last executing test programs:
15m2.653050751s ago: executing program 4 (id=232):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x2b8, 0xb0000010, 0x0, 0x5c8f0200, 0x250, 0x3a8, 0x3a8, 0x250, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [0x0, 0x0, 0xffffffff], [], 'vlan1\x00', 'veth0_to_team\x00', {0xff}}, 0x0, 0xa8, 0xf0, 0x700}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000206, 'syz1\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x87, 0x80, 0x2, 0xfe, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private0, @empty, [0x49fc5045ed3ae8ef, 0xff000000, 0x6675841787364651, 0xff], [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0x8000007f, 0xff], 0x202, 0x8}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380)
15m2.328295326s ago: executing program 4 (id=238):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241, 0x80, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x8001, 0x0, 0x1ff, 0x5, 0x0, 0x5, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}], 0x68}], 0x1, 0x0)
15m2.050400532s ago: executing program 4 (id=242):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@multiplanar_userptr={0x6, 0x3, 0x4, 0x100000, 0xfffffff7, {0x77359400}, {0x4, 0x1, 0xa2, 0xfd, 0x3, 0x7f, "5d399d0f"}, 0x0, 0x2, {0x0}, 0x1})
15m1.812779082s ago: executing program 4 (id=246):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
15m1.057060167s ago: executing program 4 (id=252):
r0 = syz_open_dev$video(&(0x7f00000027c0), 0x6, 0x60040)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000002940)=@multiplanar_overlay={0x5, 0x9, 0x4, 0x100, 0x7, {0x77359400}, {0x1, 0x2, 0x53, 0x6, 0x3, 0x8, "e80ea00d"}, 0x3, 0x3, {0x0}})
14m58.438914172s ago: executing program 4 (id=280):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x5}}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x200006}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x4b, 0xff9, 0x1}, 0x28)
14m57.995309026s ago: executing program 32 (id=280):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x5}}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x200006}]}]}, {0x0, [0x61, 0x2e, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x4b, 0xff9, 0x1}, 0x28)
12m0.626535856s ago: executing program 1 (id=2380):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x4, 0x4, 0x4, 0x9}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000240), 0x0}, 0x20)
12m0.396338665s ago: executing program 1 (id=2383):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x3c, 0x1, 0x200, "474953000000c0000000000080000000002000000000000000000100", 0x52424752})
12m0.170381663s ago: executing program 1 (id=2387):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xafda, '\x00', 0x0, r0, 0x0, 0x1}, 0x50)
11m59.849853457s ago: executing program 1 (id=2392):
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
11m59.442596356s ago: executing program 1 (id=2396):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x3, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfa46}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x31}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xfffffffc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
11m58.402246681s ago: executing program 1 (id=2406):
r0 = socket(0xa, 0x801, 0x0)
getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54)
11m57.903727135s ago: executing program 33 (id=2406):
r0 = socket(0xa, 0x801, 0x0)
getsockopt(r0, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f0000001ffc)=0x54)
2m49.382149697s ago: executing program 2 (id=9237):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
2m49.221821795s ago: executing program 2 (id=9239):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c436474bb101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a277c85e69a85cc6ffeb225bebbca91b569b80ee303c9a21c58db5d96fb87f1713e0e9b896e37becae2e7a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e99"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000040)={0x80000005, 0x5, 0x4, 0x47, 0x3, 0x7, 0x1ff, 0x6, 0x35})
2m47.82826691s ago: executing program 2 (id=9249):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0)
2m47.322226405s ago: executing program 2 (id=9256):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000dc0)={[{@umask}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@part={'part', 0x3d, 0x4}}, {@nobarrier}, {@force}, {@gid}, {@gid}, {}]}, 0x44, 0x70f, &(0x7f00000005c0)="$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")
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0)
2m46.946197279s ago: executing program 2 (id=9261):
rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd)
2m46.16996801s ago: executing program 2 (id=9268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffffff4c}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000814)
2m45.553811244s ago: executing program 34 (id=9268):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffffff4c}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000814)
4.772102905s ago: executing program 0 (id=11077):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x8004}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x63}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8)
4.422325914s ago: executing program 0 (id=11083):
capset(&(0x7f0000000080)={0x20071026}, 0x0)
syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a)
3.744279689s ago: executing program 0 (id=11090):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418)
3.227251896s ago: executing program 0 (id=11097):
r0 = socket(0x1d, 0x2, 0x6)
getsockname$packet(r0, 0x0, &(0x7f0000000240))
3.125855783s ago: executing program 7 (id=11099):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x20, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
2.934117396s ago: executing program 0 (id=11101):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x443b, &(0x7f00000088c0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
2.886395163s ago: executing program 7 (id=11103):
r0 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x12, 0x0, &(0x7f0000001f80))
2.638015735s ago: executing program 7 (id=11105):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x80000001, 0x3, 0x1, 0x0, 0xefe, 0x0, 0x0, 0x8}})
2.391181717s ago: executing program 7 (id=11109):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000540)}, 0x20)
2.143440199s ago: executing program 7 (id=11113):
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f00000000c0))
1.908308128s ago: executing program 7 (id=11116):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1, 0x4422, &(0x7f0000004480)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x2)
1.518634615s ago: executing program 5 (id=11121):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x22001)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0)
1.355401192s ago: executing program 3 (id=11123):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000080)=[@dstaddrv6={0x20, 0x84, 0x8, @ipv4={'\x00', '\xff\xff', @local}}], 0x20, 0x4854}, 0x24000052)
1.193879149s ago: executing program 5 (id=11124):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x0, 0x4, 0x3, 0x3}}, 0x26)
1.123615271s ago: executing program 6 (id=11125):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x4a482, 0x0)
write$vga_arbiter(r0, 0x0, 0x0)
964.113158ms ago: executing program 3 (id=11126):
mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b)
mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='btrfs\x00', 0x0, 0x0)
924.648954ms ago: executing program 5 (id=11127):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x7d, &(0x7f0000000340)={0x8, 0x77, 0x6, 0x10, 0x39c1, 0x4, 0x4}, &(0x7f0000000840)=0x20)
850.172717ms ago: executing program 6 (id=11128):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x6, 0xb, 0x4, "0506dfff06000000000000000034a1ea00000010f900", 0x31363553})
775.79103ms ago: executing program 3 (id=11129):
r0 = syz_open_dev$radio(&(0x7f0000001640), 0x0, 0x2)
writev(r0, &(0x7f0000000240)=[{&(0x7f0000000340)="c0c9", 0x2}], 0x1)
708.151801ms ago: executing program 5 (id=11130):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_CONTROL(r0, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0x0, 0x1, 0x0, 0x0, 0x0})
696.806143ms ago: executing program 6 (id=11131):
r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x1, [], [0x1fffffff, 0x0, 0x1000010, 0x20000], [0x0, 0x40006, 0xfffffffc], [0x0, 0x10000000100001]})
566.918455ms ago: executing program 3 (id=11132):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001140)={0x38, 0x1, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10)
461.579793ms ago: executing program 5 (id=11133):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0)
458.458153ms ago: executing program 0 (id=11134):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@can_newroute={0x13, 0x18, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@CGW_DST_IF={0x8}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0xfffffffffffffff7, 0xfffffffffffffffd, 0xff}}, @CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x1}, 0x8, 0x2, 0x0, 0x0, "f57de0eb74757e1d"}, 0x4}}]}, 0x3c}}, 0x404c004)
413.854471ms ago: executing program 6 (id=11135):
r0 = syz_open_dev$swradio(&(0x7f0000001c40), 0x0, 0x2)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x0, 0xb, 0x3, "5cb2117e734c8efecf179ff3f458bb23b09982cd0b2c6f8315a127237f901310", 0x31303453})
316.609147ms ago: executing program 3 (id=11136):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x400442c9, 0x0)
217.332984ms ago: executing program 6 (id=11137):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="2f24634e311b994dbb0c2cdd3851", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
96.019954ms ago: executing program 5 (id=11138):
r0 = syz_open_dev$video4linux(&(0x7f0000000fc0), 0x40, 0x2000)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000001000)={0x980001, 0x3, "f692aadd33b9788691eae2229f9ac6efd993fcd8d5ad548ca9afef26d59575eb", 0xcb5, 0x0, 0x4, 0x4, 0x40000010})
67.075999ms ago: executing program 3 (id=11139):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r0, 0x800000010d, 0x3, 0x0, 0x0)
0s ago: executing program 6 (id=11140):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000006118bf000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0xc, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
kernel console output (not intermixed with test programs):
֠6xc: (pid: 28952 comm: syz.3.9571)
[ 866.721772][ T26] audit: type=1800 audit(866.661:421): pid=28952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9571" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6EC337B730F6D7B548772D22922F412C0542BCD63362D42C6D1559F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=101551 res=0 errno=0
[ 867.900280][T29018] netlink: 72 bytes leftover after parsing attributes in process `syz.6.9590'.
[ 868.225043][T28976] loop0: detected capacity change from 0 to 32768
[ 868.241135][ T5223] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[ 868.432454][ T5223] usb 4-1: not running at top speed; connect to a high speed hub
[ 868.462331][ T5223] usb 4-1: config 11 has an invalid interface number: 95 but max is 0
[ 868.490498][ T5223] usb 4-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[ 868.541212][ T5223] usb 4-1: config 11 has no interface number 0
[ 868.568005][ T5223] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 868.631229][ T5223] usb 4-1: config 11 interface 95 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[ 868.662331][ T5223] usb 4-1: config 11 interface 95 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 868.711097][ T5223] usb 4-1: config 11 interface 95 has no altsetting 0
[ 868.731062][ T5223] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d
[ 868.761958][ T5223] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[ 868.770822][ T5223] usb 4-1: Manufacturer: syz
[ 869.015651][ T5223] usb 4-1: USB disconnect, device number 39
[ 869.025601][T29028] loop5: detected capacity change from 0 to 32768
[ 869.065908][T29028] jfs_strtoUCS: char2uni returned -22.
[ 869.091160][ T9168] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[ 869.091368][T29028] charset = cp864, char = 0x9f
[ 869.131109][ T3910] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 869.277832][ T9168] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 869.302872][ T9168] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 869.321036][ T3910] usb 7-1: Using ep0 maxpacket: 16
[ 869.330207][ T3910] usb 7-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config
[ 869.351803][ T9168] usb 8-1: Product: syz
[ 869.356280][ T9168] usb 8-1: Manufacturer: syz
[ 869.382934][ T9168] usb 8-1: SerialNumber: syz
[ 869.392025][ T3910] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 869.424608][ T9168] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 869.435470][ T3910] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 869.464632][ T3910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 869.482410][ T3910] usb 7-1: Product: syz
[ 869.486930][ T3910] usb 7-1: Manufacturer: syz
[ 869.510985][ T3910] usb 7-1: SerialNumber: syz
[ 869.529098][ T9168] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 869.709643][T29100] xt_HMARK: spi-set and port-set can't be combined
[ 869.728361][ T3910] usb 7-1: 0:2 : does not exist
[ 869.742198][ T3910] usb 7-1: unit 9 not found!
[ 869.815555][ T3910] usb 7-1: USB disconnect, device number 30
[ 869.929966][T29120] netlink: 340 bytes leftover after parsing attributes in process `syz.0.9609'.
[ 869.951684][T29120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9609'.
[ 870.034575][ T4348] usb 8-1: USB disconnect, device number 2
[ 870.052030][T29118] loop5: detected capacity change from 0 to 4096
[ 870.092421][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 870.148006][T29118] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 870.177851][T29118] Quota error (device loop5): do_check_range: Getting block 256 out of range 1-5
[ 870.215866][T29118] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[ 870.271379][T29118] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.9608: Failed to acquire dquot type 1
[ 870.414422][ T4980] EXT4-fs (loop5): unmounting filesystem.
[ 870.434176][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 870.441273][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 870.591066][ T9168] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 870.600816][ T9168] ath9k_htc: Failed to initialize the device
[ 870.637260][ T4348] usb 8-1: ath9k_htc: USB layer deinitialized
[ 871.293839][T29175] loop3: detected capacity change from 0 to 1024
[ 871.320551][T29176] loop7: detected capacity change from 0 to 1024
[ 871.479714][T29176] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[ 871.517942][T29176] hfsplus: xattr searching failed
[ 871.544831][ T4337] hfsplus: b-tree write err: -5, ino 25
[ 871.574931][ T4337] hfsplus: b-tree write err: -5, ino 4
[ 871.611441][ T4337] hfsplus: b-tree write err: -5, ino 2
[ 871.631428][ T4337] hfsplus: b-tree write err: -5, ino 26
[ 871.918439][T29205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9629'.
[ 872.466692][T29238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9639'.
[ 872.511931][T29238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9639'.
[ 872.832364][T29260] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[ 873.375327][T29293] loop3: detected capacity change from 0 to 8
[ 873.455173][T29301] loop7: detected capacity change from 0 to 164
[ 873.478200][T29293] SQUASHFS error: Unable to read directory block [1d0:0]
[ 873.571334][T29301] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 874.151376][T29345] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 874.292418][T29350] loop5: detected capacity change from 0 to 256
[ 874.349316][T29350] exfat: Deprecated parameter 'utf8'
[ 874.376366][T29350] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d)
[ 874.583720][T29365] (unnamed net_device) (uninitialized): option mode: invalid value (254)
[ 874.801391][ T4348] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[ 874.845548][T29368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9676'.
[ 874.889227][T29376] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma?
[ 874.992879][ T4348] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 875.012130][ T4348] usb 4-1: config 2 interface 0 has no altsetting 0
[ 875.042028][ T4348] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 875.072376][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 875.096264][ T4348] usb 4-1: Product: syz
[ 875.100787][ T4348] usb 4-1: Manufacturer: syz
[ 875.103179][T29380] loop6: detected capacity change from 0 to 512
[ 875.127530][ T4348] usb 4-1: SerialNumber: syz
[ 875.160855][T29380] EXT4-fs (loop6): revision level too high, forcing read-only mode
[ 875.181301][ T4348] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 875.199149][ T4348] usb 4-1: selecting invalid altsetting 0
[ 875.213768][ T4348] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 875.235851][T29380] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 875.244217][T29380] Quota error (device loop6): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[ 875.264506][T29380] EXT4-fs warning (device loop6): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[ 875.311297][T29380] EXT4-fs (loop6): Cannot turn on quotas: error -117
[ 875.349039][T29380] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.9679: bg 0: block 15: invalid block bitmap
[ 875.449781][ T4348] usb 4-1: USB disconnect, device number 40
[ 875.491272][T29380] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem
[ 875.526389][T29380] EXT4-fs (loop6): 1 truncate cleaned up
[ 875.526431][T29380] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 875.680656][T10060] EXT4-fs (loop6): unmounting filesystem.
