last executing test programs: 1.999943329s ago: executing program 2 (id=11260): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003d68c5ee17688a2003208c8bb00fc5ad9485bbb6a880000d6c8db635c0000949fd4c1ba6a5af741c22a67747da3db4f5d398737cb87182c77e52300dba67e060180000a00e5438e55bdff59100ac45761407a68c5093c58503dbb87a4060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba21123266909b05aa16d73da501ecefd74c24382add5e", 0xb8) 1.897553622s ago: executing program 2 (id=11261): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x2c, 0xa, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4c040) 1.814996604s ago: executing program 1 (id=11262): ioperm(0x8, 0x3, 0x163b) fdatasync(0xffffffffffffffff) 1.760476665s ago: executing program 1 (id=11263): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0xe, 0x9, 0x1, "6022f57f75157653c3099800f2001000", 0x39565559}) 1.663759567s ago: executing program 2 (id=11264): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000000140)=""/58, 0x3a, &(0x7f0000000100)={&(0x7f0000000080)={'sha1-ssse3\x00'}}) 1.485997492s ago: executing program 1 (id=11266): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8901, 0x637cd53f865a9fd7) 1.421253434s ago: executing program 2 (id=11268): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 1.333317166s ago: executing program 1 (id=11269): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 1.319481436s ago: executing program 3 (id=11270): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x4c}}, 0x0) 1.279755127s ago: executing program 2 (id=11271): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000100)) 1.077556353s ago: executing program 3 (id=11272): r0 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000006d0001000000000000000000100000000c0090000000000000f6ff000c003600"], 0x2c}], 0x1}, 0x0) 971.331445ms ago: executing program 3 (id=11274): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@shortad}, {@nostrict}, {@umask={'umask', 0x3d, 0xffff}}, {@dmode={'dmode', 0x3d, 0x3e9}}, {@volume={'volume', 0x3d, 0x3ff}}, {@noadinicb}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]}, 0x1, 0xc32, &(0x7f0000009100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 958.021705ms ago: executing program 2 (id=11282): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)={[{@acl}, {@heartbeat_none}, {@err_cont}, {@coherency_full}, {@resv_level}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4428, &(0x7f000000c300)="$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") syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 669.578532ms ago: executing program 0 (id=11276): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, &(0x7f0000000100)) 635.198733ms ago: executing program 3 (id=11277): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0xfffffffffffffd17, 0x5efe, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c) 481.616108ms ago: executing program 0 (id=11278): mkdir(&(0x7f0000000240)='./file0\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='127.0.0.1:/\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='nfs\x00', 0x0, &(0x7f0000000340)='addr=127.0.0.1\x00') 467.294188ms ago: executing program 3 (id=11279): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_tables_names\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1, 0x9, 0x0) 389.47524ms ago: executing program 1 (id=11280): r0 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x8, 0x9, 0x6, 0x6, 0x7}) 225.619894ms ago: executing program 0 (id=11281): r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0xa02) ioctl$OTPLOCK(r0, 0x800c4d10, 0x0) 194.584355ms ago: executing program 0 (id=11283): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x50, "5c83276f6c02000000000000000000010000000000335b021f55001d00a2b0e824d1e5afb5042f253784a47879"}}) 193.050364ms ago: executing program 3 (id=11284): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0016f1420953a269239896e2a5811d5a9bfc172a6e6e85e9744b54ba31f8f27b729cb42bf8a85050841ea061405816cf21e3473e18012ee2bcd316d40d1772fe0585f1c138e576585dd91cdc105fb11e8d037ca88b6bffc13d5cfe123df28fb4d3b5b66d1543001b7100f5b2ac49dc94eb8dadb1b4d3ad660a4fee6a0d0ba720"], 0x1, 0x48b, &(0x7f0000001b00)="$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") openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511001, 0x498) 93.562177ms ago: executing program 0 (id=11285): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000600)={0x0, @win={{0xbba, 0xf, 0x7, 0x4}, 0x0, 0x3ff, 0x0, 0xdd, 0x0, 0x6}}) 80.807658ms ago: executing program 0 (id=11286): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) 0s ago: executing program 1 (id=11287): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000001600)={0x20, 0x2, 0x0, 0xbc9, 0xff}) kernel console output (not intermixed with test programs): SerialNumber=0 [ 1029.987375][ T56] usb 3-1: config 0 descriptor?? [ 1030.185868][T26867] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9688'. [ 1030.196078][T26867] openvswitch: netlink: Key type 29 is not supported [ 1030.219100][T16611] usb 3-1: USB disconnect, device number 56 [ 1030.307339][T26870] loop1: detected capacity change from 0 to 256 [ 1030.538193][ T8] usb 4-1: USB disconnect, device number 53 [ 1030.964963][ T5844] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1030.987784][ T5844] ath9k_htc: Failed to initialize the device [ 1031.009340][ T8] usb 4-1: ath9k_htc: USB layer deinitialized [ 1031.839405][T26926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9717'. [ 1031.852485][T26922] loop2: detected capacity change from 0 to 4096 [ 1031.922406][T26922] __ntfs_error: 9 callbacks suppressed [ 1031.922423][T26922] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1031.986392][T26922] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1032.006910][T26922] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1032.018765][T26922] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1032.039984][T26922] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1032.074007][T26922] ntfs: volume version 3.1. [ 1032.084028][T26922] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1032.134401][T26922] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1032.178058][T26922] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1032.212927][T26922] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1032.242705][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9722'. [ 1032.244159][T26922] ntfs: (device loop2): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1032.369431][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1730.tmp-b7:1' failed: Read-only file system [ 1032.452745][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1724.tmp-b7:0' failed: Read-only file system [ 1032.545124][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1730.tmp-b7:1' failed: Read-only file system [ 1032.575034][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1731.tmp-b7:2' failed: Read-only file system [ 1032.588785][T26947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9726'. [ 1032.613491][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1032.651768][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-uuid/43CF732B47819AF7.tmp-b7:2' failed: Read-only file system [ 1032.734826][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1731.tmp-b7:2' failed: Read-only file system [ 1032.791337][T26954] delete_channel: no stack [ 1032.801069][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1731.tmp-b7:2' failed: Read-only file system [ 1032.842977][ T5894] udevd[5894]: symlink '../../loop1' '/dev/disk/by-diskseq/1730.tmp-b7:1' failed: Read-only file system [ 1032.849980][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1732.tmp-b7:2' failed: Read-only file system [ 1034.159661][T27017] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9758'. [ 1034.303503][T27024] loop2: detected capacity change from 0 to 128 [ 1034.342068][T27024] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1034.378036][T27024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1034.662821][T27036] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1035.093905][T27053] sit0: entered promiscuous mode [ 1035.115624][T27053] netlink: 'syz.1.9775': attribute type 1 has an invalid length. [ 1035.703297][T27046] loop0: detected capacity change from 0 to 32768 [ 1035.770453][T27075] netlink: 'syz.2.9786': attribute type 10 has an invalid length. [ 1035.804817][T27075] hsr0: entered promiscuous mode [ 1035.839285][T27075] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1035.855017][T27077] loop1: detected capacity change from 0 to 1024 [ 1035.866655][T27075] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1035.904502][T27075] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1035.953378][T27077] hfsplus: invalid file type 0177755 for inode 17 [ 1035.966603][T27075] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1035.986723][T27079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9789'. [ 1036.705951][T27105] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9802'. [ 1036.794393][T27109] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9804'. [ 1036.821695][T27109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9804'. [ 1037.058571][T27121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1037.070610][T27121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9810'. [ 1037.178879][T27126] binder: 27124:27126 ioctl c018620c 200000000100 returned -22 [ 1037.752915][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1737.tmp-b7:1' failed: Read-only file system [ 1037.825081][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1738.tmp-b7:0' failed: Read-only file system [ 1037.996573][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1738.tmp-b7:0' failed: Read-only file system [ 1038.023014][T27151] loop1: detected capacity change from 0 to 4096 [ 1038.114084][T27151] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1038.189422][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1734.tmp-b7:2' failed: Read-only file system [ 1038.195067][T27151] ntfs3: loop1: ino=5, "/" directory corrupted [ 1038.257754][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1738.tmp-b7:0' failed: Read-only file system [ 1038.381384][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1734.tmp-b7:2' failed: Read-only file system [ 1038.397554][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1739.tmp-b7:1' failed: Read-only file system [ 1038.457560][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1038.485461][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-uuid/399AA58E54924951.tmp-b7:1' failed: Read-only file system [ 1038.503543][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1038.503556][ T28] audit: type=1107 audit(1025.389:157): pid=27168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1038.538505][ T9605] udevd[9605]: symlink '../../loop0' '/dev/disk/by-diskseq/1738.tmp-b7:0' failed: Read-only file system [ 1038.629604][ C1] vkms_vblank_simulate: vblank timer overrun [ 1038.804137][T27177] netlink: 'syz.3.9838': attribute type 3 has an invalid length. [ 1038.830341][T27177] netlink: 'syz.3.9838': attribute type 2 has an invalid length. [ 1038.838295][ T56] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1039.040322][ T56] usb 3-1: Using ep0 