last executing test programs: 5m8.115390787s ago: executing program 1 (id=8221): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16], 0x1, 0x22a, &(0x7f00000005c0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) 5m7.811254859s ago: executing program 1 (id=8227): sigaltstack(&(0x7f0000001040)={&(0x7f0000001580)=""/4097, 0x0, 0xffffffffffffff0d}, 0x0) sigaltstack(&(0x7f0000000000)={0x0}, &(0x7f0000000340)={0x0}) 5m7.6172041s ago: executing program 1 (id=8231): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x9722, &(0x7f0000022980)="$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") listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x2) 5m6.02195446s ago: executing program 1 (id=8250): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 5m4.826844057s ago: executing program 1 (id=8260): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8929, &(0x7f0000000840)={'wlan1\x00'}) 5m4.2383906s ago: executing program 1 (id=8268): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000080)=0x54) 5m3.924379171s ago: executing program 32 (id=8268): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, &(0x7f0000000080)=0x54) 5m0.83704295s ago: executing program 2 (id=8311): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') 5m0.394587323s ago: executing program 2 (id=8325): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000380)={'\v\x00', 0x0, 0x5, 0x2, 0x0, 0x0, "f759e10000001000000000fc6300", "000016e2", "0300", "e859ad13", ["8bedbdc0edff000a00", "c2fed6bf0400000000000040", "000000ff0000000000000020", "8d196d85d693aa2200"]}) 4m59.853623365s ago: executing program 2 (id=8321): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 4m59.648913987s ago: executing program 2 (id=8324): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 4m59.22944526s ago: executing program 2 (id=8329): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a00)={&(0x7f0000002240)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x40004) 4m54.671153926s ago: executing program 2 (id=8356): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_proto_private(r0, 0x8915, &(0x7f0000000000)) 4m54.237322998s ago: executing program 33 (id=8356): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_proto_private(r0, 0x8915, &(0x7f0000000000)) 4.17982077s ago: executing program 6 (id=11140): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b65, 0x0) 3.614130213s ago: executing program 6 (id=11148): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0}) 2.887396946s ago: executing program 5 (id=11157): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$tipc(r0, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x0, 0x4}, 0x23}}, 0x10) 2.628779647s ago: executing program 5 (id=11160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x6, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) 2.537050008s ago: executing program 0 (id=11162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005"], 0x118}}, 0x0) 2.522567638s ago: executing program 4 (id=11163): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfffffffffffffff7, 0x12) 2.372264839s ago: executing program 3 (id=11164): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) 2.256585679s ago: executing program 0 (id=11165): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x30314742}}) 2.256405989s ago: executing program 5 (id=11166): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) writev(r0, &(0x7f0000003bc0)=[{&(0x7f0000003a40)="f1b937", 0x3}], 0x1) 2.202540519s ago: executing program 3 (id=11167): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @dev}, 0x10) 2.08981879s ago: executing program 4 (id=11168): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) ioctl$SG_SCSI_RESET(r0, 0x5385, 0x1000000000000) 1.989554011s ago: executing program 5 (id=11169): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 1.97040093s ago: executing program 0 (id=11170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@migrate={0xec, 0x21, 0xd39, 0x0, 0x0, {{@in=@dev, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}, [@migrate={0x9c, 0x11, [{@in6=@mcast1, @in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {@in6=@mcast1, @in=@broadcast, @in6=@dev, @in=@remote}]}]}, 0xec}}, 0x0) 1.951095121s ago: executing program 3 (id=11171): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x1, @win={{0x0, 0x0, 0x32314147}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 1.831854211s ago: executing program 4 (id=11172): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x45, 0x2, 0x0, "444900e1b0faa9b000"}) 1.706334362s ago: executing program 5 (id=11173): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/203, 0xcb}], 0x1, 0x49, 0x0) 1.705982822s ago: executing program 0 (id=11174): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xfa, &(0x7f0000000000), &(0x7f0000000500)=0x4) 1.344422024s ago: executing program 5 (id=11175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x2}]}}}]}, 0x3c}}, 0x0) 1.333773334s ago: executing program 0 (id=11176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100, r0, 0x1000000000000000}, 0x38) 1.167546414s ago: executing program 6 (id=11177): socket(0x1d, 0x2, 0x6) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) 1.002734005s ago: executing program 0 (id=11178): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@nogrpid}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@nodelalloc}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x2ba4) 954.511965ms ago: executing program 6 (id=11179): open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000880)='./bus\x00', &(0x7f00000008c0)='v7\x00', 0x801, 0x0) 885.259926ms ago: executing program 4 (id=11180): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f00000000c0)) 769.010126ms ago: executing program 3 (id=11181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021580000000c0a01010000000000000000070000000900020073797a31000000002c000380280000800400018020000b801c000180090001006c617374000000000c00028008000140000001000900010073797a30"], 0xdc}}, 0x0) 637.224307ms ago: executing program 4 (id=11182): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) 488.485768ms ago: executing program 6 (id=11183): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1400000000000000000000003400000001"], 0x28}, 0x0) 460.239098ms ago: executing program 3 (id=11184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x68}}, 0x0) 180.423949ms ago: executing program 6 (id=11185): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f0000000040)) 136.162779ms ago: executing program 4 (id=11186): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/75, 0x8e, 0x0) 0s ago: executing program 3 (id=11187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x10c, 0x16, 0x5, 0x0, 0x0, {{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in, 0x0, 0x33}, @in=@empty}, 0x0, 0x7fff}, [@sec_ctx={0xc, 0x8, {0x8}}, @extra_flags={0x8}]}, 0x10c}}, 0x0) kernel console output (not intermixed with test programs): volume version 3.1. [ 1107.297061][ T4649] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1107.445650][T28036] netlink: 'syz.5.10106': attribute type 21 has an invalid length. [ 1107.465159][T28036] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10106'. [ 1107.681780][T28038] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10107'. [ 1107.851596][ T4649] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1107.897774][ T4649] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1107.957546][ T4649] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1107.997074][ T4649] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.035561][T28029] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1108.100087][T28051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10111'. [ 1108.460181][T28057] loop0: detected capacity change from 0 to 512 [ 1108.609429][T28062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10117'. [ 1108.717068][T28062] device bond2 entered promiscuous mode [ 1108.723034][T28062] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1108.810725][T28065] loop4: detected capacity change from 0 to 4096 [ 1108.894873][ C0] net_ratelimit: 8815 callbacks suppressed [ 1108.894893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1108.913178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1108.925534][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1108.937913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1108.950245][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1108.962634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1108.975111][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1108.987545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1108.999893][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1109.012224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1109.035612][T28057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1109.251954][T28065] ntfs: volume version 3.1. [ 1109.284347][ T4664] EXT4-fs (loop0): unmounting filesystem. [ 1109.522730][T28078] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10122'. [ 1109.772272][T28082] loop4: detected capacity change from 0 to 256 [ 1109.955003][T28088] loop0: detected capacity change from 0 to 128 [ 1110.180572][T19166] usb 4-1: USB disconnect, device number 124 [ 1110.319646][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 1110.319665][ T26] audit: type=1326 audit(8166561.674:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1110.356095][T28091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10128'. [ 1110.438384][ T26] audit: type=1326 audit(8166561.674:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1110.536490][T28096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10132'. [ 1110.576333][ T26] audit: type=1326 audit(8166561.674:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1110.680859][ T26] audit: type=1326 audit(8166561.674:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1110.834166][ T26] audit: type=1326 audit(8166561.674:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1110.947101][ T26] audit: type=1326 audit(8166561.674:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1111.013390][T28105] loop4: detected capacity change from 0 to 8 [ 1111.061175][T28109] loop3: detected capacity change from 0 to 512 [ 1111.062810][ T26] audit: type=1326 audit(8166561.674:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1111.180085][ T26] audit: type=1326 audit(8166561.674:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1111.266001][ T26] audit: type=1326 audit(8166561.674:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1111.325482][ T26] audit: type=1326 audit(8166561.674:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28089 comm="syz.0.10129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa357e819 code=0x50000 [ 1111.518264][T28109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1111.669724][T28118] loop4: detected capacity change from 0 to 128 [ 1111.728388][ T4667] EXT4-fs (loop3): unmounting filesystem. [ 1112.115529][T28128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10146'. [ 1112.345309][T28133] loop6: detected capacity change from 0 to 512 [ 1112.354860][T28130] loop3: detected capacity change from 0 to 256 [ 1112.431608][T28133] EXT4-fs: Ignoring removed oldalloc option [ 1112.532097][T19168] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1112.547518][T28137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10151'. [ 1112.606384][T28133] EXT4-fs error (device loop6): ext4_xattr_inode_iget:400: comm syz.6.10149: Parent and EA inode have the same ino 15 [ 1112.753963][T28133] EXT4-fs (loop6): Remounting filesystem read-only [ 1112.760711][T28133] EXT4-fs (loop6): 1 orphan inode deleted [ 1112.777748][T28133] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1112.815047][T28133] tmpfs: Bad value for 'mpol' [ 1112.945929][T23436] EXT4-fs (loop6): unmounting filesystem. [ 1112.968559][T19168] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1113.000567][T19168] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1113.042315][T19168] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1113.051401][T19168] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.121939][T28126] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1113.299359][T28144] cgroup: Need name or subsystem set [ 1113.377342][T28145] loop6: detected capacity change from 0 to 512 [ 1113.703530][T28152] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.10157'. [ 1113.773810][T28145] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1113.970757][T23436] EXT4-fs (loop6): unmounting filesystem. [ 1114.286549][ C0] net_ratelimit: 8323 callbacks suppressed [ 1114.286569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.304859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.317190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.329573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.341927][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.354304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.366734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.379136][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.391542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.403985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1114.763909][T28167] loop0: detected capacity change from 0 to 256 [ 1115.044179][T28175] loop4: detected capacity change from 0 to 64 [ 1115.079771][T19168] usb 6-1: USB disconnect, device number 7 [ 1115.123919][T28177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10168'. [ 1115.167947][T28177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10168'. [ 1115.207692][T28177] IPv6: sit2: Disabled Multicast RS [ 1115.693254][ T26] kauditd_printk_skb: 2327 callbacks suppressed [ 1115.693273][ T26] audit: type=1326 audit(8166566.697:3867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1115.724068][T28183] loop0: detected capacity change from 0 to 256 [ 1115.848682][ T26] audit: type=1326 audit(8166566.697:3868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1115.926029][ T26] audit: type=1326 audit(8166566.697:3869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1115.985725][ T26] audit: type=1326 audit(8166566.697:3870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1116.074150][ T26] audit: type=1326 audit(8166566.697:3871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1116.168834][ T26] audit: type=1326 audit(8166566.697:3872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1116.223449][ T26] audit: type=1326 audit(8166566.707:3873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1116.311476][ T26] audit: type=1326 audit(8166566.707:3874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1116.376334][ T26] audit: