last executing test programs: 8m28.660494841s ago: executing program 2 (id=3461): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x503, 0x0, 0xfffff7fd, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x48482}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x54}}, 0x0) 8m28.310610217s ago: executing program 2 (id=3467): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44010000100001000000000000000000ac1e0101000000000000000000000000fc010000000000000000000000000001000000004e240000000000205c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e0000002000000000000000000000000000000006c0000002001000000000000000000000000000109000000008000000000000000000000040000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000008000000000000000000000080000000feffffff020000002400000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x144}}, 0x0) 8m27.895636925s ago: executing program 2 (id=3474): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21000e, &(0x7f0000000600)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@usrquota}]}, 0xe1, 0x531, &(0x7f0000000a80)="$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") unlink(&(0x7f0000000100)='./file1\x00') 8m27.195704998s ago: executing program 2 (id=3484): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0xb}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp775'}}, {@uid}, {@type={'type', 0x3d, "0ff88dbf"}}, {@nobarrier}]}, 0x20, 0x6e7, &(0x7f00000006c0)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 8m26.659864518s ago: executing program 2 (id=3489): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score_adj\x00') write$cgroup_int(r0, &(0x7f0000000500)=0x253500000000, 0x12) 8m26.03782874s ago: executing program 2 (id=3498): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@multiplanar_overlay={0x4, 0xa, 0x4, 0x8, 0x2, {0x0, 0xea60}, {0x4, 0x1, 0x8, 0x2, 0x9, 0x63, "9e115587"}, 0x48, 0x3, {&(0x7f0000000180)=[{0x7, 0x1, {0x401}, 0x800}, {0x8, 0x9, {0x6}, 0x2}]}, 0x1}) 8m25.608008838s ago: executing program 32 (id=3498): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000400)=@multiplanar_overlay={0x4, 0xa, 0x4, 0x8, 0x2, {0x0, 0xea60}, {0x4, 0x1, 0x8, 0x2, 0x9, 0x63, "9e115587"}, 0x48, 0x3, {&(0x7f0000000180)=[{0x7, 0x1, {0x401}, 0x800}, {0x8, 0x9, {0x6}, 0x2}]}, 0x1}) 6m48.31373143s ago: executing program 5 (id=4844): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x20040}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @random="5cfedd01a69e"}, @IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @broadcast}]}]}}}]}, 0x50}}, 0x0) 6m48.220864971s ago: executing program 5 (id=4846): r0 = openat$dsp(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) 6m48.109817934s ago: executing program 5 (id=4848): r0 = io_uring_setup(0x1de0, &(0x7f0000000440)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 6m47.883473278s ago: executing program 5 (id=4851): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@dioread_lock}, {}, {@noauto_da_alloc}]}, 0xfe, 0x564, &(0x7f0000001180)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 6m47.311556168s ago: executing program 5 (id=4857): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'user:', '%', 0x20, 0x84}, 0x29, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 6m45.190355158s ago: executing program 5 (id=4881): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001300)={0x10, &(0x7f0000001380)=ANY=[@ANYBLOB="0000040000007a7e7ea0"], 0x0, 0x0}) 6m44.744864126s ago: executing program 33 (id=4881): r0 = syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001300)={0x10, &(0x7f0000001380)=ANY=[@ANYBLOB="0000040000007a7e7ea0"], 0x0, 0x0}) 5m37.123667395s ago: executing program 4 (id=5771): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85513, &(0x7f0000000b00)={{0x2}, 0x0, [0x400000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x8, 0xd, 0xffffffffffffffff, 0x0, 0x8000000, 0x80000000, 0xfffffffffffffffd, 0x0, 0xb178, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x81, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x7b, 0x1, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8838, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x800000000000000, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1, 0x95, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 5m36.914344349s ago: executing program 4 (id=5776): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x11e, 0x48c, 0x0, 0x0) 5m36.681318153s ago: executing program 4 (id=5778): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000180)=0x30) 5m36.381729359s ago: executing program 4 (id=5782): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000007640)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 5m35.871846069s ago: executing program 4 (id=5790): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 5m35.385794058s ago: executing program 4 (id=5799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000021000100000000000000000a80"], 0x30}}, 0x0) 5m35.073242043s ago: executing program 34 (id=5799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000021000100000000000000000a80"], 0x30}}, 0x0) 4m32.189688955s ago: executing program 1 (id=6582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac0000000800014000000009080002400f0000010900010073797a30"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m31.90096938s ago: executing program 1 (id=6584): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @local}}]}, {0xb074739e4276a0a0}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 4m31.559804596s ago: executing program 1 (id=6589): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x9, 0x1, 0xf29, 0xb, 0x4, 0x1, 0x9}, 0x9c) 4m31.32733528s ago: executing program 1 (id=6594): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x847, &(0x7f0000000140)=ANY=[], 0xe0, 0xc33, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m30.932383058s ago: executing program 1 (id=6602): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000004400048028000180080001006e6174001c000280080003400000000608000140000000000800024000000002"], 0xe0}}, 0x0) 4m30.465628417s ago: executing program 1 (id=6609): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 4m30.114169723s ago: executing program 35 (id=6609): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x0) 2.301830211s ago: executing program 8 (id=10442): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="01bb", 0x2}, {&(0x7f0000000000)="900b", 0x2}], 0x2) 2.117427974s ago: executing program 8 (id=10445): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000002900000034"], 0x18}}], 0x1, 0x2000162e) 1.912459419s ago: executing program 0 (id=10447): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000200)=@v={0x93, 0x4, 0x10, 0x19, @generic=0x4, 0x1, 0x9}) 1.800628239s ago: executing program 8 (id=10449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x20, 0x17, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.661218953s ago: executing program 0 (id=10450): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0xfffffffffffffffc) 1.581758154s ago: executing program 6 (id=10452): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000000b40), 0x40000000, 0x0) 1.535103326s ago: executing program 3 (id=10453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb502000008000000b703000000000000850000001700000085000000230000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.528456655s ago: executing program 8 (id=10454): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cB2z') 1.426179637s ago: executing program 7 (id=10455): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x6, 0x4) 1.381811178s ago: executing program 0 (id=10456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000000030601020000000000ffff000000000005000100070000000900020073797a3100"], 0x28}}, 0x0) 1.322412599s ago: executing program 8 (id=10457): r0 = syz_open_dev$cec(&(0x7f0000000140), 0x0, 0x140) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f78000", '\x00\x00\a\x00', "0200", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) 1.29328736s ago: executing program 6 (id=10458): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4) 1.24633238s ago: executing program 7 (id=10459): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 1.24553924s ago: executing program 3 (id=10469): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ee000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x18c800) 1.130870771s ago: executing program 0 (id=10460): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, 0x0, 0x58) 1.080835602s ago: executing program 8 (id=10461): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6865617274626561743d6e6f6e652c6c6f63616c666c6f636b732c696e6f646536342c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c6e6f61636c2c6572726f72733d636f6e74696e75652c00edc97523793b5022d016bb24c65ba594abbd38fd9c301bfa101e61d574eb5cc84215aa20846b6f33df6281eaedb4b4afaaacd321e4df0d16b4f5a8a992efe2554b52ec9c980e5544cd4b8df3e1ba594d07e0bfe3471c164430a36b7ebddc35caf2959224d8330f1807117fc520d8ff5660c5691afd66a8e397bb802ed69df198008fb799cc37"], 0x1, 0x470e, &(0x7f0000008f40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1.003811584s ago: executing program 6 (id=10462): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x1, 0xff, 0x40, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0xa, 0x7fff}}) 1.003474294s ago: executing program 3 (id=10463): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2722, 0x0, &(0x7f0000000000)) 963.584035ms ago: executing program 0 (id=10464): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "7fa83dab0d3366512d5be841797d7df93815e60c650932d7ec32e239af37da22bb8a299a5f539d3c7f18a266d61654fead1f5509316491a77a08835ac6cae26a"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee00) 836.544027ms ago: executing program 3 (id=10465): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000000000000000340000", @ANYRESOCT=r0, @ANYRES16, @ANYRES8=r0, @ANYRESOCT=r0], 0x40}, 0x4004814) 830.300337ms ago: executing program 7 (id=10466): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @typedef={0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x0, 0x0, 0x61, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7ffbd, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 714.307439ms ago: executing program 6 (id=10467): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x181041) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000200)={0x49, @time={0xffff, 0x8d}, 0xf8, {0x5, 0xe}, 0x8, 0x36d9e8a9c9c1abd5, 0x6}) 669.69416ms ago: executing program 0 (id=10468): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x80243, 0x1) 557.422551ms ago: executing program 3 (id=10470): r0 = syz_open_dev$sg(&(0x7f0000000300), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0xff, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000640)="5ca86304000000f0099af29e96c8d42bd451039697e1d4c1d8edc7399bed9c4584dd57963ddceee7af02f304286e50ffc3e59e635cf000000081f8ac2e86da524ae2ad5deb90ac06b044097359492e6fa240fc9d250c5ff8d080e2659439694cd1ecc032b04249a12c0d69e173f387a090b59226e9804aa251ed0c76014cf17b90f39e40a0389b9fc3644415bb6861be988e7af22fb4d27f3eb4a7c82698fd23a2015f954fb3e9c2b4629ec47b845de19989a6b38b0b6e26c74a680d6f04222f7fd8b490d59e132d5a52c3982a819b237f4a684bd42527f0694996bc7112497cdc9f33fdf2130a7d31f2da822d3ca832ba3100000000000000000000000073", 0x0, 0x3c1, 0x0, 0x3, 0x0}) 522.343432ms ago: executing program 7 (id=10471): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 507.092022ms ago: executing program 6 (id=10472): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x1200c86, &(0x7f0000000100)=ANY=[@ANYBLOB='codepage=euc-jp,umask=00000000000000000000000,iocharset=cp932,gid=', @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x1, 0x297, &(0x7f00000007c0)="$eJzs3U9rE0EYx/HfbLZtakvd/pGCx2rBk9h6ES9KyYvwIKI2EYqhglZQT+pZxJvgvTfP4hvw4kl8A/XkyRfQ28rM7jbbuv9aTaeN3w80bLMzs8+TzGbnCSQRgP/WWmdn++pP+2ekllqSrkuBpLYUSjqnxfbTza2NrX6vWzVQy/Wwf0ZJT/NHm/XNXlFX28/1SEX2v1DT+fswHHEcxz98BwHv3NlfIJAm0rPT7W8fe2TD8dJ3AJ6ZXe3qmWZ8xwEA8MtIr5LLvbvOT6fr9yCQltPL/khd/3d9B+BZ7vrvqqzY2Of3rNs1qPdcCWf3B1mVWDFi6Z5xJTNr3wLT1FWVLpZg8sFGv3d5/VG/G+i1bqRyzRbcbTeZupmaaJcqgi1Qn3uZKZfDmM1htST++aMc8f1gc/ywMZmv5pu5YyJ9UHdv/RfGxo7kBovcMxXtdUjiv1I+ossySlqVZDnrDnI+C/fzxwZZtosrEmVJz2r/GwRRFue7ksfE3T13oFeS3Up5dq7XfGGv1ZpeCwd7DWZzec+jazYVzFtzyyzplz6pk1v/B/bRXlaTM9O2cS3TmVGZT+haRg0CCxqFj6bGKve+0X1d08yT5y8e3uv3e489b9h6vL5x6ySE6mEjVO4ee5oP5VjZhDkRKY/2hv56nJYmNNRQq148Jv/l6xQ8GjzpWrztOxj4YNddJqn/cvXKTbfP1kmRW6ePqWidHtcNnhtxpaQ2mHO3Zw5VwU2VV3BNa64Ll6SLFUf8sn/YKI1zRJiOvusu7/8DAAAAAAAAAAAAAAAAAACcNs0+DzCRtj7axwk8pwgAAAAAAAAAAAAAAAAAAAAAwKm31tnZDof6+7+5b/Wu//1f9y3d/P4vcDx+BwAA//+MhHi0") rename(&(0x7f0000001640)='./file1\x00', &(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 289.749566ms ago: executing program 3 (id=10473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xe08, 0x0, 0x5, 0x1, 0x80000000}, 0x2}}]}, {0x3}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}}, 0x8000) 249.992226ms ago: executing program 7 (id=10474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000001e00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00\b'], 0x24}}, 0x0) 200.368137ms ago: executing program 6 (id=10475): r0 = syz_open_dev$dri(&(0x7f0000002680), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 7 (id=10476): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r0, &(0x7f0000000180)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ble UNC path provided in device string! [ 676.386790][T23363] [ 676.413776][ T7406] r8152-cfgselector 4-1: Unknown version 0x0000 [ 676.424608][T23363] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 676.426888][ T7406] r8152-cfgselector 4-1: USB disconnect, device number 36 [ 676.572890][T23371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8354'. [ 676.683351][ T4299] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 676.744032][T23375] overlayfs: empty lowerdir [ 676.894538][ T4299] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.923183][ T4299] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 676.961160][ T4299] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 676.988788][ T4299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 677.004758][ T4299] usb 9-1: SerialNumber: syz [ 677.045370][ T4299] usb 9-1: 0:2 : does not exist [ 677.164892][ T7407] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 677.203193][ T4256] Bluetooth: hci0: command 0x0406 tx timeout [ 677.378628][ T7407] usb 7-1: Using ep0 maxpacket: 8 [ 677.383829][T23397] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 677.388579][ T7407] usb 7-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 677.402510][T23397] overlayfs: missing 'lowerdir' [ 677.418706][ T7407] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.437485][ T7407] usb 7-1: Product: syz [ 677.453113][ T7407] usb 7-1: Manufacturer: syz [ 677.461142][T23401] netlink: 'syz.7.8368': attribute type 10 has an invalid length. [ 677.466534][ T127] usb 9-1: USB disconnect, device number 6 [ 677.479468][ T7407] usb 7-1: SerialNumber: syz [ 677.494040][ T7407] usb 7-1: config 0 descriptor?? [ 677.508495][ T7407] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 677.594149][T23401] team0: Device ipvlan1 failed to register rx_handler [ 677.653216][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8369'. [ 677.662332][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8369'. [ 677.920166][ T7407] gspca_vc032x: reg_w err -71 [ 677.932364][ T7407] vc032x: probe of 7-1:0.0 failed with error -71 [ 677.960114][ T7407] usb 7-1: USB disconnect, device number 14 [ 678.250849][T23420] loop8: detected capacity change from 0 to 256 [ 678.469208][T23423] loop3: detected capacity change from 0 to 8192 [ 678.491507][T23428] netlink: 'syz.0.8382': attribute type 11 has an invalid length. [ 678.530359][T23423] syz.3.8379: attempt to access beyond end of device [ 678.530359][T23423] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 678.575604][T23423] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 678.607880][T23423] FAT-fs (loop3): Filesystem has been set read-only [ 678.656799][T23423] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 678.696667][T23423] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 679.073275][ T7407] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 679.121857][T23448] ip6t_rpfilter: unknown options [ 679.263156][ T7407] usb 9-1: Using ep0 maxpacket: 16 [ 679.278154][ T7407] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 679.309715][ T7407] usb 9-1: config 0 has no interface number 0 [ 679.335139][ T7407] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 679.375272][ T7407] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 679.400457][ T7407] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 679.444849][ T7407] usb 9-1: Product: syz [ 679.461461][ T7407] usb 9-1: SerialNumber: syz [ 679.487517][T23460] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8399'. [ 679.507474][ T7407] usb 9-1: config 0 descriptor?? [ 679.527734][T23460] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8399'. [ 679.531531][ T7407] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input27 [ 679.581033][T23460] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8399'. [ 