maxpacket: 16 [ 1039.047718][ T56] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1039.056638][ T56] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1039.073226][ T56] usb 3-1: config 1 has no interface number 1 [ 1039.090318][ T56] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1039.114405][ T56] usb 3-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1039.135205][T27189] CacheFiles: No cache directory specified [ 1039.163367][ T56] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1039.182239][ T56] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1039.191988][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.219962][ T56] usb 3-1: Product: syz [ 1039.226561][ T56] usb 3-1: Manufacturer: syz [ 1039.240059][ T56] usb 3-1: SerialNumber: syz [ 1039.257053][T27167] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1039.285776][ T5842] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1039.483070][ T5842] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1039.500957][ T56] aqc111: probe of 3-1:1.105 failed with error -22 [ 1039.510333][ T5842] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1039.540236][ T5842] usb 1-1: Product: syz [ 1039.546225][ T5842] usb 1-1: Manufacturer: syz [ 1039.550889][ T5842] usb 1-1: SerialNumber: syz [ 1039.566238][ T5842] usb 1-1: config 0 descriptor?? [ 1039.653535][T27203] kernel profiling enabled (shift: 5) [ 1039.720566][ T56] usb 3-1: USB disconnect, device number 57 [ 1039.799266][ T5842] peak_usb 1-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 1040.024636][ T5842] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1040.044480][ T5842] peak_usb 1-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 1040.121702][ T5842] peak_usb: probe of 1-1:0.0 failed with error -71 [ 1040.145195][ T5842] usb 1-1: USB disconnect, device number 55 [ 1040.370449][T27207] loop1: detected capacity change from 0 to 32768 [ 1040.715099][T27225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9870'. [ 1041.465706][ T8] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1041.679162][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 1041.688971][ T8] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1041.708993][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.724695][ T8] usb 1-1: Product: syz [ 1041.732833][ T8] usb 1-1: Manufacturer: syz [ 1041.737466][ T8] usb 1-1: SerialNumber: syz [ 1041.754953][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 1041.905547][T27252] loop1: detected capacity change from 0 to 32768 [ 1041.978417][T27252] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1042.196571][T27252] XFS (loop1): Ending clean mount [ 1042.232280][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1042.243072][T27252] XFS (loop1): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 1042.277848][ T8] r8152-cfgselector 1-1: USB disconnect, device number 56 [ 1042.378593][ T5778] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1043.106520][T27299] loop2: detected capacity change from 0 to 256 [ 1043.148823][ T5894] udevd[5894]: symlink '../../loop1' '/dev/disk/by-diskseq/1744.tmp-b7:1' failed: Read-only file system [ 1043.158904][T27299] exfat: Deprecated parameter 'utf8' [ 1043.187997][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1738.tmp-b7:0' failed: Read-only file system [ 1043.191022][T27299] exfat: Deprecated parameter 'utf8' [ 1043.225516][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1745.tmp-b7:2' failed: Read-only file system [ 1043.261176][T27299] exFAT-fs (loop2): failed to read boot sector [ 1043.267436][T27299] exFAT-fs (loop2): failed to recognize exfat type [ 1043.324009][ T5890] udevd[5890]: symlink '../../loop1' '/dev/disk/by-diskseq/1744.tmp-b7:1' failed: Read-only file system [ 1043.346896][ T5894] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1043.382885][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1738.tmp-b7:0' failed: Read-only file system [ 1043.426199][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1745.tmp-b7:2' failed: Read-only file system [ 1043.464327][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1745.tmp-b7:2' failed: Read-only file system [ 1043.488615][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1745.tmp-b7:2' failed: Read-only file system [ 1043.534465][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1738.tmp-b7:0' failed: Read-only file system [ 1043.644090][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1744.tmp-b7:1' failed: Read-only file system [ 1043.793388][T27325] binder: 27324:27325 ioctl c018620b 0 returned -14 [ 1044.769236][ T28] audit: type=1326 audit(1031.256:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27362 comm="syz.1.9926" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1044.832066][ T28] audit: type=1326 audit(1031.256:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27362 comm="syz.1.9926" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1044.882693][T27338] loop0: detected capacity change from 0 to 32768 [ 1044.905214][T27338] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.9914 (27338) [ 1044.928559][ T28] audit: type=1326 audit(1031.256:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27362 comm="syz.1.9926" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1044.976573][T27338] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1045.000049][ T28] audit: type=1326 audit(1031.256:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27362 comm="syz.1.9926" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1045.025264][T27338] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1045.077185][T27338] BTRFS info (device loop0): force zlib compression, level 3 [ 1045.085001][T27338] BTRFS info (device loop0): allowing degraded mounts [ 1045.119458][T27338] BTRFS info (device loop0): setting nodatasum [ 1045.142856][T27338] BTRFS info (device loop0): allowing degraded mounts [ 1045.170569][T27338] BTRFS info (device loop0): using free space tree [ 1045.365848][T27338] BTRFS info (device loop0): auto enabling async discard [ 1045.546162][T27399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9937'. [ 1045.596833][ T5774] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1045.638020][T27401] netlink: 'syz.2.9936': attribute type 2 has an invalid length. [ 1045.675482][T27401] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.9936'. [ 1045.984896][T27408] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1046.104864][T27408] bond1 (unregistering): Released all slaves [ 1046.554322][T27411] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1046.622171][T27411] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1046.650329][T27411] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1046.671705][T27428] netlink: 'syz.0.9955': attribute type 8 has an invalid length. [ 1047.560577][T27433] loop1: detected capacity change from 0 to 32768 [ 1047.581716][T27433] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.9947 (27433) [ 1047.622424][T27433] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1047.646708][T27433] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1047.684559][ T5842] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1047.693264][T27433] BTRFS info (device loop1): force zlib compression, level 3 [ 1047.733631][T27433] BTRFS info (device loop1): allowing degraded mounts [ 1047.752343][T27433] BTRFS info (device loop1): setting nodatasum [ 1047.758589][T27433] BTRFS info (device loop1): allowing degraded mounts [ 1047.808601][T27433] BTRFS info (device loop1): using free space tree [ 1047.888110][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 1047.899673][ T5842] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1047.907988][ T5842] usb 1-1: config 0 has no interface number 0 [ 1047.918824][ T5842] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1047.940819][ T5842] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1047.958398][ T5842] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1047.968032][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1047.989479][ T5842] usb 1-1: Product: syz [ 1047.993780][ T5842] usb 1-1: SerialNumber: syz [ 1048.016768][ T5842] usb 1-1: config 0 descriptor?? [ 1048.039070][ T5842] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 1048.086882][T27433] BTRFS info (device loop1): auto enabling async discard [ 1048.094351][ T5842] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input72 [ 1048.192119][T27493] nvme_fabrics: missing parameter 'transport=%s' [ 1048.219284][T27493] nvme_fabrics: missing parameter 'nqn=%s' [ 1048.258465][ C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1048.312474][ T5778] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1048.432748][T27501] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9967'. [ 1048.484080][ T5842] usb 1-1: USB disconnect, device number 57 [ 1048.537750][ T5842] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1048.617952][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1746.tmp-b7:2' failed: Read-only file system [ 1048.846642][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1746.tmp-b7:2' failed: Read-only file system [ 1048.897858][T27515] loop2: detected capacity change from 0 to 64 [ 1048.969389][T27515] syz.2.9972: attempt to access beyond end of device [ 1048.969389][T27515] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1049.001950][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1751.tmp-b7:2' failed: Read-only file system [ 1049.055967][T27515] buffer_io_error: 45 callbacks suppressed [ 1049.055982][T27515] Buffer I/O error on dev loop2, logical block 512, async page read [ 1049.121664][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1749.tmp-b7:1' failed: Read-only file system [ 1049.127737][T27515] syz.2.9972: attempt to access beyond end of device [ 1049.127737][T27515] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1049.182322][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1751.tmp-b7:2' failed: Read-only file system [ 1049.199708][T27520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9973'. [ 1049.231046][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1749.tmp-b7:1' failed: Read-only file system [ 1049.245425][T27515] Buffer I/O error on dev loop2, logical block 56576, async page read [ 1049.258478][ T6091] udevd[6091]: symlink '../../loop0' '/dev/disk/by-diskseq/1748.tmp-b7:0' failed: Read-only file system [ 1049.311715][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1750.tmp-b7:1' failed: Read-only file system [ 1049.338426][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1750.tmp-b7:1' failed: Read-only file system [ 1049.493257][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1751.tmp-b7:2' failed: Read-only file system [ 1049.971266][ T5814] kworker/dying (5814) used greatest stack depth: 16568 bytes left [ 1050.024584][ T5844] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1050.211057][T27529] loop2: detected capacity change from 0 to 32768 [ 1050.250005][ T5844] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1050.257886][T27529] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.9975 (27529) [ 1050.272050][ T5844] usb 4-1: config 63 has an invalid interface number: 66 but max is 0 [ 1050.297652][ T5844] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.329966][ T5844] usb 4-1: config 63 has no interface number 0 [ 1050.341429][T27529] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1050.351397][ T5844] usb 4-1: config 63 interface 66 has no altsetting 0 [ 1050.377792][T27529] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1050.391805][ T5844] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1050.398161][T27529] BTRFS info (device loop2): force zlib compression, level 3 [ 1050.419622][T27529] BTRFS info (device loop2): allowing degraded mounts [ 1050.428677][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.445895][ T5844] usb 4-1: Product: syz [ 1050.450104][ T5844] usb 4-1: Manufacturer: syz [ 1050.462613][T27529] BTRFS info (device loop2): setting nodatasum [ 1050.468847][T27529] BTRFS info (device loop2): allowing degraded mounts [ 1050.485319][ T5844] usb 4-1: SerialNumber: syz [ 1050.507018][T27529] BTRFS info (device loop2): using free space tree [ 1050.625423][T27529] BTRFS info (device loop2): auto enabling async discard [ 1050.653497][T27569] loop1: detected capacity change from 0 to 2048 [ 1050.724014][ T5844] usb 4-1: Found UVC 0.07 device syz (174f:8acf) [ 1050.751349][ T5844] usb 4-1: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 1050.772836][ T5844] usb 4-1: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 1050.793362][ T5844] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 1050.816253][ T5844] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 1050.826708][ T5783] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1050.848275][ T5844] usb 4-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 1050.864560][T27569] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.882558][ T5844] usb 4-1: No streaming interface found for terminal 29. [ 1050.922874][ T5844] uvcvideo 4-1:63.66: Entity type for entity Output 5 was not initialized! [ 1050.983797][T27569] EXT4-fs error (device loop1): ext4_map_blocks:610: inode #12: block 2: comm syz.1.9985: lblock 0 mapped to illegal pblock 2 (length 1) [ 1051.019930][ T5844] usb 4-1: USB disconnect, device number 54 [ 1051.130562][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.423207][T27588] 9pnet_fd: p9_fd_create_tcp (27588): problem connecting socket to 127.0.0.1 [ 1051.660011][T27598] loop1: detected capacity change from 0 to 256 [ 1051.785970][T27604] netlink: 'syz.3.9992': attribute type 12 has an invalid length. [ 1052.557053][ T5764] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1052.774928][ T5764] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1052.795626][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.813514][ T5764] usb 3-1: Product: syz [ 1052.820568][ T5764] usb 3-1: Manufacturer: syz [ 1052.831993][ T5764] usb 3-1: SerialNumber: syz [ 1052.928090][ T5764] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1053.454244][ T5844] usb 3-1: USB disconnect, device number 58 [ 1053.666290][T27659] loop1: detected capacity change from 0 to 32768 [ 1053.678980][T27659] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.10008 (27659) [ 1053.701877][T27659] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1053.734567][T27659] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1053.746287][T27659] BTRFS info (device loop1): force zlib compression, level 3 [ 1053.800492][T27659] BTRFS info (device loop1): allowing degraded mounts [ 1053.814754][T27659] BTRFS info (device loop1): setting nodatasum [ 1053.840504][T27659] BTRFS info (device loop1): allowing degraded mounts [ 1053.847435][T27659] BTRFS info (device loop1): using free space tree [ 1053.984339][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1748.tmp-b7:0' failed: Read-only file system [ 1053.988890][T27659] BTRFS info (device loop1): auto enabling async discard [ 1054.025431][T27690] netlink: zone id is out of range [ 1054.112145][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1755.tmp-b7:2' failed: Read-only file system [ 1054.129029][ T5764] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1054.136230][ T5764] ath9k_htc: Failed to initialize the device [ 1054.172774][ T5890] udevd[5890]: symlink '../../loop0' '/dev/disk/by-diskseq/1748.tmp-b7:0' failed: Read-only file system [ 1054.213597][ T5844] usb 3-1: ath9k_htc: USB layer deinitialized [ 1054.221400][ T5778] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1054.322706][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1748.tmp-b7:0' failed: Read-only file system [ 1054.380469][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1759.tmp-b7:1' failed: Read-only file system [ 1054.393449][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-uuid/e417788f-7a09-42b2-9266-8ddc5d5d35d2.tmp-b7:1' failed: Read-only file system [ 1054.427744][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1755.tmp-b7:2' failed: Read-only file system [ 1054.529032][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1755.tmp-b7:2' failed: Read-only file system [ 1054.644281][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1748.tmp-b7:0' failed: Read-only file system [ 1054.672048][T27705] delete_channel: no stack [ 1054.847502][ T5890] udevd[5890]: symlink '../../loop0' '/dev/disk/by-diskseq/1748.tmp-b7:0' failed: Read-only file system [ 1054.932053][T27713] loop0: detected capacity change from 0 to 24 [ 1055.261593][T27719] loop0: detected capacity change from 0 to 256 [ 1055.569844][T27702] loop2: detected capacity change from 0 to 32768 [ 1055.603263][T27702] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.10028 (27702) [ 1055.666581][T27702] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1055.689129][T27702] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1055.707881][T27702] BTRFS info (device loop2): force zlib compression, level 3 [ 1055.716934][T27702] BTRFS info (device loop2): allowing degraded mounts [ 1055.724201][T27702] BTRFS info (device loop2): setting nodatasum [ 1055.742816][T27702] BTRFS info (device loop2): allowing degraded mounts [ 1055.749658][T27702] BTRFS info (device loop2): using free space tree [ 1055.857322][T27702] BTRFS info (device loop2): auto enabling async discard [ 1055.883889][T27715] loop1: detected capacity change from 0 to 32768 [ 1055.962943][T27715] JBD2: Ignoring recovery information on journal [ 1056.069113][T27715] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1056.105176][ T5783] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1056.297069][ T8975] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop2 scanned by udevd (8975) [ 1056.321573][T27745] loop0: detected capacity change from 0 to 256 [ 1056.364068][ T5778] ocfs2: Unmounting device (7,1) on (node local) [ 1056.785576][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10038'. [ 1057.289117][T27772] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1057.323644][T27772] overlayfs: missing 'lowerdir' [ 1057.486289][T27776] loop2: detected capacity change from 0 to 64 [ 1057.724436][T27764] loop0: detected capacity change from 0 to 32768 [ 1057.760309][T27764] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1057.829912][T27783] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1057.889433][ T8] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1057.971946][T27791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10054'. [ 1058.055050][ T8975] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9 [ 1058.090447][T27794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10055'. [ 1058.102916][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 1058.133921][ T8] usb 4-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1058.143164][ T8] usb 4-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 1058.168819][ T8] usb 4-1: Product: syz [ 1058.242801][ T8] usb 4-1: config 0 descriptor?? [ 1058.490483][ T8] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input73 [ 1058.707573][ T5842] usb 4-1: USB disconnect, device number 55 [ 1058.820965][T27809] loop2: detected capacity change from 0 to 4096 [ 1058.884684][T27809] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1058.985836][T27815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10065'. [ 1059.005249][T27809] ntfs3: loop2: ino=5, "/" directory corrupted [ 1059.010962][T27815] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10065'. [ 1059.353255][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1775.tmp-b7:2' failed: Read-only file system [ 1059.391745][T27828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10072'. [ 1059.463806][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1775.tmp-b7:2' failed: Read-only file system [ 1059.508924][ T5890] udevd[5890]: symlink '../../loop0' '/dev/disk/by-diskseq/1774.tmp-b7:0' failed: Read-only file system [ 1059.511478][ T6091] udevd[6091]: symlink '../../loop1' '/dev/disk/by-diskseq/1768.tmp-b7:1' failed: Read-only file system [ 1059.578579][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1059.670367][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1774.tmp-b7:0' failed: Read-only file system [ 1059.724552][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1768.tmp-b7:1' failed: Read-only file system [ 1059.740354][T27840] netlink: 'syz.0.10078': attribute type 3 has an invalid length. [ 1059.757143][T27840] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10078'. [ 1059.798983][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1059.915118][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1774.tmp-b7:0' failed: Read-only file system [ 1059.996741][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1768.tmp-b7:1' failed: Read-only file system [ 1060.091365][T27848] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1060.730107][T27874] veth7: entered promiscuous mode [ 1060.818311][T27844] 9pnet_fd: p9_fd_create_tcp (27844): problem connecting socket to 127.0.0.1 [ 1061.346474][T27903] 9pnet_fd: p9_fd_create_tcp (27903): problem connecting socket to 127.0.0.1 [ 1061.522010][T27907] netlink: 'syz.0.10113': attribute type 2 has an invalid length. [ 1061.538361][T27907] netlink: 'syz.0.10113': attribute type 8 has an invalid length. [ 1061.555596][T27907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10113'. [ 1062.047449][T27928] netlink: 'syz.2.10122': attribute type 4 has an invalid length. [ 1062.087121][T27930] 9pnet_fd: p9_fd_create_tcp (27930): problem connecting socket to 127.0.0.1 [ 1062.122339][T27933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10124'. [ 1062.152408][T27933] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10124'. [ 1062.725747][T27959] 9pnet_fd: p9_fd_create_tcp (27959): problem connecting socket to 127.0.0.1 [ 1062.826360][ T56] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 1063.027329][T27971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10141'. [ 1063.041569][ T56] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1063.052046][ T56] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.081938][ T56] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1063.108235][ T56] usb 1-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 1063.146033][ T56] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1063.208205][ T56] usb 1-1: string descriptor 0 read error: -22 [ 1063.218537][ T56] usb 1-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 