type=1326 audit(8166566.707:3875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1116.423439][ T26] audit: type=1326 audit(8166566.707:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28172 comm="syz.6.10167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x50000 [ 1117.314757][T28183] FAT-fs (loop0): Directory bread(block 64) failed [ 1117.329755][T28183] FAT-fs (loop0): Directory bread(block 65) failed [ 1117.336427][T28183] FAT-fs (loop0): Directory bread(block 66) failed [ 1117.414287][T28183] FAT-fs (loop0): Directory bread(block 67) failed [ 1117.420985][T28183] FAT-fs (loop0): Directory bread(block 68) failed [ 1117.504492][T28189] loop4: detected capacity change from 0 to 256 [ 1117.531890][T28183] FAT-fs (loop0): Directory bread(block 69) failed [ 1117.539302][T28183] FAT-fs (loop0): Directory bread(block 70) failed [ 1117.604070][T28183] FAT-fs (loop0): Directory bread(block 71) failed [ 1117.621511][T28183] FAT-fs (loop0): Directory bread(block 72) failed [ 1117.660144][T28183] FAT-fs (loop0): Directory bread(block 73) failed [ 1118.074786][T28189] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 1118.242199][T28189] exFAT-fs (loop4): hint_cluster is invalid (1) [ 1118.249103][T28199] Process accounting resumed [ 1118.251454][T28189] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000) [ 1118.280401][T28189] exFAT-fs (loop4): Filesystem has been set read-only [ 1118.287559][T28189] exFAT-fs (loop4): error, failed to bmap (inode : ffff888074fe1b60 iblock : 9, err : -5) [ 1118.339653][T28189] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 1118.392446][T28189] exFAT-fs (loop4): error, tried to truncate zeroed cluster. [ 1118.701052][T28208] loop4: detected capacity change from 0 to 512 [ 1118.789124][T28208] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1118.803271][T28208] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1118.836735][T28208] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1118.876710][T28208] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1118.908771][T28208] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 1118.958951][T28208] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1119.080883][T28213] loop6: detected capacity change from 0 to 256 [ 1119.125102][T28208] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10183: bg 0: block 34: padding at end of block bitmap is not set [ 1119.195583][T28208] EXT4-fs error (device loop4): ext4_acquire_dquot:6801: comm syz.4.10183: Failed to acquire dquot type 1 [ 1119.267559][T28208] EXT4-fs (loop4): 1 truncate cleaned up [ 1119.290753][T28208] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1119.504757][ T4673] EXT4-fs (loop4): unmounting filesystem. [ 1119.644776][ C1] net_ratelimit: 11800 callbacks suppressed [ 1119.644792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.659337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1119.663056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.675021][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1119.687422][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.698895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1119.710832][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1119.722787][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1119.734697][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1119.746750][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1120.002094][T28203] loop0: detected capacity change from 0 to 32768 [ 1120.506288][T28203] find_entry called with index = 0 [ 1120.922360][T28219] loop4: detected capacity change from 0 to 32768 [ 1121.016057][T28217] loop6: detected capacity change from 0 to 32768 [ 1121.138846][T28239] loop5: detected capacity change from 0 to 128 [ 1121.210055][T28217] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 1121.260489][T28217] XFS (loop6): Mounting V5 Filesystem [ 1121.444671][T28219] JBD2: Ignoring recovery information on journal [ 1121.660277][T28219] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1121.724341][ T4648] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1121.923834][ T4649] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1122.026964][T28217] XFS (loop6): Ending clean mount [ 1122.121102][T28217] XFS (loop6): Quotacheck needed: Please wait. [ 1122.238159][ T4649] usb 1-1: Using ep0 maxpacket: 32 [ 1122.303232][ T4673] ocfs2: Unmounting device (7,4) on (node local) [ 1122.395796][ T4649] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.529080][T28217] XFS (loop6): Quotacheck: Done. [ 1122.555510][ T4649] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1122.564717][ T4649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.590727][ T4649] usb 1-1: Product: syz [ 1122.594943][ T4649] usb 1-1: Manufacturer: syz [ 1122.638075][T28263] IPVS: length: 126 != 8 [ 1122.645123][ T4649] usb 1-1: SerialNumber: syz [ 1122.691516][ T4649] usb 1-1: bad CDC descriptors [ 1122.762284][T23436] XFS (loop6): Unmounting Filesystem [ 1122.976756][T28270] loop5: detected capacity change from 0 to 256 [ 1122.999924][ T14] usb 1-1: USB disconnect, device number 120 [ 1123.580631][T23173] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1124.264622][T28293] loop6: detected capacity change from 0 to 256 [ 1124.430868][T28295] IPVS: length: 126 != 8 [ 1124.523064][T28268] loop3: detected capacity change from 0 to 32768 [ 1124.587634][T28268] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.10210 (28268) [ 1124.762404][T28304] loop5: detected capacity change from 0 to 2048 [ 1124.772581][T28268] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1124.783258][T28268] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1124.811540][T28268] BTRFS info (device loop3): using free space tree [ 1124.870644][T28304] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1124.993570][ C1] net_ratelimit: 14089 callbacks suppressed [ 1124.993591][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.011895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.014087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1125.024248][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1125.036338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1125.048788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.060224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1125.072135][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.084089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1125.096012][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1125.221101][T28323] loop0: detected capacity change from 0 to 2048 [ 1125.379333][T28324] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1125.395928][T28323] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1125.451248][ T4639] udevd[4639]: incorrect nilfs2 checksum on /dev/loop5 [ 1125.512637][T28268] BTRFS info (device loop3): enabling ssd optimizations [ 1125.526734][T28304] NILFS (loop5): failed to count free inodes: err=-34 [ 1125.537418][T28327] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1125.638150][T28302] loop4: detected capacity change from 0 to 32768 [ 1125.718387][ T4667] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1125.909581][T28293] FAT-fs (loop6): Directory bread(block 64) failed [ 1125.916229][T28293] FAT-fs (loop6): Directory bread(block 65) failed [ 1125.934321][T28293] FAT-fs (loop6): Directory bread(block 66) failed [ 1125.970716][T28293] FAT-fs (loop6): Directory bread(block 67) failed [ 1126.012679][T28293] FAT-fs (loop6): Directory bread(block 68) failed [ 1126.055882][T28293] FAT-fs (loop6): Directory bread(block 69) failed [ 1126.094845][T28293] FAT-fs (loop6): Directory bread(block 70) failed [ 1126.101432][T28293] FAT-fs (loop6): Directory bread(block 71) failed [ 1126.207972][T28293] FAT-fs (loop6): Directory bread(block 72) failed [ 1126.220199][T28293] FAT-fs (loop6): Directory bread(block 73) failed [ 1126.244328][T28302] XFS (loop4): Mounting V5 Filesystem [ 1126.744302][ T4649] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1127.091582][T28351] ufs: You didn't specify the type of your ufs filesystem [ 1127.091582][T28351] [ 1127.091582][T28351] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1127.091582][T28351] [ 1127.091582][T28351] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1127.226675][ T4649] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1127.247271][T28351] ufs: ufstype=old is supported read-only [ 1127.253316][ T4649] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.291217][ T4649] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.294103][T28351] ufs: ufs_fill_super(): bad magic number [ 1127.346590][ T4649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.379528][T28340] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1127.992040][T28367] xt_TCPMSS: Only works on TCP SYN packets [ 1128.793268][T28357] loop5: detected capacity change from 0 to 32768 [ 1128.995367][T28357] XFS (loop5): Mounting V5 Filesystem [ 1129.120765][ T5135] usb 1-1: USB disconnect, device number 121 [ 1129.568712][T28396] xt_bpf: check failed: parse error [ 1129.831582][T28400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10254'. [ 1129.920054][T28302] XFS (loop4): Ending clean mount [ 1130.235398][T28302] XFS (loop4): Quotacheck needed: Please wait. [ 1130.359388][ C0] net_ratelimit: 16054 callbacks suppressed [ 1130.359406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1130.359873][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.365791][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1130.377875][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.389753][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1130.401677][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1130.413727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1130.426206][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.437596][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1130.449620][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.670450][T28422] netlink: 'syz.0.10265': attribute type 13 has an invalid length. [ 1130.677926][T28302] XFS (loop4): Quotacheck: Done. [ 1130.712037][T28422] netlink: 'syz.0.10265': attribute type 12 has an invalid length. [ 1130.756118][ T4673] XFS (loop4): Unmounting Filesystem [ 1131.559973][T28443] loop0: detected capacity change from 0 to 16 [ 1131.618277][T28443] erofs: (device loop0): mounted with root inode @ nid 36. [ 1131.664015][T28443] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1131.740167][T28443] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[1851] [ 1131.754445][T28443] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 1132.686235][T28468] ufs: You didn't specify the type of your ufs filesystem [ 1132.686235][T28468] [ 1132.686235][T28468] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1132.686235][T28468] [ 1132.686235][T28468] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1132.733912][ T124] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1132.796897][T28468] ufs: ufstype=old is supported read-only [ 1132.826519][T28468] ufs: ufs_fill_super(): bad magic number [ 1133.061817][ T124] usb 7-1: Using ep0 maxpacket: 32 [ 1133.246505][ T124] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1133.351136][T28478] xt_bpf: check failed: parse error [ 1133.442340][ T124] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1133.467529][ T124] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.499411][ T124] usb 7-1: Product: syz [ 1133.514272][ T124] usb 7-1: Manufacturer: syz [ 1133.523323][ T124] usb 7-1: SerialNumber: syz [ 1133.588867][ T124] usb 7-1: bad CDC descriptors [ 1133.773277][T28357] XFS (loop5): Ending clean mount [ 1133.884367][T28357] XFS (loop5): Quotacheck needed: Please wait. [ 1133.932718][T19168] usb 7-1: USB disconnect, device number 9 [ 1134.197422][T28357] XFS (loop5): Quotacheck: Done. [ 1134.333791][T23171] XFS (loop5): Unmounting Filesystem [ 1134.372846][T28471] loop0: detected capacity change from 0 to 32768 [ 1135.033785][T28505] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10303'. [ 1135.115966][T28471] JBD2: Ignoring recovery information on journal [ 1135.361335][T28471] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1135.532449][T28519] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10310'. [ 1135.714485][ C0] net_ratelimit: 14092 callbacks suppressed [ 1135.714507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1135.728394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.732806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1135.745110][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.756593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1135.768509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.780462][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1135.792377][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1135.804430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1135.816808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.962967][ T26] kauditd_printk_skb: 2444 callbacks suppressed [ 1135.962983][ T26] audit: type=1326 audit(8166585.669:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28524 comm="syz.4.10314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1136.107109][ T26] audit: type=1326 audit(8166585.744:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28524 comm="syz.4.10314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1136.124491][T28527] netlink: 'syz.6.10315': attribute type 13 has an invalid length. [ 1136.177017][T28527] netlink: 'syz.6.10315': attribute type 12 has an invalid length. [ 1136.195430][ T26] audit: type=1326 audit(8166585.754:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28524 comm="syz.4.10314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1136.229883][ T4664] ocfs2: Unmounting device (7,0) on (node local) [ 1136.864853][T28515] loop3: detected capacity change from 0 to 32768 [ 1137.038186][ T26] audit: type=1326 audit(8166586.670:6322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28524 comm="syz.4.10314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1137.113713][T28515] XFS (loop3): Mounting V5 Filesystem [ 1137.130615][ T26] audit: type=1326 audit(8166586.727:6323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28524 comm="syz.4.10314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1137.216355][T28547] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10321'. [ 1138.400018][T28575] xt_CONNSECMARK: invalid mode: 0 [ 1139.211840][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10342'. [ 1139.492608][T28571] loop5: detected capacity change from 0 to 32768 [ 1139.832052][T28571] ialloc: diAlloc returned -5! [ 1139.862340][T28599] loop4: detected capacity