679.836897][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 679.849131][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 679.863224][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 679.870414][ T7405] usb 9-1: USB disconnect, device number 7 [ 679.890850][ C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -2 [ 679.898384][ T7405] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 680.147977][T23479] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 680.272590][T23483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8409'. [ 680.692435][T23467] loop6: detected capacity change from 0 to 32768 [ 680.801975][T23467] XFS (loop6): Mounting V5 Filesystem [ 680.983239][T23467] XFS (loop6): Ending clean mount [ 681.014543][T23467] XFS (loop6): Quotacheck needed: Please wait. [ 681.138515][T23467] XFS (loop6): Quotacheck: Done. [ 681.276664][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8424'. [ 681.347058][T15210] XFS (loop6): Unmounting Filesystem [ 681.583244][T19953] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 681.628227][T23531] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 681.647336][T23533] loop7: detected capacity change from 0 to 256 [ 681.682084][T23533] exfat: Deprecated parameter 'namecase' [ 681.729152][T23533] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 681.793182][T19953] usb 1-1: Using ep0 maxpacket: 32 [ 681.800321][T19953] usb 1-1: config 0 has an invalid interface number: 202 but max is 1 [ 681.833103][T19953] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 681.855440][T19953] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 681.893082][T19953] usb 1-1: config 0 has no interface number 0 [ 681.903455][T19953] usb 1-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 681.935088][T19953] usb 1-1: config 0 interface 202 altsetting 87 bulk endpoint 0x2 has invalid maxpacket 52 [ 681.965685][T19953] usb 1-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 682.003630][T19953] usb 1-1: config 0 interface 202 has no altsetting 0 [ 682.034653][T19953] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 682.060615][T19953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.089475][T19953] usb 1-1: Product: syz [ 682.099604][T19953] usb 1-1: Manufacturer: syz [ 682.116842][T19953] usb 1-1: SerialNumber: syz [ 682.142818][T19953] usb 1-1: config 0 descriptor?? [ 682.152698][T23523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 682.232505][T23552] loop7: detected capacity change from 0 to 128 [ 682.254562][T19953] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 682.300608][T23552] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 682.321607][T23555] sctp: [Deprecated]: syz.8.8440 (pid 23555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 682.321607][T23555] Use struct sctp_sack_info instead [ 682.337132][T23552] ext4 filesystem being mounted at /504/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 682.465078][ T39] usb 1-1: Failed to submit usb control message: -71 [ 682.472586][ T39] usb 1-1: unable to send the bmi data to the device: -71 [ 682.474056][T19953] usb 1-1: USB disconnect, device number 27 [ 682.529293][ T39] usb 1-1: unable to get target info from device [ 682.549571][ T39] usb 1-1: could not get target info (-71) [ 682.556870][T23561] netlink: 'syz.8.8442': attribute type 7 has an invalid length. [ 682.598077][ T39] usb 1-1: could not probe fw (-71) [ 682.643748][T17417] EXT4-fs (loop7): unmounting filesystem. [ 682.920078][T23567] loop8: detected capacity change from 0 to 8 [ 683.325609][T23581] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8451'. [ 683.364448][T23581] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8451'. [ 683.437445][T23586] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.692686][T23595] ERROR: device name not specified. [ 683.936557][T23605] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 684.273217][T23618] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8466'. [ 684.513660][T23626] xt_l2tp: unknown flags: 17 [ 684.565881][T23631] loop7: detected capacity change from 0 to 1024 [ 684.576458][T23633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8475'. [ 684.600198][T23631] EXT4-fs: Ignoring removed oldalloc option [ 684.633135][T23631] EXT4-fs: Ignoring removed orlov option [ 684.748168][T23631] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 684.767925][T23640] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 684.969248][T17417] EXT4-fs (loop7): unmounting filesystem. [ 685.248219][T23659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8486'. [ 685.370268][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.376720][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.529064][T23667] loop3: detected capacity change from 0 to 764 [ 686.158164][T23693] netlink: 'syz.6.8504': attribute type 1 has an invalid length. [ 686.509535][T23707] loop8: detected capacity change from 0 to 47 [ 686.645261][T23713] netlink: 'syz.6.8513': attribute type 8 has an invalid length. [ 686.693100][T19953] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 686.897363][T19953] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 686.933034][T19953] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.975460][T19953] usb 8-1: Product: syz [ 686.979703][T19953] usb 8-1: Manufacturer: syz [ 686.994745][T19953] usb 8-1: SerialNumber: syz [ 687.014481][T19953] r8152-cfgselector 8-1: config 0 descriptor?? [ 687.333786][T23709] loop3: detected capacity change from 0 to 32768 [ 687.449261][T19953] r8152-cfgselector 8-1: Unknown version 0x0000 [ 687.474081][T19953] r8152-cfgselector 8-1: USB disconnect, device number 8 [ 688.403335][ T7407] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 688.583160][ T7407] usb 4-1: Using ep0 maxpacket: 32 [ 688.609444][ T7407] usb 4-1: config 0 has an invalid interface number: 200 but max is 0 [ 688.630821][ T7407] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.661225][ T7407] usb 4-1: config 0 has no interface number 0 [ 688.672421][ T7407] usb 4-1: config 0 interface 200 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 688.686109][T23763] ceph: Path missing in source [ 688.701327][ T7407] usb 4-1: config 0 interface 200 has no altsetting 0 [ 688.722716][ T7407] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=d3.fc [ 688.758434][ T7407] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.773794][ T7407] usb 4-1: Product: syz [ 688.778028][ T7407] usb 4-1: Manufacturer: syz [ 688.803169][ T7407] usb 4-1: SerialNumber: syz [ 688.816862][ T7407] usb 4-1: config 0 descriptor?? [ 689.027842][ T7407] qmi_wwan: probe of 4-1:0.200 failed with error -22 [ 689.044707][ T7407] usb 4-1: USB disconnect, device number 37 [ 689.381572][T23787] netlink: 'syz.6.8551': attribute type 3 has an invalid length. [ 689.545971][T23793] usb usb1: check_ctrlrecip: process 23793 (syz.6.8553) requesting ep 01 but needs 81 [ 689.596495][T23795] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8554'. [ 689.605401][T23793] usb usb1: usbfs: process 23793 (syz.6.8553) did not claim interface 0 before use [ 689.690373][T23795] netlink: 'syz.7.8554': attribute type 1 has an invalid length. [ 690.080799][T23812] netlink: 'syz.3.8562': attribute type 12 has an invalid length. [ 690.274854][T23820] loop6: detected capacity change from 0 to 1024 [ 690.577237][T23830] loop7: detected capacity change from 0 to 8 [ 690.800544][T23838] ubi31: attaching mtd0 [ 690.883711][T23838] ubi31: scanning is finished [ 690.888627][T23838] ubi31: empty MTD device detected [ 691.149800][T23838] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 691.192161][T23838] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 691.223166][T23838] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 691.253223][T23838] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 691.287291][T23838] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 691.343377][T23838] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 691.387937][T23838] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 807545570 [ 691.447996][T23838] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 691.510921][T23847] ubi31: background thread "ubi_bgt31d" started, PID 23847 [ 691.856958][T23866] loop7: detected capacity change from 0 to 256 [ 692.535239][T23889] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8597'. [ 692.809481][T23902] loop8: detected capacity change from 0 to 512 [ 692.922236][T23902] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 692.935263][T23902] EXT4-fs (loop8): 1 truncate cleaned up [ 692.941049][T23902] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 692.972304][T23902] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.8601: Logical block already allocated [ 693.031348][T23908] loop6: detected capacity change from 0 to 4096 [ 693.069150][T23902] EXT4-fs (loop8): Remounting filesystem read-only [ 693.076480][T23908] NILFS (loop6): invalid segment: Checksum error in segment payload [ 693.113074][T23908] NILFS (loop6): trying rollback from an earlier position [ 693.174068][T23908] NILFS (loop6): recovery complete [ 693.203703][T23915] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 693.226268][T19410] EXT4-fs (loop8): unmounting filesystem. [ 693.398954][T23919] loop8: detected capacity change from 0 to 64 [ 693.487969][T23921] loop7: detected capacity change from 0 to 512 [ 693.528491][T23921] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 693.562280][T23921] EXT4-fs (loop7): invalid journal inode [ 693.583891][T23898] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 693.603277][T23921] EXT4-fs (loop7): can't get journal size [ 693.727540][T23921] EXT4-fs (loop7): 1 truncate cleaned up [ 693.772685][T23921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 694.099729][T17417] EXT4-fs (loop7): unmounting filesystem. [ 694.665694][T23956] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 694.698212][T23956] device bond4 entered promiscuous mode [ 694.704462][T23956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 694.803392][ T4256] Bluetooth: hci0: command 0x080f tx timeout [ 694.833079][ T7406] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 694.849247][T23924] loop6: detected capacity change from 0 to 32768 [ 694.935642][T23924] XFS (loop6): Mounting V5 Filesystem [ 694.986197][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8631'. [ 695.033102][ T7406] usb 8-1: Using ep0 maxpacket: 16 [ 695.040301][ T7406] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.041885][T23974] netlink: 'syz.3.8631': attribute type 2 has an invalid length. [ 695.060415][ T7406] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.090817][ T7406] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 695.100820][T23974] netlink: 'syz.3.8631': attribute type 1 has an invalid length. [ 695.153907][T23974] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8631'. [ 695.163631][ T7406] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 695.192808][ T7406] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.215416][T23924] XFS (loop6): Ending clean mount [ 695.224150][ T7406] usb 8-1: config 0 descriptor?? [ 695.234638][T23924] XFS (loop6): Quotacheck needed: Please wait. [ 695.270043][ T7406] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input28 [ 695.299641][ T3609] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 695.413488][ T3609] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 695.433318][T23924] XFS (loop6): Quotacheck: Done. [ 695.463551][ T3609] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 695.478027][ T3609] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 695.511155][T23954] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 695.545666][T19953] usb 8-1: USB disconnect, device number 9 [ 695.547927][ T4815] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -19 [ 695.759593][T15210] XFS (loop6): Unmounting Filesystem [ 695.938390][T23991] loop3: detected capacity change from 0 to 4096 [ 695.997713][T23991] NILFS (loop3): invalid segment: Checksum error in segment payload [ 696.028544][T23991] NILFS (loop3): trying rollback from an earlier position [ 696.141547][T23991] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 696.221852][T23991] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state [ 696.434699][T24007] SET target dimension over the limit! [ 697.363913][ T26] audit: type=1326 audit(1750423896.956:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.7.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f7b8e929 code=0x7ffc0000 [ 697.459201][ T26] audit: type=1326 audit(1750423896.956:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.7.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f03f7b8e929 code=0x7ffc0000 [ 697.527255][ T26] audit: type=1326 audit(1750423896.956:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.7.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f7b8e929 code=0x7ffc0000 [ 697.650102][ T26] audit: type=1326 audit(1750423896.956:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24042 comm="syz.7.8665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f7b8e929 code=0x7ffc0000 [ 697.672633][ C1] vkms_vblank_simulate: vblank timer overrun [ 697.898390][T24061] loop7: detected capacity change from 0 to 190 [ 697.932025][T24061] ntfs: (device loop7): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 697.992269][T24061] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 698.055888][T24061] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 698.102868][ T26] audit: type=1326 audit(1750423897.686:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24064 comm="syz.8.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 698.125390][ C1] vkms_vblank_simulate: vblank timer overrun [ 698.159997][T24061] ntfs: volume version 0.0. [ 698.173179][T24061] ntfs: (device loop7): load_system_files(): Disabling sparse support due to NTFS volume version 0.0 (need at least version 3.0). [ 698.205870][ T26] audit: type=1326 audit(1750423897.696:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24064 comm="syz.8.8676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 698.241228][T24061] syz.7.8674: attempt to access beyond end of device [ 698.241228][T24061] loop7: rw=0, sector=552, nr_sectors = 8 limit=190 [ 698.341971][T24071] loop6: detected capacity change from 0 to 8 [ 698.993086][T19953] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 699.127178][T24099] netlink: 'syz.6.8692': attribute type 8 has an invalid length. [ 699.208690][T19953] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 699.237589][T19953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.267317][T19953] usb 1-1: config 0 descriptor?? [ 699.364398][T24108] loop6: detected capacity change from 0 to 16 [ 699.441833][T24108] erofs: (device loop6): mounted with root inode @ nid 36. [ 699.693857][T19953] usb 1-1: Cannot set MAC address [ 699.706027][T19953] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 699.736064][T19953] usb 1-1: USB disconnect, device number 28 [ 699.955524][T24129] loop3: detected capacity change from 0 to 64 [ 700.549941][T24150] loop7: detected capacity change from 0 to 256 [ 700.610310][T24150] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb22115ea, utbl_chksum : 0xe619d30d) [ 701.600489][T24147] loop3: detected capacity change from 0 to 32768 [ 701.649438][T24181] netlink: 'syz.7.8732': attribute type 4 has an invalid length. [ 702.222088][T24194] netlink: 'syz.8.8739': attribute type 2 has an invalid length. [ 702.250683][T24194] netlink: 'syz.8.8739': attribute type 11 has an invalid length. [ 702.301544][T24194] netlink: 132 bytes leftover after parsing attributes in process `syz.8.8739'. [ 702.436344][T24195] loop7: detected capacity change from 0 to 4096 [ 702.493388][T24195] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 702.644371][T24204] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 702.660288][T24179] loop6: detected capacity change from 0 to 32768 [ 702.720694][T24179] jfs_strtoUCS: char2uni returned -22. [ 702.791915][T24179] charset = cp936, char = 0xd4 [ 703.188461][T24219] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 703.590039][T24222] loop7: detected capacity change from 0 to 4096 [ 703.652843][T24222] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 703.933584][T24242] bridge0: port 3(macvlan0) entered blocking state [ 703.950924][T24242] bridge0: port 3(macvlan0) entered disabled state [ 703.988938][T24242] device macvlan0 entered promiscuous mode [ 704.034581][T24242] bridge0: port 3(macvlan0) entered blocking state [ 704.041222][T24242] bridge0: port 3(macvlan0) entered forwarding state [ 704.358923][T24260] netlink: 10 bytes leftover after parsing attributes in process `syz.7.8771'. [ 704.499129][T24262] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 704.599724][T24268] loop7: detected capacity change from 0 to 256 [ 704.742434][T24272] netlink: 476 bytes leftover after parsing attributes in process `syz.0.8778'. [ 704.752822][T24268] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb080095b, utbl_chksum : 0xe619d30d) [ 704.861978][T24275] loop3: detected capacity change from 0 to 1024 [ 