[ 875.895742][T29427] loop5: detected capacity change from 0 to 1024
[ 876.102827][T29427] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[ 876.128205][T29427] hfsplus: xattr searching failed
[ 876.154789][T29439] loop7: detected capacity change from 0 to 64
[ 876.206302][T29439] MINIX-fs: mounting unchecked file system, running fsck is recommended
[ 876.551499][T29464] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9696'.
[ 876.871100][T21362] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 876.910849][T29487] loop7: detected capacity change from 0 to 256
[ 876.953399][T29487] exfat: Deprecated parameter 'utf8'
[ 876.958811][T29487] exfat: Deprecated parameter 'namecase'
[ 877.001581][T29487] exfat: Deprecated parameter 'namecase'
[ 877.007934][T29487] exfat: Deprecated parameter 'utf8'
[ 877.063658][T29487] exFAT-fs (loop7): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[ 877.081051][T21362] usb 1-1: Using ep0 maxpacket: 32
[ 877.088250][T21362] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 877.137936][T21362] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30
[ 877.137982][T21362] usb 1-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69
[ 877.138024][T21362] usb 1-1: config 0 interface 0 has no altsetting 1
[ 877.140001][T21362] usb 1-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[ 877.140039][T21362] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 877.140062][T21362] usb 1-1: SerialNumber: syz
[ 877.143177][T21362] usb 1-1: config 0 descriptor??
[ 877.145822][T21362] usb-storage 1-1:0.0: USB Mass Storage device detected
[ 877.153987][T21362] usb-storage 1-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[ 877.228142][T29500] loop3: detected capacity change from 0 to 1024
[ 877.274513][T29500] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[ 877.274600][T29500] hfsplus: xattr searching failed
[ 877.406963][ T5223] usb 1-1: USB disconnect, device number 34
[ 877.409359][T29511] binder: 29510:29511 ioctl 40046210 0 returned -14
[ 877.434810][T29513] loop7: detected capacity change from 0 to 128
[ 878.126213][T29553] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.9714'.
[ 878.511267][T29573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9721'.
[ 878.712559][ T26] audit: type=1326 audit(878.651:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29584 comm="syz.5.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f79c819 code=0x7ffc0000
[ 878.736003][ C1] vkms_vblank_simulate: vblank timer overrun
[ 878.871150][ T26] audit: type=1326 audit(878.651:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29584 comm="syz.5.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fb54f79c819 code=0x7ffc0000
[ 878.993814][ T26] audit: type=1326 audit(878.651:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29584 comm="syz.5.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f79c819 code=0x7ffc0000
[ 879.016409][ C1] vkms_vblank_simulate: vblank timer overrun
[ 879.151331][ T26] audit: type=1326 audit(878.651:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29584 comm="syz.5.9725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f79c819 code=0x7ffc0000
[ 879.239529][T29620] loop3: detected capacity change from 0 to 64
[ 879.251186][ T5223] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 879.290303][T29620] hfs: unable to locate alternate MDB
[ 879.311127][T29620] hfs: continuing without an alternate MDB
[ 879.461227][ T5223] usb 6-1: Using ep0 maxpacket: 32
[ 879.470641][ T5223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 879.541313][ T5223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 879.591458][ T5223] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 879.641820][ T5223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 879.673415][T29639] xt_HMARK: proto mask must be zero with L3 mode
[ 879.690744][ T5223] usb 6-1: config 0 descriptor??
[ 879.717502][ T5223] hub 6-1:0.0: USB hub found
[ 879.919826][ T5223] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[ 880.143773][ T5223] usbhid 6-1:0.0: can't add hid device: -71
[ 880.168500][ T5223] usbhid: probe of 6-1:0.0 failed with error -71
[ 880.231616][ T5223] usb 6-1: USB disconnect, device number 31
[ 880.485784][T29619] loop0: detected capacity change from 0 to 32768
[ 880.637181][T29619] XFS (loop0): Mounting V5 Filesystem
[ 880.845738][T29619] XFS (loop0): Ending clean mount
[ 880.897434][T29619] XFS (loop0): Quotacheck needed: Please wait.
[ 880.932396][T29706] befs: (nbd3): No write support. Marking filesystem read-only
[ 880.975891][ T52] block nbd3: Attempted send on invalid socket
[ 880.982850][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 880.996132][T29706] befs: (nbd3): unable to read superblock
[ 881.109772][T29619] XFS (loop0): Quotacheck: Done.
[ 881.345936][ T4277] XFS (loop0): Unmounting Filesystem
[ 881.756865][T29736] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9760'.
[ 881.950155][ T26] audit: type=1326 audit(881.881:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29740 comm="syz.3.9761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 882.021872][ T26] audit: type=1326 audit(881.911:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29740 comm="syz.3.9761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 882.132666][ T26] audit: type=1326 audit(881.961:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29740 comm="syz.3.9761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 882.218570][T29698] loop7: detected capacity change from 0 to 32768
[ 882.229398][ T26] audit: type=1326 audit(881.961:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29740 comm="syz.3.9761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 882.307930][T29758] loop6: detected capacity change from 0 to 16
[ 882.351621][T29758] erofs: (device loop6): mounted with root inode @ nid 36.
[ 882.377276][ T26] audit: type=1326 audit(881.961:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29740 comm="syz.3.9761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 882.386721][T29698] XFS (loop7): Mounting V5 Filesystem
[ 882.484291][T29758] syz.6.9765: attempt to access beyond end of device
[ 882.484291][T29758] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16
[ 882.499445][T29758] syz.6.9765: attempt to access beyond end of device
[ 882.499445][T29758] loop6: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[ 882.636271][T29698] XFS (loop7): Ending clean mount
[ 882.672568][ T26] audit: type=1800 audit(882.451:431): pid=29758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9765" name="file2" dev="loop6" ino=89 res=0 errno=0
[ 882.693383][T29698] XFS (loop7): Quotacheck needed: Please wait.
[ 882.726044][T29785] loop5: detected capacity change from 0 to 736
[ 882.945868][T29698] XFS (loop7): Quotacheck: Done.
[ 883.001466][T29797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9770'.
[ 883.060151][T29797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9770'.
[ 883.252204][T27391] XFS (loop7): Unmounting Filesystem
[ 884.514131][T29870] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component
[ 885.474994][T29857] loop0: detected capacity change from 0 to 32768
[ 885.567052][T29857] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[ 885.567052][T29857]
[ 885.716534][T29857] ERROR: (device loop0): remounting filesystem as read-only
[ 885.758966][T29857] xtLookup: xtSearch returned -5
[ 885.807207][T29857] add_index: get/read_metapage failed!
[ 885.837621][T29857] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[ 885.837621][T29857]
[ 885.890158][T29857] xtLookup: xtSearch returned -5
[ 885.918945][T29857] free_index: error reading directory table
[ 885.971076][T29857] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[ 885.971076][T29857]
[ 886.070680][T29857] xtLookup: xtSearch returned -5
[ 886.086110][T29857] free_index: error reading directory table
[ 886.161660][T29857] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[ 886.161660][T29857]
[ 886.185401][T29947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9810'.
[ 886.207455][T29857] xtLookup: xtSearch returned -5
[ 886.236344][T29857] free_index: error reading directory table
[ 886.284443][T29857] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[ 886.284443][T29857]
[ 886.326232][T29857] xtLookup: xtSearch returned -5
[ 886.350455][T29857] free_index: error reading directory table
[ 886.390698][T29967] loop7: detected capacity change from 0 to 512
[ 886.401030][T29857] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[ 886.401030][T29857]
[ 886.459516][T29967] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 886.468432][T29857] xtLookup: xtSearch returned -5
[ 886.511115][T29857] free_index: error reading directory table
[ 886.531656][T29967] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[ 886.540669][T29967] System zones: 1-12
[ 886.561119][ T9168] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 886.578887][T29967] EXT4-fs (loop7): 1 truncate cleaned up
[ 886.611078][T29967] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 886.780976][ T9168] usb 6-1: Using ep0 maxpacket: 8
[ 886.792649][ T9168] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 886.820974][ T9168] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 886.829697][ T9168] usb 6-1: Product: syz
[ 886.834474][ T9168] usb 6-1: Manufacturer: syz
[ 886.839603][ T9168] usb 6-1: SerialNumber: syz
[ 886.857280][ T9168] usb 6-1: config 0 descriptor??
[ 886.891598][ T9168] gspca_main: sq905-2.14.0 probing 2770:9120
[ 887.309805][ T9168] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[ 887.320562][ T9168] sq905: probe of 6-1:0.0 failed with error -71
[ 887.350753][ T9168] usb 6-1: USB disconnect, device number 32
[ 887.520176][T27391] EXT4-fs (loop7): unmounting filesystem.
[ 887.786346][T29975] loop6: detected capacity change from 0 to 32768
[ 888.081280][ T5223] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[ 888.313707][ T5223] usb 1-1: config 8 has an invalid interface number: 80 but max is 0
[ 888.351438][ T5223] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 888.410972][ T5223] usb 1-1: config 8 has no interface number 0
[ 888.417435][ T5223] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping
[ 888.491242][ T5223] usb 1-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping
[ 888.533078][ T5223] usb 1-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 888.561042][ T5223] usb 1-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[ 888.623493][ T5223] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[ 888.672163][ T5223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 888.743362][ T5223] usb 1-1: NFC: intf ffff8880568b9000 id ffffffff8d406400
[ 888.813582][T30054] loop3: detected capacity change from 0 to 512
[ 888.970325][T30054] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 888.996945][T30065] loop7: detected capacity change from 0 to 8
[ 889.212891][T30054] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[ 889.233284][T30065] SQUASHFS error: Failed to read block 0x2fc: -5
[ 889.292374][T30065] SQUASHFS error: Unable to read metadata cache entry [2fa]
[ 889.332755][T30054] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[ 889.371063][T30065] SQUASHFS error: Unable to read directory block [247:26]
[ 889.436635][T30054] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.9826: Failed to acquire dquot type 0
[ 889.497896][T30080] loop6: detected capacity change from 0 to 2048
[ 889.552646][T30080] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[ 889.823981][T10060] EXT4-fs (loop6): unmounting filesystem.
[ 889.834048][ T4280] EXT4-fs (loop3): unmounting filesystem.
[ 889.964449][T30100] netlink: 168 bytes leftover after parsing attributes in process `syz.6.9837'.
[ 890.077487][T30108] loop5: detected capacity change from 0 to 164
[ 890.089572][T30109] loop7: detected capacity change from 0 to 64
[ 890.432835][T30123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 890.509598][ T5215] usb 1-1: USB disconnect, device number 35
[ 890.783413][T30146] x_tables: unsorted underflow at hook 4
[ 890.844596][T30148] loop3: detected capacity change from 0 to 128
[ 891.036188][T30158] ieee802154 phy0 wpan0: encryption failed: -90
[ 892.091301][T30195] loop3: detected capacity change from 0 to 64
[ 892.679419][T30222] loop5: detected capacity change from 0 to 2048
[ 892.761859][T30231] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9867'.
[ 892.811566][T30234] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 893.085563][T30234] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 893.130997][T30234] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 893.238836][T30234] Remounting filesystem read-only
[ 893.254134][ T4980] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[ 893.589375][T30257] loop5: detected capacity change from 0 to 2048
[ 893.687398][T30257] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 893.822049][T30221] loop6: detected capacity change from 0 to 32768
[ 893.912216][T30221] (syz.6.9865,30221,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 893.947578][T30221] (syz.6.9865,30221,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 894.083352][T30221] JBD2: Ignoring recovery information on journal
[ 894.240301][T30221] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 894.573733][T30297] netlink: 'syz.5.9881': attribute type 10 has an invalid length.
[ 894.592106][T30297] device netdevsim0 left promiscuous mode
[ 894.628008][T10060] ocfs2: Unmounting device (7,6) on (node local)
[ 894.645098][T30297] bridge0: port 3(netdevsim0) entered disabled state
[ 894.776102][T30297] batman_adv: batadv0: Adding interface: netdevsim0
[ 894.801111][T30297] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 894.948565][T30255] loop0: detected capacity change from 0 to 32768
[ 894.993157][T30297] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[ 895.060211][T30255] XFS (loop0): Mounting V5 Filesystem
[ 895.239959][T30255] XFS (loop0): Ending clean mount
[ 895.477389][ T4277] XFS (loop0): Unmounting Filesystem
[ 896.009014][T30348] device netdevsim0 entered promiscuous mode
[ 896.071788][T30348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9895'.
[ 896.230077][T30304] loop6: detected capacity change from 0 to 32768
[ 896.348794][T30366] xt_hashlimit: max too large, truncated to 1048576
[ 896.356889][T30366] Timeout policy `syz1' can only be used by L3 protocol number 34948
[ 896.512201][T30304] XFS (loop6): Mounting V5 Filesystem
[ 896.645833][T30304] XFS (loop6): Ending clean mount
[ 896.689381][T30304] XFS (loop6): Quotacheck needed: Please wait.
[ 896.914349][T30304] XFS (loop6): Quotacheck: Done.
[ 897.084635][T10060] XFS (loop6): Unmounting Filesystem
[ 897.300532][T30404] loop0: detected capacity change from 0 to 512
[ 897.410055][T30415] netlink: 10 bytes leftover after parsing attributes in process `syz.7.9909'.
[ 897.439408][T30371] loop3: detected capacity change from 0 to 32768
[ 897.441475][T30404] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 897.571272][T30371] (syz.3.9898,30371,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 897.586501][T30404] EXT4-fs error (device loop0): ext4_empty_dir:3139: inode #12: comm syz.0.9907: Directory block failed checksum
[ 897.630709][T30371] (syz.3.9898,30371,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 897.651004][ T5223] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 897.749352][T30371] JBD2: Ignoring recovery information on journal
[ 897.750246][ T4277] EXT4-fs (loop0): unmounting filesystem.
[ 897.852981][ T5223] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 897.872610][ T5223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 897.884612][T30429] loop7: detected capacity change from 0 to 512
[ 897.913688][ T5223] usb 6-1: config 0 descriptor??
[ 898.002523][T30429] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 898.072844][T30371] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 898.245619][T30429] EXT4-fs error (device loop7): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.7.9911: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[ 898.328610][ T5223] [drm:udl_init] *ERROR* Selecting channel failed
[ 898.360129][ T5223] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[ 898.391143][T30429] EXT4-fs error (device loop7): ext4_get_first_dir_block:3594: inode #12: comm syz.7.9911: directory missing '.'
[ 898.391214][ T5223] [drm] Initialized udl on minor 2
[ 898.477745][ T5223] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 898.535737][ T5223] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 898.568251][ T5223] usb 6-1: USB disconnect, device number 33
[ 898.573822][T27391] EXT4-fs (loop7): unmounting filesystem.
[ 898.601698][T19845] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 898.623992][T19845] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[ 898.641075][T19845] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[ 898.827342][ T4280] ocfs2: Unmounting device (7,3) on (node local)
[ 898.932824][T30479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9919'.