change from 0 to 16 [ 1139.935317][T28599] erofs: (device loop4): mounted with root inode @ nid 36. [ 1140.035689][T28599] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1140.084386][T28599] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[1851] [ 1140.096484][T28599] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 1140.308973][T28609] loop4: detected capacity change from 0 to 8 [ 1140.720492][T28609] SQUASHFS error: Unable to read directory block [629:26] [ 1141.079533][ C1] net_ratelimit: 13739 callbacks suppressed [ 1141.079551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.097849][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.102488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1141.110131][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.122102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1141.134550][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.145989][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1141.158006][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1141.170035][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1141.181965][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1141.477863][T28634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'. [ 1141.506659][T28635] loop6: detected capacity change from 0 to 16 [ 1141.521147][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10362'. [ 1141.586511][T28635] erofs: (device loop6): mounted with root inode @ nid 36. [ 1141.679280][T28635] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1141.772366][T28635] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -24 in[52, 4044] out[1851] [ 1141.803108][T28624] loop0: detected capacity change from 0 to 32768 [ 1141.818012][T28635] erofs: (device loop6): z_erofs_read_folio: failed to read, err [-117] [ 1142.041878][ T26] audit: type=1326 audit(8166591.357:6324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1142.117326][ T26] audit: type=1326 audit(8166591.385:6325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1142.139867][T28641] xt_CONNSECMARK: invalid mode: 0 [ 1142.142737][T28621] loop5: detected capacity change from 0 to 32768 [ 1142.191680][T28515] XFS (loop3): Ending clean mount [ 1142.231718][ T26] audit: type=1326 audit(8166591.385:6326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1142.261589][T28624] ialloc: diAlloc returned -5! [ 1142.293537][ T26] audit: type=1326 audit(8166591.385:6327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28638 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61e6f7e819 code=0x7ffc0000 [ 1142.427666][T28621] XFS (loop5): Mounting V5 Filesystem [ 1142.629923][T28515] XFS (loop3): Quotacheck needed: Please wait. [ 1142.847963][T28515] XFS (loop3): Quotacheck: Done. [ 1142.854596][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1142.976291][ T4667] XFS (loop3): Unmounting Filesystem [ 1143.177548][T28664] netlink: 9 bytes leftover after parsing attributes in process `syz.6.10373'. [ 1143.205227][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 1143.439643][ T14] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1143.462403][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.483449][ T14] usb 5-1: Product: syz [ 1143.488032][ T14] usb 5-1: Manufacturer: syz [ 1143.492664][ T14] usb 5-1: SerialNumber: syz [ 1143.558296][ T14] usb 5-1: config 0 descriptor?? [ 1143.624426][ T14] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1144.091783][ T14] gp8psk: usb out operation failed. [ 1144.102843][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1144.143762][ T14] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1144.199509][ T14] usb 5-1: media controller created [ 1144.251476][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1144.379432][ T14] gp8psk_fe: Frontend revision 1 attached [ 1144.411168][ T14] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1144.483943][ T14] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1144.619787][ T14] gp8psk: usb in 138 operation failed. [ 1144.659507][ T14] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1144.681720][T28672] loop6: detected capacity change from 0 to 32768 [ 1144.715012][ T14] gp8psk: found Genpix USB device pID = 201 (hex) [ 1144.771607][ T14] usb 5-1: USB disconnect, device number 4 [ 1144.861798][T28684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10384'. [ 1144.894077][ T14] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1145.161752][T28672] [ 1145.161752][T28672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.161752][T28672] [ 1145.226723][T28690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10372'. [ 1145.297043][T28672] [ 1145.297043][T28672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.297043][T28672] [ 1145.333263][T28672] [ 1145.333263][T28672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.333263][T28672] [ 1145.407286][T28672] [ 1145.407286][T28672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.407286][T28672] [ 1145.446743][T28672] [ 1145.446743][T28672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.446743][T28672] [ 1145.495412][T28672] [ 1145.495412][T28672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.495412][T28672] [ 1145.506496][T28695] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.10388'. [ 1145.545759][T28672] [ 1145.545759][T28672] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.545759][T28672] [ 1145.664940][ T106] [ 1145.664940][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.664940][ T106] [ 1145.890656][T23436] [ 1145.890656][T23436] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.890656][T23436] [ 1145.955724][T23436] [ 1145.955724][T23436] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1145.955724][T23436] [ 1146.176842][T28713] netlink: 'syz.0.10397': attribute type 15 has an invalid length. [ 1146.211435][T28713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10397'. [ 1146.425179][ C1] net_ratelimit: 13992 callbacks suppressed [ 1146.425201][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1146.443992][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.446668][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1146.456242][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.468171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1146.480093][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1146.492170][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1146.504532][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.516002][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1146.527916][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1146.899873][T28732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10406'. [ 1146.938734][T28621] XFS (loop5): Ending clean mount [ 1146.949345][T28732] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10406'. [ 1147.051979][T28621] XFS (loop5): Quotacheck needed: Please wait. [ 1147.152658][T28739] netlink: 'syz.4.10408': attribute type 21 has an invalid length. [ 1147.425270][T28621] XFS (loop5): Quotacheck: Done. [ 1147.735143][T23171] XFS (loop5): Unmounting Filesystem [ 1147.905129][T28759] loop3: detected capacity change from 0 to 8 [ 1148.256830][T28768] tmpfs: Bad value for 'mpol' [ 1148.587808][T28778] netlink: 'syz.6.10429': attribute type 21 has an invalid length. [ 1149.706849][T28803] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10442'. [ 1149.783480][T28805] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10443'. [ 1149.998907][ T5136] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1150.155793][T28807] loop0: detected capacity change from 0 to 8192 [ 1150.232065][T28807] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1150.248833][T28807] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1150.260896][T28807] REISERFS (device loop0): using ordered data mode [ 1150.275367][T28807] reiserfs: using flush barriers [ 1150.305678][T28807] REISERFS warning (device loop0): sh-457 journal_init_dev: journal_init_dev: Cannot open './file0': -15 [ 1150.369310][T28807] REISERFS warning (device loop0): sh-462 journal_init: unable to initialize journal device [ 1150.425582][ T5136] usb 4-1: too many configurations: 241, using maximum allowed: 8 [ 1150.454569][T28807] REISERFS warning (device loop0): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 1150.770435][T28807] Process accounting paused [ 1151.010540][T28832] netlink: 'syz.4.10455': attribute type 3 has an invalid length. [ 1151.246378][T28835] loop0: detected capacity change from 0 to 512 [ 1151.380944][ T5136] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1151.406354][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.428855][ T5136] usb 4-1: Product: syz [ 1151.433064][ T5136] usb 4-1: Manufacturer: syz [ 1151.456555][ T5136] usb 4-1: SerialNumber: syz [ 1151.513342][ T5136] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1151.755976][T28835] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.10456: corrupted inode contents [ 1151.780683][ C1] net_ratelimit: 12955 callbacks suppressed [ 1151.780699][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.783573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1151.786969][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.798824][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1151.810783][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1151.822831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1151.835371][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.846755][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1151.858778][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1151.870752][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1151.986353][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1151.992930][T28835] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #3: comm syz.0.10456: mark_inode_dirty error [ 1152.103822][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.129155][T28835] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.10456: corrupted inode contents [ 1152.207874][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.215433][T28856] netlink: 276 bytes leftover after parsing attributes in process `syz.5.10466'. [ 1152.215698][T28835] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.10456: mark_inode_dirty error [ 1152.246745][T28857] loop4: detected capacity change from 0 to 736 [ 1152.338137][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.386263][T28835] Quota error (device loop0): write_blk: dquota write failed [ 1152.387635][T19168] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1152.393821][T28835] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1152.449446][T28835] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.10456: Failed to acquire dquot type 0 [ 1152.521851][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.534337][T28861] loop5: detected capacity change from 0 to 1024 [ 1152.548546][T28835] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.10456: corrupted inode contents [ 1152.600596][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.607556][T28835] EXT4-fs error (device loop0): ext4_dirty_inode:6089: inode #16: comm syz.0.10456: mark_inode_dirty error [ 1152.657274][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.663877][T28835] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.10456: corrupted inode contents [ 1152.687559][ C1] usb 4-1: ath9k_htc: invalid pkt_len (fe1d) [ 1152.728616][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.735316][T28835] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.10456: mark_inode_dirty error [ 1152.794250][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.837906][T28835] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.10456: corrupted inode contents [ 1152.923400][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.934268][T28835] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 1152.935689][T28861] hfsplus: request for non-existent node 3 in B*Tree [ 1152.967634][T28861] hfsplus: request for non-existent node 3 in B*Tree [ 1152.986744][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1152.994638][ T5135] usb 4-1: USB disconnect, device number 125 [ 1153.013954][T28835] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.10456: corrupted inode contents [ 1153.136261][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1153.164239][T28835] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.10456: mark_inode_dirty error [ 1153.263652][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1153.317019][T28835] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 1153.404599][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1153.435579][T28835] EXT4-fs (loop0): 1 truncate cleaned up [ 1153.441461][T28835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1153.552806][ T51] block nbd6: Attempted send on invalid socket [ 1153.559147][ T51] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1153.570987][T28871] efs: cannot read volume header [ 1153.602383][T19168] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1153.635533][T19168] ath9k_htc: Failed to initialize the device [ 1153.693754][ T5135] usb 4-1: ath9k_htc: USB layer deinitialized [ 1153.699065][T28835] EXT4-fs error (device loop0): ext4_empty_dir:3177: inode #12: block 13: comm syz.0.10456: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 1153.937318][T28874] loop5: detected capacity change from 0 to 4096 [ 1153.951020][T28835] EXT4-fs (loop0): Remounting filesystem read-only [ 1154.164424][T28881] netlink: 276 bytes leftover after parsing attributes in process `syz.6.10478'. [ 1154.186282][ T4664] EXT4-fs (loop0): unmounting filesystem. [ 1154.195336][T28874] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1154.206988][T28874] NILFS (loop5): trying rollback from an earlier position [ 1154.237440][ T52] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1154.294654][ T52] EXT4-fs error (device loop0): ext4_release_dquot:6824: comm kworker/u4:3: Failed to release dquot type 1 [ 1154.362069][T28874] NILFS (loop5): recovery complete [ 1154.362206][ T52] EXT4-fs (loop0): Remounting filesystem read-only [ 1154.421995][T28886] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1154.498798][T28857] rock: directory entry would overflow storage [ 1154.591879][T28857] rock: sig=0x5850, size=36, remaining=14 [ 1155.066835][T28900] device vlan0 entered promiscuous mode [ 1155.231816][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1155.238192][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1155.550793][T28919] loop5: detected capacity change from 0 to 256 [ 1155.732545][T28913] loop3: detected capacity change from 0 to 4096 [ 1155.786615][T28913] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 