last executing test programs: 4m9.736727684s ago: executing program 2 (id=15873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) 4m9.518592659s ago: executing program 2 (id=15877): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x0) 4m9.407496722s ago: executing program 2 (id=15880): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8949, &(0x7f0000000080)={'bridge0\x00'}) 4m9.268574345s ago: executing program 2 (id=15883): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f71756f74612c6e6f696e746567726974792c67727071756f74612c6e6f646973636172642c696f636861727365743d6e6f6e652c6e6f646973636172642c696f636861727365743d63703835322c6e6f71756f74612c6e6f696e746567726974792c008283d279ba81174b20bb6aae5ea52f08eb98834c68ee88ba4a7465fd1dd3744c4dc490a46dd35125b04bc3a264a73f3262"], 0x45, 0x6188, &(0x7f0000004940)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m8.112966326s ago: executing program 2 (id=15897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 4m7.242944618s ago: executing program 2 (id=15911): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x5, 0x1, {"9bdfc9f6893cd28c012da28d6889a858"}, 0x10001, 0x3, 0x3}, @in={0x2, 0x4e23, @local}}}, 0x118) 4m6.948514775s ago: executing program 32 (id=15911): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @ib={0x1b, 0x5, 0x1, {"9bdfc9f6893cd28c012da28d6889a858"}, 0x10001, 0x3, 0x3}, @in={0x2, 0x4e23, @local}}}, 0x118) 17.684085793s ago: executing program 4 (id=19538): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e2e00000000eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bd57fcf50e4509c5bb5a00f6985300"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.475053878s ago: executing program 4 (id=19540): r0 = add_key(&(0x7f0000000380)='rxrpc\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000400)=""/152, 0x98) 17.243193034s ago: executing program 4 (id=19543): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000000c0)={0xfffffffd, 0x7fffffff}) 17.160691376s ago: executing program 4 (id=19545): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file2\x00', 0x0, &(0x7f0000000180)={[{@gid}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@barrier}, {@type={'type', 0x3d, "e481e91c"}}, {@nodecompose}, {@part={'part', 0x3d, 0xfc59}}, {@nobarrier}]}, 0xfe, 0x5e5, &(0x7f0000002900)="$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") mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 16.975421111s ago: executing program 4 (id=19547): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) 16.520071293s ago: executing program 4 (id=19552): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000039000000620202"], 0x28}, 0x8000) 16.268480359s ago: executing program 33 (id=19552): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x180000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000039000000620202"], 0x28}, 0x8000) 2.519724584s ago: executing program 0 (id=19718): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r0, &(0x7f0000000300)={0x27, 0x0, 0x0, 0x7, 0x1, 0xe, "91eb096f5d4949060e7de4c9c1658feb81d7cfca01e3344d70c4f21aab9a0347b176587f714eea23c610cb967d382e96d75c1f116bf2ddd2d26f25fc415c74", 0x37}, 0x60) 2.336826779s ago: executing program 0 (id=19721): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x9, 0x0, 0x0, 0xa, 0x0, 0x80}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x7}, {}, 0x2, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 2.119797865s ago: executing program 0 (id=19724): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0x9, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040) 1.721166485s ago: executing program 0 (id=19729): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 1.570738559s ago: executing program 3 (id=19731): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) lseek(r0, 0x4, 0x3) 1.514965201s ago: executing program 1 (id=19732): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="0213020902000000", 0x8}, {&(0x7f0000000780)="a112fde440109737", 0x8}], 0x2}, 0x400c010) 1.514800081s ago: executing program 5 (id=19733): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xc, 0x13, r0, 0x83000000) 1.483978281s ago: executing program 0 (id=19734): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x842, 0x1fa) sync_file_range(r0, 0x9c6, 0x0, 0x1) 1.342162265s ago: executing program 3 (id=19735): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/234, 0xea, 0x58) 1.305643136s ago: executing program 1 (id=19736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400001000208000140000000140800024000000012040005800c000480060001008a9500000900010073797a30"], 0x110}}, 0x0) 1.305501126s ago: executing program 5 (id=19737): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x2}, {@in6=@local, 0xa00, 0x2b}, @in=@rand_addr=0x64010101, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x40}, [@coaddr={0x14}]}, 0x104}}, 0x0) 1.199097509s ago: executing program 0 (id=19738): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000000c0)=ANY=[@ANYBLOB='intr,heartbeat=none,dir_resv_level=000000000,resv_level=00000000000000000006,coherency=full,localflocks,coherency=full,commit=00000000001613114240,\x00'], 0x3, 0x444b, &(0x7f0000004480)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) 1.087140341s ago: executing program 3 (id=19739): r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5}) 1.086728871s ago: executing program 1 (id=19740): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000100000f040000000a0000009426000004000000000000040000000000000061"], &(0x7f0000000f80)=""/4115, 0x3d, 0x1013, 0x1}, 0x28) 1.069980222s ago: executing program 5 (id=19741): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 855.174347ms ago: executing program 5 (id=19742): r0 = syz_open_dev$evdev(&(0x7f00000006c0), 0x83, 0x20001) write$evdev(r0, &(0x7f0000000700)=[{{}, 0x1f, 0xc89a}], 0x18) 855.041257ms ago: executing program 3 (id=19743): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x80082, 0x0) preadv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000200)=""/212, 0xd4}], 0x2, 0x80, 0x5) 852.449818ms ago: executing program 1 (id=19744): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000030c0)={0xfc, {"a2e3ad09ed1818f91b5e071887f70e09f89be7ff7fc6e5539b0d430a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b5002895ae7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe67380e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f072ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0528c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58cba1118e32126596e1cd7655b904801784c416b22133d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830053fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279f07000000935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c71552439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e501000000b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ff00", 0x1000}}, 0x1006) 229.852963ms ago: executing program 6 (id=19553): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') getdents(r0, &(0x7f0000001280)=""/4097, 0x1001) 228.245854ms ago: executing program 1 (id=19754): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x9f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xab}], 0x18) 216.556894ms ago: executing program 5 (id=19755): r0 = openat$damon_mk_contexts(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) write$damon_contexts(r0, 0x0, 0xfff2) 213.420334ms ago: executing program 3 (id=19756): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 534.829µs ago: executing program 6 (id=19745): r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="0213020902000000", 0x8}, {&(0x7f0000000780)="a112fde440109737", 0x8}], 0x2}, 0x400c010) 390.379µs ago: executing program 1 (id=19746): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x100) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/77) 45.02µs ago: executing program 5 (id=19747): r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='secret\x00', &(0x7f0000000000)='+\xe0k\xf6A\xf0\xd2\xe2\x8e\xe6;b\xdd\v\xdf\xc8\xd9\xb5\xf62p\xd1EM\xfe\x17aS\x85\x88\x92\x8eQ\xf1\xa9\xcb\xb3\xb7R\xd4}\xacm\xf3\xd30!\xca\xed\xe2G\xc0\xb1\t\xb3A\xf2\xf8n\xbaO>+\xe89>\x96\xe6\xb9U\x8b\xde\x8e\xfdj\x02\x03m\xeb\xec/0\x9f\x93(\x95\xe2\xab\x9b\xb1\x90\xec\xd3\x8c+\xa4d\'F\xd9W\x15\x8b\xceW\x11n\x13\x02!\x87\xcb\x1d#i\x8b\xb5!\xd8x\x80\x9cA\x9f\x91\xb7>qT\x03\x93\v\xb5\x89\xfc\xf6\xc32DcAC*\xd3\xfd%UN\x01\xc1\x85\r\x18', 0x0) 0s ago: executing program 3 (id=19748): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_matches\x00') preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x2000000000000062, 0xfffff164, 0xa) kernel console output (not intermixed with test programs): : New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1461.985634][T20869] usb 5-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1462.003943][T20869] usb 5-1: Product: syz [ 1462.008176][T20869] usb 5-1: SerialNumber: syz [ 1462.060264][ T6469] udevd[6469]: incorrect cramfs checksum on /dev/loop0 [ 1462.098506][T20869] usb 5-1: config 0 descriptor?? [ 1462.238188][T11914] loop3: detected capacity change from 0 to 8192 [ 1462.308839][T11914] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1462.328601][T20869] synaptics_usb 5-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1462.341887][T20869] synaptics_usb: probe of 5-1:0.52 failed with error -5 [ 1462.420897][T11914] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1462.481615][T11930] loop5: detected capacity change from 0 to 1024 [ 1462.489849][T11914] REISERFS (device loop3): using ordered data mode [ 1462.537894][T21211] usb 5-1: USB disconnect, device number 34 [ 1462.545132][T11914] reiserfs: using flush barriers [ 1462.587327][T11914] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1462.635095][T11932] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 1462.648807][T11914] REISERFS (device loop3): checking transaction log (loop3) [ 1462.706668][T11914] REISERFS (device loop3): Using tea hash to sort names [ 1462.739150][T11934] loop5: detected capacity change from 0 to 764 [ 1463.085155][T11941] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1463.442731][T19869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1463.480343][T11955] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18075'. [ 1464.078554][T11981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18087'. [ 1464.120660][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18087'. [ 1464.181186][T11981] device ipip1 entered promiscuous mode [ 1464.313000][T11992] netlink: 14 bytes leftover after parsing attributes in process `syz.1.18092'. [ 1464.881379][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 1464.881393][ T26] audit: type=1326 audit(1787552501.383:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.5.18102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1464.914737][T12013] loop4: detected capacity change from 0 to 8 [ 1465.004572][ T26] audit: type=1326 audit(1787552501.415:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.5.18102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1465.100661][ T26] audit: type=1326 audit(1787552501.415:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.5.18102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1465.184767][ T26] audit: type=1326 audit(1787552501.415:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12009 comm="syz.5.18102" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1465.250529][T11996] loop0: detected capacity change from 0 to 32768 [ 1465.265882][T12026] loop5: detected capacity change from 0 to 256 [ 1465.290431][T11996] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1465.314455][T12026] exfat: Deprecated parameter 'namecase' [ 1465.340229][T12026] exfat: Deprecated parameter 'namecase' [ 1465.398164][T12026] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1465.439157][T12031] loop4: detected capacity change from 0 to 256 [ 1465.584634][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1465.629536][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1465.659737][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1465.683466][ T6469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1465.706723][T12039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.735829][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1465.777114][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1465.793969][T12039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.794910][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1465.801178][T12039] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.880694][T22788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1465.894756][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1465.927809][T12044] __nla_validate_parse: 3 callbacks suppressed [ 1465.927827][T12044] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18119'. [ 1465.978797][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1465.985384][T12044] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18119'. [ 1466.019634][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.055755][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.066854][T12044] device vlan0 entered promiscuous mode [ 1466.139209][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.195681][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.234277][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.280901][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.315977][T12057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18125'. [ 1466.327265][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.342122][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.351210][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.356876][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18125'. [ 1466.360321][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.377956][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.387480][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.396930][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.405812][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.414888][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.423768][T12031] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 198) [ 1466.432926][ T26] audit: type=1800 audit(1787552503.011:515): pid=12031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18112" name="file2" dev="loop4" ino=1048705 res=0 errno=0 [ 1466.477628][T12057] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18125'. [ 1466.520034][T12054] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1466.907803][T12072] loop3: detected capacity change from 0 to 4096 [ 1466.976084][T12072] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1467.040188][T12072] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1467.097459][T12072] ntfs3: loop3: no free space to extend mft [ 1467.434383][T12096] wg1 speed is unknown, defaulting to 1000 [ 1467.600658][T12104] loop4: detected capacity change from 0 to 764 [ 1467.682625][T12104] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1467.813066][T12114] loop0: detected capacity change from 0 to 8 [ 1467.825743][T12113] loop1: detected capacity change from 0 to 164 [ 1467.872109][T12113] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1467.923180][T12114] SQUASHFS error: Failed to read block 0x636: -5 [ 1467.953186][T12114] SQUASHFS error: Unable to read metadata cache entry [634] [ 1468.067510][T12119] xt_hashlimit: size too large, truncated to 1048576 [ 1468.574980][T12139] netlink: 'syz.5.18165': attribute type 13 has an invalid length. [ 1468.643327][T12141] IPv6: Can't replace route, no match found [ 1468.839230][T12150] netlink: 'syz.0.18171': attribute