704.926597][T24275] EXT4-fs: Ignoring removed bh option [ 704.932131][T24275] EXT4-fs: inline encryption not supported [ 705.136250][T24275] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 705.225168][T24275] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm syz.3.8779: lblock 2 mapped to illegal pblock 2 (length 1) [ 705.286369][T24275] __quota_error: 9 callbacks suppressed [ 705.286391][T24275] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 705.319789][T24275] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 48: comm syz.3.8779: lblock 0 mapped to illegal pblock 48 (length 1) [ 705.388087][T24275] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 705.413240][T24275] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.8779: Failed to acquire dquot type 0 [ 705.453320][T24275] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 705.472724][T24295] loop7: detected capacity change from 0 to 4096 [ 705.480477][T24275] EXT4-fs error (device loop3): ext4_evict_inode:279: inode #11: comm syz.3.8779: mark_inode_dirty error [ 705.516595][T24275] EXT4-fs warning (device loop3): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 705.543281][T24275] EXT4-fs (loop3): 1 orphan inode deleted [ 705.559705][T24295] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 705.563365][T24275] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 705.581265][ T39] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 705.619680][T24295] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 705.634919][ T39] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 705.670656][ T39] EXT4-fs error (device loop3): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 0 [ 705.723863][T24295] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 705.811135][T24295] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 705.847528][ T9] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #3: block 2: comm kworker/u4:0: lblock 2 mapped to illegal pblock 2 (length 1) [ 705.893233][T24295] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 705.933182][ T9] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 705.963605][ T9] EXT4-fs error (device loop3): ext4_write_dquot:6794: comm kworker/u4:0: Failed to commit dquot type 0 [ 705.969862][T24295] ntfs: volume version 3.1. [ 706.015258][T24295] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 706.038778][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 706.066487][ T4259] EXT4-fs error (device loop3): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 706.131801][ T4259] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 706.182100][ T4259] EXT4-fs error (device loop3): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error [ 706.261686][T24284] loop8: detected capacity change from 0 to 32768 [ 706.386936][T24317] loop6: detected capacity change from 0 to 4096 [ 706.402635][T24317] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 706.418174][T24284] XFS (loop8): Mounting V5 Filesystem [ 706.527527][T24317] ntfs3: loop6: Failed to load $Extend. [ 706.614381][T24284] XFS (loop8): Ending clean mount [ 706.653863][T24284] XFS (loop8): Quotacheck needed: Please wait. [ 706.749696][T24284] XFS (loop8): Quotacheck: Done. [ 706.988885][T19410] XFS (loop8): Unmounting Filesystem [ 707.294849][T24342] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:0 [ 707.947166][T24336] loop6: detected capacity change from 0 to 40427 [ 707.965073][T24336] F2FS-fs (loop6): Wrong segment_count / block_count (64 > 16384) [ 707.973551][T24336] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 708.054630][T24336] F2FS-fs (loop6): Found nat_bits in checkpoint [ 708.170723][T24336] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 708.188458][T24336] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 708.548623][T15210] syz-executor: attempt to access beyond end of device [ 708.548623][T15210] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 708.805870][T24386] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 709.531980][T24410] IPVS: Error connecting to the multicast addr [ 709.574384][T24412] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8836'. [ 709.791006][T24417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8838'. [ 709.865448][T24421] loop6: detected capacity change from 0 to 512 [ 709.916551][T24421] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 710.004985][T24421] EXT4-fs (loop6): 1 truncate cleaned up [ 710.011062][T24421] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 710.075827][T24390] loop7: detected capacity change from 0 to 32768 [ 710.105425][T24390] [ 710.105425][T24390] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 710.105425][T24390] [ 710.142763][T24421] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2195: inode #15: comm syz.6.8839: corrupted in-inode xattr [ 710.170432][T24430] loop3: detected capacity change from 0 to 256 [ 710.184756][T24421] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1732: inode #15: comm syz.6.8839: unable to update i_inline_off [ 710.190423][T24390] [ 710.190423][T24390] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 710.190423][T24390] [ 710.230171][T24421] EXT4-fs error (device loop6): ext4_xattr_ibody_get:603: inode #15: comm syz.6.8839: corrupted in-inode xattr [ 710.248660][T24390] [ 710.248660][T24390] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 710.248660][T24390] [ 710.252523][T24430] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 710.333137][ T8360] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 710.452090][T15210] EXT4-fs (loop6): unmounting filesystem. [ 710.523215][ T8360] usb 9-1: Using ep0 maxpacket: 16 [ 710.530465][ T8360] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 710.580735][ T8360] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.614061][T24435] loop7: detected capacity change from 0 to 64 [ 710.614194][ T8360] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 710.689277][ T8360] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 710.706044][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 710.706063][ T26] audit: type=1107 audit(1750423910.296:2074): pid=24438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='L<5' [ 710.764680][ T8360] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.803173][ T8360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.811239][ T8360] usb 9-1: Product: syz [ 710.853197][ T8360] usb 9-1: Manufacturer: syz [ 710.857879][ T8360] usb 9-1: SerialNumber: syz [ 710.946426][T24447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8851'. [ 711.157641][ T8360] usb 9-1: USB disconnect, device number 8 [ 711.163894][T24453] netlink: 'syz.7.8855': attribute type 5 has an invalid length. [ 711.455613][ T4815] udevd[4815]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.913218][T24477] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8867'. [ 712.647425][T24508] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8881'. [ 713.219146][T24491] loop8: detected capacity change from 0 to 32768 [ 713.306263][T24491] ERROR: (device loop8): dbAlloc: the hint is outside the map [ 713.306263][T24491] [ 713.335315][T24491] ERROR: (device loop8): remounting filesystem as read-only [ 713.495490][ T7403] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 713.713303][ T7403] usb 4-1: Using ep0 maxpacket: 32 [ 713.722779][ T7403] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 713.773223][ T7403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.781416][ T7403] usb 4-1: Product: syz [ 713.821042][ T7403] usb 4-1: Manufacturer: syz [ 713.836933][ T7403] usb 4-1: SerialNumber: syz [ 713.863520][ T7403] usb 4-1: config 0 descriptor?? [ 713.980980][T24517] loop7: detected capacity change from 0 to 32768 [ 714.078899][ T7403] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 714.099885][ T7403] eb 00 00 00 00 00 00 00 [ 714.113154][ T7403] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 714.152086][T24517] XFS (loop7): Mounting V5 Filesystem [ 714.269363][T24566] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8906'. [ 714.312108][ T7403] usb 4-1: USB disconnect, device number 38 [ 714.371304][T24517] XFS (loop7): Ending clean mount [ 714.434827][T24517] XFS (loop7): Quotacheck needed: Please wait. [ 714.543901][T24517] XFS (loop7): Quotacheck: Done. [ 714.573600][T24575] overlayfs: missing 'lowerdir' [ 714.709967][T17417] XFS (loop7): Unmounting Filesystem [ 714.792360][T24582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 715.622055][T24608] loop3: detected capacity change from 0 to 2048 [ 715.696634][T24608] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 715.743286][T24608] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 715.950632][T24618] loop6: detected capacity change from 0 to 64 [ 716.485749][T24636] netlink: 'syz.3.8938': attribute type 13 has an invalid length. [ 716.536533][T24636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8938'. [ 716.553480][T24636] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 716.576919][T24640] device xfrm1 entered promiscuous mode [ 716.924479][T24656] loop7: detected capacity change from 0 to 256 [ 716.998108][T24657] [U] v3f"S/4:XTzWtlW= [ 717.005484][T24657] [U] J"e:" [ 717.008197][T24656] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36e06c6e, utbl_chksum : 0xe619d30d) [ 717.110615][ T26] audit: type=1800 audit(1750423916.696:2075): pid=24656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.8947" name="file2" dev="loop7" ino=1048700 res=0 errno=0 [ 717.624918][T24675] loop8: detected capacity change from 0 to 256 [ 717.632074][T24675] exfat: Deprecated parameter 'utf8' [ 717.698582][T24675] exfat: Deprecated parameter 'utf8' [ 717.737088][T24675] exfat: Deprecated parameter 'namecase' [ 717.782911][T24675] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 717.834726][T24681] loop3: detected capacity change from 0 to 1024 [ 717.943826][ T7405] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 718.133045][ T7405] usb 7-1: Using ep0 maxpacket: 8 [ 718.140975][ T7405] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.199742][ T7405] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 718.220023][T24691] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 718.228780][ T7405] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.237730][ T7405] usb 7-1: Product: syz [ 718.273383][ T7405] usb 7-1: Manufacturer: syz [ 718.278049][ T7405] usb 7-1: SerialNumber: syz [ 718.308829][ T7405] usb 7-1: config 0 descriptor?? [ 718.328380][ T7405] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 718.370866][ T7405] usb 7-1: selecting invalid altsetting 1 [ 718.694716][T24708] cgroup: Invalid name [ 718.761733][ T8360] usb 7-1: USB disconnect, device number 15 [ 719.304732][T24730] loop3: detected capacity change from 0 to 512 [ 719.377013][T24730] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 719.405895][T24730] EXT4-fs (loop3): invalid journal inode [ 719.453874][T24730] EXT4-fs (loop3): can't get journal size [ 719.557968][T24730] EXT4-fs (loop3): 1 truncate cleaned up [ 719.614948][T24730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 720.029474][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 720.216834][T24764] loop3: detected capacity change from 0 to 256 [ 720.313156][T24768] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9002'. [ 720.348495][T24764] FAT-fs (loop3): Directory bread(block 64) failed [ 720.413249][T24764] FAT-fs (loop3): Directory bread(block 65) failed [ 720.420406][T24764] FAT-fs (loop3): Directory bread(block 66) failed [ 720.443299][T24764] FAT-fs (loop3): Directory bread(block 67) failed [ 720.484105][T24764] FAT-fs (loop3): Directory bread(block 68) failed [ 720.529163][T24764] FAT-fs (loop3): Directory bread(block 69) failed [ 720.553526][T24764] FAT-fs (loop3): Directory bread(block 70) failed [ 720.580596][T24764] FAT-fs (loop3): Directory bread(block 71) failed [ 720.603684][T24774] loop7: detected capacity change from 0 to 128 [ 720.612251][T24764] FAT-fs (loop3): Directory bread(block 72) failed [ 720.632524][T24764] FAT-fs (loop3): Directory bread(block 73) failed [ 720.698369][T24774] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 720.775783][T24774] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 721.267643][T24792] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9014'. [ 721.285885][T24758] loop6: detected capacity change from 0 to 32768 [ 721.331180][T24758] ERROR: (device loop6): diNewExt: no free extents [ 721.331180][T24758] [ 721.420409][T24758] ERROR: (device loop6): remounting filesystem as read-only [ 721.443726][T24758] ialloc: diAlloc returned -5! [ 721.470682][T24795] loop8: detected capacity change from 0 to 164 [ 721.553792][T24795] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 721.606111][T24795] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 721.763320][ T7405] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 721.955295][ T7405] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 721.956951][T24810] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9023'. [ 721.979288][ T7405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.013989][ T7405] usb 1-1: config 0 descriptor?? [ 722.044089][T24814] loop7: detected capacity change from 0 to 16 [ 722.072271][T24814] erofs: (device loop7): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 26222) [ 722.451514][ T7405] mxuport 1-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 722.473196][ T7405] mxuport: probe of 1-1:0.0 failed with error -5 [ 722.517707][ T7405] usb 1-1: USB disconnect, device number 29 [ 722.834828][T24838] binder: 24837:24838 ioctl c018620c 200000000380 returned -22 [ 723.507141][T24864] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9050'. [ 723.614121][T24868] device xfrm0 entered promiscuous mode [ 723.695457][T24870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9053'. [ 724.235929][T24890] loop3: detected capacity change from 0 to 512 [ 724.398151][T24890] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 724.412613][T24890] ext4 filesystem being mounted at /1834/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.474451][T24905] xt_hashlimit: size too large, truncated to 1048576 [ 724.503736][T24905] xt_hashlimit: overflow, try lower: 0/0 [ 724.542728][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 725.844601][T24956] device ip6gre1 entered promiscuous mode [ 727.014040][ T26] audit: type=1326 audit(1750423926.606:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25004 comm="syz.0.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5d8e929 code=0x7ffc0000 [ 727.121573][ T26] audit: type=1326 audit(1750423926.626:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25004 comm="syz.0.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f27a5d8e929 code=0x7ffc0000 [ 727.212570][ T26] audit: type=1326 audit(1750423926.626:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25004 comm="syz.0.