last executing test programs: 1m45.559984593s ago: executing program 4 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="64000000180001000000000000000000020000000000ff0000000000400016803c0002003a060403bf280800ff0b000000000000000000000000000100000000000000000000000000000000fe80000000000000000000000000001d060015000a"], 0x64}}, 0x4004) 1m45.261553913s ago: executing program 4 (id=802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003d40)=@newtaction={0x488, 0x30, 0x1, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x6ff7, 0x200, 0x9, 0x6, 0xfffffff8, 0x7, 0x49b1, 0x2, 0x4, 0x6, 0x3, 0x6, 0x1ff, 0x6, 0x1, 0x1, 0x10, 0x3ff, 0x0, 0x1, 0x8, 0x7f, 0x39c, 0x4, 0x1, 0x0, 0x0, 0x0, 0xd, 0xce5c, 0x317d, 0x2, 0x6, 0x4, 0x0, 0x10000, 0x2, 0x5, 0x7, 0x3, 0x2, 0x3, 0x6, 0x6, 0x9, 0x1, 0x1105b3bf, 0x1, 0x2, 0x3, 0xb9c3, 0x5, 0x6, 0x200, 0x5, 0x7fffffff, 0xc, 0x1000000, 0x4, 0x3, 0x1, 0x0, 0x1e, 0x5951, 0x1, 0x4, 0xf4, 0x2ceea6ce, 0xfffffff7, 0x0, 0x3, 0x0, 0xd, 0x3ff, 0x2, 0x0, 0xffff, 0xd, 0xe6, 0x4, 0x4, 0x1, 0xd, 0x80000001, 0x7, 0x0, 0x6, 0x6, 0x6, 0x40000, 0x0, 0x2, 0x2, 0x4, 0x3, 0xb, 0x9, 0x7, 0x1ff, 0x38, 0x2900, 0x2, 0x4671, 0x10, 0x7, 0x8, 0x2, 0x8, 0x6, 0x1, 0x1000, 0x1, 0x2, 0x7fffffff, 0xa, 0x402, 0x3, 0x8, 0x1000, 0x401, 0x3, 0x8, 0xff, 0x9, 0x32437c3, 0x5, 0x5, 0x4, 0x6, 0x9, 0x6, 0x3, 0x1, 0x2, 0x4, 0x2, 0xfee9, 0xd7d6, 0x1, 0x6, 0x0, 0x1, 0x6, 0x0, 0x8, 0xfffffffc, 0xfffffffa, 0x6, 0xfffffff8, 0xb41, 0x4, 0x3ff, 0x6, 0x1, 0x7, 0x6, 0x7, 0x1, 0x0, 0x19bb, 0x8bc, 0x47, 0x5, 0x0, 0xfffffffa, 0x68b5, 0x401, 0x5, 0x2, 0x5, 0x9, 0xf, 0x4, 0x400, 0x1, 0x3, 0x3, 0x5, 0x7, 0x351, 0x7, 0x8000, 0xfffff001, 0x6, 0x1, 0x5, 0x9, 0x10000, 0x0, 0x8, 0x3, 0xf696, 0x4, 0x9, 0x3, 0x3, 0x4, 0xff, 0x8, 0x10000, 0x6, 0x7, 0x5, 0x0, 0x7, 0xfff, 0x7, 0x7fff, 0x6, 0x8a5, 0xa, 0xffffffaf, 0x2, 0x4, 0xffff, 0x1, 0x4, 0x0, 0x7, 0x0, 0x8f, 0x4, 0x200, 0xe, 0x6, 0x9, 0xcdc, 0xff, 0x2, 0xffffffff, 0x5, 0x1, 0x6, 0x2b, 0x7fff, 0x2, 0x9, 0xce7, 0x3, 0x4, 0xffff, 0x7, 0xfffffff7, 0x1, 0x0, 0x0, 0x2, 0x0, 0x3, 0x8, 0xffff, 0x2, 0x9956, 0x400, 0x2, 0x7]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9a16, 0x5, 0x7fffffff, 0x7fff, 0x5, {0x0, 0x2, 0xfffd, 0x0, 0x1, 0x2}, {0x7, 0x2, 0x7, 0x5, 0x7, 0x5}, 0x3, 0xf42f, 0x8}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}}, 0x0) 1m44.982451484s ago: executing program 4 (id=805): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=@getlink={0x3c, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2108, 0x43502}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'lo\x00'}, @IFLA_EXT_MASK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c080}, 0x4080) 1m44.648359855s ago: executing program 4 (id=810): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x2004002, &(0x7f0000000380)={[{@gid}, {}, {@gid}, {@part={'part', 0x3d, 0xf4a}}, {@uid}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@codepage={'codepage', 0x3d, 'iso8859-3'}}]}, 0x1, 0x2fe, &(0x7f0000001100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m44.272692435s ago: executing program 4 (id=817): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x28, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}}, 0x0) 1m43.756635646s ago: executing program 4 (id=822): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 1m43.404040337s ago: executing program 32 (id=822): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 1m39.222313666s ago: executing program 3 (id=872): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000080006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a390c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1m38.971031696s ago: executing program 3 (id=874): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0}, 0xfffffff4}], 0x1, 0x40010003, 0x0) 1m38.724611667s ago: executing program 3 (id=875): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x31, 0x1, 0x0, "3a8e00000000209634b52ba75066c27891ca55e21f0000000000b2b678d200", 0x31364d59}) 1m38.450687567s ago: executing program 3 (id=876): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x810c90, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=maciceland,utf8,errors=continue,utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',utf8,iocharset=mk=00000000000000000000000,iocharset=iso8859-3,errors=continue,\x00'/92], 0x1, 0x1520, &(0x7f0000000440)="$eJzs3AucTtX6OPDnWWvtMSbpbZLLsNZ6Nm9yWSZJIklySZIkSXJLSJrkSEJiyC1pSJLkMiSXISSXaUwa9/tdEpKkSZKQ3JL1/wh/p1Pndzq/0zl+nzPP9/PZn1nPu/ez9trv8+733Xu9M/Ntl6E1G9eq1pCI4F+C538kA0AsAAwEgKsAIACA8vHl48+tzy0x+V/bCftzPZh2uUfALieuf87G9c/ZuP45G9c/Z+P652xc/5yN65+zcf0Zy8k2Tit0NS85d+H5/5yMP///i2SXGfPl6jLXdgWI+aMpXP+cjev/Xyv4Ixtx/XM2rn9OFXu5B8D+D+DzPyfI9XfXcP1zNq4/YznZv3+OWbnLPcf9Py0QydnfgVzu1x9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsZzhpL9EAcDF9uUeF2OMMcYYY4wxxv48PtflHgFjjDHGGGOMMcb+/RAESFAQQAzkgljIDXEgAOBKyAtXQQSuhni4BvLBtZAfCkBBKAQJUBiKgAYDFghCKArFIArXQXG4HkpASSgFpcFBGUiEG6As3Ajl4CYoDzdDBbgFKkIluBUqw21QBW6HqnAHVIM7oTrUgJpQC+6C2nA31IF7oC7cC/XgPqgP90MDeAAawoPQCB6CxvAwNIFHoCk0g+bQAlr+r/Kfhx7wAvSEXpAMvaEPvAh9oR/0hwEwEF6CQfAyDIZXIAWGwFB4FYbBazAcXocR8AaMhDdhFLwFo2EMjIVxkArjYQK8DRPhHZgEk2EKTIU0mAbT4V2YATNhFrwHs+F9mANzYR7Mh3T4ADJgAWTCh7AQPoIsWASLYQkshWWwHFbASlgFq2ENrIV1sB42wEbYBJthC2yFj2EbfALb4VPYATthF3wGu+HzfzL/xN/kd0VAQIECFSqMwRiMxViMwzjMg3kwL+bFCEYwHuMxH+bD/JgfC2JBTMAELIJF0KBByk1YFItiFKNYHItjCSyBpbAUOnSYiIlYFm/EclgOy2N5rIAVsCJWwkpYGStjFayCVbEqVsNqWB2rY02siXfhXdgb62AdrIt1sR7Wuzg9hQ2xITbCRtgYG2MTbIJNsSk2x+bYEltiK2yFrbE1tsW22A7bYXtsj0mYhB2wA3bEjtgJO2Fn7IxdsAt2xW7YLfv5XIAv4AvYC6uL3tgH+2BfTMnVHwfgAHwJB+HL+DK+gik4BIfiq/gqvobD8TiOwDdwJI7EKuItHI1jkMQ4TMVUnIATcCJOxEk4GSfjVEzDaTgdp+MMnIkz8T2cje/j+zgX5+J8TMd0zMAFmImZuBBPYBYuwsW4BJfiMlyKK3AlrsDVuAZX4zpchxtwA27CTbgFL56sCgA/xZ24E1NwN+7GPbgH9+Je3If7MBuzcT/uxwMW8CAexEN4CA/jETyKR/AYHsPjeAJPYr8LXT2b8HWjT0quSgFxjhJKxIgYEStiRZyIE3lEHpFX5BURERHxIl7kE/lEfpFfFBQFRYJIEEVEEWGEESTCGAAQUREVxUVxUUKUEKVEKeGEE4kiUZQVZUU5UU6UFzeLCuIWUVFUEm1cZVFZVBFtXVVxh6gmqonqooaoKWqJWqK2qC3qiDqirqgr6ol6or64XzQQvbE/PijOVaaxGIJNxFBsKpoJeeFIWonh2Fq0EW3F4+INHIHtRSuXJJ4SHcRo7Cj+IsbgM6KzGIddxHOiq+gmuovnRQ/R2vUUvcQk7C36iKnYV/QT/cUAMQNriPdwdu6a4hWRIoaIoeJVMR9fE8PF62JEbxAjxZtilHhLjBZjxFgxTqSK8WKCeFtMFO+ISWKymCKmijQxTUwX74oZYqaYJd4Ts8X7Yo6YK+aJ+SJdfCAyxAKRKT4UC8VHIkssEovFErFULBPLxQqRG1aJ1WKNWCvWifVig9goNonNYovYKj4W28QnYrv4VOwQO8Uu8ZnYLT4Xe8QXYq/4UuwTX4ls8bXYL74RB8S34qD4ThwS34vD4og4Kn4Qx8SP4rg4IU6KU+K0+EmcET+Ls8ILkCiFlFLJQMbIXDJW5pZx8gqZRwYXnt2rZby8RuaT18r8soAsKAvJBFlYFpFaGmklyVAWlcVkVF4ni8vrZQlZUpaSpaWTZWSivEGWlTfKcvImWV7eLCvIW2RFWUneKivL22QVebuEyPl9VJc1ZE1ZS94lk+FuWUfeI+vKe2U9eZ+sL++XDeQDsqF8UDaSD8nG8mHZRD4im8pmsrlsIVvKR2Ur+ZhsLdvItvJx2U4+IdvLJ2WSfEp2kP7CS+QZ2Vk+K7vI52RX2U12lz/Ls9LLnrKXhN4g+8gXZV/ZT/aXA+RA+ZIcJF+Wg+UrMkUOkUPlq3KYfE0Ol6/LEfINOVK+KUfJt+RoOUaOleNkqhwvJ8i35UT5jpwkJ8spcqpMk9Nk/ws9zZLyH+a//Tv5g3/Z+wa5UW6Sm+UWuVV+LLfJT+R2uV3ukDvkLrlL7pa75R65R+6Ve+U+uU9myzvkfrlfHpAH5EF5UB6Sh+RheUSekj/IY/JHeVyekCfkKXlanpZnLjwHoFAJJZVSgYpRuVSsyq3i1BUqj7pS5VVXqYi6WsWra1Q+da3KrwqogqqQSlCFVRGllVFWkQpVUVVMRdV1F9+jVClVWjlVRiWqG/6ZfFVcXa9KqJK/yr84vuS/M76WqqVqpVqp1qq1aqvaqnaqnWqv2qsklaQ6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKlklqz7qRdVX9VP91QA1UL2kBqlBarAarFJUihqqhqphapgaroarEWqEGqlGqlFqlBqtRquxaqxKValqgpqgJqqJapKapKaoKSpNpanparqaoWaoWWqWmq1mqzlqjpqn5ql0la4yVIbKVJlqoVqostQitUgtUUvUMrVMrVAr1Cq1Sq1Ra9Q6tU5lqY1qo9qsNqutaqvaprap7Wq72qF2qF1ql9qtdqs9ao/aq/aqfWqfylbZar/arw6oA+qgOqgOqUPqsDqsjqqj6pg6po6r4+qkOqlOq9PqjDqjzqqz5y77AhGIQAUqiAligtggNogL4oI8QZ4gb5A3iASRID6ID/IF1wb5gwJBwaBQkBAUDooEOjCBDcSFokeD64LiwfVBiaBkUCooHbigTJAY3BCUDW4MygU3BeWDm4MKwS1BxaBScGtQObgtqBLcHlQN7giqBXcG1YMaQc2gVnBXUDu4O6gT3BPUDe4N6gX3BfWD+4MGwQNBw+DBoFHwUNA4eDhoEjwSNA2aBc2DFkHLP7V/748XeMz11L10su6t++gXdV/dT/fXA/RA/ZIepF/Wg/UrOkUP0UP1q3qYfk0P16/rEfoNPVK/qUfpt/RoPUaP1eN0qh6vJ+i39UT9jp6kJ+speqpO09P0dP2unqFn6ln6PT1bv6/n6Ll6np6v0/UHOkMv0Jn6Q71Qf6Sz9CK9WC/RS/UyvVyv0Cv1Kr1ar9Fr9Tq9Xm/QG/UmvVlv0Vv1x3qb/kRv15/qHXqn3qU/07v153qP/kLv1V/qfforna2/1vv1N/qA/lYf1N/pQ/p7fVgf0Uf1D/qY/lEf1yf0SX1Kn9Y/6TP6Z31W+3MX9+c+3o0yysSYGBNrYk2ciTN5TB6T1+Q1ERMx8Sbe5DP5TH6T3xQ0BU2CSTBFTBFzDhkyRU1REzVRU9wUNyVMCVPKlDLOOJNoEk1ZU9aUM+VMeVPeVDAVTEVT0dxqbjW3mdvM7eZ2c4e5w9xp7jQ1TA1Ty9QytU1tU8fUMXVNXVPP1DP1TX3TwDQwDU1D08g0Mo1NY9PENDFNTVPT3DQ3LU1L08q0Mq1Na9PWtDXtTDvT3rQ3SSbJdDAdTEfT0XQynUxn09l0MV1MV9PVdDfdTQ/Tw/Q0PU2ySTZ9TB/T1/Q1/U1/M9AMNIPMIDPYDDYpJsUMNUPNMDPMDDfDzQjzhhl57kLVvGVGmzFmrBlnUk2qmWAmmIlmoplkJpkpZopJM2lmupluZpgZZpaZZWab2WaOmWPmmXkm3aSbDJNhMk2mWWgWmiyTZRabxWapWWqWm+VmpVlpVpvVZi2sNevNerPRbDSbzWaz1Ww128w2s91sNzvMDrPL7DK7zW6zx+wxe81es8/sM9km2+w3+80Bc8AcNAfNIXPIHDaHzVFz1Bwzx8xxc9ycNCfNaVPgwuelN7E2t42zV9g89kqb115l/zYuaAvZBFvYFrHa5rcFfhUba20JW9KWsqWts2Vsor3hN3FFW8neaivb22wVe7ut+pu4tr3b1rH32Lr2XlvL3vWruJ69z9a3D9sGiAC2mW1kW9jG9mHbxD5im9pmtrltYdvZJ2x7+6RNsk/ZDvbp38QZdoFdaVfZ1XaN3WF32pP2lD1gv7Wn7U+2p+1lB9qX7CD7sh1sX7Epdshv4pH2TTvKvmVH2zF2rB33m3iKnWrT7DQ73b5rZ9iZv4nT7Qd2ts20c+xcO8/O/yXOsGgz7Yd2of3IZtkAFtsldqldZpfbFf9/rEvsOrvebrDb7ad2s91it9qP7baLF8J2p91lP7O77ed2v/3G7rVf2n32oM22X/8Snzu+g/Y7e8h+bw/bI/ao/cEesz+qi9nnjv0H+7M9a70FQgKSpCigGMpFsZSb4ugKykNXUl66iiJ0NcXTNZSPrqX8VIAKUiFKoMJUhDQZskQUUlEqRlG6ji4OrxSVJkdlKJFuoLJ0I5Wjm6g83UwV6BaqSJVyX9iMbqeqdAdVozupOtWgmlSL7qLadDfVoXuoLt1L9eg+qk/3UwN6gBrSg9SIHqLG9DA1oUeoKTWj5tSCWtKj1Ioeo9bUhtrS49SOnqD29CQl0VPUgZ6mjvQX6kTPUGd6lrrQc9SVulF3ep560AvUk3pRMvWmPvQi9aV+1J8G0EB6iQbRyzSYXqEUGkJD6VUaRq/RcHqdRtAbNJLepFH0Fo2mMTSWxlEqjacJ9DZNpHdoEk2mKTSV0mgaTad3aQbNpFn0Hs2m92kOzaV5NJ/S6QPKoAWUSR/SQvqIsmgRLaYltJSW0XJaQStpFa2mNbSW1tF62kAbaRNtpi20lT6mbfQJbadPaQftpF30Ge2mz2kPfUF76UvaR19RNn1N++kbOkDf0kH6zvei7+kwHaGj9AMdox/pOJ2gk3SKTtNPdIZ+prPkCUIMRShDFQZhTJgrjA1zh3HhFWGe8Mowb3hVGAmvDuPDa8J84bVh/rBAWDAsFCaEhcMioQ5NaEMKw7BoWCyMhteFxcPrwxJhybBUWDp0YZkwMbwhLBveGJYLbwrLhzeHFcJbwophpfDheyuHt4VVwtvDquEdYbXwzrB6WCOsGdYK7wprh3eHdcJ7wrrhvWG58L6wfnh/2CB8IGwYPhg2Ch8KG4cPh03CR8KmYbOwedgibBk+GrYKHwtbh23CtuHjYbvwibB9+GSYFD4Vdgif/mX9fQv+/vrksHfYJ3wxfDH0/h45Lzo/mh79IJoRXRDNjH4YXRj9KJoVXRRdHF0SXRpdFl0eXRFdGV0VXR1dE10bXRddH90Q9b5WLnDohJNOucDFuFwu1uV2ce4Kl8dd6fK6q1zEXe3i3TUun7vW5XcFXEFXyCW4wq6I084468iFrqgr5qLuOlfcXe9KuJKulCvtnCvjEl0L19K1dK3cY661a+Pausfd4+4J94R70j3pnnId3NOuo/uL6+SecZ3ds+5Z95zr6rq57u5518ONz3v+ZEt2fVwf19f1df1dfzfQDXSD3CA32A12KS7FDXVD3TA3zA13w90IN8KNdCPd3QpgtBvtxrqxLtWluglugpvoJrpJbpKb4qa4NJfmprvpboab4arMPL+XOW6Om+fmuXSX7jLcuWvGTLfQLXRZLsstdovdUrfULXfL3Uq30q12q91at9atd+vdRrfRbXab3Va31W1z29x2t93t8Fed79TtdnvcHrfX7XX73Fcu233t9rtv3AH3rTvovnOH3PfusDvijrof3DH3ozvuTriT7pQ77X5yZ9zP7qzzLjUyPjIh8nZkYuSdyKTI5MiUyNRIWmRaZHrk3ciMyMzIrMh7kdmR9yNzInMj8yLzI+mRDyIZkQWRzMiHkYWRjyJZkUWRxZElkaWRZRHvC28OfVFfzEf9db64v96X8CV9KV/aO1/GJ/obfFl/oy/nb/Ll/c2+gr/FV/SV/K3+Ed/UN/PNfQvf0j/qW/nHfGvfxrf1j/t2/gnf3j/pk/xTvoN/2nf0f/Gd/DO+s3/Wd/HP+a6+m+/un/c9/Au+p+/lk31v38e/6Pv6fr6/H+AH+pf8IP+yH+xf8Sl+iB/qX/XD/Gt+uH/dj/Bv+JExb/pRF2+RYZxP9eP9BP+2n+jf8ZP8ZD/FT/Vpfpqf7t/1M/xMP8u/52f79/0cP9fP8/N9uv/AZ/gFPtN/6Bf6j3yWX3RxUtkv9yv8Sr/Kr/Zr/Fq/zq/3G/xGv8lv9lv8Vv+x3+Y/8dv9p36H3+l3+c/8bv+53+O/8Hv9l36f/8pn+6/9fv+NP+C/9Qf9d/6Q/94f9kf8Uf+DP+Z/9Mf9CX/Sn/Kn/U/+jP/Zn+W/WWOMMcYY+0PGX2qKX685P53f+3dyxF9t3AcArtxSKPuv15+7olyb/3y7n0hoFwGAp3p1efDiUr16cnLyhW2zJATF5gJc/CbonBi4FC+CtvAEJEEbKPu74+8nup2mf9B/9GaAuL/KiYVL8aX+vwDA5N/p/9HHR2ZUCE/G/w/9zwUoUexSTm64FC+Ctr/Mr7SBcn9n/AVa/YPx5/4yFaD1X+XkgUvxpfEnwmPwNCT9akvGGGOMMcYYY+y8fuLWThfvPy/+xufv3Z8nqEs5ueBS/I/uzxljjDHGGGOMMXb5PdOt+5OPJiW16fTPN6r+r7L+cKMJ/Lt65sbvNrwHuPiIAoB/sUOAcw35nzyKTf+RfaVcOHX+dtXSUz6A/xul/DMal/mNiTHGGGOMMfanu3TR/+vH1eUaEGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlgP9J/6d2OU+RsYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY+xy+38BAAD//3lG9tE=") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m38.036163858s ago: executing program 3 (id=878): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, 0x140e, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 1m36.170278352s ago: executing program 3 (id=888): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5e1, &(0x7f0000001b00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 1m35.483481033s ago: executing program 33 (id=888): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5e1, &(0x7f0000001b00)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 4.91021452s ago: executing program 1 (id=1928): syz_usb_connect(0x5, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000e2793b10d10501200036a85128010902120001000010000904"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 3.310324723s ago: executing program 1 (id=1955): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}}, 0x0) 3.147134683s ago: executing program 0 (id=1957): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x323880, 0x0) 2.992482444s ago: executing program 1 (id=1960): syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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") symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') 2.780427974s ago: executing program 5 (id=1965): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8002, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x1, {0x0, 0x1000, 0xffffffff}}) 2.656292605s ago: executing program 1 (id=1966): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x0) 2.619539205s ago: executing program 2 (id=1967): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.528654085s ago: executing program 5 (id=1969): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000140)={0x60f0f002, 0x0, "9a555c14c966e134d198b9aaaa7da80f8e4fa888dece6ffdb507a3c83e58e128"}) 2.400822675s ago: executing program 2 (id=1970): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount$pvfs2(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 2.351864175s ago: executing program 5 (id=1971): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0) 2.129917975s ago: executing program 5 (id=1974): r0 = creat(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0xffffffff) 1.956686826s ago: executing program 1 (id=1975): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x1e0}], 0x1, 0x0, 0x0, 0x0) 1.951976076s ago: executing program 5 (id=1976): r0 = syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002640)={0x0, 0x0, "92396dca183297fb5960ea4c247c35d7a0b1bf1e193638ed864b982575ecbdbe250576e79039cd1f4f33371ecee174dd44b05d3a12f62fc7ebd28aa8ab00d0d5be946ba0c47cf741eaa92ff7833fc70f2f051425c91868348d7df800f0ea41dc5e9d58a721c93e48523520506f09f4ff5ad69f8dd5eb27f8afffea9eb1a626540afe5e2217a7f888bf1f9cad0f1384079a8329b9064805224e3f1f7f25c1dc2c8711dba22e1d77cbbd74397f58e4b8dd6d7e15e8a6fc9519a4670dcba896ca88484bee3f1b41b700cd6812a7e69c6b9634fc9fc104bd817946b5e6b09c8f78204ba5c4de17fe33715a9efde20e20bb36cc43813cf435585e74e9c2b8a93cf02f", "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"}) 1.748458866s ago: executing program 1 (id=1979): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000c40)={{}, {}, [], {}, [], {}, {0x20, 0x6}}, 0x24, 0x0) 1.623652207s ago: executing program 6 (id=1980): r0 = syz_open_dev$dri(&(0x7f0000002680), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 1.502730717s ago: executing program 0 (id=1981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0xd}, 0x0) 1.430379857s ago: executing program 6 (id=1982): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) 1.304653267s ago: executing program 2 (id=1983): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_newnexthop={0x1c, 0x68, 0x23, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 1.262826077s ago: executing program 0 (id=1984): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x56595559}}) 1.127348328s ago: executing program 2 (id=1985): r0 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r0, 0x10d, 0xf2, 0xfffffffffffffffe, &(0x7f0000000000)=0x300) 1.044560858s ago: executing program 6 (id=1986): r0 = socket(0x15, 0x5, 0x0) recvfrom$ax25(r0, 0x0, 0x0, 0x105, &(0x7f0000001c00)={{0x3, @default}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x20000000) 985.335748ms ago: executing program 0 (id=1987): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000cc0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000d80)=0x98) 874.817478ms ago: executing program 2 (id=1988): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TCGETA(r0, 0x541a, 0xffffffffffffffff) 760.603418ms ago: executing program 6 (id=1989): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000540)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x4}}, 0x10, 0x0}, 0xea) 732.496849ms ago: executing program 0 (id=1990): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@can_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "fd11ec51f3d4100c"}, 0x1}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0xfffffffffffffff9}}]}, 0x34}}, 0x0) 630.314539ms ago: executing program 2 (id=1991): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={[{@discard_size={'discard', 0x3d, 0x9}}, {@quota}, {@errors_continue}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@gid}, {@errors_remount, 0x0}, {@errors_continue}, {@nointegrity}, {@quota}, {@quota}, {@umask={'umask', 0x3d, 0x400}}, {@quota}, {@quota}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}, 0x9, 0x6147, &(0x7f00000066c0)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 416.583989ms ago: executing program 5 (id=1992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000012000501000000000000000028001a00ac1414bb000000000000000000130000fe800000000000000000000000000000000000ff"], 0x38}}, 0x0) 416.509349ms ago: executing program 6 (id=1993): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x1c, 0x0) 293.170879ms ago: executing program 0 (id=1994): add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x9, 0xbd, 0xc2, 0x8, 0x17dc, 0x202, 0x8add, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xd, [{{0x9, 0x4, 0x7d, 0x2, 0x0, 0xe, 0x1}}]}}]}}, &(0x7f0000001380)={0x0, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="050f"]}) 0s ago: executing program 6 (id=1995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) kernel console output (not intermixed with test programs): 5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 113.120627][ T26] audit: type=1326 audit(1732107554.493:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5392 comm="syz.2.