type 1 has an invalid length. [ 1468.869503][T12150] netlink: 'syz.0.18171': attribute type 2 has an invalid length. [ 1468.919178][T12150] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18171'. [ 1469.227264][T12162] loop1: detected capacity change from 0 to 4096 [ 1469.276826][T12162] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1f, max_cluster = 0x0 [ 1469.286264][T12168] device bridge1 entered promiscuous mode [ 1469.336427][T12174] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18182'. [ 1469.339346][T12162] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1469.433706][T12162] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1469.545039][T12180] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 1469.558045][T12162] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1469.599527][T12162] ntfs: volume version 3.1. [ 1469.768289][T12187] netlink: 'syz.5.18188': attribute type 1 has an invalid length. [ 1469.836885][T12187] netlink: 83992 bytes leftover after parsing attributes in process `syz.5.18188'. [ 1470.011295][T12196] loop3: detected capacity change from 0 to 64 [ 1470.073206][T12196] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 1470.092572][T12194] loop1: detected capacity change from 0 to 2048 [ 1470.186849][T12194] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1470.212759][ T26] audit: type=1800 audit(1787552506.979:516): pid=12194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18191" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 1470.338495][T12206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18198'. [ 1470.729045][ T14] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1470.867318][T12222] wg1 speed is unknown, defaulting to 1000 [ 1470.912790][T12198] loop5: detected capacity change from 0 to 32768 [ 1470.940960][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.956937][ T14] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1470.996742][ T14] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1471.001431][T12198] JBD2: Ignoring recovery information on journal [ 1471.020485][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.037290][ T14] usb 2-1: config 0 descriptor?? [ 1471.125336][T12198] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1471.174692][T12198] (syz.5.18195,12198,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #4097: rec_len % 4 != 0 - offset=0, inode=18446673704965378049, rec_len=255, name_len=1 [ 1471.233596][T12198] (syz.5.18195,12198,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1471.266977][T12198] (syz.5.18195,12198,0):ocfs2_mknod:298 ERROR: status = -2 [ 1471.281092][T12198] (syz.5.18195,12198,0):ocfs2_mknod:502 ERROR: status = -2 [ 1471.300772][T12198] (syz.5.18195,12198,0):ocfs2_mkdir:659 ERROR: status = -2 [ 1471.303824][T12233] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1471.358096][T12232] netlink: 'syz.4.18210': attribute type 21 has an invalid length. [ 1471.366124][T12232] netlink: 144 bytes leftover after parsing attributes in process `syz.4.18210'. [ 1471.376068][T19869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1471.449603][ T14] Bluetooth: Can't get state to change to load configuration err [ 1471.458418][ T7004] ocfs2: Unmounting device (7,5) on (node local) [ 1471.465085][ T14] Bluetooth: Loading sysconfig file failed [ 1471.473258][ T14] ath3k: probe of 2-1:0.0 failed with error -16 [ 1471.495034][ T14] usb 2-1: USB disconnect, device number 65 [ 1471.852744][T12241] loop0: detected capacity change from 0 to 64 [ 1472.121265][T12247] loop5: detected capacity change from 0 to 512 [ 1472.278696][T12247] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 1472.287209][T12235] loop4: detected capacity change from 0 to 32768 [ 1472.309337][T12247] EXT4-fs (loop5): 1 truncate cleaned up [ 1472.329419][T12254] [U] [ 1472.335849][T12235] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.18211 (12235) [ 1472.348567][T12247] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1472.428540][T12247] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1472.445848][T12235] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1472.483380][T12235] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1472.510228][T12235] BTRFS info (device loop4): using free space tree [ 1472.573478][ T7004] EXT4-fs (loop5): unmounting filesystem. [ 1472.588276][T19869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1472.721679][T12274] netlink: 14 bytes leftover after parsing attributes in process `syz.0.18227'. [ 1473.043219][ C0] vkms_vblank_simulate: vblank timer overrun [ 1473.050176][T12235] BTRFS info (device loop4): enabling ssd optimizations [ 1473.271368][T12301] xt_l2tp: wrong L2TP version: 0 [ 1473.503514][ T4716] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1473.838905][T12314] loop1: detected capacity change from 0 to 4096 [ 1473.918860][T12314] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1474.024890][T12314] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1474.129582][T12314] ntfs3: loop1: no free space to extend mft [ 1475.186683][T12327] loop0: detected capacity change from 0 to 32768 [ 1475.194039][T12327] XFS: ikeep mount option is deprecated. [ 1475.248230][T12327] XFS: ikeep mount option is deprecated. [ 1475.375074][T12327] XFS (loop0): Mounting V5 Filesystem [ 1475.467790][T12370] loop4: detected capacity change from 0 to 4096 [ 1475.588020][T12327] XFS (loop0): Ending clean mount [ 1475.635353][T12327] XFS (loop0): Quotacheck needed: Please wait. [ 1475.771411][T12327] XFS (loop0): Quotacheck: Done. [ 1475.980585][ T4704] XFS (loop0): Unmounting Filesystem [ 1476.225446][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18280'. [ 1476.272736][T12400] netlink: 'syz.5.18280': attribute type 1 has an invalid length. [ 1476.434057][T12404] device ip6gre4 entered promiscuous mode [ 1476.525500][T12386] loop1: detected capacity change from 0 to 32768 [ 1476.548592][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18284'. [ 1476.594071][T12386] o2cb: This node has not been configured. [ 1476.600918][T12386] o2cb: Cluster check failed. Fix errors before retrying. [ 1476.615408][T12386] (syz.1.18273,12386,0):ocfs2_dlm_init:3373 ERROR: status = -22 [ 1476.633452][T12386] (syz.1.18273,12386,1):ocfs2_mount_volume:1792 ERROR: status = -22 [ 1476.689926][T12386] (syz.1.18273,12386,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 1476.714348][T12414] loop4: detected capacity change from 0 to 1764 [ 1476.853842][T22788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1477.844892][T12461] device sit0 entered promiscuous mode [ 1477.870980][T12461] netlink: 'syz.4.18309': attribute type 1 has an invalid length. [ 1477.911559][T12461] netlink: 1 bytes leftover after parsing attributes in process `syz.4.18309'. [ 1478.082529][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1478.533931][T12489] netlink: 'syz.3.18323': attribute type 11 has an invalid length. [ 1478.608311][T20869] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1478.806098][T20869] usb 5-1: Using ep0 maxpacket: 32 [ 1478.834741][T20869] usb 5-1: config 2 has an invalid interface number: 157 but max is 0 [ 1478.842975][T20869] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.857014][T20869] usb 5-1: config 2 has no interface number 0 [ 1478.866751][T20869] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 1478.876435][T20869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.884844][T20869] usb 5-1: Product: syz [ 1478.889229][T20869] usb 5-1: Manufacturer: syz [ 1478.894334][T20869] usb 5-1: SerialNumber: syz [ 1478.913216][T20869] imon 5-1:2.157: unable to register, err -19 [ 1479.067564][T12503] loop1: detected capacity change from 0 to 2048 [ 1479.080080][T12503] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1479.129784][T20869] usb 5-1: USB disconnect, device number 35 [ 1479.153386][T12503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1479.760166][T12516] loop5: detected capacity change from 0 to 4096 [ 1479.833074][T12516] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt attribute. deltaxcn = 0x1f, max_cluster = 0x0 [ 1479.863413][T12516] ntfs: (device loop5): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 1479.914818][T12516] ntfs: (device loop5): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1479.922848][T12526] tipc: Trying to set illegal importance in message [ 1480.007404][T12516] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1480.072637][T12516] ntfs: volume version 3.1. [ 1480.348561][T12537] loop0: detected capacity change from 0 to 2048 [ 1480.357235][T12539] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1480.425658][T12542] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1480.480579][T12537] NILFS error (device loop0): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1480.634423][T12537] Remounting filesystem read-only [ 1480.651195][ T26] audit: type=1326 audit(1787552517.929:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.18349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1480.675365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1480.739840][ T26] audit: type=1326 audit(1787552517.929:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.18349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1480.764015][ C1] vkms_vblank_simulate: vblank timer overrun [ 1480.854294][ T26] audit: type=1326 audit(1787552517.982:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.18349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1480.878471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1481.013022][ T26] audit: type=1326 audit(1787552517.982:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.18349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1481.037292][ C1] vkms_vblank_simulate: vblank timer overrun [ 1481.073872][ T26] audit: type=1326 audit(1787552517.982:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12545 comm="syz.3.18349" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1481.098055][ C1] vkms_vblank_simulate: vblank timer overrun [ 1481.124251][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1481.427612][T12581] overlayfs: unrecognized mount option "\" or missing value [ 1481.490895][ T26] audit: type=1400 audit(1787552518.811:522): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12583 comm="syz.3.18367" [ 1481.679711][T12592] tmpfs: Bad value for 'mpol' [ 1481.733104][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1482.037372][T12607] Cannot find del_set index 0 as target [ 1482.159210][T12611] netlink: 288 bytes leftover after parsing attributes in process `syz.3.18380'. [ 1482.283016][T21216] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1482.302764][T12615] netlink: 'syz.1.18382': attribute type 10 has an invalid length. [ 1482.340560][T12615] device netdevsim0 entered promiscuous mode [ 1482.371323][T12615] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1482.501878][T21216] usb 5-1: Using ep0 maxpacket: 16 [ 1482.511020][T21216] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1482.543763][T21216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.561807][T12625] netlink: 'syz.1.18387': attribute type 12 has an invalid length. [ 1482.577999][T21216] usb 5-1: Product: syz [ 1482.589782][T21216] usb 5-1: Manufacturer: syz [ 1482.616217][T21216] usb 5-1: SerialNumber: syz [ 1482.630422][T21216] usb 5-1: config 0 descriptor?? [ 1482.665804][T21216] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1483.063784][ T7441] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1483.105223][T21216] gspca_spca508: reg_read err -71 [ 1483.112069][T21216] gspca_spca508: reg_read err -71 [ 1483.139916][T21216] gspca_spca508: reg_read err -71 [ 1483.158837][T21216] gspca_spca508: reg_read err -71 [ 1483.165291][T12647] netlink: 84 bytes leftover after parsing attributes in process `syz.5.18397'. [ 1483.168699][T21216] gspca_spca508: reg write: error -71 [ 1483.187933][T21216] spca508: probe of 5-1:0.0 failed with error -71 [ 1483.196899][T12647] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18397'. [ 1483.207759][T21216] usb 5-1: USB disconnect, device number 36 [ 1483.225557][T12647] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18397'. [ 1483.236954][ T7441] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1483.275578][ T7441] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1483.283407][T12647] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18397'. [ 1483.295180][ T7441] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1483.295226][ T7441] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1483.319873][ T7441] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.560303][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1483.577048][ T7441] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 1483.587721][ T7441] cxacru: probe of 1-1:1.0 failed with error -22 [ 1483.628052][ T7441] usb 1-1: USB disconnect, device number 52 [ 1483.791191][T12661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1484.301952][T21216] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 1484.518294][T12683] loop3: detected capacity change from 0 to 8192 [ 1484.526425][T21216] usb 6-1: config 1 interface 0 altsetting 54 endpoint 0x1 is Bulk; changing to Interrupt [ 1484.567124][T21216] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1484.596676][T21216] usb 6-1: string descriptor 0 read error: -22 [ 1484.633140][T21216] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice= 0.40 [ 1484.633578][T12683] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 1484.653084][T21216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.678896][T12672] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1484.694524][T21216] hub 6-1:1.0: bad descriptor, ignoring hub [ 1484.716425][T12683] FAT-fs (loop3): Filesystem has been set read-only [ 1484.730517][T21216] hub: probe of 6-1:1.0 failed with error -5 [ 1484.775550][T12695] binfmt_misc: register: failed to install interpreter file ./file0 [ 1485.016959][T20869] usb 6-1: USB disconnect, device number 10 [ 1485.187765][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1485.187781][ T26] audit: type=1326 audit(1787552522.696:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.3.18425" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1485.271067][ T26] audit: type=1326 audit(1787552522.706:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.3.18425" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1485.363824][ T26] audit: type=1326 audit(1787552522.748:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.3.18425" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1485.437567][ T26] audit: type=1326 audit(1787552522.759:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.3.18425" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1485.565238][ T26] audit: type=1326 audit(1787552522.759:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12701 comm="syz.3.18425" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1486.550537][T22788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1486.577869][T12711] loop3: detected capacity change from 0 to 32768 [ 1486.627585][T12711] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1486.923846][T12748] netlink: 'syz.0.18448': attribute type 21 has an invalid length. [ 1486.957899][T12741] Process accounting paused [ 1486.959948][T12748] netlink: 'syz.0.18448': attribute type 1 has an invalid length. [ 1486.984492][ T6469] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1487.064589][T12751] netlink: 'syz.5.18449': attribute type 21 has an invalid length. [ 1487.632239][ T26] audit: type=1326 