last executing test programs: 17m56.446237368s ago: executing program 3 (id=3717): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000240)={0x8f, 0x0, 0x2}) 17m55.618979499s ago: executing program 3 (id=3720): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 17m54.453075029s ago: executing program 3 (id=3726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x5) 17m53.765369076s ago: executing program 3 (id=3732): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000040)='./file0\x00', 0x1008408, &(0x7f0000000300)=ANY=[@ANYBLOB='nojoliet,dmode=0x000000007fffffff,dmode=0x0000000000000009,check=relaxed,overriderockperm,utf8,mode=0x0000000000000000,nojoliet,hide,nocompress,utf8,norock,overriderockperm,mode=0xffffffffffffffff,cruft,map=off,iocharset=macinuit,fund=BPRM_CHECK,\x00', @ANYRESHEX=0x0, @ANYBLOB="e03f9c0ce2afb796026bdd047770b0e3aeaa5f915c48e1dae1b58760633e809b40607e492079cc84baa304eb066115bef7120fde299b69babc025988054c40d35d919704678e238e3eb3efd893a8b4589ce7011b064cf613513f48c4f1b78a10e4e5364de7b013adc30eed3d7e73dca89f46c2d4f7be69818b5937e0d4547295fd8a2ab8df6b88967c5b", @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0xff, 0x5ac, &(0x7f0000002940)="$eJzs3N9u29YZAPBDx441FwsGFGvSNEDZNBfZRRxJXhwY3UU0mrLZSqJA0kVyNRSL0wWzu2HZgDV3udlWYMOudj30dk+wJ9jTrM+QgfqT2JZjLU0XZcDvB8Q81Pl4zncY4hyIEBkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBAl281mKwq9bLAXluIXSraLvP/i6nja3j+PbY5Zef73X/+OQojqf6HRCJfG9Zfefh77w/rP1XBxvHcxNOpNIzx+650ffPT28lJ94EoUhTMSei0effn4l58dHOz/ZtGJLMhOOsjKPOt3vhdCKPN4a3OzeXO3W8bdrJeW98oq7cdJkXaqvIivJ3dCCFsbcbp+L98b7Gx3eml8PflR3Nraun2j3Wxuxh+vD9NOUeaDmx+vl8lu1utlg51RTF19o/1+uF1fiJ9kVVylnX4cP3h4sL8xL8k6qPXfBLXnBbWb7Xar1W63Nm9t3brdbDYmV+uzD5abJ4SThywv/qLltTs/uVBGO9M57vx3OY/Dt/E0+euiUwAAAAD+x6LRPfZodF/+0qjUzXpp81jM02hh6QEAAADfgdFX+4uTGwAhXArR7Pd/AAAA4P/bn858xi5EUSiHq9H0UZXh3WvRYacudQ7PjT86d7LFqns5ujBpZLTZXJ7sJemV6N1x0LvT6G8mmwfz8oiKYiV68moJhD+Hy+OYy/fH2/vTmnEva92sl64n+c3lEDqdC0tVerf63RcPfx9CUTw999WgfyEKDx4e7K///FcH90e5PKlbeXI4+YXE2tm5rIYjufz22XOPkxHfOT7ildGNmHrUXw36a+N+m0fHvzQ+fOklxv+H8N445r1JpmvHx9+o+2ytf9SaGf3RLFrDu9dWJ51NRz7zE5Ezs7gyjrly/cN68+H1Sc3KkSza87JoHz3/3+pcnJJF48S52JiXxcYrZgGwKA9OrkIz6//Mujua3q6tzDR1xiw3Z3Wvl/C5q/svXtDL+fB8Rv9gHPPB5eXnK9KJGb05b0ZvnrKun7a6hXD6WP8Rrv79byHshavT4BetsXW/fzm2qkaHX9cHfD3T7/RJ87LXjuqdc6uHvw7vPPry8Y2Hh599vv/5/hft9sZm88fN5q12WBkNY7Kx9gBwirT4Jlqr/hgVRTb8WWtrq9WpdtO4yJNP4iLb3knjbFClRbLbGeyk8bDIqzzJe3Xh02w7LeNybzjMiyru5kU8zMvs7ujNL/Hk1S9l2u8Mqiwph720U6Zxkg+qTlLF21mZxMO9n/aycjctRgeXwzTJulnSqbJ8EJf5XpGk63FcpumRwGw7HVRZN6uLg3hYZP1OcS/+NO/t9dN4Oy2TIhtW+bjBaV/ZoJsX/VGz64s+2QDwhngUJm+we/Yqu5cuhMacmEWPEQA47uQqvbrohAAAAAAAAAAAAAAAgBlHH9f7yeTFZa/8ROBiC3feOq3q/cUndrQQQlh+iaOm/13Hq4aLHsWCz+Fr7KvxZgx5+tats4PrqNOrohDC/L6+X8csaEICAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDP8JwAA///H8oyP") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) 17m52.664033703s ago: executing program 3 (id=3736): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540), 0x0) 17m51.62294504s ago: executing program 3 (id=3740): syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000ac0)=ANY=[@ANYBLOB="71756965742c636f6465706167653d63703933362c696f636861727365743d6370313235352c706172743d3078303030303030303030303030303030632c001b19d2f3eb2592aa071f98a67f10844e0ebec911c600d863f7a7532e8a54c4a25f698baaebd74b2f1492178b666089bd65047caa81dd4e822439144ba670f9944fea28b8e7a9e0a557a4e3610ea55812e03340be5d539ef8462ee8ec1fdfbf0e06ea4a425a599386ac08b16624c35592317576f2fc252d6a256e3535b073466360ea561931b253227b10b8abab384ec2a8e92f45ee89e99886e0bdd8661f96ef83e0bddb3d342c7faf17d58e638cb08b377be0fa3780baecdae967b6a93014aa4b49bc51b7057c2e81192d06a78fb013e4c6f2e7712519ff80ce5f1176b420ea13e635bf2114d4e4562628"], 0x2, 0x34e, &(0x7f0000002280)="$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") ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000004c0)="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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 17m50.725277942s ago: executing program 32 (id=3740): syz_mount_image$hfs(&(0x7f0000000380), &(0x7f0000000000)='./file1\x00', 0x1218001, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x2, 0x34e, &(0x7f0000002280)="$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") ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000004c0)="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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) 16m54.971035708s ago: executing program 4 (id=3972): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) close(0x3) 16m54.426573892s ago: executing program 4 (id=3975): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000001f80)=""/4102, 0x1006) 16m53.992020373s ago: executing program 4 (id=3977): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) 16m53.560143064s ago: executing program 4 (id=3980): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@norecovery}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x486, &(0x7f0000000b40)="$eJzs3MtvFdUfAPDvTG/L+9f+EB8gSBWNxEdLy0MWbjSasNDERBcYV7UtpFKooTURQrS6wKUhcW/8L4wr3Rh1o4lb3RsSYtiAurlm7szQS7nTFnvbW7ifT3Lbc+6czjnfOXPunJnTNoCuNZh9SSK2R8RvEdGfZ28vMJh/u3n90vhf1y+NJ1Gvv/ln0ih34/ql8bJo+XPb8ky9XuQ3taj38jsRY9PTk+eL/PDc2feHZy9cfH7q7NjpydOT50aPHz9yeF/fsdGjbYkzi+vGno9m9u4+8faV18dPXnn3xySNPO7MjW0LcazGlqb0YH50W3qqHZVtIDua0kmtecv+nxfSrc4EOqknIrLu6m2M//7oaTqD++PVTzvaOGBN1ev1+hKfyvN14D6WRKdbAHRGeaHP7uPL1zpNPTaEay/lN0BZ3DeLV76lFmme2N+76P52exvrH4yIk/N/f5m9YtHzFACAtfBtNv95rtX8L42H8kRf9uV/xRrKQET8PyJ2RsQDEbErIh6MaJR9OCIeKfabrLD+xSskd85/0qurCnAZ2fzvxWJt6/b5X1oWGegpcjsa8fcmp6amJw8Vx+Rg9G46NZVMjixRx3ev/Pp51bbm+V/2yuov54J5tenV2qIHdBNjc2OrDPuWa59E7Km1ij+Jchkn68vdEbHnP9Yx9Uytctsy8S+tercrVv8q4um8/+djUfylpHJ9cuSFY6NHhzfH9OSh4fKsuNNPv1x+o6r+VcXfBln/b215/t+KfyDZHDF74eKZxnrt7F3tPhs6cfn3zyrvaYr4s+FVEf9t5/+JHcX535e81Xijr9jw4djc3PmRiL7ktTvfH13YW5kvy2fxHzzQevzvjIUj8WhE7I2IfRHxWHZTWLT98Yh4IiIOLHEQfnj5yfeWib9F/6/PWmkW/8Ry/R/N/X/3iZ4z33+zfPybI6Ki/5MjjdTB4p2VfP6ttIGrOXYAAABwr8h/Bz5Jh26l03RoKP8d/l2xNZ2emZ179tTMB+cm8nXvgehNyydd/U3PQ0eKZ8NlfnRR/nDx3PiLni2N/ND4zPREp4OHLretYvxn/ujpdOuANdeGdTTgHmX8Q/eqpZ1uAdAJies/dDXjH7pXq/H/cWXpoa/XtDHAunL9h+61gvE/n3+rnhUA9ybXf+hexj90pcq/jU9X9Sf/6574p/h/hhulPfd/ItIN0Yz7P1Fb8T+zuItEvT8f/9k7m1qW6fQnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8GwAA//8pQeJ+") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x1804008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16m51.948311814s ago: executing program 4 (id=3988): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) 16m47.603024554s ago: executing program 4 (id=4007): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x2c, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2, 0x1, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 16m46.785367265s ago: executing program 33 (id=4007): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x2c, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2, 0x1, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) sendto$inet6(r0, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000200)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 16m17.666298321s ago: executing program 5 (id=4102): r0 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4) syz_emit_ethernet(0x295, &(0x7f0000001080)=ANY=[@ANYBLOB="0180c20000030180c200000086dd6000cd04025f3afffe8000000000000000000000000000bbff02"], 0x0) 16m17.248432271s ago: executing program 5 (id=4104): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) 16m16.608271167s ago: executing program 5 (id=4108): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f00000003c0)="6a2c74fc186a6595860567b327e55e634f1ca53953667b1be43bcf079296be8c07f6f09fb4c34022cc", 0x29, 0x4, &(0x7f0000000500)={0x11, 0x1c, r1, 0x1, 0x2, 0x6, @remote}, 0x14) 16m16.072088161s ago: executing program 5 (id=4111): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f00000001c0)=ANY=[], 0x1, 0x1e3, &(0x7f0000000840)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x390081f, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 16m14.893252391s ago: executing program 5 (id=4118): r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000}) close(r0) 16m13.967071574s ago: executing program 5 (id=4125): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x80c0) 16m12.904034581s ago: executing program 34 (id=4125): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x80c0) 6m4.200451017s ago: executing program 2 (id=7718): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000120000000000230000001800018014000200626f6e645f736c6176655f30000000000500020001"], 0x34}}, 0x0) 6m3.915623234s