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 113.527375][ T5410] netlink: 'syz.1.472': attribute type 8 has an invalid length. [ 113.680483][ T5375] loop0: detected capacity change from 0 to 32768 [ 113.762526][ T5375] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 113.860674][ T5421] loop1: detected capacity change from 0 to 64 [ 113.882408][ T5375] OCFS2: ERROR (device loop0): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 74 [ 113.956228][ T5375] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 113.971204][ T5375] OCFS2: File system is now read-only. [ 113.977311][ T5375] (syz.0.457,5375,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 114.002210][ T5375] (syz.0.457,5375,1):ocfs2_reserve_new_inode:1091 ERROR: status = -30 [ 114.047150][ T5375] (syz.0.457,5375,1):ocfs2_reserve_new_inode:1114 ERROR: status = -30 [ 114.065670][ T5375] (syz.0.457,5375,1):ocfs2_mknod:304 ERROR: status = -30 [ 114.087129][ T5375] (syz.0.457,5375,1):ocfs2_mknod:500 ERROR: status = -30 [ 114.115830][ T5375] (syz.0.457,5375,1):ocfs2_mkdir:657 ERROR: status = -30 [ 114.333053][ T4248] ocfs2: Unmounting device (7,0) on (node local) [ 114.344231][ T5435] netlink: 'syz.2.483': attribute type 32 has an invalid length. [ 114.888392][ T5451] loop3: detected capacity change from 0 to 256 [ 114.927935][ T5451] exfat: Deprecated parameter 'namecase' [ 114.994937][ T5451] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d) [ 115.380611][ T5465] netlink: 121244 bytes leftover after parsing attributes in process `syz.3.496'. [ 115.555204][ T5467] loop2: detected capacity change from 0 to 4096 [ 115.646606][ T5477] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.726159][ T5467] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '.' [ 115.778984][ T5467] Remounting filesystem read-only [ 116.216180][ T4795] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.431681][ T4795] usb 5-1: Using ep0 maxpacket: 8 [ 116.444598][ T4795] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 116.476153][ T4795] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 116.504894][ T4795] usb 5-1: config 0 has no interface number 1 [ 116.525173][ T4795] usb 5-1: config 0 has no interface number 2 [ 116.552957][ T4795] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 116.583946][ T4795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.593499][ T5476] loop3: detected capacity change from 0 to 32768 [ 116.602613][ T4795] usb 5-1: config 0 descriptor?? [ 116.612287][ T5476] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.502 (5476) [ 116.640538][ T5476] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.666516][ T5476] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 116.706136][ T5476] BTRFS info (device loop3): setting nodatacow, compression disabled [ 116.726223][ T5476] BTRFS info (device loop3): turning on sync discard [ 116.736590][ T5476] BTRFS info (device loop3): turning on async discard [ 116.749261][ T5476] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 116.790644][ T5476] BTRFS info (device loop3): trying to use backup root at mount time [ 116.825995][ T5476] BTRFS info (device loop3): using free space tree [ 116.845290][ T4795] qcserial 5-1:0.6: Qualcomm USB modem converter detected [ 117.084147][ T14] usb 5-1: USB disconnect, device number 5 [ 117.170683][ T14] qcserial 5-1:0.6: device disconnected [ 117.195852][ T5536] netlink: 'syz.2.522': attribute type 30 has an invalid length. [ 117.204875][ T5536] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 117.214717][ T5536] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 117.263650][ T5476] BTRFS info (device loop3: state M): turning on sync discard [ 117.296070][ T5476] BTRFS info (device loop3: state M): turning on async discard [ 117.334028][ T5476] BTRFS warning (device loop3: state M): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 117.367006][ T5539] x_tables: unsorted underflow at hook 4 [ 117.373939][ T5476] BTRFS info (device loop3: state M): trying to use backup root at mount time [ 117.495907][ T5543] bpf: Bad value for 'mode' [ 117.504840][ T4256] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.983333][ T5554] xt_CT: No such helper "snmp" [ 118.147658][ T5566] netlink: 144 bytes leftover after parsing attributes in process `syz.2.535'. [ 118.367821][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 118.401417][ T5575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.538'. [ 118.428712][ T5575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.538'. [ 118.513313][ T5580] mmap: syz.3.541 (5580): VmData 37462016 exceed data ulimit 40800. Update limits or use boot option ignore_rlimit_data. [ 118.757184][ T5590] loop1: detected capacity change from 0 to 256 [ 118.814104][ T5590] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.872829][ T5590] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 118.918519][ T5590] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 119.496034][ T4795] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 119.700712][ T4795] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 119.726063][ T4795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.766029][ T4795] usb 2-1: Product: syz [ 119.769576][ T5628] vivid-000: ================= START STATUS ================= [ 119.779182][ T4795] usb 2-1: Manufacturer: syz [ 119.783830][ T4795] usb 2-1: SerialNumber: syz [ 119.796335][ T5628] vivid-000: Generate PTS: true [ 119.812608][ T4795] r8152-cfgselector 2-1: config 0 descriptor?? [ 119.819367][ T5628] vivid-000: Generate SCR: true [ 119.829684][ T5628] tpg source WxH: 320x180 (Luma) [ 119.837881][ T5628] tpg field: 1 [ 119.841452][ T5628] tpg crop: 320x180@0x0 [ 119.845692][ T5628] tpg compose: 320x180@0x0 [ 119.887453][ T5628] tpg colorspace: 8 [ 119.891376][ T5628] tpg transfer function: 0/0 [ 119.904198][ T5628] tpg quantization: 0/0 [ 119.910452][ T5628] tpg RGB range: 0/2 [ 119.914527][ T5628] vivid-000: ================== END STATUS ================== [ 120.152382][ T5640] netlink: 'syz.2.570': attribute type 6 has an invalid length. [ 120.172922][ T5638] x_tables: duplicate entry at hook 2 [ 120.262975][ T4795] r8152-cfgselector 2-1: Unknown version 0x0000 [ 120.291172][ T4795] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 120.886850][ T5665] loop3: detected capacity change from 0 to 256 [ 120.907176][ T5665] exfat: Deprecated parameter 'utf8' [ 120.912575][ T5665] exfat: Deprecated parameter 'utf8' [ 121.036110][ T5665] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 121.307924][ T5680] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.529034][ T5689] netlink: 'syz.4.596': attribute type 21 has an invalid length. [ 121.579068][ T5689] netlink: 128 bytes leftover after parsing attributes in process `syz.4.596'. [ 121.630409][ T5689] netlink: 'syz.4.596': attribute type 4 has an invalid length. [ 121.670447][ T5689] netlink: 'syz.4.596': attribute type 5 has an invalid length. [ 121.706363][ T5689] netlink: 3 bytes leftover after parsing attributes in process `syz.4.596'. [ 121.719245][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.598'. [ 121.743900][ T5696] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 121.770351][ T5696] netlink: 224 bytes leftover after parsing attributes in process `syz.0.599'. [ 122.012182][ T5704] loop0: detected capacity change from 0 to 256 [ 122.101714][ T5706] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 122.115757][ T5704] FAT-fs (loop0): Directory bread(block 64) failed [ 122.130561][ T5704] FAT-fs (loop0): Directory bread(block 65) failed [ 122.161598][ T5704] FAT-fs (loop0): Directory bread(block 66) failed [ 122.183964][ T5704] FAT-fs (loop0): Directory bread(block 67) failed [ 122.223142][ T5704] FAT-fs (loop0): Directory bread(block 68) failed [ 122.226137][ T4795] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 122.247187][ T5704] FAT-fs (loop0): Directory bread(block 69) failed [ 122.267248][ T5704] FAT-fs (loop0): Directory bread(block 70) failed [ 122.273852][ T5704] FAT-fs (loop0): Directory bread(block 71) failed [ 122.308107][ T5710] netlink: 'syz.4.606': attribute type 2 has an invalid length. [ 122.308238][ T5704] FAT-fs (loop0): Directory bread(block 72) failed [ 122.331445][ T5710] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.606'. [ 122.346815][ T5704] FAT-fs (loop0): Directory bread(block 73) failed [ 122.471999][ T5690] loop1: detected capacity change from 0 to 32768 [ 122.487478][ T4795] usb 3-1: config 0 has an invalid interface number: 183 but max is 0 [ 122.502571][ T4795] usb 3-1: config 0 has no interface number 0 [ 122.510285][ T5690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.595 (5690) [ 122.534308][ T4795] usb 3-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=c9.c0 [ 122.544679][ T4795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.553064][ T4795] usb 3-1: Product: syz [ 122.563577][ T4795] usb 3-1: Manufacturer: syz [ 122.568923][ T4795] usb 3-1: SerialNumber: syz [ 122.599958][ T4795] usb 3-1: config 0 descriptor?? [ 122.620422][ T5690] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.634558][ T4795] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 122.641689][ T5690] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 122.653155][ T5690] BTRFS info (device loop1): using free space tree [ 122.872160][ T5690] BTRFS info (device loop1): enabling ssd optimizations [ 123.029592][ T4795] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 123.040010][ T4795] gspca_pac7302: probe of 3-1:0.183 failed with error -71 [ 123.090142][ T4795] usb 3-1: USB disconnect, device number 4 [ 123.346853][ T4249] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.469643][ T5559] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 123.670510][ T5559] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 123.692702][ T5559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.696153][ T5756] netlink: 20 bytes leftover after parsing attributes in process `syz.3.621'. [ 123.718202][ T5559] usb 5-1: Product: syz [ 123.722528][ T5559] usb 5-1: Manufacturer: syz [ 123.734144][ T5559] usb 5-1: SerialNumber: syz [ 123.743971][ T5559] usb 5-1: config 0 descriptor?? [ 123.764644][ T5559] hub 5-1:0.0: bad descriptor, ignoring hub [ 123.781000][ T5559] hub: probe of 5-1:0.0 failed with error -5 [ 123.801537][ T5559] f81232 5-1:0.0: f81534a converter detected [ 123.978031][ T5559] usb 5-1: f81534a converter now attached to ttyUSB0 [ 124.015706][ T5763] device lo entered promiscuous mode [ 124.046813][ T5763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.332359][ T5559] usb 5-1: USB disconnect, device number 6 [ 124.346226][ T4254] Bluetooth: hci3: command 0x0405 tx timeout [ 124.389394][ T5559] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 124.416549][ T5559] f81232 5-1:0.0: device disconnected [ 124.476883][ T5780] netlink: 24 bytes leftover after parsing attributes in process `syz.0.632'. [ 125.313201][ T5810] loop2: detected capacity change from 0 to 1024 [ 125.529220][ T5817] loop3: detected capacity change from 0 to 1024 [ 125.660632][ T5817] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.781391][ T5831] loop4: detected capacity change from 0 to 512 [ 125.813826][ T5831] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.836097][ T5831] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 125.864391][ T5831] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 125.944970][ T5831] EXT4-fs error (device loop4): ext4_orphan_get:1400: comm syz.4.657: inode #15: comm syz.4.657: iget: illegal inode # [ 125.982819][ T5831] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.657: couldn't read orphan inode 15 (err -117) [ 126.030345][ T4256] EXT4-fs (loop3): unmounting filesystem. [ 126.072547][ T5831] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 126.150665][ T5842] x_tables: unsorted underflow at hook 1 [ 126.212142][ T5831] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 3: comm syz.4.657: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 126.502602][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 126.753382][ T5868] netlink: 3 bytes leftover after parsing attributes in process `syz.2.671'. [ 126.762512][ T125] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.767255][ T5867] loop0: detected capacity change from 0 to 128 [ 126.928031][ T5874] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 126.946068][ T125] usb 4-1: Using ep0 maxpacket: 16 [ 126.953148][ T125] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 126.967687][ T125] usb 4-1: config 0 has no interface number 0 [ 127.021149][ T125] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 127.062811][ T125] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 127.084405][ T125] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 127.106903][ T125] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 127.115155][ T125] usb 4-1: Product: syz [ 127.140830][ T125] usb 4-1: SerialNumber: syz [ 127.179739][ T125] usb 4-1: config 0 descriptor?? [ 127.223723][ T5882] loop2: detected capacity change from 0 to 128 [ 127.274460][ T5882] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 127.316487][ T5882] FAT-fs (loop2): Filesystem has been set read-only [ 127.562152][ T125] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 127.614754][ T4242] udevd[4242]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.625789][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 127.651074][ T125] usb 4-1: USB disconnect, device number 4 [ 127.831555][ T4805] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 128.027893][ T4805] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 128.056293][ T4805] usb 3-1: config 0 has no interface number 0 [ 128.062450][ T4805] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 128.078002][ T5884] loop1: detected capacity change from 0 to 32768 [ 128.116893][ T4805] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 128.148322][ T4805] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 128.166329][ T4805] usb 3-1: Product: syz [ 128.176083][ T4805] usb 3-1: SerialNumber: syz [ 128.197204][ T4805] usb 3-1: config 0 descriptor?? [ 128.224917][ T4805] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 [ 128.230472][ T5886] loop4: detected capacity change from 0 to 32768 [ 128.264159][ T5884] XFS (loop1): Mounting V5 Filesystem [ 128.429704][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.439132][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.449755][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.457062][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.464297][ T4805] usb 3-1: USB disconnect, device number 5 [ 128.471534][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 128.478521][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 128.497669][ T4805] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 128.515519][ T5884] XFS (loop1): Ending clean mount [ 128.574014][ T5884] XFS (loop1): Quotacheck needed: Please wait. [ 128.664753][ T5884] XFS (loop1): Quotacheck: Done. [ 128.910698][ T4249] XFS (loop1): Unmounting Filesystem [ 129.053221][ T5921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.694'. [ 129.227236][ T5923] netlink: 'syz.4.695': attribute type 3 has an invalid length. [ 129.266535][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.695'. [ 129.319137][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'. [ 129.568665][ T5937] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 129.612827][ T5937] netlink: 'syz.0.701': attribute type 2 has an invalid length. [ 129.961366][ T5950] device lo entered promiscuous mode [ 130.025351][ T5950] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.695609][ T5982] loop4: detected capacity change from 0 to 512 [ 130.755131][ T5982] EXT4-fs: Ignoring removed nomblk_io_submit option [ 130.844589][ T5989] netlink: 'syz.1.726': attribute type 3 has an invalid length. [ 130.853105][ T5989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.726'. [ 130.868270][ T5982] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.886096][ T5982] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.087309][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 131.478758][ T26] audit: type=1326 audit(1732107573.023:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6012 comm="syz.0.737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96c0d7e819 code=0x0 [ 131.659869][ T6007] loop4: detected capacity change from 0 to 4096 [ 131.692754][ T6019] loop2: detected capacity change from 0 to 512 [ 131.723140][ T6007] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 131.789331][ T6024] loop3: detected capacity change from 0 to 64 [ 131.829289][ T6019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.906131][ T6019] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.914982][ T6031] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.118505][ T6033] loop0: detected capacity change from 0 to 2048 [ 132.181392][ T6033] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 