audit(1787552525.268:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12768 comm="syz.4.18455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1487.750992][ T26] audit: type=1326 audit(1787552525.268:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12768 comm="syz.4.18455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1487.763744][T12773] netlink: 'syz.5.18460': attribute type 3 has an invalid length. [ 1487.845613][ T26] audit: type=1326 audit(1787552525.268:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12768 comm="syz.4.18455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1487.846759][T12773] netlink: 'syz.5.18460': attribute type 1 has an invalid length. [ 1487.935429][ T26] audit: type=1326 audit(1787552525.268:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12768 comm="syz.4.18455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1488.103213][ T26] audit: type=1326 audit(1787552525.268:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12768 comm="syz.4.18455" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1488.153216][T12785] misc userio: Invalid payload size [ 1488.436248][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1488.613747][T12805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18475'. [ 1488.853576][T12812] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1489.015658][T12820] xt_cluster: node mask cannot exceed total number of nodes [ 1489.426694][T12832] loop4: detected capacity change from 0 to 256 [ 1489.530530][T12815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.539760][T12815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.554712][T12834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18489'. [ 1490.172287][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.221195][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.502527][T12815] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.511714][T12815] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.520847][T12815] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.530385][T12815] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.807626][ T4715] Bluetooth: hci0: command 0x0c1a tx timeout [ 1490.817789][T12853] netlink: 'syz.3.18499': attribute type 10 has an invalid length. [ 1490.866941][T12853] device vlan0 left promiscuous mode [ 1490.887486][T12856] libceph: resolve 'cÏœ†ñ' (ret=-3): failed [ 1490.914395][T12853] team0: Port device vlan0 added [ 1491.121555][T12867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18505'. [ 1491.220619][T12873] netlink: 'syz.5.18508': attribute type 1 has an invalid length. [ 1491.515177][T12886] overlayfs: missing 'workdir' [ 1491.538822][T12889] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18516'. [ 1491.952973][T12908] loop3: detected capacity change from 0 to 64 [ 1491.967678][T12910] loop1: detected capacity change from 0 to 512 [ 1492.074043][T12910] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1492.092931][T12912] netlink: 40 bytes leftover after parsing attributes in process `syz.5.18529'. [ 1492.103719][ T7270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1492.173659][T12910] __quota_error: 5 callbacks suppressed [ 1492.173676][T12910] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 1492.189495][T12910] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1492.198953][T12910] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.18523: Failed to acquire dquot type 1 [ 1492.218971][T12910] EXT4-fs (loop1): 1 truncate cleaned up [ 1492.232411][T12910] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1492.295776][ T4703] EXT4-fs (loop1): unmounting filesystem. [ 1492.504418][T12928] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.568269][T12933] loop4: detected capacity change from 0 to 64 [ 1493.284241][T12964] netlink: 'syz.1.18551': attribute type 21 has an invalid length. [ 1493.313953][ T9563] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1493.434383][ T26] audit: type=1326 audit(1787552531.357:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.18555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1493.541813][ T26] audit: type=1326 audit(1787552531.399:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.18555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1493.598667][ T26] audit: type=1326 audit(1787552531.399:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.18555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1493.704089][T12941] loop3: detected capacity change from 0 to 32768 [ 1493.711915][T12941] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 1493.722917][ T26] audit: type=1326 audit(1787552531.399:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.18555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1493.772083][T12982] netlink: 193 bytes leftover after parsing attributes in process `syz.4.18560'. [ 1493.808342][ T6469] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1493.827674][ T26] audit: type=1326 audit(1787552531.399:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.18555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1493.951369][ T26] audit: type=1326 audit(1787552531.399:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.18555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1494.064504][ T26] audit: type=1326 audit(1787552531.399:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.18555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1494.179830][ T26] audit: type=1326 audit(1787552531.399:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12970 comm="syz.0.18555" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1494.561035][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18573'. [ 1495.174058][T13032] nvme_rdma: malformed address passed: 172.20.20.24:+ [ 1495.338033][T13044] netlink: 'syz.1.18589': attribute type 1 has an invalid length. [ 1495.360987][T20879] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1495.553213][T20879] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1495.590444][T20879] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1495.630560][T20879] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1495.655837][T20879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1495.708030][T13036] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1495.961053][T21216] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1495.999869][T20869] usb 1-1: USB disconnect, device number 53 [ 1496.180671][T21216] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 1496.189065][T21216] usb 2-1: config 160 has no interface number 0 [ 1496.213302][T21216] usb 2-1: config 160 interface 200 has no altsetting 0 [ 1496.237928][T21216] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1496.260373][T21216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1496.284826][T21216] usb 2-1: Product: syz [ 1496.294335][T21216] usb 2-1: Manufacturer: syz [ 1496.309077][T21216] usb 2-1: SerialNumber: syz [ 1496.523266][T21216] usb 2-1: MIDIStreaming interface descriptor not found [ 1496.609756][T21216] usb 2-1: USB disconnect, device number 66 [ 1496.671992][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18609'. [ 1496.724718][T13088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18609'. [ 1496.757854][T13088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18609'. [ 1497.091089][ T4944] udevd[4944]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1497.298687][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18622'. [ 1497.336878][T13113] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 1497.592493][T22788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1497.610650][T13131] loop4: detected capacity change from 0 to 256 [ 1497.698296][T13131] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc0f8f355, utbl_chksum : 0xe619d30d) [ 1497.849139][T13131] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1497.884870][T13131] exFAT-fs (loop4): Filesystem has been set read-only [ 1498.124408][T19869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1498.167902][T13151] loop1: detected capacity change from 0 to 256 [ 1498.237281][T20869] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1498.418679][T20869] usb 4-1: Using ep0 maxpacket: 16 [ 1498.438112][T20869] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=81.0c [ 1498.475352][T20869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.500130][T20869] usb 4-1: Product: syz [ 1498.519225][T20869] usb 4-1: Manufacturer: syz [ 1498.532194][T20869] usb 4-1: SerialNumber: syz [ 1498.590219][T20869] r8152-cfgselector 4-1: config 0 descriptor?? [ 1498.608272][T13140] loop5: detected capacity change from 0 to 32768 [ 1498.639667][T13165] netlink: 'syz.4.18647': attribute type 21 has an invalid length. [ 1498.708346][T13140] read_mapping_page failed! [ 1498.744184][T13140] ERROR: (device loop5): txCommit: [ 1498.744184][T13140] [ 1498.784460][T13167] loop0: detected capacity change from 0 to 256 [ 1498.801167][T20869] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 1498.860030][T13167] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1499.007642][T20879] usb 4-1: USB disconnect, device number 47 [ 1499.098170][T13176] loop1: detected capacity change from 0 to 164 [ 1499.346462][T13185] Invalid ELF header magic: != ELF [ 1499.534709][T13195] netlink: 72 bytes leftover after parsing attributes in process `syz.1.18662'. [ 1499.558831][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18662'. [ 1499.675864][ T7441] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1499.866305][ T7441] usb 5-1: Using ep0 maxpacket: 8 [ 1499.873895][ T7441] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 1499.901285][ T7441] usb 5-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 1499.918233][ T7441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.980564][ T7441] usb 5-1: Product: syz [ 1499.984784][ T7441] usb 5-1: Manufacturer: syz [ 1499.989396][ T7441] usb 5-1: SerialNumber: syz [ 1500.440930][ T7441] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1500.441441][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1500.441454][ T26] audit: type=1326 audit(1787552538.716:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.3.18680" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1500.458902][ T7441] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1500.557338][T13235] loop5: detected capacity change from 0 to 16 [ 1500.581835][ T26] audit: type=1326 audit(1787552538.769:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.3.18680" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1500.605214][ T7441] usb 5-1: USB disconnect, device number 37 [ 1500.616808][T13235] erofs: (device loop5): mounted with root inode @ nid 36. [ 1500.679666][T13235] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1500.731873][ T26] audit: type=1326 audit(1787552538.769:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.3.18680" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1500.798047][T13235] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -37 in[64, 4032] out[1851] [ 1500.828086][ T26] audit: type=1326 audit(1787552538.769:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13230 comm="syz.3.18680" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1500.855828][T13235] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 1502.033090][T13282] Error parsing options; rc = [-22] [ 1502.316344][T13294] loop4: detected capacity change from 0 to 128 [ 1502.421378][T13302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18714'. [ 1502.545412][T13305] netlink: 'syz.4.18715': attribute type 1 has an invalid length. [ 1502.605809][T13305] netlink: 216 bytes leftover after parsing attributes in process `syz.4.18715'. [ 1502.625269][T13309] loop1: detected capacity change from 0 to 764 [ 1502.656948][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18715'. [ 1502.714652][T13309] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 1503.076614][T22788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1503.098115][T13329] binder: 13328:13329 ioctl c018620c 200000000340 returned -1 [ 1503.207547][T13335] I/O error, dev loop3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 1503.445051][T13341] loop1: detected capacity change from 0 to 4096 [ 1503.475680][T13341] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1503.634141][T13341] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 1503.677288][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1503.768221][T13355] netlink: 'syz.0.18739': attribute type 46 has an invalid length. [ 1503.808411][T22788] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 1503.826141][ T4703] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 1503.838179][ T4703] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1503.884161][ T4703] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 1503.906822][ T7270] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 1503.913475][ T4703] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 1503.924485][ T4703] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 1504.210516][T13371] netlink: 'syz.5.18748': attribute type 32 has an invalid length. [ 1504.520086][T13385] loop1: detected capacity change from 0 to 256 [ 1504.576057][T13385] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc0f8f355, utbl_chksum : 0xe619d30d) [ 1504.669385][T13385] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1504.734021][T13385] exFAT-fs (loop1): Filesystem has been set read-only [ 1505.012428][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18762'. [ 1505.288624][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18770'. [ 1505.816515][T13441] loop3: detected capacity change from 0 to 16 [ 1505.881858][T13441] erofs: (device loop3): mounted with root inode @ nid 36. [ 1506.450176][T13468] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18795'. [ 1506.462027][T13472] xt_ecn: cannot match TCP bits for non-tcp packets [ 1506.483334][T13474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18799'. [ 1506.647118][T13476] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 1506.695900][T13476] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 1506.716088][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18803'. [ 1506.724551][T13476] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 1506.781233][T13476] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 1506.998206][T13494] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1507.191070][T20879] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1507.381850][T20879] usb 6-1: Using ep0 maxpacket: 16 [ 1507.390195][T20879] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.435545][T20879] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1507.460597][T20879] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1507.499455][T20879] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.518514][T20879] usb 6-1: Product: syz [ 1507.529687][T20879] usb 6-1: Manufacturer: syz [ 1507.539398][T20879] usb 6-1: SerialNumber: syz [ 1507.551067][T20879] r8152-cfgselector 6-1: config 0 descriptor?? [ 1507.590849][ T7441] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 1507.765262][T20879] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 1507.783532][ T7441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 1507.814661][ T7441] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 1507.847141][ T7441] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1507.867314][ T7441] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.885528][ T7441] usb 5-1: Product: syz [ 1507.895639][ T7441] usb 5-1: Manufacturer: syz [ 1507.918322][ T7441] usb 5-1: SerialNumber: syz [ 1507.938755][ T7441] usb 