ago: executing program 2 (id=7719): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') pread64(r0, &(0x7f00000000c0)=""/191, 0xbf, 0x3) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1, 0x12c, 0x0) 6m3.546840153s ago: executing program 2 (id=7723): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800, &(0x7f0000000080)={[{@nouid32}, {@errors_remount}, {@grpjquota}, {@sysvgroups}, {@grpjquota}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000240)='./file1\x00', 0x0) 6m3.166525263s ago: executing program 2 (id=7725): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x3, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x12, 0x1c, 0x64, 0x0, 0x31, 0x2, 0x0, @local, @rand_addr=0x64010102}, {0x15, 0x40, 0x0, @multicast1}}}}}, 0x0) 6m2.876120981s ago: executing program 2 (id=7728): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 6m2.601510657s ago: executing program 2 (id=7730): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 5m47.106351728s ago: executing program 35 (id=7730): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 10.774960948s ago: executing program 0 (id=11074): r0 = socket$kcm(0x10, 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="24ec18603ffe52103ee01107d4fdf6aa393782ae8bf939b197b1a3637c403fef4744728331ccafda8dd3e77cd4b2a1f4218e881c26c4b3bbcb266de82549add918c0321aac88196a07f3969fd62bcacfa0d01db741daa34ec43daf47c86bc228cf2b14efb125cef7d3b4e5248b0e3055515e03b4", 0x74}], 0x1) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100ffc0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) 10.750473389s ago: executing program 0 (id=11075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e1d, 0x44, @dev={0xfe, 0x80, '\x00', 0x14}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2, 0x8}}}}]}]}, 0x6c}}, 0x0) 10.6902907s ago: executing program 0 (id=11076): madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r0 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 10.572931723s ago: executing program 0 (id=11078): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) 10.503766235s ago: executing program 0 (id=11079): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x4711, &(0x7f0000008f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 9.746738034s ago: executing program 0 (id=11083): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, &(0x7f0000000200)="c54c", 0x0, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x2f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 3.248177678s ago: executing program 6 (id=11127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 3.006616784s ago: executing program 6 (id=11128): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2b25fe80000000000000dc8b850f238466ccfc007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 2.77628227s ago: executing program 6 (id=11130): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) 2.604330094s ago: executing program 6 (id=11132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.832387514s ago: executing program 7 (id=11138): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 1.486895372s ago: executing program 7 (id=11140): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) 1.380924555s ago: executing program 6 (id=11141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1.303638747s ago: executing program 1 (id=11142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x28, r1, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 1.159953331s ago: executing program 6 (id=11143): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000240)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@inode64}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000024c0)={{}, {}, [], {}, [{0x8, 0x4}, {}, {0x8, 0x1}, {}, {0x8, 0x2}, {0x8, 0x1}, {0x8, 0x4}], {}, {0x20, 0x6}}, 0x5c, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x21) 1.120704922s ago: executing program 1 (id=11144): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000480)={0x6, @win={{0x9, 0x8001, 0xb, 0x4}, 0x0, 0x101, 0x0, 0x6, 0x0, 0x8}}) 1.042358394s ago: executing program 7 (id=11145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1b, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000055a60701000000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003001f008500000086000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010001008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 