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5d8e929 code=0x7ffc0000 [ 727.292206][ T26] audit: type=1326 audit(1750423926.626:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25004 comm="syz.0.9117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5d8e929 code=0x7ffc0000 [ 727.440667][ T127] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 727.625897][ T127] usb 9-1: Using ep0 maxpacket: 32 [ 727.633679][ T127] usb 9-1: config 0 has an invalid interface number: 250 but max is 2 [ 727.660249][ T127] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.743020][ T127] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 727.751956][ T127] usb 9-1: config 0 has no interface number 0 [ 727.778968][ T127] usb 9-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 727.813114][ T127] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.821235][ T127] usb 9-1: Product: syz [ 727.843008][ T127] usb 9-1: Manufacturer: syz [ 727.853383][ T127] usb 9-1: SerialNumber: syz [ 727.867916][T25029] loop6: detected capacity change from 0 to 4096 [ 727.878626][ T127] usb 9-1: config 0 descriptor?? [ 727.923505][T25029] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 728.033121][T25029] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 728.156293][ T7405] usb 9-1: USB disconnect, device number 9 [ 728.199843][T25043] netlink: 'syz.7.9136': attribute type 2 has an invalid length. [ 728.519175][T25055] netlink: 148 bytes leftover after parsing attributes in process `syz.0.9142'. [ 728.548867][T25055] netlink: 'syz.0.9142': attribute type 1 has an invalid length. [ 728.582827][T25055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9142'. [ 729.097814][T25075] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 729.099872][T25075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 729.100001][T25075] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 729.601521][T25087] loop3: detected capacity change from 0 to 4096 [ 729.654480][T25095] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 729.971582][T25102] loop6: detected capacity change from 0 to 512 [ 729.984304][T25103] loop7: detected capacity change from 0 to 1024 [ 730.028675][T25102] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 730.092211][T25103] hfsplus: xattr searching failed [ 730.103618][T25102] EXT4-fs (loop6): invalid journal inode [ 730.110357][T25102] EXT4-fs (loop6): can't get journal size [ 730.202061][T25102] EXT4-fs (loop6): 1 truncate cleaned up [ 730.239056][T25102] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 730.407843][T25114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9170'. [ 730.424440][T25114] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9170'. [ 730.483510][T25114] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9170'. [ 730.496517][T25118] netlink: 'syz.8.9172': attribute type 9 has an invalid length. [ 730.524260][T25114] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 730.532917][T25118] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.9172'. [ 730.624762][T15210] EXT4-fs (loop6): unmounting filesystem. [ 730.863188][T25126] x_tables: duplicate underflow at hook 2 [ 730.895864][T25120] loop7: detected capacity change from 0 to 4096 [ 731.031837][T25120] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 731.213892][T17417] EXT4-fs (loop7): unmounting filesystem. [ 731.350344][T25137] loop8: detected capacity change from 0 to 8 [ 731.443793][ T127] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 731.644844][ T127] usb 7-1: config 0 has an invalid interface number: 194 but max is 0 [ 731.659250][ T127] usb 7-1: config 0 has no interface number 0 [ 731.675764][ T127] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2 [ 731.701254][ T127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.719794][ T127] usb 7-1: Product: syz [ 731.733576][ T127] usb 7-1: Manufacturer: syz [ 731.770963][ T127] usb 7-1: SerialNumber: syz [ 731.813365][ T127] usb 7-1: config 0 descriptor?? [ 732.005169][T25129] loop3: detected capacity change from 0 to 32768 [ 732.061046][T25129] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 732.104836][T25129] OCFS2: ERROR (device loop3): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 732.143147][T25129] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 732.156652][T25129] OCFS2: Returning error to the calling process. [ 732.172605][T25129] (syz.3.9177,25129,0):ocfs2_reserve_suballoc_bits:850 ERROR: status = -5 [ 732.182737][T25129] (syz.3.9177,25129,0):ocfs2_reserve_new_inode:1091 ERROR: status = -5 [ 732.191796][T25129] (syz.3.9177,25129,0):ocfs2_reserve_new_inode:1114 ERROR: status = -5 [ 732.202740][T25129] (syz.3.9177,25129,0):ocfs2_mknod:306 ERROR: status = -5 [ 732.211000][T25129] (syz.3.9177,25129,0):ocfs2_mknod:502 ERROR: status = -5 [ 732.227793][T25129] (syz.3.9177,25129,0):ocfs2_mkdir:659 ERROR: status = -5 [ 732.232762][ T127] usb 7-1: USB disconnect, device number 16 [ 732.245931][ T127] f81534a_ctrl 7-1:0.194: failed to set register 0x116: -19 [ 732.266799][T25159] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 732.286878][ T127] f81534a_ctrl 7-1:0.194: failed to enable ports: -19 [ 732.392242][ T4259] ocfs2: Unmounting device (7,3) on (node local) [ 732.849384][T25175] loop7: detected capacity change from 0 to 1024 [ 732.884124][T25175] EXT4-fs: inline encryption not supported [ 732.890096][T25175] EXT4-fs: Ignoring removed i_version option [ 732.987420][T25183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9200'. [ 733.026697][T25175] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 2: comm syz.7.9198: lblock 2 mapped to illegal pblock 2 (length 1) [ 733.129374][T25175] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 733.173411][T25175] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 48: comm syz.7.9198: lblock 0 mapped to illegal pblock 48 (length 1) [ 733.228024][T25175] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 733.293233][T25175] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.9198: Failed to acquire dquot type 0 [ 733.357184][T25175] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 733.410750][T25175] EXT4-fs error (device loop7): ext4_evict_inode:279: inode #11: comm syz.7.9198: mark_inode_dirty error [ 733.446934][T25175] EXT4-fs warning (device loop7): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 733.492396][T25175] EXT4-fs (loop7): 1 orphan inode deleted [ 733.503894][ T2932] EXT4-fs error (device loop7): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 733.520054][T25196] loop8: detected capacity change from 0 to 4096 [ 733.533200][T25175] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 733.565893][ T2932] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 733.567154][T25196] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 733.583391][ T2932] EXT4-fs error (device loop7): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 0 [ 733.612522][T25205] loop6: detected capacity change from 0 to 164 [ 733.625257][T25175] EXT4-fs (loop7): unmounting filesystem. [ 733.632558][T25175] EXT4-fs error (device loop7): __ext4_get_inode_loc:4507: comm syz.7.9198: Invalid inode table block 1 in block_group 0 [ 733.683695][T25175] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 733.731895][T25175] EXT4-fs error (device loop7): ext4_quota_off:7120: inode #3: comm syz.7.9198: mark_inode_dirty error [ 734.913062][ T7405] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 735.114988][ T7405] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 735.134481][ T7405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.155069][ T7405] usb 1-1: config 0 descriptor?? [ 735.187054][T25219] loop7: detected capacity change from 0 to 32768 [ 735.274344][T25219] jfs_lookup: iget failed on inum 32 [ 735.373049][ T7405] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 735.403218][ T7405] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 735.569800][T25262] loop8: detected capacity change from 0 to 1024 [ 735.582578][ T7405] [drm:udl_init] *ERROR* Selecting channel failed [ 735.658795][ T7405] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 735.733143][ T7405] [drm] Initialized udl on minor 2 [ 735.793398][ T7405] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 735.832652][ T4321] hfsplus: b-tree write err: -5, ino 4 [ 735.833342][ T7405] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 735.874974][ T7405] usb 1-1: USB disconnect, device number 30 [ 736.044279][T25273] ieee802154 phy0 wpan0: encryption failed: -90 [ 736.421264][T25286] loop3: detected capacity change from 0 to 736 [ 736.560582][T25286] rock: directory entry would overflow storage [ 736.579311][T25286] rock: sig=0x3b10, size=4, remaining=3 [ 736.755967][T25298] loop8: detected capacity change from 0 to 1024 [ 736.772766][T25292] loop7: detected capacity change from 0 to 4096 [ 736.838599][T25300] netlink: 'syz.0.9257': attribute type 6 has an invalid length. [ 736.864226][T25292] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 736.953096][ T7405] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 736.986406][T25305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9259'. [ 737.124095][T17417] EXT4-fs (loop7): unmounting filesystem. [ 737.130324][ T2932] hfsplus: b-tree write err: -5, ino 8 [ 737.146551][ T7405] usb 7-1: Using ep0 maxpacket: 16 [ 737.165829][ T7405] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 737.234574][ T7405] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.273425][ T7405] usb 7-1: Product: syz [ 737.283640][ T7405] usb 7-1: Manufacturer: syz [ 737.298537][ T7405] usb 7-1: SerialNumber: syz [ 737.336776][ T7405] r8152-cfgselector 7-1: config 0 descriptor?? [ 737.623627][T25325] loop7: detected capacity change from 0 to 2048 [ 737.683343][T25325] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 737.787692][ T7405] r8152-cfgselector 7-1: Unknown version 0x0000 [ 737.797619][T17417] EXT4-fs (loop7): unmounting filesystem. [ 737.798844][ T7405] r8152-cfgselector 7-1: USB disconnect, device number 17 [ 737.987144][T25334] loop7: detected capacity change from 0 to 128 [ 738.023871][T25334] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 738.082469][ T26] audit: type=1800 audit(1750423937.666:2080): pid=25334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.9272" name="file2" dev="loop7" ino=1048703 res=0 errno=0 [ 738.122799][T25334] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 738.132143][T25334] FAT-fs (loop7): Filesystem has been set read-only [ 738.680081][T25361] ieee802154 phy0 wpan0: encryption failed: -90 [ 738.922285][T25364] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 739.236180][T25380] 9pnet: Found fid 0 not clunked [ 739.457575][T25388] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9299'. [ 739.529692][T25390] loop8: detected capacity change from 0 to 512 [ 739.604975][T25385] loop7: detected capacity change from 0 to 4096 [ 739.612522][T25385] ntfs: (device loop7): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 739.633279][ C0] vkms_vblank_simulate: vblank timer overrun [ 739.687548][T25390] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 739.716327][T25385] ntfs: (device loop7): parse_options(): NLS character set macgre not found. Using previous one utf8. [ 739.728284][T25385] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 739.728309][T25390] ext4 filesystem being mounted at /485/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 739.831592][T25385] ntfs: (device loop7): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 739.861126][T19410] EXT4-fs (loop8): unmounting filesystem. [ 739.933382][T25385] ntfs: volume version 3.1. [ 740.136092][T25407] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9305'. [ 740.183814][T25407] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9305'. [ 740.283117][T25409] loop3: detected capacity change from 0 to 2048 [ 740.338321][T25413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9310'. [ 740.375556][T25409] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 740.642899][T25421] netlink: 132 bytes leftover after parsing attributes in process `syz.8.9314'. [ 740.820676][ T26] audit: type=1326 audit(1750423940.406:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25424 comm="syz.7.9316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03f7b8e929 code=0x0 [ 741.041792][T25403] loop6: detected capacity change from 0 to 32768 [ 741.074373][T25403] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.9306 (25403) [ 741.127404][T25403] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 741.203239][T25403] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 741.249141][T25403] BTRFS info (device loop6): using free space tree [ 741.258486][T25440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9324'. [ 741.308516][T25440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9324'. [ 741.622164][T25403] BTRFS info (device loop6): enabling ssd optimizations [ 741.755419][ T26] audit: type=1326 audit(1750423941.346:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25475 comm="syz.0.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5d8e929 code=0x7ffc0000 [ 741.855345][ T26] audit: type=1326 audit(1750423941.386:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25475 comm="syz.0.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f27a5d8e929 code=0x7ffc0000 [ 741.883828][T15210] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 741.990896][ T26] audit: type=1326 audit(1750423941.386:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25475 comm="syz.0.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5d8e929 code=0x7ffc0000 [ 742.013674][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.095977][ T26] audit: type=1326 audit(1750423941.386:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25475 comm="syz.0.9332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a5d8e929 code=0x7ffc0000 [ 742.118530][ C0] vkms_vblank_simulate: vblank timer overrun [ 742.178636][T25484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9337'. [ 742.675896][T25506] netlink: 'syz.6.9335': attribute type 21 has an invalid length. [ 742.731513][T25480] loop3: detected capacity change from 0 to 32768 [ 742.765016][T25506] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9335'. [ 742.793234][T25480] (syz.3.9334,25480,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 742.858605][T25480] (syz.3.9334,25480,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 742.955927][T25480] JBD2: Ignoring recovery information on journal [ 743.043658][T25516] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC [ 743.043658][T25516] SȘȞZ6' [ 743.074257][T25480] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 743.369103][ T4259] ocfs2: Unmounting device (7,3) on (node local) [ 743.501741][T25530] loop8: detected capacity change from 0 to 128 [ 743.605101][T25530] FAT-fs (loop8): Directory bread(block 162) failed [ 743.611822][T25530] FAT-fs (loop8): Directory bread(block 163) failed [ 743.673256][T25530] FAT-fs (loop8): Directory bread(block 164) failed [ 743.679953][T25530] FAT-fs (loop8): Directory bread(block 165) failed [ 743.706805][T25530] FAT-fs (loop8): Directory bread(block 166) failed [ 743.746980][T25530] FAT-fs (loop8): Directory bread(block 167) failed [ 743.777046][T25530] FAT-fs (loop8): Directory bread(block 168) failed [ 743.798406][T25530] FAT-fs (loop8): Directory bread(block 169) failed [ 743.810593][T25542] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9358'. [ 743.863899][T25530] FAT-fs (loop8): Directory bread(block 162) failed [ 743.912451][T25542] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9358'. [ 743.921958][T25530] FAT-fs (loop8): Directory bread(block 163) failed [ 743.945017][T25530] syz.8.9352: attempt to access beyond end of device [ 743.945017][T25530] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 743.989937][T25530] syz.8.9352: attempt to access beyond end of device [ 743.989937][T25530] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 744.240270][T25550] device vlan0 entered promiscuous mode [ 744.300504][T25556] device lo entered promiscuous mode [ 744.323425][T25556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 744.743944][T25540] loop3: detected capacity change from 0 to 32768 [ 744.785239][T25540] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.9357 (25540) [ 744.824041][T25572] netlink: 272 bytes leftover after parsing attributes in process `syz.0.9373'. [ 744.858530][T25540] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 744.914132][T25540] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 744.955898][T25540] BTRFS info (device loop3): force zlib compression, level 3 [ 744.975648][T25540] BTRFS info (device loop3): force clearing of disk cache [ 745.032728][T25540] BTRFS info (device loop3): setting nodatasum [ 745.036915][T25579] netlink: 156 bytes leftover after parsing attributes in process `syz.8.9375'. [ 745.042997][T25540] BTRFS info (device loop3): allowing degraded mounts [ 745.102891][T25540] BTRFS info (device loop3): enabling disk space caching [ 745.141258][T25540] BTRFS info (device loop3): disk space caching is enabled [ 745.729918][T25540] BTRFS info (device loop3): rebuilding free space tree [ 745.853300][T25620] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 745.870832][T25540] BTRFS info (device loop3): disabling free space tree [ 745.883326][T25540] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 745.884207][T25622] loop6: detected capacity change from 0 to 128 [ 745.913065][T25540] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 746.042272][T25622] VFS: Found a Xenix FS (block size = 1024) on device loop6 [ 746.115234][T25622] syz.6.9388: attempt to access beyond end of device [ 746.115234][T25622] loop6: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 746.193351][T25622] Buffer I/O error on dev loop6, logical block 3245768, async page read [ 746.329307][ T4259] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 746.384515][T15210] sysv_free_block: flc_count > flc_size [ 746.390756][T15210] sysv_free_block: flc_count > flc_size [ 746.424913][T15210] sysv_free_block: flc_count > flc_size [ 746.430628][T15210] sysv_free_block: flc_count > flc_size [ 746.456408][T15210] sysv_free_block: flc_count > flc_size [ 746.462110][T15210] sysv_free_block: flc_count > flc_size [ 746.503247][T15210] sysv_free_block: flc_count > flc_size [ 746.508899][T15210] sysv_free_block: flc_count > flc_size [ 746.554635][T15210] sysv_free_block: flc_count > flc_size [ 746.560276][T15210] sysv_free_block: flc_count > flc_size [ 746.641687][T15210] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 746.688548][T25637] syz.0.9397 (25637): /proc/25636/oom_adj is deprecated, please use /proc/25636/oom_score_adj instead. [ 746.809886][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.818319][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.894366][T25621] loop8: detected capacity change from 0 to 32768 [ 747.134938][T25621] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 747.162606][T25621] (syz.8.9385,25621,0):ocfs2_find_entry:1086 ERROR: status = -117 [ 747.184409][T25621] (syz.8.9385,25621,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 747.238245][T25656] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9402'. [ 747.277184][T25621] (syz.8.9385,25621,1):ocfs2_mknod:502 ERROR: status = -117 [ 747.323390][T25621] (syz.8.9385,25621,1):ocfs2_mkdir:659 ERROR: status = -117 [ 747.352775][T25659] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9401'. [ 747.383210][T25659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9401'. [ 747.426790][T25659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9401'. [ 747.506953][T19410] ocfs2: Unmounting device (7,8) on (node local) [ 747.548317][T25663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9404'. [ 747.742660][T25661] Invalid option length (0) for dns_resolver key [ 747.923970][ T26] audit: type=1326 audit(1750423947.516:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25672 comm="syz.7.