[ 899.494735][T30497] loop7: detected capacity change from 0 to 2048
[ 899.572452][T30497] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found!
[ 899.630640][T30497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 899.653802][T30506] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9926'.
[ 900.286881][T30538] loop3: detected capacity change from 0 to 16
[ 900.301900][ T26] audit: type=1326 audit(900.241:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30535 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b439c819 code=0x7ffc0000
[ 900.363504][T30538] erofs: (device loop3): mounted with root inode @ nid 36.
[ 900.407325][T30538] erofs: (device loop3): erofs_read_inode: unsupported i_format 42756 of nid 86
[ 900.415077][T30545] SET target dimension over the limit!
[ 900.459350][ T26] audit: type=1326 audit(900.271:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30535 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f82b439c819 code=0x7ffc0000
[ 900.536842][ T26] audit: type=1326 audit(900.271:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30535 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b439c819 code=0x7ffc0000
[ 900.639941][ T26] audit: type=1326 audit(900.271:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30535 comm="syz.7.9936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b439c819 code=0x7ffc0000
[ 901.204360][ T26] audit: type=1326 audit(901.141:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.7.9948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b439c819 code=0x7ffc0000
[ 901.301093][ T26] audit: type=1326 audit(901.141:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.7.9948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82b439c819 code=0x7ffc0000
[ 901.410612][ T26] audit: type=1326 audit(901.141:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.7.9948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b439c819 code=0x7ffc0000
[ 901.491036][ T26] audit: type=1326 audit(901.141:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30576 comm="syz.7.9948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82b439c819 code=0x7ffc0000
[ 901.522106][T30533] loop6: detected capacity change from 0 to 32768
[ 901.660155][T30533] XFS (loop6): Mounting V5 Filesystem
[ 901.676963][T30589] loop7: detected capacity change from 0 to 4096
[ 901.697471][T30589] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[ 901.801142][T30533] XFS (loop6): Ending clean mount
[ 901.857547][T30589] ntfs3: loop7: failed to convert "c46c" to cp850
[ 902.053080][T10060] XFS (loop6): Unmounting Filesystem
[ 902.290036][T30623] device veth3 entered promiscuous mode
[ 902.306326][T30635] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[ 902.381337][T30635] overlayfs: missing 'lowerdir'
[ 902.971187][ T3910] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 903.007122][T30672] No such timeout policy "syz1"
[ 903.191020][ T3910] usb 1-1: Using ep0 maxpacket: 32
[ 903.199110][ T3910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 903.248910][ T3910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 903.291142][ T3910] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 903.300723][ T3910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 903.329365][ T3910] usb 1-1: config 0 descriptor??
[ 903.357831][ T3910] hub 1-1:0.0: USB hub found
[ 903.419846][T30685] loop5: detected capacity change from 0 to 4096
[ 903.464847][T30685] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[ 903.507054][T30685] ntfs3: loop5: ntfs_evict_inode r=6 failed, -22.
[ 903.533150][T30685] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[ 903.556591][ T3910] hub 1-1:0.0: 31 ports detected
[ 903.565516][ T3910] hub 1-1:0.0: insufficient power available to use all downstream ports
[ 903.621256][T21362] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 903.766196][ T3910] hub 1-1:0.0: hub_hub_status failed (err = -71)
[ 903.791272][ T3910] hub 1-1:0.0: config failed, can't get hub status (err -71)
[ 903.831389][T21362] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[ 903.842084][ T3910] usbhid 1-1:0.0: can't add hid device: -71
[ 903.848929][ T3910] usbhid: probe of 1-1:0.0 failed with error -71
[ 903.866847][T21362] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 903.888579][T21362] usb 7-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice=f5.01
[ 903.904147][T21362] usb 7-1: New USB device strings: Mfr=192, Product=0, SerialNumber=0
[ 903.913901][T21362] usb 7-1: Manufacturer: syz
[ 903.931772][ T3910] usb 1-1: USB disconnect, device number 36
[ 903.962282][T21362] usb 7-1: config 0 descriptor??
[ 904.006142][T21362] usb-storage 7-1:0.0: USB Mass Storage device detected
[ 904.292729][T21362] usb 7-1: USB disconnect, device number 31
[ 905.230849][T30775] overlayfs: conflicting options: nfs_export=on,index=off
[ 905.259776][T30780] netlink: 348 bytes leftover after parsing attributes in process `syz.5.9992'.
[ 905.261862][T30779] loop7: detected capacity change from 0 to 512
[ 905.287351][T30780] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9992'.
[ 905.322116][T30779] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 905.455142][T30779] EXT4-fs (loop7): 1 truncate cleaned up
[ 905.461479][T30779] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 905.558279][T27391] EXT4-fs (loop7): unmounting filesystem.
[ 905.566408][T30793] loop5: detected capacity change from 0 to 256
[ 905.657252][T30793] FAT-fs (loop5): Directory bread(block 64) failed
[ 905.697133][T30793] FAT-fs (loop5): Directory bread(block 65) failed
[ 905.721138][T30793] FAT-fs (loop5): Directory bread(block 66) failed
[ 905.727976][T30793] FAT-fs (loop5): Directory bread(block 67) failed
[ 905.808289][T30793] FAT-fs (loop5): Directory bread(block 68) failed
[ 905.861002][T30793] FAT-fs (loop5): Directory bread(block 69) failed
[ 905.867830][T30793] FAT-fs (loop5): Directory bread(block 70) failed
[ 905.911735][T30793] FAT-fs (loop5): Directory bread(block 71) failed
[ 905.938920][T30793] FAT-fs (loop5): Directory bread(block 72) failed
[ 905.956160][T30793] FAT-fs (loop5): Directory bread(block 73) failed
[ 906.030874][T30802] loop7: detected capacity change from 0 to 8192
[ 906.094167][T30802] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 906.132431][T30802] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[ 906.151414][T30802] REISERFS (device loop7): using ordered data mode
[ 906.168850][T30802] reiserfs: using flush barriers
[ 906.186732][T30802] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 906.211781][T30802] REISERFS (device loop7): checking transaction log (loop7)
[ 906.302283][T30802] REISERFS (device loop7): Using rupasov hash to sort names
[ 906.309765][T30802] REISERFS (device loop7): using 3.5.x disk format
[ 906.342100][T30762] bridge0: port 2(bridge_slave_1) entered disabled state
[ 906.350419][T30762] bridge0: port 1(bridge_slave_0) entered disabled state
[ 906.380199][T30802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 906.443025][T30802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 906.503525][T30802] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[ 906.529473][T30802] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[ 906.574810][T30802] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[ 906.575603][T30826] loop6: detected capacity change from 0 to 16
[ 906.687773][T30826] erofs: (device loop6): mounted with root inode @ nid 36.
[ 906.734546][T30826] syz.6.10004: attempt to access beyond end of device
[ 906.734546][T30826] loop6: rw=0, sector=48, nr_sectors = 16 limit=16
[ 906.985472][T30841] trusted_key: encrypted_key: keylen parameter is missing
[ 907.079565][T30843] loop7: detected capacity change from 0 to 4096
[ 907.105005][T30843] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[ 907.184593][T30843] ntfs3: loop7: Failed to load $Extend.
[ 907.259069][T30847] loop6: detected capacity change from 0 to 512
[ 907.356478][T30847] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 907.500784][T30832] loop3: detected capacity change from 0 to 32768
[ 907.509923][T30847] EXT4-fs error (device loop6): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.6.10009: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0
[ 907.544838][T30832] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.10006 (30832)
[ 907.558768][T16903] Bluetooth: hci2: hcon ffff888054784000 sent 1 < count 65530
[ 907.574265][T30847] EXT4-fs error (device loop6): ext4_get_first_dir_block:3594: inode #12: comm syz.6.10009: directory missing '.'
[ 907.677898][T30854] loop7: detected capacity change from 0 to 2048
[ 907.692438][T30832] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 907.708888][T10060] EXT4-fs (loop6): unmounting filesystem.
[ 907.721606][T30832] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[ 907.743487][T30854] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 907.749539][T30832] BTRFS info (device loop3): using free space tree
[ 907.777323][T30762] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 907.908911][T30762] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 908.078396][T30832] BTRFS info (device loop3): enabling ssd optimizations
[ 908.253624][ T4280] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 909.009795][T30903] loop7: detected capacity change from 0 to 2048
[ 909.056258][T30903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 909.178625][T30762] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 909.207797][T30762] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 909.228384][T30762] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 909.247661][T30762] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 909.621059][ T3910] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 909.813188][ T3910] usb 8-1: config 8 has an invalid interface number: 80 but max is 0
[ 909.830986][ T3910] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 909.891293][ T3910] usb 8-1: config 8 has no interface number 0
[ 909.913163][ T3910] usb 8-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping
[ 909.941054][ T3910] usb 8-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping
[ 909.960289][ T3910] usb 8-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 910.017254][ T3910] usb 8-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[ 910.032813][T30943] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (32)
[ 910.063125][ T3910] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[ 910.094265][ T3910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 910.140112][ T3910] usb 8-1: NFC: intf ffff888025f8e000 id ffffffff8d406400
[ 910.303410][T30963] loop0: detected capacity change from 0 to 1024
[ 910.365812][T30963] hfsplus: Filesystem is marked locked, mounting read-only.
[ 910.397343][T30967] loop3: detected capacity change from 0 to 256
[ 910.404445][T21362] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 910.451860][T30963] hfsplus: filesystem is marked locked, leaving read-only.
[ 910.621304][T21362] usb 6-1: Using ep0 maxpacket: 16
[ 910.630167][T21362] usb 6-1: config 0 has no interfaces?
[ 910.659785][T21362] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 910.694647][T21362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 910.724279][T21362] usb 6-1: Product: syz
[ 910.741078][T21362] usb 6-1: Manufacturer: syz
[ 910.745982][T21362] usb 6-1: SerialNumber: syz
[ 910.812343][T21362] r8152-cfgselector 6-1: config 0 descriptor??
[ 911.012041][T30980] xt_CT: No such helper "snmp_trap"
[ 911.050130][T21362] usbip-host 6-1: 6-1 is not in match_busid table... skip!
[ 911.122155][T21362] usb 8-1: USB disconnect, device number 3
[ 911.189139][T30995] loop3: detected capacity change from 0 to 2048
[ 911.263081][ T5224] usb 6-1: USB disconnect, device number 34
[ 911.275036][T30995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 911.621157][ T5226] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 911.851259][ T5226] usb 7-1: Using ep0 maxpacket: 8
[ 911.858635][ T5226] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[ 911.904813][ T5226] usb 7-1: config 179 has no interface number 0
[ 911.930987][ T5226] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 911.981093][ T5226] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 912.031332][ T5226] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 912.084219][ T5226] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 912.130969][ T5226] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 912.169514][ T5226] usb 7-1: config 179 interface 65 has no altsetting 0
[ 912.197681][ T5226] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 912.230243][ T5226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 912.307606][T31048] nvme_fabrics: missing parameter 'transport=%s'
[ 912.325625][T31048] nvme_fabrics: missing parameter 'nqn=%s'
[ 912.334680][ T5226] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input46
[ 912.636446][T31072] tmpfs: Bad value for 'mpol'
[ 912.768661][ T9168] usb 7-1: USB disconnect, device number 32
[ 912.768771][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 912.785404][ T9168] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 913.110142][T31044] loop7: detected capacity change from 0 to 32768
[ 913.221325][ T5215] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[ 913.257504][T31044] XFS (loop7): Mounting V5 Filesystem
[ 913.281222][ T26] audit: type=1400 audit(913.211:440): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=31115 comm="syz.0.10065"
[ 913.422902][ T5215] usb 4-1: config 8 has an invalid interface number: 80 but max is 0
[ 913.450497][ T5215] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 913.470978][ T5215] usb 4-1: config 8 has no interface number 0
[ 913.492628][ T5215] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0xE7, skipping
[ 913.530224][ T5215] usb 4-1: config 8 interface 80 altsetting 0 has an invalid endpoint with address 0x80, skipping
[ 913.571187][ T5215] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[ 913.601176][ T5215] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[ 913.641107][ T5215] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[ 913.660962][ T5215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 913.701764][T31044] XFS (loop7): Ending clean mount
[ 913.717840][ T5215] usb 4-1: NFC: intf ffff888055b97000 id ffffffff8d406400
[ 913.890232][T31144] Cannot find del_set index 43 as target
[ 913.902563][T27391] XFS (loop7): Unmounting Filesystem
[ 914.719680][ T5226] usb 4-1: USB disconnect, device number 41
[ 914.961083][ T9168] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 915.151262][ T9168] usb 7-1: Using ep0 maxpacket: 16
[ 915.183199][ T9168] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 915.221126][ T9168] usb 7-1: config 192 has too many interfaces: 127, using maximum allowed: 32
[ 915.245938][ T9168] usb 7-1: config 192 has an invalid interface association descriptor of length 5, skipping
[ 915.268529][ T9168] usb 7-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[ 915.290364][ T9168] usb 7-1: config 192 has 0 interfaces, different from the descriptor's value: 127
[ 915.343126][ T9168] usb 7-1: config 192 has too many interfaces: 127, using maximum allowed: 32
[ 915.370697][ T9168] usb 7-1: config 192 has an invalid interface association descriptor of length 5, skipping
[ 915.431263][ T9168] usb 7-1: config 192 has an invalid descriptor of length 0, skipping remainder of the config
[ 915.471103][ T9168] usb 7-1: config 192 has 0 interfaces, different from the descriptor's value: 127
[ 915.512672][ T9168] usb 7-1: New USB device found, idVendor=03eb, idProduct=7617, bcdDevice= 2.69
[ 915.541346][ T9168] usb 7-1: New USB device strings: Mfr=3, Product=1, SerialNumber=9
[ 915.566228][ T9168] usb 7-1: Product: syz
[ 915.570844][ T9168] usb 7-1: Manufacturer: syz
[ 915.606016][ T9168] usb 7-1: SerialNumber: syz
[ 915.869786][ T9168] usb 7-1: USB disconnect, device number 33
[ 916.450401][T31270] loop7: detected capacity change from 0 to 512
[ 916.565784][T31270] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 916.608283][T31270] EXT4-fs error (device loop7): ext4_xattr_block_list:713: inode #12: comm syz.7.10107: corrupted xattr block 6
[ 916.697009][T31285] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 916.748151][T27391] EXT4-fs (loop7): unmounting filesystem.
[ 917.444309][T31327] netlink: 56 bytes leftover after parsing attributes in process `syz.7.10124'.