1156.534263][T28942] loop6: detected capacity change from 0 to 512 [ 1156.615147][T28944] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10509'. [ 1156.918043][T28952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10511'. [ 1156.960648][T28942] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1157.135927][ C0] net_ratelimit: 13710 callbacks suppressed [ 1157.135947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1157.138719][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1157.142179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1157.154808][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.166149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1157.178234][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.190027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1157.201997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1157.213985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1157.226689][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1157.283030][T23436] EXT4-fs (loop6): unmounting filesystem. [ 1157.338660][T28961] loop0: detected capacity change from 0 to 64 [ 1157.347105][T28963] netlink: 'syz.4.10516': attribute type 5 has an invalid length. [ 1157.355155][T28963] netlink: 156 bytes leftover after parsing attributes in process `syz.4.10516'. [ 1157.440906][T28965] netlink: 'syz.5.10518': attribute type 21 has an invalid length. [ 1157.454512][T28965] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10518'. [ 1157.764346][T28913] ntfs3: loop3: failed to convert "c46c" to default [ 1158.168539][T28983] loop4: detected capacity change from 0 to 512 [ 1158.671638][T28983] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1158.773378][T28995] x_tables: duplicate entry at hook 1 [ 1159.004030][ T4673] EXT4-fs (loop4): unmounting filesystem. [ 1159.481020][T28973] loop6: detected capacity change from 0 to 32768 [ 1159.574532][T28973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.10517 (28973) [ 1159.710032][T28973] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1159.720368][T28973] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 1159.767355][T29020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10543'. [ 1159.778748][T28973] BTRFS info (device loop6): using free space tree [ 1159.796817][T29017] QAT: Device 8 not found [ 1160.592437][T28973] BTRFS info (device loop6): enabling ssd optimizations [ 1160.876805][T29061] netlink: 76 bytes leftover after parsing attributes in process `syz.5.10556'. [ 1161.021032][T23436] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1162.224723][T29096] xt_cgroup: path and classid specified [ 1162.491453][ C0] net_ratelimit: 11998 callbacks suppressed [ 1162.491474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1162.500096][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.509869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1162.521771][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.533817][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1162.546223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.557719][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1162.569651][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1162.581626][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1162.593544][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1162.931258][T29118] loop5: detected capacity change from 0 to 128 [ 1163.030306][T29118] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 1163.250264][T23171] sysv_free_block: flc_count > flc_size [ 1163.258415][T23171] sysv_free_block: flc_count > flc_size [ 1163.279927][T23171] sysv_free_block: flc_count > flc_size [ 1163.304716][T23171] sysv_free_block: flc_count > flc_size [ 1163.373493][T23171] sysv_free_block: flc_count > flc_size [ 1163.388764][T23171] sysv_free_block: flc_count > flc_size [ 1163.419269][T23171] sysv_free_block: flc_count > flc_size [ 1163.462403][T23171] sysv_free_block: flc_count > flc_size [ 1163.512576][T23171] sysv_free_block: flc_count > flc_size [ 1163.531122][T23171] sysv_free_block: flc_count > flc_size [ 1163.578339][T23171] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1163.578854][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.639890][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.752674][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.760383][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.805618][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.854393][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.912925][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.967407][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.976323][T29146] loop4: detected capacity change from 0 to 1024 [ 1163.987735][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1163.995177][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.004733][T29146] EXT4-fs: Ignoring removed orlov option [ 1164.033150][T29146] EXT4-fs: Ignoring removed oldalloc option [ 1164.040958][T29150] netlink: 5312 bytes leftover after parsing attributes in process `syz.5.10597'. [ 1164.060143][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.094646][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.102161][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.113638][T29148] loop6: detected capacity change from 0 to 4096 [ 1164.123804][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.131356][T29146] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1164.153441][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.184843][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.192428][T29146] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1164.231905][T29146] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 1164.246652][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.255223][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.262665][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.285926][T29146] EXT4-fs (loop4): invalid journal inode [ 1164.293323][T29148] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1164.305452][T29146] EXT4-fs (loop4): can't get journal size [ 1164.306241][T29148] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1164.323011][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.343567][T29146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1164.353203][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.360664][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.423007][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.438164][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.445621][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.476658][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.508142][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.515679][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.518191][T29148] ntfs: (device loop6): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1164.531348][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.552971][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.565011][T29148] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1164.568661][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.618479][T29148] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1164.629360][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.639153][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.660021][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.690258][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.706967][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.714429][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.744895][T29148] ntfs: volume version 3.1. [ 1164.758922][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.766434][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.785578][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.801963][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.809480][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.833080][ T4649] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 1164.886672][ T4649] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1164.928872][T29148] ntfs: (device loop6): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1164.974780][T29148] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1165.015138][ T4673] EXT4-fs (loop4): unmounting filesystem. [ 1165.028410][T29148] ntfs: (device loop6): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1165.070383][T29148] ntfs: (device loop6): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1165.144048][T29148] ntfs: (device loop6): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1165.717063][ T4649] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1166.090023][ T4649] usb 5-1: Using ep0 maxpacket: 16 [ 1166.510577][ T4649] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1166.519673][ T4649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.564880][T29200] loop0: detected capacity change from 0 to 65 [ 1166.578432][ T4649] usb 5-1: Product: syz [ 1166.583907][ T4649] usb 5-1: Manufacturer: syz [ 1166.628269][T29200] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1166.646015][T29202] netlink: 'syz.5.10622': attribute type 32 has an invalid length. [ 1166.646533][ T4649] usb 5-1: SerialNumber: syz [ 1166.694032][ T4649] usb 5-1: config 0 descriptor?? [ 1166.760012][ T4649] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1166.985975][ T4649] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 1166.996816][ T4649] visor: probe of 5-1:0.0 failed with error -5 [ 1167.207585][T29215] loop5: detected capacity change from 0 to 164 [ 1167.347405][ T4649] usb 5-1: USB disconnect, device number 5 [ 1167.508351][T29215] rock: directory entry would overflow storage [ 1167.514583][T29215] rock: sig=0x4f50, size=4, remaining=3 [ 1167.569965][T29215] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1167.846597][ C1] net_ratelimit: 11701 callbacks suppressed [ 1167.846619][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.857850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1167.864879][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1167.876929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1167.889363][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.900875][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1167.912943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.924929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1167.949263][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1167.961727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1168.013057][T29220] loop0: detected capacity change from 0 to 4096 [ 1168.244398][T29210] loop3: detected capacity change from 0 to 32768 [ 1168.394320][T29237] loop6: detected capacity change from 0 to 128 [ 1168.456795][T29237] VFS: Found a Xenix FS (block size = 1024) on device loop6 [ 1168.511554][T29237] syz.6.10637: attempt to access beyond end of device [ 1168.511554][T29237] loop6: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1168.602523][T29237] Buffer I/O error on dev loop6, logical block 3245768, async page read [ 1168.783941][T29244] loop5: detected capacity change from 0 to 1024 [ 1168.800284][T29244] EXT4-fs: Ignoring removed oldalloc option [ 1169.082903][T29244] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1169.351612][T29244] EXT4-fs error (device loop5): ext4_acquire_dquot:6801: comm syz.5.10643: Failed to acquire dquot type 1 [ 1169.479161][T23171] EXT4-fs (loop5): unmounting filesystem. [ 1169.513796][T29237] syz.6.10637: attempt to access beyond end of device [ 1169.513796][T29237] loop6: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1169.589307][T29237] Buffer I/O error on dev loop6, logical block 3245768, async page read [ 1169.729308][T23436] sysv_free_block: flc_count > flc_size [ 1169.762876][T23436] sysv_free_block: flc_count > flc_size [ 1169.766360][T29260] xt_TCPMSS: Only works on TCP SYN packets [ 1169.768458][T23436] sysv_free_block: flc_count > flc_size [ 1169.840573][T23436] sysv_free_block: flc_count > flc_size [ 1169.871762][T23436] sysv_free_block: flc_count > flc_size [ 1169.877373][T23436] sysv_free_block: flc_count > flc_size [ 1169.914640][T23436] sysv_free_block: flc_count > flc_size [ 1169.953335][T23436] sysv_free_block: flc_count > flc_size [ 1169.958997][T23436] sysv_free_block: flc_count > flc_size [ 1169.981434][T23436] sysv_free_block: flc_count > flc_size [ 1169.996610][T23436] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1170.268622][T29275] vivid-000: ================= START STATUS ================= [ 1170.354908][T29275] vivid-000: Generate PTS: true [ 1170.393548][T29275] vivid-000: Generate SCR: true [ 1170.442246][T29275] tpg source WxH: 320x180 (R'G'B) [ 1170.463366][T29275] tpg field: 1 [ 1170.486704][T29275] tpg crop: 320x180@0x0 [ 1170.493968][T29275] tpg compose: 320x180@0x0 [ 1170.505523][T29275] tpg colorspace: 6 [ 1170.525508][T29275] tpg transfer function: 4/0 [ 1170.570008][T29275] tpg quantization: 2/0 [ 1170.574709][T29275] tpg RGB range: 0/2 [ 1170.592322][T29275] vivid-000: ================== END STATUS ================== [ 1170.743830][T29285] loop3: detected capacity change from 0 to 64 [ 1170.820033][T29286] loop4: detected capacity change from 0 to 1024 [ 1170.897044][T29290] netlink: 'syz.0.10664': attribute type 32 has an invalid length. [ 1170.945779][T29285] Trying to free block not in datazone [ 1170.990201][T29285] minix_free_block (loop3:21): bit already cleared [ 1171.123729][T29286] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1171.181529][T29286] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.10663: bad inode number: 6 [ 1171.309650][T29286] EXT4-fs (loop4): Remounting filesystem read-only [ 1171.435168][T29301] loop3: detected capacity change from 0 to 256 [ 1171.496796][ T4673] EXT4-fs (loop4): unmounting filesystem. [ 1171.903919][T29315] loop5: detected capacity change from 0 to 256 [ 1172.086969][T29314] loop6: detected capacity change from 0 to 4096 [ 1172.139555][T29321] kernel profiling enabled (shift: 63) [ 1172.139889][T29314] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1172.162582][T29321] profiling shift: 63 too large [ 1172.343842][T29315] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 1172.649182][T29330] loop0: detected capacity change from 0 to 256 [ 1172.664182][T29331] ieee802154 phy0 wpan0: encryption failed: -90 [ 1172.679527][T29330] exfat: Deprecated parameter 'utf8' [ 1172.711801][T29301] FAT-fs (loop3): Directory bread(block 64) failed [ 1172.718404][T29301] FAT-fs (loop3): Directory bread(block 65) failed [ 1172.757617][T29301] FAT-fs (loop3): Directory bread(block 66) failed [ 1172.773477][T29301] FAT-fs (loop3): Directory bread(block 67) failed [ 1172.811329][T29301] FAT-fs (loop3): Directory bread(block 68) failed [ 1172.857341][T29301] FAT-fs (loop3): Directory bread(block 69) failed [ 1172.869568][ T4649] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1172.887951][T29301] FAT-fs (loop3): Directory bread(block 70) failed [ 1172.913723][T29301] FAT-fs (loop3): Directory bread(block 71) failed [ 1172.952904][T29301] FAT-fs (loop3): Directory bread(block 72) failed [ 1172.959722][T29301] FAT-fs (loop3): Directory bread(block 73) failed [ 1173.170683][T29335] netlink: 'syz.5.10687': attribute type 10 has an invalid length. [ 1173.195157][T29314] ntfs3: loop6: failed to convert "c46c" to default [ 1173.202038][ C0] net_ratelimit: 13333 callbacks suppressed [ 1173.202054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1173.217445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.220378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1173.232376][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.244357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1173.256282][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1173.268401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1173.280837][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.292327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1173.304189][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1173.332928][ T4649] usb 5-1: Using ep0 maxpacket: 32 [ 1173.380693][T29335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.390350][T29335] bond0: (slave team0): Enslaving as an active interface with an up link [ 1173.431294][T29330] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1173.602363][ T4649] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1173.613056][ T4649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.629414][ T4649] usb 5-1: Product: syz [ 1173.633949][ T4649] usb 5-1: Manufacturer: syz [ 1173.638567][ T4649] usb 5-1: SerialNumber: syz [ 1173.685939][ T4649] usb 5-1: config 0 descriptor?? [ 1173.970226][ T4649] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 1173.970250][ T4649] eb 00 00 00 00 00 00 00 [ 1173.970335][ T4649] snd-usb-6fire: probe of 5-1:0.0 failed with error -5 [ 1174.133910][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 1174.133926][ T26] audit: type=1326 audit(8166621.387:6328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.3.10694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43af7e819 code=0x7ffc0000 [ 1174.133963][ T26] audit: type=1326 audit(8166621.387:6329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.3.10694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43af7e819 code=0x7ffc0000 [ 1174.157854][ T26] audit: type=1326 audit(8166621.406:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.3.10694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fa43af7e819 code=0x7ffc0000 [ 1174.157893][ T26] audit: type=1326 audit(8166621.406:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.3.10694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43af7e819 code=0x7ffc0000 [ 1174.157921][ T26] audit: type=1326 audit(8166621.406:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29347 comm="syz.3.10694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa43af7e819 code=0x7ffc0000 [ 1174.225392][ T5136] usb 5-1: USB disconnect, device number 6 [ 1174.438328][T29352] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10695'. [ 1174.632817][ C1] vkms_vblank_simulate: vblank timer overrun [ 1174.791983][ C1] vkms_vblank_simulate: vblank timer overrun [ 1175.477382][T29346] loop5: detected capacity change from 0 to 32768 [ 1175.535992][T29346] XFS: ikeep mount option is deprecated. [ 1175.639153][T29362] loop4: detected capacity change from 0 to 8192 [ 1175.851151][T29346] XFS (loop5): Mounting V5 Filesystem [ 1175.857715][T29362] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1175.959873][T29362] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1176.037116][T29362] REISERFS (device loop4): using ordered data mode [ 1176.045481][T29377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10703'. [ 1176.080409][T29362] reiserfs: using flush barriers [ 1176.111869][T29362] REISERFS warning (device loop4): sh-457 journal_init_dev: journal_init_dev: Cannot open './file0': -15 [ 1176.127025][T29354] loop0: detected capacity change from 0 to 32768 [ 1176.202870][T29362] REISERFS warning (device loop4): sh-462 journal_init: unable to initialize journal device [ 1176.254385][T29362] REISERFS warning (device loop4): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 1176.393423][T29379] loop6: detected capacity change from 0 to 4096 [ 1176.510445][T29379] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1176.549037][T29379] NILFS (loop6): trying rollback from an earlier position [ 1176.627583][T29358] loop3: detected capacity change from 0 to 40427 [ 1176.703063][T29358] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1176.720466][T29379] NILFS (loop6): recovery complete [ 1176.739326][T29358] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1176.762506][T29382] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1176.827816][T29358] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 1177.022419][T29358] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1177.322171][T29358] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1177.347273][T29358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1178.155739][T29408] loop6: detected capacity change from 0 to 1024 [ 1178.567322][ C1] net_ratelimit: 14722 callbacks suppressed [ 1178.567342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.585708][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.589892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1178.598483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.609930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1178.621940][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1178.633880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1178.645821][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1178.657869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1178.670258][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1179.871457][ T5136] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1179.889729][T29439] loop4: detected capacity change from 0 to 1024 [ 1179.997939][T29439] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1180.054098][T29439] EXT4-fs (loop4): invalid journal inode [ 1180.059863][T29439] EXT4-fs (loop4): can't get journal size [ 1180.114772][T29439] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1180.132161][T19168] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1180.239131][ T5136] usb 4-1: Using ep0 maxpacket: 32 [ 1180.295059][ T4673] EXT4-fs (loop4): unmounting filesystem. [ 1180.554208][ T5136] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1180.563341][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.598996][ T5136] usb 4-1: Product: syz [ 1180.603213][ T5136] usb 4-1: Manufacturer: syz [ 1180.658155][T19168] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.679208][T19168] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1180.688538][ T5136] usb 4-1: SerialNumber: syz [ 1180.716864][ T5136] usb 4-1: config 0 descriptor?? [ 1180.722889][T19168] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1180.759142][T29453] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1180.776157][T29346] XFS (loop5): Ending clean mount [ 1180.835251][T29346] XFS (loop5): Quotacheck needed: Please wait. [ 1180.870907][T19168] usb 7-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 1180.887606][T19168] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.912166][T19168] usb 7-1: Product: syz [ 1180.916384][T19168] usb 7-1: Manufacturer: syz [ 1180.933824][T29455] binder: binder_mmap: 29454 20174000-20d74000 bad vm_flags failed -1 [ 1180.955532][T19168] usb 7-1: SerialNumber: syz [ 1180.962041][T19168] usb 7-1: config 0 descriptor?? [ 1181.016846][ T5136] snd-usb-6fire 4-1:0.0: unknown device firmware state received from device: [ 1181.028198][ T5136] eb 00 00 00 00 00 00 00 [ 1181.032756][ T5136] snd-usb-6fire: probe of 4-1:0.0 failed with error -5 [ 1181.338793][T29346] XFS (loop5): Quotacheck: Done. [ 1181.378892][ T5136] usb 4-1: USB disconnect, device number 126 [ 1181.509077][T19051] usb 7-1: USB disconnect, device number 10 [ 1181.625297][T23171] XFS (loop5): Unmounting Filesystem [ 1181.899178][T29467] loop0: detected capacity change from 0 to 4096 [ 1181.997007][T29467] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1182.007038][T29467] NILFS (loop0): trying rollback from an earlier position [ 1182.184791][T29475] netlink: 'syz.4.10748': attribute type 10 has an invalid length. [ 1182.269459][T29475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.291010][T29467] NILFS (loop0): recovery complete [ 1182.306114][T29475] bond0: (slave team0): Enslaving as an active interface with an up link [ 1182.361012][T29477] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1182.963874][T29494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10758'. [ 1183.124580][T29496] loop0: detected capacity change from 0 to 164 [ 1183.306216][T29499] Scaler: ================= START STATUS ================= [ 1183.313696][T29499] Scaler: ================== END STATUS ================== [ 1183.416610][T29496] Process accounting resumed [ 1183.912716][ C0] net_ratelimit: 14756 callbacks suppressed [ 1183.912734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1183.913243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.918957][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1183.931002][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.942836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1183.954813][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1183.966842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1183.979428][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.990800][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1184.002789][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1184.074519][T29516] netlink: 220 bytes leftover after parsing attributes in process `syz.6.10768'. [ 1184.550050][T29533] loop0: detected capacity change from 0 to 764 [ 1184.820206][T29541] loop3: detected capacity change from 0 to 256 [ 1184.836865][T29542] loop4: detected capacity change from 0 to 16 [ 1184.923101][T29542] erofs: (device loop4): mounted with root inode @ nid 36. [ 1185.109928][ T4649] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1185.154484][T29548] loop6: detected capacity change from 0 to 256 [ 1185.457265][T29541] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1185.502204][ T4649] usb 6-1: Using ep0 maxpacket: 8 [ 1185.618472][ T4649] usb 6-1: config 135 has an invalid interface number: 230 but max is 0 [ 1185.635217][ T4649] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.678445][ T4649] usb 6-1: config 135 has no interface number 0 [ 1185.712714][ T4649] usb 6-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1185.752744][ T4649] usb 6-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1185.823057][ T4649] usb 6-1: config 135 interface 230 has no altsetting 0 [ 1185.996628][ T4649] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1186.006229][ T4649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.039889][ T4649] usb 6-1: Product: syz [ 1186.055022][ T4649] usb 6-1: Manufacturer: syz [ 1186.059671][ T4649] usb 6-1: SerialNumber: syz [ 1186.144321][ T4649] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 1186.151239][ T4649] usb 6-1: No valid video chain found. [ 1186.455497][ T4649] usb 6-1: USB disconnect, device number 8 [ 1186.638756][T29548] FAT-fs (loop6): Directory bread(block 64) failed [ 1186.645338][T29548] FAT-fs (loop6): Directory bread(block 65) failed [ 1186.663919][T29548] FAT-fs (loop6): Directory bread(block 66) failed [ 1186.686761][T29548] FAT-fs (loop6): Directory bread(block 67) failed [ 1186.715834][T29548] FAT-fs (loop6): Directory bread(block 68) failed [ 1186.742957][T29548] FAT-fs (loop6): Directory bread(block 69) failed [ 1186.776128][T29548] FAT-fs (loop6): Directory bread(block 70) failed [ 1186.792946][T29548] FAT-fs (loop6): Directory bread(block 71) failed [ 1186.857928][T29548] FAT-fs (loop6): Directory bread(block 72) failed [ 1186.921814][T29548] FAT-fs (loop6): Directory bread(block 73) failed [ 1186.937619][T29582] loop3: detected capacity change from 0 to 1024 [ 1188.619326][T29621] loop0: detected capacity change from 0 to 512 [ 1188.953470][T29592] loop4: detected capacity change from 0 to 32768 [ 1189.268149][ C0] net_ratelimit: 12797 callbacks suppressed [ 1189.268169][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1189.286549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1189.298955][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1189.311327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1189.323631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.323712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1189.335908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1189.347854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1189.359990][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1189.372151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1189.396564][T29621] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.10818: couldn't read orphan inode 26 (err -116) [ 1189.585675][T29621] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1189.667009][T29592] [ 1189.667009][T29592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1189.667009][T29592] [ 1189.690433][T29648] loop6: detected capacity change from 0 to 256 [ 1189.820506][T29592] [ 1189.820506][T29592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1189.820506][T29592] [ 1189.829015][ T4664] EXT4-fs (loop0): unmounting filesystem. [ 1189.856044][T29592] [ 1189.856044][T29592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1189.856044][T29592] [ 1189.903421][T29592] [ 1189.903421][T29592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1189.903421][T29592] [ 1189.998929][T29592] [ 1189.998929][T29592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1189.998929][T29592] [ 1190.069751][T29592] [ 1190.069751][T29592] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1190.069751][T29592] [ 1190.074923][T29655] loop5: detected capacity change from 0 to 47 [ 1190.169866][ T105] [ 1190.169866][ T105] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1190.169866][ T105] [ 1190.261694][ T4673] [ 1190.261694][ T4673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1190.261694][ T4673] [ 1190.317829][ T4673] [ 1190.317829][ T4673] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1190.317829][ T4673] [ 1190.998359][T29674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10844'. [ 1191.375812][T29648] FAT-fs (loop6): Directory bread(block 64) failed [ 1191.382607][T29648] FAT-fs (loop6): Directory bread(block 65) failed [ 1191.400189][T29648] FAT-fs (loop6): Directory bread(block 66) failed [ 1191.421527][T29648] FAT-fs (loop6): Directory bread(block 67) failed [ 1191.472074][T29648] FAT-fs (loop6): Directory bread(block 68) failed [ 1191.478661][T29648] FAT-fs (loop6): Directory bread(block 69) failed [ 1191.495216][T29648] FAT-fs (loop6): Directory bread(block 70) failed [ 1191.509907][T29648] FAT-fs (loop6): Directory bread(block 71) failed [ 1191.535287][T29648] FAT-fs (loop6): Directory bread(block 72) failed [ 1191.583198][T29648] FAT-fs (loop6): Directory bread(block 73) failed [ 1191.756673][ T124] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1191.823630][T29691] sctp: [Deprecated]: syz.3.10851 (pid 29691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1191.823630][T29691] Use struct sctp_sack_info instead [ 1192.130244][ T124] usb 6-1: Using ep0 maxpacket: 32 [ 1192.160753][T29698] netlink: 'syz.3.10855': attribute type 10 has an invalid length. [ 1192.262699][ T124] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1192.270817][ T124] usb 6-1: config 0 has no interface number 0 [ 1192.368979][T29700] loop6: detected capacity change from 0 to 512 [ 1192.401240][T29700] EXT4-fs: Ignoring removed i_version option [ 1192.436600][ T124] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1192.446285][ T124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.473157][ T124] usb 6-1: Product: syz [ 1192.487212][ T124] usb 6-1: Manufacturer: syz [ 1192.492077][ T124] usb 6-1: SerialNumber: syz [ 1192.516129][T29698] device hsr_slave_0 left promiscuous mode [ 1192.523766][ T124] usb 6-1: config 0 descriptor?? [ 1192.583824][ T124] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1192.591374][T29680] loop0: detected capacity change from 0 to 40427 [ 1192.595267][ T124] usb 6-1: selecting invalid altsetting 1 [ 1192.607090][T29700] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1192.620287][ T124] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1192.653431][T29680] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1192.653685][ T124] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1192.673466][T29680] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1192.724164][ T124] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1192.748880][ T124] usb 6-1: media controller created [ 1192.767972][T29680] F2FS-fs (loop0): invalid crc_offset: 33558524 [ 1192.801174][ T124] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1192.803211][T29700] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1192.833498][T29700] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e01c, mo2=0002] [ 1192.857126][T29700] System zones: 0-1, 15-15, 18-18, 34-34 [ 1192.900574][T29680] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1192.924652][ T124] usb 6-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 1192.933521][ T124] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 1192.934000][T29700] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1193.045663][T29700] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1193.076763][T29700] EXT4-fs warning (device loop6): ext4_enable_quotas:7036: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1193.124153][ T124] DVB: Unable to find symbol mxl5005s_attach() [ 1193.165386][T29700] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1193.181987][ T124] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1193.211670][T29700] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.10856: bg 0: block 40: padding at end of block bitmap is not set [ 1193.238123][T29680] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1193.246058][T29700] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 1193.266575][T29680] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1193.274554][T29700] EXT4-fs (loop6): 1 truncate cleaned up [ 1193.285244][T29700] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1193.391406][ T124] usb 6-1: USB disconnect, device number 9 [ 1193.501036][T29700] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.10856: bad symlink. [ 1193.642754][T23436] EXT4-fs (loop6): unmounting filesystem. [ 1193.950500][T29721] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10863'. [ 1194.114072][T29723] loop5: detected capacity change from 0 to 256 [ 1194.341132][T29727] loop4: detected capacity change from 0 to 256 [ 1194.623441][ C0] net_ratelimit: 13587 callbacks suppressed [ 1194.623463][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1194.630481][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.641732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1194.653646][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.665617][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1194.677551][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1194.689592][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1194.702316][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1194.713771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1194.725665][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.013163][T29739] loop6: detected capacity change from 0 to 512 [ 1195.153967][T29739] EXT4-fs error (device loop6): ext4_find_inline_data_nolock:164: inode #12: comm syz.6.10870: inline data xattr refers to an external xattr inode [ 1195.199491][T29739] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.10870: couldn't read orphan inode 12 (err -117) [ 1195.231317][T29739] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1195.304539][T29745] loop0: detected capacity change from 0 to 1024 [ 1195.320690][T29727] FAT-fs (loop4): Directory bread(block 64) failed [ 1195.329258][T29727] FAT-fs (loop4): Directory bread(block 65) failed [ 1195.339236][T29727] FAT-fs (loop4): Directory bread(block 66) failed [ 1195.380260][T23436] EXT4-fs (loop6): unmounting filesystem. [ 1195.385574][T29727] FAT-fs (loop4): Directory bread(block 67) failed [ 1195.401795][T29727] FAT-fs (loop4): Directory bread(block 68) failed [ 1195.446528][T29727] FAT-fs (loop4): Directory bread(block 69) failed [ 1195.477145][T29727] FAT-fs (loop4): Directory bread(block 70) failed [ 1195.543504][T29727] FAT-fs (loop4): Directory bread(block 71) failed [ 1195.557136][T29749] loop6: detected capacity change from 0 to 8 [ 1195.584543][T29727] FAT-fs (loop4): Directory bread(block 72) failed [ 1195.636626][T29727] FAT-fs (loop4): Directory bread(block 73) failed [ 1195.729279][T29723] FAT-fs (loop5): Directory bread(block 64) failed [ 1195.744503][T29723] FAT-fs (loop5): Directory bread(block 65) failed [ 1195.760353][T29723] FAT-fs (loop5): Directory bread(block 66) failed [ 1195.776548][T29723] FAT-fs (loop5): Directory bread(block 67) failed [ 1195.798990][T29723] FAT-fs (loop5): Directory bread(block 68) failed [ 1195.866334][T29723] FAT-fs (loop5): Directory bread(block 69) failed [ 1195.889947][T29723] FAT-fs (loop5): Directory bread(block 70) failed [ 1195.910285][T29723] FAT-fs (loop5): Directory bread(block 71) failed [ 1195.950194][T29723] FAT-fs (loop5): Directory bread(block 72) failed [ 1195.996958][T29723] FAT-fs (loop5): Directory bread(block 73) failed [ 1196.758425][T29774] loop5: detected capacity change from 0 to 512 [ 1196.817087][T29776] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10887'. [ 1196.834990][T29774] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1196.858600][ T26] audit: type=1326 audit(8166642.642:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29777 comm="syz.6.10888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f976b57e819 code=0x0 [ 1197.039125][T29774] EXT4-fs (loop5): 1 truncate cleaned up [ 1197.048697][T29774] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1197.365628][T23171] EXT4-fs (loop5): unmounting filesystem. [ 1197.653177][T29797] loop6: detected capacity change from 0 to 1024 [ 1197.986472][T29797] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1198.172096][T29811] loop3: detected capacity change from 0 to 16 [ 1198.276219][T29811] erofs: (device loop3): mounted with root inode @ nid 36. [ 1198.373632][T23436] EXT4-fs (loop6): unmounting filesystem. [ 1198.503271][T29817] loop5: detected capacity change from 0 to 512 [ 1198.517742][T29815] loop4: detected capacity change from 0 to 4096 [ 1198.601219][T29819] netlink: 'syz.3.10907': attribute type 2 has an invalid length. [ 1198.784838][T29817] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:164: inode #12: comm syz.5.10905: inline data xattr refers to an external xattr inode [ 1198.864866][T29817] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.10905: couldn't read orphan inode 12 (err -117) [ 1198.928548][T29817] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1199.087011][T23171] EXT4-fs (loop5): unmounting filesystem. [ 1199.294334][T29835] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1199.340733][T29835] FAT-fs (loop5): unable to read boot sector [ 1199.618343][T29841] loop6: detected capacity change from 0 to 2048 [ 1199.978791][ C0] net_ratelimit: 12178 callbacks suppressed [ 1199.978811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1199.984397][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1199.985131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1199.997000][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1200.009188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1200.021666][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.033045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1200.045015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.056912][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1200.068784][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1200.678273][T29868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10927'. [ 1200.781520][T29868] netlink: 'syz.4.10927': attribute type 1 has an invalid length. [ 1200.789417][T29868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10927'. [ 1201.154167][T29880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10934'. [ 1201.266337][T29882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10935'. [ 1202.135857][T29874] loop5: detected capacity change from 0 to 32768 [ 1202.177869][T29894] netlink: 'syz.3.10941': attribute type 49 has an invalid length. [ 1202.365275][T29898] netlink: 'syz.3.10943': attribute type 1 has an invalid length. [ 1202.388610][T29898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10943'. [ 1202.427626][T29898] netlink: 'syz.3.10943': attribute type 1 has an invalid length. [ 1202.500401][T29900] loop0: detected capacity change from 0 to 8 [ 1202.872900][T29874] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1203.214363][T29890] loop4: detected capacity change from 0 to 32768 [ 1203.281804][T23171] ocfs2: Unmounting device (7,5) on (node local) [ 1203.313379][T29890] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.10939 (29890) [ 1203.448927][T29890] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1203.463720][T29890] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1203.473001][T29890] BTRFS info (device loop4): force zlib compression, level 3 [ 1203.569362][T29890] BTRFS info (device loop4): force clearing of disk cache [ 1203.612093][T29890] BTRFS info (device loop4): setting nodatasum [ 1203.618655][T29890] BTRFS info (device loop4): use zlib compression, level 3 [ 1203.634388][T29890] BTRFS info (device loop4): allowing degraded mounts [ 1203.680355][T29890] BTRFS info (device loop4): enabling disk space caching [ 1203.687543][T29890] BTRFS info (device loop4): disk space caching is enabled [ 1204.056370][T29928] loop6: detected capacity change from 0 to 4096 [ 1204.121457][T29933] loop5: detected capacity change from 0 to 4096 [ 1204.265782][T29933] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1204.344459][T29928] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match. Run ntfsfix or chkdsk. [ 1204.381715][T29928] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1204.423647][T29928] ntfs: (device loop6): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1204.447775][T29890] BTRFS info (device loop4): enabling ssd optimizations [ 1204.455245][T29928] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1204.496842][T29928] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1204.525847][T29890] BTRFS info (device loop4): rebuilding free space tree [ 1204.569017][T29928] ntfs: volume version 3.1. [ 1204.573638][T29928] ntfs: (device loop6): ntfs_read_locked_inode(): Inode is not in use! [ 1204.621806][T29890] BTRFS info (device loop4): disabling free space tree [ 1204.632530][T29890] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1204.651900][T29928] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x2 as bad. Run chkdsk. [ 1204.689158][T29890] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1204.783971][T29928] ntfs: (device loop6): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1204.959023][T29962] xt_CT: No such helper "snmp" [ 1205.050033][T29928] ntfs: (device loop6): ntfs_read_locked_inode(): $INDEX_ROOT attribute is missing. [ 1205.096654][T29890] BTRFS info (device loop4): balance: start -f -susage=8589934599,usage=7..2,limit=17179869188,limit=4..4 [ 1205.113318][T29928] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1205.144688][T29890] BTRFS info (device loop4): balance: ended with status: 0 [ 1205.334785][ C1] net_ratelimit: 12588 callbacks suppressed [ 1205.334804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.353144][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.365507][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1205.366606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1205.378264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.390322][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1205.401687][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1205.414128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1205.425568][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1205.438157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1205.516903][ T4673] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1205.579124][T29972] loop0: detected capacity change from 0 to 4096 [ 1205.658338][T29972] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1205.711548][ T5135] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1206.097856][ T5135] usb 4-1: Using ep0 maxpacket: 16 [ 1206.333893][ T5135] usb 4-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=a9.3c [ 1206.376870][ T5135] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.406361][ T5135] usb 4-1: config 0 descriptor?? [ 1206.486211][ T5135] quatech2 4-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1206.726020][ T5135] usb 4-1: qt2_setup_urbs - submit read urb failed -8 [ 1206.733088][ T5135] quatech2: probe of 4-1:0.0 failed with error -8 [ 1206.981104][ T5136] usb 4-1: USB disconnect, device number 127 [ 1207.012611][T29972] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 1207.019925][T29972] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1207.129495][T29972] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 1207.320608][ T4796] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 1207.365533][ T4664] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 1208.675312][T30032] loop3: detected capacity change from 0 to 256 [ 1209.058464][T30043] loop5: detected capacity change from 0 to 64 [ 1209.323296][T30032] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1209.499353][T30032] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008) [ 1209.584454][T30018] loop4: detected capacity change from 0 to 32768 [ 1209.605612][T30032] exFAT-fs (loop3): Filesystem has been set read-only [ 1210.243062][T30067] loop6: detected capacity change from 0 to 1024 [ 1210.555561][T30018] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1210.689998][ C0] net_ratelimit: 7169 callbacks suppressed [ 1210.690018][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1210.703713][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.708741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1210.720140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.732627][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1210.743999][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1210.756575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1210.768421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1210.780434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1210.791843][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1211.115942][T30090] x_tables: unsorted entry at hook 3 [ 1211.426598][T30097] loop3: detected capacity change from 0 to 1024 [ 1211.564258][ T4673] ocfs2: Unmounting device (7,4) on (node local) [ 1212.244487][T30109] loop4: detected capacity change from 0 to 4096 [ 1212.383669][T30109] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 1212.532869][T30112] loop0: detected capacity change from 0 to 4096 [ 1212.537350][T30120] xt_recent: Unsupported userspace flags (00000064) [ 1212.695700][T30112] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 1212.835923][ T5135] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1213.331153][ T5135] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1213.365713][ T5135] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1213.584742][ T5135] usb 6-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=39.78 [ 1213.598438][ T5135] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.606490][ T5135] usb 6-1: Product: syz [ 1213.650512][ T5135] usb 6-1: Manufacturer: syz [ 1213.655424][ T5135] usb 6-1: SerialNumber: syz [ 1213.700974][ T5135] usb 6-1: config 0 descriptor?? [ 1213.776592][ T5135] usbtest 6-1:0.0: couldn't get endpoints, -22 [ 1213.782902][ T5135] usbtest: probe of 6-1:0.0 failed with error -22 [ 1214.044965][ T5135] usb 6-1: USB disconnect, device number 10 [ 1214.171309][T30109] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1214.279169][T30109] ntfs3: loop4: ino=5, "/" attr_set_size [ 1214.437032][T30126] loop3: detected capacity change from 0 to 40427 [ 1214.553202][T30126] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1214.612556][T30126] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1214.776964][T30150] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11044'. [ 1214.986821][T30126] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1215.345647][T30165] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 1215.418031][T30126] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1215.458268][T30126] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1215.829968][T30174] loop5: detected capacity change from 0 to 2048 [ 1215.925350][T30176] Process accounting paused [ 1215.986977][ T4649] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1216.044968][ C1] net_ratelimit: 6696 callbacks suppressed [ 1216.044988][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.045244][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1216.051159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.063699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1216.075017][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1216.087762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1216.099528][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.111558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1216.122964][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.135488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1216.218102][T30180] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1216.664760][T30180] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1216.693181][T30180] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1216.935312][T30180] Remounting filesystem read-only [ 1216.940587][ T52] NILFS (loop5): discard dirty page: offset=0, ino=2 [ 1216.994220][ T4649] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1217.004090][ T4649] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.020995][ T52] NILFS (loop5): discard dirty block: blocknr=18, size=1024 [ 1217.028714][ T4649] usb 5-1: Product: syz [ 1217.032904][ T4649] usb 5-1: Manufacturer: syz [ 1217.037517][ T4649] usb 5-1: SerialNumber: syz [ 1217.042738][ T52] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.078884][ T52] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.112363][ T4649] usb 5-1: config 0 descriptor?? [ 1217.152840][ T52] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.217320][ T52] NILFS (loop5): discard dirty page: offset=0, ino=5 [ 1217.231443][ T52] NILFS (loop5): discard dirty block: blocknr=41, size=1024 [ 1217.263524][ T52] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.306264][ T52] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.338256][ T52] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.356940][T23171] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 1217.366942][T23171] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 1217.390575][T23171] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.445234][T23171] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.484479][T23171] NILFS (loop5): discard dirty block: blocknr=37, size=1024 [ 1217.560758][ T4649] usb 5-1: ignoring: probably an ADSL modem [ 1217.581456][T23171] NILFS (loop5): discard dirty block: blocknr=38, size=1024 [ 1217.625887][T23171] NILFS (loop5): discard dirty page: offset=0, ino=4 [ 1217.656353][T23171] NILFS (loop5): discard dirty block: blocknr=40, size=1024 [ 1217.689545][T23171] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.726757][T23171] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.768852][T23171] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1217.808913][T23171] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 1217.844241][T23171] NILFS (loop5): discard dirty block: blocknr=42, size=1024 [ 1217.874239][ T4649] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1217.878387][T23171] NILFS (loop5): discard dirty block: blocknr=43, size=1024 [ 1217.924737][T23171] NILFS (loop5): discard dirty block: blocknr=44, size=1024 [ 1217.929971][ T4649] usb 5-1: USB disconnect, device number 7 [ 1217.945560][T30199] loop3: detected capacity change from 0 to 2048 [ 1218.001384][T23171] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1218.255846][T30205] netlink: 196 bytes leftover after parsing attributes in process `syz.0.11060'. [ 1218.267481][T30204] loop6: detected capacity change from 0 to 64 [ 1218.317090][T30205] tc_dump_action: action bad kind [ 1218.363437][T30199] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1219.038880][T30216] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1219.510688][T30228] netlink: 'syz.4.11070': attribute type 30 has an invalid length. [ 1219.768269][T30232] loop5: detected capacity change from 0 to 256 [ 1220.117101][T30241] loop3: detected capacity change from 0 to 512 [ 1220.153523][T30243] loop0: detected capacity change from 0 to 8 [ 1220.177477][T30243] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 1220.238005][T30241] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1220.264256][T30243] cramfs: Error -3 while decompressing! [ 1220.286739][T30243] cramfs: ffffffff974c5582(26)->ffff888053b30000(4096) [ 1220.320778][T30243] cramfs: Error -3 while decompressing! [ 1220.351754][T30243] cramfs: ffffffff974c559c(16)->ffff8880542d4000(4096) [ 1220.358953][T30243] cramfs: Error -3 while decompressing! [ 1220.364706][T30243] cramfs: ffffffff974c5582(26)->ffff888053b30000(4096) [ 1220.406420][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1220.406435][ T26] audit: type=1800 audit(8166664.673:6343): pid=30243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.11079" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 1220.571905][T30241] EXT4-fs error (device loop3): __ext4_iget:5055: inode #11: block 16: comm syz.3.11078: invalid block [ 1220.661111][T30241] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.11078: couldn't read orphan inode 11 (err -117) [ 1220.788113][T30241] EXT4-fs (loop3): 1 truncate cleaned up [ 1220.801715][T30241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1220.841824][ T5133] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1220.878606][T30241] UBIFS error (pid: 30241): cannot open "./file1", error -22 [ 1220.891223][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 1220.905047][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 1221.069721][ T4667] EXT4-fs (loop3): unmounting filesystem. [ 1221.173581][T30251] loop4: detected capacity change from 0 to 4096 [ 1221.235189][T30257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11085'. [ 1221.244507][T30251] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1221.400316][ C1] net_ratelimit: 6855 callbacks suppressed [ 1221.400335][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1221.400892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1221.407171][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.419179][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1221.430746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.443217][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1221.454511][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1221.467104][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1221.479029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.491082][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1221.514722][ T5133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1221.559935][ T5133] usb 6-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 1221.612574][ T5133] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.642806][ T5133] usb 6-1: config 0 descriptor?? [ 1222.168061][ T5133] usbhid 6-1:0.0: can't add hid device: -71 [ 1222.174140][ T5133] usbhid: probe of 6-1:0.0 failed with error -71 [ 1222.263820][ T5133] usb 6-1: USB disconnect, device number 11 [ 1223.206714][ T4643] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1223.315861][T30291] netlink: 'syz.5.11102': attribute type 4 has an invalid length. [ 1223.323954][T30291] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11102'. [ 1223.617712][ T4643] usb 1-1: Using ep0 maxpacket: 8 [ 1223.862183][ T4643] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 1223.870860][ T4643] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.921561][ T4643] usb 1-1: config 135 has no interface number 0 [ 1223.953948][ T4643] usb 1-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1224.021206][ T4643] usb 1-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1224.083753][ T4643] usb 1-1: config 135 interface 230 has no altsetting 0 [ 1224.256882][T30297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11105'. [ 1224.360360][ T4643] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1224.380729][ T4643] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.412304][T30289] loop3: detected capacity change from 0 to 32768 [ 1224.417242][ T4643] usb 1-1: Product: syz [ 1224.466707][ T4643] usb 1-1: Manufacturer: syz [ 1224.494268][ T4643] usb 1-1: SerialNumber: syz [ 1224.525065][T30299] loop5: detected capacity change from 0 to 4096 [ 1224.591248][T30299] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1224.754519][T30303] loop4: detected capacity change from 0 to 128 [ 1224.824971][ T4643] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 1224.842945][ T4643] usb 1-1: No valid video chain found. [ 1224.920777][T30289] ERROR: (device loop3): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 1224.920777][T30289] [ 1225.017874][T30289] ERROR: (device loop3): remounting filesystem as read-only [ 1225.030489][T30289] ERROR: (device loop3): jfs_unlink: [ 1225.030489][T30289] [ 1225.127493][ T124] usb 1-1: USB disconnect, device number 122 [ 1225.284434][ T4667] ERROR: (device loop3): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1225.284434][ T4667] [ 1225.302451][T30307] x_tables: unsorted underflow at hook 3 [ 1226.135720][T23173] Bluetooth: hci4: unexpected event for opcode 0x0c13 [ 1226.346292][T30299] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1226.756264][ C0] net_ratelimit: 7117 callbacks suppressed [ 1226.756285][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1226.775853][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1226.776063][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.789105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1226.800725][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.814792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1226.826518][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1226.839661][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1226.852790][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.864369][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1227.057440][T30335] loop6: detected capacity change from 0 to 1024 [ 1227.201342][T30340] netlink: 'syz.0.11125': attribute type 3 has an invalid length. [ 1227.244745][T30340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11125'. [ 1227.341389][T30346] loop3: detected capacity change from 0 to 128 [ 1227.524290][T30346] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 1227.535360][T30346] sysv_free_block: trying to free block not in datazone [ 