5-1: config 0 descriptor?? [ 1507.958054][ T7441] hub 5-1:0.0: bad descriptor, ignoring hub [ 1507.986606][ T7441] hub: probe of 5-1:0.0 failed with error -5 [ 1508.016727][ T7441] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input112 [ 1508.031728][T13527] libceph: resolve '0' (ret=-3): failed [ 1508.039213][T20879] usb 6-1: USB disconnect, device number 11 [ 1508.097819][T13514] loop1: detected capacity change from 0 to 32768 [ 1508.242880][T13514] XFS (loop1): Mounting V5 Filesystem [ 1508.298612][T13514] XFS (loop1): Ending clean mount [ 1508.408082][ T4703] XFS (loop1): Unmounting Filesystem [ 1508.422165][T21216] usb 5-1: USB disconnect, device number 38 [ 1508.486201][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.493477][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.556477][ T46] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1508.805017][T13543] loop5: detected capacity change from 0 to 1024 [ 1508.945149][T13543] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1509.010358][T13543] EXT4-fs error (device loop5): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.5.18829: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1509.071751][T13543] EXT4-fs error (device loop5) in ext4_delete_entry:2800: Corrupt filesystem [ 1509.115192][T13543] EXT4-fs warning (device loop5): ext4_rename_delete:3778: inode #2: comm syz.5.18829: Deleting old file: nlink 1, error=-117 [ 1509.276282][ T7004] EXT4-fs (loop5): unmounting filesystem. [ 1509.466049][T13525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.795239][T13525] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.805215][T13525] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.814389][T13525] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.823588][T13525] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.195550][T13566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1510.243546][T13566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1510.278586][T13566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1510.301224][T13566] 8021q: adding VLAN 0 to HW filter on device team0 [ 1510.313341][T13566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1510.842228][T13592] loop3: detected capacity change from 0 to 4096 [ 1510.876858][T13597] loop1: detected capacity change from 0 to 256 [ 1510.947657][T13592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1511.073011][ T4709] EXT4-fs (loop3): unmounting filesystem. [ 1511.205741][T13604] loop0: detected capacity change from 0 to 2048 [ 1511.275927][T13604] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1511.279105][T13606] netlink: 'syz.1.18858': attribute type 1 has an invalid length. [ 1511.464220][T13590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1511.471471][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1511.826772][T13623] loop3: detected capacity change from 0 to 64 [ 1512.162876][T13629] loop3: detected capacity change from 0 to 64 [ 1512.210082][T13629] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1512.310711][T13590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.387525][T13590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.677324][T13590] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.686830][T13590] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.695811][T13590] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.705079][T13590] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.774451][T13590] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1512.783618][T13590] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1512.792643][T13590] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1512.802042][T13590] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1512.944299][T20868] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1513.134629][T20868] usb 1-1: Using ep0 maxpacket: 32 [ 1513.141677][T20868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1513.157553][T20868] usb 1-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=c5.b6 [ 1513.172775][T20868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.181000][T20868] usb 1-1: Product: syz [ 1513.188164][T20868] usb 1-1: Manufacturer: syz [ 1513.193267][T20868] usb 1-1: SerialNumber: syz [ 1513.199820][T20868] usb 1-1: config 0 descriptor?? [ 1513.415774][T20868] usb 1-1: USB disconnect, device number 54 [ 1514.345559][T13682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18894'. [ 1514.385125][T13682] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18894'. [ 1514.960518][T13710] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1515.565782][T13742] loop4: detected capacity change from 0 to 64 [ 1515.740684][T13741] loop1: detected capacity change from 0 to 4096 [ 1515.748441][T13742] Process accounting resumed [ 1515.910352][T13750] tc_dump_action: action bad kind [ 1515.972148][T13756] loop3: detected capacity change from 0 to 16 [ 1515.998615][T13756] erofs: (device loop3): mounted with root inode @ nid 36. [ 1516.107887][T13758] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18931'. [ 1516.201292][T13758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18931'. [ 1516.375548][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18936'. [ 1516.387936][ T26] audit: type=1326 audit(1787552555.451:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.1.18937" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1516.445387][ T26] audit: type=1326 audit(1787552555.493:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.1.18937" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1516.491562][T21211] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1516.520977][ T26] audit: type=1326 audit(1787552555.493:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.1.18937" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1516.589297][ T26] audit: type=1326 audit(1787552555.493:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13769 comm="syz.1.18937" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1516.718345][T21211] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1516.737309][T21211] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.759314][T21211] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 1516.807060][T21211] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 1516.834961][T21211] usb 6-1: string descriptor 0 read error: -22 [ 1516.849545][T21211] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1516.899290][T21211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.923304][T13786] program syz.0.18944 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1516.949072][T13764] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1516.992658][T13764] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1517.197621][T13798] loop1: detected capacity change from 0 to 16 [ 1517.245088][T13798] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1517.328283][T13798] cramfs: Error -3 while decompressing! [ 1517.330079][T20868] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1517.335058][T13798] cramfs: ffffffff96da4248(27)->ffff88804bfa3000(4096) [ 1517.352974][T21217] usb 6-1: USB disconnect, device number 12 [ 1517.364626][T13798] cramfs: Error -3 while decompressing! [ 1517.373548][T13798] cramfs: ffffffff96da4248(27)->ffff88804bfa3000(4096) [ 1517.385886][ T26] audit: type=1800 audit(1787552556.501:555): pid=13798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.18950" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1517.532836][T20868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1517.573534][T20868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1517.593138][T20868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1517.629559][T20868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1517.658548][T20868] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1517.683942][T20868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.713270][T20868] usb 4-1: config 0 descriptor?? [ 1517.830567][T13818] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 1517.897388][T13818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1517.926261][T20868] hdpvr 4-1:0.0: firmware version 0x8 dated [ 1517.969163][T13822] lo speed is unknown, defaulting to 1000 [ 1518.011553][T13822] lo speed is unknown, defaulting to 1000 [ 1518.019766][T13824] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18963'. [ 1518.035926][T13822] lo speed is unknown, defaulting to 1000 [ 1518.134239][T20868] hdpvr 4-1:0.0: device init failed [ 1518.140841][T20868] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1518.173689][T20868] usb 4-1: USB disconnect, device number 48 [ 1518.243930][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18967'. [ 1518.290440][T13833] IPv6: sit4: Disabled Multicast RS [ 1518.344022][T13822] infiniband syz1: set active [ 1518.349722][T21211] lo speed is unknown, defaulting to 1000 [ 1518.364046][T13822] infiniband syz1: added lo [ 1518.522963][T13822] RDS/IB: syz1: added [ 1518.593168][T13822] smc: adding ib device syz1 with port count 1 [ 1518.610330][T13822] smc: ib device syz1 port 1 has pnetid [ 1518.638815][T20868] lo speed is unknown, defaulting to 1000 [ 1518.650971][T13822] lo speed is unknown, defaulting to 1000 [ 1518.916324][T20868] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1519.003914][T13822] lo speed is unknown, defaulting to 1000 [ 1519.109481][T20868] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1519.143386][T20868] usb 2-1: config 0 has no interface number 0 [ 1519.169768][T20868] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1519.200995][T20868] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1519.229470][T20868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1519.248880][T13822] lo speed is unknown, defaulting to 1000 [ 1519.256889][T20868] usb 2-1: Product: syz [ 1519.264520][T13866] loop4: detected capacity change from 0 to 4096 [ 1519.280919][T20868] usb 2-1: Manufacturer: syz [ 1519.290671][T20868] usb 2-1: SerialNumber: syz [ 1519.315880][T20868] usb 2-1: config 0 descriptor?? [ 1519.332039][T13866] ntfs: volume version 3.1. [ 1519.359991][T13866] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1519.390029][T13866] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1519.402770][T13866] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 1519.434445][T13866] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 1519.503623][T13866] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 1519.505838][T13822] lo speed is unknown, defaulting to 1000 [ 1519.522482][T20868] CoreChips: probe of 2-1:0.41 failed with error -71 [ 1519.549809][T20868] usb 2-1: USB disconnect, device number 67 [ 1519.809376][T13822] lo speed is unknown, defaulting to 1000 [ 1520.002424][T20875] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1520.069351][T13885] netlink: 'syz.4.18993': attribute type 29 has an invalid length. [ 1520.109311][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18993'. [ 1520.126612][T13885] netlink: 'syz.4.18993': attribute type 29 has an invalid length. [ 1520.147164][T13885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18993'. [ 1520.204340][T20875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1520.234440][T20875] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1520.275502][T20875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.366152][T13895] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 1520.377890][T13898] netlink: 'syz.5.18997': attribute type 32 has an invalid length. [ 1520.727032][T20875] qmi_wwan: probe of 4-1:1.0 failed with error -22 [ 1520.760970][T20875] usb 4-1: USB disconnect, device number 49 [ 1520.841064][T13916] loop4: detected capacity change from 0 to 64 [ 1520.860234][T20868] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1520.903450][T13918] dlm: no locking on control device [ 1521.062938][T20868] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1521.092923][T20868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.116649][T20868] usb 2-1: Product: syz [ 1521.131126][T20868] usb 2-1: Manufacturer: syz [ 1521.145165][T20868] usb 2-1: SerialNumber: syz [ 1521.175885][T20868] usb 2-1: config 0 descriptor?? [ 1521.189074][T20868] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1521.569750][T20868] gspca_sunplus: reg_w_riv err -71 [ 1521.575140][T20868] sunplus: probe of 2-1:0.0 failed with error -71 [ 1521.604001][T20868] usb 2-1: USB disconnect, device number 68 [ 1521.645692][T13945] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 1521.679511][T13945] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 1522.203846][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 1522.203861][ T26] audit: type=1326 audit(1787552561.561:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13973 comm="syz.1.19036" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1522.295834][ T26] audit: type=1326 audit(1787552561.593:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13973 comm="syz.1.19036" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1522.407690][ T26] audit: type=1326 audit(1787552561.593:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13973 comm="syz.1.19036" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1522.511563][ T26] audit: type=1326 audit(1787552561.593:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13973 comm="syz.1.19036" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1522.670364][ T26] audit: type=1326 audit(1787552561.593:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13973 comm="syz.1.19036" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58a1d9e0d9 code=0x7ffc0000 [ 1522.785590][T13996] netlink: 'syz.5.19048': attribute type 27 has an invalid length. [ 1523.046136][T14008] loop5: detected capacity change from 0 to 512 [ 1523.079299][ T7740] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1523.273058][ T7740] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1523.296415][ T7740] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1523.332002][ T7740] usb 2-1: Product: syz [ 1523.358264][ T7740] usb 2-1: Manufacturer: syz [ 1523.363270][ T7740] usb 2-1: SerialNumber: syz [ 1523.400901][ T7740] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1523.593483][T21211] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1523.794030][ T7740] vp7045: USB control message 'in' went wrong. [ 1523.795257][T21211] usb 4-1: config 0 has an invalid interface number: 237 but max is 0 [ 1523.800215][ T7740] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1523.818299][T21211] usb 4-1: config 0 has no interface number 0 [ 1523.836589][T21211] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1523.863430][T21211] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1523.863791][ T7740] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1523.876759][T21211] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1523.913309][ T7740] usb 2-1: USB disconnect, device number 69 [ 1523.931520][T21217] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1523.973434][T21211] usb 4-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1524.004258][T21211] usb 4-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 1524.022159][T21211] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 1524.030289][T21211] usb 4-1: Product: syz [ 1524.035467][T21211] usb 4-1: Manufacturer: syz [ 1524.040093][T21211] usb 4-1: SerialNumber: syz [ 1524.057294][T21211] usb 4-1: config 0 descriptor?? [ 1524.066056][T21211] xpad: probe of 4-1:0.237 failed with error -5 [ 1524.073446][T14048] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 1524.088843][T14048] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 