1063.240659][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.307167][ T56] usb 1-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to g@b4.vu [ 1063.351457][ T56] usb 1-1: Error initialising Clarett USB Mixer Driver: -22 [ 1063.412316][ T56] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1063.509097][ T56] usb 1-1: USB disconnect, device number 58 [ 1063.781904][ T175] IPVS: starting estimator thread 0... [ 1063.904913][T27998] IPVS: using max 21 ests per chain, 50400 per kthread [ 1064.742677][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1064.824153][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1774.tmp-b7:0' failed: Read-only file system [ 1064.912800][ T5894] udevd[5894]: symlink '../../loop1' '/dev/disk/by-diskseq/1768.tmp-b7:1' failed: Read-only file system [ 1064.937767][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1065.048617][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1774.tmp-b7:0' failed: Read-only file system [ 1065.118434][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1768.tmp-b7:1' failed: Read-only file system [ 1065.185013][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1065.226970][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1774.tmp-b7:0' failed: Read-only file system [ 1065.291940][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1768.tmp-b7:1' failed: Read-only file system [ 1065.352684][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1065.604075][ T175] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1065.839035][ T175] usb 1-1: Using ep0 maxpacket: 16 [ 1065.854040][ T175] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1065.870993][ T175] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1065.889184][ T175] usb 1-1: config 0 has no interface number 0 [ 1065.905052][ T175] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1065.931570][ T175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.965130][ T175] usb 1-1: Product: syz [ 1065.974751][ T175] usb 1-1: Manufacturer: syz [ 1065.990199][ T175] usb 1-1: SerialNumber: syz [ 1066.004789][ T175] usb 1-1: config 0 descriptor?? [ 1066.031218][ T175] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 1066.041880][ T175] usb 1-1: No valid video chain found. [ 1066.145159][T28095] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1066.239663][ T175] usb 1-1: USB disconnect, device number 59 [ 1066.951084][T28129] netlink: 'syz.0.10217': attribute type 2 has an invalid length. [ 1067.944113][ T5842] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1068.180765][ T5842] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1068.207425][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.233563][T28187] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1068.245677][ T5842] usb 4-1: config 0 descriptor?? [ 1068.252967][T28189] loop1: detected capacity change from 0 to 256 [ 1068.266949][ T5842] cp210x 4-1:0.0: cp210x converter detected [ 1068.280871][T28189] exfat: Deprecated parameter 'utf8' [ 1068.293137][T28189] exfat: Deprecated parameter 'utf8' [ 1068.305172][T28189] exfat: Deprecated parameter 'namecase' [ 1068.325275][T28189] exfat: Deprecated parameter 'namecase' [ 1068.369081][T28189] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1068.486590][ T5842] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1068.675931][T28199] loop0: detected capacity change from 0 to 8 [ 1068.707246][ T5842] usb 4-1: USB disconnect, device number 56 [ 1068.723452][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1068.750010][T28199] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1068.764144][ T5842] cp210x 4-1:0.0: device disconnected [ 1069.000432][T28209] loop0: detected capacity change from 0 to 512 [ 1069.038228][T28209] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1069.156824][T28209] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.10258: corrupted xattr entries [ 1069.186272][T28209] EXT4-fs (loop0): Remounting filesystem read-only [ 1069.192961][T28209] EXT4-fs (loop0): 1 truncate cleaned up [ 1069.200829][T28209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.218113][T28209] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.369163][T28225] loop1: detected capacity change from 0 to 1024 [ 1069.377716][T28225] EXT4-fs: Ignoring removed bh option [ 1069.426758][T28225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1069.483971][T28225] EXT4-fs error (device loop1): ext4_free_blocks:6694: comm syz.1.10265: Freeing blocks not in datazone - block = 0, count = 16 [ 1069.564992][T28235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10269'. [ 1069.577245][T28225] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.10265: bg 0: block 112: padding at end of block bitmap is not set [ 1069.612490][ T5842] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1069.633927][T28225] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1069.764404][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1069.830721][ T5842] usb 3-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 1069.845849][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.895027][ T5842] usb 3-1: config 0 descriptor?? [ 1069.917683][ T5842] gspca_main: spca505-2.14.0 probing 0733:0430 [ 1070.093770][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1784.tmp-b7:1' failed: Read-only file system [ 1070.213542][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1784.tmp-b7:1' failed: Read-only file system [ 1070.304442][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1784.tmp-b7:1' failed: Read-only file system [ 1070.340894][T28233] loop0: detected capacity change from 0 to 32768 [ 1070.351098][ T5842] gspca_spca505: reg write: error -71 [ 1070.358794][ T5842] spca505: probe of 3-1:0.0 failed with error -5 [ 1070.404872][ T5842] usb 3-1: USB disconnect, device number 59 [ 1070.427464][T28233] JBD2: Ignoring recovery information on journal [ 1070.501068][T28254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1070.513233][T28254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1070.524168][T28254] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10278'. [ 1070.607418][T28233] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1070.619719][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1785.tmp-b7:0' failed: Read-only file system [ 1070.635412][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 1070.674353][T28233] (syz.0.10267,28233,0):ocfs2_find_entry:1075 ERROR: status = -117 [ 1070.700830][ T5894] udevd[5894]: symlink '../../loop1' '/dev/disk/by-diskseq/1784.tmp-b7:1' failed: Read-only file system [ 1070.718695][T28233] (syz.0.10267,28233,1):ocfs2_find_entry:1075 ERROR: status = -117 [ 1070.738281][T28233] (syz.0.10267,28233,1):ocfs2_symlink:2068 ERROR: status = -117 [ 1070.854109][ T5890] udevd[5890]: symlink '../../loop1' '/dev/disk/by-diskseq/1784.tmp-b7:1' failed: Read-only file system [ 1070.858862][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1785.tmp-b7:0' failed: Read-only file system [ 1070.911670][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:0' failed: Read-only file system [ 1070.936523][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 1070.992796][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1785.tmp-b7:0' failed: Read-only file system [ 1071.080612][T28263] loop1: detected capacity change from 0 to 4096 [ 1071.104187][T28266] gtp1: entered promiscuous mode [ 1071.129517][T28263] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1071.136622][T28266] gtp1: entered allmulticast mode [ 1071.153949][T28263] ntfs3: loop1: Failed to load $Extend (-22). [ 1071.185780][T28263] ntfs3: loop1: Failed to initialize $Extend. [ 1071.532665][T28277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10288'. [ 1071.825616][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1072.677395][ T5844] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1072.894554][ T5844] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1072.914013][ T5844] usb 1-1: config index 0 descriptor too short (expected 26766, got 142) [ 1072.922540][ T5844] usb 1-1: config 1 has too many interfaces: 173, using maximum allowed: 32 [ 1072.949283][ T5844] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.990513][ T5844] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 173 [ 1073.023485][ T5844] usb 1-1: string descriptor 0 read error: -22 [ 1073.029810][ T5844] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1073.055142][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.097633][T28342] loop1: detected capacity change from 0 to 512 [ 1073.104276][ T5844] usb 1-1: selecting invalid altsetting 1 [ 1073.124892][T28342] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1073.152929][T28342] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1073.154349][ T5844] usb 1-1: unit 6 not found! [ 1073.172340][T28342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 1073.203906][T28342] System zones: 1-12 [ 1073.225453][T28342] EXT4-fs (loop1): 1 truncate cleaned up [ 1073.254635][T28342] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1073.316501][T28342] cifs: Unknown parameter 'dioread_nolock' [ 1073.374182][T28351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10324'. [ 1073.426865][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.624323][ T5844] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1073.650810][ T5844] usb 1-1: USB disconnect, device number 60 [ 1073.856098][T28363] lo speed is unknown, defaulting to 1000 [ 1073.938541][ T175] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1074.051371][T28375] comedi comedi4: bad chanlist[1]=0x0000000a chan=10 range length=2 [ 1074.151968][ T175] usb 3-1: Using ep0 maxpacket: 16 [ 1074.169972][ T175] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 1074.251878][ T175] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1074.271327][ T175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.289094][ T175] usb 3-1: Product: syz [ 1074.295984][ T175] usb 3-1: Manufacturer: syz [ 1074.300648][ T175] usb 3-1: SerialNumber: syz [ 1074.319730][ T175] r8152-cfgselector 3-1: config 0 descriptor?? [ 1074.580242][ T175] usbip-host 3-1: 3-1 is not in match_busid table... skip! [ 1074.797892][ T56] usb 3-1: USB disconnect, device number 60 [ 1074.982641][T28407] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10351'. [ 1075.197047][T28411] loop0: detected capacity change from 0 to 4096 [ 1075.278085][T28411] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1075.457836][T28411] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1075.466023][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1075.492944][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:0' failed: Read-only file system [ 1075.528639][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1790.tmp-b7:1' failed: Read-only file system [ 1075.620506][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1075.761501][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1791.tmp-b7:0' failed: Read-only file system [ 1075.790670][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1790.tmp-b7:1' failed: Read-only file system [ 1075.823340][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1075.853744][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1791.tmp-b7:0' failed: Read-only