132.183927][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 132.270566][ T4789] udevd[4789]: incorrect nilfs2 checksum on /dev/loop0 [ 132.311559][ T6040] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.351241][ T6033] NILFS (loop0): failed to count free inodes: err=-34 [ 132.591327][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.597865][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.589283][ T6079] netlink: 32 bytes leftover after parsing attributes in process `syz.1.768'. [ 133.698194][ T6042] loop2: detected capacity change from 0 to 32768 [ 133.791904][ T6042] ERROR: (device loop2): dbAlloc: unable to allocate blocks [ 133.791904][ T6042] [ 133.841099][ T6042] ERROR: (device loop2): remounting filesystem as read-only [ 133.873104][ T6087] loop4: detected capacity change from 0 to 16 [ 133.882224][ T6042] jfs_mkdir: dtInsert returned -EIO [ 133.903494][ T6087] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 133.912641][ T6042] ERROR: (device loop2): jfs_mkdir: [ 133.912641][ T6042] [ 134.275096][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 134.351658][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 134.516270][ T6103] netlink: 32 bytes leftover after parsing attributes in process `syz.1.779'. [ 134.623343][ T6106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.775'. [ 134.735075][ T6111] loop1: detected capacity change from 0 to 16 [ 134.768449][ T6113] netlink: 'syz.3.783': attribute type 21 has an invalid length. [ 134.812313][ T6111] erofs: (device loop1): mounted with root inode @ nid 36. [ 134.816132][ T6113] netlink: 128 bytes leftover after parsing attributes in process `syz.3.783'. [ 134.869251][ T6113] netlink: 'syz.3.783': attribute type 4 has an invalid length. [ 134.883558][ T6111] syz.1.782: attempt to access beyond end of device [ 134.883558][ T6111] loop1: rw=0, sector=48, nr_sectors = 16 limit=16 [ 134.903210][ T6113] netlink: 'syz.3.783': attribute type 5 has an invalid length. [ 134.916968][ T6113] netlink: 3 bytes leftover after parsing attributes in process `syz.3.783'. [ 134.963790][ T6089] loop0: detected capacity change from 0 to 32768 [ 134.974271][ T6089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.771 (6089) [ 135.022363][ T6089] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.036527][ T6089] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 135.045866][ T6089] BTRFS info (device loop0): using free space tree [ 135.583683][ T6089] BTRFS info (device loop0): enabling ssd optimizations [ 135.874746][ T4248] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.956411][ T6162] netlink: 'syz.4.799': attribute type 2 has an invalid length. [ 136.077601][ T6163] loop3: detected capacity change from 0 to 2048 [ 136.177961][ T6165] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.369334][ T6172] netlink: 'syz.2.803': attribute type 3 has an invalid length. [ 136.387594][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 136.894378][ T6188] loop4: detected capacity change from 0 to 64 [ 137.060099][ T6194] loop1: detected capacity change from 0 to 256 [ 137.152707][ T6194] FAT-fs (loop1): Directory bread(block 64) failed [ 137.193099][ T6194] FAT-fs (loop1): Directory bread(block 65) failed [ 137.214816][ T6194] FAT-fs (loop1): Directory bread(block 66) failed [ 137.233884][ T6194] FAT-fs (loop1): Directory bread(block 67) failed [ 137.262802][ T6194] FAT-fs (loop1): Directory bread(block 68) failed [ 137.291508][ T6194] FAT-fs (loop1): Directory bread(block 69) failed [ 137.319778][ T6194] FAT-fs (loop1): Directory bread(block 70) failed [ 137.371084][ T6194] FAT-fs (loop1): Directory bread(block 71) failed [ 137.392738][ T6194] FAT-fs (loop1): Directory bread(block 72) failed [ 137.405263][ T6194] FAT-fs (loop1): Directory bread(block 73) failed [ 137.440383][ T6205] loop3: detected capacity change from 0 to 256 [ 137.712023][ T4325] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.756308][ T6211] loop3: detected capacity change from 0 to 8 [ 137.905899][ T4325] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.061265][ T4325] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.080310][ T26] audit: type=1326 audit(1732107579.623:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 138.120214][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.828'. [ 138.170066][ T26] audit: type=1326 audit(1732107579.643:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 138.202626][ T4325] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.265070][ T6220] loop1: detected capacity change from 0 to 4096 [ 138.306501][ T26] audit: type=1326 audit(1732107579.643:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 138.328625][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.333624][ T6220] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 138.413618][ T26] audit: type=1326 audit(1732107579.643:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6216 comm="syz.2.827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 138.605904][ T6220] ntfs3: loop1: failed to convert "c46c" to cp869 [ 139.072369][ T6236] loop2: detected capacity change from 0 to 256 [ 139.122950][ T6236] FAT-fs (loop2): Directory bread(block 64) failed [ 139.149070][ T6236] FAT-fs (loop2): Directory bread(block 65) failed [ 139.174855][ T6236] FAT-fs (loop2): Directory bread(block 66) failed [ 139.206777][ T6236] FAT-fs (loop2): Directory bread(block 67) failed [ 139.213495][ T6236] FAT-fs (loop2): Directory bread(block 68) failed [ 139.256978][ T4254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.267032][ T4254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.277830][ T4254] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.287868][ T4254] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.306545][ T6236] FAT-fs (loop2): Directory bread(block 69) failed [ 139.313315][ T6236] FAT-fs (loop2): Directory bread(block 70) failed [ 139.351436][ T4254] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.356767][ T6236] FAT-fs (loop2): Directory bread(block 71) failed [ 139.365803][ T4254] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.396104][ T6170] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 139.451536][ T6236] FAT-fs (loop2): Directory bread(block 72) failed [ 139.468616][ T6236] FAT-fs (loop2): Directory bread(block 73) failed [ 139.644554][ T6170] usb 4-1: Using ep0 maxpacket: 16 [ 139.662291][ T6170] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 139.692071][ T6170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.716206][ T6170] usb 4-1: Product: syz [ 139.720523][ T6170] usb 4-1: Manufacturer: syz [ 139.745740][ T6170] usb 4-1: SerialNumber: syz [ 139.752774][ T6260] loop1: detected capacity change from 0 to 8 [ 139.766877][ T6170] usb 4-1: config 0 descriptor?? [ 139.813272][ T6170] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 140.189072][ T6170] ssu100: probe of 4-1:0.0 failed with error -71 [ 140.202430][ T6170] usb 4-1: USB disconnect, device number 5 [ 140.535117][ T6282] loop2: detected capacity change from 0 to 64 [ 140.801927][ T6244] chnl_net:caif_netlink_parms(): no params data found [ 141.386780][ T4254] Bluetooth: hci2: command 0x0409 tx timeout [ 141.458183][ T4325] device hsr_slave_0 left promiscuous mode [ 141.557581][ T4325] device hsr_slave_1 left promiscuous mode [ 141.587576][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.595126][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.647809][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.655336][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.761452][ T4325] device bridge_slave_1 left promiscuous mode [ 141.796712][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.896367][ T6328] loop3: detected capacity change from 0 to 128 [ 141.903622][ T4325] device bridge_slave_0 left promiscuous mode [ 141.915625][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.943770][ T6328] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 141.991919][ T6328] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.043042][ T6170] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.078303][ T6334] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 142.104590][ T4325] device veth1_macvtap left promiscuous mode [ 142.158578][ T4325] device veth0_macvtap left promiscuous mode [ 142.164864][ T4325] device veth1_vlan left promiscuous mode [ 142.202915][ T4325] device veth0_vlan left promiscuous mode [ 142.276083][ T6170] usb 3-1: Using ep0 maxpacket: 8 [ 142.283990][ T6170] usb 3-1: config 0 has an invalid interface number: 33 but max is 1 [ 142.319648][ T6170] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.359707][ T6170] usb 3-1: config 0 has no interface number 1 [ 142.386186][ T6170] usb 3-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 142.402402][ T6336] loop0: detected capacity change from 0 to 4096 [ 142.428225][ T6170] usb 3-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 142.448040][ T6170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.465550][ T6336] ntfs: (device loop0): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 142.493399][ T6170] usb 3-1: Product: syz [ 142.500251][ T6336] ntfs: (device loop0): ntfs_read_locked_inode(): $DATA attribute is missing. [ 142.516749][ T6170] usb 3-1: Manufacturer: syz [ 142.527364][ T6170] usb 3-1: SerialNumber: syz [ 142.532443][ T6336] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 142.583916][ T6170] usb 3-1: config 0 descriptor?? [ 142.603229][ T6336] ntfs: (device loop0): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 142.627582][ T6170] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 142.684149][ T6336] ntfs: volume version 3.1. [ 142.793318][ T6336] ntfs: (device loop0): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 142.816723][ T6336] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 142.834685][ T2306] pvrusb2: Invalid write control endpoint [ 142.857179][ T6170] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 142.868813][ T2306] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 142.899196][ T2306] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 143.025504][ T6170] usb 3-1: USB disconnect, device number 6 [ 143.118427][ T6350] loop3: detected capacity change from 0 to 256 [ 143.147003][ T6350] exfat: Deprecated parameter 'utf8' [ 143.153584][ T6350] exfat: Deprecated parameter 'utf8' [ 143.171451][ T6350] exfat: Deprecated parameter 'utf8' [ 143.223196][ T6350] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acca35, utbl_chksum : 0xe619d30d) [ 143.470650][ T4259] Bluetooth: hci2: command 0x041b tx timeout [ 144.048114][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 144.123453][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 144.125630][ T6362] netlink: 'syz.2.883': attribute type 29 has an invalid length. [ 144.139944][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 144.188735][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.239112][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.458024][ T4325] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 144.784680][ T4325] bond0 (unregistering): Released all slaves [ 145.091711][ T6362] netlink: 'syz.2.883': attribute type 29 has an invalid length. [ 145.100036][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.883'. [ 145.197409][ T6244] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.256422][ T6244] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.264955][ T6244] device bridge_slave_0 entered promiscuous mode [ 145.344877][ T6371] binder: 6370:6371 ioctl c00c6211 0 returned -14 [ 145.353090][ T6244] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.381504][ T6244] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.410829][ T6244] device bridge_slave_1 entered promiscuous mode [ 145.640976][ T4254] Bluetooth: hci2: command 0x040f tx timeout [ 145.737643][ T6244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.779629][ T6244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.929006][ T6244] team0: Port device team_slave_0 added [ 146.005341][ T6384] loop2: detected capacity change from 0 to 22 [ 146.020477][ T6244] team0: Port device team_slave_1 added [ 146.070094][ T6384] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 146.129541][ T6384] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 146.146593][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.153676][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.309220][ T6244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.346733][ T6391] loop1: detected capacity change from 0 to 512 [ 146.366237][ T6244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.373239][ T6244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.481329][ T6244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.491854][ T6391] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.582896][ T6391] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.613606][ T6244] device hsr_slave_0 entered promiscuous mode [ 146.695269][ T6244] device hsr_slave_1 entered promiscuous mode [ 146.736206][ T6244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.752349][ T6244] Cannot create hsr debugfs directory [ 146.910416][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 147.126795][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.899'. [ 147.172013][ T4325] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.185097][ T4259] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.196578][ T4259] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.205648][ T4259] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.214586][ T6409] netlink: 332 bytes leftover after parsing attributes in process `syz.1.899'. [ 147.229520][ T4259] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.240820][ T4259] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 147.256442][ T4259] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.364677][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 147.404172][ T6410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.900'. [ 147.437551][ T6393] loop0: detected capacity change from 0 to 32768 [ 147.491959][ T6393] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 147.628820][ T4325] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.642002][ T4248] ocfs2: Unmounting device (7,0) on (node local) [ 147.706204][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 147.814802][ T4325] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.030599][ T4325] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.290983][ T6244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.340047][ T6244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.383736][ T6244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.464884][ T6244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 149.036943][ T6411] chnl_net:caif_netlink_parms(): no params data found [ 149.285026][ T6468] loop1: detected capacity change from 0 to 24 [ 149.307516][ T4254] Bluetooth: hci3: command 0x0409 tx timeout [ 149.339431][ T6468] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 149.347965][ T6472] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 149.382338][ T6468] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 149.485260][ T6468] VFS: Lookup of 'file0' in romfs loop1 would have caused loop [ 149.704591][ T6480] netlink: 'syz.2.923': attribute type 10 has an invalid length. [ 149.783750][ T6480] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 149.827457][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.834857][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.878351][ T6411] device bridge_slave_0 entered promiscuous mode [ 149.990982][ T6244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.007049][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.014247][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.033519][ T6411] device bridge_slave_1 entered promiscuous mode [ 150.146133][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.161947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.216582][ T6244] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.257830][ T6497] loop2: detected capacity change from 0 to 256 [ 150.282848][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.0.930'. [ 150.344296][ T6497] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 150.365864][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.377472][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.391204][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.398556][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.411192][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.443321][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.485189][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.493308][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.505143][ T6501] loop0: detected capacity change from 0 to 64 [ 150.535566][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.826383][ T6411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.860380][ T6411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.916601][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.002344][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.027394][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.039658][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.085785][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.127324][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.158668][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.194194][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.224997][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 