1524.138139][T21217] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1524.152713][T21217] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1524.171922][T21217] usb 6-1: config 0 has an invalid descriptor of length 191, skipping remainder of the config [ 1524.212405][T21217] usb 6-1: config 0 has no interface number 0 [ 1524.241964][T21217] usb 6-1: New USB device found, idVendor=006d, idProduct=0800, bcdDevice= b.28 [ 1524.278046][T21217] usb 6-1: New USB device strings: Mfr=1, Product=26, SerialNumber=3 [ 1524.293934][T21217] usb 6-1: Product: syz [ 1524.321874][T21217] usb 6-1: Manufacturer: syz [ 1524.329710][T21217] usb 6-1: SerialNumber: syz [ 1524.357124][T21217] usb 6-1: config 0 descriptor?? [ 1524.395266][T21211] usb 4-1: USB disconnect, device number 50 [ 1524.410539][T21217] usb 6-1: Found UVC 0.00 device syz (006d:0800) [ 1524.434773][T21217] usb 6-1: No valid video chain found. [ 1524.602802][T14062] netlink: 248 bytes leftover after parsing attributes in process `syz.4.19080'. [ 1524.613298][T14064] loop1: detected capacity change from 0 to 512 [ 1524.653860][ T7740] usb 6-1: USB disconnect, device number 13 [ 1524.660753][T14064] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 1524.668879][T14064] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.19081: inode #15: comm syz.1.19081: iget: illegal inode # [ 1524.727817][T14064] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.19081: couldn't read orphan inode 15 (err -117) [ 1524.740356][T14070] loop4: detected capacity change from 0 to 512 [ 1524.790490][T14070] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1524.796919][T14074] comedi comedi1: pcl816: I/O port conflict (0x100,16) [ 1524.813062][T14070] ext4 filesystem being mounted at /3883/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1524.833516][T14064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1524.888352][T14064] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1525.001066][ T4716] EXT4-fs (loop4): unmounting filesystem. [ 1525.001808][ T4703] EXT4-fs (loop1): unmounting filesystem. [ 1525.222153][T14085] delete_channel: no stack [ 1525.431773][T21212] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1525.465883][T14094] netlink: 'syz.3.19094': attribute type 3 has an invalid length. [ 1525.503716][T14094] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.19094'. [ 1525.622421][T21212] usb 2-1: Using ep0 maxpacket: 8 [ 1525.644378][T21212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1525.671880][T21212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1525.700874][T21212] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1525.723351][T21212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1525.750382][T21212] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1525.783701][T21212] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1525.811218][T21212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1525.829404][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19102'. [ 1525.833581][T21212] usb 2-1: config 0 descriptor?? [ 1525.844650][T14080] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1526.008155][T14116] netlink: 212 bytes leftover after parsing attributes in process `syz.5.19104'. [ 1526.145870][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 1526.156428][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.163781][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.171855][T21211] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1526.179795][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.186959][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.193930][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.200782][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.208229][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.215115][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.222302][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.229180][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.236767][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.243700][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.250919][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.257800][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.267343][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.274282][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.281623][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.288535][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.295392][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.302309][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.309216][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.316072][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.323022][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.329923][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.336810][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.343683][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.350616][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.357498][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.364445][ T7007] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 1526.408370][ T7740] usb 2-1: USB disconnect, device number 70 [ 1526.411870][ T4715] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1526.564924][T21211] usb 5-1: Using ep0 maxpacket: 8 [ 1526.571539][T21211] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1526.632846][T21211] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1526.662707][T21211] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1526.677709][T21211] usb 5-1: Product: syz [ 1526.682253][T21211] usb 5-1: Manufacturer: syz [ 1526.686869][T21211] usb 5-1: SerialNumber: syz [ 1526.850934][ T26] audit: type=1326 audit(1787552566.443:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.3.19119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1526.926423][T21211] usb 5-1: Handspring Visor / Palm OS: No valid connect info available [ 1526.947418][ T26] audit: type=1326 audit(1787552566.464:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.3.19119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1526.987142][T21211] usb 5-1: Handspring Visor / Palm OS: port 2, is for unknown use [ 1526.995644][T21211] usb 5-1: Handspring Visor / Palm OS: port 11, is for unknown use [ 1527.006090][T21211] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1527.013306][ T26] audit: type=1326 audit(1787552566.475:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.3.19119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1527.044234][ T26] audit: type=1326 audit(1787552566.475:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.3.19119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1527.104085][ T26] audit: type=1326 audit(1787552566.475:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14143 comm="syz.3.19119" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1527.133737][T21211] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 1527.183904][T21211] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1527.211904][T21211] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1527.260843][T21211] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1527.280958][T21211] usb 5-1: USB disconnect, device number 39 [ 1527.308636][T21211] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1527.341501][T14158] IPv6: NLM_F_CREATE should be specified when creating new route [ 1527.348506][T21211] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1527.372974][T21211] visor 5-1:1.0: device disconnected [ 1527.523955][T14165] loop1: detected capacity change from 0 to 8 [ 1528.215044][T14193] netlink: 392 bytes leftover after parsing attributes in process `syz.4.19143'. [ 1528.311447][T14156] loop0: detected capacity change from 0 to 40427 [ 1528.349972][T14156] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 1528.380961][T14156] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1528.417941][T14156] F2FS-fs (loop0): invalid crc value [ 1528.499951][T14156] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1528.615014][T14209] loop5: detected capacity change from 0 to 512 [ 1528.643424][T14156] F2FS-fs (loop0): recover fsync data on readonly fs [ 1528.749235][T14156] F2FS-fs (loop0): Try to recover 1th superblock, ret: -30 [ 1528.757134][T14209] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1528.809707][T14156] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1528.838609][T14209] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #11: comm syz.5.19150: corrupted inode contents [ 1528.862491][T14221] loop3: detected capacity change from 0 to 512 [ 1528.889749][T14221] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1528.899269][T14209] EXT4-fs error (device loop5): ext4_dirty_inode:6156: inode #11: comm syz.5.19150: mark_inode_dirty error [ 1528.925975][T14209] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.19150: invalid indirect mapped block 1 (level 1) [ 1528.958275][T14221] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.19153: inode has both inline data and extents flags [ 1528.969242][T14212] loop4: detected capacity change from 0 to 4096 [ 1528.978336][T14209] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #11: comm syz.5.19150: corrupted inode contents [ 1529.016161][T14209] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1529.035762][T14212] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1529.053298][T14221] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.19153: couldn't read orphan inode 15 (err -117) [ 1529.057985][T14209] EXT4-fs error (device loop5): ext4_do_update_inode:5279: inode #11: comm syz.5.19150: corrupted inode contents [ 1529.095654][T14156] F2FS-fs (loop0): Corrupted max_depth of 3: 255 [ 1529.111350][T14212] ntfs3: loop4: Failed to load $MFT. [ 1529.123330][T14209] EXT4-fs error (device loop5): ext4_truncate:4325: inode #11: comm syz.5.19150: mark_inode_dirty error [ 1529.126332][T14221] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1529.175733][T14156] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1529.185846][T14209] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1529.242158][T14209] EXT4-fs (loop5): 1 truncate cleaned up [ 1529.262697][T14209] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1529.363243][T14209] EXT4-fs error (device loop5): ext4_lookup:1858: inode #12: comm syz.5.19150: iget: bogus i_mode (3355) [ 1529.441674][ T4709] EXT4-fs (loop3): unmounting filesystem. [ 1529.604610][ T7004] EXT4-fs (loop5): unmounting filesystem. [ 1529.638275][T14234] loop3: detected capacity change from 0 to 1024 [ 1530.278221][T14258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19173'. [ 1530.567523][T14273] device wlan0 left promiscuous mode [ 1530.572974][T14273] netlink: 10 bytes leftover after parsing attributes in process `syz.4.19180'. [ 1530.631794][T14273] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1530.793760][T14285] loop3: detected capacity change from 0 to 256 [ 1530.935745][T14285] FAT-fs (loop3): Directory bread(block 64) failed [ 1530.975281][T14285] FAT-fs (loop3): Directory bread(block 65) failed [ 1530.981991][T14285] FAT-fs (loop3): Directory bread(block 66) failed [ 1531.027814][T14285] FAT-fs (loop3): Directory bread(block 67) failed [ 1531.042682][T14285] FAT-fs (loop3): Directory bread(block 68) failed [ 1531.049265][T14285] FAT-fs (loop3): Directory bread(block 69) failed [ 1531.070648][T14285] FAT-fs (loop3): Directory bread(block 70) failed [ 1531.078578][ T26] audit: type=1326 audit(1787552570.873:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14294 comm="syz.4.19191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1531.147711][T14285] FAT-fs (loop3): Directory bread(block 71) failed [ 1531.154384][T14285] FAT-fs (loop3): Directory bread(block 72) failed [ 1531.190931][T14285] FAT-fs (loop3): Directory bread(block 73) failed [ 1531.200803][ T26] audit: type=1326 audit(1787552570.926:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14294 comm="syz.4.19191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1531.291789][T14302] loop1: detected capacity change from 0 to 512 [ 1531.319717][T14302] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1531.347005][ T26] audit: type=1326 audit(1787552570.926:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14294 comm="syz.4.19191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1531.371196][ C1] vkms_vblank_simulate: vblank timer overrun [ 1531.448140][T14302] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.19194: inode has both inline data and extents flags [ 1531.557227][T14302] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.19194: couldn't read orphan inode 15 (err -117) [ 1531.584980][T14302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1531.603397][T14313] rdma_rxe: rxe_register_device failed with error -23 [ 1531.623568][ T26] audit: type=1326 audit(1787552570.926:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14294 comm="syz.4.19191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1531.659214][T14313] rdma_rxe: failed to add lo [ 1531.727742][ T26] audit: type=1326 audit(1787552570.926:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14294 comm="syz.4.19191" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d579e0d9 code=0x7ffc0000 [ 1531.793465][T14287] loop0: detected capacity change from 0 to 32768 [ 1531.831981][ T4703] EXT4-fs (loop1): unmounting filesystem. [ 1531.875767][T14321] usb usb7: usbfs: process 14321 (syz.5.19200) did not claim interface 0 before use [ 1532.013018][T14287] XFS (loop0): Mounting V5 Filesystem [ 1532.124092][T14287] XFS (loop0): Ending clean mount [ 1532.325700][ T4704] XFS (loop0): Unmounting Filesystem [ 1532.355443][T14344] loop1: detected capacity change from 0 to 1764 [ 1532.519109][T14344] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1532.641075][ C1] vkms_vblank_simulate: vblank timer overrun [ 1532.708927][T20868] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1532.722948][T14357] loop4: detected capacity change from 0 to 1024 [ 1532.872496][T19869] hfsplus: b-tree write err: -5, ino 25 [ 1532.878447][T19869] hfsplus: b-tree write err: -5, ino 4 [ 1532.898313][T19869] hfsplus: b-tree write err: -5, ino 2 [ 1532.904204][T20868] usb 6-1: Using ep0 maxpacket: 32 [ 1532.911455][T20868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1532.972689][T20868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.008149][T14365] loop4: detected capacity change from 0 to 64 [ 1533.009403][T20868] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1533.052933][T20868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.081290][T20868] usb 6-1: config 0 descriptor?? [ 1533.108273][T20868] hub 6-1:0.0: USB hub found [ 1533.295050][T20868] hub 6-1:0.0: 26 ports detected [ 1533.303446][T20868] hub 6-1:0.0: insufficient power available to use all downstream ports [ 1533.492388][T20868] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1533.509197][T20868] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1533.522129][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19229'. [ 1533.538450][T20868] usbhid 6-1:0.0: can't add hid device: -71 [ 1533.544516][T20868] usbhid: probe of 6-1:0.0 failed with error -71 [ 1533.565948][T14383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19229'. [ 1533.617915][T20868] usb 6-1: USB disconnect, device number 14 [ 1533.720833][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19232'. [ 1533.877239][T14394] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1533.941096][T14374] loop1: detected capacity change from 0 to 32768 [ 