[ 918.167134][T31365] loop5: detected capacity change from 0 to 512
[ 918.499496][T31383] loop5: detected capacity change from 0 to 256
[ 918.625338][T31383] FAT-fs (loop5): Directory bread(block 64) failed
[ 918.673260][T31433] loop0: detected capacity change from 0 to 764
[ 918.686479][T31383] FAT-fs (loop5): Directory bread(block 65) failed
[ 918.701903][T31383] FAT-fs (loop5): Directory bread(block 66) failed
[ 918.708848][T31383] FAT-fs (loop5): Directory bread(block 67) failed
[ 918.731696][T31433] rock: directory entry would overflow storage
[ 918.738217][T31433] rock: sig=0x4f50, size=4, remaining=3
[ 918.745807][T31383] FAT-fs (loop5): Directory bread(block 68) failed
[ 918.753100][T31383] FAT-fs (loop5): Directory bread(block 69) failed
[ 918.768014][T31433] iso9660: Corrupted directory entry in block 6 of inode 1792
[ 918.778887][T31383] FAT-fs (loop5): Directory bread(block 70) failed
[ 918.788096][T31383] FAT-fs (loop5): Directory bread(block 71) failed
[ 918.818197][T31383] FAT-fs (loop5): Directory bread(block 72) failed
[ 918.850132][T31383] FAT-fs (loop5): Directory bread(block 73) failed
[ 918.857673][ T5226] usb 7-1: new full-speed USB device number 34 using dummy_hcd
[ 919.074148][ T5226] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 919.119374][ T5226] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 919.152991][ T5226] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 919.179652][ T5226] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 919.217396][ T5226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 919.267421][ T5226] usb 7-1: SerialNumber: syz
[ 919.782724][T31424] loop6: detected capacity change from 0 to 8192
[ 919.869859][T31424] loop6: p1 < > p2 < p5 > p4
[ 919.909895][T31424] loop6: p4 size 16776960 extends beyond EOD, truncated
[ 919.922433][T31424] loop6: p5 size 16776960 extends beyond EOD, truncated
[ 919.968427][T31446] loop0: detected capacity change from 0 to 32768
[ 919.991623][ T3910] usb 7-1: USB disconnect, device number 34
[ 920.018276][T31489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10158'.
[ 920.058427][T31446] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.10148 (31446)
[ 920.132570][T31446] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 920.184934][T31446] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[ 920.221331][T31446] BTRFS info (device loop0): using free space tree
[ 920.387130][T31512] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[ 920.437683][T31512] overlayfs: missing 'lowerdir'
[ 920.487563][T31474] loop7: detected capacity change from 0 to 32768
[ 920.496557][T31446] BTRFS info (device loop0): enabling ssd optimizations
[ 920.525913][T31474]
[ 920.525913][T31474] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 920.525913][T31474]
[ 920.701759][T31474] ERROR: (device loop7): diWrite: ixpxd invalid
[ 920.701759][T31474]
[ 920.754477][T31474] ERROR: (device loop7): txCommit:
[ 920.754477][T31474]
[ 920.803382][ T4277] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 920.823663][T31530] netlink: 160 bytes leftover after parsing attributes in process `syz.5.10163'.
[ 921.057103][ T4477] udevd[4477]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory
[ 921.072072][ T4890] udevd[4890]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[ 921.086705][ T4889] udevd[4889]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory
[ 921.108240][ T4390] udevd[4390]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[ 921.330584][T31544] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[ 921.400609][T31547] loop5: detected capacity change from 0 to 4096
[ 921.575161][T31551] loop6: detected capacity change from 0 to 256
[ 921.647259][T31551] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[ 921.667218][T31503] loop3: detected capacity change from 0 to 32768
[ 921.723369][T27391]
[ 921.723369][T27391] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 921.723369][T27391]
[ 921.738853][T31503]
[ 921.738853][T31503] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 921.738853][T31503]
[ 921.776271][T27391]
[ 921.776271][T27391] ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 921.776271][T27391]
[ 921.844537][T31559] netlink: 196 bytes leftover after parsing attributes in process `syz.0.10164'.
[ 921.883103][T31503] ERROR: (device loop3): dbReAlloc: the block is outside the filesystem
[ 921.883103][T31503]
[ 921.921443][T31503] ERROR: (device loop3): remounting filesystem as read-only
[ 921.952190][T31559] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[ 922.211163][T31570] netlink: 'syz.5.10171': attribute type 26 has an invalid length.
[ 922.333462][T31578] loop0: detected capacity change from 0 to 256
[ 922.543594][T31589] loop3: detected capacity change from 0 to 1764
[ 922.980274][T31615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 923.004226][T31615] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 923.017315][T31619] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10183'.
[ 923.039197][T31615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 923.056745][T31615] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 923.157591][T31623] loop0: detected capacity change from 0 to 64
[ 923.391176][T16903] Bluetooth: hci0: command 0x0c1a tx timeout
[ 923.763507][T31651] tmpfs: Bad value for 'mpol'
[ 924.087731][T31669] loop7: detected capacity change from 0 to 8
[ 924.134889][T31656] loop0: detected capacity change from 0 to 8192
[ 924.141952][T31669] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 924.165974][ T4390] udevd[4390]: incorrect cramfs checksum on /dev/loop7
[ 924.170490][T31656] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 924.229568][T31669] cramfs: Error -3 while decompressing!
[ 924.257351][T31669] cramfs: ffffffff96d91248(26)->ffff88804e162000(4096)
[ 924.274980][T31669] cramfs: Error 2 while decompressing!
[ 924.297950][T31669] cramfs: ffffffff96d91262(26)->ffff888049b4e000(4096)
[ 924.346788][T31669] cramfs: Error -3 while decompressing!
[ 924.363296][T31669] cramfs: ffffffff96d9127c(16)->ffff88804f8f9000(4096)
[ 924.392697][T31669] cramfs: Error -3 while decompressing!
[ 924.398466][T31669] cramfs: ffffffff96d91248(26)->ffff88804e162000(4096)
[ 924.478235][T31603] loop5: detected capacity change from 0 to 32768
[ 924.536113][T31603] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 924.578182][T31603] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 924.650508][T31603] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[ 924.710435][ T5220] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 924.721323][ T5220] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 924.772487][T31697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10204'.
[ 924.821156][T31697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 924.993263][ T5220] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 271ms
[ 925.049795][ T5220] gfs2: fsid=syz:syz.0: jid=0: Done
[ 925.055677][T31603] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 925.101769][T31707] netlink: 272 bytes leftover after parsing attributes in process `syz.6.10207'.
[ 925.496397][T31727] tipc: Trying to set illegal importance in message
[ 925.539420][T31728] loop6: detected capacity change from 0 to 1024
[ 925.642691][T31728] hfsplus: invalid length 32517 has been corrected to 255
[ 925.657527][T31603] gfs2: fsid=syz:syz.0: found 1 quota changes
[ 925.867681][ T4980] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[ 925.920809][ T4980] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[ 925.972154][ T4980] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[ 926.003161][ T4980] gfs2: fsid=syz:syz.0: R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:1 e:0
[ 926.121488][ T4980] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[ 926.162975][ T4980] CPU: 1 PID: 4980 Comm: syz-executor Not tainted syzkaller #0
[ 926.170704][ T4980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 926.181239][ T4980] Call Trace:
[ 926.184648][ T4980]
[ 926.187908][ T4980] dump_stack_lvl+0x188/0x24e
[ 926.192749][ T4980] ? show_regs_print_info+0x12/0x12
[ 926.198324][ T4980] ? load_image+0x400/0x400
[ 926.202981][ T4980] ? do_raw_spin_unlock+0x11d/0x230
[ 926.208400][ T4980] gfs2_assert_warn_i+0x18f/0x2c0
[ 926.213659][ T4980] gfs2_quota_cleanup+0x4b4/0x6a0
[ 926.218757][ T4980] gfs2_make_fs_ro+0x3e0/0x4c0
[ 926.223658][ T4980] ? gfs2_put_super+0x1d7/0x8c0
[ 926.228683][ T4980] ? gfs2_dinode_out+0xb00/0xb00
[ 926.233868][ T4980] ? __lock_acquire+0x7d10/0x7d10
[ 926.239066][ T4980] ? __rwlock_init+0x140/0x140
[ 926.243962][ T4980] ? do_raw_spin_unlock+0x11d/0x230
[ 926.249543][ T4980] gfs2_put_super+0x220/0x8c0
[ 926.254544][ T4980] ? gfs2_evict_inode+0x11d0/0x11d0
[ 926.260152][ T4980] generic_shutdown_super+0x130/0x340
[ 926.266107][ T4980] kill_block_super+0x7c/0xe0
[ 926.271203][ T4980] deactivate_locked_super+0x93/0xf0
[ 926.276544][ T4980] cleanup_mnt+0x42c/0x4b0
[ 926.281422][ T4980] ? lockdep_hardirqs_on+0x94/0x140
[ 926.286645][ T4980] task_work_run+0x1d0/0x260
[ 926.291258][ T4980] ? task_work_cancel+0x220/0x220
[ 926.296478][ T4980] ? exit_to_user_mode_loop+0x3b/0x110
[ 926.302316][ T4980] exit_to_user_mode_loop+0xe6/0x110
[ 926.307729][ T4980] exit_to_user_mode_prepare+0xee/0x180
[ 926.313327][ T4980] syscall_exit_to_user_mode+0x16/0x40
[ 926.319248][ T4980] do_syscall_64+0x58/0xa0
[ 926.323780][ T4980] ? clear_bhb_loop+0x60/0xb0
[ 926.329089][ T4980] ? clear_bhb_loop+0x60/0xb0
[ 926.334307][ T4980] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 926.340626][ T4980] RIP: 0033:0x7fb54f79da57
[ 926.345408][ T4980] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 926.365903][ T4980] RSP: 002b:00007ffed2537548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 926.374783][ T4980] RAX: 0000000000000000 RBX: 00007fb54f832048 RCX: 00007fb54f79da57
[ 926.382957][ T4980] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed2537600
[ 926.391469][ T4980] RBP: 00007ffed2537600 R08: 00007ffed2538600 R09: 00000000ffffffff
[ 926.400027][ T4980] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed2538690
[ 926.408346][ T4980] R13: 00007fb54f832048 R14: 00000000000e1441 R15: 00007ffed25386d0
[ 926.417046][ T4980]
[ 926.453902][ T4342] hfsplus: b-tree write err: -5, ino 20
[ 926.646913][T31766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10226'.
[ 926.686778][T31766] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10226'.
[ 926.707125][T31766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10226'.
[ 926.737146][T31766] netlink: 108 bytes leftover after parsing attributes in process `syz.0.10226'.
[ 926.749108][T31766] netlink: 84 bytes leftover after parsing attributes in process `syz.0.10226'.
[ 926.859544][T31768] loop6: detected capacity change from 0 to 4096
[ 926.907040][T31768] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 927.022743][T31768] ntfs: volume version 3.1.
[ 927.071325][T31784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10230'.
[ 927.289782][ T4316] ntfs: (device loop6): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[ 927.535085][T31793] loop0: detected capacity change from 0 to 4096
[ 927.587429][T31793] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk.
[ 927.640005][T31793] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk.
[ 927.741231][T31793] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[ 927.783247][T31776] loop3: detected capacity change from 0 to 32768
[ 927.801489][T31793] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk.
[ 927.865748][T31793] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[ 927.881118][T31776] (syz.3.10229,31776,0):ocfs2_verify_heartbeat:814 ERROR: Cannot heartbeat on a locally mounted device.
[ 927.985706][T31776] (syz.3.10229,31776,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 70
[ 928.013110][T31793] ntfs: volume version 3.1.
[ 928.033902][T31793] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[ 928.074582][T31776] (syz.3.10229,31776,1):ocfs2_fill_super:1176 ERROR: status = -22
[ 928.121220][T31826] netlink: 'syz.7.10238': attribute type 21 has an invalid length.
[ 928.129649][T31826] IPv6: NLM_F_CREATE should be specified when creating new route
[ 928.158634][T31793] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows.
[ 928.187663][T31826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 928.195145][T31826] IPv6: NLM_F_CREATE should be set when creating new route
[ 928.202600][T31826] IPv6: NLM_F_CREATE should be set when creating new route
[ 928.207352][T31793] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[ 928.210127][T31826] IPv6: NLM_F_CREATE should be set when creating new route
[ 928.720221][T31843] loop5: detected capacity change from 0 to 1024
[ 929.534956][T31895] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10260'.
[ 929.578464][T31895] netlink: 10 bytes leftover after parsing attributes in process `syz.7.10260'.
[ 929.601036][ T3910] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 929.801011][ T3910] usb 6-1: Using ep0 maxpacket: 16
[ 929.812288][T31855] loop6: detected capacity change from 0 to 32768
[ 929.822429][ T3910] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 929.850290][ T3910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 929.888594][T31908] xt_CONNSECMARK: invalid mode: 0
[ 929.892288][ T3910] usb 6-1: Product: syz
[ 929.930566][ T3910] usb 6-1: Manufacturer: syz
[ 929.951510][ T3910] usb 6-1: SerialNumber: syz
[ 929.982046][ T3910] r8152-cfgselector 6-1: config 0 descriptor??
[ 930.403789][ T3910] r8152-cfgselector 6-1: Unknown version 0x0000
[ 930.410589][ T3910] r8152-cfgselector 6-1: bad CDC descriptors
[ 930.453096][ T3910] r8152-cfgselector 6-1: Unknown version 0x0000
[ 930.487027][ T3910] r8152-cfgselector 6-1: USB disconnect, device number 35
[ 930.713983][T31940] loop7: detected capacity change from 0 to 4096
[ 930.748972][T31940] EXT4-fs (loop7): Test dummy encryption mode enabled
[ 930.822880][T31940] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[ 930.856266][T31940] EXT4-fs (loop7): re-mounted. Quota mode: writeback.
[ 930.992243][T27391] EXT4-fs (loop7): unmounting filesystem.
[ 931.331144][ T5225] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 931.521895][T31987] netlink: 'syz.3.10295': attribute type 1 has an invalid length.
[ 931.551350][ T5225] usb 7-1: Using ep0 maxpacket: 32
[ 931.554272][T31991] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 931.562027][ T5225] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 931.591011][T31991] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 931.608812][ T5225] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 931.620455][T31991] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 931.623600][ T5225] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 931.649517][T31991] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 931.665149][T31995] loop0: detected capacity change from 0 to 2048
[ 931.675558][ T5225] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 931.695925][T31991] batman_adv: batadv0: Removing interface: netdevsim0
[ 931.705720][T31995] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 931.730412][ T5225] usb 7-1: config 0 descriptor??
[ 931.764635][ T5225] hub 7-1:0.0: USB hub found
[ 931.772682][T31991] bridge0: port 4(batadv0) entered disabled state
[ 931.875479][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 931.882346][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 931.928898][T31991] device batadv0 left promiscuous mode
[ 931.939873][T31991] bridge0: port 4(batadv0) entered disabled state
[ 931.955708][ T5225] hub 7-1:0.0: config failed, hub has too many ports! (err -19)
[ 931.979232][T32001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10287'.