856.444308ms ago: executing program 1 (id=11146): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) 685.124893ms ago: executing program 7 (id=11147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 644.531574ms ago: executing program 1 (id=11148): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 343.558961ms ago: executing program 7 (id=11149): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 207.250055ms ago: executing program 1 (id=11150): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000001c0)) 16.94161ms ago: executing program 1 (id=11151): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0xc, @private2, 0xfffffffe}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x0, 0x0, @private2}}, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0xf7}, &(0x7f0000000040)=0x9c) 0s ago: executing program 7 (id=11152): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000640)={[{@uni_xlate}, {@shortname_win95}, {@shortname_win95}, {}, {@utf8}, {@uni_xlateno}, {@numtail}, {@utf8no}, {@fat=@showexec}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@fat=@check_strict}, {@shortname_winnt}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x7, 0x2a6, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) kernel console output (not intermixed with test programs): iled while replacing table [ 1469.719875][ T27] audit: type=1326 audit(2000000210.081:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28922 comm="syz.6.9274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1469.781858][T28933] [U] Õ [ 1469.972270][T28937] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9283'. [ 1469.996619][T28937] netlink: 40 bytes leftover after parsing attributes in process `syz.7.9283'. [ 1470.020651][T28942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9280'. [ 1470.050294][T28943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9282'. [ 1470.578127][T28959] loop7: detected capacity change from 0 to 4096 [ 1470.600318][T28964] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 1470.624449][T28964] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 1470.648065][T28966] netlink: 'syz.0.9294': attribute type 30 has an invalid length. [ 1470.692346][T28964] CUSE: unknown device info "Ýÿÿÿ" [ 1470.709592][T28964] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 1470.734995][T28964] CUSE: DEVNAME unspecified [ 1470.891911][T28959] ntfs3: loop7: ino=0, "file1" fallocate(0x10) is not supported [ 1471.219204][T28980] tipc: Started in network mode [ 1471.253891][T28980] tipc: Node identity 72ecb1d3fdf9, cluster identity 4711 [ 1471.275711][T28980] tipc: Enabled bearer , priority 10 [ 1471.569549][T28991] fuse: Unknown parameter '01777777777777777777777ÿÿÿÿÿÿÿÿ' [ 1472.404725][T25915] tipc: Node number set to 2400563667 [ 1473.975429][T29067] loop7: detected capacity change from 0 to 256 [ 1473.982919][T29067] exfat: Deprecated parameter 'utf8' [ 1474.023702][T29067] exfat: Deprecated parameter 'namecase' [ 1474.129013][T29067] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d) [ 1475.503869][ T27] audit: type=1326 audit(2000000216.272:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1475.561072][ T27] audit: type=1326 audit(2000000216.292:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1475.585286][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.638329][ T27] audit: type=1326 audit(2000000216.292:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1475.707331][ T27] audit: type=1326 audit(2000000216.262:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1475.731572][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.783552][ T27] audit: type=1326 audit(2000000216.292:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1475.873585][ T27] audit: type=1326 audit(2000000216.292:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1475.898648][ T27] audit: type=1326 audit(2000000216.292:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1475.989691][ T27] audit: type=1326 audit(2000000216.292:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1476.054847][ T27] audit: type=1326 audit(2000000216.292:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29120 