1533.985767][T14374] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1534.254291][T14409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19241'. [ 1534.269673][ T6469] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 1534.657880][T14419] ieee802154 phy1 wpan1: encryption failed: -90 [ 1534.687893][T14421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1534.845219][T14401] loop4: detected capacity change from 0 to 32768 [ 1534.882852][T14401] JBD2: Ignoring recovery information on journal [ 1534.924383][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19252'. [ 1534.943695][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19251'. [ 1534.969534][T14401] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 1534.989368][T14434] loop3: detected capacity change from 0 to 256 [ 1535.015969][T14435] netlink: 'syz.5.19250': attribute type 2 has an invalid length. [ 1535.025497][T14401] ocfs2: Unmounting device (7,4) on (node local) [ 1535.062261][T14435] netlink: 119 bytes leftover after parsing attributes in process `syz.5.19250'. [ 1535.646246][T14455] loop3: detected capacity change from 0 to 512 [ 1535.777604][T14459] loop1: detected capacity change from 0 to 512 [ 1535.906236][T14459] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1535.915816][T14459] ext4 filesystem being mounted at /3682/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1535.996512][T14459] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1536.244325][ T4703] EXT4-fs (loop1): unmounting filesystem. [ 1536.408333][T14488] loop1: detected capacity change from 0 to 256 [ 1536.470265][T14488] exfat: Deprecated parameter 'utf8' [ 1536.505520][T14488] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1536.756401][T14501] loop3: detected capacity change from 0 to 8 [ 1536.776914][T14501] squashfs image failed sanity check [ 1537.032885][T21211] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1537.219212][T14524] loop1: detected capacity change from 0 to 512 [ 1537.243138][T21211] usb 6-1: Using ep0 maxpacket: 8 [ 1537.249784][T21211] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1537.251839][T14524] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 1537.301718][T21211] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 1537.369819][T21211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.390115][T21211] usb 6-1: Product: syz [ 1537.394349][T21211] usb 6-1: Manufacturer: syz [ 1537.396329][T14524] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.19296: corrupted inode contents [ 1537.414166][T21211] usb 6-1: SerialNumber: syz [ 1537.436329][T21211] usb 6-1: config 0 descriptor?? [ 1537.476755][T21211] cdc_phonet 6-1:0.0: skipping garbage [ 1537.480503][T14524] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #11: comm syz.1.19296: mark_inode_dirty error [ 1537.490049][T21211] cdc_phonet: probe of 6-1:0.0 failed with error -22 [ 1537.517564][T14524] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.19296: invalid indirect mapped block 1 (level 1) [ 1537.557427][T14524] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.19296: corrupted inode contents [ 1537.563409][T14533] loop3: detected capacity change from 0 to 2048 [ 1537.577649][T14524] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 1537.613745][T14524] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #11: comm syz.1.19296: corrupted inode contents [ 1537.620939][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19301'. [ 1537.646329][T14533] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1537.652674][T14524] EXT4-fs error (device loop1): ext4_truncate:4325: inode #11: comm syz.1.19296: mark_inode_dirty error [ 1537.667394][T21211] usb 6-1: USB disconnect, device number 15 [ 1537.687151][T14524] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 1537.766945][T14524] EXT4-fs (loop1): 1 truncate cleaned up [ 1537.772858][T14524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1537.938161][T14524] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.19296: iget: bogus i_mode (3355) [ 1537.985903][T14545] netlink: 'syz.3.19306': attribute type 12 has an invalid length. [ 1537.994794][T14541] loop4: detected capacity change from 0 to 4096 [ 1538.042093][T14541] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1538.043907][ T4703] EXT4-fs (loop1): unmounting filesystem. [ 1538.219087][T14549] loop1: detected capacity change from 0 to 128 [ 1538.233117][T14551] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19309'. [ 1538.258100][ T4716] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 1538.293867][T14549] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1538.331562][T14549] hpfs: filesystem error: improperly stopped [ 1538.337619][T14549] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1538.385977][T14549] hpfs: You really don't want any checks? You are crazy... [ 1538.393239][T14549] hpfs: Code page index out of array [ 1538.452622][T14549] hpfs: code page support is disabled [ 1538.458212][T14549] hpfs: hpfs_map_4sectors(): unaligned read [ 1538.501538][T14549] hpfs: hpfs_map_4sectors(): unaligned read [ 1538.507489][T14549] hpfs: filesystem error: unable to find root dir [ 1538.906955][T14572] tipc: Can't bind to reserved service type 0 [ 1539.142627][T14547] loop0: detected capacity change from 0 to 32768 [ 1539.245099][T14547] JBD2: Ignoring recovery information on journal [ 1539.406713][T14547] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1539.545980][T14547] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1539.643142][T14547] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1539.646316][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1539.667015][T14603] loop3: detected capacity change from 0 to 128 [ 1539.717189][T14547] OCFS2: Returning error to the calling process. [ 1539.727748][T14603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 1539.776150][T14547] (syz.0.19308,14547,1):ocfs2_search_chain:1783 ERROR: status = -5 [ 1539.781947][T14603] System zones: 1-3, 19-19, 35-36 [ 1539.821849][T14603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1539.834845][T14603] ext4 filesystem being mounted at /3850/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1539.873967][T14547] (syz.0.19308,14547,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 1539.882246][T14547] (syz.0.19308,14547,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 1539.891032][T14547] (syz.0.19308,14547,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 1539.924946][T14547] (syz.0.19308,14547,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 1539.976781][T14547] (syz.0.19308,14547,1):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 1539.985075][T14547] (syz.0.19308,14547,1):ocfs2_mknod_locked:639 ERROR: status = -5 [ 1540.029016][T14547] (syz.0.19308,14547,1):ocfs2_mknod:385 ERROR: status = -5 [ 1540.056328][T14547] (syz.0.19308,14547,1):ocfs2_mknod:502 ERROR: status = -5 [ 1540.094025][T14547] (syz.0.19308,14547,1):ocfs2_mkdir:659 ERROR: status = -5 [ 1540.494959][ T4709] EXT4-fs (loop3): unmounting filesystem. [ 1540.505618][ T4704] ocfs2: Unmounting device (7,0) on (node local) [ 1540.605756][T14618] loop1: detected capacity change from 0 to 32768 [ 1540.632538][T14618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.19340 (14618) [ 1541.141930][T14639] loop4: detected capacity change from 0 to 256 [ 1541.378932][T14615] syz.5.19339 (14615): drop_caches: 2 [ 1541.393007][T14618] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1541.429132][T14618] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1541.464907][T14618] BTRFS info (device loop1): using free space tree [ 1541.693517][T14663] loop3: detected capacity change from 0 to 256 [ 1541.750266][T14618] BTRFS info (device loop1): enabling ssd optimizations [ 1541.987737][T14676] netlink: 'syz.4.19358': attribute type 15 has an invalid length. [ 1541.995708][T14676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19358'. [ 1542.064309][ T4703] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1542.106848][ T26] audit: type=1326 audit(1787552582.453:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.5.19360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1542.219346][ T26] audit: type=1326 audit(1787552582.495:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.5.19360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1542.342983][ T26] audit: type=1326 audit(1787552582.495:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.5.19360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1542.370129][T14685] loop0: detected capacity change from 0 to 256 [ 1542.452956][ T26] audit: type=1326 audit(1787552582.495:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.5.19360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1542.575945][ T26] audit: type=1326 audit(1787552582.506:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.5.19360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1542.631112][T14689] xt_CT: No such helper "syz0" [ 1542.644391][T14694] loop5: detected capacity change from 0 to 256 [ 1542.699727][ T26] audit: type=1326 audit(1787552582.506:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.5.19360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1542.834345][ T26] audit: type=1326 audit(1787552582.506:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.5.19360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1542.948520][ T26] audit: type=1326 audit(1787552582.506:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14678 comm="syz.5.19360" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f9358b9e0d9 code=0x7ffc0000 [ 1543.313274][ T26] audit: type=1326 audit(1787552583.692:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14712 comm="syz.3.19377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1543.400170][ T26] audit: type=1326 audit(1787552583.755:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14712 comm="syz.3.19377" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ab3d9e0d9 code=0x7ffc0000 [ 1543.779585][T14733] netlink: 'syz.1.19385': attribute type 1 has an invalid length. [ 1543.834203][T14733] netlink: 1 bytes leftover after parsing attributes in process `syz.1.19385'. [ 1544.414531][T14765] Process accounting paused [ 1544.684784][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19405'. [ 1544.739040][T14773] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19405'. [ 1545.020923][T14755] loop0: detected capacity change from 0 to 32768 [ 1545.191758][T14755] XFS (loop0): Mounting V5 Filesystem [ 1545.363878][T14755] XFS (loop0): Ending clean mount [ 1545.517628][ T4704] XFS (loop0): Unmounting Filesystem [ 1545.748122][T14771] loop1: detected capacity change from 0 to 32768 [ 1545.911450][T14771] XFS (loop1): Mounting V5 Filesystem [ 1546.127745][T14771] XFS (loop1): Ending clean mount [ 1546.332918][ T4703] XFS (loop1): Unmounting Filesystem [ 1546.627509][T14843] loop4: detected capacity change from 0 to 256 [ 1546.712643][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19435'. [ 1547.309680][T14868] loop3: detected capacity change from 0 to 1024 [ 1547.384397][T14870] loop5: detected capacity change from 0 to 256 [ 1547.415896][T14868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1547.716097][T14860] loop4: detected capacity change from 0 to 32768 [ 1547.734265][ T4709] EXT4-fs (loop3): unmounting filesystem. [ 1547.883370][T14860] XFS (loop4): Mounting V5 Filesystem [ 1548.027273][T14860] XFS (loop4): Ending clean mount [ 1548.215207][ T4716] XFS (loop4): Unmounting Filesystem [ 1548.232738][T14908] loop5: detected capacity change from 0 to 256 [ 1548.482772][ T7740] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1548.683907][ T7740] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.706115][ T7740] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1548.741419][ T7740] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1548.783777][ T7740] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1548.825796][ T7740] usb 4-1: SerialNumber: syz [ 1549.038563][ T7740] usb 4-1: 0:2 : does not exist [ 1549.066931][ T7740] usb 4-1: USB disconnect, device number 51 [ 1549.139314][T20875] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1549.294146][ T6469] udevd[6469]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1549.323138][T20875] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1549.331651][T20875] usb 6-1: not running at top speed; connect to a high speed hub [ 1549.341877][T20875] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1549.354603][T20875] usb 6-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 1549.363818][T20875] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.372000][T20875] usb 6-1: Product: syz [ 1549.376349][T20875] usb 6-1: Manufacturer: syz [ 1549.381158][T20875] usb 6-1: SerialNumber: syz [ 1549.387932][T14927] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1549.602381][T20875] usb 6-1: MIDIStreaming interface descriptor not found [ 1549.661644][T20875] usb 6-1: USB disconnect, device number 16 [ 1549.868413][T14940] nvme nvme0: rdma connection establishment failed (-104) [ 1549.931026][ T4944] udevd[4944]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1550.248749][T20875] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1550.303666][T14960] raw_sendmsg: syz.5.19481 forgot to set AF_INET. Fix it! [ 1550.358763][ T9949] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1550.386552][T14962] loop0: detected capacity change from 0 to 64 [ 1550.391969][T14941] loop3: detected capacity change from 0 to 32768 [ 1550.434884][T20875] usb 2-1: Using ep0 maxpacket: 16 [ 1550.442403][T20875] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1550.454288][T20875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1550.464650][T20875] usb 2-1: config 0 has no interface number 0 [ 1550.499084][T20875] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1550.558706][T20875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.567339][T20875] usb 2-1: Product: syz [ 1550.570136][ T9949] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1550.577111][T20875] usb 2-1: Manufacturer: syz [ 1550.585251][T20875] usb 2-1: SerialNumber: syz [ 1550.605047][T20875] usb 2-1: config 0 descriptor?? [ 1550.616214][ T9949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.625940][T20875] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1550.632369][T20875] usb 2-1: No valid video chain found. [ 1550.653957][ T9949] usb 5-1: Product: syz [ 1550.673205][ T9949] usb 5-1: Manufacturer: syz [ 1550.677859][ T9949] usb 5-1: SerialNumber: syz [ 1550.712606][T14941] XFS (loop3): Mounting V5 Filesystem [ 1550.719086][ T9949] r8152-cfgselector 5-1: config 0 descriptor?? [ 1550.812306][T20875] usb 2-1: USB disconnect, device number 71 [ 1550.883800][T14941] XFS (loop3): Ending clean mount [ 1551.006790][ T4709] XFS (loop3): Unmounting Filesystem [ 1551.140229][ T9949] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1551.168306][ T9949] r8152-cfgselector 5-1: USB disconnect, device number 40 [ 1551.182594][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19492'. [ 1551.201915][T14990] netlink: 64 bytes leftover after parsing attributes in process `syz.5.19492'. [ 1551.540104][T21211] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1551.731652][T15010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19510'. [ 1551.762831][T21211] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1551.778852][T21211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.807242][T21211] usb 1-1: Product: syz [ 1551.811454][T21211] usb 1-1: Manufacturer: syz [ 1551.816073][T21211] usb 1-1: SerialNumber: syz [ 