last executing test programs: 5m17.881158707s ago: executing program 3 (id=428): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)="e8"}, {0x0, 0x2000000}], 0x2) 5m17.562973159s ago: executing program 3 (id=431): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)='smb3\x00', 0x0, &(0x7f0000002040)='dirsync') 5m17.118734407s ago: executing program 3 (id=438): r0 = creat(&(0x7f0000003880)='./file0\x00', 0x143) sync_file_range(r0, 0x3c21c05f, 0x7fff, 0x8c12307a846d3eb4) 5m16.704797592s ago: executing program 3 (id=443): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@keep_last_dots}, {@utf8}, {}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x6}}]}, 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) 5m16.215925118s ago: executing program 3 (id=452): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40840}, 0x10) 5m15.484858175s ago: executing program 3 (id=462): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x10, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b7227", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m15.114030597s ago: executing program 32 (id=462): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r0, 0x0, 0x10, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b7227", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m48.684604628s ago: executing program 0 (id=2516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 2m48.408478277s ago: executing program 0 (id=2518): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00005e2000/0x3000)=nil, 0x2) 2m48.180048603s ago: executing program 0 (id=2523): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 2m47.609985656s ago: executing program 0 (id=2527): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {@gid}, {@umask={'umask', 0x3d, 0x10}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@keep_last_dots}, {@utf8}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0) 2m46.68366742s ago: executing program 0 (id=2540): r0 = epoll_create(0x1) lseek(r0, 0x4, 0x4) 2m45.952682869s ago: executing program 0 (id=2556): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, &(0x7f00000000c0), 0x4) 2m45.531713387s ago: executing program 33 (id=2556): r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x2, &(0x7f00000000c0), 0x4) 1m42.252870774s ago: executing program 6 (id=3409): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {0x716788ce}}) 1m42.118814754s ago: executing program 6 (id=3410): r0 = eventfd2(0x55, 0x1) read$eventfd(r0, &(0x7f0000001500), 0x8) 1m41.816007791s ago: executing program 6 (id=3417): syz_mount_image$jfs(&(0x7f0000000500), &(0x7f0000005d80)='./file0\x00', 0x2000000, &(0x7f0000000680)=ANY=[@ANYBLOB="00d696053f01cb9da99b8980c34306227024cc35a6db2c9991bbf4cb0595aee94d06c78764d64a39a1e33e7955bf26776c60e404a65d74a17e210b95dadbd8d5ae24e44bd74f54996ea93ec6d481c267b89aa2ea8c04f25a0902fcd92779bb62f2237489761a52193131ce96466a52f5cdd0c1c71862e9b8f5035795672a45acf5dafc3b5e14501285a02ee9d0758cb8f5980ed2b1fa393e908a15bd0f53e6e8161f0ed5037cfab09ee4b913970d21193a5cc47f5ffe50828e3d72954536295169fe42ae4b760fe3c468eadf90aabf0b7cbd7edd6b055dce5be7e1e208b927fa584e41664e9e6b330ce243d8"], 0x1, 0x5e06, &(0x7f0000005dc0)="$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") lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'os2.', 'system.posix_acl_access\x00'}) 1m40.896706724s ago: executing program 6 (id=3427): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$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") mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) 1m40.509087621s ago: executing program 6 (id=3432): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x11, @empty, 0x4e24, 0x3, 'wlc\x00', 0x30, 0xc, 0xb}, 0x2c) 1m40.015721014s ago: executing program 6 (id=3440): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}]}, 0x40}}, 0x0) 1m39.658573113s ago: executing program 34 (id=3440): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}]}}}]}, 0x40}}, 0x0) 4.269896903s ago: executing program 4 (id=4870): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000340)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@uid}, {@umask={'umask', 0x3d, 0x3b}}, {@umask={'umask', 0x3d, 0xab0}}, {@partition={'partition', 0x3d, 0xffff}}, {@shortad}, {@fileset={'fileset', 0x3d, 0x1}}, {@unhide}]}, 0x1, 0xc54, &(0x7f0000004440)="$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") 3.74397951s ago: executing program 4 (id=4879): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x31}, 0x80, &(0x7f0000001000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66bb0280000788fb", 0x15}], 0x1}, 0x0) 3.407755811s ago: executing program 4 (id=4885): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.700048479s ago: executing program 7 (id=4915): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@noload}, {@errors_remount}, {@resgid={'resgid', 0x3d, 0xee00}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@usrjquota}, {@nombcache}, {@noquota}, {@grpid}, {@norecovery}]}, 0x0, 0x45f, &(0x7f0000001940)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)) 1.658093841s ago: executing program 5 (id=4916): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x65, 0x2}}}}) 1.657792904s ago: executing program 2 (id=4917): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3b}, 0x50) 1.6576066s ago: executing program 8 (id=4918): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0), 0x0) 1.603893274s ago: executing program 2 (id=4919): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getpeername(r0, 0x0, 0x0) 1.546902859s ago: executing program 2 (id=4920): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000080)={0x8000001, 0x0, "000097cba2760700000000000000000000000000000000005d1f4d0800", 0x7, 0xfffffff8, 0x0, 0x0, 0x60}) 1.489994751s ago: executing program 2 (id=4921): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x3214212, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x7, 0xf08, &(0x7f0000001e40)="$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") rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.312770977s ago: executing program 5 (id=4922): openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000200)='./bus\x00', 0x40, &(0x7f0000002700)=ANY=[], 0x1, 0x27c, &(0x7f0000000700)="$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") 1.266473348s ago: executing program 1 (id=4923): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000004c0)='system.posix_acl_access\x00', &(0x7f0000000800), 0x4, 0x0) 1.251121726s ago: executing program 8 (id=4924): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0x9, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x56}}], {{0x4, 0x1, 0x3, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.018415497s ago: executing program 1 (id=4925): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x6, 0x0, 0x0) 1.017380109s ago: executing program 5 (id=4926): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x6, @pix_mp={0xea, 0x82, 0x32315659, 0x7, 0x4, [{0x2}, {}, {0x0, 0x9}, {0x0, 0x320}, {0x0, 0x4}, {0x2, 0xfffffff9}, {0x0, 0x8}, {0x5b1, 0x3}], 0x0, 0x5, 0x8, 0x0, 0x2}}) 1.005135621s ago: executing program 7 (id=4927): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x0, 0x8001, 0x1}) 892.780825ms ago: executing program 8 (id=4928): ioperm(0xe6b7, 0x101, 0x7) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1) 846.172795ms ago: executing program 2 (id=4929): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="2c02000010000b0500000200000000006f6d8864d22a3e2f00a46c887c090200002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d28"], 0x22c}], 0x1}, 0x0) 819.654793ms ago: executing program 5 (id=4930): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x34, 0x0, 0x7, 0x9, 0x9, 0x2, 0x1, 0x80000000}}) 781.279798ms ago: executing program 4 (id=4931): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x2) 770.508337ms ago: executing program 1 (id=4932): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r0, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x239) 684.710425ms ago: executing program 8 (id=4933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 684.446267ms ago: executing program 7 (id=4934): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, 0x15, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 623.55431ms ago: executing program 7 (id=4935): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) 510.234262ms ago: executing program 5 (id=4936): r0 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r0, 0x0, 0x0) 453.775561ms ago: executing program 5 (id=4937): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 408.738837ms ago: executing program 8 (id=4938): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f00000000c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) 371.903053ms ago: executing program 1 (id=4939): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mlock2(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x0) 371.558606ms ago: executing program 4 (id=4940): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10001, 0x1, 0x1, 0x3, 0x400, 0x4}, 0x20) 286.081929ms ago: executing program 7 (id=4941): r0 = socket$rxrpc(0x21, 0x2, 0xa) ppoll(&(0x7f0000000e80)=[{r0}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) 263.406849ms ago: executing program 1 (id=4942): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f00000001c0)=0xbf) 160.839806ms ago: executing program 1 (id=4943): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") truncate(&(0x7f0000000200)='./file2\x00', 0x80000002328) 129.87968ms ago: executing program 4 (id=4944): syz_usb_connect$hid(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0100000001000000010902240001000000000904000001030000000921ffff000122050009058103"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000dae11c105e048402"], 0x0) 30.510632ms ago: executing program 7 (id=4945): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303"], 0x0) syz_usb_ep_read(r0, 0xf, 0x0, 0x0) 30.056485ms ago: executing program 2 (id=4946): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0), 0x1, 0x4e3, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000100)='./bus\x00', 0x1) 0s ago: executing program 8 (id=4947): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") symlink(&(0x7f0000000dc0)='./file1\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): ): going read-only [ 298.024149][T13378] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.055520][ T5838] bcachefs (loop2): finished waiting for writes to stop [ 298.059381][T13392] ubi0: attaching mtd0 [ 298.135784][T13392] ubi0: scanning is finished [ 298.140429][T13392] ubi0: empty MTD device detected [ 298.214330][ T5838] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 298.304439][ T5946] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 298.388576][T13392] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 298.396669][T13392] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 298.404023][T13392] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 298.411124][T13392] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 298.419401][T13392] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 298.426309][T13392] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 298.436746][T13392] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2160783858 [ 298.447569][T13392] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 298.459292][T13403] ubi0: background thread "ubi_bgt0d" started, PID 13403 [ 298.474725][ T5838] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 6 [ 298.500514][ T5838] bcachefs (loop2): shutdown complete, journal seq 7 [ 298.522176][ T5838] bcachefs (loop2): marking filesystem clean [ 298.565379][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 298.592947][ T5946] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 298.613390][ T5946] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.661996][ T5946] usb 8-1: Product: syz [ 298.666227][ T5946] usb 8-1: Manufacturer: syz [ 298.670877][ T5946] usb 8-1: SerialNumber: syz [ 298.706240][ T5946] usb 8-1: config 0 descriptor?? [ 298.728551][ T5838] bcachefs (loop2): shutdown complete [ 298.991253][T13402] loop6: detected capacity change from 0 to 32768 [ 299.157598][T13427] loop1: detected capacity change from 0 to 256 [ 299.279142][ T5963] usb 8-1: USB disconnect, device number 2 [ 299.523125][T13439] IPVS: set_ctl: invalid protocol: 135 172.20.20.30:20000 [ 299.534279][T13440] loop1: detected capacity change from 0 to 164 [ 299.599529][T13440] ISOFS: unable to read i-node block [ 299.616993][T13440] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 299.897115][ T5946] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 299.944454][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2973'. [ 300.083094][ T5946] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 300.091249][ T5946] usb 5-1: config 0 has no interface number 0 [ 300.098073][ T5946] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 300.124552][ T5946] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 300.148795][ T5946] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 300.189669][ T5946] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 300.233426][ T5946] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 300.268756][ T5946] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 300.300313][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.325503][ T5946] usb 5-1: config 0 descriptor?? [ 300.340092][T13443] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 300.376968][ T5946] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 300.653714][ T5893] usb 5-1: USB disconnect, device number 9 [ 300.684457][ T5893] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 300.702971][T13402] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 300.774031][T13402] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 300.802632][T13402] bcachefs (loop6): Version upgrade required: [ 300.802632][T13402] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 300.802632][T13402] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 300.802632][T13402] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 300.990022][T13402] bcachefs (loop6): dropping and reconstructing all alloc info [ 301.053244][T13402] bcachefs (loop6): check_topology... done [ 301.076760][T13402] bcachefs (loop6): accounting_read... done [ 301.116492][T13402] bcachefs (loop6): alloc_read... done [ 301.126066][T13493] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 301.129499][T13402] bcachefs (loop6): stripes_read... done [ 301.162123][T13402] bcachefs (loop6): snapshots_read... done [ 301.179665][T13402] bcachefs (loop6): check_allocations... done [ 301.288514][T13402] bcachefs (loop6): going read-write [ 301.359812][T13506] netlink: 'syz.2.2947': attribute type 1 has an invalid length. [ 301.370788][T13402] bcachefs (loop6): done starting filesystem [ 301.396169][T13506] netlink: 'syz.2.2947': attribute type 1 has an invalid length. [ 301.675089][ T6977] bcachefs (loop6): shutting down [ 301.680192][ T6977] bcachefs (loop6): going read-only [ 301.748799][ T6977] bcachefs (loop6): finished waiting for writes to stop [ 301.803632][ T6977] bcachefs (loop6): flushing journal and stopping allocators, journal seq 10 [ 301.834173][ T6977] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 10 [ 302.016860][ T6977] bcachefs (loop6): unshutdown complete, journal seq 11 [ 302.024903][ T6977] bcachefs (loop6): done going read-only, filesystem not clean [ 302.129323][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2999'. [ 302.257230][ T6977] bcachefs (loop6): shutdown complete [ 303.055128][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 303.342404][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 303.356373][ T8] usb 2-1: config 1 has too many interfaces: 129, using maximum allowed: 32 [ 303.378150][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 129 [ 303.425156][ T8] usb 2-1: config 1 interface 0 altsetting 93 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.468100][ T8] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 96 [ 303.512573][ T8] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 8 [ 303.557286][ T8] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 303.613489][ T8] usb 2-1: config 1 interface 0 has no altsetting 0 [ 303.637796][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40 [ 303.667325][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 303.699904][ T8] usb 2-1: SerialNumber: syz [ 303.720895][T13564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.728577][T13564] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 303.746137][ T8] usb 2-1: bad CDC descriptors [ 304.025219][ T8] cdc_subset 2-1:1.0: probe with driver cdc_subset failed with error -71 [ 304.112077][ T8] usb 2-1: USB disconnect, device number 12 [ 304.285019][T13633] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 304.292782][T13633] /dev/nullb0: Can't open blockdev [ 304.355662][T13635] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 304.787033][T13655] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709527469) [ 304.802782][T13655] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 305.393322][T13680] ksmbd: Unknown IPC event: 1, ignore. [ 305.642736][T13689] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3062'. [ 306.170505][T13714] loop1: detected capacity change from 0 to 512 [ 306.299438][T13714] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 306.328981][T13714] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 306.421508][T13714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.506080][T13714] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.3072: Unimplemented hash flags: 0x0001 [ 306.599187][T13714] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.3072: Corrupt directory, running e2fsck is recommended [ 306.914534][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.489877][T13774] loop4: detected capacity change from 0 to 4096 [ 307.719587][T13786] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 308.694108][T13829] block nbd5: NBD_DISCONNECT [ 309.032705][T13832] loop6: detected capacity change from 0 to 32768 [ 309.048368][T13766] loop7: detected capacity change from 0 to 32768 [ 309.216521][T13850] IPv6: sit1: Disabled Multicast RS [ 309.495187][T13832] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 309.604971][T13876] loop2: detected capacity change from 0 to 2048 [ 309.687714][T13878] loop1: detected capacity change from 0 to 1024 [ 309.711101][T13876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.772640][T13766] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,compression=lz4,degraded,no_splitbrain_check,journal_flush_disabled,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 309.796245][T13766] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 309.804534][T13766] bcachefs (loop7): Version upgrade required: [ 309.804534][T13766] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 309.804534][T13766] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 309.804534][T13766] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 309.929221][T13766] bcachefs (loop7): dropping and reconstructing all alloc info [ 310.053146][T13766] bcachefs (loop7): accounting_read... done [ 310.091136][ T187] hfsplus: b-tree write err: -5, ino 4 [ 310.114087][T13766] bcachefs (loop7): alloc_read... done [ 310.126508][ T6977] ocfs2: Unmounting device (7,6) on (node local) [ 310.146579][T13766] bcachefs (loop7): stripes_read... done [ 310.152369][T13766] bcachefs (loop7): snapshots_read... done [ 310.159610][T13766] bcachefs (loop7): check_allocations... [ 310.272307][T13891] infiniband syz2: set down [ 310.320115][T13896] overlayfs: conflicting options: userxattr,redirect_dir=on [ 310.351841][T13766] done [ 310.365899][ T5963] lo speed is unknown, defaulting to 1000 [ 310.367781][T13766] bcachefs (loop7): going read-write [ 310.372701][ T5963] lo speed is unknown, defaulting to 1000 [ 310.407542][T13766] bcachefs (loop7): done starting filesystem [ 310.700610][T13909] loop4: detected capacity change from 0 to 512 [ 310.735316][T12342] bcachefs (loop7): shutting down [ 310.740416][T12342] bcachefs (loop7): going read-only [ 310.781206][T13909] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 310.807536][T12342] bcachefs (loop7): finished waiting for writes to stop [ 310.883347][T13909] EXT4-fs (loop4): 1 truncate cleaned up [ 310.889967][T13909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.938491][T12342] bcachefs (loop7): flushing journal and stopping allocators, journal seq 11 [ 310.994256][T13909] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.3140: corrupted in-inode xattr: overlapping e_value [ 311.075727][T13909] EXT4-fs warning (device loop4): ext4_xattr_set_entry:1772: inode #15: comm syz.4.3140: unable to update i_inline_off [ 311.100790][T13909] EXT4-fs error (device loop4): ext4_xattr_ibody_get:653: inode #15: comm syz.4.3140: corrupted in-inode xattr: overlapping e_value [ 311.167937][T13921] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 311.288820][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.437196][ T12] bcachefs (loop7): bch2_write_super(): fatal error loop7: Superblock write was silently dropped! (seq 0 expected 53) [ 311.457956][ T12] bcachefs (loop7): fatal error - emergency read only [ 311.479729][T13937] loop6: detected capacity change from 0 to 1024 [ 311.486765][T13937] EXT4-fs: Ignoring removed orlov option [ 311.501491][T12342] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 13 [ 311.502953][T13937] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 311.529343][T12342] bcachefs (loop7): unshutdown complete, journal seq 13 [ 311.555658][T12342] bcachefs (loop7): done going read-only, filesystem not clean [ 311.659593][T13937] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.768690][T13945] tmpfs: Bad value for 'mpol' [ 311.771784][T13929] loop2: detected capacity change from 0 to 32768 [ 311.797472][T13937] /dev/loop6: Can't open blockdev [ 311.810485][T13948] loop4: detected capacity change from 0 to 256 [ 311.810977][T12342] bcachefs (loop7): shutdown complete [ 311.950025][T13929] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 311.975040][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.096677][ T5838] ocfs2: Unmounting device (7,2) on (node local) [ 312.139969][ T5963] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 312.165047][T13957] loop4: detected capacity change from 0 to 64 [ 312.315348][ T5963] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.334773][ T5963] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.373843][ T5963] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 312.383574][ T5963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 312.430444][ T5963] usb 6-1: SerialNumber: syz [ 312.715209][ T5963] usb 6-1: 0:2 : does not exist [ 312.795985][ T5963] usb 6-1: USB disconnect, device number 10 [ 313.117976][T13987] loop6: detected capacity change from 0 to 256 [ 313.134155][T13987] exfat: Deprecated parameter 'namecase' [ 313.187942][T13987] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 313.510445][T13999] loop5: detected capacity change from 0 to 64 [ 313.567197][T14001] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3182'. [ 313.580576][T13999] overlay: filesystem on ./file0 not supported [ 313.722767][T14006] loop4: detected capacity change from 0 to 64 [ 313.906016][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3186'. [ 313.960948][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3186'. [ 314.076088][T14012] loop6: detected capacity change from 0 to 4096 [ 314.188731][T14017] netlink: 'syz.1.3191': attribute type 1 has an invalid length. [ 314.218943][T14017] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3191'. [ 314.518477][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3197'. [ 314.869046][T14042] cgroup: Name too long [ 315.082970][T14048] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3205'. [ 315.390155][T14060] binder: 14059:14060 unknown command 64 [ 315.411723][T14060] binder: 14059:14060 ioctl c0306201 20000780 returned -22 [ 315.507229][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3214'. [ 315.558902][T14066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3214'. [ 316.002179][T14082] netlink: 'syz.7.3223': attribute type 1 has an invalid length. [ 316.035712][T14084] loop6: detected capacity change from 0 to 256 [ 316.083800][T14084] FAT-fs (loop6): Directory bread(block 1285) failed [ 316.101768][T14086] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3224'. [ 316.135625][T14084] FAT-fs (loop6): Directory bread(block 1285) failed [ 316.169431][T14084] FAT-fs (loop6): Directory bread(block 1285) failed [ 316.178205][T14035] loop1: detected capacity change from 0 to 32768 [ 316.197393][T14084] FAT-fs (loop6): Directory bread(block 1285) failed [ 316.354435][T14035] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 316.423013][T14105] netlink: 'syz.2.3231': attribute type 1 has an invalid length. [ 316.431186][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3231'. [ 317.024892][T14035] XFS (loop1): Ending clean mount [ 317.314643][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 317.405159][ T29] audit: type=1400 audit(1735769304.670:94): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14143 comm="syz.7.3250" [ 317.442143][T14146] netlink: zone id is out of range [ 317.447551][T14146] netlink: zone id is out of range [ 317.919017][T14159] loop4: detected capacity change from 0 to 2048 [ 317.983625][T14166] loop5: detected capacity change from 0 to 512 [ 318.007284][T14159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 318.049657][T14166] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.154160][T14166] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3260: invalid indirect mapped block 4294967295 (level 1) [ 318.231317][T14166] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.3260: invalid indirect mapped block 4294967295 (level 1) [ 318.313766][T14166] EXT4-fs (loop5): 2 truncates cleaned up [ 318.334425][T14166] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.457347][T14186] overlayfs: conflicting options: nfs_export=on,index=off [ 318.663756][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.684740][T14192] bond1: entered promiscuous mode [ 318.689798][T14192] bond1: entered allmulticast mode [ 318.698779][T14192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 318.785789][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 319.023324][T14205] loop4: detected capacity change from 0 to 4096 [ 319.084165][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.103359][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 319.130287][ T5893] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 319.172522][T14212] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 319.182887][T14205] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 319.193735][ T5893] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 319.219711][ T5893] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 319.254000][T14205] Remounting filesystem read-only [ 319.264277][T14192] bond1 (unregistering): Released all slaves [ 319.315214][ T5893] usb 8-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 319.352329][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.397810][ T5893] usb 8-1: Product: syz [ 319.405238][ T5893] usb 8-1: Manufacturer: syz [ 319.418534][ T5893] usb 8-1: SerialNumber: syz [ 319.426882][ T5893] usb 8-1: config 0 descriptor?? [ 319.442263][ T5893] usb 8-1: ucan: probing device on interface #0 [ 319.452393][ T5893] usb 8-1: ucan: invalid endpoint configuration [ 319.470051][ T5893] usb 8-1: ucan: probe failed; try to update the device firmware [ 319.618729][T14218] loop1: detected capacity change from 0 to 64 [ 319.733174][ T5893] usb 8-1: USB disconnect, device number 3 [ 319.907211][T14226] loop5: detected capacity change from 0 to 4096 [ 319.928799][T14226] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 320.098825][T14232] loop6: detected capacity change from 0 to 4096 [ 320.133843][T14232] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 320.351361][T14248] loop5: detected capacity change from 0 to 64 [ 320.524157][T14248] hfs: filesystem is marked locked, mounting read-only. [ 320.580426][T14248] hfs: filesystem is marked locked, leaving read-only. [ 320.665407][T14232] ntfs3(loop6): Failed to initialize $Extend/$Reparse. [ 320.902661][ C1] sd 0:0:1:0: [sda] tag#3689 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 320.913144][ C1] sd 0:0:1:0: [sda] tag#3689 CDB: Read(6) 08 00 0c 6a 08 48 [ 321.687911][T14258] loop4: detected capacity change from 0 to 32768 [ 321.748960][T14298] loop5: detected capacity change from 0 to 256 [ 321.769772][T14258] (syz.4.3304,14258,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 321.805609][T14298] exfat: Deprecated parameter 'utf8' [ 321.844908][T14258] (syz.4.3304,14258,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 321.895703][T14298] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 321.986296][T14258] JBD2: Ignoring recovery information on journal [ 322.164062][T14258] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 322.304277][T14317] loop6: detected capacity change from 0 to 8 [ 322.354458][T14317] SQUASHFS error: zlib decompression failed, data probably corrupt [ 322.396660][T14317] SQUASHFS error: Failed to read block 0x13e: -5 [ 322.422042][T14317] SQUASHFS error: Unable to read metadata cache entry [13c] [ 322.430823][T14317] SQUASHFS error: Unable to read directory block [13c:26] [ 322.507274][ T5842] ocfs2: Unmounting device (7,4) on (node local) [ 322.821777][T14309] loop7: detected capacity change from 0 to 32768 [ 322.914732][T14333] loop4: detected capacity change from 0 to 1024 [ 323.020498][T14333] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 323.024560][T14309] (syz.7.3327,14309,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 323.052652][T14330] loop6: detected capacity change from 0 to 4096 [ 323.061897][T14309] (syz.7.3327,14309,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 323.155391][T14309] JBD2: Ignoring recovery information on journal [ 323.273741][T14309] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 323.326071][T14309] (syz.7.3327,14309,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x78b62c9b, computed 0x9e9236ca. Applying ECC. [ 323.384245][T14346] netlink: 'syz.1.3347': attribute type 5 has an invalid length. [ 323.735964][T14343] loop5: detected capacity change from 0 to 32768 [ 323.763976][T12342] ocfs2: Unmounting device (7,7) on (node local) [ 325.137396][T14395] loop1: detected capacity change from 0 to 4096 [ 325.198308][T14395] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 325.337552][T14395] ntfs3(loop1): ino=5, "/" attr_set_size [ 325.343697][T14395] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 325.837175][T14383] loop5: detected capacity change from 0 to 32768 [ 326.046564][T14381] loop7: detected capacity change from 0 to 32768 [ 326.164999][T14381] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 326.276258][T14381] XFS (loop7): Ending clean mount [ 326.430218][T14443] Invalid ELF header magic: != ELF [ 326.569352][T14449] __nla_validate_parse: 5 callbacks suppressed [ 326.569374][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 326.587871][T14449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 326.672365][ T29] audit: type=1326 audit(1735769313.236:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14450 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 326.717452][ T29] audit: type=1326 audit(1735769313.263:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14450 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 326.794687][ T29] audit: type=1326 audit(1735769313.310:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14450 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 326.882214][ T29] audit: type=1326 audit(1735769313.310:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14450 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 326.961292][ T29] audit: type=1326 audit(1735769313.310:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14450 comm="syz.5.3395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 327.063574][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 327.111366][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.120886][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.130993][T14463] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3398'. [ 327.278002][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 327.294205][ T5893] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=28.e0 [ 327.314521][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.357170][ T5893] usb 3-1: Product: syz [ 327.361389][ T5893] usb 3-1: Manufacturer: syz [ 