[ 932.170196][ T5225] usbhid 7-1:0.0: can't add hid device: -71
[ 932.187258][ T5225] usbhid: probe of 7-1:0.0 failed with error -71
[ 932.278953][ T5225] usb 7-1: USB disconnect, device number 35
[ 932.595475][T32043] loop0: detected capacity change from 0 to 256
[ 932.932816][T32062] loop5: detected capacity change from 0 to 128
[ 932.966616][T32060] libceph: resolve '.
[ 932.966616][T32060] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$
[ 932.966616][T32060] ' (ret=-3): failed
[ 933.049406][T32072] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10305'.
[ 933.429177][T32090] netlink: 'syz.6.10311': attribute type 1 has an invalid length.
[ 933.469991][T32094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10312'.
[ 933.471433][T32090] netlink: 'syz.6.10311': attribute type 3 has an invalid length.
[ 933.550983][T32090] netlink: 224 bytes leftover after parsing attributes in process `syz.6.10311'.
[ 933.881430][T32111] netlink: 760 bytes leftover after parsing attributes in process `syz.7.10317'.
[ 933.940667][T32118] netlink: 'syz.3.10318': attribute type 8 has an invalid length.
[ 933.995137][T32118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10318'.
[ 934.110536][T32127] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 934.174834][T32130] loop6: detected capacity change from 0 to 256
[ 934.227393][T32130] exfat: Deprecated parameter 'utf8'
[ 934.261191][T32130] exfat: Deprecated parameter 'utf8'
[ 934.322543][T32130] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 934.385850][T32141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10326'.
[ 934.657168][ T3910] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[ 934.865317][ T3910] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 934.890088][ T3910] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 934.913629][ T3910] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 934.954929][ T3910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 934.979811][ T3910] usb 8-1: Product: syz
[ 935.000794][ T3910] usb 8-1: Manufacturer: syz
[ 935.022324][ T3910] usb 8-1: SerialNumber: syz
[ 935.063741][ T3910] usb 8-1: config 0 descriptor??
[ 935.085614][ T3910] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 935.205504][T32192] netlink: 'syz.0.10341': attribute type 7 has an invalid length.
[ 935.235625][T32192] netlink: 140 bytes leftover after parsing attributes in process `syz.0.10341'.
[ 935.443115][ T5220] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 935.460856][ T5220] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 935.471742][ T5225] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 935.495389][T21362] usb 8-1: USB disconnect, device number 4
[ 935.607440][T32225] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10345'.
[ 935.745873][T32230] loop3: detected capacity change from 0 to 64
[ 935.783832][T32230] MINIX-fs: bad superblock
[ 935.840982][ T4626] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 936.082377][ T5225] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 936.281464][ T5225] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 936.370170][T32250] loop3: detected capacity change from 0 to 8192
[ 936.414417][T32250] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 936.467225][T32250] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[ 936.481258][T32250] REISERFS (device loop3): using ordered data mode
[ 936.487884][T32250] reiserfs: using flush barriers
[ 936.544175][T32250] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 936.569467][T32250] REISERFS (device loop3): checking transaction log (loop3)
[ 936.651091][T32250] REISERFS (device loop3): Using tea hash to sort names
[ 936.663447][T32250] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[ 936.794448][T32284] loop7: detected capacity change from 0 to 8
[ 936.852295][T32284] cramfs: bad data blocksize 3959421443
[ 936.918776][T32284] cramfs: bad data blocksize 4294965915
[ 936.946369][T32284] cramfs: bad data blocksize 802397048
[ 936.968762][T32284] cramfs: bad data blocksize 4294742353
[ 936.982123][T32284] cramfs: bad data blocksize 3367320904
[ 936.988188][T32284] cramfs: bad data blocksize 859179931
[ 937.036720][T32284] cramfs: bad data blocksize 3436389781
[ 937.049700][T32284] cramfs: bad data blocksize 4294365136
[ 937.060221][T32284] cramfs: bad data blocksize 4294967040
[ 937.070360][T32284] cramfs: bad data blocksize 3959421443
[ 937.088828][ T26] kauditd_printk_skb: 8 callbacks suppressed
[ 937.088843][ T26] audit: type=1800 audit(937.021:441): pid=32284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10364" name="file2" dev="loop7" ino=268 res=0 errno=0
[ 937.241190][ T26] audit: type=1326 audit(937.131:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32300 comm="syz.3.10366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 937.290481][ T26] audit: type=1326 audit(937.141:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32300 comm="syz.3.10366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 937.422082][ T26] audit: type=1326 audit(937.141:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32300 comm="syz.3.10366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 937.466327][ T26] audit: type=1326 audit(937.141:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32300 comm="syz.3.10366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 937.507573][T32319] loop5: detected capacity change from 0 to 512
[ 937.620147][T32319] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 937.695365][T32319] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.10373: corrupted xattr block 33
[ 937.753508][T32332] loop7: detected capacity change from 0 to 8
[ 937.785236][T32333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10376'.
[ 937.812197][T32319] EXT4-fs error (device loop5): ext4_get_inode_usage:835: inode #15: comm syz.5.10373: corrupted xattr block 33
[ 937.832387][T32332] SQUASHFS error: Failed to read block 0xdfa: -5
[ 937.859555][T32332] SQUASHFS error: Unable to read metadata cache entry [dfa]
[ 937.905430][T32332] SQUASHFS error: Failed to read block 0x4e8: -5
[ 937.924082][ T4980] EXT4-fs (loop5): unmounting filesystem.
[ 937.935331][T32332] SQUASHFS error: Failed to read block 0xed04f1: -5
[ 937.981221][T32332] SQUASHFS error: Failed to read block 0x4de: -5
[ 938.011844][T32332] SQUASHFS error: Failed to read block 0x4de: -5
[ 938.035666][T32332] SQUASHFS error: Failed to read block 0x4de: -5
[ 938.064806][T32332] SQUASHFS error: Failed to read block 0x4de: -5
[ 938.081163][T32332] SQUASHFS error: Failed to read block 0x4de: -5
[ 938.102134][T32332] SQUASHFS error: Failed to read block 0x4de: -5
[ 938.128772][T32332] SQUASHFS error: Failed to read block 0x4e8: -5
[ 938.151294][ T26] audit: type=1800 audit(938.091:446): pid=32332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10374" name="file1" dev="loop7" ino=5 res=0 errno=0
[ 939.068000][T32400] ptrace attach of "./syz-executor exec"[10060] was attempted by ""[32400]
[ 939.151066][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 939.527421][T32419] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 939.818844][T32367] loop3: detected capacity change from 0 to 40427
[ 939.831679][T32434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10408'.
[ 939.838517][T32367] F2FS-fs (loop3): Invalid segment count (0)
[ 939.849626][T32367] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[ 939.869541][T32430] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2
[ 939.870034][T32367] F2FS-fs (loop3): invalid crc value
[ 939.890164][T32367] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 940.126685][T32367] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[ 940.149634][T32367] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 940.220499][T32367] F2FS-fs (loop3): Can't flush 65535 in 0 for segs_per_sec 1 != 1
[ 941.099048][T32485] loop6: detected capacity change from 0 to 4096
[ 941.192471][T32485] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[ 941.232899][T32485] ntfs3: loop6: Failed to load $Extend.
[ 941.370122][T32508] netlink: 276 bytes leftover after parsing attributes in process `syz.7.10426'.
[ 941.950450][T32487] loop5: detected capacity change from 0 to 32768
[ 941.989634][T32533] IPv6: NLM_F_CREATE should be specified when creating new route
[ 942.043166][T32537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10435'.
[ 942.080649][T32537] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10435'.
[ 942.110136][T32537] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10435'.
[ 942.111852][ T4337] read_mapping_page failed!
[ 942.159385][ T4337] ERROR: (device loop5): txCommit:
[ 942.159385][ T4337]
[ 942.210978][ T4337] ERROR: (device loop5): remounting filesystem as read-only
[ 942.219154][ T4337] jfs_write_inode: jfs_commit_inode failed!
[ 942.305408][T32547] overlayfs: conflicting options: userxattr,redirect_dir=on
[ 942.750078][T32557] xt_CT: No such helper "pptp"
[ 942.855021][T32570] loop5: detected capacity change from 0 to 1024
[ 942.912889][T32570] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 942.920302][T32570] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 942.968432][T32570] EXT4-fs: Ignoring removed i_version option
[ 942.988707][T32570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 943.068171][T32585] loop6: detected capacity change from 0 to 64
[ 943.083814][T32570] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[ 943.266001][T32595] afs: Unknown parameter 'dont_hash'
[ 943.337028][ T4980] EXT4-fs (loop5): unmounting filesystem.
[ 943.693835][ T26] audit: type=1326 audit(943.631:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32616 comm="syz.3.10458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 943.720452][T32617] qrtr: Invalid version 0
[ 943.737369][ T26] audit: type=1326 audit(943.631:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32616 comm="syz.3.10458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 943.848385][ T26] audit: type=1326 audit(943.631:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32616 comm="syz.3.10458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 943.976426][ T26] audit: type=1326 audit(943.631:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32616 comm="syz.3.10458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 944.263086][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10465'.
[ 944.594900][ T26] audit: type=1326 audit(944.531:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.3.10471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 944.636048][T32663] tmpfs: Bad value for 'mpol'
[ 944.690281][ T26] audit: type=1326 audit(944.581:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.3.10471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 944.712255][ C0] vkms_vblank_simulate: vblank timer overrun
[ 944.822681][ T26] audit: type=1326 audit(944.581:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.3.10471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 944.846304][ C0] vkms_vblank_simulate: vblank timer overrun
[ 944.872437][T32674] cifs: Unknown parameter '[bIT&:"1:ӭ'4,Zz-#F<]%gC
[ 944.872437][T32674] SȘȞZ6'
[ 944.923964][T32681] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10477'.
[ 944.948418][ T26] audit: type=1326 audit(944.581:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.3.10471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 945.879299][T32728] netlink: 244 bytes leftover after parsing attributes in process `syz.0.10494'.
[ 946.100212][T32740] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[ 946.100212][T32740] program syz.0.10498 not setting count and/or reply_len properly
[ 946.276041][T32754] netlink: 'syz.3.10501': attribute type 1 has an invalid length.
[ 946.591108][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 947.005000][ T326] loop7: detected capacity change from 0 to 2048
[ 947.088790][ T326] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 947.128983][ T326] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #12: block 2: comm syz.7.10514: lblock 0 mapped to illegal pblock 2 (length 1)
[ 947.353111][T27391] EXT4-fs (loop7): unmounting filesystem.
[ 947.366280][ T314] loop3: detected capacity change from 0 to 32768
[ 947.431449][ T314] (syz.3.10509,314,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 947.482957][ T314] (syz.3.10509,314,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 947.599210][ T314] JBD2: Ignoring recovery information on journal
[ 947.645667][ T346] loop7: detected capacity change from 0 to 24
[ 947.713314][ T346] MTD: Attempt to mount non-MTD device "/dev/loop7"
[ 947.741904][ T346] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 947.773914][ T346] VFS: Lookup of 'file0' in romfs loop7 would have caused loop
[ 947.852231][ T314] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 947.891343][ T26] audit: type=1400 audit(947.831:455): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=350 comm="syz.5.10519"
[ 947.965477][ T317] loop6: detected capacity change from 0 to 32768
[ 948.215126][ T4280] ocfs2: Unmounting device (7,3) on (node local)
[ 948.531355][ T365] lo speed is unknown, defaulting to 1000
[ 948.661575][ T384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10527'.
[ 948.704870][ T386] loop6: detected capacity change from 0 to 512
[ 948.777771][ T386] EXT4-fs: Ignoring removed orlov option
[ 948.791023][T21362] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 948.814580][ T386] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 948.883331][ T386] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 948.904019][ T386] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10526: bg 0: block 248: padding at end of block bitmap is not set
[ 948.978049][ T386] Quota error (device loop6): write_blk: dquota write failed
[ 949.001216][T21362] usb 6-1: Using ep0 maxpacket: 32
[ 949.011245][T21362] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[ 949.021159][ T386] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[ 949.033852][ T386] EXT4-fs error (device loop6): ext4_acquire_dquot:6841: comm syz.6.10526: Failed to acquire dquot type 1
[ 949.060366][T21362] usb 6-1: config 0 has no interface number 0
[ 949.068170][ T386] EXT4-fs (loop6): 1 truncate cleaned up
[ 949.086168][T21362] usb 6-1: config 0 interface 132 has no altsetting 0
[ 949.122376][ T395] loop3: detected capacity change from 0 to 512
[ 949.127044][T21362] usb 6-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75
[ 949.133582][ T365] vxcan1 speed is unknown, defaulting to 1000
[ 949.168490][ T395] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[ 949.169649][T21362] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 949.202514][T21362] usb 6-1: Product: syz
[ 949.206854][T21362] usb 6-1: Manufacturer: syz
[ 949.221099][T21362] usb 6-1: SerialNumber: syz
[ 949.232427][ T386] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[ 949.257546][ T395] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 949.258501][T21362] usb 6-1: config 0 descriptor??
[ 949.294352][ T395] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[ 949.353493][ T386] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[ 949.361155][ T395] Quota error (device loop3): write_blk: dquota write failed
[ 949.381456][ T395] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[ 949.403460][ T395] Quota error (device loop3): write_blk: dquota write failed
[ 949.421284][ T386] EXT4-fs error (device loop6): __ext4_remount:6650: comm syz.6.10526: Abort forced by user
[ 949.445794][ T395] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[ 949.477825][ T386] EXT4-fs (loop6): Remounting filesystem read-only
[ 949.491109][ T395] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.10529: Failed to acquire dquot type 1
[ 949.497578][ T386] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[ 949.531615][ T395] EXT4-fs (loop3): 1 truncate cleaned up
[ 949.539969][T21362] cdc_subset 6-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.5-1, Belkin, eTEK, or compatible, 32:f5:cf:14:d7:14
[ 949.561132][ T395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 949.610405][ T395] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[ 949.628450][T10060] EXT4-fs (loop6): unmounting filesystem.
[ 949.690405][ T395] EXT4-fs (loop3): re-mounted. Quota mode: writeback.
[ 949.836650][ T9168] usb 6-1: USB disconnect, device number 36
[ 949.857309][ T9168] cdc_subset 6-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.5-1, Belkin, eTEK, or compatible
[ 949.872237][ T4280] EXT4-fs (loop3): unmounting filesystem.
[ 950.204618][ T440] netlink: 'syz.0.10535': attribute type 7 has an invalid length.
[ 950.343805][ T26] audit: type=1326 audit(950.271:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=451 comm="syz.3.10536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 950.454754][ T26] audit: type=1326 audit(950.321:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=451 comm="syz.3.10536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 950.573451][ T26] audit: type=1326 audit(950.321:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=451 comm="syz.3.10536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 950.676736][ T26] audit: type=1326 audit(950.321:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=451 comm="syz.3.10536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70df9c819 code=0x7ffc0000
[ 951.121072][ T501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10546'.