1552.262135][T21211] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1552.286202][T15028] loop1: detected capacity change from 0 to 512 [ 1552.286441][T21211] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1552.343858][T21211] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1552.398288][T15028] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 1552.411715][T15028] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 1552.420159][T21211] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1552.433426][T15028] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #13: comm syz.1.19512: iget: bad i_size value: 12154757448730 [ 1552.455803][T21211] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1552.475517][T15028] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.19512: couldn't read orphan inode 13 (err -117) [ 1552.502896][T15015] loop5: detected capacity change from 0 to 32768 [ 1552.508565][T15028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1552.536880][T21211] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1552.548790][T15028] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 1552.576340][T21211] usb 1-1: USB disconnect, device number 55 [ 1552.597255][T15015] XFS (loop5): Mounting V5 Filesystem [ 1552.737545][ T4703] EXT4-fs (loop1): unmounting filesystem. [ 1552.767258][T15015] XFS (loop5): Ending clean mount [ 1552.796022][T15047] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1552.970896][ T7004] XFS (loop5): Unmounting Filesystem [ 1553.276973][T15063] IPVS: stopping backup sync thread 11235 ... [ 1553.710649][T15083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19534'. [ 1553.939993][ T7740] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1553.990244][T15093] netlink: 52 bytes leftover after parsing attributes in process `syz.4.19538'. [ 1553.995959][T15088] loop5: detected capacity change from 0 to 4096 [ 1554.040688][T15088] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1554.042577][T15088] ntfs3: loop5: Failed to load $Extend. [ 1554.111787][ T7740] usb 1-1: Using ep0 maxpacket: 8 [ 1554.113978][ T7740] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1554.114026][ T7740] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1554.116104][ T7740] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1554.116132][ T7740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.116151][ T7740] usb 1-1: Product: syz [ 1554.116166][ T7740] usb 1-1: Manufacturer: syz [ 1554.116180][ T7740] usb 1-1: SerialNumber: syz [ 1554.118385][ T7740] usb 1-1: config 0 descriptor?? [ 1554.122961][ T7740] powermate: probe of 1-1:0.0 failed with error -5 [ 1554.314093][T20875] usb 1-1: USB disconnect, device number 56 [ 1554.385181][T15105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1554.445023][ T7740] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 1554.491646][T15107] loop4: detected capacity change from 0 to 1024 [ 1554.505376][T15107] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1554.529099][T15109] loop5: detected capacity change from 0 to 128 [ 1554.595770][T15109] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1554.596111][T15109] ext4 filesystem being mounted at /703/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1554.622163][ T7740] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1554.623188][ T7740] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.623220][ T7740] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1554.626168][ T7740] usb 4-1: string descriptor 0 read error: -22 [ 1554.626243][ T7740] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1554.626266][ T7740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.676160][ T7004] EXT4-fs (loop5): unmounting filesystem. [ 1554.846044][T15113] netlink: 20 bytes leftover after parsing attributes in process `syz.5.19548'. [ 1554.890608][ T7740] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1554.909591][ T6469] udevd[6469]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1555.023037][T14701] usb 4-1: USB disconnect, device number 52 [ 1555.779813][ T9949] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1556.003072][ T9949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.023439][ T9949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1556.045098][ T9949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 32768, setting to 1024 [ 1556.067709][ T9949] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1556.095331][T15147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19566'. [ 1556.134064][ T9949] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1556.180133][ T9949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.191125][ T7007] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1556.204004][ T7007] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1556.222102][ T7007] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1556.234487][ T7007] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1556.242527][ T7007] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1556.252344][ T7007] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1556.280851][ T9949] usb 6-1: config 0 descriptor?? [ 1556.355368][T15148] wg1 speed is unknown, defaulting to 1000 [ 1556.490646][ T9750] usb 6-1: USB disconnect, device number 17 [ 1556.538551][T15163] loop0: detected capacity change from 0 to 8 [ 1556.545757][T15163] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1556.597027][ T6469] udevd[6469]: incorrect cramfs checksum on /dev/loop0 [ 1556.633498][T15165] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1556.649636][T15148] lo speed is unknown, defaulting to 1000 [ 1556.737342][T15163] cramfs: Error -3 while decompressing! [ 1556.756562][ T6469] udevd[6469]: incorrect cramfs checksum on /dev/loop0 [ 1556.762966][T15163] cramfs: ffffffff96da4228(18)->ffff888032e5b000(4096) [ 1556.812347][T15163] cramfs: Error -3 while decompressing! [ 1556.872849][T15163] cramfs: ffffffff96da4228(18)->ffff888032e5b000(4096) [ 1556.922800][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 1556.922814][ T26] audit: type=1800 audit(1787552598.012:587): pid=15163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.19571" name="file1" dev="loop0" ino=324 res=0 errno=0 [ 1557.058733][T15160] syz.3.19572 (15160): drop_caches: 2 [ 1557.953819][T15148] chnl_net:caif_netlink_parms(): no params data found [ 1558.243495][ T7007] Bluetooth: hci3: command 0x0409 tx timeout [ 1558.358424][T15222] netlink: 32 bytes leftover after parsing attributes in process `syz.5.19593'. [ 1558.400771][T15223] device veth1 entered promiscuous mode [ 1558.406536][T15223] netlink: 'syz.0.19594': attribute type 1 has an invalid length. [ 1558.479266][T15223] netlink: 9 bytes leftover after parsing attributes in process `syz.0.19594'. [ 1558.528261][T15148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.569468][T15148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1558.624256][T15148] device bridge_slave_0 entered promiscuous mode [ 1558.700192][T15148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1558.721766][T15148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1558.740137][T15148] device bridge_slave_1 entered promiscuous mode [ 1558.856124][T15148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1558.974276][T15148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.142811][T15148] team0: Port device team_slave_0 added [ 1559.192559][T15257] netlink: 180 bytes leftover after parsing attributes in process `syz.1.19606'. [ 1559.258556][T15257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19606'. [ 1559.464220][T19869] team0: Port device wlan1 removed [ 1559.471751][T15235] loop3: detected capacity change from 0 to 32768 [ 1559.485605][T15235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.19597 (15235) [ 1559.506002][T15148] team0: Port device team_slave_1 added [ 1559.515681][T15266] netlink: 'syz.1.19610': attribute type 9 has an invalid length. [ 1559.569641][T15235] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1559.626234][T15235] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1559.681208][T15235] BTRFS info (device loop3): using free space tree [ 1559.690944][T15272] binder: 15271:15272 ioctl c018620c 200000000940 returned -22 [ 1559.719136][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19611'. [ 1560.037092][T15148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1560.044088][T15148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.177583][T15235] BTRFS info (device loop3): enabling ssd optimizations [ 1560.207817][T15148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.218927][ T7007] Bluetooth: hci3: command 0x041b tx timeout [ 1560.397023][T15148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1560.438176][T15148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1560.560763][ T4709] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1560.561759][T15148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.703808][ T6469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (6469) [ 1560.842273][T15318] loop5: detected capacity change from 0 to 512 [ 1560.989613][T15318] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 1561.062972][T15318] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 1561.134625][T15318] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #13: comm syz.5.19626: iget: bad i_size value: 12154757448730 [ 1561.189806][T15318] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.19626: couldn't read orphan inode 13 (err -117) [ 1561.246487][T15318] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1561.309925][T15318] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 1561.534990][T15148] device hsr_slave_0 entered promiscuous mode [ 1561.543146][ T7004] EXT4-fs (loop5): unmounting filesystem. [ 1561.583311][T15148] device hsr_slave_1 entered promiscuous mode [ 1561.626346][T15148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1561.664049][T15148] Cannot create hsr debugfs directory [ 1561.699587][T19869] device hsr_slave_0 left promiscuous mode [ 1561.732235][T19869] device hsr_slave_1 left promiscuous mode [ 1561.794806][T19869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1561.810467][T19869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1561.851630][T19869] device bridge_slave_1 left promiscuous mode [ 1561.865727][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.884061][T19869] device bridge_slave_0 left promiscuous mode [ 1561.905407][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.208138][ T7007] Bluetooth: hci3: command 0x040f tx timeout [ 1562.352617][T15341] loop0: detected capacity change from 0 to 32768 [ 1562.391072][T15341] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 1562.654736][ T6469] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 1562.737318][T19869] bond3 (unregistering): Released all slaves [ 1562.836515][ T4727] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1562.920277][T19869] bond2 (unregistering): Released all slaves [ 1563.037423][ T4727] usb 2-1: Using ep0 maxpacket: 16 [ 1563.044459][ T4727] usb 2-1: config 0 has no interfaces? [ 1563.054758][ T4727] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1563.057262][T15384] netlink: 'syz.0.19649': attribute type 2 has an invalid length. [ 1563.064645][ T4727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.080135][ T4727] usb 2-1: Product: syz [ 1563.081291][T15384] netlink: 'syz.0.19649': attribute type 1 has an invalid length. [ 1563.084590][ T4727] usb 2-1: Manufacturer: syz [ 1563.097199][ T4727] usb 2-1: SerialNumber: syz [ 1563.106911][ T4727] r8152-cfgselector 2-1: config 0 descriptor?? [ 1563.185480][T19869] bond1 (unregistering): Released all slaves [ 1563.313087][ T4727] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 1563.339611][T19869] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1563.563745][ T4727] usb 2-1: USB disconnect, device number 72 [ 1563.804034][T19869] team0 (unregistering): Port device team_slave_1 removed [ 1563.877866][T19869] team0 (unregistering): Port device team_slave_0 removed [ 1563.942031][T19869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.007695][T19869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1564.191220][ T7007] Bluetooth: hci3: command 0x0419 tx timeout [ 1564.253889][T15390] binder: 15389:15390 ioctl 400c620e 0 returned -14 [ 1564.630285][T19869] team0 (unregistering): Port device bond0 removed [ 1564.641940][T19869] team0 (unregistering): Port device bridge0 removed [ 1564.688392][T19869] bond0 (unregistering): Released all slaves [ 1565.094221][T15402] netlink: 'syz.1.19658': attribute type 2 has an invalid length. [ 1565.102605][T15402] netlink: 'syz.1.19658': attribute type 8 has an invalid length. [ 1565.151545][T15402] netlink: 132 bytes leftover after parsing attributes in process `syz.1.19658'. [ 1565.397919][ T26] audit: type=1326 audit(1787552606.904:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1565.475494][ T26] audit: type=1326 audit(1787552606.904:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1565.522601][T15148] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1565.595649][T15148] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1565.619679][ T26] audit: type=1326 audit(1787552606.946:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1565.650777][T15148] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1565.680181][T15148] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1565.748083][ T26] audit: type=1326 audit(1787552606.946:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1565.866737][ T26] audit: type=1326 audit(1787552606.946:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f98aff9e0d9 code=0x7ffc0000 [ 1565.990032][T15148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1566.014333][ T26] audit: type=1326 audit(1787552606.999:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98aff5e90e code=0x7ffc0000 [ 1566.079117][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1566.095219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1566.150423][T15148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1566.189198][ T26] audit: type=1326 audit(1787552606.999:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98aff5e90e code=0x7ffc0000 [ 1566.249772][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1566.272106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1566.312354][ T26] audit: type=1326 audit(1787552606.999:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98aff5e90e code=0x7ffc0000 [ 1566.323605][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.343732][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1566.418569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1566.427525][ T26] audit: type=1326 audit(1787552606.999:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98aff5e90e code=0x7ffc0000 [ 1566.469156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1566.511301][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.518510][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1566.526417][T15450] loop3: detected capacity change from 0 to 256 [ 1566.537997][ T26] audit: type=1326 audit(1787552606.999:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15410 comm="syz.0.19662" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f98aff5e90e code=0x7ffc0000 [ 1566.602777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1566.638320][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1566.653521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1566.668934][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19677'. [ 