327.368109][T12342] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 327.371704][ T5893] usb 3-1: SerialNumber: syz [ 327.392697][ T5893] usb 3-1: config 0 descriptor?? [ 327.441658][ T5893] ums-freecom 3-1:0.0: USB Mass Storage device detected [ 327.965653][T14475] loop4: detected capacity change from 0 to 32768 [ 327.983338][T14475] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3404 (14475) [ 328.020461][T14475] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.042908][T14475] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 328.050063][T14484] binder: BC_ACQUIRE_RESULT not supported [ 328.066162][T14475] BTRFS info (device loop4): using free-space-tree [ 328.090425][T14484] binder: 14483:14484 ioctl c0306201 20000380 returned -22 [ 328.139625][ T5893] usb 3-1: USB disconnect, device number 11 [ 328.738356][ T5842] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.863711][T14527] netlink: 'syz.1.3419': attribute type 10 has an invalid length. [ 328.949466][T14527] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 329.153707][T14532] loop5: detected capacity change from 0 to 256 [ 329.172504][T14532] exfat: Deprecated parameter 'namecase' [ 329.177207][T14523] loop6: detected capacity change from 0 to 32768 [ 329.298368][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3425'. [ 329.307666][T14537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3425'. [ 329.332302][T14532] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 329.391838][T14535] loop1: detected capacity change from 0 to 1024 [ 329.448034][T14535] hfsplus: bad catalog entry type [ 329.523510][T14532] exFAT-fs (loop5): start_clu is invalid cluster(0x0) [ 329.602053][T14542] loop6: detected capacity change from 0 to 1024 [ 329.802148][ T6977] hfsplus: bad catalog entry type [ 329.877456][T14547] netlink: 'syz.5.3430': attribute type 1 has an invalid length. [ 330.119347][T14553] netlink: 'syz.2.3433': attribute type 21 has an invalid length. [ 330.128604][T14553] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3433'. [ 330.139190][T14553] netlink: 'syz.2.3433': attribute type 5 has an invalid length. [ 330.147982][T14553] netlink: 'syz.2.3433': attribute type 6 has an invalid length. [ 330.155958][T14553] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3433'. [ 330.270018][ T36] hfsplus: b-tree write err: -5, ino 4 [ 330.457632][T14569] netlink: 'syz.2.3442': attribute type 3 has an invalid length. [ 330.491668][T14569] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3442'. [ 330.574589][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.783785][T14575] tmpfs: Bad value for 'mpol' [ 330.797887][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.826616][ T29] audit: type=1326 audit(1735769317.057:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14573 comm="syz.5.3448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x0 [ 331.224541][T14593] loop4: detected capacity change from 0 to 256 [ 331.241152][T14593] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.285972][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.362062][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 331.396601][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 331.499474][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 331.525601][T14604] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3459'. [ 331.533870][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 331.543176][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 331.564605][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 331.911907][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.952340][T14622] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3467'. [ 332.066312][T14588] lo speed is unknown, defaulting to 1000 [ 332.757466][ T5893] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 332.954256][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 332.978585][ T5893] usb 6-1: config 0 has an invalid interface number: 244 but max is 0 [ 332.995977][ T5893] usb 6-1: config 0 has no interface number 0 [ 333.029645][ T5893] usb 6-1: config 0 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 333.052320][ T5893] usb 6-1: config 0 interface 244 has no altsetting 0 [ 333.081152][ T12] bridge_slave_1: left allmulticast mode [ 333.087809][ T12] bridge_slave_1: left promiscuous mode [ 333.093887][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.112128][ T5893] usb 6-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 333.121496][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.136278][ T5893] usb 6-1: Product: syz [ 333.140965][ T5893] usb 6-1: Manufacturer: syz [ 333.146431][ T5893] usb 6-1: SerialNumber: syz [ 333.154239][T14654] loop4: detected capacity change from 0 to 64 [ 333.161001][ T5893] usb 6-1: config 0 descriptor?? [ 333.168837][ T12] bridge_slave_0: left allmulticast mode [ 333.188709][ T12] bridge_slave_0: left promiscuous mode [ 333.196239][ T5893] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort found [ 333.206184][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.411852][ T5893] snd_usb_toneport 6-1:0.244: cannot get proper max packet size [ 333.440656][ T5893] snd_usb_toneport 6-1:0.244: Line 6 GuitarPort now disconnected [ 333.471943][ T5893] snd_usb_toneport 6-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 333.634123][ T5963] usb 6-1: USB disconnect, device number 11 [ 333.819676][ T5840] Bluetooth: hci3: command tx timeout [ 333.989988][T14671] loop7: detected capacity change from 0 to 4096 [ 334.001281][T14671] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 334.153031][T14671] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 334.496436][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.549483][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.597466][ T12] bond0 (unregistering): Released all slaves [ 334.634617][T14698] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3503'. [ 334.636910][ T12] bond1 (unregistering): Released all slaves [ 334.667792][ T12] bond2 (unregistering): Released all slaves [ 334.698495][ T12] bond3 (unregistering): Released all slaves [ 334.725470][T14652] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (71) [ 334.902027][T14588] chnl_net:caif_netlink_parms(): no params data found [ 335.565761][T14588] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.616846][T14588] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.666716][T14588] bridge_slave_0: entered allmulticast mode [ 335.674092][T14588] bridge_slave_0: entered promiscuous mode [ 335.681731][T14588] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.688948][T14588] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.697114][T14588] bridge_slave_1: entered allmulticast mode [ 335.704224][T14588] bridge_slave_1: entered promiscuous mode [ 335.875189][T14588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.073109][ T5840] Bluetooth: hci3: command tx timeout [ 336.297531][T14588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.481375][T14770] SET target dimension over the limit! [ 336.545236][T14588] team0: Port device team_slave_0 added [ 336.737585][T14588] team0: Port device team_slave_1 added [ 336.815116][T14782] overlayfs: missing 'lowerdir' [ 336.997500][T14588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.019347][T14588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.088928][T14790] netlink: 'syz.5.3539': attribute type 3 has an invalid length. [ 337.144562][T14790] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3539'. [ 337.146647][T14588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.178444][T14588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.185404][T14588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.211508][T14588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.437985][T14795] mmap: syz.4.3540 (14795): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 337.616171][T14778] loop1: detected capacity change from 0 to 32768 [ 337.769284][ T12] hsr_slave_0: left promiscuous mode [ 337.828648][ T12] hsr_slave_1: left promiscuous mode [ 337.875483][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.920194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.949597][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.987873][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.091669][ T12] veth1_macvtap: left promiscuous mode [ 338.105349][ T12] veth0_macvtap: left promiscuous mode [ 338.114252][ T12] veth1_vlan: left promiscuous mode [ 338.119631][ T12] veth0_vlan: left promiscuous mode [ 338.315430][ T5840] Bluetooth: hci3: command tx timeout [ 338.517992][T14829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3550'. [ 338.903223][T14812] loop2: detected capacity change from 0 to 40427 [ 338.920821][T14812] F2FS-fs (loop2): invalid crc value [ 338.936758][T14812] F2FS-fs (loop2): Found nat_bits in checkpoint [ 339.085392][T14812] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 339.116198][T14812] F2FS-fs (loop2): Corrupted max_depth of 3: 4294967295 [ 339.658053][ T12] team0 (unregistering): Port device team_slave_1 removed [ 339.709810][ T12] team0 (unregistering): Port device team_slave_0 removed [ 340.252387][T14588] hsr_slave_0: entered promiscuous mode [ 340.266178][T14588] hsr_slave_1: entered promiscuous mode [ 340.286746][T14588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.309324][T14588] Cannot create hsr debugfs directory [ 340.316632][T14806] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 340.389018][T14857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3560'. [ 340.568982][ T5840] Bluetooth: hci3: command tx timeout [ 340.606281][T14861] binder: 14859:14861 ioctl c018620c 20000080 returned -22 [ 341.147075][T14886] netlink: 'syz.1.3571': attribute type 10 has an invalid length. [ 341.215085][T14588] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 341.269030][T14890] loop4: detected capacity change from 0 to 256 [ 341.328818][T14894] xt_hashlimit: size too large, truncated to 1048576 [ 341.350393][T14894] xt_hashlimit: max too large, truncated to 1048576 [ 341.383760][T14886] team0: Port device wlan1 added [ 341.410898][T14588] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 341.461299][T14890] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 341.492104][T14588] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 341.560624][T14588] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 341.951641][T14588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.020373][T14588] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.141184][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.148301][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.198215][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.205382][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.547171][T14933] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3590'. [ 342.624406][T14941] loop4: detected capacity change from 0 to 64 [ 342.911060][T14950] SET target dimension over the limit! [ 342.961331][T14953] netlink: 'syz.7.3596': attribute type 10 has an invalid length. [ 343.026128][T14956] QAT: Invalid ioctl 21531 [ 343.109540][T14588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.391347][T14971] usb usb1: usbfs: process 14971 (syz.7.3601) did not claim interface 0 before use [ 344.127547][T14588] veth0_vlan: entered promiscuous mode [ 344.188567][T14588] veth1_vlan: entered promiscuous mode [ 344.256239][T15004] binder: 15003:15004 ioctl 400c620e 0 returned -14 [ 344.261842][T14952] loop2: detected capacity change from 0 to 32768 [ 344.275440][T14588] veth0_macvtap: entered promiscuous mode [ 344.284116][T14588] veth1_macvtap: entered promiscuous mode [ 344.342805][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.376633][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.387286][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.410409][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.423986][T15006] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3615'. [ 344.433308][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.455528][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.479202][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.489892][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.514949][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.525642][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.536850][T14588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.546710][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.569264][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.590988][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.601912][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.623223][T14952] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 344.623223][T14952] [ 344.626804][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.653274][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.672386][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.699977][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.712902][T14588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.723577][T14588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.740188][T14588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.822218][T14588] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.831744][T15013] loop5: detected capacity change from 0 to 1024 [ 344.867437][T14588] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.886028][T14588] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.924252][T14588] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.052732][T12484] hfsplus: b-tree write err: -5, ino 4 [ 345.228689][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.261950][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.332669][T15026] loop5: detected capacity change from 0 to 64 [ 345.377702][ T187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.401023][ T187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.903264][T15036] SET target dimension over the limit! [ 345.977028][T15047] loop1: detected capacity change from 0 to 512 [ 346.014273][T15047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 346.118336][T15047] EXT4-fs (loop1): 1 truncate cleaned up [ 346.192680][T15047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.256407][T15060] loop7: detected capacity change from 0 to 1024 [ 346.304418][T15062] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3634'. [ 346.345639][T15060] hfsplus: xattr searching failed [ 346.448706][T15073] loop2: detected capacity change from 0 to 64 [ 346.530024][T15073] syz.2.3639: attempt to access beyond end of device [ 346.530024][T15073] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 346.830982][T15081] netlink: 'syz.8.3644': attribute type 1 has an invalid length. [ 346.838755][T15081] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3644'. [ 346.924079][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.081383][T15091] dccp_v6_rcv: dropped packet with invalid checksum [ 347.149972][T15099] ipvlan0: entered allmulticast mode [ 347.188767][T15099] veth0_vlan: entered allmulticast mode [ 347.412088][T15112] netlink: get zone limit has 8 unknown bytes [ 347.981302][T15140] loop7: detected capacity change from 0 to 64 [ 348.031456][ T5963] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 348.059748][T15140] Trying to free block not in datazone [ 348.095910][T15140] Trying to free block not in datazone [ 348.153697][T15140] Trying to free block not in datazone [ 348.159209][T15140] Trying to free block not in datazone [ 348.201499][T15144] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 348.201749][T15146] loop2: detected capacity change from 0 to 512 [ 348.225330][T15140] minix_free_block (loop7:6): bit already cleared [ 348.237980][ T5963] usb 2-1: unable to get BOS descriptor or descriptor too short [ 348.247458][T15144] overlayfs: missing 'lowerdir' [ 348.254029][T15140] Trying to free block not in datazone [ 348.270588][T15140] Trying to free block not in datazone [ 348.283833][T15146] EXT4-fs: Ignoring removed i_version option [ 348.284747][ T5963] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 30, changing to 8 [ 348.298426][T15146] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 348.356418][ T5963] usb 2-1: config 1 interface 0 has no altsetting 0 [ 348.402330][ T5963] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 348.411412][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.434967][T15146] EXT4-fs (loop2): 1 truncate cleaned up [ 348.435121][ T5963] usb 2-1: Product: syz [ 348.454157][T15146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.511502][ T5963] usb 2-1: Manufacturer: syz [ 348.516149][ T5963] usb 2-1: SerialNumber: syz [ 348.532653][T15146] EXT4-fs error (device loop2): ext4_find_extent:902: inode #15: comm syz.2.3670: inode has invalid extent depth: 25964 [ 348.650522][T15146] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 348.823769][ T5963] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input12 [ 348.846680][ T5183] bcm5974 2-1:1.0: could not read from device [ 348.857396][ T5183] bcm5974 2-1:1.0: could not read from device [ 348.889515][ T5963] usb 2-1: USB disconnect, device number 13 [ 349.011197][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.375791][T15189] loop7: detected capacity change from 0 to 16 [ 349.453429][T15189] erofs (device loop7): mounted with root inode @ nid 36. [ 349.747460][ T5897] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 350.025459][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 350.032453][ T5897] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 350.042330][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.093560][ T5897] usb 3-1: config 0 descriptor?? [ 350.120124][ T5897] gspca_main: sunplus-2.14.0 probing 041e:400b [ 350.573076][ T5897] gspca_sunplus: reg_w_riv err -71 [ 350.578290][ T5897] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 350.617518][ T5897] usb 3-1: USB disconnect, device number 12 [ 350.989734][T15259] loop1: detected capacity change from 0 to 64 [ 351.151102][T15259] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 351.426807][T15278] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3720'. [ 351.435918][T15278] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3720'. [ 351.454701][T15272] loop8: detected capacity change from 0 to 256 [ 352.274618][T15280] loop2: detected capacity change from 0 to 32768 [ 352.326455][T15307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3731'. [ 352.429624][T15245] loop4: detected capacity change from 0 to 40427 [ 352.505085][T15245] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 352.515757][T15245] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 352.562655][ T29] audit: type=1326 audit(1735769337.132:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 352.563095][T15245] F2FS-fs (loop4): build fault injection attr: rate: 40737, type: 0x1fffff [ 352.616132][T15280] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 352.626534][ T29] audit: type=1326 audit(1735769337.178:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 352.689275][T15326] netlink: 'syz.7.3736': attribute type 4 has an invalid length. [ 352.696671][ T29] audit: type=1326 audit(1735769337.178:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 352.749344][ T29] audit: type=1326 audit(1735769337.178:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15315 comm="syz.1.3737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 352.757697][T15245] F2FS-fs (loop4): invalid crc value [ 353.138560][T15245] F2FS-fs (loop4): Found nat_bits in checkpoint [ 353.285375][T15354] netlink: 'syz.7.3746': attribute type 1 has an invalid length. [ 353.397032][T15245] F2FS-fs (loop4): Start checkpoint disabled! [ 353.458701][T15280] XFS (loop2): Ending clean mount [ 353.478222][T15363] loop8: detected capacity change from 0 to 512 [ 353.494101][T15364] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3748'. [ 353.516503][T15363] EXT4-fs: Ignoring removed i_version option [ 353.523494][T15364] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3748'. [ 353.524386][T15245] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 353.539704][T15245] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 353.561914][T15363] EXT4-fs: Ignoring removed mblk_io_submit option [ 353.598278][ T5838] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 353.626508][T15363] EXT4-fs error (device loop8): ext4_orphan_get:1389: comm syz.8.3747: inode #13: comm syz.8.3747: iget: illegal inode # [ 353.754282][T15363] EXT4-fs (loop8): Remounting filesystem read-only [ 353.761725][T15363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.783259][T15375] loop7: detected capacity change from 0 to 1024 [ 353.980374][T14588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.003398][T15375] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.061278][T15375] EXT4-fs error (device loop7): ext4_get_first_dir_block:3561: inode #11: comm syz.7.3754: directory missing '..' [ 354.382505][T12342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.643441][T15398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3765'. [ 355.270621][T15427] loop8: detected capacity change from 0 to 512 [ 355.303588][T15427] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 355.313634][T15406] loop4: detected capacity change from 0 to 32768 [ 355.351274][T15427] EXT4-fs (loop8): 1 truncate cleaned up [ 355.370361][T15406] ERROR: (device loop4): diAllocBit: iag inconsistent [ 355.370361][T15406] [ 355.380577][T15427] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.405465][T15406] ialloc: diAlloc returned -5! [ 355.577804][ T5897] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 355.888422][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 355.908957][ T5897] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 355.935187][ T5897] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 355.947680][T14588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.956822][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.999272][T15445] netlink: 'syz.4.3782': attribute type 32 has an invalid length. [ 356.011443][ T5897] usb 3-1: Product: syz [ 356.015645][ T5897] usb 3-1: Manufacturer: syz [ 356.064826][ T5897] usb 3-1: SerialNumber: syz [ 356.077595][ T5897] usb 3-1: config 0 descriptor?? [ 356.113362][ T5897] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 356.137997][ T5897] usb 3-1: Detected FT232R [ 356.172400][T15411] loop1: detected capacity change from 0 to 32768 [ 356.256907][ T5899] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 356.452232][ T5899] usb 8-1: config 0 has an invalid interface number: 178 but max is 0 [ 356.460664][ T5899] usb 8-1: config 0 has no interface number 0 [ 356.475944][ T5899] usb 8-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 356.524043][ T5899] usb 8-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 356.542727][ T5899] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.569363][ T5899] usb 8-1: config 0 descriptor?? [ 356.582600][ T5897] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 356.582921][T15444] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 356.604793][ T5897] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 356.632092][ T5897] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 356.729409][ T5897] usb 3-1: USB disconnect, device number 13 [ 356.799125][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 356.809009][ T5897] ftdi_sio 3-1:0.0: device disconnected [ 356.873750][ T5899] usb 8-1: string descriptor 0 read error: -71 [ 356.881231][ T5899] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 356.905210][T15469] netlink: 'syz.8.3793': attribute type 30 has an invalid length. [ 356.913679][ T5899] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 356.948167][ T5899] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 357.005025][ T5899] usb 8-1: USB disconnect, device number 4 [ 357.301345][T15481] loop4: detected capacity change from 0 to 128 [ 357.448992][ T29] audit: type=1326 audit(1735769341.646:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.5.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 357.471342][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.521208][ T29] audit: type=1326 audit(1735769341.646:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.5.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 357.543537][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.660548][ T29] audit: type=1326 audit(1735769341.692:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.5.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 357.800174][ T29] audit: type=1326 audit(1735769341.692:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.5.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 357.894945][ T29] audit: type=1326 audit(1735769341.692:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15485 comm="syz.5.3801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 358.746223][T15489] loop1: detected capacity change from 0 to 32768 [ 358.754326][T15489] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.3800 (15489) [ 358.792405][T15489] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 358.803300][T15489] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 358.813372][T15489] BTRFS info (device loop1): using free-space-tree [ 358.929412][T15546] loop8: detected capacity change from 0 to 1024 [ 358.965762][T15539] loop2: detected capacity change from 0 to 2048 [ 358.975447][T15539] EXT4-fs: Ignoring removed mblk_io_submit option [ 359.033125][T15539] EXT4-fs: Ignoring removed nobh option [ 359.057556][T15546] hfsplus: bad catalog entry type [ 359.292884][T15516] loop5: detected capacity change from 0 to 32768 [ 359.459322][T15539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.680072][T15516] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 1791,background_target=invalid device 234,nojournal_transaction_names [ 359.703483][ T5828] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 359.708691][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.724272][T15516] bcachefs (loop5): initializing new filesystem [ 359.797493][T15516] bcachefs (loop5): going read-write [ 359.833476][T15516] bcachefs (loop5): marking superblocks [ 359.848921][T15516] bcachefs (loop5): initializing freespace [ 359.856868][T15516] bcachefs (loop5): done initializing freespace [ 359.867064][T15516] bcachefs (loop5): reading snapshots table [ 359.873061][T15516] bcachefs (loop5): reading snapshots done [ 359.929704][T15516] bcachefs (loop5): done starting filesystem [ 360.058101][ T5829] bcachefs (loop5): shutting down [ 360.070365][ T5829] bcachefs (loop5): going read-only [ 360.124336][ T5829] bcachefs (loop5): finished waiting for writes to stop [ 360.135881][T15587] loop8: detected capacity change from 0 to 256 [ 360.217811][T15587] FAT-fs (loop8): Directory bread(block 64) failed [ 360.254609][T15587] FAT-fs (loop8): Directory bread(block 65) failed [ 360.261230][T15587] FAT-fs (loop8): Directory bread(block 66) failed [ 360.292003][T15587] FAT-fs (loop8): Directory bread(block 67) failed [ 360.298791][T15587] FAT-fs (loop8): Directory bread(block 68) failed [ 360.305409][T15587] FAT-fs (loop8): Directory bread(block 69) failed [ 360.312395][T15587] FAT-fs (loop8): Directory bread(block 70) failed [ 360.319220][T15587] FAT-fs (loop8): Directory bread(block 71) failed [ 360.320329][T15591] infiniband syz2: set active [ 360.326445][T15587] FAT-fs (loop8): Directory bread(block 72) failed [ 360.326487][T15587] FAT-fs (loop8): Directory bread(block 73) failed [ 360.354203][T15591] infiniband syz2: set active [ 360.359035][T15591] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3830'. [ 360.368393][T15591] infiniband syz2: set active [ 360.373270][T15591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 360.396220][ T5899] lo speed is unknown, defaulting to 1000 [ 360.417286][ T5899] lo speed is unknown, defaulting to 1000 [ 360.423176][ T5899] lo speed is unknown, defaulting to 1000 [ 360.440295][ T5899] lo speed is unknown, defaulting to 1000 [ 360.510449][ T5829] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3 [ 360.660617][T15603] xt_TCPMSS: Only works on TCP SYN packets [ 360.771035][ T5829] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 6 [ 360.782964][ T5829] bcachefs (loop5): shutdown complete, journal seq 7 [ 360.798886][ T5829] bcachefs (loop5): marking filesystem clean [ 360.937406][ T29] audit: type=1107 audit(1735769344.812:110): pid=15605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ð' [ 361.068265][ T5829] bcachefs (loop5): shutdown complete [ 361.367682][T15622] xt_CT: No such helper "snmp_trap" [ 361.379476][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3845'. [ 361.563914][T15634] snd_dummy snd_dummy.0: control 0:0:1073741821:syz1:0 is already present [ 361.635922][T15637] loop1: detected capacity change from 0 to 1024 [ 361.679916][T15637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 361.720191][T15637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 361.732554][T15639] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 361.742604][T15639] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 361.749199][T15637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.891864][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.214319][T15660] loop8: detected capacity change from 0 to 1024 [ 362.246552][T15658] loop4: detected capacity change from 0 to 512 [ 362.271598][T15663] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 362.291654][T15658] EXT4-fs: Ignoring removed oldalloc option [ 362.340167][T15665] netlink: 'syz.2.3864': attribute type 3 has an invalid length. [ 362.348130][T15665] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3864'. [ 362.348324][T15667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3862'. [ 362.455069][T15658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b842e02d, mo2=0002] [ 362.463105][T15658] System zones: 1-12 [ 362.496014][T15658] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3859: invalid indirect mapped block 1 (level 1) [ 362.659854][T15658] EXT4-fs (loop4): Remounting filesystem read-only [ 362.686914][T15680] netlink: 'syz.7.3867': attribute type 2 has an invalid length. [ 362.692421][T15658] EXT4-fs (loop4): 1 truncate cleaned up [ 362.694847][T15680] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3867'. [ 362.701181][T15658] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.798687][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.009494][T15675] loop2: detected capacity change from 0 to 32768 [ 363.160129][T15675] read_mapping_page failed! [ 363.373466][ T29] audit: type=1326 audit(1735769347.110:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15697 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 363.492987][T15704] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 363.501617][ T29] audit: type=1326 audit(1735769347.110:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15697 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 363.611574][ T29] audit: type=1326 audit(1735769347.110:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15697 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 363.677368][T15708] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3879'. [ 363.731242][ T29] audit: type=1326 audit(1735769347.138:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15697 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 363.862571][ T29] audit: type=1326 audit(1735769347.138:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15697 comm="syz.1.3876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a21185d29 code=0x7ffc0000 [ 364.473966][T15731] loop7: detected capacity change from 0 to 2048 [ 364.609809][T15731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.656960][T15696] loop2: detected capacity change from 0 to 32768 [ 364.726003][T15696] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3875 (15696) [ 364.916274][T15706] loop8: detected capacity change from 0 to 32768 [ 364.939240][T15696] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 364.950803][T15696] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 364.959598][T15696] BTRFS info (device loop2): using free-space-tree [ 364.967704][T12342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.328918][T15745] loop4: detected capacity change from 0 to 32768 [ 365.368395][T15745] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3894 (15745) [ 365.404446][T15745] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.421889][T15745] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 365.431890][T15745] BTRFS info (device loop4): using free-space-tree [ 365.466397][T15706] XFS (loop8): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 365.609282][T15706] XFS (loop8): Ending clean mount [ 365.620522][T15706] XFS (loop8): Quotacheck needed: Please wait. [ 365.639438][ T5963] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 365.797614][T15706] XFS (loop8): Quotacheck: Done. [ 365.836803][ T5963] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 365.866806][ T5963] usb 6-1: config 0 has no interface number 0 [ 365.883976][ T5963] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 365.895473][ T5842] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.928166][ T5963] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.010704][T14588] XFS (loop8): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 366.068981][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 366.087971][ T5963] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 366.104041][ T5838] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.108880][ T5963] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.132098][ T5963] usb 6-1: Product: syz [ 366.136515][ T5963] usb 6-1: Manufacturer: syz [ 366.142740][ T5963] usb 6-1: SerialNumber: syz [ 366.214059][ T5963] usb 6-1: config 0 descriptor?? [ 366.257268][T15755] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 366.363528][ T5963] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 366.381574][ T5963] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 366.402552][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 366.412799][T15809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3901'. [ 366.415910][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.477667][ T5897] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 366.498355][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.527739][ T5897] usb 2-1: Product: syz [ 366.532002][ T5897] usb 2-1: Manufacturer: syz [ 366.609387][ T5897] usb 2-1: SerialNumber: syz [ 366.667945][ T5897] usb 2-1: config 0 descriptor?? [ 366.697292][ T5897] gspca_main: etoms-2.14.0 probing 102c:6151 [ 366.870612][ T80] usb 6-1: USB disconnect, device number 12 [ 366.906647][ T80] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 366.958013][ T80] cyberjack 6-1:0.69: device disconnected [ 367.039427][ T5897] usb 2-1: USB disconnect, device number 14 [ 367.137740][T15825] loop4: detected capacity change from 0 to 64 [ 367.485325][T15841] loop8: detected capacity change from 0 to 1024 [ 368.154933][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3923'. [ 368.321325][T15878] xt_TPROXY: Can be used only with -p tcp or -p udp [ 368.410639][T15881] loop7: detected capacity change from 0 to 1024 [ 368.825581][T15881] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.917132][T15881] EXT4-fs error (device loop7): ext4_xattr_inode_iget:440: inode #11: comm syz.7.3926: missing EA_INODE flag [ 369.030460][T15881] EXT4-fs (loop7): Remounting filesystem read-only [ 369.566698][T15928] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 369.584241][T12342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.606985][T15928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 369.733972][T15935] ip6t_srh: unknown srh invflags 7D00 [ 370.035672][T15954] loop4: detected capacity change from 0 to 16 [ 370.084534][T15954] erofs (device loop4): mounted with root inode @ nid 36. [ 370.190757][T15960] xt_l2tp: missing protocol rule (udp|l2tpip) [ 370.270737][T15962] loop2: detected capacity change from 0 to 1024 [ 370.521566][T15971] loop5: detected capacity change from 0 to 256 [ 370.545260][T15971] exfat: Deprecated parameter 'utf8' [ 370.571365][T15971] exfat: Deprecated parameter 'utf8' [ 370.657302][T15971] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 370.967154][T15989] misc userio: The device must be registered before sending interrupts [ 370.985872][T15992] loop4: detected capacity change from 0 to 64 [ 371.107129][T15996] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 371.423008][T16009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3974'. [ 372.030668][ T8] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 372.411063][ T8] usb 8-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 372.424206][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.454386][ T8] usb 8-1: config 0 descriptor?? [ 372.514284][T16064] loop1: detected capacity change from 0 to 512 [ 372.524384][ T8] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input13 [ 372.532440][T16064] EXT4-fs: inline encryption not supported [ 372.619590][T16064] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.662471][T16064] ext4 filesystem being mounted at /661/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.706119][T16072] loop2: detected capacity change from 0 to 1024 [ 372.824179][ T8] usb 8-1: USB disconnect, device number 5 [ 372.853752][T16079] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551359) [ 372.894345][T16079] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 373.128812][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.149400][T16087] loop8: detected capacity change from 0 to 8 [ 374.051216][T16123] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 374.075382][T16118] loop7: detected capacity change from 0 to 32768 [ 374.083141][T16118] XFS: ikeep mount option is deprecated. [ 374.227024][T16130] ip6gretap2: entered allmulticast mode [ 374.368775][T16118] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 374.433424][T16145] loop1: detected capacity change from 0 to 256 [ 374.591501][T16118] XFS (loop7): Ending clean mount [ 374.599844][T16118] XFS (loop7): Quotacheck needed: Please wait. [ 374.641527][T16145] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 374.690597][T16118] XFS (loop7): Quotacheck: Done. [ 374.963309][T12342] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 375.235436][T16138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.462618][T16177] fuse: blksize only supported for fuseblk [ 375.636935][T16187] loop8: detected capacity change from 0 to 512 [ 375.754322][T16187] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.810320][T16187] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.982095][T14588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.039176][T16206] loop7: detected capacity change from 0 to 128 [ 376.062934][T16206] FAT-fs (loop7): bogus number of reserved sectors [ 376.069581][T16206] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 376.083782][T16206] FAT-fs (loop7): Can't find a valid FAT filesystem [ 376.150904][T16206] loop7: detected capacity change from 0 to 128 [ 376.450402][T16215] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 376.463150][T16217] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4049'. [ 376.540989][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 376.554304][T16223] loop8: detected capacity change from 0 to 256 [ 376.665005][T16226] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4055'. [ 376.924009][ T29] audit: type=1326 audit(1735769359.616:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.7.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe221185d29 code=0x7ffc0000 [ 376.961769][T16223] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 376.982775][ T29] audit: type=1326 audit(1735769359.616:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.7.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe221185d29 code=0x7ffc0000 [ 377.032308][T16202] loop5: detected capacity change from 0 to 32768 [ 377.045772][ T29] audit: type=1107 audit(1735769359.663:118): pid=16236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 377.046387][ T29] audit: type=1326 audit(1735769359.718:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.7.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fe221185d29 code=0x7ffc0000 [ 377.169195][ T29] audit: type=1326 audit(1735769359.718:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.7.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe221185d29 code=0x7ffc0000 [ 377.191918][ T29] audit: type=1326 audit(1735769359.718:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16234 comm="syz.7.4057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe221185d29 code=0x7ffc0000 [ 377.392639][T16248] netlink: 'syz.4.4062': attribute type 1 has an invalid length. [ 377.392973][T16251] loop1: detected capacity change from 0 to 8 [ 377.574464][T16261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4069'. [ 377.599544][T16259] loop2: detected capacity change from 0 to 1024 [ 377.673050][T16202] JBD2: Ignoring recovery information on journal [ 377.821634][T16259] syz.2.4067: attempt to access beyond end of device [ 377.821634][T16259] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 377.846704][T16202] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 377.857457][T16259] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 377.923762][T16259] hfsplus: unable to mark blocks free: error -5 [ 377.979464][T16259] hfsplus: can't free extent [ 378.141418][ T5829] ocfs2: Unmounting device (7,5) on (node local) [ 378.806783][T16306] loop8: detected capacity change from 0 to 512 [ 378.933217][T16313] loop2: detected capacity change from 0 to 128 [ 378.971178][T16306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.998818][T16306] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.075941][T16313] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 379.085727][T16306] EXT4-fs error (device loop8): ext4_xattr_block_get:596: inode #15: comm syz.8.4093: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 379.173104][T16313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.309798][T16306] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.4093: bg 0: block 18: invalid block bitmap [ 379.348652][T16306] Quota error (device loop8): write_blk: dquota write failed [ 379.366228][ T5963] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 379.393904][T16329] loop4: detected capacity change from 0 to 128 [ 379.397235][T16306] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 379.449818][T16329] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 379.456521][T16306] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4093: Failed to acquire dquot type 1 [ 379.480381][T16333] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4103'. [ 379.545034][ T5963] usb 2-1: New USB device found, idVendor=110a, idProduct=1613, bcdDevice=5b.01 [ 379.577833][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.609139][ T5963] usb 2-1: config 0 descriptor?? [ 379.620454][T14588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.739295][ T5842] sysv_free_block: flc_count > flc_size [ 379.756806][ T5842] sysv_free_block: flc_count > flc_size [ 379.765430][ T5842] sysv_free_block: flc_count > flc_size [ 379.784377][ T5842] sysv_free_block: flc_count > flc_size [ 379.790459][ T5842] sysv_free_block: flc_count > flc_size [ 379.796248][ T5842] sysv_free_block: flc_count > flc_size [ 379.802326][ T5842] sysv_free_block: flc_count > flc_size [ 379.807889][ T5842] sysv_free_block: flc_count > flc_size [ 379.813730][ T5842] sysv_free_block: flc_count > flc_size [ 379.819293][ T5842] sysv_free_block: flc_count > flc_size [ 379.826924][ T5842] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 380.166818][ T5963] mxuport 2-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 380.218149][ T5963] mxuport 2-1:0.0: probe with driver mxuport failed with error -5 [ 380.243848][ T5963] usb 2-1: USB disconnect, device number 15 [ 380.244971][T16353] netlink: 'syz.4.4112': attribute type 25 has an invalid length. [ 380.629102][T16331] loop7: detected capacity change from 0 to 32768 [ 380.765505][T16331] JBD2: Ignoring recovery information on journal [ 380.967215][T16384] Cannot find add_set index 1026 as target [ 381.103591][T16331] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 381.233245][T16331] (syz.7.4101,16331,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: directory entry too close to end - offset=32, inode=16945, rec_len=280, name_len=10 [ 381.286719][T16393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 381.348846][T16331] (syz.7.4101,16331,0):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -2 [ 381.381413][T16331] (syz.7.4101,16331,1):ocfs2_mknod:298 ERROR: status = -2 [ 381.404819][T16331] (syz.7.4101,16331,1):ocfs2_mknod:502 ERROR: status = -2 [ 381.419396][T16331] (syz.7.4101,16331,1):ocfs2_create:676 ERROR: status = -2 [ 381.602479][T12342] ocfs2: Unmounting device (7,7) on (node local) [ 381.607272][T16405] netlink: 'syz.4.4135': attribute type 21 has an invalid length. [ 381.657723][T16405] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4135'. [ 382.012109][ T5946] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 382.215582][ T5946] usb 3-1: Using ep0 maxpacket: 8 [ 382.283622][ T5946] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.328771][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 382.353389][ T5946] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 382.383749][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 382.398066][ T5946] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 382.409665][ T5946] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 382.419338][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.557028][ T5946] hub 3-1:1.0: bad descriptor, ignoring hub [ 382.563265][ T5946] hub 3-1:1.0: probe with driver hub failed with error -5 [ 382.581992][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 382.592472][ T5946] cdc_wdm 3-1:1.0: skipping garbage [ 382.607583][ T5946] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 382.705928][ T5946] usb 3-1: USB disconnect, device number 14 [ 382.766436][T16446] loop7: detected capacity change from 0 to 2048 [ 382.851532][T16446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.928845][T16452] loop1: detected capacity change from 0 to 64 [ 383.075870][T16456] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4159'. [ 383.342516][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4162'. [ 383.414263][T16465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4162'. [ 383.548941][T16470] ipt_rpfilter: unknown options [ 383.797816][T16478] netlink: 'syz.1.4171': attribute type 10 has an invalid length. [ 383.853092][T16484] kAFS: unable to lookup cell '.,' [ 383.902589][T16443] loop8: detected capacity change from 0 to 32768 [ 383.969555][T16478] team0: Device veth0_macvtap failed to register rx_handler [ 383.976566][T16443] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 384.168234][T16443] XFS (loop8): Ending clean mount [ 384.226729][T16443] XFS (loop8): Quotacheck needed: Please wait. [ 384.276851][T16502] program syz.4.4179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.334595][T16443] XFS (loop8): Quotacheck: Done. [ 384.521306][T14588] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 384.666512][T16508] loop5: detected capacity change from 0 to 4096 [ 385.034231][T16524] dlm: no locking on control device [ 385.152922][T16498] loop2: detected capacity change from 0 to 32768 [ 385.261124][T16498] ERROR: (device loop2): diNewExt: no free extents [ 385.261124][T16498] [ 385.314258][T16498] ERROR: (device loop2): remounting filesystem as read-only [ 385.352842][T16498] ialloc: diAlloc returned -5! [ 385.910152][ T5963] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 386.148493][ T5963] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 386.160813][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.180740][ T5963] usb 5-1: Product: syz [ 386.191725][ T5963] usb 5-1: Manufacturer: syz [ 386.196339][ T5963] usb 5-1: SerialNumber: syz [ 386.205838][T16557] tmpfs: Bad value for 'mpol' [ 386.293854][ T5963] usb 5-1: config 0 descriptor?? [ 386.404290][T16526] loop1: detected capacity change from 0 to 32768 [ 386.502183][T16526] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 386.644184][ T5963] hso 5-1:0.0: Failed to find BULK IN ep [ 386.663880][ T5963] usb-storage 5-1:0.0: USB Mass Storage device detected [ 387.066508][ T5963] usb 5-1: USB disconnect, device number 10 [ 387.185470][T16597] netlink: 'syz.5.4221': attribute type 1 has an invalid length. [ 387.213791][T16526] XFS (loop1): Ending clean mount [ 387.347402][ T5828] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 387.567952][T16611] tmpfs: Bad value for 'mpol' [ 388.194092][T16637] syz.7.4240: attempt to access beyond end of device [ 388.194092][T16637] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 388.249084][T16637] efs: cannot read volume header [ 388.401457][T16646] kernel profiling enabled (shift: 63) [ 388.427709][T16646] profiling shift: 63 too large [ 388.473863][T16647] loop5: detected capacity change from 0 to 1764 [ 388.551713][T16650] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4248'. [ 388.848552][T16663] nvme_fabrics: unknown parameter or missing value 'ó' in ctrl creation request [ 388.913572][T16665] xt_TPROXY: Can be used only with -p tcp or -p udp [ 388.990284][T16669] netlink: 'syz.5.4253': attribute type 9 has an invalid length. [ 389.294325][T16659] loop4: detected capacity change from 0 to 32768 [ 389.355729][ T8] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 389.367666][T16659] (syz.4.4252,16659,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 389.384256][T16659] (syz.4.4252,16659,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 389.415305][ T29] audit: type=1326 audit(1735769371.154:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16679 comm="syz.5.