151.255101][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.309002][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 151.386392][ T4254] Bluetooth: hci3: command 0x041b tx timeout [ 151.454310][ T6522] loop0: detected capacity change from 0 to 764 [ 151.473325][ T6411] team0: Port device team_slave_0 added [ 151.502790][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.528362][ T6411] team0: Port device team_slave_1 added [ 151.599965][ T4325] device hsr_slave_0 left promiscuous mode [ 151.628495][ T4325] device hsr_slave_1 left promiscuous mode [ 151.646353][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.653918][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.693401][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.716637][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.758022][ T4325] device bridge_slave_1 left promiscuous mode [ 151.779165][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.824174][ T4325] device bridge_slave_0 left promiscuous mode [ 151.833787][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.935832][ T4325] device veth1_macvtap left promiscuous mode [ 151.950632][ T4325] device veth0_macvtap left promiscuous mode [ 151.960567][ T4325] device veth1_vlan left promiscuous mode [ 151.972250][ T4325] device veth0_vlan left promiscuous mode [ 152.107442][ T6542] loop1: detected capacity change from 0 to 4096 [ 152.123817][ T6542] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 152.277129][ T6542] ntfs3: loop1: ino=0, attr_set_size [ 152.790118][ T6556] loop1: detected capacity change from 0 to 4096 [ 152.883039][ T6556] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 152.923106][ T6556] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 152.943957][ T6556] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 152.972000][ T6556] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 153.083057][ T6556] ntfs: volume version 3.1. [ 153.153801][ T6556] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 153.161270][ T6562] loop0: detected capacity change from 0 to 4096 [ 153.182156][ T6556] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 153.466685][ T4254] Bluetooth: hci3: command 0x040f tx timeout [ 153.497542][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 153.607164][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 153.723499][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.847628][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.046912][ T6578] loop0: detected capacity change from 0 to 4096 [ 154.079293][ T6578] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 154.153263][ T6578] ntfs3: loop0: Failed to load $Extend. [ 154.629677][ T6586] netlink: 16 bytes leftover after parsing attributes in process `syz.0.968'. [ 154.861256][ T4325] bond0 (unregistering): Released all slaves [ 154.993967][ T6584] netlink: 'syz.1.967': attribute type 10 has an invalid length. [ 155.056626][ T6584] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 155.082300][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.099357][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.130596][ T6411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.201275][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.262882][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.346045][ T6411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.546505][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 155.564708][ T6411] device hsr_slave_0 entered promiscuous mode [ 155.643470][ T6411] device hsr_slave_1 entered promiscuous mode [ 156.038720][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.070873][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.132388][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.180220][ T6620] loop0: detected capacity change from 0 to 8 [ 156.575823][ T6411] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 156.616165][ T6411] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 156.668870][ T6411] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 156.750495][ T6411] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 156.876315][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 157.053795][ T6411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.066482][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 157.074777][ T7] usb 1-1: config 0 has an invalid interface number: 33 but max is 1 [ 157.111752][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.123954][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.987'. [ 157.131102][ T6411] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.155671][ T6648] netlink: 'syz.1.987': attribute type 2 has an invalid length. [ 157.183321][ T7] usb 1-1: config 0 has no interface number 1 [ 157.190632][ T6648] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 157.205853][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 157.213910][ T7] usb 1-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 157.222058][ T6648] netlink: 120 bytes leftover after parsing attributes in process `syz.1.987'. [ 157.236554][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 157.249430][ T7] usb 1-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 157.270473][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.281909][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 157.300824][ T7] usb 1-1: Product: syz [ 157.301488][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.305073][ T7] usb 1-1: Manufacturer: syz [ 157.339812][ T7] usb 1-1: SerialNumber: syz [ 157.344681][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.351954][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.359015][ T7] usb 1-1: config 0 descriptor?? [ 157.374156][ T7] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 157.385130][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 157.428437][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 157.440931][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 157.450381][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.457741][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.469664][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.484580][ T6653] loop1: detected capacity change from 0 to 1024 [ 157.506165][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.520170][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.532787][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.545487][ T6653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 157.588754][ T7] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 157.597581][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.619207][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.629149][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 157.638742][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 157.677999][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 157.687699][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 157.692320][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 157.699171][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 157.711895][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 157.720989][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 157.744747][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.763333][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.793723][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 157.801533][ T7] usb 1-1: USB disconnect, device number 3 [ 157.817280][ T7] pvrusb2: Device being rendered inoperable [ 157.845252][ T7] pvrusb2: Device being rendered inoperable [ 157.855344][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.873603][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.943215][ T6244] device veth0_vlan entered promiscuous mode [ 157.979375][ T6244] device veth1_vlan entered promiscuous mode [ 158.056269][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.081216][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.101042][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.121064][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.143473][ T6244] device veth0_macvtap entered promiscuous mode [ 158.154247][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.171059][ T6244] device veth1_macvtap entered promiscuous mode [ 158.172291][ T6664] loop1: detected capacity change from 0 to 1764 [ 158.238785][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.256037][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.282832][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.304270][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.321856][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.334152][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.392563][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.418796][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.456499][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.493478][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.537283][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.564733][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.594738][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.625460][ T6244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.657829][ T6244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.719505][ T6244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.786234][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.795592][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.840280][ T6244] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.856511][ T6244] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.881376][ T6244] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.910817][ T6244] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.944690][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.969202][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.990810][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.019058][ T6689] loop1: detected capacity change from 0 to 8 [ 159.202299][ T6689] SQUASHFS error: zstd decompression error: 10 [ 159.222637][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.256158][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.266148][ T6689] SQUASHFS error: zstd decompression failed, data probably corrupt [ 159.303662][ T6689] SQUASHFS error: Failed to read block 0x62b: -5 [ 159.318902][ T6689] SQUASHFS error: Unable to read metadata cache entry [629] [ 159.331455][ T6689] SQUASHFS error: Unable to read directory block [629:ff26] [ 159.334312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.362986][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.385035][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.431818][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.035501][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 160.052781][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 160.112249][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 160.131433][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 160.161989][ T6411] device veth0_vlan entered promiscuous mode [ 160.181918][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 160.234158][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 160.279407][ T6411] device veth1_vlan entered promiscuous mode [ 160.387388][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 160.417198][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.447810][ T6411] device veth0_macvtap entered promiscuous mode [ 160.471639][ T6411] device veth1_macvtap entered promiscuous mode [ 160.634995][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.678038][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.727863][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.749525][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.787466][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.834304][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.865114][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.895284][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.922203][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.949822][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 160.969276][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 161.028130][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.070250][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.129356][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.169366][ T6710] loop1: detected capacity change from 0 to 32768 [ 161.169382][ T6741] loop2: detected capacity change from 0 to 512 [ 161.193091][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.214572][ T6741] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 161.245289][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.266035][ T6741] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 161.281682][ T6710] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 161.295608][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.323188][ T6741] EXT4-fs (loop2): orphan cleanup on readonly fs [ 161.364489][ T6741] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 161.377429][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.385978][ T26] audit: type=1800 audit(1732107602.923:22): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1002" name="file1" dev="loop1" ino=9553 res=0 errno=0 [ 161.389350][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.420994][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.432559][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.444664][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.456377][ T6741] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 161.519407][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.540364][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.560264][ T6741] EXT4-fs (loop2): 1 truncate cleaned up [ 161.584515][ T6411] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.610561][ T4249] ocfs2: Unmounting device (7,1) on (node local) [ 161.623963][ T6741] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 161.636282][ T6411] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.686026][ T6411] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.695054][ T6411] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.751168][ T6741] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1012: dx entry: limit 65535 != root limit 120 [ 161.836156][ T6741] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1012: Corrupt directory, running e2fsck is recommended [ 161.998745][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.023373][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 162.052370][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.152497][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.171446][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.193869][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.234310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 162.439786][ T6763] loop2: detected capacity change from 0 to 4096 [ 162.493941][ T6763] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 162.536300][ T6772] capability: warning: `syz.6.891' uses 32-bit capabilities (legacy support in use) [ 163.232930][ T6793] loop0: detected capacity change from 0 to 256 [ 163.266445][ T6799] loop6: detected capacity change from 0 to 22 [ 163.289697][ T6793] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xadbf5ead, utbl_chksum : 0xe619d30d) [ 163.311430][ T6799] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 163.344630][ T6799] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 163.671168][ T6806] netlink: 'syz.0.1035': attribute type 5 has an invalid length. [ 163.726022][ T6806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1035'. [ 164.300935][ T26] audit: type=1326 audit(1732107605.843:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a097e819 code=0x7ffc0000 [ 164.379690][ T26] audit: type=1326 audit(1732107605.853:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f65a097e819 code=0x7ffc0000 [ 164.476061][ T26] audit: type=1326 audit(1732107605.853:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a097e819 code=0x7ffc0000 [ 164.498729][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.619261][ T6827] loop2: detected capacity change from 0 to 1024 [ 164.641432][ T26] audit: type=1326 audit(1732107605.853:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6821 comm="syz.1.