1566.686521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1566.724522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1566.750180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1566.783462][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1566.832353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1566.885498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1566.933082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1566.946433][T15465] loop1: detected capacity change from 0 to 512 [ 1566.971638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1566.983600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1567.001624][T15148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1567.057412][T15465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1567.085249][T15465] ext4 filesystem being mounted at /3765/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1567.126937][T15465] EXT4-fs error (device loop1): ext4_get_first_dir_block:3583: inode #12: comm syz.1.19682: Directory block failed checksum [ 1567.229482][ T6469] udevd[6469]: incorrect ext4 checksum on /dev/loop1 [ 1567.328618][ T4703] EXT4-fs (loop1): unmounting filesystem. [ 1567.536306][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19690'. [ 1567.794949][T15500] ieee802154 phy1 wpan1: encryption failed: -22 [ 1568.019531][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1568.050010][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1568.096601][T15511] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19699'. [ 1568.166485][T15148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.760344][T15544] netlink: 'syz.3.19712': attribute type 11 has an invalid length. [ 1568.881709][T15549] netlink: 'syz.0.19713': attribute type 3 has an invalid length. [ 1568.970444][T15553] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19715'. [ 1569.082203][T15553] netlink: 9 bytes leftover after parsing attributes in process `syz.1.19715'. [ 1569.132635][T15553] netlink: 9 bytes leftover after parsing attributes in process `syz.1.19715'. [ 1569.294196][T15567] loop5: detected capacity change from 0 to 512 [ 1569.392057][T15567] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1569.444741][T15567] ext4 filesystem being mounted at /745/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1569.461904][T15567] EXT4-fs error (device loop5): ext4_get_first_dir_block:3583: inode #12: comm syz.5.19720: Directory block failed checksum [ 1569.551585][ T7004] EXT4-fs (loop5): unmounting filesystem. [ 1569.570579][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1569.581903][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1569.615538][T15578] netlink: 'syz.0.19724': attribute type 9 has an invalid length. [ 1569.756169][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1569.800403][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1569.845523][T15148] device veth0_vlan entered promiscuous mode [ 1569.868138][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1569.890596][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1569.954130][T15148] device veth1_vlan entered promiscuous mode [ 1570.058508][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1570.068338][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1570.091890][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1570.115027][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1570.145104][T15148] device veth0_macvtap entered promiscuous mode [ 1570.167087][T15148] device veth1_macvtap entered promiscuous mode [ 1570.257977][T15148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1570.299809][T15148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.362901][T15148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1570.390201][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1570.424911][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1570.463964][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1570.505492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1570.537519][T15148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.580768][T15148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.613662][T15148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1570.663783][T15148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1570.714717][T15148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1570.745206][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1570.773335][T19869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1570.812193][T15148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.836317][T15148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.870156][T15148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1570.870190][T15148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1571.128636][ T4806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.159789][ T4806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.186251][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1571.204479][T15610] loop0: detected capacity change from 0 to 32768 [ 1571.216251][T19869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1571.241981][T19869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1571.257009][ T9563] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1571.319196][T15610] JBD2: Ignoring recovery information on journal [ 1571.336345][T15610] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 1571.409384][T15610] JBD2: bad block at offset 32 [ 1571.470296][T15610] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1571.579942][T15610] [ 1571.582350][T15610] ====================================================== [ 1571.589374][T15610] WARNING: possible circular locking dependency detected [ 1571.596416][T15610] syzkaller #0 Not tainted [ 1571.600835][T15610] ------------------------------------------------------ [ 1571.607862][T15610] syz.0.19738/15610 is trying to acquire lock: [ 1571.614021][T15610] ffff8880500209c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_xattr_set+0xbe4/0x1390 [ 1571.626306][T15610] [ 1571.626306][T15610] but task is already holding lock: [ 1571.633686][T15610] ffff888072995c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x491/0x1390 [ 1571.643195][T15610] [ 1571.643195][T15610] which lock already depends on the new lock. [ 1571.643195][T15610] [ 1571.653703][T15610] [ 1571.653703][T15610] the existing dependency chain (in reverse order) is: [ 1571.662729][T15610] [ 1571.662729][T15610] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1571.670569][T15610] down_read+0x42/0x2d0 [ 1571.675267][T15610] ocfs2_init_acl+0x307/0x770 [ 1571.680560][T15610] ocfs2_mknod+0x18e0/0x2580 [ 1571.685728][T15610] ocfs2_create+0x1b6/0x4b0 [ 1571.690742][T15610] vfs_create+0x2db/0x460 [ 1571.695583][T15610] do_mknodat+0x3a1/0x4d0 [ 1571.700426][T15610] __x64_sys_mknodat+0xa5/0xc0 [ 1571.705698][T15610] do_syscall_64+0x4c/0xa0 [ 1571.710631][T15610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1571.717039][T15610] [ 1571.717039][T15610] -> #1 (jbd2_handle){++++}-{0:0}: [ 1571.724403][T15610] jbd2_journal_lock_updates+0xa8/0x390 [ 1571.730552][T15610] __ocfs2_flush_truncate_log+0x2cf/0x1220 [ 1571.736923][T15610] ocfs2_truncate_log_shutdown+0x140/0x2f0 [ 1571.743246][T15610] ocfs2_dismount_volume+0x207/0x940 [ 1571.749101][T15610] generic_shutdown_super+0x130/0x340 [ 1571.754983][T15610] kill_block_super+0x7c/0xe0 [ 1571.760170][T15610] deactivate_locked_super+0x93/0xf0 [ 1571.765964][T15610] cleanup_mnt+0x471/0x4f0 [ 1571.770890][T15610] task_work_run+0x1d0/0x260 [ 1571.775990][T15610] exit_to_user_mode_loop+0xe6/0x110 [ 1571.781789][T15610] exit_to_user_mode_prepare+0xee/0x180 [ 1571.787851][T15610] syscall_exit_to_user_mode+0x16/0x40 [ 1571.793820][T15610] do_syscall_64+0x58/0xa0 [ 1571.798747][T15610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1571.805161][T15610] [ 1571.805161][T15610] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}: [ 1571.815925][T15610] __lock_acquire+0x2d18/0x7c40 [ 1571.821295][T15610] lock_acquire+0x1bb/0x4a0 [ 1571.826326][T15610] down_write+0x36/0x60 [ 1571.831010][T15610] ocfs2_xattr_set+0xbe4/0x1390 [ 1571.836380][T15610] ocfs2_set_acl+0x4d4/0x580 [ 1571.841485][T15610] ocfs2_iop_set_acl+0x190/0x2b0 [ 1571.846951][T15610] posix_acl_xattr_set+0x388/0x3f0 [ 1571.852659][T15610] __vfs_setxattr+0x3d8/0x410 [ 1571.857863][T15610] __vfs_setxattr_noperm+0x126/0x5e0 [ 1571.863666][T15610] vfs_setxattr+0x167/0x2e0 [ 1571.868698][T15610] setxattr+0x2a3/0x330 [ 1571.873387][T15610] path_setxattr+0x147/0x290 [ 1571.878502][T15610] __x64_sys_setxattr+0xb7/0xd0 [ 1571.883872][T15610] do_syscall_64+0x4c/0xa0 [ 1571.888804][T15610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1571.895210][T15610] [ 1571.895210][T15610] other info that might help us debug this: [ 1571.895210][T15610] [ 1571.905421][T15610] Chain exists of: [ 1571.905421][T15610] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2 --> jbd2_handle --> &oi->ip_xattr_sem [ 1571.905421][T15610] [ 1571.921146][T15610] Possible unsafe locking scenario: [ 1571.921146][T15610] [ 1571.928585][T15610] CPU0 CPU1 [ 1571.933938][T15610] ---- ---- [ 1571.939289][T15610] lock(&oi->ip_xattr_sem); [ 1571.943868][T15610] lock(jbd2_handle); [ 1571.950440][T15610] lock(&oi->ip_xattr_sem); [ 1571.957538][T15610] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2); [ 1571.964818][T15610] [ 1571.964818][T15610] *** DEADLOCK *** [ 1571.964818][T15610] [ 1571.972953][T15610] 3 locks held by syz.0.19738/15610: [ 1571.978218][T15610] #0: ffff8880782da460 (sb_writers#23){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1571.987526][T15610] #1: ffff888072995f48 (&type->i_mutex_dir_key#30){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 1571.997808][T15610] #2: ffff888072995c78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x491/0x1390 [ 1572.007711][T15610] [ 1572.007711][T15610] stack backtrace: [ 1572.013587][T15610] CPU: 0 PID: 15610 Comm: syz.0.19738 Not tainted syzkaller #0 [ 1572.021117][T15610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1572.031165][T15610] Call Trace: [ 1572.034437][T15610] [ 1572.037359][T15610] dump_stack_lvl+0x188/0x24e [ 1572.042033][T15610] ? load_image+0x410/0x410 [ 1572.046527][T15610] ? show_regs_print_info+0x12/0x12 [ 1572.051717][T15610] ? print_circular_bug+0x12b/0x1a0 [ 1572.056909][T15610] check_noncircular+0x296/0x330 [ 1572.061848][T15610] ? look_up_lock_class+0x75/0x140 [ 1572.066948][T15610] ? add_chain_block+0x9b0/0x9b0 [ 1572.071879][T15610] ? lockdep_lock+0xf1/0x1f0 [ 1572.076461][T15610] ? lockdep_unlock+0x142/0x2e0 [ 1572.081301][T15610] ? _find_first_zero_bit+0xd2/0x100 [ 1572.086672][T15610] __lock_acquire+0x2d18/0x7c40 [ 1572.091517][T15610] ? schedule_timeout_idle+0x60/0x90 [ 1572.096804][T15610] ? ocfs2_downconvert_lock+0x500/0x500 [ 1572.102396][T15610] ? verify_lock_unused+0x140/0x140 [ 1572.107588][T15610] ? ocfs2_inode_lock_tracker+0x14f/0x700 [ 1572.113298][T15610] ? do_raw_spin_lock+0x128/0x2f0 [ 1572.118318][T15610] lock_acquire+0x1bb/0x4a0 [ 1572.122814][T15610] ? ocfs2_xattr_set+0xbe4/0x1390 [ 1572.127830][T15610] ? ocfs2_xattr_block_find+0x157/0x4e0 [ 1572.133360][T15610] ? __might_sleep+0xd0/0xd0 [ 1572.138001][T15610] ? read_lock_is_recursive+0x10/0x10 [ 1572.143364][T15610] ? rwsem_write_trylock+0x135/0x1c0 [ 1572.148643][T15610] ? ocfs2_xattr_ibody_find+0x780/0x780 [ 1572.154180][T15610] ? ocfs2_xattr_ibody_find+0xc6/0x780 [ 1572.159626][T15610] down_write+0x36/0x60 [ 1572.163782][T15610] ? ocfs2_xattr_set+0xbe4/0x1390 [ 1572.168805][T15610] ocfs2_xattr_set+0xbe4/0x1390 [ 1572.173687][T15610] ? _raw_spin_unlock+0x40/0x40 [ 1572.178529][T15610] ? __ocfs2_xattr_set_handle+0xf20/0xf20 [ 1572.184234][T15610] ? ocfs2_set_acl+0xe6/0x580 [ 1572.188899][T15610] ? posix_acl_xattr_set+0x388/0x3f0 [ 1572.194188][T15610] ? __vfs_setxattr+0x3d8/0x410 [ 1572.199030][T15610] ? __vfs_setxattr_noperm+0x126/0x5e0 [ 1572.204477][T15610] ? setxattr+0x2a3/0x330 [ 1572.208796][T15610] ? __x64_sys_setxattr+0xb7/0xd0 [ 1572.213824][T15610] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1572.219446][T15610] ? ocfs2_set_acl+0xe6/0x580 [ 1572.224111][T15610] ? rcu_is_watching+0x11/0xa0 [ 1572.228870][T15610] ? ocfs2_set_acl+0xe6/0x580 [ 1572.233535][T15610] ? __kmalloc+0xe4/0x240 [ 1572.237920][T15610] ocfs2_set_acl+0x4d4/0x580 [ 1572.242508][T15610] ocfs2_iop_set_acl+0x190/0x2b0 [ 1572.247444][T15610] ? ocfs2_xattr_get+0x260/0x260 [ 1572.252374][T15610] ? vfs_set_acl_prepare+0x100/0x750 [ 1572.257654][T15610] ? rcu_is_watching+0x11/0xa0 [ 1572.262419][T15610] ? vfs_set_acl_prepare+0x650/0x750 [ 1572.267780][T15610] ? posix_acl_valid+0x37d/0x3f0 [ 1572.272709][T15610] posix_acl_xattr_set+0x388/0x3f0 [ 1572.277810][T15610] ? posix_acl_xattr_get+0x540/0x540 [ 1572.283084][T15610] __vfs_setxattr+0x3d8/0x410 [ 1572.287761][T15610] __vfs_setxattr_noperm+0x126/0x5e0 [ 1572.293037][T15610] vfs_setxattr+0x167/0x2e0 [ 1572.297620][T15610] ? xattr_permission+0x510/0x510 [ 1572.302641][T15610] ? _copy_from_user+0x10b/0x170 [ 1572.307569][T15610] ? setxattr+0x22b/0x330 [ 1572.311891][T15610] setxattr+0x2a3/0x330 [ 1572.316038][T15610] ? path_setxattr+0x290/0x290 [ 1572.320802][T15610] ? __mnt_want_write+0x21f/0x2a0 [ 1572.325824][T15610] path_setxattr+0x147/0x290 [ 1572.330406][T15610] ? simple_xattr_list_add+0xf0/0xf0 [ 1572.335681][T15610] ? lock_chain_count+0x20/0x20 [ 1572.340532][T15610] __x64_sys_setxattr+0xb7/0xd0 [ 1572.345394][T15610] do_syscall_64+0x4c/0xa0 [ 1572.349808][T15610] ? clear_bhb_loop+0x60/0xb0 [ 1572.354477][T15610] ? clear_bhb_loop+0x60/0xb0 [ 1572.359146][T15610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1572.365028][T15610] RIP: 0033:0x7f98aff9e0d9 [ 1572.369434][T15610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1572.389031][T15610] RSP: 002b:00007f98ae1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1572.397436][T15610] RAX: ffffffffffffffda RBX: 00007f98b0225fa0 RCX: 00007f98aff9e0d9 [ 1572.405395][T15610] RDX: 0000200000000100 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 1572.413353][T15610] RBP: 00007f98b0035024 R08: 0000000000000000 R09: 0000000000000000 [ 1572.421315][T15610] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 1572.429280][T15610] R13: 00007f98b0226038 R14: 00007f98b0225fa0 R15: 00007fffd7cb5968 [ 1572.437253][T15610] [ 1572.463542][T15610] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total [ 1572.544428][T15610] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1572.556639][T15610] OCFS2: File system is now read-only. [ 1572.563291][T15610] (syz.0.19738,15610,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 1572.575428][T15610] (syz.0.19738,15610,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 1572.584019][T15610] (syz.0.19738,15610,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 1572.594747][T15610] (syz.0.19738,15610,0):ocfs2_block_group_alloc_contig:455 ERROR: status = -30 [ 1572.603899][T15610] (syz.0.19738,15610,0):ocfs2_block_group_alloc:727 ERROR: status = -30 [ 1572.614851][T15610] (syz.0.19738,15610,0):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 1572.623728][T15610] (syz.0.19738,15610,0):ocfs2_reserve_suballoc_bits:855 ERROR: status = -30 [ 1572.635292][T15610] (syz.0.19738,15610,0):ocfs2_reserve_suballoc_bits:872 ERROR: status = -30 [ 1572.644299][T15610] (syz.0.19738,15610,0):ocfs2_reserve_new_metadata_blocks:1012 ERROR: status = -30 [ 1572.656482][T15610] (syz.0.19738,15610,0):ocfs2_reserve_new_metadata_blocks:1035 ERROR: status = -30 [ 1572.670398][T15610] (syz.0.19738,15610,0):ocfs2_init_xattr_set_ctxt:3284 ERROR: status = -30 [ 1572.679233][T15610] (syz.0.19738,15610,0):ocfs2_xattr_set:3641 ERROR: status = -30 [ 1572.702482][ T4704] ocfs2: Unmounting device (7,0) on (node local)