14113] __writeback_single_inode+0x164/0x13c0 [ 856.292761][T14113] writeback_sb_inodes+0x766/0x1c70 [ 856.298501][T14113] __writeback_inodes_wb+0xf8/0x2d0 [ 856.304240][T14113] wb_writeback+0x755/0xbe0 [ 856.309318][T14113] wb_workfn+0x8c6/0xc00 [ 856.314102][T14113] process_one_work+0x9d7/0x1920 [ 856.319739][T14113] worker_thread+0x5da/0xe40 [ 856.324862][T14113] kthread+0x370/0x450 [ 856.329488][T14113] ret_from_fork+0x754/0xd80 [ 856.334667][T14113] ret_from_fork_asm+0x1a/0x30 [ 856.339981][T14113] [ 856.339981][T14113] other info that might help us debug this: [ 856.339981][T14113] [ 856.350215][T14113] Chain exists of: [ 856.350215][T14113] jbd2_handle --> &ei->xattr_sem --> &sbi->s_writepages_rwsem [ 856.350215][T14113] [ 856.363637][T14113] Possible unsafe locking scenario: [ 856.363637][T14113] [ 856.371345][T14113] CPU0 CPU1 [ 856.376706][T14113] ---- ---- [ 856.382069][T14113] rlock(&sbi->s_writepages_rwsem); [ 856.387365][T14113] lock(&ei->xattr_sem); [ 856.394221][T14113] lock(&sbi->s_writepages_rwsem); [ 856.401991][T14113] lock(jbd2_handle); [ 856.406073][T14113] [ 856.406073][T14113] *** DEADLOCK *** [ 856.406073][T14113] [ 856.414213][T14113] 4 locks held by kworker/u8:6/14113: [ 856.419585][T14113] #0: ffff888020a90148 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 856.430366][T14113] #1: ffffc90005aafd08 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 856.442255][T14113] #2: ffff888036dc40e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 856.453041][T14113] #3: ffff888036dc2b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x278/0x600 [ 856.463476][T14113] [ 856.463476][T14113] stack backtrace: [ 856.469382][T14113] CPU: 0 UID: 0 PID: 14113 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.469433][T14113] Tainted: [L]=SOFTLOCKUP [ 856.469446][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.469470][T14113] Workqueue: writeback wb_workfn (flush-8:0) [ 856.469522][T14113] Call Trace: [ 856.469535][T14113] [ 856.469549][T14113] dump_stack_lvl+0x100/0x190 [ 856.469600][T14113] print_circular_bug.cold+0x178/0x1c7 [ 856.469657][T14113] check_noncircular+0x146/0x160 [ 856.469712][T14113] __lock_acquire+0x14b8/0x2630 [ 856.469770][T14113] lock_acquire+0x1cf/0x380 [ 856.469818][T14113] ? wait_transaction_locked+0x17c/0x230 [ 856.469867][T14113] ? wait_transaction_locked+0x14f/0x230 [ 856.469918][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.469960][T14113] ? prepare_to_wait_exclusive+0xdc/0x2c0 [ 856.470010][T14113] ? wait_transaction_locked+0x17c/0x230 [ 856.470057][T14113] wait_transaction_locked+0x191/0x230 [ 856.470103][T14113] ? wait_transaction_locked+0x17c/0x230 [ 856.470149][T14113] ? __pfx_wait_transaction_locked+0x10/0x10 [ 856.470197][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.470238][T14113] ? __pfx_autoremove_wake_function+0x10/0x10 [ 856.470289][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.470334][T14113] add_transaction_credits+0x110/0xe60 [ 856.470381][T14113] ? writeback_sb_inodes+0x766/0x1c70 [ 856.470419][T14113] ? __writeback_inodes_wb+0xf8/0x2d0 [ 856.470457][T14113] ? wb_writeback+0x755/0xbe0 [ 856.470492][T14113] ? wb_workfn+0x8c6/0xc00 [ 856.470528][T14113] ? process_one_work+0x9d7/0x1920 [ 856.470561][T14113] ? __pfx_add_transaction_credits+0x10/0x10 [ 856.470608][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.470649][T14113] ? lock_acquire+0x1cf/0x380 [ 856.470698][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.470747][T14113] start_this_handle+0x3de/0x13a0 [ 856.470802][T14113] ? __pfx_start_this_handle+0x10/0x10 [ 856.470849][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.470890][T14113] ? rcu_is_watching+0x12/0xc0 [ 856.470930][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.470970][T14113] ? trace_kmem_cache_alloc+0xf3/0x120 [ 856.471014][T14113] ? __kasan_slab_alloc+0x89/0x90 [ 856.471055][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.471096][T14113] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 856.471131][T14113] ? jbd2__journal_start+0x24a/0x6a0 [ 856.471183][T14113] jbd2__journal_start+0x394/0x6a0 [ 856.471233][T14113] __ext4_journal_start_sb+0x382/0x6a0 [ 856.471271][T14113] ? ext4_do_writepages+0xc1c/0x3f50 [ 856.471307][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.471351][T14113] ext4_do_writepages+0xc1c/0x3f50 [ 856.471405][T14113] ? __pfx_ext4_do_writepages+0x10/0x10 [ 856.471447][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.471490][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.471534][T14113] ? ext4_writepages+0x347/0x790 [ 856.471569][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.471610][T14113] ext4_writepages+0x347/0x790 [ 856.471648][T14113] ? __pfx_ext4_writepages+0x10/0x10 [ 856.471693][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.471736][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.471777][T14113] ? __pfx_ext4_writepages+0x10/0x10 [ 856.471816][T14113] do_writepages+0x278/0x600 [ 856.471866][T14113] ? __pfx_do_writepages+0x10/0x10 [ 856.471918][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.471962][T14113] __writeback_single_inode+0x164/0x13c0 [ 856.472002][T14113] ? find_held_lock+0x2b/0x80 [ 856.472040][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.472083][T14113] ? __pfx___writeback_single_inode+0x10/0x10 [ 856.472122][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.472163][T14113] ? do_raw_spin_unlock+0x145/0x1e0 [ 856.472196][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.472240][T14113] writeback_sb_inodes+0x766/0x1c70 [ 856.472290][T14113] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 856.472331][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.472398][T14113] ? _raw_spin_unlock+0x28/0x50 [ 856.472432][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.472472][T14113] ? move_expired_inodes+0x5ea/0x8f0 [ 856.472513][T14113] __writeback_inodes_wb+0xf8/0x2d0 [ 856.472555][T14113] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 856.472595][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.472636][T14113] ? queue_io+0x287/0x550 [ 856.472669][T14113] wb_writeback+0x755/0xbe0 [ 856.472720][T14113] ? __pfx_wb_writeback+0x10/0x10 [ 856.472761][T14113] ? get_nr_inodes+0x100/0x150 [ 856.472807][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.472848][T14113] ? _raw_spin_unlock_irq+0x23/0x50 [ 856.472884][T14113] wb_workfn+0x8c6/0xc00 [ 856.472928][T14113] ? try_to_wake_up+0x160/0x1a80 [ 856.472969][T14113] ? __pfx_wb_workfn+0x10/0x10 [ 856.473014][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.473055][T14113] ? rcu_is_watching+0x12/0xc0 [ 856.473093][T14113] process_one_work+0x9d7/0x1920 [ 856.473132][T14113] ? __pfx_process_one_work+0x10/0x10 [ 856.473187][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.473235][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.473278][T14113] worker_thread+0x5da/0xe40 [ 856.473315][T14113] ? __pfx_worker_thread+0x10/0x10 [ 856.473346][T14113] ? kthread+0x13a/0x450 [ 856.473395][T14113] ? __pfx_worker_thread+0x10/0x10 [ 856.473425][T14113] kthread+0x370/0x450 [ 856.473474][T14113] ? __pfx_kthread+0x10/0x10 [ 856.473530][T14113] ret_from_fork+0x754/0xd80 [ 856.473584][T14113] ? __pfx_ret_from_fork+0x10/0x10 [ 856.473638][T14113] ? srso_alias_return_thunk+0x5/0xfbef5 [ 856.473679][T14113] ? __switch_to+0x7b4/0x1120 [ 856.473716][T14113] ? __pfx_kthread+0x10/0x10 [ 856.473768][T14113] ret_from_fork_asm+0x1a/0x30 [ 856.473815][T14113] [ 857.041270][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.049304][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.057584][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.073388][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.081335][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.095214][T22275] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 857.095214][T22275] [ 857.109276][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.119653][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.127907][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.135803][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.144095][T22292] netlink: 'syz.3.7186': attribute type 3 has an invalid length. [ 857.152312][T20290] usb 6-1: Using ep0 maxpacket: 32 [ 857.163592][T20290] usb 6-1: unable to get BOS descriptor or descriptor too short [ 857.164664][ T5136] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 857.172643][T20290] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 857.185752][T22275] ialloc: diAlloc returned -5! [ 857.190754][T20290] usb 6-1: can't read configurations, error -71