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f7b8e929 code=0x7ffc0000 [ 747.946521][ C0] vkms_vblank_simulate: vblank timer overrun [ 748.060142][ T26] audit: type=1326 audit(1750423947.516:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25672 comm="syz.7.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f03f7b8e929 code=0x7ffc0000 [ 748.103326][T25679] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9412'. [ 748.147630][T25679] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9412'. [ 748.173911][ T26] audit: type=1326 audit(1750423947.516:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25672 comm="syz.7.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f7b8e929 code=0x7ffc0000 [ 748.293080][ T26] audit: type=1326 audit(1750423947.516:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25672 comm="syz.7.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f7b8e929 code=0x7ffc0000 [ 748.457688][T25692] xt_CT: You must specify a L4 protocol and not use inversions on it [ 748.534065][T25695] netlink: 830 bytes leftover after parsing attributes in process `syz.8.9420'. [ 749.135723][T25723] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.9434' sets config #1 [ 749.364152][T25728] xt_HMARK: spi-set and port-set can't be combined [ 749.826225][T25744] loop3: detected capacity change from 0 to 256 [ 750.181581][T25756] loop3: detected capacity change from 0 to 190 [ 750.232421][T25756] ntfs: (device loop3): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 750.272123][T25756] ntfs: (device loop3): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 750.363215][T25756] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 750.479291][T25756] ntfs: (device loop3): check_mft_mirror(): Failed to read $MFTMirr. [ 750.517905][T25756] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 750.622645][T25756] ntfs: (device loop3): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 750.648212][T25756] ntfs: volume version 3.1. [ 750.661003][T25756] syz.3.9449: attempt to access beyond end of device [ 750.661003][T25756] loop3: rw=0, sector=552, nr_sectors = 8 limit=190 [ 750.766688][T25756] syz.3.9449: attempt to access beyond end of device [ 750.766688][T25756] loop3: rw=0, sector=552, nr_sectors = 8 limit=190 [ 751.712028][T25796] vivid-002: disconnect [ 751.748442][T25795] vivid-002: reconnect [ 752.182177][T25806] loop8: detected capacity change from 0 to 2048 [ 752.257743][T25806] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 752.920540][T25786] loop3: detected capacity change from 0 to 40427 [ 752.959865][T25786] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 752.993407][T25786] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 753.016541][T25786] F2FS-fs (loop3): build fault injection attr: rate: 1, type: 0x3ffff [ 753.078943][T25786] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x700 [ 753.104133][T25786] F2FS-fs (loop3): inline encryption not supported [ 753.176167][T25786] F2FS-fs (loop3): invalid crc value [ 753.225427][T25786] F2FS-fs (loop3): Found nat_bits in checkpoint [ 753.383763][T25848] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9494'. [ 753.392740][T25786] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 753.413224][T25786] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 753.468592][T25852] netlink: 'syz.8.9495': attribute type 1 has an invalid length. [ 753.479799][T25786] F2FS-fs (loop3) : inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xd6/0x1c0 [ 753.537575][T25786] F2FS-fs (loop3) : inject evict_inode fail in f2fs_evict_inode of evict+0x485/0x870 [ 753.704709][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9498'. [ 753.753067][T25858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9498'. [ 753.800753][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9498'. [ 753.863962][T25858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9498'. [ 754.096197][T25870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.133067][T25870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.155868][T25870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.179665][T25870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.225960][T25870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.237024][T25870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.249858][T25874] loop8: detected capacity change from 0 to 64 [ 754.263954][T25870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 754.289920][T25870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 754.383514][T25870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.414999][T25870] device batadv_slave_0 entered promiscuous mode [ 754.540815][T25878] loop3: detected capacity change from 0 to 4096 [ 754.580823][T25878] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 754.608199][T25886] QAT: failed to copy from user cfg_data. [ 754.956888][T25895] netlink: 344 bytes leftover after parsing attributes in process `syz.7.9515'. [ 755.252363][T25905] loop3: detected capacity change from 0 to 1024 [ 755.873156][T25641] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 756.063469][T25641] usb 4-1: Using ep0 maxpacket: 16 [ 756.074882][T25641] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 756.119782][T25641] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 756.144870][T25641] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 756.176064][T25641] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 756.193059][T25641] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.210595][T25641] usb 4-1: Product: syz [ 756.223143][T25641] usb 4-1: Manufacturer: syz [ 756.227926][T25641] usb 4-1: SerialNumber: syz [ 756.514605][T25918] loop8: detected capacity change from 0 to 32768 [ 756.531504][T25918] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.9527 (25918) [ 756.599005][T25918] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 756.643278][T25918] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 756.675501][T25641] usb 4-1: 0:2 : does not exist [ 756.692912][T25918] BTRFS info (device loop8): force zlib compression, level 3 [ 756.711969][T25641] usb 4-1: USB disconnect, device number 39 [ 756.719018][T25918] BTRFS info (device loop8): force clearing of disk cache [ 756.735504][T25918] BTRFS info (device loop8): setting nodatasum [ 756.758810][T25918] BTRFS info (device loop8): allowing degraded mounts [ 756.800967][T25918] BTRFS info (device loop8): enabling disk space caching [ 756.829525][T25918] BTRFS info (device loop8): disk space caching is enabled [ 756.964494][ T6198] udevd[6198]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.137572][T25918] BTRFS info (device loop8): rebuilding free space tree [ 757.168448][T25918] BTRFS info (device loop8): disabling free space tree [ 757.175771][T25918] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 757.194015][T25918] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 757.230555][T25977] SET target dimension over the limit! [ 757.509708][T19410] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 757.718206][ T6198] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 11 /dev/loop8 scanned by udevd (6198) [ 757.780610][T25990] netlink: 830 bytes leftover after parsing attributes in process `syz.6.9553'. [ 757.819481][T25945] loop7: detected capacity change from 0 to 32768 [ 757.842205][T25990] device bond_slave_0 entered promiscuous mode [ 757.849353][T25990] device bond_slave_1 entered promiscuous mode [ 757.883759][T25945] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 757.920794][T25945] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 758.111529][T25945] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 758.134235][ T117] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 758.141073][ T117] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 758.222837][ T117] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 81ms [ 758.231411][ T117] gfs2: fsid=syz:syz.0: jid=0: Done [ 758.237568][T25945] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 758.393291][T25994] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 758.571824][T26005] loop3: detected capacity change from 0 to 64 [ 758.593037][T25994] usb 1-1: Using ep0 maxpacket: 16 [ 758.596921][T26007] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 758.608390][T25994] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 170, changing to 7 [ 758.703181][T25994] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 758.712923][T25994] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 758.807485][T25994] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 758.860774][T25994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.893176][T25994] usb 1-1: Product: syz [ 758.897416][T25994] usb 1-1: Manufacturer: syz [ 758.902042][T25994] usb 1-1: SerialNumber: syz [ 759.152552][T25994] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 759.237827][T25994] usb 1-1: USB disconnect, device number 31 [ 759.337520][T26021] loop6: detected capacity change from 0 to 2048 [ 759.405719][T26021] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 759.531043][ T6198] udevd[6198]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 759.931552][T26037] loop7: detected capacity change from 0 to 256 [ 759.954888][T26037] exfat: Deprecated parameter 'namecase' [ 760.040997][T26037] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 760.088712][T26043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.130541][T26043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.160050][T26043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.191707][T26043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.233120][T26043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 760.264162][T26043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.316531][T26043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.365231][T26043] device batadv_slave_0 entered promiscuous mode [ 760.806364][T26061] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 760.868992][T26064] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9588'. [ 761.100843][T26071] netlink: 268 bytes leftover after parsing attributes in process `syz.6.9590'. [ 761.151470][T26074] xfrm0 speed is unknown, defaulting to 1000 [ 761.344556][T26078] loop7: detected capacity change from 0 to 256 [ 761.370745][T26081] loop6: detected capacity change from 0 to 256 [ 761.595022][T26085] xt_recent: Unsupported userspace flags (000000de) [ 762.597097][T26117] netlink: 'syz.0.9612': attribute type 9 has an invalid length. [ 762.646085][T26117] netlink: 'syz.0.9612': attribute type 6 has an invalid length. [ 762.768452][T26121] netlink: 'syz.7.9616': attribute type 7 has an invalid length. [ 763.894138][T26159] loop8: detected capacity change from 0 to 4096 [ 764.006486][T26165] xt_CT: No such helper "pptp" [ 764.043057][T25641] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 764.247101][T25641] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 764.259169][T25641] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.282654][T25641] usb 7-1: Product: syz [ 764.287361][T25994] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 764.305424][T25641] usb 7-1: Manufacturer: syz [ 764.315545][T25641] usb 7-1: SerialNumber: syz [ 764.357306][T25641] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 764.408934][T25641] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 764.483232][T25994] usb 4-1: Using ep0 maxpacket: 16 [ 764.491189][T25994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.512745][T26184] overlayfs: missing 'lowerdir' [ 764.522225][T25994] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 764.545789][T25994] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 764.565265][T25994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.595643][T25994] usb 4-1: Product: syz [ 764.599923][T25994] usb 4-1: Manufacturer: syz [ 764.606947][T25508] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 764.648077][T25994] usb 4-1: SerialNumber: syz [ 764.656816][T25994] r8152-cfgselector 4-1: config 0 descriptor?? [ 764.807555][T25508] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 764.821750][T25508] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.839974][T25508] usb 8-1: Product: syz [ 764.846549][T25508] usb 8-1: Manufacturer: syz [ 764.851206][T25508] usb 8-1: SerialNumber: syz [ 764.881091][T25508] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 764.902162][T25994] usbip-host 4-1: 4-1 is not in match_busid table... skip! [ 764.910628][T25496] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 764.923494][T25996] usb 7-1: USB disconnect, device number 18 [ 764.937144][ T2932] usb 4-1: config 0 descriptor?? [ 765.127894][ T2932] usb 4-1: can't set config #0, error -71 [ 765.133906][T25994] usb 4-1: USB disconnect, device number 40 [ 765.325727][T25645] usb 8-1: USB disconnect, device number 10 [ 765.523176][T25641] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 765.537017][T25641] ath9k_htc: Failed to initialize the device [ 765.569488][T25996] usb 7-1: ath9k_htc: USB layer deinitialized [ 765.770833][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 765.770852][ T26] audit: type=1326 audit(1750423965.356:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz.3.9657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d58e929 code=0x7ffc0000 [ 765.870559][ T26] audit: type=1326 audit(1750423965.356:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz.3.9657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d58e929 code=0x7ffc0000 [ 765.923230][T25496] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 765.930452][T25496] ath9k_htc: Failed to initialize the device [ 765.983773][T25645] usb 8-1: ath9k_htc: USB layer deinitialized [ 766.004221][ T26] audit: type=1326 audit(1750423965.416:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz.3.9657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f156d58e929 code=0x7ffc0000 [ 766.093074][ T26] audit: type=1326 audit(1750423965.416:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz.3.9657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d58e929 code=0x7ffc0000 [ 766.213036][ T26] audit: type=1326 audit(1750423965.416:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26204 comm="syz.3.9657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f156d58e929 code=0x7ffc0000 [ 766.810606][T26240] ax25_connect(): syz.7.9673 uses autobind, please contact jreuter@yaina.de [ 767.126381][T26254] loop3: detected capacity change from 0 to 128 [ 767.166130][T26254] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 767.207410][T26254] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 767.233568][T26254] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (30846!