file system [ 1076.090149][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1076.104303][T28437] loop0: detected capacity change from 0 to 128 [ 1076.111855][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1792.tmp-b7:0' failed: Read-only file system [ 1076.146753][T28437] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1076.259250][ T49] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1076.603652][T28459] netlink: 'syz.2.10377': attribute type 32 has an invalid length. [ 1076.606445][T28456] bond2: option lacp_active: invalid value (8) [ 1076.631796][T28456] bond2 (unregistering): Released all slaves [ 1076.802753][T28462] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1077.047715][T28468] netlink: 'syz.2.10381': attribute type 15 has an invalid length. [ 1077.079350][T28468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10381'. [ 1077.453125][T28487] trusted_key: encrypted_key: master key parameter '' is invalid [ 1077.575639][ T5844] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1077.821060][ T5844] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1077.838418][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.857401][ T5844] usb 2-1: Product: syz [ 1077.868185][ T5844] usb 2-1: Manufacturer: syz [ 1077.878958][ T5844] usb 2-1: SerialNumber: syz [ 1077.940027][ T175] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1078.439359][ T5844] usb 2-1: USB disconnect, device number 42 [ 1078.490259][ T56] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1078.694159][ T56] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 1078.714237][ T56] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.736377][ T56] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.760283][ T56] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.783755][ T56] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.803537][ T56] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.823535][ T56] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.866619][ T56] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.909926][ T56] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.931601][ T56] usb 1-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 1078.958243][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.990913][ T56] pwc: Logitech QuickCam detected (reserved ID). [ 1079.011901][ T56] pwc: Warning: more than 1 configuration available. [ 1079.106259][ T175] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1079.121234][ T175] ath9k_htc: Failed to initialize the device [ 1079.148878][ T5844] usb 2-1: ath9k_htc: USB layer deinitialized [ 1079.428122][ T56] pwc: send_video_command error -71 [ 1079.442922][ T56] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1079.462618][ T56] Philips webcam: probe of 1-1:250.0 failed with error -71 [ 1079.487422][ T56] usb 1-1: USB disconnect, device number 61 [ 1080.197999][ T28] audit: type=1326 audit(1064.405:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.284152][ T28] audit: type=1326 audit(1064.442:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.362790][ T28] audit: type=1326 audit(1064.442:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.422745][ T28] audit: type=1326 audit(1064.461:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.495116][ T28] audit: type=1326 audit(1064.461:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.539801][T28573] netlink: 'syz.0.10432': attribute type 2 has an invalid length. [ 1080.573842][ T28] audit: type=1326 audit(1064.461:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.669685][ T28] audit: type=1326 audit(1064.461:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.757158][ T28] audit: type=1326 audit(1064.461:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.835288][ T28] audit: type=1326 audit(1064.461:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28564 comm="syz.1.10428" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6a5a59e0d9 code=0x7ffc0000 [ 1080.877272][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1080.932641][ T5894] udevd[5894]: symlink '../../loop1' '/dev/disk/by-diskseq/1790.tmp-b7:1' failed: Read-only file system [ 1080.971011][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1081.036729][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1081.153365][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1081.200758][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1776.tmp-b7:2' failed: Read-only file system [ 1081.239865][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1790.tmp-b7:1' failed: Read-only file system [ 1081.272006][T28597] loop2: detected capacity change from 0 to 256 [ 1081.349749][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1795.tmp-b7:2' failed: Read-only file system [ 1081.365591][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1081.443499][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1790.tmp-b7:1' failed: Read-only file system [ 1081.729409][T28610] netlink: zone id is out of range [ 1081.734596][T28610] netlink: del zone limit has 8 unknown bytes [ 1082.146743][T28625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10456'. [ 1082.163346][ T28] audit: type=1326 audit(1066.248:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28626 comm="syz.0.10458" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6be9f9e0d9 code=0x7ffc0000 [ 1082.187028][ C0] vkms_vblank_simulate: vblank timer overrun [ 1082.193570][T28627] ip6tnl2: entered promiscuous mode [ 1082.214526][T28625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10456'. [ 1082.339210][T28634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10461'. [ 1082.534718][T28641] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1082.758453][T28650] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.10469'. [ 1082.784226][T28652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10470'. [ 1082.794577][T28652] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10470'. [ 1082.814987][T28650] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1082.825127][T28652] netlink: 'syz.3.10470': attribute type 6 has an invalid length. [ 1082.843167][T28654] netlink: zone id is out of range [ 1083.229579][T28671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1083.362776][ T5842] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1083.608546][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 1083.618973][ T5842] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1083.636258][ T5842] usb 2-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 1083.649017][ T5842] usb 2-1: config 0 has no interface number 0 [ 1083.671253][ T5842] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1083.691375][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.722480][ T5842] usb 2-1: Product: syz [ 1083.727030][ T5842] usb 2-1: Manufacturer: syz [ 1083.731672][ T5842] usb 2-1: SerialNumber: syz [ 1083.739058][ T5842] usb 2-1: config 0 descriptor?? [ 1083.748044][ T5842] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 1083.757233][ T5842] usb 2-1: No valid video chain found. [ 1083.762883][ T56] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1083.963135][ T56] usb 4-1: config 0 has an invalid interface number: 3 but max is 0 [ 1083.971360][ T56] usb 4-1: config 0 has no interface number 0 [ 1083.984419][T28488] usb 2-1: USB disconnect, device number 43 [ 1083.994836][ T56] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1084.032357][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.074330][ T56] usb 4-1: config 0 descriptor?? [ 1084.094740][ T56] ums-realtek 4-1:0.3: USB Mass Storage device detected [ 1084.320947][T28488] usb 4-1: USB disconnect, device number 57 [ 1084.452752][ T175] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1084.575448][T28711] loop1: detected capacity change from 0 to 64 [ 1084.668936][ T175] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.687769][ T175] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1084.700854][ T175] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1084.711401][ T175] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.725386][ T175] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1084.734754][ T175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.978830][T28720] loop2: detected capacity change from 0 to 64 [ 1085.038856][T28720] syz.2.10502: attempt to access beyond end of device [ 1085.038856][T28720] loop2: rw=0, sector=3584, nr_sectors = 2 limit=64 [ 1085.053072][T28720] Buffer I/O error on dev loop2, logical block 1792, async page read [ 1085.064521][T28720] syz.2.10502: attempt to access beyond end of device [ 1085.064521][T28720] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1085.079013][T28720] Buffer I/O error on dev loop2, logical block 56576, async page read [ 1085.193266][ T56] usb 1-1: USB disconnect, device number 62 [ 1085.297408][ T175] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1085.527163][ T175] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1085.550770][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.573697][ T175] usb 2-1: Product: syz [ 1085.583487][ T175] usb 2-1: Manufacturer: syz [ 1085.589168][ T175] usb 2-1: SerialNumber: syz [ 1085.625642][T28488] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1086.041114][T28752] netlink: 'syz.3.10519': attribute type 3 has an invalid length. [ 1086.049688][T28752] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.10519'. [ 1086.215998][ T175] usb 2-1: USB disconnect, device number 44 [ 1086.270202][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1800.tmp-b7:2' failed: Read-only file system [ 1086.319011][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1086.445962][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1086.472771][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1800.tmp-b7:2' failed: Read-only file system [ 1086.554482][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1800.tmp-b7:2' failed: Read-only file system [ 1086.610739][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1086.666341][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10529'. [ 1086.685923][T28774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10529'. [ 1086.721550][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1800.tmp-b7:2' failed: Read-only file system [ 1086.792763][T28488] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1086.799857][T28488] ath9k_htc: Failed to initialize the device [ 1086.832562][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1086.860118][ T175] usb 2-1: ath9k_htc: USB layer deinitialized [ 1086.918290][ T5894] udevd[5894]: symlink '../../loop1' '/dev/disk/by-diskseq/1798.tmp-b7:1' failed: Read-only file system [ 1086.989075][T28778] loop2: detected capacity change from 0 to 4096 [ 1087.004615][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1087.041333][T28778] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1087.092712][T28778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1087.227933][T28778] EXT4-fs error (device loop2): ext4_empty_dir:3154: inode #12: block 80: comm syz.2.10532: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1087.276913][T28778] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.10532: directory missing '..' [ 