[ 951.277765][ T511] PKCS8: Unsupported PKCS#8 version
[ 951.733384][ T530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10554'.
[ 951.810588][ T528] loop5: detected capacity change from 0 to 1024
[ 951.899292][ T528] hfsplus: failed to extend attributes file
[ 952.344877][ T559] netlink: 6 bytes leftover after parsing attributes in process `syz.7.10560'.
[ 952.372479][ T559] netlink: 6 bytes leftover after parsing attributes in process `syz.7.10560'.
[ 952.471203][ T563] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10561'.
[ 952.581089][ T563] netlink: 'syz.6.10561': attribute type 1 has an invalid length.
[ 952.631845][ T502] loop3: detected capacity change from 0 to 32768
[ 952.743551][ T573] netlink: 168864 bytes leftover after parsing attributes in process `syz.7.10564'.
[ 952.755565][ T502] __jfs_setxattr: xattr_size = 72, new_size = 12818
[ 952.808074][ T573] netlink: zone id is out of range
[ 952.922893][ T573] netlink: del zone limit has 4 unknown bytes
[ 952.977520][ T583] netlink: 798 bytes leftover after parsing attributes in process `syz.0.10566'.
[ 953.334219][ T598] loop0: detected capacity change from 0 to 128
[ 953.400373][ T601] loop7: detected capacity change from 0 to 64
[ 953.751083][ T3910] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 953.951142][ T3910] usb 4-1: Using ep0 maxpacket: 8
[ 953.959805][ T3910] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 954.013672][ T3910] usb 4-1: New USB device found, idVendor=031b, idProduct=0201, bcdDevice=2a.d5
[ 954.060957][ T3910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 954.097872][ T3910] usb 4-1: config 0 descriptor??
[ 954.364624][ T9168] usb 4-1: USB disconnect, device number 42
[ 954.663144][ T676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10588'.
[ 954.668608][ T670] loop7: detected capacity change from 0 to 4096
[ 954.726920][ T676] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10588'.
[ 955.614467][ T711] loop6: detected capacity change from 0 to 4096
[ 955.637596][ T711] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[ 956.281489][ T783] netlink: 25 bytes leftover after parsing attributes in process `syz.6.10608'.
[ 956.286340][ T785] [U]
[ 956.294740][ T785] [U]
[ 956.297581][ T785] [U]
[ 956.300488][ T785] [U]
[ 956.380758][ T785] [U]
[ 956.383690][ T785] [U]
[ 956.386565][ T785] [U]
[ 956.389391][ T785] [U]
[ 956.421672][ T785] [U]
[ 956.425011][ T785] [U]
[ 956.428009][ T785] [U]
[ 956.528009][ T797] loop5: detected capacity change from 0 to 64
[ 956.569771][ T26] audit: type=1326 audit(956.501:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=798 comm="syz.7.10615" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82b439c819 code=0x0
[ 956.601434][ T784] [U]
[ 956.826499][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10618'.
[ 956.887455][ T811] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10618'.
[ 956.984026][ T818] loop3: detected capacity change from 0 to 2048
[ 957.071164][ T818] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 957.498248][ T849] loop7: detected capacity change from 0 to 1024
[ 957.605604][ T849] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 957.750035][ T869] netlink: 'syz.0.10636': attribute type 2 has an invalid length.
[ 957.771566][ T869] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10636'.
[ 957.850466][T27391] EXT4-fs (loop7): unmounting filesystem.
[ 958.362438][ T913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10643'.
[ 958.463594][ T919] loop6: detected capacity change from 0 to 1024
[ 958.528346][ T919] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only.
[ 959.551292][T16903] Bluetooth: hci2: command 0x0406 tx timeout
[ 959.571839][ T979] xt_connbytes: Forcing CT accounting to be enabled
[ 959.611544][ T979] set match dimension is over the limit!
[ 959.756022][ T989] loop6: detected capacity change from 0 to 256
[ 959.787953][ T989] exfat: Deprecated parameter 'namecase'
[ 959.826252][ T989] exfat: Deprecated parameter 'utf8'
[ 959.839738][ T995] loop0: detected capacity change from 0 to 64
[ 959.880463][ T928] loop3: detected capacity change from 0 to 32768
[ 959.924713][ T989] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[ 960.084578][ T928] XFS (loop3): Mounting V5 Filesystem
[ 960.201031][ T928] XFS (loop3): Ending clean mount
[ 960.247222][ T928] XFS (loop3): Quotacheck needed: Please wait.
[ 960.501049][ T928] XFS (loop3): Quotacheck: Done.
[ 960.628211][ T1056] netlink: 'syz.5.10675': attribute type 1 has an invalid length.
[ 960.638938][ T4280] XFS (loop3): Unmounting Filesystem
[ 960.690328][ T1056] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10675'.
[ 961.085200][ T1074] loop7: detected capacity change from 0 to 256
[ 961.187321][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.197967][ T1074] FAT-fs (loop7): Filesystem has been set read-only
[ 961.214956][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.266713][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.332963][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.371172][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.410562][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.431179][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.483005][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.541329][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.591862][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.654400][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.681652][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.742333][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.768686][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.802757][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.841048][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.871400][ T1106] loop6: detected capacity change from 0 to 2048
[ 961.879632][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.894598][ T1106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 961.904589][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 961.951033][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 961.991808][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 962.036843][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 962.084798][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 962.121085][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 962.153734][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 962.184092][ T1074] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 198)
[ 962.216696][ T26] audit: type=1800 audit(962.151:461): pid=1074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10681" name="file1" dev="loop7" ino=1048748 res=0 errno=0
[ 962.779004][ T1100] loop3: detected capacity change from 0 to 32768
[ 962.925664][ T1143] loop7: detected capacity change from 0 to 1024
[ 963.240341][ T1135] loop6: detected capacity change from 0 to 32768
[ 963.327567][ T1135] JBD2: Ignoring recovery information on journal
[ 963.339566][ T1151] xt_nat: multiple ranges no longer supported
[ 963.560547][ T1135] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 963.795673][T10060] ocfs2: Unmounting device (7,6) on (node local)
[ 963.993002][ T1174] loop0: detected capacity change from 0 to 64
[ 964.411112][ T1195] AppArmor: change_hat: Invalid input '0'
[ 964.711839][ T1213] ubi16: attaching mtd0
[ 964.789888][ T1213] ubi16: scanning is finished
[ 964.805045][ T1218] netlink: 'syz.5.10719': attribute type 1 has an invalid length.
[ 964.819016][ T1213] ubi16: empty MTD device detected
[ 964.842897][ T1220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10720'.
[ 964.899426][ T1220] netlink: 'syz.0.10720': attribute type 1 has an invalid length.
[ 964.951069][ T1220] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10720'.
[ 964.997818][ T1213] ubi16: attached mtd0 (name "mtdram test device", size 0 MiB)
[ 965.041258][ T1213] ubi16: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[ 965.079936][ T1213] ubi16: min./max. I/O unit sizes: 1/64, sub-page size 1
[ 965.111768][ T1213] ubi16: VID header offset: 64 (aligned 64), data offset: 128
[ 965.131109][ T1213] ubi16: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[ 965.161104][ T1213] ubi16: user volume: 0, internal volumes: 1, max. volumes count: 23
[ 965.191338][ T1213] ubi16: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4193765986
[ 965.241165][ T1213] ubi16: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[ 965.287111][ T1225] ubi16: background thread "ubi_bgt16d" started, PID 1225
[ 965.317105][ T1233] loop6: detected capacity change from 0 to 4096
[ 965.461747][ T1233] ntfs: volume version 3.1.
[ 965.916037][ T1249] loop3: detected capacity change from 0 to 4096
[ 965.966009][ T1249] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[ 966.048566][ T1249] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[ 966.058718][ T1215] loop7: detected capacity change from 0 to 32768
[ 966.210398][ T1215] XFS (loop7): Mounting V5 Filesystem
[ 966.479630][ T1215] XFS (loop7): Ending clean mount
[ 966.487689][ T1215] XFS (loop7): Quotacheck needed: Please wait.
[ 966.576870][ T1292] tipc: Can't bind to reserved service type 2
[ 966.676584][ T1215] XFS (loop7): Quotacheck: Done.
[ 966.827422][ T1301] loop6: detected capacity change from 0 to 256
[ 966.933695][ T1301] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe516, utbl_chksum : 0xe619d30d)
[ 966.976100][T27391] XFS (loop7): Unmounting Filesystem
[ 967.417177][ T1285] loop0: detected capacity change from 0 to 32768
[ 967.554389][ T1285] JBD2: Unknown checksum type
[ 967.559861][ T1285] (syz.0.10734,1285,1):ocfs2_journal_wipe:1183 ERROR: status = -22
[ 967.621018][ T1285] (syz.0.10734,1285,0):ocfs2_check_volume:2420 ERROR: status = -22
[ 967.631791][ T1285] (syz.0.10734,1285,0):ocfs2_check_volume:2489 ERROR: status = -22
[ 967.661796][ T1285] (syz.0.10734,1285,1):ocfs2_mount_volume:1821 ERROR: status = -22
[ 967.680081][ T26] audit: type=1326 audit(967.611:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1342 comm="syz.6.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 967.703281][ T26] audit: type=1326 audit(967.631:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1342 comm="syz.6.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 967.723818][ T1285] (syz.0.10734,1285,1):ocfs2_fill_super:1176 ERROR: status = -22
[ 967.727727][ T26] audit: type=1326 audit(967.631:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1342 comm="syz.6.10751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 967.785018][ T1285] exFAT-fs (loop0): invalid boot record signature
[ 967.792851][ T1285] exFAT-fs (loop0): failed to read boot sector
[ 967.799491][ T1285] exFAT-fs (loop0): failed to recognize exfat type
[ 968.180432][ T1361] loop5: detected capacity change from 0 to 16
[ 968.203198][ T1361] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 968.246549][ T1361] cramfs: Error -3 while decompressing!
[ 968.263852][ T4626] udevd[4626]: incorrect cramfs checksum on /dev/loop5
[ 968.293795][ T1361] cramfs: ffffffff96d91248(27)->ffff88804ed31000(4096)
[ 968.324889][ T1366] loop3: detected capacity change from 0 to 1024
[ 968.335538][ T1361] cramfs: Error -3 while decompressing!
[ 968.348248][ T1361] cramfs: ffffffff96d91248(27)->ffff88804ed31000(4096)
[ 968.389098][ T26] audit: type=1800 audit(968.321:465): pid=1361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.10757" name="file2" dev="loop5" ino=348 res=0 errno=0
[ 970.008446][ T1462] loop7: detected capacity change from 0 to 256
[ 970.035239][ T1462] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 970.346911][ T1475] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10790'.
[ 970.385574][ T1475] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10790'.
[ 970.671249][ T9168] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 970.770485][ T1501] loop3: detected capacity change from 0 to 2048
[ 970.796810][ T1505] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10799'.
[ 970.821259][ T1506] loop0: detected capacity change from 0 to 512
[ 970.830673][ T1501] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[ 970.842150][ T1505] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10799'.
[ 970.871166][ T9168] usb 7-1: Using ep0 maxpacket: 8
[ 970.880774][ T9168] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 970.904366][ T1501] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 970.930812][ T1506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 970.931163][ T1505] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 970.971057][ T9168] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 971.016925][ T9168] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 971.045559][ T1506] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.10800: bg 0: block 248: padding at end of block bitmap is not set
[ 971.050135][ T1501] UDF-fs: error (device loop3): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field
[ 971.064276][ T9168] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 971.090398][ T1506] Quota error (device loop0): write_blk: dquota write failed
[ 971.094760][ T9168] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 971.111822][ T9168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 971.118631][ T1505] 8021q: adding VLAN 0 to HW filter on device bond3
[ 971.124280][ T9168] usb 7-1: Product: syz
[ 971.132877][ T9168] usb 7-1: Manufacturer: syz
[ 971.138318][ T9168] usb 7-1: SerialNumber: syz
[ 971.159706][ T1482] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 971.163931][ T1506] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[ 971.190818][ T9168] cdc_ether: probe of 7-1:1.0 failed with error -22
[ 971.201349][ T9168] usbtest 7-1:1.0: Linux user mode ISO test driver
[ 971.208377][ T9168] usbtest 7-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[ 971.244977][ T1506] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.10800: Failed to acquire dquot type 0
[ 971.412656][ T4277] EXT4-fs (loop0): unmounting filesystem.
[ 971.594891][ T9168] usb 7-1: USB disconnect, device number 36
[ 971.757476][ T1567] loop0: detected capacity change from 0 to 2048
[ 971.850190][ T1567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[ 971.883620][ T1493] loop5: detected capacity change from 0 to 40427
[ 971.903401][ T1493] F2FS-fs (loop5): Invalid log_blocksize (64), supports only 12
[ 971.911666][ T1493] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[ 971.924189][ T1567] EXT4-fs error (device loop0): ext4_find_extent:900: inode #2: comm syz.0.10802: inode has invalid extent depth: 7
[ 971.952708][ T1493] F2FS-fs (loop5): invalid crc value
[ 972.014754][ T1493] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[ 972.095842][ T4277] EXT4-fs (loop0): unmounting filesystem.
[ 972.235336][ T1493] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1
[ 972.281333][ T1493] F2FS-fs (loop5): Start checkpoint disabled!
[ 972.320023][ T1493] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[ 972.329784][ T1601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10808'.
[ 972.341413][ T1493] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 972.533254][ T1607] loop7: detected capacity change from 0 to 256
[ 972.579490][ T1607] exfat: Deprecated parameter 'utf8'
[ 972.625909][ T1607] exfat: Deprecated parameter 'namecase'
[ 972.666099][ T1607] exfat: Deprecated parameter 'namecase'
[ 972.760805][ T1607] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 973.258437][ T1646] loop6: detected capacity change from 0 to 128
[ 973.353472][ T1646] VFS: Found a Xenix FS (block size = 1024) on device loop6
[ 973.420072][ T1650] loop5: detected capacity change from 0 to 2048
[ 973.452077][ T26] audit: type=1326 audit(973.391:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1652 comm="syz.0.10827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48099c819 code=0x7ffc0000
[ 973.601505][ T1650] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[ 973.611249][ T26] audit: type=1326 audit(973.431:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1652 comm="syz.0.10827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fe48099c819 code=0x7ffc0000
[ 973.674328][T10060] sysv_free_block: flc_count > flc_size
[ 973.692245][T10060] sysv_free_block: flc_count > flc_size
[ 973.708454][T10060] sysv_free_block: flc_count > flc_size
[ 973.730227][ T1650] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #15: comm syz.5.10824: corrupted xattr block 128
[ 973.742872][ T26] audit: type=1326 audit(973.441:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1652 comm="syz.0.10827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48099c819 code=0x7ffc0000
[ 973.772455][T10060] sysv_free_block: flc_count > flc_size
[ 973.778964][T10060] sysv_free_block: flc_count > flc_size
[ 973.786403][T10060] sysv_free_block: flc_count > flc_size
[ 973.792653][T10060] sysv_free_block: flc_count > flc_size
[ 973.814327][ T26] audit: type=1326 audit(973.441:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1652 comm="syz.0.10827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe48099c819 code=0x7ffc0000
[ 973.849390][T10060] sysv_free_block: flc_count > flc_size
[ 973.869264][T10060] sysv_free_block: flc_count > flc_size
[ 973.892737][T10060] sysv_free_block: flc_count > flc_size
[ 973.923171][T10060] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 973.927437][ T1674] device gre0 left promiscuous mode
[ 973.968877][ T1677] sctp: [Deprecated]: syz.3.10832 (pid 1677) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 973.968877][ T1677] Use struct sctp_sack_info instead
[ 973.987308][ T1674] device wlan0 left promiscuous mode
[ 974.058564][ T4980] EXT4-fs (loop5): unmounting filesystem.