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65a097e819 code=0x7ffc0000 [ 164.653809][ T6830] loop1: detected capacity change from 0 to 64 [ 164.727471][ T6827] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.826923][ T6827] EXT4-fs error (device loop2): ext4_lookup:1850: inode #2: comm syz.2.1043: bad inode number: 6 [ 164.860531][ T6810] loop5: detected capacity change from 0 to 32768 [ 164.942337][ T6827] EXT4-fs (loop2): Remounting filesystem read-only [ 164.961252][ T6810] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 165.113668][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 165.201511][ T6244] ocfs2: Unmounting device (7,5) on (node local) [ 165.209471][ T6808] loop6: detected capacity change from 0 to 32768 [ 165.305376][ T6846] netlink: 'syz.2.1048': attribute type 1 has an invalid length. [ 165.372127][ T6846] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1048'. [ 165.790322][ T6848] device bond1 entered promiscuous mode [ 165.820788][ T6848] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.860663][ T6859] netlink: 'syz.5.1050': attribute type 11 has an invalid length. [ 165.909869][ T6859] netlink: 112865 bytes leftover after parsing attributes in process `syz.5.1050'. [ 166.281387][ T6873] loop5: detected capacity change from 0 to 1024 [ 166.391609][ T6873] hfsplus: Filesystem is marked locked, mounting read-only. [ 166.466192][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 166.480954][ T6873] hfsplus: filesystem is marked locked, leaving read-only. [ 166.866163][ T4803] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.066408][ T4803] usb 2-1: Using ep0 maxpacket: 32 [ 167.091112][ T4803] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=7c.49 [ 167.136119][ T4803] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.156092][ T4803] usb 2-1: Product: syz [ 167.160371][ T4803] usb 2-1: Manufacturer: syz [ 167.175259][ T4803] usb 2-1: SerialNumber: syz [ 167.197037][ T4803] usb 2-1: config 0 descriptor?? [ 167.218340][ T4803] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 167.385196][ T6913] loop5: detected capacity change from 0 to 512 [ 167.498818][ T6913] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 167.571592][ T6913] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.644073][ T4803] gspca_topro: reg_w err -71 [ 167.686138][ T4803] gspca_topro: Sensor soi763a [ 167.723420][ T4803] usb 2-1: USB disconnect, device number 3 [ 167.788420][ T6913] EXT4-fs error (device loop5): ext4_xattr_block_find:1828: inode #15: comm syz.5.1073: corrupted xattr block 32 [ 167.966459][ T6932] kAFS: unparsable volume name [ 168.010976][ T6244] EXT4-fs (loop5): unmounting filesystem. [ 168.476415][ T6946] netlink: 'syz.1.1086': attribute type 4 has an invalid length. [ 168.525121][ T26] audit: type=1326 audit(1732107610.063:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 168.605890][ T6946] device veth1_macvtap left promiscuous mode [ 168.619999][ T26] audit: type=1326 audit(1732107610.063:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 168.767398][ T26] audit: type=1326 audit(1732107610.063:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 168.855094][ T26] audit: type=1326 audit(1732107610.093:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6947 comm="syz.2.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 168.923736][ T6927] loop6: detected capacity change from 0 to 32768 [ 169.247955][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 169.302087][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1094'. [ 169.652630][ T6974] loop1: detected capacity change from 0 to 128 [ 169.782477][ T6974] befs: (loop1): invalid magic header [ 169.832716][ T6979] loop0: detected capacity change from 0 to 2048 [ 169.867985][ T4788] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 169.925606][ T6979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 170.430921][ T7003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1108'. [ 170.451081][ T7003] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1108'. [ 170.496070][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 170.690583][ T7015] loop1: detected capacity change from 0 to 16 [ 170.697476][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 170.699671][ T14] usb 7-1: config 0 has an invalid interface number: 5 but max is 0 [ 170.724629][ T7013] 8021q: VLANs not supported on lo [ 170.728125][ T7015] erofs: (device loop1): mounted with root inode @ nid 36. [ 170.762243][ T14] usb 7-1: config 0 has no interface number 0 [ 170.771439][ T14] usb 7-1: config 0 interface 5 has no altsetting 0 [ 170.818518][ T14] usb 7-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=f0.ff [ 170.835291][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.864181][ T14] usb 7-1: Product: syz [ 170.868813][ T14] usb 7-1: Manufacturer: syz [ 170.873646][ T14] usb 7-1: SerialNumber: syz [ 170.912982][ T14] usb 7-1: config 0 descriptor?? [ 171.043039][ T7018] loop5: detected capacity change from 0 to 2048 [ 171.092482][ T7018] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.159761][ T7018] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.286126][ T7026] loop1: detected capacity change from 0 to 4096 [ 171.321508][ T6244] EXT4-fs (loop5): unmounting filesystem. [ 171.355608][ T4803] usb 7-1: USB disconnect, device number 2 [ 171.378999][ T4803] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 171.510843][ T7026] ntfs3: loop1: try to read out of volume at offset 0x3fffffc7000 [ 171.523519][ T7029] netlink: 'syz.5.1118': attribute type 9 has an invalid length. [ 171.852838][ T7040] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1121'. [ 172.283650][ T7055] netlink: 'syz.0.1125': attribute type 3 has an invalid length. [ 172.348680][ T7060] netlink: 'syz.1.1127': attribute type 21 has an invalid length. [ 172.759318][ T26] audit: type=1326 audit(1732107614.303:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3797e819 code=0x7ffc0000 [ 172.832228][ T26] audit: type=1326 audit(1732107614.333:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f3b3797e819 code=0x7ffc0000 [ 172.936105][ T26] audit: type=1326 audit(1732107614.333:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3797e819 code=0x7ffc0000 [ 173.053428][ T26] audit: type=1326 audit(1732107614.333:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.5.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3797e819 code=0x7ffc0000 [ 173.153517][ T7085] loop0: detected capacity change from 0 to 256 [ 173.220621][ T7085] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 173.766883][ T7106] loop5: detected capacity change from 0 to 256 [ 173.860269][ T7106] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 174.054372][ T7117] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1152'. [ 174.084194][ T7117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1152'. [ 174.672066][ T7141] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 174.700846][ T7141] [U] J"—e:ÀÆ" [ 175.054570][ T7155] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.214854][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1168'. [ 175.428836][ T7169] loop2: detected capacity change from 0 to 512 [ 175.579966][ T7174] netlink: 'syz.6.1172': attribute type 1 has an invalid length. [ 175.613011][ T7174] netlink: 216 bytes leftover after parsing attributes in process `syz.6.1172'. [ 175.639634][ T7169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 175.677691][ T7169] ext4 filesystem being mounted at /253/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.988303][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 176.326085][ T14] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 176.536041][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 176.548768][ T14] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 176.615990][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.661012][ T14] usb 2-1: config 0 has no interface number 0 [ 176.676410][ T14] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 176.696276][ T14] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.736241][ T14] usb 2-1: config 0 interface 52 has no altsetting 0 [ 176.758240][ T14] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 176.778056][ T14] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 176.806227][ T14] usb 2-1: Manufacturer: syz [ 176.847834][ T14] usb 2-1: config 0 descriptor?? [ 176.884200][ T7217] loop0: detected capacity change from 0 to 4096 [ 176.950216][ T7217] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 176.992875][ T7222] netlink: 'syz.2.1200': attribute type 4 has an invalid length. [ 177.040841][ T7224] netlink: 'syz.5.1190': attribute type 1 has an invalid length. [ 177.069130][ T7224] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1190'. [ 177.083210][ T14] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input9 [ 177.084710][ T7217] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 177.323155][ T4297] usb 2-1: USB disconnect, device number 4 [ 177.323232][ C0] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 177.421810][ T7227] netlink: 'syz.2.1191': attribute type 4 has an invalid length. [ 177.422176][ T7193] loop6: detected capacity change from 0 to 32768 [ 177.481057][ T7193] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1178 (7193) [ 177.543881][ T7230] loop5: detected capacity change from 0 to 512 [ 177.566284][ T7193] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 177.595305][ T7227] device veth1_macvtap left promiscuous mode [ 177.627271][ T7193] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 177.690108][ T7230] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.772215][ T7230] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.786063][ T7193] BTRFS info (device loop6): turning off barriers [ 177.792612][ T7193] BTRFS info (device loop6): enabling all of the rescue options [ 177.856706][ T7193] BTRFS info (device loop6): ignoring data csums [ 177.879054][ T7193] BTRFS info (device loop6): ignoring bad roots [ 177.889008][ T7236] loop0: detected capacity change from 0 to 2048 [ 177.926022][ T7193] BTRFS info (device loop6): disabling log replay at mount time [ 177.934007][ T7193] BTRFS info (device loop6): disabling tree log [ 177.976181][ T7193] BTRFS info (device loop6): turning on flush-on-commit [ 178.006711][ T7193] BTRFS info (device loop6): using free space tree [ 178.013348][ T7236] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 178.034974][ T6244] EXT4-fs (loop5): unmounting filesystem. [ 178.171529][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 178.242221][ T7193] BTRFS info (device loop6: state C): enabling ssd optimizations [ 178.311686][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 178.329792][ T7269] x_tables: unsorted entry at hook 1 [ 178.541722][ T6411] BTRFS info (device loop6: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 178.886103][ T7287] netlink: 'syz.1.1203': attribute type 1 has an invalid length. [ 178.894178][ T7287] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1203'. [ 178.928021][ T7289] netlink: 'syz.0.1207': attribute type 21 has an invalid length. [ 178.983950][ T7289] netlink: 'syz.0.1207': attribute type 1 has an invalid length. [ 179.016163][ T7289] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1207'. [ 179.543804][ T7308] autofs4:pid:7308:autofs_fill_super: called with bogus options [ 179.592003][ T7312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.650055][ T7312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.696324][ T7312] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.888096][ T7322] loop6: detected capacity change from 0 to 128 [ 179.934640][ T7322] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.966813][ T7323] device vlan0 entered promiscuous mode [ 180.246721][ T7330] netlink: del zone limit has 4 unknown bytes [ 180.738531][ T7348] netlink: 'syz.0.1231': attribute type 10 has an invalid length. [ 181.640580][ T7382] netlink: 'syz.1.1245': attribute type 21 has an invalid length. [ 181.715310][ T7382] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1245'. [ 181.754271][ T7383] netlink: 'syz.2.1244': attribute type 17 has an invalid length. [ 181.783962][ T7383] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1244'. [ 181.805760][ T7383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.868374][ T7389] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1247'. [ 181.900268][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1247'. [ 182.366887][ T7362] loop0: detected capacity change from 0 to 32768 [ 182.415013][ T7362] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.1237 (7362) [ 182.423531][ T7399] loop2: detected capacity change from 0 to 4096 [ 182.463937][ T7399] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 182.491898][ T7362] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 182.531428][ T7362] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 182.586298][ T7399] ntfs3: loop2: failed to convert "c46c" to default [ 182.592220][ T7362] BTRFS info (device loop0): using free space tree [ 182.956325][ T7362] BTRFS info (device loop0): enabling ssd optimizations [ 182.966055][ T22] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 183.176094][ T22] usb 7-1: Using ep0 maxpacket: 8 [ 183.181592][ T4248] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 183.187999][ T22] usb 7-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 183.232983][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.303418][ T22] usb 7-1: Product: syz [ 183.343110][ T22] usb 7-1: Manufacturer: syz [ 183.354644][ T22] usb 7-1: SerialNumber: syz [ 183.385527][ T7450] (syz.2.1262,7450,0):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 183.402729][ T22] usb 7-1: config 0 descriptor?? [ 183.439389][ T22] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 183.503907][ T7450] (syz.2.1262,7450,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 183.629513][ T7456] netlink: 'syz.5.1263': attribute type 1 has an invalid length. [ 183.639193][ T7394] loop1: detected capacity change from 0 to 32768 [ 183.676483][ T7394] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop1 scanned by syz.1.1248 (7394) [ 183.706154][ T7456] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1263'. [ 183.806131][ T7394] BTRFS info (device loop1): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 183.860666][ T22] gspca_m5602: Failed to find a sensor [ 183.876284][ T22] ALi m5602 7-1:0.0: ALi m5602 webcam failed [ 183.882595][ T7394] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 183.926134][ T7394] BTRFS info (device loop1): enabling ssd optimizations [ 183.926170][ T22] usb 7-1: USB disconnect, device number 3 [ 183.933171][ T7394] BTRFS info (device loop1): not using ssd optimizations [ 184.106067][ T7394] BTRFS info (device loop1): turning off barriers [ 184.139203][ T7394] BTRFS info (device loop1): using free space tree [ 184.251812][ T7472] loop0: detected capacity change from 0 to 1024 [ 184.657682][ T51] hfsplus: b-tree write err: -5, ino 4 [ 184.845807][ T26] audit: type=1326 audit(1732107626.383:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c0d7e819 code=0x7ffc0000 [ 184.880296][ T4249] BTRFS info (device loop1): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 184.895737][ T26] audit: type=1326 audit(1732107626.413:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f96c0d7e819 code=0x7ffc0000 [ 185.017232][ T26] audit: type=1326 audit(1732107626.413:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7500 comm="syz.0.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c0d7e819 code=0x7ffc0000 [ 185.233709][ T7509] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1277'. [ 185.553612][ T7516] loop6: detected capacity change from 0 to 64 [ 186.029581][ T7523] loop6: detected capacity change from 0 to 2048 [ 186.137345][ T7497] loop5: detected capacity change from 0 to 32768 [ 186.155556][ T7528] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 186.184871][ T7497] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.1270 (7497) [ 186.225699][ T7523] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=2, rec_len=32784, name_len=0 [ 186.269586][ T7497] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 186.321854][ T7497] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 186.343296][ T7523] Remounting filesystem read-only [ 186.376419][ T7497] BTRFS info (device loop5): enabling ssd optimizations [ 186.414687][ T7497] BTRFS info (device loop5): not using ssd optimizations [ 186.465349][ T7497] BTRFS info (device loop5): turning off barriers [ 186.497868][ T7481] loop2: detected capacity change from 0 to 32768 [ 186.514119][ T7497] BTRFS info (device loop5): using free space tree [ 186.566872][ T7481] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 186.596498][ T7481] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 186.673049][ T7481] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 186.738062][ T4572] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 186.745160][ T4572] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 186.773693][ T7514] loop0: detected capacity change from 0 to 32768 [ 186.919328][ T7514] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 186.922622][ T4572] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 177ms [ 186.947975][ T4572] gfs2: fsid=syz:syz.0: jid=0: Done [ 186.953272][ T7481] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 187.246892][ T6244] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 187.369475][ T4248] ocfs2: Unmounting device (7,0) on (node local) [ 187.648177][ T7579] sctp: [Deprecated]: syz.1.1293 (pid 7579) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.648177][ T7579] Use struct sctp_sack_info instead [ 187.933727][ T7583] netlink: 'syz.0.1291': attribute type 4 has an invalid length. [ 189.344932][ T7630] tmpfs: Bad value for 'mpol' [ 189.579687][ T7608] loop5: detected capacity change from 0 to 32768 [ 189.638679][ T7614] loop2: detected capacity change from 0 to 32768 [ 189.680505][ T7634] sctp: [Deprecated]: syz.0.1314 (pid 7634) Use of int in maxseg socket option. [ 189.680505][ T7634] Use struct sctp_assoc_value instead [ 189.705432][ T7614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1303 (7614) [ 189.764615][ T7614] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.841708][ T7614] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 189.884590][ T7614] BTRFS info (device loop2): using free space tree [ 189.974881][ T7601] loop1: detected capacity change from 0 to 32768 [ 190.006409][ T7601] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 190.075995][ T7601] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 190.128098][ T7601] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 190.157977][ T7614] BTRFS info (device loop2): enabling ssd optimizations [ 190.176101][ T4802] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 190.206090][ T4802] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 190.313640][ T4802] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms [ 190.353866][ T4802] gfs2: fsid=syz:syz.0: jid=0: Done [ 190.369842][ T7601] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 190.431483][ T4258] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.111075][ T7673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.147653][ T7673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.155209][ T7673] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.171371][ T7649] loop0: detected capacity change from 0 to 32768 [ 192.109308][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1335'. [ 192.131207][ T7699] binder: 7696:7699 ioctl c0046209 100000000000000 returned -22 [ 192.301506][ T7676] loop2: detected capacity change from 0 to 32768 [ 192.340369][ T7676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1320 (7676) [ 192.415360][ T7676] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.484700][ T7676] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 192.509724][ T7676] BTRFS info (device loop2): using free space tree [ 192.798640][ T7738] loop5: detected capacity change from 0 to 16 [ 192.800885][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.806139][ T7738] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 192.822391][ T7676] BTRFS info (device loop2): enabling ssd optimizations [ 192.930838][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 192.994171][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.104109][ T7743] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 193.123405][ T4258] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.762207][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1347'. [ 193.843776][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 193.884352][ T7769] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1353'. [ 193.914820][ T7769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1353'. [ 193.924827][ T7771] netlink: 9412 bytes leftover after parsing attributes in process `syz.6.1354'. [ 194.033173][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.121092][ T7778] loop5: detected capacity change from 0 to 4096 [ 194.444712][ T7786] loop6: detected capacity change from 0 to 512 [ 194.552689][ T7786] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 194.626331][ T7786] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.647489][ T7795] loop1: detected capacity change from 0 to 1024 [ 194.756097][ T7786] EXT4-fs error (device loop6): ext4_get_verity_descriptor_location:337: inode #15: comm syz.6.1360: verity file corrupted; can't find descriptor [ 194.772552][ T7795] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.1362: Invalid block bitmap block 0 in block_group 0 [ 194.803537][ T7786] EXT4-fs (loop6): Remounting filesystem read-only [ 194.845463][ T7786] fs-verity (loop6, inode 15): Error -117 getting verity descriptor size [ 194.854223][ T7795] Quota error (device loop1): write_blk: dquota write failed [ 194.869846][ T7805] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 194.886404][ T7795] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 194.941912][ T7795] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.1362: Failed to acquire dquot type 0 [ 194.998271][ T7795] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.1362: Freeing blocks not in datazone - block = 0, count = 4096 [ 195.005723][ T6411] EXT4-fs (loop6): unmounting filesystem. [ 195.115143][ T7795] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1362: Invalid inode bitmap blk 0 in block_group 0 [ 195.134448][ T4325] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8 [ 195.161169][ T4325] EXT4-fs error (device loop1): ext4_release_dquot:6824: comm kworker/u4:7: Failed to release dquot type 0 [ 195.217416][ T7795] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 195.262308][ T7795] EXT4-fs (loop1): 1 orphan inode deleted [ 195.293039][ T7795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 195.365588][ T7820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'. [ 195.589813][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 196.106113][ T4254] Bluetooth: hci1: command 0x0406 tx timeout [ 196.113073][ T4254] Bluetooth: hci0: command 0x0406 tx timeout [ 196.291656][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1384'. [ 197.122907][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.143471][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.187299][ T7891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.907870][ T7872] loop6: detected capacity change from 0 to 32768 [ 197.915508][ T7872] XFS: attr2 mount option is deprecated. [ 198.099504][ T7872] XFS (loop6): Mounting V5 Filesystem [ 198.331352][ T7872] XFS (loop6): Ending clean mount [ 198.375309][ T7872] XFS (loop6): Quotacheck needed: Please wait. [ 198.505118][ T7872] XFS (loop6): Quotacheck: Done. [ 198.744960][ T6411] XFS (loop6): Unmounting Filesystem [ 198.818554][ T7962] loop2: detected capacity change from 0 to 256 [ 199.366127][ T7980] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1430'. [ 199.909887][ T7991] loop6: detected capacity change from 0 to 4096 [ 199.962296][ T7991] ntfs3: loop6: ino=3, Correct links count -> 2. [ 200.469917][ T7972] loop2: detected capacity change from 0 to 32768 [ 200.505464][ T7972] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop2 scanned by syz.2.1427 (7972) [ 200.619514][ T7972] BTRFS info (device loop2): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 200.670760][ T7972] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 200.724463][ T7972] BTRFS info (device loop2): enabling ssd optimizations [ 200.771333][ T7972] BTRFS info (device loop2): not using ssd optimizations [ 200.788874][ T7972] BTRFS info (device loop2): turning off barriers [ 200.795374][ T7972] BTRFS info (device loop2): using free space tree [ 200.833822][ T8021] loop6: detected capacity change from 0 to 2048 [ 200.906922][ T8021] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.292661][ T4258] BTRFS info (device loop2): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 201.874748][ T8074] loop0: detected capacity change from 0 to 8 [ 201.922944][ T8074] SQUASHFS error: Unable to read inode 0x87 [ 201.998575][ T8077] overlayfs: bad mount option "redirect_dir=off:/" [ 202.141133][ T8085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1462'. [ 202.377450][ T26] audit: type=1326 audit(1732107643.923:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.6.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa086b7e819 code=0x7ffc0000 [ 202.455110][ T26] audit: type=1326 audit(1732107643.923:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.6.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa086b7e819 code=0x7ffc0000 [ 202.576900][ T26] audit: type=1326 audit(1732107643.943:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.6.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fa086b7e819 code=0x7ffc0000 [ 202.699773][ T26] audit: type=1326 audit(1732107643.943:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.6.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa086b7e819 code=0x7ffc0000 [ 202.807754][ T26] audit: type=1326 audit(1732107643.943:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8090 comm="syz.6.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa086b7e819 code=0x7ffc0000 [ 202.921984][ T8107] loop1: detected capacity change from 0 to 512 [ 203.014856][ T8107] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.1470: attempt to clear invalid blocks 1 len 1 [ 203.028077][ T41] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 203.064095][ T8107] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1470: bg 0: block 343: padding at end of block bitmap is not set [ 203.094758][ T8113] loop2: detected capacity change from 0 to 1024 [ 203.107033][ T8113] hfsplus: unable to parse mount options [ 203.205229][ T8107] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 203.228105][ T41] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.268862][ T41] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 203.280767][ T8107] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1470: invalid indirect mapped block 1819239214 (level 0) [ 203.329595][ T8107] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.1470: invalid indirect mapped block 1819239214 (level 1) [ 203.343041][ T41] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.366264][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.395048][ T41] usb 7-1: SerialNumber: syz [ 203.397225][ T8107] EXT4-fs (loop1): 1 truncate cleaned up [ 203.424217][ T8107] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 203.427272][ T41] cdc_ether 7-1:1.0: skipping garbage [ 203.466175][ T41] usb 7-1: bad CDC descriptors [ 203.548873][ T8092] loop5: detected capacity change from 0 to 32768 [ 203.603496][ T8092] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.1465 (8092) [ 203.645887][ T8092] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 203.663054][ T8092] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 203.671981][ T8092] BTRFS info (device loop5): enabling ssd optimizations [ 203.679278][ T8092] BTRFS info (device loop5): not using ssd optimizations [ 203.698368][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 203.699573][ T41] usb 7-1: USB disconnect, device number 4 [ 203.706740][ T8092] BTRFS info (device loop5): turning off barriers [ 203.734658][ T8092] BTRFS info (device loop5): using free space tree [ 204.138601][ T6244] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 204.206225][ T41] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 204.272375][ T2306] pvrusb2: request_firmware fatal error with code=-110 [ 204.280680][ T2306] pvrusb2: Failure uploading firmware1 [ 204.305956][ T2306] pvrusb2: Device initialization was not successful. [ 204.312733][ T2306] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 204.418375][ T41] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.440686][ T2306] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 204.446405][ T41] usb 1-1: config 1 interface 0 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.489462][ T6170] pvrusb2: Device being rendered inoperable [ 204.489688][ T2306] usb 3-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 204.507844][ T41] usb 1-1: config 1 interface 0 has no altsetting 0 [ 204.568404][ T41] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40 [ 204.597114][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.614224][ T2306] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 204.636009][ T41] usb 1-1: Product: syz [ 204.640577][ T41] usb 1-1: Manufacturer: syz [ 204.645219][ T41] usb 1-1: SerialNumber: syz [ 204.928995][ T41] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10 [ 204.960240][ T3606] bcm5974 1-1:1.0: could not read from device [ 205.000114][ T8169] loop5: detected capacity change from 0 to 1024 [ 205.018920][ T41] usb 1-1: USB disconnect, device number 4 [ 205.106839][ T4572] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 205.306151][ T4572] usb 7-1: Using ep0 maxpacket: 32 [ 205.315533][ T4572] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 205.394890][ T4572] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.433957][ T4572] usb 7-1: Product: syz [ 205.453565][ T4572] usb 7-1: Manufacturer: syz [ 205.466151][ T4572] usb 7-1: SerialNumber: syz [ 205.475181][ T8181] loop5: detected capacity change from 0 to 256 [ 205.490232][ T4572] usb 7-1: config 0 descriptor?? [ 205.720077][ T4572] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 005 [ 205.896173][ T41] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 205.936609][ T4297] usb 7-1: USB disconnect, device number 5 [ 206.108304][ T41] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 206.142872][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.172450][ T8196] autofs4:pid:8196:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 206.194661][ T41] usb 2-1: config 0 descriptor?? [ 206.204290][ T8196] autofs4:pid:8196:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 206.241933][ T8198] Mount JFS Failure: -22 [ 206.254100][ T8198] jfs_mount failed w/return code = -22 [ 206.614726][ T41] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f [ 206.626261][ T41] hackrf 2-1:0.0: Could not detect board [ 206.632084][ T41] hackrf: probe of 2-1:0.0 failed with error -71 [ 206.698306][ T41] usb 2-1: USB disconnect, device number 5 [ 206.744786][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1494'. [ 206.792029][ T8207] loop5: detected capacity change from 0 to 4096 [ 206.844908][ T8207] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 207.000315][ T8219] loop6: detected capacity change from 0 to 256 [ 207.022360][ T8207] ntfs3: loop5: failed to convert "c46c" to euc-jp [ 207.097971][ T8219] MINIX-fs: mounting file system with errors, running fsck is recommended [ 207.157583][ T8219] Trying to free block not in datazone [ 207.194742][ T8219] Trying to free block not in datazone [ 207.202340][ T8219] Trying to free block not in datazone [ 207.246253][ T8219] Trying to free block not in datazone [ 207.268674][ T8219] Trying to free block not in datazone [ 207.312327][ T8219] Trying to free block not in datazone [ 207.363083][ T8219] Trying to free block not in datazone [ 207.382705][ T8219] Trying to free block not in datazone [ 207.389520][ T8219] Trying to free block not in datazone [ 207.409523][ T8219] Trying to free block not in datazone [ 207.893134][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1509'. [ 208.118136][ T8258] netlink: 'syz.6.1511': attribute type 32 has an invalid length. [ 208.487572][ T8272] netlink: 11 bytes leftover after parsing attributes in process `syz.6.1516'. [ 209.036161][ T41] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 209.238257][ T41] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 209.289075][ T41] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 209.319124][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.356257][ T41] usb 7-1: Product: syz [ 209.370849][ T41] usb 7-1: Manufacturer: syz [ 209.375512][ T41] usb 7-1: SerialNumber: syz [ 209.425394][ T41] usb 7-1: config 0 descriptor?? [ 209.512174][ T8314] team0: Port device team_slave_0 removed [ 209.534703][ T8314] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 209.720817][ T41] snd-usb-audio: probe of 7-1:0.0 failed with error -2 [ 209.722964][ T8318] loop0: detected capacity change from 0 to 2048 [ 209.767211][ T4788] udevd[4788]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.805296][ T8318] EXT4-fs: Ignoring removed orlov option [ 209.843314][ T8318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 209.902216][ T4566] usb 7-1: USB disconnect, device number 6 [ 209.980615][ T8318] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 210.383061][ T8350] loop2: detected capacity change from 0 to 512 [ 210.413867][ T8350] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 210.455124][ T8350] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 210.485273][ T8350] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1547: invalid indirect mapped block 4278190080 (level 0) [ 210.532146][ T8350] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1547: invalid indirect mapped block 1 (level 1) [ 210.566110][ T8350] EXT4-fs (loop2): 1 truncate cleaned up [ 210.571832][ T8350] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 210.644628][ T8350] EXT4-fs error (device loop2): __ext4_remount:6449: comm syz.2.1547: Abort forced by user [ 210.690101][ T8350] EXT4-fs (loop2): Remounting filesystem read-only [ 210.690207][ T8359] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.705037][ T8350] EXT4-fs (loop2): re-mounted. Quota mode: none. [ 210.807199][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 210.914463][ T41] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 210.996192][ T8333] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 211.129672][ T41] usb 6-1: New USB device found, idVendor=0c45, idProduct=6025, bcdDevice=41.12 [ 211.147195][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.178868][ T41] usb 6-1: config 0 descriptor?? [ 211.221843][ T41] hub 6-1:0.0: bad descriptor, ignoring hub [ 211.245673][ T41] hub: probe of 6-1:0.0 failed with error -5 [ 211.288922][ T41] gspca_main: sonixb-2.14.0 probing 0c45:6025 [ 211.421368][ T8343] loop1: detected capacity change from 0 to 32768 [ 211.531391][ T8343] JFS: metapage_get_blocks failed [ 211.531636][ T8377] netlink: 'syz.6.1559': attribute type 10 has an invalid length. [ 211.567870][ T8343] ERROR: (device loop1): release_metapage: write_one_page() failed [ 211.567870][ T8343] [ 211.578921][ T26] audit: type=1326 audit(1732107653.113:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 