=65535) [ 767.372254][T26264] netlink: 48 bytes leftover after parsing attributes in process `syz.8.9684'. [ 767.455022][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 767.490400][T26259] xt_CT: No such helper "pptp" [ 767.963088][T25645] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 768.063754][T26291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 768.103484][T26293] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 768.133637][T26293] overlayfs: conflicting options: userxattr,redirect_dir=off [ 768.173272][T25645] usb 9-1: Using ep0 maxpacket: 8 [ 768.181195][T25645] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 768.208140][T25645] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.264166][T25645] usb 9-1: config 0 has no interface number 0 [ 768.280740][T25645] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 768.322724][T25645] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 768.353049][T25645] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 768.387021][T25645] usb 9-1: config 0 interface 52 has no altsetting 0 [ 768.417075][T25645] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 768.434319][T25645] usb 9-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 768.442820][T25645] usb 9-1: Product: syz [ 768.481006][T25645] usb 9-1: SerialNumber: syz [ 768.507618][T25645] usb 9-1: config 0 descriptor?? [ 768.644518][T26311] XFS (nullb0): Invalid superblock magic number [ 768.724821][T25645] input: syz (Stick) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input31 [ 768.745396][ T3609] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 768.763361][ T3609] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 768.790652][ T3609] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 768.819238][ T3609] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 768.926987][ T4815] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 768.943067][T25996] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 768.991964][T25645] usb 9-1: USB disconnect, device number 10 [ 769.154541][T26331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9715'. [ 769.171650][T25996] usb 4-1: Using ep0 maxpacket: 16 [ 769.179040][T25996] usb 4-1: config 0 has an invalid interface number: 145 but max is 0 [ 769.192690][T25996] usb 4-1: config 0 has no interface number 0 [ 769.231316][T25996] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 769.253080][T25996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.275134][T25996] usb 4-1: Product: syz [ 769.279916][T25996] usb 4-1: Manufacturer: syz [ 769.293850][T25996] usb 4-1: SerialNumber: syz [ 769.309073][T25996] usb 4-1: config 0 descriptor?? [ 769.333327][T25996] hub 4-1:0.145: bad descriptor, ignoring hub [ 769.350125][T25996] hub: probe of 4-1:0.145 failed with error -5 [ 769.369723][T25996] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.145/input/input32 [ 769.395676][T26340] overlayfs: missing 'lowerdir' [ 769.864330][T26352] netlink: 'syz.0.9724': attribute type 3 has an invalid length. [ 770.083655][T25496] usb 4-1: USB disconnect, device number 41 [ 770.148953][T26361] affs: No valid root block on device nbd7 [ 771.018692][T26391] loop3: detected capacity change from 0 to 256 [ 771.064253][T26391] exfat: Deprecated parameter 'utf8' [ 771.069652][T26391] exfat: Deprecated parameter 'namecase' [ 771.106138][T26391] exfat: Deprecated parameter 'utf8' [ 771.131638][T26391] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb2b571bb, utbl_chksum : 0xe619d30d) [ 771.181725][T26396] loop8: detected capacity change from 0 to 256 [ 771.224614][T26391] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 771.842892][T26417] device vcan0 entered promiscuous mode [ 771.860708][T26418] netlink: 'syz.6.9755': attribute type 7 has an invalid length. [ 771.887580][T26421] netlink: 'syz.7.9757': attribute type 3 has an invalid length. [ 771.893542][T26418] netlink: 'syz.6.9755': attribute type 8 has an invalid length. [ 771.923185][T26421] netlink: 216 bytes leftover after parsing attributes in process `syz.7.9757'. [ 772.699751][T26452] loop6: detected capacity change from 0 to 512 [ 772.742087][T26452] EXT4-fs: Ignoring removed orlov option [ 772.755340][T26448] loop8: detected capacity change from 0 to 4096 [ 772.801818][T26448] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 772.845614][T26452] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8000c018, mo2=0002] [ 772.864686][T26460] netlink: 'syz.7.9776': attribute type 8 has an invalid length. [ 772.955966][T26463] loop3: detected capacity change from 0 to 512 [ 772.958010][T26452] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 773.033215][T26452] ext4 filesystem being mounted at /946/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 773.055860][T26463] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.9778: iget: bad extended attribute block 1 [ 773.147630][T26463] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.9778: couldn't read orphan inode 15 (err -117) [ 773.231169][T26463] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 773.249265][T15210] EXT4-fs (loop6): unmounting filesystem. [ 773.457264][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 773.464101][T25641] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 773.663127][T25641] usb 8-1: Using ep0 maxpacket: 32 [ 773.670344][T25641] usb 8-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 773.715941][T25641] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.765536][T25641] usb 8-1: config 0 descriptor?? [ 773.777035][T25641] gspca_main: sq930x-2.14.0 probing 041e:403c [ 773.811971][T26488] loop3: detected capacity change from 0 to 256 [ 773.992154][T25641] gspca_sq930x: reg_r 001f failed -71 [ 774.000426][T25641] sq930x: probe of 8-1:0.0 failed with error -71 [ 774.032050][T25641] usb 8-1: USB disconnect, device number 11 [ 774.489774][T26482] loop6: detected capacity change from 0 to 32768 [ 774.547375][T26482] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.9785 (26482) [ 774.643723][T26482] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 774.673829][T26482] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 774.711144][T26482] BTRFS info (device loop6): using free space tree [ 774.999920][T26482] BTRFS info (device loop6): enabling ssd optimizations [ 775.190531][T15210] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 775.320309][T26498] loop3: detected capacity change from 0 to 32768 [ 775.380372][T25508] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 775.466167][T26498] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 775.583188][T25508] usb 9-1: Using ep0 maxpacket: 32 [ 775.590622][T25508] usb 9-1: config 0 has an invalid interface number: 183 but max is 0 [ 775.639706][T25508] usb 9-1: config 0 has no interface number 0 [ 775.654288][T25508] usb 9-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 775.711823][T25508] usb 9-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 775.744558][T25508] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.752625][T25508] usb 9-1: Product: syz [ 775.757458][T25508] usb 9-1: Manufacturer: syz [ 775.762102][T25508] usb 9-1: SerialNumber: syz [ 775.771236][T25508] usb 9-1: config 0 descriptor?? [ 775.808731][T26542] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 776.027012][ T4259] ocfs2: Unmounting device (7,3) on (node local) [ 776.029617][T26542] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 776.115259][T25508] net1080 9-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.8-1, NetChip TurboCONNECT, fe:9c:a3:e2:f0:ad [ 776.348627][T25508] usb 9-1: USB disconnect, device number 11 [ 776.357272][T25508] net1080 9-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.8-1, NetChip TurboCONNECT [ 776.550812][T26578] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 776.600605][T26578] overlayfs: missing 'lowerdir' [ 776.753752][T26582] loop6: detected capacity change from 0 to 1024 [ 776.811491][T26588] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744072924056005) [ 776.836291][T26588] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 776.876685][T26582] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 776.956683][T26582] EXT4-fs error (device loop6): ext4_get_first_dir_block:3594: inode #11: comm syz.6.9823: directory missing '.' [ 777.073575][T26582] EXT4-fs (loop6): Remounting filesystem read-only [ 777.222741][T26601] netlink: 'syz.8.9829': attribute type 24 has an invalid length. [ 777.234487][T15210] EXT4-fs (loop6): unmounting filesystem. [ 777.743259][T25645] usb 7-1: new low-speed USB device number 19 using dummy_hcd [ 777.949468][T25645] usb 7-1: config 1 has an invalid interface descriptor of length 6, skipping [ 777.993464][T25645] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.013087][T25645] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 778.033056][T25645] usb 7-1: config 1 has no interface number 1 [ 778.039235][T25645] usb 7-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 778.081304][T25645] usb 7-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 778.133343][T25645] usb 7-1: config 1 interface 2 has no altsetting 1 [ 778.157729][T25645] usb 7-1: string descriptor 0 read error: -22 [ 778.199304][T25645] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.229614][T25645] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.270749][T25645] usb 7-1: MIDIStreaming interface descriptor not found [ 778.544680][T25508] usb 7-1: USB disconnect, device number 19 [ 778.665870][T26658] libceph: resolve '. [ 778.665870][T26658] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 778.665870][T26658] ' (ret=-3): failed [ 778.688842][T26661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9851'. [ 779.208586][T26684] loop8: detected capacity change from 0 to 16 [ 779.239951][T26683] loop3: detected capacity change from 0 to 512 [ 779.281324][T26684] erofs: (device loop8): mounted with root inode @ nid 36. [ 779.399975][T26683] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2768: inode #11: comm syz.3.9860: corrupted xattr block 95 [ 779.469631][T26683] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.9860: bg 0: block 7: invalid block bitmap [ 779.473058][T26697] bond0: Error: Cannot enslave bond to itself. [ 779.513788][T26683] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 779.544246][T26683] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2934: inode #11: comm syz.3.9860: corrupted xattr block 95 [ 779.586219][T26683] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 779.667352][T26701] loop8: detected capacity change from 0 to 256 [ 779.673870][T26683] EXT4-fs (loop3): 1 orphan inode deleted [ 779.679753][T26683] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 779.971246][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 780.011392][T26711] netlink: 'syz.6.9870': attribute type 6 has an invalid length. [ 780.634563][T26725] loop8: detected capacity change from 0 to 4096 [ 780.641805][T26725] EXT4-fs: inline encryption not supported [ 780.703784][T26725] EXT4-fs: Ignoring removed oldalloc option [ 780.766674][T26725] EXT4-fs (loop8): Test dummy encryption mode enabled [ 780.794881][T26739] netlink: zone id is out of range [ 780.809996][T26725] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 780.993553][T26725] Quota error (device loop8): do_check_range: Getting block 134217730 out of range 1-5 [ 781.013206][T26725] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 781.053284][T26725] EXT4-fs error (device loop8): ext4_acquire_dquot:6814: comm syz.8.9876: Failed to acquire dquot type 1 [ 781.255123][T19410] EXT4-fs (loop8): unmounting filesystem. [ 781.334288][T26756] loop6: detected capacity change from 0 to 64 [ 781.868353][T26775] netlink: 'syz.8.9901': attribute type 28 has an invalid length. [ 781.943292][T25996] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 781.984615][T26776] loop7: detected capacity change from 0 to 4096 [ 782.024709][T26776] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 782.111647][T26784] xt_nat: multiple ranges no longer supported [ 782.153457][T25996] usb 4-1: Using ep0 maxpacket: 8 [ 782.160403][T25996] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 782.182251][T26776] ntfs3: loop7: failed to convert "c46c" to koi8-r [ 782.191774][T25996] usb 4-1: config 2 has no interface number 0 [ 782.213058][T25996] usb 4-1: config 2 interface 31 has no altsetting 0 [ 782.226347][T25996] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 782.264747][T25996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.296037][T25996] usb 4-1: Product: syz [ 782.319841][T25996] usb 4-1: Manufacturer: syz [ 782.351701][T25996] usb 4-1: SerialNumber: syz [ 782.798794][T25996] ch9200: probe of 4-1:2.31 failed with error -22 [ 782.825413][T25996] usb 4-1: USB disconnect, device number 42 [ 782.860075][T26803] netlink: 76 bytes leftover after parsing attributes in process `syz.6.9915'. [ 782.876475][T26805] loop7: detected capacity change from 0 to 1024 [ 782.915327][T26809] netlink: 'syz.0.9917': attribute type 10 has an invalid length. [ 782.941769][T26809] bridge0: port 3(macvlan0) entered disabled state [ 783.001610][T26809] bridge0: port 3(macvlan0) entered disabled state [ 783.055238][T26809] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 783.435269][T26823] xt_TCPMSS: Only works on TCP SYN packets [ 783.556292][T26827] netlink: 'syz.0.9926': attribute type 1 has an invalid length. [ 783.589328][T26827] netlink: 192 bytes leftover after parsing attributes in process `syz.0.9926'. [ 784.137859][T26851] loop8: detected capacity change from 0 to 1024 [ 784.481079][T26861] libceph: resolve '0.0' (ret=-3): failed [ 784.985894][T26874] loop8: detected capacity change from 0 to 256 [ 785.133303][T25504] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 785.274465][T26855] loop3: detected capacity change from 0 to 32768 [ 785.320178][T26855] [ 785.320178][T26855] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 785.320178][T26855] [ 785.340852][T25504] usb 8-1: Using ep0 maxpacket: 32 [ 785.349452][T25504] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.402080][T25504] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.475511][T25504] usb 8-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 785.499842][T25504] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.521845][T25504] usb 8-1: Product: syz [ 785.526505][ T9] read_mapping_page failed! [ 785.531072][ T9] ERROR: (device loop3): txCommit: [ 785.531072][ T9] [ 785.535911][T25504] usb 8-1: Manufacturer: syz [ 785.559765][T25504] usb 8-1: SerialNumber: syz [ 785.579823][T25504] usb 8-1: config 0 descriptor?? [ 785.595205][ T9] ERROR: (device loop3): remounting filesystem as read-only [ 785.602563][ T9] jfs_write_inode: jfs_commit_inode failed! [ 785.620611][T25504] qmi_wwan: probe of 8-1:0.0 failed with error -22 [ 785.653108][ T4259] [ 785.653108][ T4259] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 785.653108][ T4259] [ 785.686060][ T4259] [ 785.686060][ T4259] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 785.686060][ T4259] [ 785.792411][T26892] xt_l2tp: v2 doesn't support IP mode [ 785.822128][T25508] usb 8-1: USB disconnect, device number 12 [ 786.481630][T26888] loop6: detected capacity change from 0 to 32768 [ 786.578661][T26888] JBD2: Ignoring recovery information on journal [ 786.724383][T26888] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 786.915551][T15210] ocfs2: Unmounting device (7,6) on (node local) [ 787.026694][T26928] loop7: detected capacity change from 0 to 4096 [ 787.144646][T26936] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 788.820995][T26993] loop6: detected capacity change from 0 to 4096 [ 788.842079][T26993] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 788.944241][T26993] ntfs3: loop6: failed to convert "c46c" to macgaelic [ 789.075203][T27001] loop8: detected capacity change from 0 to 4096 [ 789.090001][T27001] ntfs3: loop8: Different NTFS' sector size (2048) and media sector size (512) [ 789.093073][T25504] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 789.313913][T25504] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 789.334016][T25504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.404776][T25504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.456152][T25504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.494634][T25504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.527812][T25504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.564520][T25504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.594326][T25504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.662578][T25504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.701056][T25504] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 789.757186][T25504] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.771336][T25504] usb 4-1: Product: syz [ 789.791611][T25504] usb 4-1: Manufacturer: syz [ 789.796727][T25504] usb 4-1: SerialNumber: syz [ 789.833270][T25504] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 789.877474][T25504] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 789.883274][T27029] netlink: 'syz.8.10024': attribute type 29 has an invalid length. [ 789.948590][T27029] netlink: 'syz.8.10024': attribute type 29 has an invalid length. [ 790.015742][T27034] loop6: detected capacity change from 0 to 256 [ 790.091867][T27034] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 790.230334][ C0] usb 4-1: ath9k_htc: invalid pkt_len (ec0c) [ 790.240744][T27039] loop8: detected capacity change from 0 to 64 [ 790.432299][T25996] usb 4-1: USB disconnect, device number 43 [ 790.639191][T27049] binder: 27045:27049 ioctl c018620c 200000000180 returned -22 [ 790.652590][T27048] loop6: detected capacity change from 0 to 2048 [ 790.713395][T27048] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=104, inode=16, rec_len=24, name_len=174 [ 790.820455][ T26] audit: type=1326 audit(1750423990.406:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27050 comm="syz.8.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 790.843013][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.891492][ T26] audit: type=1326 audit(1750423990.446:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27050 comm="syz.8.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 790.913956][ C1] vkms_vblank_simulate: vblank timer overrun [ 790.963344][T25504] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 790.980874][T25504] ath9k_htc: Failed to initialize the device [ 791.013770][T25996] usb 4-1: ath9k_htc: USB layer deinitialized [ 791.024465][ T26] audit: type=1326 audit(1750423990.446:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27050 comm="syz.8.