1087.326803][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1087.373243][ T56] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1087.585167][ T56] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1087.605657][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.623699][ T56] usb 1-1: config 0 descriptor?? [ 1087.687249][T28808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10544'. [ 1088.071208][ T56] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f [ 1088.089804][ T56] hackrf 1-1:0.0: Could not detect board [ 1088.095570][ T56] hackrf: probe of 1-1:0.0 failed with error -71 [ 1088.135432][ T56] usb 1-1: USB disconnect, device number 63 [ 1088.163678][T28823] veth3: entered promiscuous mode [ 1088.252245][T28829] netlink: 'syz.1.10554': attribute type 2 has an invalid length. [ 1088.267961][T28829] netlink: 'syz.1.10554': attribute type 8 has an invalid length. [ 1088.275830][T28829] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10554'. [ 1088.576849][T28839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10558'. [ 1089.538970][T28875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10575'. [ 1089.592245][T28875] netlink: 56 bytes leftover after parsing attributes in process `syz.1.10575'. [ 1090.235933][T28903] loop1: detected capacity change from 0 to 256 [ 1090.262312][T28903] exfat: Deprecated parameter 'utf8' [ 1090.281813][T28903] exfat: Deprecated parameter 'namecase' [ 1090.297310][T28903] exfat: Deprecated parameter 'namecase' [ 1090.319631][T28903] exfat: Deprecated parameter 'utf8' [ 1090.400103][T28903] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 1090.975328][T28933] loop1: detected capacity change from 0 to 1024 [ 1091.085533][T28933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.136991][T28943] ip6erspan0: entered promiscuous mode [ 1091.143036][T28943] ip6erspan0: entered allmulticast mode [ 1091.281192][T28933] EXT4-fs error (device loop1): ext4_get_first_dir_block:3606: inode #11: comm syz.1.10604: directory missing '..' [ 1091.346270][T28933] EXT4-fs (loop1): Remounting filesystem read-only [ 1091.435269][ T5778] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.743191][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1091.748809][ T5894] udevd[5894]: symlink '../../loop1' '/dev/disk/by-diskseq/1806.tmp-b7:1' failed: Read-only file system [ 1091.925692][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1806.tmp-b7:1' failed: Read-only file system [ 1091.941899][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1092.010989][ T8975] udevd[8975]: symlink '../../loop1' '/dev/disk/by-diskseq/1806.tmp-b7:1' failed: Read-only file system [ 1092.112765][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1802.tmp-b7:2' failed: Read-only file system [ 1092.165786][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1092.167600][T28488] IPVS: starting estimator thread 0... [ 1092.321204][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1802.tmp-b7:2' failed: Read-only file system [ 1092.339369][T28980] IPVS: using max 21 ests per chain, 50400 per kthread [ 1092.343864][ T5764] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 1092.388281][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1794.tmp-b7:0' failed: Read-only file system [ 1092.446131][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1802.tmp-b7:2' failed: Read-only file system [ 1092.545857][ T5764] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1092.556575][ T5764] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.579355][ T5764] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1092.597933][ T5764] usb 2-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 1092.609273][ T5764] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1092.635289][ T5764] usb 2-1: string descriptor 0 read error: -22 [ 1092.643744][ T5764] usb 2-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40 [ 1092.657799][ T5764] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.682254][ T5764] usb 2-1: Focusrite Clarett USB Mixer Driver enabled (pid=0x8208); report any issues to g@b4.vu [ 1092.698860][ T5764] usb 2-1: Error initialising Clarett USB Mixer Driver: -22 [ 1092.780731][ T5764] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1092.992313][ T5764] usb 2-1: USB disconnect, device number 45 [ 1093.132801][T29010] netlink: 'syz.2.10638': attribute type 2 has an invalid length. [ 1093.483725][T29025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10648'. [ 1093.596488][T29028] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1094.473489][T29067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10669'. [ 1094.647257][T29072] loop0: detected capacity change from 0 to 256 [ 1094.654664][T29072] exfat: Deprecated parameter 'utf8' [ 1094.678010][T29072] exfat: Deprecated parameter 'utf8' [ 1094.698645][T29072] exfat: Deprecated parameter 'namecase' [ 1094.706962][T29072] exfat: Deprecated parameter 'namecase' [ 1094.751211][T29072] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1095.092889][T29087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1095.295092][ T5764] IPVS: starting estimator thread 0... [ 1095.395127][T29095] IPVS: using max 22 ests per chain, 52800 per kthread [ 1095.526249][T29106] overlayfs: cannot append lower layer [ 1096.185159][T28488] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1096.301317][T29133] loop2: detected capacity change from 0 to 1024 [ 1096.322783][T29133] EXT4-fs: Ignoring removed bh option [ 1096.352111][T29133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1096.401972][T28488] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1096.411327][T28488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.426656][T28488] usb 2-1: config 0 descriptor?? [ 1096.443268][T28488] cp210x 2-1:0.0: cp210x converter detected [ 1096.478811][T29133] EXT4-fs error (device loop2): ext4_free_blocks:6694: comm syz.2.10699: Freeing blocks not in datazone - block = 0, count = 16 [ 1096.493933][T29133] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.10699: bg 0: block 112: padding at end of block bitmap is not set [ 1096.510109][T29133] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1096.587801][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1096.703559][T28488] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1096.744007][T29140] loop0: detected capacity change from 0 to 4096 [ 1096.773396][T29140] EXT4-fs: Ignoring removed mblk_io_submit option [ 1096.785084][T29140] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1096.803925][T29144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10704'. [ 1096.831147][T29140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1096.869350][T29144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10704'. [ 1096.879277][T29144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10704'. [ 1096.924047][ T5842] usb 2-1: USB disconnect, device number 46 [ 1096.945786][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1096.996708][ T5842] cp210x 2-1:0.0: device disconnected [ 1097.109540][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-diskseq/1811.tmp-b7:0' failed: Read-only file system [ 1097.144307][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1810.tmp-b7:2' failed: Read-only file system [ 1097.197241][ T5894] udevd[5894]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1097.208758][T29155] loop2: detected capacity change from 0 to 8 [ 1097.231996][ T8975] udevd[8975]: symlink '../../loop2' '/dev/disk/by-diskseq/1812.tmp-b7:2' failed: Read-only file system [ 1097.258581][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.279361][T29155] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1097.315910][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1812.tmp-b7:2' failed: Read-only file system [ 1097.462142][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1812.tmp-b7:2' failed: Read-only file system [ 1097.534975][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1811.tmp-b7:0' failed: Read-only file system [ 1097.550387][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1812.tmp-b7:2' failed: Read-only file system [ 1097.578549][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1097.604721][ T5894] udevd[5894]: symlink '../../loop2' '/dev/disk/by-diskseq/1813.tmp-b7:2' failed: Read-only file system [ 1097.759152][T29172] SET target dimension over the limit! [ 1097.869721][T29174] x_tables: duplicate underflow at hook 2 [ 1098.045500][T29180] loop1: detected capacity change from 0 to 8 [ 1098.122305][T29180] SQUASHFS error: Unable to read directory block [26067d:ffff] [ 1098.408241][ T5844] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1098.446544][T29178] loop0: detected capacity change from 0 to 32768 [ 1098.478389][T29178] JBD2: Ignoring recovery information on journal [ 1098.524207][T29178] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1098.546612][ T56] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1098.610709][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 1098.616904][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 1098.620240][ T5844] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 1098.637383][ T5844] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1098.647030][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.655566][ T5844] usb 4-1: Product: syz [ 1098.659826][ T5844] usb 4-1: Manufacturer: syz [ 1098.664632][T28488] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1098.672898][ T5844] usb 4-1: SerialNumber: syz [ 1098.681539][ T5844] usb 4-1: config 0 descriptor?? [ 1098.693848][T29185] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1098.703377][ T5844] hub 4-1:0.0: bad descriptor, ignoring hub [ 1098.709715][ T5844] hub: probe of 4-1:0.0 failed with error -5 [ 1098.724163][ T5844] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input75 [ 1098.750300][ T56] usb 3-1: Using ep0 maxpacket: 8 [ 1098.761297][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.781779][ T56] usb 3-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1098.813852][ T56] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1098.829310][ T56] usb 3-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 1098.839064][ T56] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.860473][ T56] usb 3-1: Product: syz [ 1098.864714][ T56] usb 3-1: Manufacturer: syz [ 1098.877972][T28488] usb 2-1: Using ep0 maxpacket: 16 [ 1098.885837][T28488] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1098.899497][ T56] usb 3-1: SerialNumber: syz [ 1098.907329][T28488] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 1098.948548][T28488] usb 2-1: config 0 has no interface number 0 [ 1098.976261][T28488] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1098.987638][ T5844] usb 4-1: USB disconnect, device number 58 [ 1098.993610][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1099.002904][T28488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.011999][T28488] usb 2-1: Product: syz [ 1099.021105][T28488] usb 2-1: Manufacturer: syz [ 1099.025762][T28488] usb 2-1: SerialNumber: syz [ 1099.036367][T28488] usb 2-1: config 0 descriptor?? [ 1099.047945][T28488] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1099.066054][T28488] usb 2-1: No valid video chain found. [ 