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 389.435295][T16659] JBD2: Ignoring recovery information on journal [ 389.475502][ T29] audit: type=1326 audit(1735769371.154:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16679 comm="syz.5.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 389.541039][T16678] loop8: detected capacity change from 0 to 4096 [ 389.574285][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.589232][ T29] audit: type=1326 audit(1735769371.200:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16679 comm="syz.5.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 389.593741][T16678] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 389.617052][ T29] audit: type=1326 audit(1735769371.200:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16679 comm="syz.5.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 389.637069][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.669554][ T8] usb 8-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 389.675615][ T29] audit: type=1326 audit(1735769371.200:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16679 comm="syz.5.4262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 389.678618][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.724599][ T8] usb 8-1: config 0 descriptor?? [ 389.732941][T16659] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 389.746450][T16688] openvswitch: netlink: EtherType 0 is less than min 600 [ 389.777256][T16678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.838085][T16691] loop5: detected capacity change from 0 to 256 [ 389.975529][T16678] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present [ 390.019217][ T8] usbhid 8-1:0.0: can't add hid device: -71 [ 390.025541][ T8] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 390.045668][ T8] usb 8-1: USB disconnect, device number 6 [ 390.069762][T16678] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 390.097163][T16678] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4261: Failed to acquire dquot type 0 [ 390.181418][ T5842] ocfs2: Unmounting device (7,4) on (node local) [ 390.396576][T14588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.605259][T16706] loop1: detected capacity change from 0 to 256 [ 390.636877][T16711] xt_TCPMSS: Only works on TCP SYN packets [ 390.673147][T16706] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4849718e, utbl_chksum : 0xe619d30d) [ 391.182740][T16734] netlink: 'syz.7.4287': attribute type 1 has an invalid length. [ 392.048909][T16721] loop2: detected capacity change from 0 to 32768 [ 392.204990][T16721] (syz.2.4281,16721,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 392.216333][T16777] loop7: detected capacity change from 0 to 256 [ 392.243078][T16721] (syz.2.4281,16721,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 392.335439][T16721] JBD2: Ignoring recovery information on journal [ 392.376281][T16782] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 392.398178][T16721] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 392.449029][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4312'. [ 392.458140][T16785] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4312'. [ 392.819983][T16795] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4316'. [ 392.841751][T16795] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4316'. [ 392.857365][T16793] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4315'. [ 392.891288][ T5838] ocfs2: Unmounting device (7,2) on (node local) [ 392.892800][T16793] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 392.992322][T16793] erspan1: entered promiscuous mode [ 393.032979][T16793] erspan1: entered allmulticast mode [ 393.135864][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4322'. [ 393.549068][T16825] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4332'. [ 393.735587][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.742052][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.851310][T16835] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 393.898223][T16839] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4340'. [ 393.904875][T16842] program syz.7.4333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.234178][T16853] loop2: detected capacity change from 0 to 2048 [ 394.294412][T16853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 394.307002][ T5893] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 394.500541][ T5893] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 394.510370][ T5893] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.577807][ T5893] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 394.586703][ T5893] usb 5-1: config 1 has no interface number 0 [ 394.637064][ T5893] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 394.668426][ T5893] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 394.711350][ T5893] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 394.728150][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.761739][ T5893] usb 5-1: Product: syz [ 394.765922][ T5893] usb 5-1: Manufacturer: syz [ 394.803331][ T5893] usb 5-1: SerialNumber: syz [ 395.177045][ T5897] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 395.285223][ T5893] usb 5-1: USB disconnect, device number 11 [ 395.348279][ T5897] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 395.359373][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.386035][T16849] loop8: detected capacity change from 0 to 32768 [ 395.388455][ T5897] usb 3-1: config 0 descriptor?? [ 395.621835][T16849] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 1791,background_target=invalid device 234,nojournal_transaction_names [ 395.625167][ T5897] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 395.692029][ T5897] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 395.693594][T16849] bcachefs (loop8): initializing new filesystem [ 395.711700][ T5897] [drm:udl_init] *ERROR* Selecting channel failed [ 395.741839][T16849] bcachefs (loop8): going read-write [ 395.758031][ T5897] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 395.765092][T16849] bcachefs (loop8): marking superblocks [ 395.777183][ T5897] [drm] Initialized udl on minor 2 [ 395.799591][ T5897] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 395.846173][T16849] bcachefs (loop8): initializing freespace [ 395.850296][ T5897] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 395.871256][T16849] bcachefs (loop8): done initializing freespace [ 395.874296][ T80] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 395.893207][ T80] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 395.901724][ T5897] usb 3-1: USB disconnect, device number 15 [ 395.920638][T16849] bcachefs (loop8): reading snapshots table [ 395.940102][T16863] loop1: detected capacity change from 0 to 40427 [ 395.947945][T16849] bcachefs (loop8): reading snapshots done [ 395.971914][T16863] F2FS-fs (loop1): heap/no_heap options were deprecated [ 396.006772][T16863] F2FS-fs (loop1): build fault injection attr: rate: 9, type: 0x1fffff [ 396.011868][ T5963] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 396.052837][T16863] F2FS-fs (loop1): heap/no_heap options were deprecated [ 396.061246][T16863] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x286/0xba0 [ 396.091813][T16849] bcachefs (loop8): done starting filesystem [ 396.172608][T16863] F2FS-fs (loop1): invalid crc value [ 396.191027][T16863] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4f8b/0x7820 [ 396.200813][T16908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4367'. [ 396.228576][ T5963] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 396.230994][T14588] bcachefs (loop8): shutting down [ 396.243350][T14588] bcachefs (loop8): going read-only [ 396.248981][T14588] bcachefs (loop8): finished waiting for writes to stop [ 396.251812][ T5963] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.264428][T16863] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12) [ 396.276479][T16908] netlink: 708 bytes leftover after parsing attributes in process `syz.4.4367'. [ 396.285875][T14588] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3 [ 396.311634][ T5963] usb 8-1: Product: syz [ 396.315840][ T5963] usb 8-1: Manufacturer: syz [ 396.326782][T16908] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4367'. [ 396.362145][ T5963] usb 8-1: SerialNumber: syz [ 396.388061][T14588] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 6 [ 396.442060][ T5963] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 396.579215][T14588] bcachefs (loop8): shutdown complete, journal seq 7 [ 396.587997][T14588] bcachefs (loop8): marking filesystem clean [ 396.642974][ T80] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 396.760567][T14588] bcachefs (loop8): shutdown complete [ 397.178642][ T5893] usb 8-1: USB disconnect, device number 7 [ 397.237949][T16931] binder: binder_mmap: 16930 20174000-20d74000 bad vm_flags failed -1 [ 397.458006][T16938] vivid-000: disconnect [ 397.467555][T16937] vivid-000: reconnect [ 397.670293][T16949] loop1: detected capacity change from 0 to 256 [ 397.678774][T16949] exfat: Deprecated parameter 'utf8' [ 397.684089][T16949] exfat: Deprecated parameter 'namecase' [ 397.693160][T16949] exfat: Deprecated parameter 'namecase' [ 397.721090][T16949] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 397.784411][ T80] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 397.791420][ T80] ath9k_htc: Failed to initialize the device [ 397.903801][ T5893] usb 8-1: ath9k_htc: USB layer deinitialized [ 397.925536][T16953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4391'. [ 398.433077][T16977] xt_TCPMSS: Only works on TCP SYN packets [ 398.580814][T16985] netlink: 'syz.5.4404': attribute type 3 has an invalid length. [ 398.695864][T16987] loop4: detected capacity change from 0 to 256 [ 398.723015][T16987] exfat: Deprecated parameter 'utf8' [ 398.818154][T16987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 399.922160][T17044] loop5: detected capacity change from 0 to 64 [ 400.021045][T17044] hfs: request for non-existent node 16777216 in B*Tree [ 400.088650][T17044] hfs: request for non-existent node 16777216 in B*Tree [ 400.162857][T17044] hfs: request for non-existent node 16777216 in B*Tree [ 400.171816][T17049] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 400.222200][T17044] hfs: request for non-existent node 16777216 in B*Tree [ 401.134077][T17087] loop8: detected capacity change from 0 to 1024 [ 401.142682][T17088] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.325752][T17089] loop7: detected capacity change from 0 to 4096 [ 401.368220][T17089] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 401.411264][T17095] loop5: detected capacity change from 0 to 1024 [ 401.417815][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 401.488887][T17098] loop8: detected capacity change from 0 to 512 [ 401.528566][T17099] xt_ecn: cannot match TCP bits for non-tcp packets [ 401.606460][T17098] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.652692][ T12] hfsplus: b-tree write err: -5, ino 4 [ 401.739021][T17098] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.855267][T17098] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 98 vs 96 free clusters [ 401.904398][T17098] Quota error (device loop8): write_blk: dquota write failed [ 401.912086][T17098] Quota error (device loop8): find_free_dqentry: Can't write quota data block 5 [ 401.959064][T17098] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 402.019789][T17098] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4458: Failed to acquire dquot type 1 [ 402.200099][T17126] loop4: detected capacity change from 0 to 512 [ 402.260237][T17126] EXT4-fs: Ignoring removed nobh option [ 402.289381][T14588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.298768][T17126] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 402.361454][T17126] EXT4-fs (loop4): 1 truncate cleaned up [ 402.387233][T17126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.409137][T17126] fscrypt (loop4, inode 15): Error -61 getting encryption context [ 402.578895][T17135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4475'. [ 402.623665][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.811097][T17125] loop2: detected capacity change from 0 to 32768 [ 402.883343][T17125] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4470 (17125) [ 402.933568][T17125] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 402.944101][T17125] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 402.952739][T17125] BTRFS info (device loop2): using free-space-tree [ 402.962868][T17148] loop1: detected capacity change from 0 to 164 [ 403.024580][T17148] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 403.239795][T17169] loop4: detected capacity change from 0 to 256 [ 403.279652][ T5838] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 403.357093][T17169] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 403.381655][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 403.500290][T17169] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 403.513237][T17177] xt_HMARK: spi-set and port-set can't be combined [ 403.636958][ T8] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 403.653969][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.663515][ T8] usb 6-1: Product: syz [ 403.755033][ T8] usb 6-1: Manufacturer: syz [ 403.759767][ T8] usb 6-1: SerialNumber: syz [ 403.807681][ T8] usb 6-1: config 0 descriptor?? [ 404.063737][T17195] openvswitch: netlink: Key type 164 is out of range max 32 [ 404.145807][ T8] hso 6-1:0.0: Failed to find BULK IN ep [ 404.319579][T17205] loop8: detected capacity change from 0 to 64 [ 404.325947][T17196] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 404.380917][ T8] usb 6-1: USB disconnect, device number 13 [ 404.548435][T17210] overlayfs: empty lowerdir [ 404.688846][T17217] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 405.416535][T17233] loop1: detected capacity change from 0 to 1024 [ 405.795486][T17257] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (3) [ 405.811980][T17255] loop8: detected capacity change from 0 to 256 [ 405.972403][T17255] FAT-fs (loop8): Directory bread(block 64) failed [ 405.997390][T17255] FAT-fs (loop8): Directory bread(block 65) failed [ 406.031537][T17255] FAT-fs (loop8): Directory bread(block 66) failed [ 406.038211][T17255] FAT-fs (loop8): Directory bread(block 67) failed [ 406.067226][T17255] FAT-fs (loop8): Directory bread(block 68) failed [ 406.076702][T17255] FAT-fs (loop8): Directory bread(block 69) failed [ 406.137938][T17255] FAT-fs (loop8): Directory bread(block 70) failed [ 406.168883][T17255] FAT-fs (loop8): Directory bread(block 71) failed [ 406.210525][T17255] FAT-fs (loop8): Directory bread(block 72) failed [ 406.246091][T17255] FAT-fs (loop8): Directory bread(block 73) failed [ 406.306086][T17273] loop4: detected capacity change from 0 to 512 [ 406.397707][T17273] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 406.431964][T17273] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.4534: invalid indirect mapped block 2683928664 (level 1) [ 406.522225][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4538'. [ 406.543445][T17273] EXT4-fs (loop4): Remounting filesystem read-only [ 406.553332][T17273] EXT4-fs (loop4): 1 truncate cleaned up [ 406.559937][T17273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.670671][ T5842] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.679830][T17290] loop2: detected capacity change from 0 to 64 [ 406.752316][T17294] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4539'. [ 