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 791.046994][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.138033][ T26] audit: type=1326 audit(1750423990.446:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27050 comm="syz.8.10035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 791.160697][ C1] vkms_vblank_simulate: vblank timer overrun [ 791.302245][T27035] loop7: detected capacity change from 0 to 32768 [ 791.398634][T27035] __jfs_setxattr: xattr_size = 74, new_size = 12053 [ 791.998582][T27089] loop3: detected capacity change from 0 to 512 [ 792.071885][T27089] EXT4-fs: Ignoring removed nomblk_io_submit option [ 792.167869][T27093] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10056'. [ 792.194454][T27089] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.10053: casefold flag without casefold feature [ 792.274879][T27089] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.10053: couldn't read orphan inode 15 (err -117) [ 792.341509][T27089] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 792.554777][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 792.726694][T27115] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10066'. [ 792.760245][T27115] netlink: 43 bytes leftover after parsing attributes in process `syz.3.10066'. [ 793.389248][T27140] loop3: detected capacity change from 0 to 2048 [ 793.536826][ T26] audit: type=1326 audit(1750423993.096:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27148 comm="syz.8.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 793.559380][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.632258][ T26] audit: type=1326 audit(1750423993.166:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27148 comm="syz.8.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 793.741540][ T26] audit: type=1326 audit(1750423993.166:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27148 comm="syz.8.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 793.764086][ C1] vkms_vblank_simulate: vblank timer overrun [ 793.912351][ T26] audit: type=1326 audit(1750423993.166:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27148 comm="syz.8.10082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 794.244584][T27175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10096'. [ 794.263539][T27175] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10096'. [ 794.592359][T27187] loop7: detected capacity change from 0 to 256 [ 794.678585][T27187] exfat: Deprecated parameter 'namecase' [ 794.730532][T27187] exfat: Deprecated parameter 'namecase' [ 794.743254][T25645] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 794.781638][T27187] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 794.937253][T25645] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 794.957724][T25645] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.987109][T25645] usb 9-1: Product: syz [ 794.991335][T25645] usb 9-1: Manufacturer: syz [ 795.012092][T25645] usb 9-1: SerialNumber: syz [ 795.052191][T25645] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 795.106592][T25645] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 795.185285][T27203] overlayfs: conflicting options: nfs_export=on,index=off [ 795.248791][T27205] tmpfs: Bad value for 'mpol' [ 795.350906][T27207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10112'. [ 795.634825][T27191] loop3: detected capacity change from 0 to 32768 [ 795.678392][T27211] loop6: detected capacity change from 0 to 4096 [ 795.796146][T27191] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 795.831860][T27191] (syz.3.10104,27191,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 795.853469][T27191] (syz.3.10104,27191,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 795.863648][T27191] (syz.3.10104,27191,0):ocfs2_mknod:298 ERROR: status = -2 [ 795.870911][T27191] (syz.3.10104,27191,0):ocfs2_mknod:502 ERROR: status = -2 [ 795.879183][T27191] (syz.3.10104,27191,0):ocfs2_create:676 ERROR: status = -2 [ 796.044299][T27211] ntfs3: loop6: ino=5, "/" directory corrupted [ 796.051398][T27211] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 796.097613][ T4259] ocfs2: Unmounting device (7,3) on (node local) [ 796.243057][T25645] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 796.253623][T25645] ath9k_htc: Failed to initialize the device [ 796.286071][T27225] openvswitch: netlink: Missing key (keys=40, expected=80) [ 796.328595][T25645] usb 9-1: ath9k_htc: USB layer deinitialized [ 796.649023][T25645] usb 9-1: USB disconnect, device number 12 [ 796.782222][T27239] loop3: detected capacity change from 0 to 256 [ 797.065864][T27249] loop6: detected capacity change from 0 to 64 [ 797.476996][T27268] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 797.494306][T27267] tmpfs: Bad value for 'mpol' [ 797.687375][T27266] loop3: detected capacity change from 0 to 4096 [ 797.722448][T27266] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 797.866848][T27278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10145'. [ 797.924290][T27278] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10145'. [ 797.949794][T27283] loop6: detected capacity change from 0 to 512 [ 798.047340][T27283] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 798.183263][T27283] ext4 filesystem being mounted at /1014/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 798.270186][T27283] EXT4-fs error (device loop6): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.6.10147: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 798.300985][T27296] netlink: 'syz.0.10151': attribute type 21 has an invalid length. [ 798.320031][T27294] loop8: detected capacity change from 0 to 1024 [ 798.333963][T27296] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10151'. [ 798.366591][T27283] EXT4-fs (loop6): Remounting filesystem read-only [ 798.381340][T27283] EXT4-fs error (device loop6): ext4_get_first_dir_block:3594: inode #12: comm syz.6.10147: directory missing '.' [ 798.399424][T27296] netlink: 'syz.0.10151': attribute type 5 has an invalid length. [ 798.418795][T27283] EXT4-fs (loop6): Remounting filesystem read-only [ 798.428148][T27296] netlink: 'syz.0.10151': attribute type 6 has an invalid length. [ 798.436652][T27296] netlink: 3 bytes leftover after parsing attributes in process `syz.0.10151'. [ 798.536248][T27300] netlink: 'syz.8.10155': attribute type 1 has an invalid length. [ 798.571018][T15210] EXT4-fs (loop6): unmounting filesystem. [ 799.072858][T27320] netlink: 'syz.7.10165': attribute type 2 has an invalid length. [ 800.053177][T25508] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 800.246127][T25508] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 800.289880][T25508] usb 1-1: config 0 has no interface number 0 [ 800.306521][T25508] usb 1-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 800.343182][T25508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.391535][ T93] block nbd3: Attempted send on invalid socket [ 800.394758][T25508] usb 1-1: config 0 descriptor?? [ 800.397842][ T93] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 800.416859][T25508] gspca_main: spca500-2.14.0 probing 041e:400a [ 800.423019][T27374] hpfs: hpfs_map_sector(): read error [ 800.673811][T25508] usb 1-1: USB disconnect, device number 32 [ 801.142144][T27392] loop3: detected capacity change from 0 to 4096 [ 801.190804][T27392] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 802.104411][T25996] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 802.314595][T25996] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 802.345705][T25996] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 802.391413][T25996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.415373][T27426] loop3: detected capacity change from 0 to 4096 [ 802.440699][T25996] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 802.570400][T27432] loop8: detected capacity change from 0 to 4096 [ 802.612878][T27432] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 802.782487][T27432] ntfs3: loop8: failed to convert "c46c" to iso8859-5 [ 803.129389][T27422] loop6: detected capacity change from 0 to 32768 [ 803.196825][T27422] (syz.6.10215,27422,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 803.251390][T27422] (syz.6.10215,27422,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 803.261081][T27444] loop3: detected capacity change from 0 to 4096 [ 803.301861][T27444] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 803.311235][ T26] audit: type=1326 audit(1750424002.896:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.8.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 803.353325][T27422] JBD2: Ignoring recovery information on journal [ 803.461337][T27451] loop7: detected capacity change from 0 to 512 [ 803.464901][ T26] audit: type=1326 audit(1750424002.896:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.8.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 803.468352][T27444] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 803.515763][ T26] audit: type=1326 audit(1750424002.906:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.8.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 803.517278][T27444] ntfs3: loop3: ino=1b, "file0" attr_set_size [ 803.538801][ T26] audit: type=1326 audit(1750424002.906:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.8.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 803.545789][T25996] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 803.567180][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.567469][ T26] audit: type=1326 audit(1750424002.906:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27446 comm="syz.8.10227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa71c78e929 code=0x7ffc0000 [ 803.574367][T27451] EXT4-fs error (device loop7): __ext4_iget:5076: inode #11: block 1: comm syz.7.10229: invalid block [ 803.687990][T27422] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 803.705557][T27451] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.10229: couldn't read orphan inode 11 (err -117) [ 803.780560][T25996] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 803.793153][T27451] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 803.811996][T25996] stv0680 1-1:4.0: last error: 20, command = 0x55 [ 803.852772][T25996] usb 1-1: USB disconnect, device number 33 [ 803.908880][ T4259] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 803.935496][ T4259] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 804.033705][T17417] EXT4-fs (loop7): unmounting filesystem. [ 804.162749][T15210] ocfs2: Unmounting device (7,6) on (node local) [ 804.816256][T27456] loop8: detected capacity change from 0 to 32768 [ 804.862708][T27456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.10230 (27456) [ 804.959038][T27456] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 804.992477][T27456] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 805.030398][T27456] BTRFS info (device loop8): using free space tree [ 805.181520][T27499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10245'. [ 805.231568][T27499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10245'. [ 805.277907][T27499] netlink: 5 bytes leftover after parsing attributes in process `syz.7.10245'. [ 805.287983][T27456] BTRFS info (device loop8): enabling ssd optimizations [ 805.303188][T25508] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 805.463473][T19410] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 805.495024][T25508] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.531400][T25508] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 805.545359][T27516] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10251'. [ 805.562715][T25508] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 805.582711][T25508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.632275][T25508] usb 4-1: config 0 descriptor?? [ 806.006474][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10257'. [ 806.058683][T25508] Bluetooth: Can't get version to change to load ram patch err [ 806.078668][T25508] Bluetooth: Loading patch file failed [ 806.084821][T25508] ath3k: probe of 4-1:0.0 failed with error -71 [ 806.129200][T25508] usb 4-1: USB disconnect, device number 44 [ 806.232059][T27532] netlink: 'syz.0.10260': attribute type 2 has an invalid length. [ 806.241666][T27532] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10260'. [ 806.632745][T27546] loop8: detected capacity change from 0 to 512 [ 806.745255][T27546] EXT4-fs (loop8): orphan cleanup on readonly fs [ 806.793347][T27546] Quota error (device loop8): dq_insert_tree: Quota tree root isn't allocated! [ 806.802545][T27546] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 806.939432][T27546] EXT4-fs error (device loop8): ext4_acquire_dquot:6814: comm syz.8.10266: Failed to acquire dquot type 0 [ 806.998583][T27546] Quota error (device loop8): dq_insert_tree: Quota tree root isn't allocated! [ 807.018472][T27546] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 807.053136][T27546] EXT4-fs error (device loop8): ext4_acquire_dquot:6814: comm syz.8.10266: Failed to acquire dquot type 0 [ 807.065852][T27546] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.10266: bg 0: block 64: padding at end of block bitmap is not set [ 807.073331][T25508] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 807.105185][T27546] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 807.131368][T27546] Quota error (device loop8): dq_insert_tree: Quota tree root isn't allocated! [ 807.153679][T27546] EXT4-fs error (device loop8): ext4_acquire_dquot:6814: comm syz.8.10266: Failed to acquire dquot type 0 [ 807.183454][T27546] EXT4-fs (loop8): 1 orphan inode deleted [ 807.254172][T27546] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 807.293129][T25508] usb 1-1: Using ep0 maxpacket: 32 [ 807.302496][T25508] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 807.342317][T25508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.393142][T25508] usb 1-1: Product: syz [ 807.412320][T19410] EXT4-fs (loop8): unmounting filesystem. [ 807.417415][T25508] usb 1-1: Manufacturer: syz [ 807.422762][T25508] usb 1-1: SerialNumber: syz [ 807.454249][T25508] usb 1-1: config 0 descriptor?? [ 807.465093][T27570] loop3: detected capacity change from 0 to 64 [ 807.497401][T27566] loop7: detected capacity change from 0 to 4096 [ 807.563515][T27566] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 807.698141][T25508] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -5 [ 807.713083][T25508] f81534a_ctrl 1-1:0.0: failed to enable ports: -5 [ 807.724030][T27566] ntfs3: loop7: failed to convert "c46c" to iso8859-5 [ 807.737799][T25508] f81534a_ctrl: probe of 1-1:0.0 failed with error -5 [ 807.759834][T25508] usb 1-1: USB disconnect, device number 34 [ 808.247985][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.254410][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.509075][T25996] kernel write not supported for file /input/event2 (pid: 25996 comm: kworker/1:17) [ 808.726120][T27611] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10296'. [ 808.747461][T27610] usb usb8: usbfs: process 27610 (syz.0.10297) did not claim interface 4 before use [ 808.748975][T27612] loop6: detected capacity change from 0 to 8 [ 809.104160][T27623] loop6: detected capacity change from 0 to 64 [ 809.436435][T27634] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10309'. [ 810.370421][T27632] loop8: detected capacity change from 0 to 32768 [ 810.522820][T27632] XFS (loop8): Mounting V5 Filesystem [ 810.572472][T27672] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 810.761682][T27632] XFS (loop8): Ending clean mount [ 810.863112][T27680] libceph: resolve '400' (ret=-3): failed [ 810.948507][T19410] XFS (loop8): Unmounting Filesystem [ 811.746343][T27710] loop6: detected capacity change from 0 to 1024 [ 811.953975][ T2932] hfsplus: b-tree write err: -5, ino 8 [ 812.067933][T27717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10344'. [ 812.125498][T27718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 812.336319][T27724] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10349'. [ 812.371716][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 812.371733][ T26] audit: type=1400 audit(1750424011.956:2108): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=27726 comm="syz.6.10352" [ 813.398897][T27764] loop7: detected capacity change from 0 to 1024 [ 813.439762][T27764] EXT4-fs: Ignoring removed orlov option [ 813.538706][T27764] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 813.655875][T27772] netlink: 'syz.6.10369': attribute type 2 has an invalid length. [ 813.736841][T27772] netlink: 'syz.6.10369': attribute type 1 has an invalid length. [ 813.797624][T17417] EXT4-fs (loop7): unmounting filesystem. [ 813.803012][T27772] netlink: 'syz.6.10369': attribute type 1 has an invalid length. [ 813.921502][T27775] ipt_rpfilter: unknown options [ 814.253189][T26562] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 814.422171][T27795] loop6: detected capacity change from 0 to 64 [ 814.443042][T26562] usb 4-1: Using ep0 maxpacket: 16 [ 814.454567][T26562] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 814.483071][T26562] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 814.509695][T26562] usb 4-1: config 0 has no interface number 0 [ 814.545114][T26562] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 814.573205][T26562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.593089][T26562] usb 4-1: Product: syz [ 