1099.163470][T29189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1099.201401][T29189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.223401][ T56] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input76 [ 1099.242187][ T56] usb 3-1: USB disconnect, device number 61 [ 1099.313170][ T5844] usb 2-1: USB disconnect, device number 47 [ 1099.654484][T29209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10735'. [ 1100.137760][T29227] loop0: detected capacity change from 0 to 16 [ 1100.160477][T29227] erofs: (device loop0): mounted with root inode @ nid 36. [ 1100.384578][ T5844] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1100.415404][T29233] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1100.456149][T29232] loop0: detected capacity change from 0 to 4096 [ 1100.498039][T29232] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1100.514487][T29232] ntfs3: loop0: Failed to load $Extend (-22). [ 1100.531686][T29232] ntfs3: loop0: Failed to initialize $Extend. [ 1100.587516][ T5844] usb 3-1: Using ep0 maxpacket: 16 [ 1100.608002][ T5844] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 1100.638247][ T5844] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 1100.651587][ T5844] usb 3-1: config 0 has no interface number 0 [ 1100.702885][ T5844] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1100.713857][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.747733][ T5844] usb 3-1: Product: syz [ 1100.752153][ T5844] usb 3-1: Manufacturer: syz [ 1100.756801][ T5844] usb 3-1: SerialNumber: syz [ 1100.789307][ T5844] usb 3-1: config 0 descriptor?? [ 1100.807494][ T5844] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 1100.824751][ T5844] usb 3-1: No valid video chain found. [ 1101.024635][ T5844] usb 3-1: USB disconnect, device number 62 [ 1101.183457][T29250] loop0: detected capacity change from 0 to 64 [ 1101.328832][T29255] netlink: 'syz.3.10758': attribute type 1 has an invalid length. [ 1101.345556][T29255] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10758'. [ 1101.495636][T29260] ALSA: mixer_oss: invalid OSS volume ';ʸg™¯ÔŠ8ª\>Px´i9ù hû~¢)–„VÌ' [ 1101.507420][T29260] ALSA: mixer_oss: invalid OSS volume '*ØbbÆX-]¢‰Oœ¾ïF¸¤{ãT0p³Áúc©' [ 1101.515796][T29260] ALSA: mixer_oss: invalid OSS volume 'g›IÓÒš¼ò"Í4¨×-Z›' [ 1101.526554][T29260] ALSA: mixer_oss: invalid OSS volume 'eQCÈ¡*«±§qµpA˜ÚœøÄe ¦TÒú|Kˆ' [ 1101.536746][T29260] ALSA: mixer_oss: invalid OSS volume ':ÀaøËz’´Äã]¶q³°e£X×fb]݆›BäÜ.' [ 1101.545534][T29260] ALSA: mixer_oss: invalid OSS volume '¯Þj|‡ÓâÚÕq⩃˚[Òw3ù^.¸Œî×’ø' [ 1101.554296][T29260] ALSA: mixer_oss: invalid OSS volume 'Ü"PÞ¸àøÛœåÂÏo[ç8>ú7|¤YMeÃp»ñq' [ 1101.563166][T29260] ALSA: mixer_oss: invalid OSS volume '¨ÿwI þ×·Ë#Þt\ÞW˜,ãbP=&ež' [ 1101.571765][T29260] ALSA: mixer_oss: invalid OSS volume ']÷“á´Õz‘a›-¯!)ŸÙüúÏ»à²vC¤YpsÆÚ' [ 1101.580727][T29260] ALSA: mixer_oss: invalid OSS volume 'L¹Eá]DþÒxtÎéÝ‚OY3f£¸k$T ÓÝ"' [ 1101.622786][T29260] ALSA: mixer_oss: invalid OSS volume 'î[' [ 1101.653057][T29260] ALSA: mixer_oss: invalid OSS volume '‡¾ö3ÍÉûA14IN—+|¦\' [ 1101.674431][T29260] ALSA: mixer_oss: invalid OSS volume '·$ flc_size [ 1138.926813][ T5783] sysv_free_block: flc_count > flc_size [ 1138.932411][ T5783] sysv_free_block: flc_count > flc_size [ 1138.962722][ T5783] sysv_free_block: flc_count > flc_size [ 1138.968312][ T5783] sysv_free_block: flc_count > flc_size [ 1138.990661][ T5783] sysv_free_block: flc_count > flc_size [ 1138.990952][ T175] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1138.996252][ T5783] sysv_free_block: flc_count > flc_size [ 1139.037446][ T5783] sysv_free_block: flc_count > flc_size [ 1139.043037][ T5783] sysv_free_block: flc_count > flc_size [ 1139.057334][ T5783] sysv_free_block: flc_count > flc_size [ 1139.066294][ T5783] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1139.255665][ T175] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1139.265783][ T175] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.275364][ T175] usb 2-1: Product: syz [ 1139.280179][ T175] usb 2-1: Manufacturer: syz [ 1139.284845][ T175] usb 2-1: SerialNumber: syz [ 1139.306597][ T175] usb 2-1: config 0 descriptor?? [ 1139.321987][ T5842] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1139.535073][ T175] usb 2-1: f81604_read: reg: 105 failed: -EPIPE [ 1139.546266][ T175] f81604 2-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1139.546298][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 1139.553722][ T175] f81604: probe of 2-1:0.0 failed with error -32 [ 1139.582646][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.593897][ T5842] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1139.603473][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.618184][ T175] usb 2-1: USB disconnect, device number 56 [ 1139.646306][ T5842] usb 4-1: config 0 descriptor?? [ 1139.658617][ T5842] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1139.747196][T30298] loop0: detected capacity change from 0 to 1024 [ 1139.766512][T30298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.798127][T30298] EXT4-fs warning (device loop0): empty_inline_dir:1864: bad inline directory (dir #12) - no `..' [ 1139.852993][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1139.886941][T30304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11258'. [ 1140.089867][ T5842] gspca_vc032x: reg_w err -71 [ 1140.103782][ T5842] vc032x: probe of 4-1:0.0 failed with error -71 [ 1140.130676][T30310] loop0: detected capacity change from 0 to 2048 [ 1140.137467][ T5842] usb 4-1: USB disconnect, device number 61 [ 1140.193871][T30310] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1140.287747][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1855.tmp-b7:0' failed: Read-only file system [ 1140.304339][ T5890] udevd[5890]: symlink '../../loop1' '/dev/disk/by-diskseq/1850.tmp-b7:1' failed: Read-only file system [ 1140.314333][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system [ 1140.335068][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-uuid/1234567812345678.tmp-b7:0' failed: Read-only file system [ 1140.418253][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1855.tmp-b7:0' failed: Read-only file system [ 1140.430579][ T5890] udevd[5890]: symlink '../../loop2' '/dev/disk/by-diskseq/1852.tmp-b7:2' failed: Read-only file system [ 1140.454080][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system [ 1140.485047][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-uuid/1234567812345678.tmp-b7:0' failed: Read-only file system [ 1140.525637][ T5890] udevd[5890]: symlink '../../loop1' '/dev/disk/by-diskseq/1850.tmp-b7:1' failed: Read-only file system [ 1140.564533][ T8975] udevd[8975]: symlink '../../loop0' '/dev/disk/by-diskseq/1855.tmp-b7:0' failed: Read-only file system [ 1140.657307][T30324] loop0: detected capacity change from 0 to 256 [ 1140.697449][T30324] exfat: Deprecated parameter 'utf8' [ 1140.744011][T30324] exfat: Deprecated parameter 'utf8' [ 1140.831992][T30324] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1140.878077][T30324] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1141.731165][T30337] loop2: detected capacity change from 0 to 32768 [ 1141.784817][T30337] JBD2: Ignoring recovery information on journal [ 1141.843016][T30354] blktrace: Concurrent blktraces are not allowed on loop5 [ 1142.001423][T30337] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1142.088563][T30337] [ 1142.090995][T30337] ====================================================== [ 1142.098033][T30337] WARNING: possible circular locking dependency detected [ 1142.105084][T30337] syzkaller #0 Not tainted [ 1142.109539][T30337] ------------------------------------------------------ [ 1142.116596][T30337] syz.2.11282/30337 is trying to acquire lock: [ 1142.122785][T30337] ffff888058c35f58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1142.136141][T30337] [ 1142.136141][T30337] but task is already holding lock: [ 1142.143530][T30337] ffff888058c33120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x68c/0x49b0 [ 1142.154111][T30337] [ 1142.154111][T30337] which lock already depends on the new lock. [ 1142.154111][T30337] [ 1142.164550][T30337] [ 1142.164550][T30337] the existing dependency chain (in reverse order) is: [ 1142.173590][T30337] [ 1142.173590][T30337] -> #5 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 1142.182400][T30337] down_write+0x97/0x200 [ 1142.187310][T30337] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 1142.193851][T30337] ocfs2_xattr_set+0x63a/0x13a0 [ 1142.199293][T30337] ocfs2_set_acl+0x4d4/0x580 [ 1142.204438][T30337] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1142.209940][T30337] vfs_set_acl+0x80f/0xa70 [ 1142.214919][T30337] path_setxattr+0x362/0x590 [ 1142.220065][T30337] __x64_sys_setxattr+0xbb/0xd0 [ 1142.225476][T30337] do_syscall_64+0x55/0xb0 [ 1142.230454][T30337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.236914][T30337] [ 1142.236914][T30337] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1142.244782][T30337] down_read+0x46/0x2e0 [ 1142.249505][T30337] ocfs2_init_acl+0x30a/0x770 [ 1142.254771][T30337] ocfs2_mknod+0x1427/0x2310 [ 1142.259934][T30337] ocfs2_create+0x196/0x430 [ 1142.265000][T30337] path_openat+0x1705/0x3270 [ 1142.270164][T30337] do_filp_open+0x1f2/0x430 [ 1142.275224][T30337] do_sys_openat2+0x134/0x1d0 [ 1142.280459][T30337] __x64_sys_open+0x11f/0x140 [ 1142.285691][T30337] do_syscall_64+0x55/0xb0 [ 1142.290665][T30337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.297118][T30337] [ 1142.297118][T30337] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1142.305690][T30337] down_read+0x46/0x2e0 [ 1142.310406][T30337] ocfs2_start_trans+0x3a8/0x6f0 [ 1142.315896][T30337] ocfs2_shutdown_local_alloc+0x1f7/0xac0 [ 1142.322167][T30337] ocfs2_dismount_volume+0x1e5/0x890 [ 1142.327998][T30337] generic_shutdown_super+0x134/0x2b0 [ 1142.333915][T30337] kill_block_super+0x44/0x90 [ 1142.339141][T30337] deactivate_locked_super+0x97/0x100 [ 1142.345052][T30337] cleanup_mnt+0x3d7/0x460 [ 1142.350022][T30337] task_work_run+0x1d4/0x260 [ 1142.355238][T30337] exit_to_user_mode_loop+0xe6/0x110 [ 1142.361099][T30337] exit_to_user_mode_prepare+0xee/0x180 [ 1142.367216][T30337] syscall_exit_to_user_mode+0x1a/0x50 [ 1142.373256][T30337] do_syscall_64+0x61/0xb0 [ 1142.378222][T30337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.384668][T30337] [ 1142.384668][T30337] -> #2 (sb_internal#4){.+.