407.230351][T17305] loop1: detected capacity change from 0 to 2048 [ 407.260098][T17305] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 407.304264][T17305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 407.482479][T17318] loop7: detected capacity change from 0 to 256 [ 407.491826][T17320] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4554'. [ 407.492284][T17316] netlink: 'syz.5.4553': attribute type 1 has an invalid length. [ 407.607237][T17316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.023808][T17381] loop1: detected capacity change from 0 to 64 [ 409.268939][T17387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4589'. [ 409.537698][T17398] netlink: 'syz.5.4599': attribute type 21 has an invalid length. [ 409.553228][T17398] netlink: 'syz.5.4599': attribute type 11 has an invalid length. [ 409.804382][T17409] loop8: detected capacity change from 0 to 512 [ 410.115998][T17409] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.136649][T17409] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.364205][T14588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.449659][ T5893] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 410.471747][ T5840] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 410.722937][ T5893] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 410.731070][ T5893] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 410.742147][ T5893] usb 5-1: config 0 has no interface number 0 [ 410.757357][ T5893] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 410.819165][ T5893] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 410.829216][T17456] loop8: detected capacity change from 0 to 256 [ 410.847193][ T5893] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.887287][ T5893] usb 5-1: config 0 interface 52 has no altsetting 0 [ 410.906390][ T5893] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 410.924056][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 410.933477][ T5893] usb 5-1: Product: syz [ 410.938047][ T5893] usb 5-1: SerialNumber: syz [ 410.950548][ T5893] usb 5-1: config 0 descriptor?? [ 411.067256][ T8] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 411.077137][T17466] loop2: detected capacity change from 0 to 8 [ 411.104500][T17464] x_tables: duplicate underflow at hook 2 [ 411.199010][ T5893] input: syz (Stick) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input14 [ 411.240549][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 411.253984][ T8] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 411.466282][ T8] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 411.478845][ T8] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 411.510627][ T8] usb 8-1: Product: syz [ 411.522340][ T8] usb 8-1: Manufacturer: syz [ 411.526963][ T8] usb 8-1: SerialNumber: syz [ 411.560566][ T5893] usb 5-1: USB disconnect, device number 12 [ 411.560738][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 411.651000][ T8] usb 8-1: config 0 descriptor?? [ 411.674300][T17454] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 411.884188][T17486] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 411.892199][T17486] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 411.986553][ T8] usb 8-1: USB disconnect, device number 8 [ 412.281510][T17502] openvswitch: netlink: Multiple metadata blocks provided [ 412.714198][T17520] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 414.323128][T17587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4687'. [ 414.507535][T17597] loop7: detected capacity change from 0 to 1024 [ 414.570839][T17601] loop5: detected capacity change from 0 to 16 [ 414.677743][ T5910] hfsplus: b-tree write err: -5, ino 4 [ 414.844019][T17601] erofs (device loop5): mounted with root inode @ nid 36. [ 414.909381][T17601] erofs (device loop5): read error -117 @ 0 of nid 36 [ 415.076608][T17617] loop2: detected capacity change from 0 to 16 [ 415.083908][T17617] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 415.369284][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4707'. [ 415.873092][T17648] loop2: detected capacity change from 0 to 1024 [ 415.996621][ T29] audit: type=1326 audit(1735769394.683:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 416.067971][T17648] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.073791][ T29] audit: type=1326 audit(1735769394.683:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17653 comm="syz.5.4722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1472785d29 code=0x7ffc0000 [ 416.112868][T17648] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.4716: missing EA_INODE flag [ 416.152215][T17648] EXT4-fs (loop2): Remounting filesystem read-only [ 416.191776][ T5893] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 416.301676][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.354334][ T5893] usb 8-1: Using ep0 maxpacket: 8 [ 416.367222][ T5893] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 416.388640][ T5893] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 416.437574][ T5893] usb 8-1: config 0 has no interface number 0 [ 416.465774][ T5893] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 416.516978][ T5893] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.539760][T17677] netlink: 'syz.4.4729': attribute type 3 has an invalid length. [ 416.539767][ T5893] usb 8-1: config 0 interface 52 has no altsetting 0 [ 416.540996][ T5893] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 416.609166][ T5893] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 416.631048][ T5893] usb 8-1: Manufacturer: syz [ 416.666633][ T5893] usb 8-1: config 0 descriptor?? [ 416.955144][ T5893] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input15 [ 417.167855][ T5893] usb 8-1: USB disconnect, device number 9 [ 417.173765][ C0] synaptics_usb 8-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 417.655347][T17707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4744'. [ 417.964560][T17681] loop5: detected capacity change from 0 to 32768 [ 418.041815][T17681] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 418.130614][T17730] program syz.1.4753 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.267762][T17735] loop8: detected capacity change from 0 to 1024 [ 418.283486][T17681] XFS (loop5): Ending clean mount [ 418.332508][T17739] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 418.354667][T17735] MTD: Couldn't look up './file0': -15 [ 418.452644][T17739] overlayfs: missing 'lowerdir' [ 418.566093][ T5910] hfsplus: b-tree write err: -5, ino 4 [ 418.589137][ T5829] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 419.238826][T17759] loop1: detected capacity change from 0 to 512 [ 419.523833][T17776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4773'. [ 419.525724][T17759] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.633061][T17759] ext4 filesystem being mounted at /794/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 419.931183][T17790] netlink: 'syz.8.4780': attribute type 2 has an invalid length. [ 419.938953][T17790] netlink: 'syz.8.4780': attribute type 1 has an invalid length. [ 420.020438][T17790] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4780'. [ 420.286908][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.601748][ T29] audit: type=1326 audit(2000000004.015:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.4.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff633d85d29 code=0x7ffc0000 [ 420.709510][ T29] audit: type=1326 audit(2000000004.061:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.4.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ff633d85d29 code=0x7ffc0000 [ 420.732144][ T29] audit: type=1326 audit(2000000004.061:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.4.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff633d85d29 code=0x7ffc0000 [ 420.754703][ T29] audit: type=1326 audit(2000000004.061:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.4.4791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff633d85d29 code=0x7ffc0000 [ 420.805172][T17817] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4795'. [ 421.089132][T17823] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 421.732680][T17841] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4801'. [ 421.758159][T17840] loop4: detected capacity change from 0 to 4096 [ 421.776743][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4801'. [ 421.788121][T17840] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 421.835648][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4801'. [ 422.139865][T17851] loop2: detected capacity change from 0 to 16 [ 422.159941][T17851] erofs (device loop2): mounted with root inode @ nid 36. [ 422.320765][T17809] loop5: detected capacity change from 0 to 32768 [ 422.467893][T17809] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 422.486572][ T5899] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 422.514339][T17870] CIFS: VFS: Malformed UNC in devname [ 422.631092][ T5963] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 422.782465][T17809] XFS (loop5): Ending clean mount [ 422.813734][T17888] loop8: detected capacity change from 0 to 16 [ 422.820980][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 422.833717][T17888] erofs (device loop8): mounted with root inode @ nid 36. [ 422.856560][ T5963] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 422.865945][ T5963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.873952][ T5963] usb 5-1: Product: syz [ 422.886982][ T5899] usb 2-1: New USB device found, idVendor=54a5, idProduct=8b61, bcdDevice=cc.2e [ 422.897384][ T5963] usb 5-1: Manufacturer: syz [ 422.897602][T17888] erofs (device loop8): invalid tail-packing pclustersize 0 [ 422.902479][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.918310][ T5963] usb 5-1: SerialNumber: syz [ 422.923459][ T5829] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 422.930307][ T5899] usb 2-1: Product: syz [ 422.937208][ T5963] usb 5-1: config 0 descriptor?? [ 422.942974][ T5899] usb 2-1: Manufacturer: syz [ 422.947631][ T5899] usb 2-1: SerialNumber: syz [ 422.960148][T17888] erofs (device loop8): invalid tail-packing pclustersize 0 [ 422.972292][ T5963] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 422.979742][ T5899] usb 2-1: config 0 descriptor?? [ 423.008930][T17888] erofs (device loop8): read error -117 @ 72 of nid 36 [ 423.296637][T17893] netlink: 'syz.7.4827': attribute type 1 has an invalid length. [ 423.324521][ T5952] usb 2-1: USB disconnect, device number 16 [ 423.357723][T17893] netlink: 'syz.7.4827': attribute type 3 has an invalid length. [ 423.374153][T17893] netlink: 224 bytes leftover after parsing attributes in process `syz.7.4827'. [ 423.482950][T17901] dccp_invalid_packet: P.CsCov 11 exceeds packet length 400 [ 423.499692][ T5963] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 423.508081][ T5963] sq905c 5-1:0.0: Reading version command failed [ 423.514478][ T5963] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 423.527427][ T5963] usb 5-1: USB disconnect, device number 13 [ 423.732844][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 423.850610][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4837'. [ 423.884264][ T5897] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 423.927470][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 423.976879][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.987969][ T8] usb 6-1: config 0 interface 0 has no altsetting 0 [ 423.997755][ T8] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 424.008017][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.014642][ T5899] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 424.016580][ T8] usb 6-1: Product: syz [ 424.030911][ T8] usb 6-1: Manufacturer: syz [ 424.036463][ T8] usb 6-1: SerialNumber: syz [ 424.054096][ T8] usb 6-1: config 0 descriptor?? [ 424.079310][ T5897] usb 8-1: Using ep0 maxpacket: 16 [ 424.124345][ T5897] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 424.144306][ T5897] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.174342][ T5897] usb 8-1: Product: syz [ 424.199989][ T5897] usb 8-1: Manufacturer: syz [ 424.204783][ T5897] usb 8-1: SerialNumber: syz [ 424.231436][ T5899] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 424.240497][ T5899] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.285375][ T5899] usb 9-1: config 0 descriptor?? [ 424.290977][ T5897] r8152-cfgselector 8-1: Unknown version 0x0000 [ 424.297649][ T5897] r8152-cfgselector 8-1: config 0 descriptor?? [ 424.569663][ T8] usb 6-1: USB disconnect, device number 14 [ 424.603781][ T5899] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 424.620793][ T5899] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 424.642709][ T5899] [drm:udl_init] *ERROR* Selecting channel failed [ 424.665195][ T5899] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 424.696648][ T5899] [drm] Initialized udl on minor 2 [ 424.714000][ T5899] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.733531][ T5899] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 424.793955][T17933] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4847'. [ 424.867554][ T5897] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.876629][ T5897] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 424.884646][ T5897] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 424.909274][ T5899] usb 9-1: USB disconnect, device number 2 [ 424.926850][T17937] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 425.241797][ T5899] r8152-cfgselector 8-1: USB disconnect, device number 10 [ 425.275634][T17947] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4853'. [ 425.311507][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4853'. [ 425.957114][T17971] ebt_limit: overflow, try lower: 0/0 [ 426.050427][T17975] loop7: detected capacity change from 0 to 1024 [ 426.230213][T17980] loop4: detected capacity change from 0 to 2048 [ 426.319486][T17980] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.391120][T17989] loop8: detected capacity change from 0 to 4096 [ 426.401633][T17989] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512). [ 426.960209][T18011] loop5: detected capacity change from 0 to 128 [ 426.969121][T18011] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 426.996049][T18011] syz.5.4886: attempt to access beyond end of device [ 426.996049][T18011] loop5: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 427.028769][T18011] Buffer I/O error on dev loop5, logical block 3245768, async page read [ 427.087045][T18017] loop2: detected capacity change from 0 to 256 [ 427.369804][ T5829] sysv_free_block: flc_count > flc_size [ 427.398027][ T5829] sysv_free_block: flc_count > flc_size [ 427.403621][ T5829] sysv_free_block: flc_count > flc_size [ 427.457106][ T5829] sysv_free_block: flc_count > flc_size [ 427.481222][ T5829] sysv_free_block: flc_count > flc_size [ 427.498052][ T5829] sysv_free_block: flc_count > flc_size [ 427.515644][ T5829] sysv_free_block: flc_count > flc_size [ 427.535225][ T5829] sysv_free_block: flc_count > flc_size [ 427.564022][ T5829] sysv_free_block: flc_count > flc_size [ 427.575072][ T5829] sysv_free_block: flc_count > flc_size [ 427.578562][ T5899] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 427.592392][ T5829] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 427.864647][T18045] Invalid logical block size (-1) [ 427.944289][T18049] netlink: 'syz.7.4904': attribute type 3 has an invalid length. [ 427.978267][T18049] netlink: 'syz.7.4904': attribute type 28 has an invalid length. [ 428.029545][T18049] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4904'. [ 428.089278][ T5899] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 428.098407][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.137514][ T5899] usb 5-1: config 0 descriptor?? [ 428.162916][ T5899] cp210x 5-1:0.0: cp210x converter detected [ 428.405655][ T5899] usb 5-1: cp210x converter now attached to ttyUSB0 [ 428.808723][T18086] loop7: detected capacity change from 0 to 512 [ 428.869288][T18086] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 428.875820][ T8] usb 5-1: USB disconnect, device number 14 [ 428.889249][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 428.919294][T18086] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.4915: corrupted in-inode xattr: e_value out of bounds [ 428.934235][ T8] cp210x 5-1:0.0: device disconnected [ 429.017620][T18086] EXT4-fs (loop7): Remounting filesystem read-only [ 429.036324][T18090] loop2: detected capacity change from 0 to 4096 [ 429.060194][T18086] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.080680][T18095] loop5: detected capacity change from 0 to 64 [ 429.175561][T18099] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 429.267435][T18090] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 429.315913][T12342] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.330292][T18090] Remounting filesystem read-only [ 429.629651][T18110] netlink: 332 bytes leftover after parsing attributes in process `syz.2.4929'. [ 430.159468][T18130] loop5: detected capacity change from 0 to 1024 [ 430.269674][T18142] loop1: detected capacity change from 0 to 2048 [ 430.403361][T18130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.413676][T18154] loop2: detected capacity change from 0 to 512 [ 430.415738][T18153] loop8: detected capacity change from 0 to 512 [ 430.445600][T18130] EXT4-fs warning (device loop5): ext4_empty_dir:3114: inode #11: comm syz.5.4937: directory missing '..' [ 430.457956][T18142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.496942][T18153] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4947: invalid indirect mapped block 4294967295 (level 1) [ 430.505834][T18142] [ 430.513181][T18142] ====================================================== [ 430.517810][T18153] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.4947: invalid indirect mapped block 4294967295 (level 1) [ 430.520182][T18142] WARNING: possible circular locking dependency detected [ 430.520195][T18142] 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 Not tainted [ 430.536269][T18153] EXT4-fs (loop8): 2 truncates cleaned up [ 430.541016][T18142] ------------------------------------------------------ [ 430.541029][T18142] syz.1.4943/18142 is trying to acquire lock: [ 430.541044][T18142] ffff888078406598 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x3be/0x1990 [ 430.541118][T18142] [ 430.541118][T18142] but task is already holding lock: [ 430.541128][T18142] ffff8880784068a8 [ 430.549879][T18153] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.553979][T18142] (mapping.invalidate_lock){++++}-{4:4}, at: ext4_setattr+0xf94/0x1da0 [ 430.608074][T18142] [ 430.608074][T18142] which lock already depends on the new lock. [ 430.608074][T18142] [ 430.618491][T18142] [ 430.618491][T18142] the existing dependency chain (in reverse order) is: [ 430.627491][T18142] [ 430.627491][T18142] -> #6 (mapping.invalidate_lock){++++}-{4:4}: [ 430.635931][T18142] lock_acquire+0x1ed/0x550 [ 430.640969][T18142] down_read+0xb1/0xa40 [ 430.645660][T18142] page_cache_ra_unbounded+0x142/0x720 [ 430.651650][T18142] filemap_fault+0x818/0x1490 [ 430.656842][T18142] __do_fault+0x137/0x390 [ 430.661693][T18142] handle_pte_fault+0x39eb/0x5ed0 [ 430.667243][T18142] handle_mm_fault+0x1106/0x1bb0 [ 430.672730][T18142] __get_user_pages+0x1c82/0x49e0 [ 430.678284][T18142] get_dump_page+0x155/0x2f0 [ 430.683386][T18142] dump_user_range+0x14d/0x970 [ 430.688668][T18142] elf_core_dump+0x3e9f/0x4790 [ 430.693951][T18142] do_coredump+0x229d/0x3100 [ 430.699054][T18142] get_signal+0x140b/0x1750 [ 430.704085][T18142] arch_do_signal_or_restart+0x96/0x860 [ 430.710161][T18142] irqentry_exit_to_user_mode+0x7e/0x250 [ 430.716325][T18142] exc_page_fault+0x590/0x8b0 [ 430.721530][T18142] asm_exc_page_fault+0x26/0x30 [ 430.726909][T18142] [ 430.726909][T18142] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 430.734483][T18142] lock_acquire+0x1ed/0x550 [ 430.739506][T18142] __might_fault+0xc6/0x120 [ 430.744526][T18142] _copy_from_user+0x2a/0xc0 [ 430.749661][T18142] blk_trace_ioctl+0x1ad/0x9a0 [ 430.755033][T18142] blkdev_ioctl+0x40c/0x6a0 [ 430.760054][T18142] __se_sys_ioctl+0xf7/0x170 [ 430.765172][T18142] do_syscall_64+0xf3/0x230 [ 430.770214][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.776643][T18142] [ 430.776643][T18142] -> #4 (&q->debugfs_mutex){+.+.}-{4:4}: [ 430.784477][T18142] lock_acquire+0x1ed/0x550 [ 430.789501][T18142] __mutex_lock+0x1ac/0xee0 [ 430.794531][T18142] blk_mq_init_sched+0x3fa/0x830 [ 430.799987][T18142] elevator_init_mq+0x20e/0x320 [ 430.805358][T18142] add_disk_fwnode+0x10d/0xf80 [ 430.810641][T18142] sd_probe+0xba6/0x1100 [ 430.815407][T18142] really_probe+0x2ba/0xad0 [ 430.820431][T18142] __driver_probe_device+0x1a2/0x390 [ 430.826236][T18142] driver_probe_device+0x50/0x430 [ 430.831781][T18142] __device_attach_driver+0x2d6/0x530 [ 430.837674][T18142] bus_for_each_drv+0x250/0x2e0 [ 430.843051][T18142] __device_attach_async_helper+0x22d/0x300 [ 430.849464][T18142] async_run_entry_fn+0xaa/0x420 [ 430.854919][T18142] process_scheduled_works+0xa68/0x1840 [ 430.860984][T18142] worker_thread+0x870/0xd30 [ 430.866093][T18142] kthread+0x2f2/0x390 [ 430.870685][T18142] ret_from_fork+0x4d/0x80 [ 430.875622][T18142] ret_from_fork_asm+0x1a/0x30 [ 430.880903][T18142] [ 430.880903][T18142] -> #3 (&q->q_usage_counter(queue)#50){++++}-{0:0}: [ 430.889793][T18142] lock_acquire+0x1ed/0x550 [ 430.894820][T18142] blk_queue_enter+0xe1/0x600 [ 430.900115][T18142] blk_mq_alloc_request+0x4fa/0xaa0 [ 430.905839][T18142] scsi_execute_cmd+0x177/0x1090 [ 430.911299][T18142] read_capacity_16+0x2b4/0x1450 [ 430.916769][T18142] sd_revalidate_disk+0x1013/0xbce0 [ 430.922511][T18142] sd_probe+0x9fa/0x1100 [ 430.927365][T18142] really_probe+0x2ba/0xad0 [ 430.932391][T18142] __driver_probe_device+0x1a2/0x390 [ 430.938201][T18142] driver_probe_device+0x50/0x430 [ 430.943744][T18142] __device_attach_driver+0x2d6/0x530 [ 430.949635][T18142] bus_for_each_drv+0x250/0x2e0 [ 430.955014][T18142] __device_attach_async_helper+0x22d/0x300 [ 430.961431][T18142] async_run_entry_fn+0xaa/0x420 [ 430.966886][T18142] process_scheduled_works+0xa68/0x1840 [ 430.972948][T18142] worker_thread+0x870/0xd30 [ 430.978055][T18142] kthread+0x2f2/0x390 [ 430.982649][T18142] ret_from_fork+0x4d/0x80 [ 430.987607][T18142] ret_from_fork_asm+0x1a/0x30 [ 430.992893][T18142] [ 430.992893][T18142] -> #2 (&q->limits_lock){+.+.}-{4:4}: [ 431.000655][T18142] lock_acquire+0x1ed/0x550 [ 431.005681][T18142] __mutex_lock+0x1ac/0xee0 [ 431.010712][T18142] loop_reconfigure_limits+0x43f/0x900 [ 431.016690][T18142] lo_ioctl+0x1351/0x1f50 [ 431.021540][T18142] blkdev_ioctl+0x57f/0x6a0 [ 431.026584][T18142] __se_sys_ioctl+0xf7/0x170 [ 431.031693][T18142] do_syscall_64+0xf3/0x230 [ 431.036744][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.043166][T18142] [ 431.043166][T18142] -> #1 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 431.051795][T18142] lock_acquire+0x1ed/0x550 [ 431.056818][T18142] blk_mq_submit_bio+0x1536/0x2390 [ 431.062447][T18142] __submit_bio+0x2c6/0x560 [ 431.067468][T18142] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 431.073616][T18142] bio_chain_and_submit+0xed/0x130 [ 431.079253][T18142] blkdev_issue_discard+0x12b/0x200 [ 431.084993][T18142] ext4_free_blocks+0xe98/0x2240 [ 431.090455][T18142] ext4_clear_blocks+0x334/0x3b0 [ 431.095921][T18142] ext4_ind_truncate+0x76b/0xd60 [ 431.101394][T18142] ext4_truncate+0x9f0/0x11c0 [ 431.106595][T18142] ext4_evict_inode+0x90f/0xf50 [ 431.111965][T18142] evict+0x4ea/0x9a0 [ 431.116556][T18142] ext4_orphan_cleanup+0xb77/0x13d0 [ 431.122283][T18142] ext4_fill_super+0x64dc/0x6e60 [ 431.127759][T18142] get_tree_bdev_flags+0x48e/0x5c0 [ 431.133389][T18142] vfs_get_tree+0x92/0x2b0 [ 431.138324][T18142] do_new_mount+0x2be/0xb40 [ 431.143352][T18142] __se_sys_mount+0x2d6/0x3c0 [ 431.148563][T18142] do_syscall_64+0xf3/0x230 [ 431.153596][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.160022][T18142] [ 431.160022][T18142] -> #0 (&ei->i_data_sem){++++}-{4:4}: [ 431.167683][T18142] validate_chain+0x18ef/0x5920 [ 431.173060][T18142] __lock_acquire+0x1397/0x2100 [ 431.178434][T18142] lock_acquire+0x1ed/0x550 [ 431.183455][T18142] down_read+0xb1/0xa40 [ 431.188141][T18142] ext4_map_blocks+0x3be/0x1990 [ 431.193517][T18142] _ext4_get_block+0x239/0x6b0 [ 431.198801][T18142] ext4_block_zero_page_range+0x353/0xaf0 [ 431.205045][T18142] ext4_truncate+0x95f/0x11c0 [ 431.210260][T18142] ext4_setattr+0x113a/0x1da0 [ 431.215556][T18142] notify_change+0xbcc/0xe90 [ 431.220675][T18142] do_truncate+0x220/0x310 [ 431.225608][T18142] vfs_truncate+0x2e1/0x3b0 [ 431.230626][T18142] do_sys_truncate+0xdb/0x190 [ 431.235818][T18142] do_syscall_64+0xf3/0x230 [ 431.240884][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.247326][T18142] [ 431.247326][T18142] other info that might help us debug this: [ 431.247326][T18142] [ 431.257548][T18142] Chain exists of: [ 431.257548][T18142] &ei->i_data_sem --> &mm->mmap_lock --> mapping.invalidate_lock [ 431.257548][T18142] [ 431.271216][T18142] Possible unsafe locking scenario: [ 431.271216][T18142] [ 431.278655][T18142] CPU0 CPU1 [ 431.284012][T18142] ---- ---- [ 431.289364][T18142] lock(mapping.invalidate_lock); [ 431.294476][T18142] lock(&mm->mmap_lock); [ 431.301333][T18142] lock(mapping.invalidate_lock); [ 431.308966][T18142] rlock(&ei->i_data_sem); [ 431.313470][T18142] [ 431.313470][T18142] *** DEADLOCK *** [ 431.313470][T18142] [ 431.321608][T18142] 3 locks held by syz.1.4943/18142: [ 431.326797][T18142] #0: ffff88807e8ec420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 431.335986][T18142] #1: ffff888078406708 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: do_truncate+0x20c/0x310 [ 431.346288][T18142] #2: ffff8880784068a8 (mapping.invalidate_lock){++++}-{4:4}, at: ext4_setattr+0xf94/0x1da0 [ 431.356584][T18142] [ 431.356584][T18142] stack backtrace: [ 431.362460][T18142] CPU: 1 UID: 0 PID: 18142 Comm: syz.1.4943 Not tainted 6.13.0-rc5-syzkaller-00006-g56e6a3499e14 #0 [ 431.373216][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 431.383262][T18142] Call Trace: [ 431.386531][T18142] [ 431.389452][T18142] dump_stack_lvl+0x241/0x360 [ 431.394138][T18142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.399343][T18142] ? __pfx__printk+0x10/0x10 [ 431.403948][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.409581][T18142] print_circular_bug+0x13a/0x1b0 [ 431.414617][T18142] check_noncircular+0x36a/0x4a0 [ 431.419569][T18142] ? __pfx_hlock_conflict+0x10/0x10 [ 431.424775][T18142] ? __pfx_check_noncircular+0x10/0x10 [ 431.430244][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.435874][T18142] ? lockdep_lock+0x123/0x2b0 [ 431.440553][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.446184][T18142] ? check_path+0x21/0x40 [ 431.450520][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.456151][T18142] ? check_noncircular+0x259/0x4a0 [ 431.461269][T18142] ? __pfx_validate_chain+0x10/0x10 [ 431.466477][T18142] validate_chain+0x18ef/0x5920 [ 431.471343][T18142] ? validate_chain+0x15c0/0x5920 [ 431.476376][T18142] ? __pfx_validate_chain+0x10/0x10 [ 431.481587][T18142] ? __pfx_validate_chain+0x10/0x10 [ 431.486791][T18142] ? __pfx___bfs+0x10/0x10 [ 431.491221][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.496851][T18142] ? mark_lock+0x9a/0x360 [ 431.501185][T18142] __lock_acquire+0x1397/0x2100 [ 431.506044][T18142] lock_acquire+0x1ed/0x550 [ 431.510547][T18142] ? ext4_map_blocks+0x3be/0x1990 [ 431.515580][T18142] ? __pfx_lock_acquire+0x10/0x10 [ 431.520612][T18142] ? __pfx___might_resched+0x10/0x10 [ 431.525895][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.531530][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.537167][T18142] down_read+0xb1/0xa40 [ 431.541334][T18142] ? ext4_map_blocks+0x3be/0x1990 [ 431.546357][T18142] ? __pfx_lock_release+0x10/0x10 [ 431.551387][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.557020][T18142] ? __pfx_down_read+0x10/0x10 [ 431.561794][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.567423][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.573049][T18142] ? rcu_is_watching+0x15/0xb0 [ 431.577821][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.583450][T18142] ? ext4_es_lookup_extent+0x61a/0xa90 [ 431.588912][T18142] ext4_map_blocks+0x3be/0x1990 [ 431.593769][T18142] ? mark_lock+0x9a/0x360 [ 431.598118][T18142] ? __pfx_ext4_map_blocks+0x10/0x10 [ 431.603410][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.609045][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.614767][T18142] _ext4_get_block+0x239/0x6b0 [ 431.619530][T18142] ? __pfx_lock_release+0x10/0x10 [ 431.624560][T18142] ? __pfx__ext4_get_block+0x10/0x10 [ 431.629848][T18142] ? do_raw_spin_unlock+0x13c/0x8b0 [ 431.635046][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.640681][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.646311][T18142] ? _raw_spin_unlock+0x28/0x50 [ 431.651167][T18142] ? create_empty_buffers+0x471/0x530 [ 431.656546][T18142] ext4_block_zero_page_range+0x353/0xaf0 [ 431.662280][T18142] ext4_truncate+0x95f/0x11c0 [ 431.666965][T18142] ? down_write+0x18c/0x220 [ 431.671462][T18142] ? __pfx_ext4_truncate+0x10/0x10 [ 431.676580][T18142] ext4_setattr+0x113a/0x1da0 [ 431.681269][T18142] ? __pfx_ext4_setattr+0x10/0x10 [ 431.686299][T18142] notify_change+0xbcc/0xe90 [ 431.690896][T18142] do_truncate+0x220/0x310 [ 431.695313][T18142] ? __pfx_do_truncate+0x10/0x10 [ 431.700344][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.705981][T18142] ? srso_alias_return_thunk+0x5/0xfbef5 [ 431.711613][T18142] vfs_truncate+0x2e1/0x3b0 [ 431.716116][T18142] do_sys_truncate+0xdb/0x190 [ 431.720790][T18142] ? __pfx_do_sys_truncate+0x10/0x10 [ 431.726071][T18142] ? do_syscall_64+0x100/0x230 [ 431.730846][T18142] ? do_syscall_64+0xb6/0x230 [ 431.735538][T18142] do_syscall_64+0xf3/0x230 [ 431.740053][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.745959][T18142] RIP: 0033:0x7f1a21185d29 [ 431.750371][T18142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.769977][T18142] RSP: 002b:00007f1a22001038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 431.778393][T18142] RAX: ffffffffffffffda RBX: 00007f1a21375fa0 RCX: 00007f1a21185d29 [ 431.786361][T18142] RDX: 0000000000000000 RSI: 0000080000002328 RDI: 0000000020000200 [ 431.794327][T18142] RBP: 00007f1a21201b08 R08: 0000000000000000 R09: 0000000000000000 [ 431.802293][T18142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.810256][T18142] R13: 0000000000000000 R14: 00007f1a21375fa0 R15: 00007ffc73a00ec8 [ 431.818230][T18142] [ 431.821943][ T5893] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 431.858126][ T5829] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.876593][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.886517][T18154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.899550][T18154] ext4 filesystem being mounted at /855/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 431.902972][ T80] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 431.981520][ T5838] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.992090][T14588] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.045930][ T5893] usb 8-1: Using ep0 maxpacket: 8 [ 432.058222][ T5893] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 432.069207][ T5893] usb 8-1: config 179 has no interface number 0 [ 432.080640][ T5893] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 432.093470][ T5893] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 432.104876][ T80] usb 5-1: Using ep0 maxpacket: 16 [ 432.111084][ T80] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.114985][ T5893] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 432.122321][ T80] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.133288][ T5893] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 432.143094][ T80] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 432.153357][ T5893] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 432.164704][ T80] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.175624][ T5893] usb 8-1: config 179 interface 65 has no altsetting 0 [ 432.190766][ T5893] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 432.191322][ T80] usb 5-1: config 0 descriptor?? [ 432.202542][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.210653][ T80] xbox_remote_probe: endpoint_in message size==0? [ 432.221416][ T5893] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input16 [ 432.429241][ T80] usbhid 5-1:0.0: can't add hid device: -71 [ 432.436372][ T80] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.456447][ T8] usb 8-1: USB disconnect, device number 11 [ 432.461411][ T80] usb 5-1: USB disconnect, device number 15 [ 432.463466][ T8] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19