211.601084][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.650394][ T8343] ERROR: (device loop1): remounting filesystem as read-only [ 211.683465][ T26] audit: type=1326 audit(1732107653.123:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 211.690779][ T8377] batman_adv: batadv0: Adding interface: team0 [ 211.750966][ T26] audit: type=1326 audit(1732107653.123:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 211.773467][ T8377] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.773504][ T8377] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 211.798889][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.817672][ T105] blkno = 5002c, nblocks = 1 [ 211.819098][ T4979] usb 6-1: USB disconnect, device number 2 [ 211.822297][ T105] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 211.822297][ T105] [ 211.926886][ T26] audit: type=1326 audit(1732107653.123:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.2.1558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 212.073797][ T8391] overlayfs: conflicting options: nfs_export=on,index=off [ 212.870548][ T8418] loop6: detected capacity change from 0 to 256 [ 212.918257][ T8422] loop2: detected capacity change from 0 to 512 [ 213.016319][ T8422] EXT4-fs (loop2): orphan cleanup on readonly fs [ 213.036987][ T8418] FAT-fs (loop6): Directory bread(block 64) failed [ 213.051893][ T8422] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 213.060669][ T8418] FAT-fs (loop6): Directory bread(block 65) failed [ 213.096729][ T8422] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 213.134188][ T8422] EXT4-fs error (device loop2): ext4_acquire_dquot:6801: comm syz.2.1574: Failed to acquire dquot type 1 [ 213.135486][ T8418] FAT-fs (loop6): Directory bread(block 66) failed [ 213.211034][ T8422] EXT4-fs (loop2): 1 truncate cleaned up [ 213.223273][ T8418] FAT-fs (loop6): Directory bread(block 67) failed [ 213.224239][ T8422] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 213.250773][ T8418] FAT-fs (loop6): Directory bread(block 68) failed [ 213.310933][ T8418] FAT-fs (loop6): Directory bread(block 69) failed [ 213.345225][ T8418] FAT-fs (loop6): Directory bread(block 70) failed [ 213.394537][ T8418] FAT-fs (loop6): Directory bread(block 71) failed [ 213.424121][ T8418] FAT-fs (loop6): Directory bread(block 72) failed [ 213.445760][ T8437] netlink: 'syz.5.1581': attribute type 1 has an invalid length. [ 213.486400][ T8418] FAT-fs (loop6): Directory bread(block 73) failed [ 213.495555][ T4258] EXT4-fs (loop2): unmounting filesystem. [ 213.656865][ T26] audit: type=1326 audit(1732107655.203:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 213.749159][ T26] audit: type=1326 audit(1732107655.203:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 213.896170][ T26] audit: type=1326 audit(1732107655.203:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 213.979807][ T26] audit: type=1326 audit(1732107655.203:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8442 comm="syz.2.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53aeb7e819 code=0x7ffc0000 [ 214.237819][ T8464] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1591'. [ 214.865356][ T8474] loop6: detected capacity change from 0 to 8192 [ 215.126241][ T8494] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1603'. [ 215.426099][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1609'. [ 215.956651][ T8528] loop5: detected capacity change from 0 to 256 [ 216.713789][ T8555] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 216.978275][ T8562] loop6: detected capacity change from 0 to 128 [ 217.019535][ T8564] rtc_cmos 00:00: Alarms can be up to one day in the future [ 217.245052][ T8529] loop1: detected capacity change from 0 to 32768 [ 217.356451][ T8575] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 217.459998][ T8529] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 217.625162][ T4249] ocfs2: Unmounting device (7,1) on (node local) [ 217.820964][ T8596] sctp: [Deprecated]: syz.0.1642 (pid 8596) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.820964][ T8596] Use struct sctp_sack_info instead [ 218.567616][ T8622] Illegal XDP return value 4294967274 on prog (id 57) dev N/A, expect packet loss! [ 219.313951][ T8647] x_tables: duplicate entry at hook 1 [ 219.553148][ T8614] loop5: detected capacity change from 0 to 32768 [ 219.603371][ T8614] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 219.652875][ T8614] OCFS2: ERROR (device loop5): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has empty extent list at depth 312 [ 219.746080][ T8614] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 219.786401][ T8614] OCFS2: File system is now read-only. [ 219.801158][ T8614] (syz.5.1649,8614,1):ocfs2_find_leaf:1933 ERROR: status = -30 [ 219.819474][ T8614] (syz.5.1649,8614,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 219.849822][ T8614] (syz.5.1649,8614,1):ocfs2_get_clusters:624 ERROR: status = -30 [ 219.902713][ T8614] (syz.5.1649,8614,1):ocfs2_extent_map_get_blocks:671 ERROR: status = -30 [ 219.938286][ T8614] (syz.5.1649,8614,1):ocfs2_read_virt_blocks:981 ERROR: status = -30 [ 219.985436][ T8614] (syz.5.1649,8614,1):ocfs2_read_dir_block:511 ERROR: status = -30 [ 220.006375][ T8614] (syz.5.1649,8614,1):ocfs2_find_dir_space_el:3487 ERROR: status = -5 [ 220.029783][ T8614] (syz.5.1649,8614,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -5 [ 220.071766][ T8614] (syz.5.1649,8614,1):ocfs2_mknod:296 ERROR: status = -5 [ 220.104376][ T8673] loop1: detected capacity change from 0 to 512 [ 220.114884][ T8614] (syz.5.1649,8614,1):ocfs2_mknod:500 ERROR: status = -5 [ 220.138235][ T8614] (syz.5.1649,8614,1):ocfs2_create:674 ERROR: status = -5 [ 220.275862][ T8673] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 220.295021][ T6244] ocfs2: Unmounting device (7,5) on (node local) [ 220.306461][ T8673] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.307392][ T8682] loop2: detected capacity change from 0 to 1024 [ 220.407198][ T8673] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.1676: verity file corrupted; can't find descriptor [ 220.423579][ T8682] hfsplus: xattr searching failed [ 220.561198][ T8673] EXT4-fs (loop1): Remounting filesystem read-only [ 220.595529][ T8673] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 220.771064][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 220.865814][ T8695] ieee802154 phy1 wpan1: encryption failed: -22 [ 221.482215][ T8717] tmpfs: Bad value for 'mpol' [ 221.491531][ T8721] loop5: detected capacity change from 0 to 512 [ 221.502614][ T8720] loop6: detected capacity change from 0 to 64 [ 221.545048][ T8721] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.588975][ T8721] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 221.623195][ T8721] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 221.640978][ T4788] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.713421][ T8721] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 221.733207][ T8721] System zones: 0-2, 18-18, 34-34 [ 221.756034][ T8721] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 221.776459][ T4572] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 221.876287][ T8721] EXT4-fs (loop5): 1 truncate cleaned up [ 221.886157][ T8721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 222.004172][ T4572] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 222.046118][ T4572] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.054239][ T4572] usb 1-1: Product: syz [ 222.062662][ T4572] usb 1-1: Manufacturer: syz [ 222.076001][ T4572] usb 1-1: SerialNumber: syz [ 222.103901][ T4572] r8152-cfgselector 1-1: config 0 descriptor?? [ 222.123533][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1701'. [ 222.147072][ T6244] EXT4-fs (loop5): unmounting filesystem. [ 222.490019][ T8754] loop5: detected capacity change from 0 to 128 [ 222.509469][ T8754] FAT-fs (loop5): bogus sectors per cluster 0 [ 222.520134][ T8754] FAT-fs (loop5): Can't find a valid FAT filesystem [ 222.537156][ T4572] r8152-cfgselector 1-1: Unknown version 0x0000 [ 222.554834][ T4572] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 223.258405][ T8781] loop2: detected capacity change from 0 to 22 [ 223.293262][ T8781] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 223.309943][ T8781] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 223.422974][ T8784] AppArmor: change_hat: Invalid input '0' [ 223.693562][ T8797] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1728'. [ 223.712132][ T8796] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1729'. [ 224.210637][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1736'. [ 224.238242][ T8813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1737'. [ 224.652469][ T8831] netlink: 'syz.5.1744': attribute type 10 has an invalid length. [ 224.715732][ T8831] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 224.736958][ T8831] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.034143][ T8844] netlink: 'syz.2.1753': attribute type 39 has an invalid length. [ 225.067790][ T8848] loop5: detected capacity change from 0 to 16 [ 225.104231][ T8848] erofs: (device loop5): mounted with root inode @ nid 36. [ 225.163935][ T8847] IPv6: Can't replace route, no match found [ 225.674537][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1762'. [ 225.705058][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 226.467065][ T8900] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1777'. [ 226.886004][ T4572] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 227.070691][ T4572] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 227.089351][ T4572] usb 2-1: config 0 has no interface number 0 [ 227.110288][ T4572] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 227.123572][ T4572] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.180098][ T4572] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 227.196064][ T8923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1788'. [ 227.236458][ T4572] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.253280][ T4572] usb 2-1: Product: syz [ 227.271418][ T4572] usb 2-1: Manufacturer: syz [ 227.276426][ T4572] usb 2-1: SerialNumber: syz [ 227.294614][ T4572] usb 2-1: config 0 descriptor?? [ 227.307037][ T8905] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.321630][ T4572] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 227.398030][ T4572] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 227.516330][ T8935] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 227.606898][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 227.817993][ T4572] usb 2-1: USB disconnect, device number 6 [ 227.850751][ T4572] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 227.890760][ T4572] cyberjack 2-1:0.69: device disconnected [ 228.567086][ T8966] xt_nfacct: accounting object `sy' does not exists [ 228.659354][ T8976] loop6: detected capacity change from 0 to 8 [ 228.747203][ T8976] SQUASHFS error: Unable to read directory block [629:26] [ 228.801591][ T8982] loop5: detected capacity change from 0 to 64 [ 228.998420][ T8988] tmpfs: Bad value for 'mpol' [ 229.008640][ T8986] loop1: detected capacity change from 0 to 64 [ 229.882661][ T9021] IPv6: Can't replace route, no match found [ 230.372561][ T9032] loop1: detected capacity change from 0 to 2048 [ 230.459589][ T9032] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 230.752814][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 231.308350][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.350648][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.365283][ T9036] loop6: detected capacity change from 0 to 32768 [ 231.372050][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.384609][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.394750][ T9036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1844 (9036) [ 231.416344][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.443184][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.475134][ T9036] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 231.495795][ T9059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.512753][ T9036] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 231.532679][ T9036] BTRFS info (device loop6): using free space tree [ 231.560820][ T9059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.626725][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1856'. [ 231.636227][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1856'. [ 231.877536][ T9036] BTRFS info (device loop6): enabling ssd optimizations [ 231.990336][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 232.065389][ T6411] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.079695][ T9053] loop2: detected capacity change from 0 to 32768 [ 232.439733][ T9053] XFS (loop2): Mounting V5 Filesystem [ 232.649995][ T9053] XFS (loop2): Ending clean mount [ 232.806874][ T9130] loop6: detected capacity change from 0 to 2048 [ 232.852406][ T9130] EXT4-fs: Ignoring removed orlov option [ 232.872476][ T4258] XFS (loop2): Unmounting Filesystem [ 232.886183][ T9130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.967109][ T9130] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 233.299838][ T9163] kernel read not supported for file / œ7³ÏüâW)ëÇ-ë (pid: 9163 comm: syz.6.1878) [ 233.313761][ T26] audit: type=1800 audit(1732107674.853:51): pid=9163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1878" name=20019C1437B3CFFCC3A25729EBC72DEB dev="mqueue" ino=49172 res=0 errno=0 [ 233.819692][ T9184] loop5: detected capacity change from 0 to 256 [ 233.937381][ T9179] loop1: detected capacity change from 0 to 4096 [ 233.962610][ T9179] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 234.103954][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1889'. [ 234.710822][ T9238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.718225][ T9238] IPv6: NLM_F_CREATE should be set when creating new route [ 234.768187][ T9229] loop2: detected capacity change from 0 to 4096 [ 234.778133][ T9229] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 235.325129][ T9269] netlink: 'syz.0.1908': attribute type 3 has an invalid length. [ 235.334396][ T9271] netlink: 'syz.2.1907': attribute type 10 has an invalid length. [ 235.380344][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1908'. [ 235.432102][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.475726][ T9271] bond0: (slave team0): Enslaving as an active interface with an up link [ 235.824700][ T9298] loop2: detected capacity change from 0 to 128 [ 235.897551][ T4788] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.961575][ T9305] loop5: detected capacity change from 0 to 512 [ 236.080544][ T9305] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 236.101797][ T9305] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.149062][ T9305] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 236.231694][ T9319] loop1: detected capacity change from 0 to 1024 [ 236.251776][ T6244] EXT4-fs (loop5): unmounting filesystem. [ 236.346127][ T9041] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 236.875986][ T4572] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 237.066279][ T4572] usb 2-1: Using ep0 maxpacket: 16 [ 237.077958][ T4572] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=36.00 [ 237.120324][ T4572] usb 2-1: New USB device strings: Mfr=168, Product=81, SerialNumber=40 [ 237.146123][ T4572] usb 2-1: Product: syz [ 237.174574][ T4572] usb 2-1: Manufacturer: syz [ 237.206419][ T4572] usb 2-1: SerialNumber: syz [ 237.251739][ T4572] usb 2-1: config 0 descriptor?? [ 237.284257][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1940'. [ 237.287413][ T4572] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 237.348863][ T4572] usb 2-1: Detected FT4232HA [ 237.486626][ T4572] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 237.506451][ T4572] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 237.515560][ T4572] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 237.564856][ T4572] usb 2-1: USB disconnect, device number 7 [ 237.587246][ T4572] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 237.618585][ T9414] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1947'. [ 237.649626][ T4572] ftdi_sio 2-1:0.0: device disconnected [ 238.523052][ T9476] loop1: detected capacity change from 0 to 64 [ 238.607234][ T22] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 238.816002][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 238.823140][ T22] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 238.856050][ T22] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 238.906431][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.930217][ T22] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 238.946253][ T22] usb 1-1: config 1 has no interface number 0 [ 238.957131][ T22] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 238.987064][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.018663][ T9497] loop1: detected capacity change from 0 to 4096 [ 239.059977][ T22] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 239.152939][ T9509] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.186733][ T9497] syz.1.1966: attempt to access beyond end of device [ 239.186733][ T9497] loop1: rw=524288, sector=2097320, nr_sectors = 8 limit=4096 [ 239.227514][ T9497] syz.1.1966: attempt to access beyond end of device [ 239.227514][ T9497] loop1: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 