[ 974.399715][ T1693] loop0: detected capacity change from 0 to 164
[ 974.461816][ T4390] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[ 975.283930][ T1675] loop7: detected capacity change from 0 to 32768
[ 975.432362][ T1675] XFS (loop7): Mounting V5 Filesystem
[ 975.573639][ T1675] XFS (loop7): Ending clean mount
[ 975.602664][ T1675] XFS (loop7): Quotacheck needed: Please wait.
[ 975.765675][ T1675] XFS (loop7): Quotacheck: Done.
[ 975.991114][T27391] XFS (loop7): Unmounting Filesystem
[ 976.893454][ T1764] loop5: detected capacity change from 0 to 32768
[ 977.016679][T21362] XFS (loop5): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[ 977.111095][ T1764] XFS (loop5): SB validate failed with error -22.
[ 977.683662][ T1842] loop7: detected capacity change from 0 to 8
[ 977.858390][ T1849] netlink: 'syz.3.10879': attribute type 1 has an invalid length.
[ 977.914953][ T1849] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.10879'.
[ 978.303245][ T1865] device bond0 entered promiscuous mode
[ 978.309388][ T1865] 8021q: adding VLAN 0 to HW filter on device bond0
[ 978.678113][ T1908] loop5: detected capacity change from 0 to 4096
[ 978.688630][ T1915] loop0: detected capacity change from 0 to 512
[ 978.722220][ T1908] ntfs3: Invalid value for gid.
[ 978.732540][ T1917] loop3: detected capacity change from 0 to 1024
[ 978.752171][ T1915] EXT4-fs: Ignoring removed i_version option
[ 978.803474][ T1915] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[ 978.825221][ T1915] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[ 978.899522][ T1915] EXT4-fs (loop0): 1 truncate cleaned up
[ 978.971137][ T1915] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[ 979.052188][ T1915] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[ 979.224224][ T4277] EXT4-fs (loop0): unmounting filesystem.
[ 979.513373][ T1907] loop7: detected capacity change from 0 to 32768
[ 979.676175][ T1907] XFS (loop7): Mounting V5 Filesystem
[ 979.940082][ T1907] XFS (loop7): Ending clean mount
[ 980.101560][T27391] XFS (loop7): Unmounting Filesystem
[ 980.382136][ T2013] loop3: detected capacity change from 0 to 1024
[ 980.499133][ T26] audit: type=1326 audit(980.431:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.6.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 980.610174][ T26] audit: type=1326 audit(980.431:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.6.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 980.721128][ T26] audit: type=1326 audit(980.431:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.6.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 980.809596][ T26] audit: type=1326 audit(980.431:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2017 comm="syz.6.10912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 981.642967][ T2053] loop3: detected capacity change from 0 to 4096
[ 981.698940][ T2053] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[ 982.191351][ T2038] loop6: detected capacity change from 0 to 32768
[ 982.201428][ T2076] i2c i2c-0: Invalid block write size 34
[ 982.230359][ T2078] xt_TCPMSS: Only works on TCP SYN packets
[ 982.298432][ T2038] jfs_lookup: dtSearch returned -5
[ 982.768206][ T2093] loop6: detected capacity change from 0 to 4096
[ 982.811673][ T2093] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[ 982.876106][ T2096] loop7: detected capacity change from 0 to 4096
[ 982.924412][ T2096] ntfs3: loop7: ino=3, Correct links count -> 2.
[ 983.028378][ T2096] ntfs3: loop7: Mark volume as dirty due to NTFS errors
[ 983.139761][ T2114] loop3: detected capacity change from 0 to 64
[ 983.726774][ T2138] loop7: detected capacity change from 0 to 1024
[ 983.798816][ T2138] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[ 984.002614][ T2151] loop6: detected capacity change from 0 to 1024
[ 984.027100][T27391] EXT4-fs (loop7): unmounting filesystem.
[ 984.564022][ T2181] bridge0: port 2(hsr0) entered blocking state
[ 984.574028][ T2181] bridge0: port 2(hsr0) entered disabled state
[ 984.589932][ T2181] device hsr0 entered promiscuous mode
[ 984.601374][ T5224] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[ 984.803325][ T5224] usb 7-1: config index 0 descriptor too short (expected 39, got 27)
[ 984.821057][ T5224] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 984.850335][ T5224] usb 7-1: config 0 interface 0 has no altsetting 0
[ 984.891759][ T5224] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 984.930290][ T5224] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 984.941025][ T5224] usb 7-1: Product: syz
[ 984.945460][ T5224] usb 7-1: Manufacturer: syz
[ 984.950317][ T5224] usb 7-1: SerialNumber: syz
[ 984.974799][ T5224] usb 7-1: config 0 descriptor??
[ 984.993953][ T5224] hub 7-1:0.0: bad descriptor, ignoring hub
[ 985.000566][ T5224] hub: probe of 7-1:0.0 failed with error -5
[ 985.023788][ T5224] usb 7-1: selecting invalid altsetting 0
[ 985.039698][ T2175] loop5: detected capacity change from 0 to 32768
[ 985.079473][ T2175] (syz.5.10953,2175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 985.108636][ T2175] (syz.5.10953,2175,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 985.157088][ T2175] JBD2: Ignoring recovery information on journal
[ 985.267186][ T2175] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 985.342077][ T5224] usb 7-1: USB disconnect, device number 37
[ 985.537194][ T2224] netlink: 'syz.3.10961': attribute type 11 has an invalid length.
[ 985.559137][ T2224] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10961'.
[ 985.570152][ T4980] ocfs2: Unmounting device (7,5) on (node local)
[ 985.876072][ T2239] loop5: detected capacity change from 0 to 512
[ 985.891865][ T2239] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 985.897929][ T2197] loop7: detected capacity change from 0 to 32768
[ 985.990478][ T2239] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003)
[ 986.192420][ T2250] loop6: detected capacity change from 0 to 128
[ 986.349201][ T2250] Bad inode number on dev loop6: 32769 is out of range
[ 986.357204][ T2259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10968'.
[ 986.874733][ T2293] loop7: detected capacity change from 0 to 64
[ 987.127276][ T2313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10980'.
[ 987.127729][ T26] audit: type=1326 audit(987.061:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2310 comm="syz.6.10981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 987.271166][ T26] audit: type=1326 audit(987.111:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2310 comm="syz.6.10981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 987.356069][ T26] audit: type=1326 audit(987.111:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2310 comm="syz.6.10981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 987.379244][ C0] vkms_vblank_simulate: vblank timer overrun
[ 987.484976][ T26] audit: type=1326 audit(987.111:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2310 comm="syz.6.10981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 987.610910][ T26] audit: type=1326 audit(987.111:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2310 comm="syz.6.10981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 987.719666][ T26] audit: type=1326 audit(987.111:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2310 comm="syz.6.10981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 987.766922][ T26] audit: type=1326 audit(987.111:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2310 comm="syz.6.10981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 987.837473][ T26] audit: type=1326 audit(987.111:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2310 comm="syz.6.10981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 987.860557][ C0] vkms_vblank_simulate: vblank timer overrun
[ 987.911124][ T9168] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 988.136474][ T9168] usb 8-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=33.00
[ 988.177499][ T9168] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 988.220183][ T9168] usb 8-1: Product: syz
[ 988.238982][ T9168] usb 8-1: Manufacturer: syz
[ 988.256061][ T9168] usb 8-1: SerialNumber: syz
[ 988.272089][ T9168] usb 8-1: config 0 descriptor??
[ 988.290073][ T9168] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[ 988.319757][ T9168] usb 8-1: Detected FT232HP
[ 988.586280][ T2374] netlink: 'syz.5.10997': attribute type 21 has an invalid length.
[ 988.692707][ T9168] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[ 988.709361][ T9168] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 988.746625][ T9168] usb 8-1: USB disconnect, device number 5
[ 988.784557][ T9168] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 988.821659][ T9168] ftdi_sio 8-1:0.0: device disconnected
[ 988.846296][ T2403] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11000'.
[ 988.861330][ T2333] loop0: detected capacity change from 0 to 32768
[ 988.964688][ T2333] XFS (loop0): Mounting V5 Filesystem
[ 989.059218][ T2333] XFS (loop0): Ending clean mount
[ 989.085433][ T2333] XFS (loop0): Quotacheck needed: Please wait.
[ 989.239664][ T2333] XFS (loop0): Quotacheck: Done.
[ 989.514606][ T4277] XFS (loop0): Unmounting Filesystem
[ 990.305428][ T2475] loop6: detected capacity change from 0 to 8
[ 990.398768][ T26] audit: type=1800 audit(990.331:482): pid=2475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.11014" name="file0" dev="loop6" ino=1 res=0 errno=0
[ 990.628335][ T26] audit: type=1326 audit(990.561:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2496 comm="syz.5.11018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f79c819 code=0x7ffc0000
[ 991.007997][ T2525] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11024'.
[ 991.121708][ T2526] loop3: detected capacity change from 0 to 2048
[ 991.185548][ T2526] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 991.401169][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 991.496356][ T2547] tmpfs: Bad value for 'mpol'
[ 991.511600][ T2556] netlink: 'syz.0.11030': attribute type 1 has an invalid length.
[ 991.550990][T16903] Bluetooth: hci2: command 0x0405 tx timeout
[ 991.895723][ T2581] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 992.192699][ T2598] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000)
[ 992.391113][ T5220] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[ 992.613670][ T5220] usb 8-1: config 0 has an invalid interface number: 128 but max is 0
[ 992.641280][ T5220] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 992.728171][ T5220] usb 8-1: config 0 has no interface number 0
[ 992.769092][ T5220] usb 8-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 992.836700][ T5220] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 992.886144][ T5220] usb 8-1: Product: syz
[ 992.932163][ T5220] usb 8-1: Manufacturer: syz
[ 992.937114][ T5220] usb 8-1: SerialNumber: syz
[ 992.970064][ T5220] usb 8-1: config 0 descriptor??
[ 993.103260][ T2643] loop0: detected capacity change from 0 to 4096
[ 993.142022][ T2643] __ntfs_warning: 9 callbacks suppressed
[ 993.142042][ T2643] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[ 993.187474][ T5220] usb 8-1: USB disconnect, device number 6
[ 993.222683][ T2672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11055'.
[ 993.251776][ T2643] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[ 993.314734][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 993.321834][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 993.338104][ T2643] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 993.391224][ T2643] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 993.461082][ T2643] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 993.473865][ T2643] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 993.536354][ T2643] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 993.585656][ T2643] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[ 993.654677][ T2643] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[ 993.705159][ T2643] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x1, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[ 993.808931][ T2643] ntfs: volume version 3.1.
[ 994.100627][ T2704] loop5: detected capacity change from 0 to 4096
[ 994.141362][ T2704] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[ 994.241629][ T2721] 9pnet_fd: Insufficient options for proto=fd
[ 994.281910][ T2704] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[ 994.307712][ T2726] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (6)
[ 994.623406][ T2742] loop7: detected capacity change from 0 to 256
[ 994.774533][ T2742] FAT-fs (loop7): Directory bread(block 64) failed
[ 994.812710][ T2742] FAT-fs (loop7): Directory bread(block 65) failed
[ 994.819522][ T2742] FAT-fs (loop7): Directory bread(block 66) failed
[ 994.891323][ T2742] FAT-fs (loop7): Directory bread(block 67) failed
[ 994.922683][ T2742] FAT-fs (loop7): Directory bread(block 68) failed
[ 994.950054][ T2742] FAT-fs (loop7): Directory bread(block 69) failed
[ 994.988726][ T2742] FAT-fs (loop7): Directory bread(block 70) failed
[ 995.033922][ T2742] FAT-fs (loop7): Directory bread(block 71) failed
[ 995.081150][ T2742] FAT-fs (loop7): Directory bread(block 72) failed
[ 995.088034][ T2742] FAT-fs (loop7): Directory bread(block 73) failed
[ 995.149927][ T2742] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 995.180155][ T2767] loop5: detected capacity change from 0 to 1024
[ 995.237591][ T2767] hfsplus: detected inconsistent attributes file, running fsck.hfsplus is recommended.
[ 995.644329][ T2799] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value
[ 996.043220][ T2831] loop5: detected capacity change from 0 to 256
[ 996.050769][ T2831] exfat: Deprecated parameter 'namecase'
[ 996.071337][ T2831] exfat: Deprecated parameter 'namecase'
[ 996.124681][ T2831] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7808ae6a, utbl_chksum : 0xe619d30d)
[ 996.180601][ T2831] syz.5.11087: attempt to access beyond end of device
[ 996.180601][ T2831] loop5: rw=0, sector=34225520824, nr_sectors = 1 limit=256
[ 996.390026][ T2853] loop3: detected capacity change from 0 to 256
[ 996.520351][ T2853] FAT-fs (loop3): Directory bread(block 64) failed
[ 996.564607][ T2853] FAT-fs (loop3): Directory bread(block 65) failed
[ 996.606744][ T2853] FAT-fs (loop3): Directory bread(block 66) failed
[ 996.624225][ T2846] xt_CT: No such helper "netbios-ns"
[ 996.650647][ T2853] FAT-fs (loop3): Directory bread(block 67) failed
[ 996.675574][ T2853] FAT-fs (loop3): Directory bread(block 68) failed
[ 996.706509][ T2853] FAT-fs (loop3): Directory bread(block 69) failed
[ 996.746133][ T2853] FAT-fs (loop3): Directory bread(block 70) failed
[ 996.789761][ T2853] FAT-fs (loop3): Directory bread(block 71) failed
[ 996.841070][ T2853] FAT-fs (loop3): Directory bread(block 72) failed
[ 996.889095][ T2853] FAT-fs (loop3): Directory bread(block 73) failed
[ 997.448262][ T2901] device wlan0 entered promiscuous mode
[ 997.468324][ T2901] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 998.176096][ T2883] loop0: detected capacity change from 0 to 32768
[ 998.238993][ T2883] JBD2: Ignoring recovery information on journal
[ 998.304102][ T26] kauditd_printk_skb: 21 callbacks suppressed
[ 998.304121][ T26] audit: type=1326 audit(998.241:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 998.333716][ T26] audit: type=1326 audit(998.241:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 998.356776][ C0] vkms_vblank_simulate: vblank timer overrun
[ 998.366485][ T26] audit: type=1326 audit(998.301:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa60b95d04e code=0x7ffc0000
[ 998.389053][ C0] vkms_vblank_simulate: vblank timer overrun
[ 998.418035][ T26] audit: type=1326 audit(998.301:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa60b99db17 code=0x7ffc0000
[ 998.466460][ T2883] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 998.534590][ T26] audit: type=1326 audit(998.301:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 998.600908][ T26] audit: type=1326 audit(998.301:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa60b99db17 code=0x7ffc0000
[ 998.658299][ T2883] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 16896
[ 998.686871][ T26] audit: type=1326 audit(998.301:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa60b95d04e code=0x7ffc0000
[ 998.711547][ T2883] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[ 998.771215][ T2883] OCFS2: File system is now read-only.