1227.602562][T30346] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1227.771957][T30335] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1228.325608][T23436] EXT4-fs (loop6): unmounting filesystem. [ 1228.555885][T30377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11143'. [ 1228.632651][T30377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11143'. [ 1228.699341][T30377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11143'. [ 1229.425452][ T5136] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1229.695142][T30407] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1229.791915][ T5136] usb 7-1: Using ep0 maxpacket: 32 [ 1229.923062][ T5136] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1229.943265][ T5136] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.002267][ T5136] usb 7-1: config 0 descriptor?? [ 1230.354213][ T5136] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1230.367012][ T5136] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1230.451799][ T5136] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1230.460738][ T5136] usb 7-1: media controller created [ 1230.558041][ T5136] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1230.666210][ T5136] az6027: usb out operation failed. (-71) [ 1230.696027][ T5136] az6027: usb out operation failed. (-71) [ 1230.710739][ T5136] stb0899_attach: Driver disabled by Kconfig [ 1230.727681][ T5136] az6027: no front-end attached [ 1230.727681][ T5136] [ 1230.791240][ T5136] az6027: usb out operation failed. (-71) [ 1230.826064][ T5136] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1230.874732][ T5136] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input105 [ 1230.938338][ T5136] dvb-usb: schedule remote query interval to 400 msecs. [ 1230.953342][ T5136] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1231.040441][ T5136] usb 7-1: USB disconnect, device number 11 [ 1231.350640][ T5136] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1231.711284][T30451] loop0: detected capacity change from 0 to 4096 [ 1231.802104][ T51] block nbd6: Attempted send on invalid socket [ 1231.808419][ T51] I/O error, dev nbd6, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1231.825731][T30455] VFS: unable to read V7 FS superblock on device nbd6. [ 1231.851957][T30455] VFS: could not find a valid V7 on nbd6. [ 1231.927445][T30451] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1232.111366][ C0] net_ratelimit: 6722 callbacks suppressed [ 1232.111388][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1232.130486][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1232.143561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1232.146216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.156556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1232.167962][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.180506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1232.191847][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1232.204416][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1232.216277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1232.335136][T30451] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1232.514288][T30451] [ 1232.516666][T30451] ====================================================== [ 1232.523698][T30451] WARNING: possible circular locking dependency detected [ 1232.530733][T30451] 6.1.118-syzkaller #0 Not tainted [ 1232.535852][T30451] ------------------------------------------------------ [ 1232.542880][T30451] syz.0.11178/30451 is trying to acquire lock: [ 1232.549044][T30451] ffff888057d07768 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x57/0x510 [ 1232.557949][T30451] [ 1232.557949][T30451] but task is already holding lock: [ 1232.565325][T30451] ffff88804fe2d2c8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_setattr+0x13fa/0x1a00 [ 1232.574678][T30451] [ 1232.574678][T30451] which lock already depends on the new lock. [ 1232.574678][T30451] [ 1232.585099][T30451] [ 1232.585099][T30451] the existing dependency chain (in reverse order) is: [ 1232.594298][T30451] [ 1232.594298][T30451] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 1232.602151][T30451] lock_acquire+0x1f8/0x5a0 [ 1232.607220][T30451] down_read+0xad/0xa30 [ 1232.611916][T30451] ext4_map_blocks+0x379/0x1cb0 [ 1232.617311][T30451] ext4_getblk+0x1eb/0x7c0 [ 1232.622277][T30451] ext4_bread+0x2a/0x170 [ 1232.627064][T30451] ext4_quota_read+0x1a1/0x2c0 [ 1232.632376][T30451] find_tree_dqentry+0x1cd/0xf70 [ 1232.637877][T30451] find_tree_dqentry+0x6a8/0xf70 [ 1232.643370][T30451] find_tree_dqentry+0x6a8/0xf70 [ 1232.648856][T30451] find_tree_dqentry+0x6a8/0xf70 [ 1232.654343][T30451] qtree_read_dquot+0x546/0x7f0 [ 1232.659745][T30451] v2_read_dquot+0xbe/0x100 [ 1232.664882][T30451] dquot_acquire+0x188/0x680 [ 1232.670018][T30451] ext4_acquire_dquot+0x2eb/0x4a0 [ 1232.675591][T30451] dqget+0x762/0xe90 [ 1232.680033][T30451] __dquot_initialize+0x45e/0xea0 [ 1232.685608][T30451] ext4_process_orphan+0x57/0x2d0 [ 1232.691185][T30451] ext4_orphan_cleanup+0xb70/0x1400 [ 1232.696935][T30451] ext4_fill_super+0x83ff/0x8b50 [ 1232.702422][T30451] get_tree_bdev+0x3fe/0x620 [ 1232.707556][T30451] vfs_get_tree+0x88/0x270 [ 1232.712520][T30451] do_new_mount+0x2ba/0xb40 [ 1232.717570][T30451] __se_sys_mount+0x2d5/0x3c0 [ 1232.722809][T30451] do_syscall_64+0x3b/0xb0 [ 1232.727781][T30451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1232.734335][T30451] [ 1232.734335][T30451] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 1232.742534][T30451] lock_acquire+0x1f8/0x5a0 [ 1232.747593][T30451] down_read+0xad/0xa30 [ 1232.752296][T30451] v2_read_dquot+0x4a/0x100 [ 1232.757350][T30451] dquot_acquire+0x188/0x680 [ 1232.762483][T30451] ext4_acquire_dquot+0x2eb/0x4a0 [ 1232.768053][T30451] dqget+0x762/0xe90 [ 1232.772496][T30451] __dquot_initialize+0x45e/0xea0 [ 1232.778070][T30451] ext4_process_orphan+0x57/0x2d0 [ 1232.783733][T30451] ext4_orphan_cleanup+0xb70/0x1400 [ 1232.789486][T30451] ext4_fill_super+0x83ff/0x8b50 [ 1232.794974][T30451] get_tree_bdev+0x3fe/0x620 [ 1232.800111][T30451] vfs_get_tree+0x88/0x270 [ 1232.805092][T30451] do_new_mount+0x2ba/0xb40 [ 1232.810152][T30451] __se_sys_mount+0x2d5/0x3c0 [ 1232.815373][T30451] do_syscall_64+0x3b/0xb0 [ 1232.820339][T30451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1232.826794][T30451] [ 1232.826794][T30451] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1232.834470][T30451] validate_chain+0x1661/0x5950 [ 1232.839867][T30451] __lock_acquire+0x125b/0x1f80 [ 1232.845263][T30451] lock_acquire+0x1f8/0x5a0 [ 1232.850329][T30451] __mutex_lock+0x132/0xd80 [ 1232.855379][T30451] dquot_commit+0x57/0x510 [ 1232.860338][T30451] ext4_write_dquot+0x1fd/0x360 [ 1232.865735][T30451] mark_all_dquot_dirty+0xf7/0x400 [ 1232.871481][T30451] __dquot_alloc_space+0xb68/0x10e0 [ 1232.877227][T30451] ext4_mb_new_blocks+0x1302/0x4b80 [ 1232.882969][T30451] ext4_new_meta_blocks+0x206/0x4f0 [ 1232.889513][T30451] ext4_xattr_block_set+0x22ca/0x3920 [ 1232.895446][T30451] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 1232.901888][T30451] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 1232.908071][T30451] __ext4_mark_inode_dirty+0x54f/0x920 [ 1232.914075][T30451] ext4_setattr+0x1493/0x1a00 [ 1232.919297][T30451] notify_change+0xce3/0xfc0 [ 1232.924440][T30451] do_truncate+0x21c/0x300 [ 1232.929397][T30451] vfs_truncate+0x2dd/0x3a0 [ 1232.934475][T30451] do_sys_truncate+0xda/0x190 [ 1232.939706][T30451] do_syscall_64+0x3b/0xb0 [ 1232.944770][T30451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1232.951481][T30451] [ 1232.951481][T30451] other info that might help us debug this: [ 1232.951481][T30451] [ 1232.961827][T30451] Chain exists of: [ 1232.961827][T30451] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 1232.961827][T30451] [ 1232.975775][T30451] Possible unsafe locking scenario: [ 1232.975775][T30451] [ 1232.983244][T30451] CPU0 CPU1 [ 1232.988627][T30451] ---- ---- [ 1232.994008][T30451] lock(&ei->i_data_sem/2); [ 1232.998622][T30451] lock(&s->s_dquot.dqio_sem); [ 1233.006024][T30451] lock(&ei->i_data_sem/2); [ 1233.013164][T30451] lock(&dquot->dq_lock); [ 1233.017603][T30451] [ 1233.017603][T30451] *** DEADLOCK *** [ 1233.017603][T30451] [ 1233.025762][T30451] 6 locks held by syz.0.11178/30451: [ 1233.031064][T30451] #0: ffff888068822460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 1233.040278][T30451] #1: ffff88804fe2d440 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: do_truncate+0x208/0x300 [ 1233.050782][T30451] #2: ffff88804fe2d5e0 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_setattr+0xec7/0x1a00 [ 1233.061010][T30451] #3: ffff88804fe2d2c8 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_setattr+0x13fa/0x1a00 [ 1233.070806][T30451] #4: ffff88804fe2d108 (&ei->xattr_sem){++++}-{3:3}, at: __ext4_mark_inode_dirty+0x4b0/0x920 [ 1233.081115][T30451] #5: ffffffff8d4727a8 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x1d6/0x10e0 [ 1233.090910][T30451] [ 1233.090910][T30451] stack backtrace: [ 1233.096813][T30451] CPU: 1 PID: 30451 Comm: syz.0.11178 Not tainted 6.1.118-syzkaller #0 [ 1233.105073][T30451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1233.115146][T30451] Call Trace: [ 1233.118440][T30451] [ 1233.121389][T30451] dump_stack_lvl+0x1e3/0x2cb [ 1233.126095][T30451] ? nf_tcp_handle_invalid+0x642/0x642 [ 1233.131601][T30451] ? print_circular_bug+0x12b/0x1a0 [ 1233.136826][T30451] check_noncircular+0x2fa/0x3b0 [ 1233.141801][T30451] ? add_chain_block+0x850/0x850 [ 1233.146762][T30451] ? lockdep_lock+0x11f/0x2a0 [ 1233.151473][T30451] ? noop_count+0x30/0x30 [ 1233.155833][T30451] validate_chain+0x1661/0x5950 [ 1233.160715][T30451] ? reacquire_held_locks+0x660/0x660 [ 1233.166104][T30451] ? add_chain_block+0x850/0x850 [ 1233.171089][T30451] ? validate_chain+0x112/0x5950 [ 1233.176158][T30451] ? mark_lock+0x9a/0x340 [ 1233.180529][T30451] __lock_acquire+0x125b/0x1f80 [ 1233.185420][T30451] lock_acquire+0x1f8/0x5a0 [ 1233.189951][T30451] ? dquot_commit+0x57/0x510 [ 1233.194579][T30451] ? read_lock_is_recursive+0x10/0x10 [ 1233.200079][T30451] ? __might_sleep+0xb0/0xb0 [ 1233.204695][T30451] ? __lock_acquire+0x125b/0x1f80 [ 1233.209766][T30451] __mutex_lock+0x132/0xd80 [ 1233.214293][T30451] ? dquot_commit+0x57/0x510 [ 1233.218910][T30451] ? dquot_commit+0x57/0x510 [ 1233.223522][T30451] ? __might_sleep+0xb0/0xb0 [ 1233.228132][T30451] ? mutex_lock_nested+0x10/0x10 [ 1233.233107][T30451] dquot_commit+0x57/0x510 [ 1233.237553][T30451] ? __ext4_journal_start_sb+0x1f1/0x410 [ 1233.243218][T30451] ext4_write_dquot+0x1fd/0x360 [ 1233.248099][T30451] mark_all_dquot_dirty+0xf7/0x400 [ 1233.253241][T30451] __dquot_alloc_space+0xb68/0x10e0 [ 1233.258518][T30451] ? __dquot_alloc_space+0x1d6/0x10e0 [ 1233.263920][T30451] ? __dquot_drop+0x420/0x420 [ 1233.268632][T30451] ? percpu_counter_add_batch+0x142/0x160 [ 1233.274558][T30451] ext4_mb_new_blocks+0x1302/0x4b80 [ 1233.279782][T30451] ? kasan_set_track+0x60/0x70 [ 1233.284581][T30451] ? __kmalloc+0xb2/0x230 [ 1233.288934][T30451] ? ext4_xattr_block_set+0x48b/0x3920 [ 1233.294429][T30451] ? do_sys_truncate+0xda/0x190 [ 1233.299401][T30451] ? do_syscall_64+0x3b/0xb0 [ 1233.304018][T30451] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1233.310354][T30451] ? iput+0x3f7/0x980 [ 1233.314395][T30451] ? ext4_mb_pa_callback+0xd0/0xd0 [ 1233.320062][T30451] ? ext4_xattr_set_entry+0x17bf/0x1f30 [ 1233.325649][T30451] ext4_new_meta_blocks+0x206/0x4f0 [ 1233.330884][T30451] ? ext4_should_retry_alloc+0x2c0/0x2c0 [ 1233.336557][T30451] ? hlist_bl_lock+0x55/0x120 [ 1233.341270][T30451] ? __entry_find+0x3da/0x430 [ 1233.345986][T30451] ext4_xattr_block_set+0x22ca/0x3920 [ 1233.351411][T30451] ? ext4_xattr_block_find+0x510/0x510 [ 1233.357026][T30451] ? ext4_xattr_block_find+0xe8/0x510 [ 1233.362510][T30451] ext4_expand_extra_isize_ea+0x10d5/0x1bb0 [ 1233.368458][T30451] ? ext4_xattr_set+0x3d0/0x3d0 [ 1233.373380][T30451] ? rwsem_write_trylock+0x166/0x210 [ 1233.378801][T30451] ? clear_nonspinnable+0x60/0x60 [ 1233.384252][T30451] ? ext4_reserve_inode_write+0x2b3/0x360 [ 1233.390629][T30451] ? ext4_get_dquots+0x9/0x20 [ 1233.395357][T30451] ? dquot_initialize_needed+0x274/0x320 [ 1233.401563][T30451] __ext4_expand_extra_isize+0x2f7/0x3d0 [ 1233.407423][T30451] __ext4_mark_inode_dirty+0x54f/0x920 [ 1233.413006][T30451] ? ext4_blocks_for_truncate+0x270/0x270 [ 1233.418942][T30451] ? atime_needs_update+0x7b0/0x7b0 [ 1233.424457][T30451] ext4_setattr+0x1493/0x1a00 [ 1233.429361][T30451] ? ext4_write_inode+0x740/0x740 [ 1233.434438][T30451] notify_change+0xce3/0xfc0 [ 1233.439057][T30451] do_truncate+0x21c/0x300 [ 1233.443508][T30451] ? put_page_bootmem+0x2e0/0x2e0 [ 1233.448665][T30451] ? bpf_lsm_path_truncate+0x5/0x10 [ 1233.453898][T30451] vfs_truncate+0x2dd/0x3a0 [ 1233.458443][T30451] do_sys_truncate+0xda/0x190 [ 1233.463167][T30451] ? break_lease+0xd0/0xd0 [ 1233.467610][T30451] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1233.473620][T30451] ? lockdep_hardirqs_on+0x94/0x130 [ 1233.478850][T30451] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1233.484979][T30451] do_syscall_64+0x3b/0xb0 [ 1233.489596][T30451] ? clear_bhb_loop+0x45/0xa0 [ 1233.495181][T30451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1233.502335][T30451] RIP: 0033:0x7f1fa357e819 [ 1233.506778][T30451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1233.526502][T30451] RSP: 002b:00007f1fa33ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1233.534956][T30451] RAX: ffffffffffffffda RBX: 00007f1fa3735fa0 RCX: 00007f1fa357e819 [ 1233.542968][T30451] RDX: 0000000000000000 RSI: 0000000000002ba4 RDI: 0000000020000000 [ 1233.550971][T30451] RBP: 00007f1fa35f175e R08: 0000000000000000 R09: 0000000000000000 [ 1233.559148][T30451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1233.567189][T30451] R13: 0000000000000000 R14: 00007f1fa3735fa0 R15: 00007ffc56cbba18 [ 1233.575213][T30451] [ 1233.948857][ T4664] EXT4-fs (loop0): unmounting filesystem. [ 1237.466467][ C0] net_ratelimit: 21257 callbacks suppressed [ 1237.466489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1237.466529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.472972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1237.484557][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1237.496971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1237.508902][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.520797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1237.532415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1237.544641][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:7a:55:50:37:85:cf, vlan:0) [ 1237.556489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)