814.603312][T26562] usb 4-1: Manufacturer: syz [ 814.607970][T26562] usb 4-1: SerialNumber: syz [ 814.640759][T26562] usb 4-1: config 0 descriptor?? [ 814.859696][T26562] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 814.870122][T26562] usb 4-1: No valid video chain found. [ 814.887499][T26562] usb 4-1: USB disconnect, device number 45 [ 815.289898][T27822] netlink: 76 bytes leftover after parsing attributes in process `syz.6.10395'. [ 815.357749][T27826] netlink: 'syz.8.10398': attribute type 39 has an invalid length. [ 815.395701][T27826] device veth0_macvtap left promiscuous mode [ 815.503189][T27828] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 815.547891][T27830] loop6: detected capacity change from 0 to 64 [ 815.617232][T27830] Trying to free block not in datazone [ 815.645242][T27830] Trying to free block not in datazone [ 815.650761][T27830] Trying to free block not in datazone [ 815.696355][T27830] Trying to free block not in datazone [ 815.718168][T27830] Trying to free block not in datazone [ 815.769075][T27838] IPv6: Can't replace route, no match found [ 816.223238][T27855] netlink: 'syz.3.10412': attribute type 1 has an invalid length. [ 816.459903][T27865] loop6: detected capacity change from 0 to 512 [ 816.465196][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10418'. [ 816.503914][T27865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 816.570864][T27865] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 816.620847][T27865] ext4 filesystem being mounted at /1068/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.736173][T27874] program syz.0.10422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 816.766929][T27865] Quota error (device loop6): find_block_dqentry: Quota for id 0 referenced but not present [ 816.805624][T27865] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 816.827215][T27876] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10421'. [ 816.833038][T27865] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.10416: Failed to acquire dquot type 0 [ 817.000295][T15210] EXT4-fs (loop6): unmounting filesystem. [ 817.126994][T27883] overlayfs: bad mount option "redirect_dir=off:/" [ 817.192095][T27886] loop8: detected capacity change from 0 to 256 [ 817.298100][T27886] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xd0673bdb, utbl_chksum : 0xe619d30d) [ 817.384757][T27890] loop6: detected capacity change from 0 to 1024 [ 817.498703][T27895] netlink: 'syz.0.10431': attribute type 1 has an invalid length. [ 817.554055][T27895] netlink: 228 bytes leftover after parsing attributes in process `syz.0.10431'. [ 817.682188][T27898] loop7: detected capacity change from 0 to 256 [ 817.790458][T27898] FAT-fs (loop7): Directory bread(block 64) failed [ 817.821768][T27873] loop3: detected capacity change from 0 to 32768 [ 817.830650][T27898] FAT-fs (loop7): Directory bread(block 65) failed [ 817.844950][T27898] FAT-fs (loop7): Directory bread(block 66) failed [ 817.863560][T27873] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 817.883183][T27898] FAT-fs (loop7): Directory bread(block 67) failed [ 817.888476][T27873] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 817.889827][T27898] FAT-fs (loop7): Directory bread(block 68) failed [ 817.914489][T27898] FAT-fs (loop7): Directory bread(block 69) failed [ 817.921958][T27898] FAT-fs (loop7): Directory bread(block 70) failed [ 817.966170][T27873] ocfs2: Unmounting device (7,3) on (node local) [ 818.000896][T27898] FAT-fs (loop7): Directory bread(block 71) failed [ 818.014524][T27898] FAT-fs (loop7): Directory bread(block 72) failed [ 818.021114][T27898] FAT-fs (loop7): Directory bread(block 73) failed [ 818.322176][T27898] afs: Unexpected value for 'dyn' [ 818.695714][T27928] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10446'. [ 818.733430][T27928] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10446'. [ 819.423371][T27959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10459'. [ 820.135748][T27981] loop6: detected capacity change from 0 to 64 [ 820.343454][T27985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10473'. [ 820.354863][T27963] loop8: detected capacity change from 0 to 32768 [ 820.405281][T27985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10473'. [ 820.423618][T27963] (syz.8.10461,27963,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 820.479721][T27963] (syz.8.10461,27963,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 820.543313][T27963] (syz.8.10461,27963,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 820.579713][T27963] JBD2: Ignoring recovery information on journal [ 820.620210][T27963] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 820.648862][T27963] [ 820.651204][T27963] ====================================================== [ 820.658224][T27963] WARNING: possible circular locking dependency detected [ 820.665277][T27963] 6.1.141-syzkaller #0 Not tainted [ 820.670410][T27963] ------------------------------------------------------ [ 820.677460][T27963] syz.8.10461/27963 is trying to acquire lock: [ 820.683596][T27963] ffff8880481f42c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 820.696111][T27963] [ 820.696111][T27963] but task is already holding lock: [ 820.703518][T27963] ffff8880482940a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 820.713147][T27963] [ 820.713147][T27963] which lock already depends on the new lock. [ 820.713147][T27963] [ 820.723578][T27963] [ 820.723578][T27963] the existing dependency chain (in reverse order) is: [ 820.732638][T27963] [ 820.732638][T27963] -> #6 (&dquot->dq_lock){+.+.}-{3:3}: [ 820.740329][T27963] __mutex_lock+0x120/0xaf0 [ 820.745417][T27963] dquot_commit+0x5a/0x410 [ 820.750392][T27963] ext4_write_dquot+0x1f0/0x360 [ 820.755800][T27963] mark_all_dquot_dirty+0x1e3/0x400 [ 820.761553][T27963] __dquot_free_space+0x7ec/0xbc0 [ 820.767143][T27963] ext4_free_blocks+0x1bab/0x2640 [ 820.772724][T27963] ext4_ext_remove_space+0x1f0d/0x4490 [ 820.778734][T27963] ext4_ext_truncate+0x211/0x370 [ 820.784219][T27963] ext4_truncate+0xa0b/0x1230 [ 820.789444][T27963] ext4_evict_inode+0xb35/0x1100 [ 820.794943][T27963] evict+0x485/0x870 [ 820.799387][T27963] ext4_orphan_cleanup+0xbd3/0x1400 [ 820.805131][T27963] ext4_fill_super+0x7b78/0x8110 [ 820.810625][T27963] get_tree_bdev+0x3f1/0x610 [ 820.815778][T27963] vfs_get_tree+0x88/0x270 [ 820.820746][T27963] do_new_mount+0x24a/0xa40 [ 820.825805][T27963] __se_sys_mount+0x2d6/0x3c0 [ 820.831032][T27963] do_syscall_64+0x4c/0xa0 [ 820.836003][T27963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.842455][T27963] [ 820.842455][T27963] -> #5 (&ei->i_data_sem){++++}-{3:3}: [ 820.850919][T27963] down_write+0x36/0x60 [ 820.855635][T27963] ext4_truncate+0x987/0x1230 [ 820.860866][T27963] ext4_setattr+0x10cb/0x19f0 [ 820.866097][T27963] notify_change+0xc74/0xf40 [ 820.871249][T27963] do_truncate+0x197/0x220 [ 820.876228][T27963] do_sys_ftruncate+0x312/0x3c0 [ 820.881650][T27963] do_syscall_64+0x4c/0xa0 [ 820.886634][T27963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.893096][T27963] [ 820.893096][T27963] -> #4 (jbd2_handle){++++}-{0:0}: [ 820.900433][T27963] start_this_handle+0x1f49/0x2150 [ 820.906099][T27963] jbd2__journal_start+0x2b7/0x5a0 [ 820.911762][T27963] jbd2_journal_start+0x26/0x30 [ 820.917173][T27963] ocfs2_start_trans+0x372/0x6c0 [ 820.922660][T27963] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 820.928937][T27963] ocfs2_dismount_volume+0x1fc/0x930 [ 820.934779][T27963] generic_shutdown_super+0x130/0x340 [ 820.939458][T27996] No such timeout policy "syz1" [ 820.940688][T27963] kill_block_super+0x7c/0xe0 [ 820.950763][T27963] deactivate_locked_super+0x93/0xf0 [ 820.956599][T27963] cleanup_mnt+0x463/0x4f0 [ 820.961581][T27963] task_work_run+0x1ca/0x250 [ 820.966732][T27963] exit_to_user_mode_loop+0xe6/0x110 [ 820.972571][T27963] exit_to_user_mode_prepare+0xb1/0x140 [ 820.978678][T27963] syscall_exit_to_user_mode+0x16/0x40 [ 820.984687][T27963] do_syscall_64+0x58/0xa0 [ 820.989655][T27963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.996108][T27963] [ 820.996108][T27963] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 821.004661][T27963] down_read+0x42/0x2d0 [ 821.009370][T27963] ocfs2_start_trans+0x366/0x6c0 [ 821.014858][T27963] ocfs2_shutdown_local_alloc+0x1fd/0xa10 [ 821.021130][T27963] ocfs2_dismount_volume+0x1fc/0x930 [ 821.026971][T27963] generic_shutdown_super+0x130/0x340 [ 821.035940][T27963] kill_block_super+0x7c/0xe0 [ 821.041172][T27963] deactivate_locked_super+0x93/0xf0 [ 821.047011][T27963] cleanup_mnt+0x463/0x4f0 [ 821.051985][T27963] task_work_run+0x1ca/0x250 [ 821.057131][T27963] exit_to_user_mode_loop+0xe6/0x110 [ 821.062980][T27963] exit_to_user_mode_prepare+0xb1/0x140 [ 821.069084][T27963] syscall_exit_to_user_mode+0x16/0x40 [ 821.075095][T27963] do_syscall_64+0x58/0xa0 [ 821.080067][T27963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.086524][T27963] [ 821.086524][T27963] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 821.094137][T27963] ocfs2_start_trans+0x267/0x6c0 [ 821.099638][T27963] ocfs2_write_info+0x117/0x350 [ 821.105053][T27963] dquot_set_dqinfo+0x459/0x6c0 [ 821.110553][T27963] quota_setinfo+0x2a4/0x2b0 [ 821.115707][T27963] __se_sys_quotactl+0x295/0x6b0 [ 821.121200][T27963] do_syscall_64+0x4c/0xa0 [ 821.126169][T27963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.132622][T27963] [ 821.132622][T27963] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 821.141532][T27963] down_write+0x36/0x60 [ 821.146243][T27963] ocfs2_lock_global_qf+0x1e5/0x270 [ 821.151996][T27963] ocfs2_write_info+0xd0/0x350 [ 821.157313][T27963] dquot_set_dqinfo+0x459/0x6c0 [ 821.162722][T27963] quota_setinfo+0x2a4/0x2b0 [ 821.167881][T27963] __se_sys_quotactl+0x295/0x6b0 [ 821.173377][T27963] do_syscall_64+0x4c/0xa0 [ 821.178353][T27963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.184817][T27963] [ 821.184817][T27963] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 821.195380][T27963] __lock_acquire+0x2cf8/0x7c50 [ 821.200795][T27963] lock_acquire+0x1b4/0x490 [ 821.205871][T27963] down_write+0x36/0x60 [ 821.210584][T27963] ocfs2_lock_global_qf+0x1c7/0x270 [ 821.216335][T27963] ocfs2_acquire_dquot+0x2a0/0xb10 [ 821.222001][T27963] dqget+0x778/0xeb0 [ 821.226449][T27963] __dquot_initialize+0x3b6/0xcb0 [ 821.232027][T27963] ocfs2_get_init_inode+0x138/0x1b0 [ 821.237777][T27963] ocfs2_mknod+0x8be/0x2350 [ 821.242831][T27963] ocfs2_mkdir+0x1b6/0x4a0 [ 821.247819][T27963] vfs_mkdir+0x387/0x570 [ 821.252613][T27963] do_mkdirat+0x1d0/0x430 [ 821.257491][T27963] __x64_sys_mkdirat+0x85/0x90 [ 821.262806][T27963] do_syscall_64+0x4c/0xa0 [ 821.267775][T27963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.274223][T27963] [ 821.274223][T27963] other info that might help us debug this: [ 821.274223][T27963] [ 821.284478][T27963] Chain exists of: [ 821.284478][T27963] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ei->i_data_sem --> &dquot->dq_lock [ 821.284478][T27963] [ 821.300439][T27963] Possible unsafe locking scenario: [ 821.300439][T27963] [ 821.308021][T27963] CPU0 CPU1 [ 821.313371][T27963] ---- ---- [ 821.318716][T27963] lock(&dquot->dq_lock); [ 821.323119][T27963] lock(&ei->i_data_sem); [ 821.330030][T27963] lock(&dquot->dq_lock); [ 821.336942][T27963] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 821.344207][T27963] [ 821.344207][T27963] *** DEADLOCK *** [ 821.344207][T27963] [ 821.352328][T27963] 4 locks held by syz.8.10461/27963: [ 821.357692][T27963] #0: ffff888054ef2460 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 821.367175][T27963] #1: ffff8880481f1808 (&type->i_mutex_dir_key#26/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 821.377954][T27963] #2: ffff8880482f1808 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 821.391605][T27963] #3: ffff8880482940a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 821.401575][T27963] [ 821.401575][T27963] stack backtrace: [ 821.407446][T27963] CPU: 0 PID: 27963 Comm: syz.8.10461 Not tainted 6.1.141-syzkaller #0 [ 821.415669][T27963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 821.425720][T27963] Call Trace: [ 821.428993][T27963] [ 821.431920][T27963] dump_stack_lvl+0x168/0x22e [ 821.436604][T27963] ? load_image+0x3b0/0x3b0 [ 821.441094][T27963] ? show_regs_print_info+0x12/0x12 [ 821.446273][T27963] ? print_circular_bug+0x12b/0x1a0 [ 821.451451][T27963] check_noncircular+0x274/0x310 [ 821.456372][T27963] ? add_chain_block+0x940/0x940 [ 821.461293][T27963] ? lockdep_lock+0xdc/0x1e0 [ 821.465966][T27963] ? lockdep_unlock+0x133/0x2d0 [ 821.470799][T27963] ? lockdep_lock+0x1e0/0x1e0 [ 821.475456][T27963] ? _find_first_zero_bit+0xcf/0x100 [ 821.480733][T27963] __lock_acquire+0x2cf8/0x7c50 [ 821.485598][T27963] ? verify_lock_unused+0x140/0x140 [ 821.491138][T27963] ? ocfs2_inode_lock_full_nested+0xcb3/0x1b20 [ 821.497287][T27963] lock_acquire+0x1b4/0x490 [ 821.501783][T27963] ? ocfs2_lock_global_qf+0x1c7/0x270 [ 821.507139][T27963] ? __might_sleep+0xd0/0xd0 [ 821.511714][T27963] ? read_lock_is_recursive+0x10/0x10 [ 821.517064][T27963] ? do_raw_spin_lock+0x11d/0x280 [ 821.522070][T27963] ? __rwlock_init+0x140/0x140 [ 821.526817][T27963] down_write+0x36/0x60 [ 821.530952][T27963] ? ocfs2_lock_global_qf+0x1c7/0x270 [ 821.536330][T27963] ocfs2_lock_global_qf+0x1c7/0x270 [ 821.541524][T27963] ? lock_buffer+0x80/0x80 [ 821.545936][T27963] ? trace_contention_end+0x5f/0x170 [ 821.551219][T27963] ocfs2_acquire_dquot+0x2a0/0xb10 [ 821.556312][T27963] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 821.562012][T27963] ? from_kuid+0x155/0x670 [ 821.566408][T27963] ? ocfs2_destroy_dquot+0x40/0x40 [ 821.571520][T27963] ? percpu_counter_add_batch+0x13b/0x160 [ 821.577306][T27963] dqget+0x778/0xeb0 [ 821.581198][T27963] __dquot_initialize+0x3b6/0xcb0 [ 821.586337][T27963] ? dquot_initialize+0x20/0x20 [ 821.591186][T27963] ? do_raw_spin_unlock+0x11d/0x230 [ 821.596466][T27963] ocfs2_get_init_inode+0x138/0x1b0 [ 821.601673][T27963] ? ocfs2_create_inode_in_orphan+0x1080/0x1080 [ 821.607899][T27963] ? __lock_acquire+0x13c0/0x7c50 [ 821.612929][T27963] ocfs2_mknod+0x8be/0x2350 [ 821.617544][T27963] ? ocfs2_mkdir+0x4a0/0x4a0 [ 821.622146][T27963] ? ocfs2_inode_lock_tracker+0x3e8/0x660 [ 821.627862][T27963] ? __lock_acquire+0x7c50/0x7c50 [ 821.632866][T27963] ? do_raw_spin_lock+0x11d/0x280 [ 821.637874][T27963] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 821.643747][T27963] ? __lock_acquire+0x7c50/0x7c50 [ 821.648764][T27963] ? __rwlock_init+0x140/0x140 [ 821.653523][T27963] ? ocfs2_lookup+0x4d7/0xa60 [ 821.658213][T27963] ? do_raw_spin_unlock+0x11d/0x230 [ 821.663394][T27963] ? _raw_spin_unlock+0x24/0x40 [ 821.668222][T27963] ? put_pid+0xda/0x120 [ 821.672373][T27963] ocfs2_mkdir+0x1b6/0x4a0 [ 821.676768][T27963] ? make_kgid+0x640/0x640 [ 821.681162][T27963] ? ocfs2_symlink+0x2650/0x2650 [ 821.686076][T27963] ? HAS_UNMAPPED_ID+0x1d3/0x230 [ 821.690990][T27963] ? ocfs2_getattr+0x350/0x350 [ 821.695730][T27963] ? inode_permission+0xef/0x480 [ 821.700639][T27963] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 821.705668][T27963] ? security_inode_mkdir+0xb3/0x100 [ 821.710982][T27963] vfs_mkdir+0x387/0x570 [ 821.715216][T27963] do_mkdirat+0x1d0/0x430 [ 821.719527][T27963] ? vfs_mkdir+0x570/0x570 [ 821.723928][T27963] __x64_sys_mkdirat+0x85/0x90 [ 821.728672][T27963] do_syscall_64+0x4c/0xa0 [ 821.733069][T27963] ? clear_bhb_loop+0x60/0xb0 [ 821.737722][T27963] ? clear_bhb_loop+0x60/0xb0 [ 821.742386][T27963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.748277][T27963] RIP: 0033:0x7fa71c78e929 [ 821.752686][T27963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.772286][T27963] RSP: 002b:00007fa71d599038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 821.780768][T27963] RAX: ffffffffffffffda RBX: 00007fa71c9b5fa0 RCX: 00007fa71c78e929 [ 821.788720][T27963] RDX: 00000000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 821.796667][T27963] RBP: 00007fa71c810b39 R08: 0000000000000000 R09: 0000000000000000 [ 821.804641][T27963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.812623][T27963] R13: 0000000000000000 R14: 00007fa71c9b5fa0 R15: 00007ffe1d5a5408 [ 821.820586][T27963] [ 821.823647][ C0] vkms_vblank_simulate: vblank timer overrun [ 821.840869][T27963] (syz.8.10461,27963,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x28030c75. Applying ECC. [ 821.854659][T27963] (syz.8.10461,27963,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x28d1d8ae [ 821.868239][T27963] (syz.8.10461,27963,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 821.877172][T27963] (syz.8.10461,27963,0):ocfs2_quota_read:201 ERROR: status = -5 [ 821.884959][T27963] Quota error (device loop8): find_tree_dqentry: Can't read quota tree block 5 [ 821.894231][T27963] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 821.903677][T27963] (syz.8.10461,27963,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 821.911628][T27963] (syz.8.10461,27963,0):ocfs2_mknod:314 ERROR: status = -5 [ 821.918910][T27963] (syz.8.10461,27963,0):ocfs2_mknod:502 ERROR: status = -5 [ 821.926181][T27963] (syz.8.10461,27963,0):ocfs2_mkdir:659 ERROR: status = -5 [ 821.942809][T19410] ocfs2: Unmounting device (7,8) on (node local)