+}-{0:0}: [ 1142.392193][T30337] ocfs2_start_trans+0x2a9/0x6f0 [ 1142.397705][T30337] ocfs2_shutdown_local_alloc+0x1f7/0xac0 [ 1142.403979][T30337] ocfs2_dismount_volume+0x1e5/0x890 [ 1142.409804][T30337] generic_shutdown_super+0x134/0x2b0 [ 1142.415725][T30337] kill_block_super+0x44/0x90 [ 1142.420929][T30337] deactivate_locked_super+0x97/0x100 [ 1142.426824][T30337] cleanup_mnt+0x3d7/0x460 [ 1142.431763][T30337] task_work_run+0x1d4/0x260 [ 1142.436906][T30337] exit_to_user_mode_loop+0xe6/0x110 [ 1142.442729][T30337] exit_to_user_mode_prepare+0xee/0x180 [ 1142.448799][T30337] syscall_exit_to_user_mode+0x1a/0x50 [ 1142.454874][T30337] do_syscall_64+0x61/0xb0 [ 1142.459834][T30337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.466259][T30337] [ 1142.466259][T30337] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 1142.476787][T30337] down_write+0x97/0x200 [ 1142.481564][T30337] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1142.487982][T30337] ocfs2_reserve_clusters_with_limit+0x3bd/0xc20 [ 1142.494853][T30337] ocfs2_mknod+0xed1/0x2310 [ 1142.499888][T30337] ocfs2_create+0x196/0x430 [ 1142.504925][T30337] path_openat+0x1705/0x3270 [ 1142.510046][T30337] do_filp_open+0x1f2/0x430 [ 1142.515078][T30337] do_sys_openat2+0x134/0x1d0 [ 1142.520282][T30337] __x64_sys_open+0x11f/0x140 [ 1142.525483][T30337] do_syscall_64+0x55/0xb0 [ 1142.530422][T30337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.536859][T30337] [ 1142.536859][T30337] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 1142.547383][T30337] __lock_acquire+0x37ef/0x7d80 [ 1142.552754][T30337] lock_acquire+0x19e/0x420 [ 1142.557782][T30337] down_write+0x97/0x200 [ 1142.562558][T30337] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1142.569049][T30337] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1142.575921][T30337] ocfs2_extend_dir+0xd3c/0x49b0 [ 1142.581385][T30337] ocfs2_prepare_dir_for_insert+0x30e7/0x5520 [ 1142.587987][T30337] ocfs2_mknod+0x831/0x2310 [ 1142.593007][T30337] ocfs2_mkdir+0x196/0x430 [ 1142.598000][T30337] vfs_mkdir+0x2a5/0x470 [ 1142.602766][T30337] do_mkdirat+0x1dc/0x450 [ 1142.607615][T30337] __x64_sys_mkdirat+0x89/0xa0 [ 1142.612921][T30337] do_syscall_64+0x55/0xb0 [ 1142.617887][T30337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1142.624303][T30337] [ 1142.624303][T30337] other info that might help us debug this: [ 1142.624303][T30337] [ 1142.634546][T30337] Chain exists of: [ 1142.634546][T30337] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &oi->ip_xattr_sem --> &ocfs2_file_ip_alloc_sem_key [ 1142.634546][T30337] [ 1142.651765][T30337] Possible unsafe locking scenario: [ 1142.651765][T30337] [ 1142.659214][T30337] CPU0 CPU1 [ 1142.664589][T30337] ---- ---- [ 1142.669968][T30337] lock(&ocfs2_file_ip_alloc_sem_key); [ 1142.675519][T30337] lock(&oi->ip_xattr_sem); [ 1142.682623][T30337] lock(&ocfs2_file_ip_alloc_sem_key); [ 1142.690695][T30337] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 1142.697994][T30337] [ 1142.697994][T30337] *** DEADLOCK *** [ 1142.697994][T30337] [ 1142.706138][T30337] 3 locks held by syz.2.11282/30337: [ 1142.711430][T30337] #0: ffff8880311b0418 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1142.720711][T30337] #1: ffff888058c33498 (&type->i_mutex_dir_key#20/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 1142.731451][T30337] #2: ffff888058c33120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x68c/0x49b0 [ 1142.742443][T30337] [ 1142.742443][T30337] stack backtrace: [ 1142.748346][T30337] CPU: 0 PID: 30337 Comm: syz.2.11282 Not tainted syzkaller #0 [ 1142.755898][T30337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1142.765952][T30337] Call Trace: [ 1142.769253][T30337] [ 1142.772200][T30337] dump_stack_lvl+0x18c/0x250 [ 1142.776886][T30337] ? load_image+0x420/0x420 [ 1142.781405][T30337] ? show_regs_print_info+0x20/0x20 [ 1142.786618][T30337] ? print_circular_bug+0x12b/0x1a0 [ 1142.791848][T30337] check_noncircular+0x2fc/0x400 [ 1142.796839][T30337] ? look_up_lock_class+0x75/0x140 [ 1142.801985][T30337] ? print_deadlock_bug+0x5d0/0x5d0 [ 1142.807224][T30337] ? lockdep_lock+0xf5/0x230 [ 1142.811841][T30337] ? _find_first_zero_bit+0xd6/0x100 [ 1142.817189][T30337] __lock_acquire+0x37ef/0x7d80 [ 1142.822064][T30337] ? verify_lock_unused+0x140/0x140 [ 1142.827312][T30337] ? __lock_acquire+0x1336/0x7d80 [ 1142.832349][T30337] ? verify_lock_unused+0x140/0x140 [ 1142.837565][T30337] ? igrab+0x8b/0xa0 [ 1142.841485][T30337] ? __lock_acquire+0x7d80/0x7d80 [ 1142.846515][T30337] ? do_raw_spin_lock+0x11f/0x2b0 [ 1142.851555][T30337] lock_acquire+0x19e/0x420 [ 1142.856096][T30337] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1142.862185][T30337] ? _raw_spin_unlock+0x28/0x40 [ 1142.867049][T30337] ? ocfs2_get_system_file_inode+0x1f9/0x820 [ 1142.873050][T30337] ? __might_sleep+0xe0/0xe0 [ 1142.877650][T30337] ? read_lock_is_recursive+0x20/0x20 [ 1142.883032][T30337] ? ocfs2_fast_symlink_read_folio+0x550/0x550 [ 1142.889213][T30337] down_write+0x97/0x200 [ 1142.893509][T30337] ? ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1142.899606][T30337] ? down_read_killable+0x340/0x340 [ 1142.904821][T30337] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1142.910823][T30337] ? __lock_acquire+0x7d80/0x7d80 [ 1142.915861][T30337] ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 1142.921775][T30337] ? lockdep_hardirqs_on+0x98/0x150 [ 1142.926991][T30337] ? __lock_acquire+0x7d80/0x7d80 [ 1142.932045][T30337] ? do_raw_spin_trylock+0xb2/0x190 [ 1142.937290][T30337] ? do_raw_spin_lock+0x2b0/0x2b0 [ 1142.942315][T30337] ? ocfs2_block_group_search+0x470/0x470 [ 1142.948046][T30337] ? do_raw_spin_unlock+0x121/0x230 [ 1142.953276][T30337] ? free_unref_page+0x190/0x2e0 [ 1142.958248][T30337] ? __stack_depot_save+0x587/0x660 [ 1142.963494][T30337] ? kasan_set_track+0x5f/0x70 [ 1142.968278][T30337] ? kasan_set_track+0x4e/0x70 [ 1142.973043][T30337] ? __kasan_kmalloc+0x8f/0xa0 [ 1142.977834][T30337] ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0 [ 1142.984362][T30337] ? ocfs2_extend_dir+0xd3c/0x49b0 [ 1142.989482][T30337] ? ocfs2_prepare_dir_for_insert+0x30e7/0x5520 [ 1142.995750][T30337] ? ocfs2_mknod+0x831/0x2310 [ 1143.000438][T30337] ? ocfs2_mkdir+0x196/0x430 [ 1143.005033][T30337] ? vfs_mkdir+0x2a5/0x470 [ 1143.009479][T30337] ? do_mkdirat+0x1dc/0x450 [ 1143.013984][T30337] ? __x64_sys_mkdirat+0x89/0xa0 [ 1143.018935][T30337] ? do_syscall_64+0x55/0xb0 [ 1143.023534][T30337] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.029680][T30337] ocfs2_reserve_new_metadata_blocks+0x416/0x9a0 [ 1143.036024][T30337] ? ocfs2_init_steal_slots+0x160/0x160 [ 1143.041599][T30337] ? down_write+0x16e/0x200 [ 1143.046133][T30337] ? down_read_killable+0x340/0x340 [ 1143.051359][T30337] ocfs2_extend_dir+0xd3c/0x49b0 [ 1143.056337][T30337] ? ocfs2_dx_dir_name_hash+0xb30/0xb30 [ 1143.061901][T30337] ? ocfs2_initialize_journal_triggers+0x540/0x540 [ 1143.068436][T30337] ? verify_lock_unused+0x140/0x140 [ 1143.073644][T30337] ? mark_lock+0x94/0x320 [ 1143.078033][T30337] ? ocfs2_buffer_cached+0x364/0x840 [ 1143.083328][T30337] ? __lock_acquire+0x7d80/0x7d80 [ 1143.088380][T30337] ? ocfs2_dx_dir_name_hash+0x253/0xb30 [ 1143.093938][T30337] ? __asan_memcpy+0x40/0x70 [ 1143.098562][T30337] ? ocfs2_dx_dir_name_hash+0x9e6/0xb30 [ 1143.104130][T30337] ? ocfs2_prepare_dir_for_insert+0x5520/0x5520 [ 1143.110387][T30337] ocfs2_prepare_dir_for_insert+0x30e7/0x5520 [ 1143.116492][T30337] ? ocfs2_set_buffer_uptodate+0xb0/0x11a0 [ 1143.122329][T30337] ? ocfs2_fill_new_dir_el+0xe60/0xe60 [ 1143.127831][T30337] ? rcu_is_watching+0x15/0xb0 [ 1143.132595][T30337] ? ocfs2_search_dirblock+0x37b/0x830 [ 1143.138061][T30337] ? ocfs2_read_dir_block_direct+0x4c0/0x4c0 [ 1143.144047][T30337] ? __brelse+0x59/0x90 [ 1143.148209][T30337] ? ocfs2_find_entry+0x13d6/0x1f90 [ 1143.153408][T30337] ? verify_lock_unused+0x140/0x140 [ 1143.158611][T30337] ? ocfs2_refresh_inode+0x900/0x900 [ 1143.163903][T30337] ? ocfs2_free_dir_lookup_result+0x100/0x100 [ 1143.169981][T30337] ? ocfs2_read_blocks_sync+0xb50/0xb50 [ 1143.175562][T30337] ? ocfs2_inode_lock_full_nested+0x14d/0x1b10 [ 1143.181724][T30337] ? ocfs2_read_inode_block+0x124/0x190 [ 1143.187301][T30337] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 1143.193300][T30337] ? mark_lock+0x94/0x320 [ 1143.197651][T30337] ? do_raw_spin_unlock+0x121/0x230 [ 1143.202863][T30337] ? ocfs2_inode_lock_full_nested+0xaae/0x1b10 [ 1143.209022][T30337] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.215113][T30337] ? __kernel_text_address+0xd/0x30 [ 1143.220323][T30337] ? ocfs2_downconvert_lock+0x4c0/0x4c0 [ 1143.225866][T30337] ? arch_stack_walk+0x160/0x190 [ 1143.230839][T30337] ? ocfs2_check_dir_for_entry+0x24a/0x3d0 [ 1143.236695][T30337] ? ocfs2_lookup_ino_from_name+0xf0/0xf0 [ 1143.242479][T30337] ? mark_lock+0x94/0x320 [ 1143.246857][T30337] ocfs2_mknod+0x831/0x2310 [ 1143.251367][T30337] ? mark_lock+0x94/0x320 [ 1143.255698][T30337] ? ocfs2_mkdir+0x430/0x430 [ 1143.260309][T30337] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 1143.266079][T30337] ? __lock_acquire+0x7d80/0x7d80 [ 1143.271131][T30337] ? do_raw_spin_lock+0x11f/0x2b0 [ 1143.276176][T30337] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 1143.282075][T30337] ? __lock_acquire+0x7d80/0x7d80 [ 1143.287110][T30337] ? __rwlock_init+0x150/0x150 [ 1143.291926][T30337] ? do_raw_spin_unlock+0x121/0x230 [ 1143.297162][T30337] ? put_pid+0xde/0x120 [ 1143.301354][T30337] ocfs2_mkdir+0x196/0x430 [ 1143.305770][T30337] ? make_kgid+0x650/0x650 [ 1143.310214][T30337] ? apparmor_path_mkdir+0x1b0/0x230 [ 1143.315534][T30337] ? ocfs2_symlink+0x2730/0x2730 [ 1143.320466][T30337] ? HAS_UNMAPPED_ID+0x101/0x170 [ 1143.325410][T30337] ? ocfs2_getattr+0x3a0/0x3a0 [ 1143.330190][T30337] ? inode_permission+0xf3/0x480 [ 1143.335149][T30337] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1143.340216][T30337] ? security_inode_mkdir+0xb7/0x100 [ 1143.345507][T30337] vfs_mkdir+0x2a5/0x470 [ 1143.349770][T30337] do_mkdirat+0x1dc/0x450 [ 1143.354115][T30337] ? vfs_mkdir+0x470/0x470 [ 1143.358534][T30337] __x64_sys_mkdirat+0x89/0xa0 [ 1143.363294][T30337] do_syscall_64+0x55/0xb0 [ 1143.367709][T30337] ? clear_bhb_loop+0x40/0x90 [ 1143.372386][T30337] ? clear_bhb_loop+0x40/0x90 [ 1143.377078][T30337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1143.382978][T30337] RIP: 0033:0x7fae2b59cf47 [ 1143.387391][T30337] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1143.407167][T30337] RSP: 002b:00007fae2c465e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1143.415666][T30337] RAX: ffffffffffffffda RBX: 00007fae2c465ee0 RCX: 00007fae2b59cf47 [ 1143.423662][T30337] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 1143.431650][T30337] RBP: 00002000000007c0 R08: 0000200000000d40 R09: 0000000000000000 [ 1143.439814][T30337] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000200000000280 [ 1143.447817][T30337] R13: 00007fae2c465ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1143.455804][T30337] [ 1143.474236][T30337] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048 [ 1143.492122][T30337] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1143.502185][T30337] OCFS2: Returning error to the calling process. [ 1143.508536][T30337] (syz.2.11282,30337,0):ocfs2_search_chain:1783 ERROR: status = -5 [ 1143.517682][T30337] (syz.2.11282,30337,0):ocfs2_search_chain:1893 ERROR: status = -5 [ 1143.526479][T30337] (syz.2.11282,30337,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -5 [ 1143.535073][T30337] (syz.2.11282,30337,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -5 [ 1143.544468][T30337] (syz.2.11282,30337,0):ocfs2_claim_new_inode:2248 ERROR: status = -5 [ 1143.552681][T30337] (syz.2.11282,30337,0):ocfs2_claim_new_inode:2263 ERROR: status = -5 [ 1143.560923][T30337] (syz.2.11282,30337,0):ocfs2_mknod_locked:639 ERROR: status = -5 [ 1143.568975][T30337] (syz.2.11282,30337,0):ocfs2_mknod:385 ERROR: status = -5 [ 1143.576461][T30337] (syz.2.11282,30337,0):ocfs2_mknod:502 ERROR: status = -5 [ 1143.583695][T30337] (syz.2.11282,30337,0):ocfs2_mkdir:659 ERROR: status = -5 [ 1143.615025][ T5783] ocfs2: Unmounting device (7,2) on (node local)