[ 998.801119][ T2883] (syz.0.11101,2883,0):ocfs2_search_chain:1761 ERROR: status = -30
[ 998.809563][ T26] audit: type=1326 audit(998.301:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 998.845491][ T2883] (syz.0.11101,2883,0):ocfs2_search_chain:1871 ERROR: status = -30
[ 998.869075][ T2883] (syz.0.11101,2883,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[ 998.911283][ T26] audit: type=1326 audit(998.301:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2940 comm="syz.6.11120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60b99c819 code=0x7ffc0000
[ 998.921307][ T2883] (syz.0.11101,2883,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[ 998.934536][ C0] vkms_vblank_simulate: vblank timer overrun
[ 999.141357][ T2883] (syz.0.11101,2883,1):ocfs2_claim_new_inode:2226 ERROR: status = -30
[ 999.236865][ T2883] (syz.0.11101,2883,1):ocfs2_claim_new_inode:2241 ERROR: status = -30
[ 999.302814][ T2883] (syz.0.11101,2883,1):ocfs2_mknod_locked:639 ERROR: status = -30
[ 999.321548][ T2883] (syz.0.11101,2883,1):ocfs2_mknod:385 ERROR: status = -30
[ 999.336134][ T2883] (syz.0.11101,2883,1):ocfs2_mknod:502 ERROR: status = -30
[ 999.387000][ T2883] (syz.0.11101,2883,0):ocfs2_create:676 ERROR: status = -30
[ 999.443154][ T2934] loop7: detected capacity change from 0 to 32768
[ 999.462458][ T4277] ocfs2: Unmounting device (7,0) on (node local)
[ 999.602935][ T2934] JBD2: Ignoring recovery information on journal
[ 999.688141][ T2994] device bridge5 entered promiscuous mode
[ 999.801613][ T2934] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 999.878970][ T2934]
[ 999.881438][ T2934] ======================================================
[ 999.889008][ T2934] WARNING: possible circular locking dependency detected
[ 999.896675][ T2934] syzkaller #0 Not tainted
[ 999.901121][ T2934] ------------------------------------------------------
[ 999.908616][ T2934] syz.7.11116/2934 is trying to acquire lock:
[ 999.915502][ T2934] ffff88804de45108 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_xattr_set+0xba0/0x13e0
[ 999.928294][ T2934]
[ 999.928294][ T2934] but task is already holding lock:
[ 999.936211][ T2934] ffff88804dcd06f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0
[ 999.945907][ T2934]
[ 999.945907][ T2934] which lock already depends on the new lock.
[ 999.945907][ T2934]
[ 999.956489][ T2934]
[ 999.956489][ T2934] the existing dependency chain (in reverse order) is:
[ 999.965608][ T2934]
[ 999.965608][ T2934] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}:
[ 999.973993][ T2934] down_read+0x42/0x2d0
[ 999.978795][ T2934] ocfs2_init_acl+0x307/0x770
[ 999.984103][ T2934] ocfs2_mknod+0x15e8/0x25b0
[ 999.989243][ T2934] vfs_mknod+0x424/0x4c0
[ 999.994647][ T2934] do_mknodat+0x356/0x4d0
[ 999.999524][ T2934] __x64_sys_mknodat+0xa5/0xc0
[ 1000.004821][ T2934] do_syscall_64+0x4c/0xa0
[ 1000.009779][ T2934] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1000.016206][ T2934]
[ 1000.016206][ T2934] -> #1 (jbd2_handle){++++}-{0:0}:
[ 1000.023553][ T2934] jbd2_journal_lock_updates+0xa8/0x390
[ 1000.029811][ T2934] __ocfs2_flush_truncate_log+0x2cf/0x1220
[ 1000.036326][ T2934] ocfs2_flush_truncate_log+0x4b/0x60
[ 1000.042410][ T2934] ocfs2_sync_fs+0x119/0x330
[ 1000.047829][ T2934] sync_filesystem+0x1be/0x220
[ 1000.053243][ T2934] ocfs2_remount+0x115/0xb70
[ 1000.058974][ T2934] reconfigure_super+0x219/0x8a0
[ 1000.064617][ T2934] path_mount+0xe13/0x1020
[ 1000.069571][ T2934] __se_sys_mount+0x2e3/0x3d0
[ 1000.075017][ T2934] do_syscall_64+0x4c/0xa0
[ 1000.080334][ T2934] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1000.087829][ T2934]
[ 1000.087829][ T2934] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[ 1000.100119][ T2934] __lock_acquire+0x2d07/0x7d10
[ 1000.105879][ T2934] lock_acquire+0x1bb/0x4a0
[ 1000.111123][ T2934] down_write+0x36/0x60
[ 1000.115992][ T2934] ocfs2_xattr_set+0xba0/0x13e0
[ 1000.121804][ T2934] ocfs2_set_acl+0x4e1/0x590
[ 1000.127125][ T2934] ocfs2_iop_set_acl+0x190/0x2b0
[ 1000.133212][ T2934] posix_acl_xattr_set+0x387/0x3f0
[ 1000.139296][ T2934] __vfs_setxattr+0x3e0/0x420
[ 1000.144683][ T2934] __vfs_setxattr_noperm+0x129/0x5e0
[ 1000.150902][ T2934] vfs_setxattr+0x167/0x2e0
[ 1000.156859][ T2934] setxattr+0x346/0x360
[ 1000.161691][ T2934] path_setxattr+0x147/0x290
[ 1000.167297][ T2934] __x64_sys_setxattr+0xb7/0xd0
[ 1000.173155][ T2934] do_syscall_64+0x4c/0xa0
[ 1000.178516][ T2934] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1000.185031][ T2934]
[ 1000.185031][ T2934] other info that might help us debug this:
[ 1000.185031][ T2934]
[ 1000.195859][ T2934] Chain exists of:
[ 1000.195859][ T2934] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem
[ 1000.195859][ T2934]
[ 1000.213448][ T2934] Possible unsafe locking scenario:
[ 1000.213448][ T2934]
[ 1000.221184][ T2934] CPU0 CPU1
[ 1000.226733][ T2934] ---- ----
[ 1000.232376][ T2934] lock(&oi->ip_xattr_sem);
[ 1000.237157][ T2934] lock(jbd2_handle);
[ 1000.244114][ T2934] lock(&oi->ip_xattr_sem);
[ 1000.251858][ T2934] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[ 1000.259948][ T2934]
[ 1000.259948][ T2934] *** DEADLOCK ***
[ 1000.259948][ T2934]
[ 1000.268770][ T2934] 3 locks held by syz.7.11116/2934:
[ 1000.274162][ T2934] #0: ffff888073048460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[ 1000.283983][ T2934] #1: ffff88804dcd09c8 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: vfs_setxattr+0x140/0x2e0
[ 1000.294464][ T2934] #2: ffff88804dcd06f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0
[ 1000.304590][ T2934]
[ 1000.304590][ T2934] stack backtrace:
[ 1000.310766][ T2934] CPU: 1 PID: 2934 Comm: syz.7.11116 Not tainted syzkaller #0
[ 1000.318347][ T2934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 1000.329369][ T2934] Call Trace:
[ 1000.332840][ T2934]
[ 1000.335870][ T2934] dump_stack_lvl+0x188/0x24e
[ 1000.341191][ T2934] ? load_image+0x400/0x400
[ 1000.346071][ T2934] ? show_regs_print_info+0x12/0x12
[ 1000.352084][ T2934] ? print_circular_bug+0x12b/0x1a0
[ 1000.357943][ T2934] check_noncircular+0x296/0x330
[ 1000.363268][ T2934] ? look_up_lock_class+0x75/0x140
[ 1000.368595][ T2934] ? add_chain_block+0x940/0x940
[ 1000.373990][ T2934] ? lockdep_lock+0xf1/0x1f0
[ 1000.378791][ T2934] ? lockdep_unlock+0x142/0x2e0
[ 1000.383937][ T2934] ? _find_first_zero_bit+0xcf/0x100
[ 1000.389763][ T2934] __lock_acquire+0x2d07/0x7d10
[ 1000.394912][ T2934] ? do_raw_spin_unlock+0x11d/0x230
[ 1000.400401][ T2934] ? ocfs2_downconvert_lock+0x530/0x530
[ 1000.406226][ T2934] ? verify_lock_unused+0x140/0x140
[ 1000.411903][ T2934] ? ocfs2_inode_lock_tracker+0x14f/0x700
[ 1000.418278][ T2934] ? do_raw_spin_lock+0x128/0x2f0
[ 1000.423802][ T2934] lock_acquire+0x1bb/0x4a0
[ 1000.428758][ T2934] ? ocfs2_xattr_set+0xba0/0x13e0
[ 1000.434163][ T2934] ? ocfs2_xattr_block_find+0x157/0x4d0
[ 1000.439983][ T2934] ? __might_sleep+0xd0/0xd0
[ 1000.444935][ T2934] ? read_lock_is_recursive+0x10/0x10
[ 1000.450564][ T2934] ? rwsem_write_trylock+0x135/0x1c0
[ 1000.456227][ T2934] ? ocfs2_xattr_ibody_find+0x7c0/0x7c0
[ 1000.462047][ T2934] ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[ 1000.467711][ T2934] down_write+0x36/0x60
[ 1000.472098][ T2934] ? ocfs2_xattr_set+0xba0/0x13e0
[ 1000.477246][ T2934] ocfs2_xattr_set+0xba0/0x13e0
[ 1000.482566][ T2934] ? _raw_spin_unlock+0x40/0x40
[ 1000.487875][ T2934] ? __ocfs2_xattr_set_handle+0xf30/0xf30
[ 1000.494823][ T2934] ? __kasan_kmalloc+0x8e/0xa0
[ 1000.499808][ T2934] ? ocfs2_set_acl+0x11e/0x590
[ 1000.504939][ T2934] ? ocfs2_iop_set_acl+0x190/0x2b0
[ 1000.510946][ T2934] ? posix_acl_xattr_set+0x387/0x3f0
[ 1000.516619][ T2934] ? __vfs_setxattr_noperm+0x129/0x5e0
[ 1000.522362][ T2934] ? setxattr+0x346/0x360
[ 1000.526895][ T2934] ? __kmem_cache_alloc_node+0x140/0x260
[ 1000.533073][ T2934] ? ocfs2_set_acl+0x11e/0x590
[ 1000.538042][ T2934] ? rcu_is_watching+0x11/0xa0
[ 1000.543187][ T2934] ? ocfs2_set_acl+0x11e/0x590
[ 1000.548051][ T2934] ? __kmalloc+0xe1/0x240
[ 1000.552655][ T2934] ? ocfs2_inode_lock_atime+0x530/0x530
[ 1000.558668][ T2934] ocfs2_set_acl+0x4e1/0x590
[ 1000.563636][ T2934] ocfs2_iop_set_acl+0x190/0x2b0
[ 1000.568914][ T2934] ? ocfs2_xattr_get+0x260/0x260
[ 1000.574069][ T2934] ? __kmem_cache_alloc_node+0x140/0x260
[ 1000.580253][ T2934] ? vfs_set_acl_prepare+0x105/0x6c0
[ 1000.586004][ T2934] ? __kmalloc+0xe1/0x240
[ 1000.590354][ T2934] ? posix_acl_valid+0x320/0x3a0
[ 1000.595746][ T2934] posix_acl_xattr_set+0x387/0x3f0
[ 1000.600975][ T2934] ? posix_acl_xattr_get+0x550/0x550
[ 1000.606539][ T2934] __vfs_setxattr+0x3e0/0x420
[ 1000.611321][ T2934] __vfs_setxattr_noperm+0x129/0x5e0
[ 1000.616882][ T2934] vfs_setxattr+0x167/0x2e0
[ 1000.621403][ T2934] ? xattr_permission+0x500/0x500
[ 1000.626452][ T2934] ? _copy_from_user+0x10b/0x170
[ 1000.631416][ T2934] ? setxattr+0x2ce/0x360
[ 1000.635854][ T2934] setxattr+0x346/0x360
[ 1000.640027][ T2934] ? path_setxattr+0x290/0x290
[ 1000.644915][ T2934] ? __mnt_want_write+0x21f/0x2a0
[ 1000.650226][ T2934] path_setxattr+0x147/0x290
[ 1000.655098][ T2934] ? simple_xattr_list_add+0xf0/0xf0
[ 1000.660862][ T2934] ? lock_chain_count+0x20/0x20
[ 1000.666706][ T2934] __x64_sys_setxattr+0xb7/0xd0
[ 1000.672016][ T2934] do_syscall_64+0x4c/0xa0
[ 1000.676624][ T2934] ? clear_bhb_loop+0x60/0xb0
[ 1000.682010][ T2934] ? clear_bhb_loop+0x60/0xb0
[ 1000.687014][ T2934] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1000.693198][ T2934] RIP: 0033:0x7f82b439c819
[ 1000.697904][ T2934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1000.718247][ T2934] RSP: 002b:00007f82b5174028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1000.726794][ T2934] RAX: ffffffffffffffda RBX: 00007f82b4615fa0 RCX: 00007f82b439c819
[ 1000.734948][ T2934] RDX: 00002000000003c0 RSI: 0000200000002a40 RDI: 0000200000002a00
[ 1000.743540][ T2934] RBP: 00007f82b4432c91 R08: 0000000000000002 R09: 0000000000000000
[ 1000.751612][ T2934] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[ 1000.760115][ T2934] R13: 00007f82b4616038 R14: 00007f82b4615fa0 R15: 00007ffdf3d441d8
[ 1000.768396][ T2934]
[ 1000.793208][ T3005] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app
[ 1000.920729][T27391] ocfs2: Unmounting device (7,7) on (node local)