239.250877][ T26] audit: type=1800 audit(1732107680.793:52): pid=9497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1966" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 239.272382][ T22] snd_usb_pod 1-1:1.1: set_interface failed [ 239.284544][ T22] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 239.311206][ T22] snd_usb_pod: probe of 1-1:1.1 failed with error -71 [ 239.345633][ T22] usb 1-1: USB disconnect, device number 6 [ 239.948814][ T9510] orangefs_mount: mount request failed with -4 [ 240.311550][ T9538] loop5: detected capacity change from 0 to 32768 [ 240.362201][ T9538] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1976 (9538) [ 240.475990][ T9538] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.516040][ T9538] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 240.524759][ T9538] BTRFS info (device loop5): using free space tree [ 240.673012][ T9543] loop1: detected capacity change from 0 to 32768 [ 240.686125][ T9543] (syz.1.1979,9543,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 240.791304][ T9543] (syz.1.1979,9543,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 240.838867][ T9538] BTRFS info (device loop5): enabling ssd optimizations [ 240.905039][ T9543] JBD2: Ignoring recovery information on journal [ 240.923534][ T6244] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.223484][ T9543] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 241.414706][ T9543] [ 241.417097][ T9543] ====================================================== [ 241.424134][ T9543] WARNING: possible circular locking dependency detected [ 241.431173][ T9543] 6.1.118-syzkaller #0 Not tainted [ 241.436302][ T9543] ------------------------------------------------------ [ 241.443383][ T9543] syz.1.1979/9543 is trying to acquire lock: [ 241.449388][ T9543] ffff888050ca89c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 241.462983][ T9543] [ 241.462983][ T9543] but task is already holding lock: [ 241.470457][ T9543] ffff8880674b3ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 241.479998][ T9543] [ 241.479998][ T9543] which lock already depends on the new lock. [ 241.479998][ T9543] [ 241.490418][ T9543] [ 241.490418][ T9543] the existing dependency chain (in reverse order) is: [ 241.499447][ T9543] [ 241.499447][ T9543] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 241.507298][ T9543] lock_acquire+0x1f8/0x5a0 [ 241.512390][ T9543] down_read+0xad/0xa30 [ 241.517080][ T9543] ocfs2_init_acl+0x398/0x930 [ 241.522312][ T9543] ocfs2_mknod+0x1f75/0x2e20 [ 241.527454][ T9543] vfs_mknod+0x444/0x4d0 [ 241.532368][ T9543] do_mknodat+0x3f8/0x5a0 [ 241.537258][ T9543] __x64_sys_mknodat+0xa5/0xc0 [ 241.542562][ T9543] do_syscall_64+0x3b/0xb0 [ 241.547518][ T9543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.554010][ T9543] [ 241.554010][ T9543] -> #4 (jbd2_handle){++++}-{0:0}: [ 241.561369][ T9543] lock_acquire+0x1f8/0x5a0 [ 241.566419][ T9543] start_this_handle+0x1f71/0x21b0 [ 241.572065][ T9543] jbd2__journal_start+0x2d1/0x5c0 [ 241.577792][ T9543] jbd2_journal_start+0x25/0x30 [ 241.583190][ T9543] ocfs2_start_trans+0x3c0/0x6f0 [ 241.588671][ T9543] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 241.594938][ T9543] ocfs2_dismount_volume+0x1fb/0x960 [ 241.600770][ T9543] generic_shutdown_super+0x130/0x340 [ 241.606674][ T9543] kill_block_super+0x7a/0xe0 [ 241.611983][ T9543] deactivate_locked_super+0xa0/0x110 [ 241.618068][ T9543] cleanup_mnt+0x490/0x520 [ 241.623032][ T9543] task_work_run+0x246/0x300 [ 241.628170][ T9543] exit_to_user_mode_loop+0xde/0x100 [ 241.634353][ T9543] exit_to_user_mode_prepare+0xb1/0x140 [ 241.640435][ T9543] syscall_exit_to_user_mode+0x60/0x270 [ 241.646521][ T9543] do_syscall_64+0x47/0xb0 [ 241.651467][ T9543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.657899][ T9543] [ 241.657899][ T9543] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 241.666426][ T9543] lock_acquire+0x1f8/0x5a0 [ 241.671488][ T9543] down_read+0xad/0xa30 [ 241.676291][ T9543] ocfs2_start_trans+0x3b5/0x6f0 [ 241.681788][ T9543] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 241.688041][ T9543] ocfs2_dismount_volume+0x1fb/0x960 [ 241.693888][ T9543] generic_shutdown_super+0x130/0x340 [ 241.699801][ T9543] kill_block_super+0x7a/0xe0 [ 241.705006][ T9543] deactivate_locked_super+0xa0/0x110 [ 241.710903][ T9543] cleanup_mnt+0x490/0x520 [ 241.715850][ T9543] task_work_run+0x246/0x300 [ 241.720972][ T9543] exit_to_user_mode_loop+0xde/0x100 [ 241.726793][ T9543] exit_to_user_mode_prepare+0xb1/0x140 [ 241.732859][ T9543] syscall_exit_to_user_mode+0x60/0x270 [ 241.738930][ T9543] do_syscall_64+0x47/0xb0 [ 241.743868][ T9543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.750291][ T9543] [ 241.750291][ T9543] -> #2 (sb_internal#5){.+.+}-{0:0}: [ 241.757864][ T9543] lock_acquire+0x1f8/0x5a0 [ 241.762900][ T9543] ocfs2_start_trans+0x2b0/0x6f0 [ 241.768370][ T9543] ocfs2_mknod+0x1638/0x2e20 [ 241.773485][ T9543] ocfs2_create+0x1c0/0x4e0 [ 241.778509][ T9543] path_openat+0x12f1/0x2e60 [ 241.783636][ T9543] do_filp_open+0x230/0x480 [ 241.788667][ T9543] do_sys_openat2+0x13b/0x4f0 [ 241.793875][ T9543] __x64_sys_openat+0x243/0x290 [ 241.799259][ T9543] do_syscall_64+0x3b/0xb0 [ 241.804199][ T9543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.811230][ T9543] [ 241.811230][ T9543] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 241.821752][ T9543] lock_acquire+0x1f8/0x5a0 [ 241.826791][ T9543] down_write+0x36/0x60 [ 241.831493][ T9543] ocfs2_reserve_local_alloc_bits+0x127/0x29d0 [ 241.838181][ T9543] ocfs2_reserve_clusters_with_limit+0x1b4/0xb50 [ 241.845058][ T9543] ocfs2_mknod+0x15b5/0x2e20 [ 241.850172][ T9543] ocfs2_create+0x1c0/0x4e0 [ 241.855197][ T9543] path_openat+0x12f1/0x2e60 [ 241.860315][ T9543] do_filp_open+0x230/0x480 [ 241.865343][ T9543] do_sys_openat2+0x13b/0x4f0 [ 241.870645][ T9543] __x64_sys_openat+0x243/0x290 [ 241.876027][ T9543] do_syscall_64+0x3b/0xb0 [ 241.880975][ T9543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 241.887403][ T9543] [ 241.887403][ T9543] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 241.897928][ T9543] validate_chain+0x1661/0x5950 [ 241.903300][ T9543] __lock_acquire+0x125b/0x1f80 [ 241.908682][ T9543] lock_acquire+0x1f8/0x5a0 [ 241.913716][ T9543] down_write+0x36/0x60 [ 241.918396][ T9543] ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 241.924819][ T9543] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 241.931689][ T9543] ocfs2_init_xattr_set_ctxt+0x3ab/0x950 [ 241.937859][ T9543] ocfs2_xattr_set+0xf46/0x1930 [ 241.943239][ T9543] ocfs2_set_acl+0x4cb/0x570 [ 241.948365][ T9543] ocfs2_iop_set_acl+0x252/0x3c0 [ 241.953836][ T9543] posix_acl_xattr_set+0x37b/0x3e0 [ 241.959472][ T9543] __vfs_setxattr+0x3e7/0x420 [ 241.964672][ T9543] __vfs_setxattr_noperm+0x12a/0x5e0 [ 241.970479][ T9543] vfs_setxattr+0x21d/0x420 [ 241.975501][ T9543] setxattr+0x250/0x2b0 [ 241.980177][ T9543] path_setxattr+0x1bc/0x2a0 [ 241.985290][ T9543] __x64_sys_setxattr+0xb7/0xd0 [ 241.990661][ T9543] do_syscall_64+0x3b/0xb0 [ 241.995600][ T9543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.002024][ T9543] [ 242.002024][ T9543] other info that might help us debug this: [ 242.002024][ T9543] [ 242.012249][ T9543] Chain exists of: [ 242.012249][ T9543] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 242.012249][ T9543] [ 242.028001][ T9543] Possible unsafe locking scenario: [ 242.028001][ T9543] [ 242.035447][ T9543] CPU0 CPU1 [ 242.040829][ T9543] ---- ---- [ 242.046188][ T9543] lock(&oi->ip_xattr_sem); [ 242.050806][ T9543] lock(jbd2_handle); [ 242.057397][ T9543] lock(&oi->ip_xattr_sem); [ 242.064526][ T9543] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 242.071820][ T9543] [ 242.071820][ T9543] *** DEADLOCK *** [ 242.071820][ T9543] [ 242.079958][ T9543] 3 locks held by syz.1.1979/9543: [ 242.085065][ T9543] #0: ffff888075844460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 242.094312][ T9543] #1: ffff8880674b42c8 (&type->i_mutex_dir_key#28){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420 [ 242.104593][ T9543] #2: ffff8880674b3ff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930 [ 242.114522][ T9543] [ 242.114522][ T9543] stack backtrace: [ 242.120418][ T9543] CPU: 0 PID: 9543 Comm: syz.1.1979 Not tainted 6.1.118-syzkaller #0 [ 242.128526][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 242.138588][ T9543] Call Trace: [ 242.141871][ T9543] [ 242.144803][ T9543] dump_stack_lvl+0x1e3/0x2cb [ 242.149505][ T9543] ? nf_tcp_handle_invalid+0x642/0x642 [ 242.154971][ T9543] ? print_circular_bug+0x12b/0x1a0 [ 242.160189][ T9543] check_noncircular+0x2fa/0x3b0 [ 242.165143][ T9543] ? add_chain_block+0x850/0x850 [ 242.170084][ T9543] ? lockdep_lock+0x11f/0x2a0 [ 242.174775][ T9543] ? unwind_get_return_address+0x49/0x80 [ 242.180518][ T9543] ? mark_lock+0x9a/0x340 [ 242.184881][ T9543] ? _find_first_zero_bit+0xd0/0x100 [ 242.190212][ T9543] validate_chain+0x1661/0x5950 [ 242.195099][ T9543] ? reacquire_held_locks+0x660/0x660 [ 242.200681][ T9543] ? ocfs2_get_system_file_inode+0x1e0/0x7b0 [ 242.206691][ T9543] ? look_up_lock_class+0x77/0x140 [ 242.211815][ T9543] ? register_lock_class+0x100/0x990 [ 242.217117][ T9543] ? is_dynamic_key+0x260/0x260 [ 242.222007][ T9543] ? mark_lock+0x9a/0x340 [ 242.226378][ T9543] __lock_acquire+0x125b/0x1f80 [ 242.231268][ T9543] lock_acquire+0x1f8/0x5a0 [ 242.235798][ T9543] ? ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 242.241889][ T9543] ? read_lock_is_recursive+0x10/0x10 [ 242.247284][ T9543] ? __might_sleep+0xb0/0xb0 [ 242.251886][ T9543] ? __lock_acquire+0x125b/0x1f80 [ 242.256930][ T9543] down_write+0x36/0x60 [ 242.261096][ T9543] ? ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 242.267204][ T9543] ocfs2_reserve_suballoc_bits+0x182/0x5190 [ 242.273216][ T9543] ? mark_lock+0x9a/0x340 [ 242.277580][ T9543] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 242.283579][ T9543] ? do_raw_spin_unlock+0x137/0x8a0 [ 242.288787][ T9543] ? ocfs2_block_group_search+0x530/0x530 [ 242.294531][ T9543] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 242.300536][ T9543] ? _raw_spin_unlock+0x40/0x40 [ 242.305396][ T9543] ? stack_trace_save+0x113/0x1c0 [ 242.310432][ T9543] ? stack_trace_snprint+0xe0/0xe0 [ 242.315558][ T9543] ? __stack_depot_save+0x3f5/0x470 [ 242.320766][ T9543] ? kasan_set_track+0x60/0x70 [ 242.325540][ T9543] ? kasan_set_track+0x4b/0x70 [ 242.330326][ T9543] ? __kasan_kmalloc+0x97/0xb0 [ 242.335110][ T9543] ? ocfs2_reserve_new_metadata_blocks+0x113/0x9b0 [ 242.341622][ T9543] ? ocfs2_init_xattr_set_ctxt+0x3ab/0x950 [ 242.347436][ T9543] ? ocfs2_xattr_set+0xf46/0x1930 [ 242.352472][ T9543] ? ocfs2_set_acl+0x4cb/0x570 [ 242.357241][ T9543] ? ocfs2_iop_set_acl+0x252/0x3c0 [ 242.362354][ T9543] ? posix_acl_xattr_set+0x37b/0x3e0 [ 242.367644][ T9543] ? __vfs_setxattr+0x3e7/0x420 [ 242.372494][ T9543] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 242.377954][ T9543] ? vfs_setxattr+0x21d/0x420 [ 242.382631][ T9543] ? setxattr+0x250/0x2b0 [ 242.387054][ T9543] ? path_setxattr+0x1bc/0x2a0 [ 242.391819][ T9543] ? __x64_sys_setxattr+0xb7/0xd0 [ 242.396844][ T9543] ? do_syscall_64+0x3b/0xb0 [ 242.401520][ T9543] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.407621][ T9543] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 242.413962][ T9543] ? ocfs2_init_steal_slots+0x150/0x150 [ 242.419516][ T9543] ? ocfs2_xattr_block_set+0x3620/0x3620 [ 242.425170][ T9543] ? ocfs2_xattr_set+0xef8/0x1930 [ 242.430199][ T9543] ocfs2_init_xattr_set_ctxt+0x3ab/0x950 [ 242.435843][ T9543] ? ocfs2_prepare_refcount_xattr+0x1220/0x1220 [ 242.442086][ T9543] ? up_write+0x19d/0x580 [ 242.446425][ T9543] ? ocfs2_remove_btree_range+0x18a0/0x18a0 [ 242.452353][ T9543] ? __up_read+0x690/0x690 [ 242.456809][ T9543] ocfs2_xattr_set+0xf46/0x1930 [ 242.461664][ T9543] ? print_irqtrace_events+0x210/0x210 [ 242.467193][ T9543] ? __ocfs2_xattr_set_handle+0x1060/0x1060 [ 242.473098][ T9543] ? stack_trace_snprint+0xe0/0xe0 [ 242.478241][ T9543] ? __lock_acquire+0x125b/0x1f80 [ 242.483394][ T9543] ? kasan_set_track+0x60/0x70 [ 242.488190][ T9543] ? ocfs2_iop_set_acl+0x252/0x3c0 [ 242.493339][ T9543] ? posix_acl_xattr_set+0x37b/0x3e0 [ 242.498633][ T9543] ? __vfs_setxattr+0x3e7/0x420 [ 242.503488][ T9543] ? __vfs_setxattr_noperm+0x12a/0x5e0 [ 242.508953][ T9543] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.515052][ T9543] ? ocfs2_set_acl+0x11b/0x570 [ 242.519838][ T9543] ? ocfs2_set_acl+0x11b/0x570 [ 242.524606][ T9543] ? __kmalloc+0xe2/0x230 [ 242.528940][ T9543] ocfs2_set_acl+0x4cb/0x570 [ 242.533540][ T9543] ocfs2_iop_set_acl+0x252/0x3c0 [ 242.538496][ T9543] ? ocfs2_xattr_get+0x2b0/0x2b0 [ 242.543441][ T9543] ? vfs_set_acl_prepare+0xe3/0x720 [ 242.548666][ T9543] ? rcu_is_watching+0x11/0xb0 [ 242.553453][ T9543] ? posix_acl_valid+0x329/0x3b0 [ 242.558399][ T9543] posix_acl_xattr_set+0x37b/0x3e0 [ 242.563523][ T9543] ? posix_acl_xattr_get+0x560/0x560 [ 242.568834][ T9543] __vfs_setxattr+0x3e7/0x420 [ 242.573518][ T9543] __vfs_setxattr_noperm+0x12a/0x5e0 [ 242.578833][ T9543] vfs_setxattr+0x21d/0x420 [ 242.583343][ T9543] ? __lock_acquire+0x1f80/0x1f80 [ 242.588385][ T9543] ? xattr_permission+0x4f0/0x4f0 [ 242.593412][ T9543] ? __might_fault+0xbd/0x110 [ 242.598096][ T9543] ? _copy_from_user+0x109/0x170 [ 242.603061][ T9543] ? setxattr+0x1b3/0x2b0 [ 242.607396][ T9543] setxattr+0x250/0x2b0 [ 242.611556][ T9543] ? path_setxattr+0x2a0/0x2a0 [ 242.616339][ T9543] ? __mnt_want_write+0x222/0x2a0 [ 242.621374][ T9543] path_setxattr+0x1bc/0x2a0 [ 242.625975][ T9543] ? simple_xattr_list_add+0xf0/0xf0 [ 242.631266][ T9543] ? syscall_enter_from_user_mode+0x2e/0x230 [ 242.637273][ T9543] __x64_sys_setxattr+0xb7/0xd0 [ 242.642139][ T9543] do_syscall_64+0x3b/0xb0 [ 242.646560][ T9543] ? clear_bhb_loop+0x45/0xa0 [ 242.651244][ T9543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 242.657150][ T9543] RIP: 0033:0x7f65a097e819 [ 242.661578][ T9543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.681191][ T9543] RSP: 002b:00007f65a17e4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 242.689619][ T9543] RAX: ffffffffffffffda RBX: 00007f65a0b35fa0 RCX: 00007f65a097e819 [ 242.697599][ T9543] RDX: 0000000020000c40 RSI: 0000000020000080 RDI: 00000000200000c0 [ 242.705571][ T9543] RBP: 00007f65a09f175e R08: 0000000000000000 R09: 0000000000000000 [ 242.713548][ T9543] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 242.721524][ T9543] R13: 0000000000000000 R14: 00007f65a0b35fa0 R15: 00007ffed02a6eb8 [ 242.729510][ T9543] [ 242.734397][ T4977] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 242.878435][ T4249] ocfs2: Unmounting device (7,1) on (node local) [ 242.887250][ T9599] loop2: detected capacity change from 0 to 32768 [ 242.945960][ T4977] usb 1-1: Using ep0 maxpacket: 8 [ 242.952914][ T4977] usb 1-1: unable to get BOS descriptor set [ 242.976670][ T4977] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 242.984905][ T4977] usb 1-1: config 0 has no interface number 0 [ 242.991855][ T4977] usb 1-1: config 0 interface 125 has no altsetting 0 [ 243.009092][ T4977] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 243.031130][ T4977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.056506][ T4977] usb 1-1: Product: syz [ 243.060718][ T4977] usb 1-1: Manufacturer: syz [ 243.065339][ T4977] usb 1-1: SerialNumber: syz [ 243.082297][ T4977] usb 1-1: config 0 descriptor?? [ 243.088816][ T4977] hub 1-1:0.125: bad descriptor, ignoring hub [ 243.095606][ T4977] hub: probe of 1-1:0.125 failed with error -5 [ 243.103486][ T4977] usb 1-1: Found UVC 0.00 device syz (17dc:0202) [ 243.111098][ T4977] usb 1-1: No valid video chain found. [ 243.261908][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.310580][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.359265][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.406882][ T5559] usb 1-1: USB disconnect, device number 7 [ 243.422412][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.265309][ T56] device hsr_slave_0 left promiscuous mode [ 244.273460][ T56] device hsr_slave_1 left promiscuous mode [ 244.280816][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.290033][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.300713][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.308386][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.318404][ T56] device bridge_slave_1 left promiscuous mode [ 244.324630][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.333348][ T56] device bridge_slave_0 left promiscuous mode [ 244.340461][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.351729][ T56] device veth0_macvtap left promiscuous mode [ 244.358481][ T56] device veth1_vlan left promiscuous mode [ 244.364256][ T56] device veth0_vlan left promiscuous mode [ 244.619393][ T56] team0 (unregistering): Port device team_slave_1 removed [ 244.653845][ T56] team0 (unregistering): Port device team_slave_0 removed [ 244.690389][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.724930][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.790314][ T56] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 244.964657][ T56] bond0 (unregistering): (slave team0): Releasing backup interface [ 244.993963][ T56] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 245.002883][ T56] bond0 (unregistering): Released all slaves [ 248.991416][ T3621] udevd[3621]: worker [4790] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time