comm="syz.6.9365" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1476.323322][ T27] audit: type=1326 audit(2000000217.082:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29142 comm="syz.7.9376" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03f19e019 code=0x7ffc0000 [ 1476.348780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1477.041404][T29133] loop6: detected capacity change from 0 to 40427 [ 1477.074872][T29133] F2FS-fs (loop6): invalid crc value [ 1477.108192][T29133] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1477.297781][T29133] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 1477.720848][T29187] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9397'. [ 1478.247910][T29200] program syz.7.9404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1479.212311][T29227] loop6: detected capacity change from 0 to 128 [ 1479.245758][T29227] affs: Error parsing options [ 1479.295546][T29231] loop7: detected capacity change from 0 to 1024 [ 1479.327323][T25306] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1479.855835][T29245] loop6: detected capacity change from 0 to 1024 [ 1479.954892][T29245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1480.023631][T29245] ext4 filesystem being mounted at /1189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1480.217853][T29257] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1480.267071][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1480.541404][T29267] netlink: 209844 bytes leftover after parsing attributes in process `syz.6.9430'. [ 1480.853326][ T1191] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1480.883637][T25915] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1481.043347][ T1191] usb 1-1: Using ep0 maxpacket: 32 [ 1481.051383][ T1191] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 1481.059979][ T1191] usb 1-1: config 0 has no interface number 0 [ 1481.073177][ T1191] usb 1-1: config 0 interface 12 has no altsetting 0 [ 1481.082959][ T1191] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1481.092637][ T1191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.093662][T25915] usb 2-1: Using ep0 maxpacket: 8 [ 1481.107336][ T1191] usb 1-1: Product: syz [ 1481.111569][ T1191] usb 1-1: Manufacturer: syz [ 1481.132375][ T1191] usb 1-1: SerialNumber: syz [ 1481.139999][T25915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1481.150076][ T1191] usb 1-1: config 0 descriptor?? [ 1481.174883][T25915] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1481.195656][T25915] usb 2-1: string descriptor 0 read error: -22 [ 1481.202201][T25915] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1481.217125][T25915] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1481.258540][T25915] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1481.271881][T29274] loop6: detected capacity change from 0 to 32768 [ 1481.300149][T25915] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1481.356397][T25915] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1481.378108][T25915] usb 2-1: media controller created [ 1481.446743][T25915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1481.476227][T29270] usb 2-1: dvb_usb_au6610: wlen=0, aborting [ 1481.539381][T29284] loop7: detected capacity change from 0 to 256 [ 1481.563675][T25915] zl10353_read_register: readreg error (reg=127, ret==0) [ 1481.606389][T29284] exfat: Deprecated parameter 'namecase' [ 1481.653664][T29284] exfat: Deprecated parameter 'namecase' [ 1481.659521][T29284] exfat: Deprecated parameter 'utf8' [ 1481.732405][T29284] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 1481.763427][T25915] usb 2-1: USB disconnect, device number 75 [ 1481.821934][ T1191] f81534 1-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 1481.861209][ T1191] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 1481.894008][ T1191] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1481.904269][ T1191] f81534: probe of 1-1:0.12 failed with error -71 [ 1481.912352][T29288] loop6: detected capacity change from 0 to 1024 [ 1481.939039][ T1191] usb 1-1: USB disconnect, device number 66 [ 1482.027299][T29288] hfsplus: bad catalog entry type [ 1482.133878][T21700] hfsplus: b-tree write err: -5, ino 25 [ 1482.139752][T21700] hfsplus: b-tree write err: -5, ino 4 [ 1482.173648][T21700] hfsplus: b-tree write err: -5, ino 2 [ 1482.656108][T29308] netlink: 4356 bytes leftover after parsing attributes in process `syz.7.9450'. [ 1484.862797][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.869815][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.227014][T26833] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1486.237826][T26833] CPU: 1 PID: 26833 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1486.245607][T26833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1486.255791][T26833] Workqueue: hci1 hci_rx_work [ 1486.260769][T26833] Call Trace: [ 1486.264108][T26833] [ 1486.267081][T26833] dump_stack_lvl+0x18c/0x250 [ 1486.271807][T26833] ? show_regs_print_info+0x20/0x20 [ 1486.277040][T26833] ? load_image+0x420/0x420 [ 1486.281597][T26833] sysfs_create_dir_ns+0x26e/0x2a0 [ 1486.286744][T26833] ? __lock_acquire+0x7d80/0x7d80 [ 1486.291804][T26833] ? sysfs_warn_dup+0xa0/0xa0 [ 1486.296564][T26833] ? do_raw_spin_unlock+0x121/0x230 [ 1486.301896][T26833] kobject_add_internal+0x617/0xc90 [ 1486.307145][T26833] kobject_add+0x164/0x240 [ 1486.311606][T26833] ? kobject_init+0x1d0/0x1d0 [ 1486.316332][T26833] ? get_device_parent+0x366/0x390 [ 1486.321514][T26833] device_add+0x3fa/0xc40 [ 1486.325885][T26833] hci_conn_add_sysfs+0xd5/0x1e0 [ 1486.330958][T26833] le_conn_complete_evt+0xe9f/0x1480 [ 1486.336287][T26833] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 1486.342591][T26833] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1486.348296][T26833] ? mutex_unlock+0x10/0x10 [ 1486.352844][T26833] ? skb_pull_data+0xf0/0x1f0 [ 1486.357575][T26833] hci_le_conn_complete_evt+0x187/0x440 [ 1486.363166][T26833] ? hci_remote_host_features_evt+0x150/0x150 [ 1486.369270][T26833] hci_event_packet+0x7b4/0x1280 [ 1486.374281][T26833] ? __lock_acquire+0x7d80/0x7d80 [ 1486.379337][T26833] ? lock_chain_count+0x20/0x20 [ 1486.384227][T26833] ? bis_list+0x290/0x290 [ 1486.388601][T26833] ? lockdep_hardirqs_on+0x98/0x150 [ 1486.393873][T26833] ? hci_send_to_monitor+0xd7/0x4f0 [ 1486.399123][T26833] hci_rx_work+0x43a/0xd60 [ 1486.403581][T26833] ? process_scheduled_works+0x975/0x1600 [ 1486.409337][T26833] process_scheduled_works+0xa60/0x1600 [ 1486.414946][T26833] ? worker_attach_to_pool+0x370/0x370 [ 1486.420448][T26833] ? assign_work+0x3cc/0x5d0 [ 1486.425082][T26833] worker_thread+0xa5e/0xfe0 [ 1486.429718][T26833] ? _raw_spin_unlock+0x40/0x40 [ 1486.434604][T26833] ? __kthread_parkme+0x71/0x1c0 [ 1486.439582][T26833] kthread+0x2fa/0x390 [ 1486.443681][T26833] ? pr_cont_work+0x550/0x550 [ 1486.448402][T26833] ? kthread_blkcg+0xd0/0xd0 [ 1486.453053][T26833] ret_from_fork+0x48/0x80 [ 1486.457531][T26833] ? kthread_blkcg+0xd0/0xd0 [ 1486.462161][T26833] ret_from_fork_asm+0x11/0x20 [ 1486.466980][T26833] [ 1486.473710][T26833] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1486.488003][T26833] Bluetooth: hci1: failed to register connection device [ 1486.498045][T26833] Bluetooth: hci1: link tx timeout [ 1491.268882][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1491.268899][ T27] audit: type=1326 audit(2000000232.033:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1491.309793][T26833] Bluetooth: Wrong link type (-71) [ 1491.319843][T26833] Bluetooth: hci1: link tx timeout [ 1491.436605][ T27] audit: type=1326 audit(2000000232.063:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1491.472969][T29532] netlink: 'syz.1.9556': attribute type 10 has an invalid length. [ 1491.509534][T29532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1491.543418][ T27] audit: type=1326 audit(2000000232.083:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3d75d9e019 code=0x7ffc0000 [ 1491.568911][T29532] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1491.615337][ T27] audit: type=1326 audit(2000000232.083:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d75d9dd82 code=0x7ffc0000 [ 1491.623490][T29533] netlink: 'syz.1.9556': attribute type 10 has an invalid length. [ 1491.672323][T29533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9556'. [ 1491.702294][T29533] batadv0: entered promiscuous mode [ 1491.713818][T29533] batadv0: entered allmulticast mode [ 1491.741921][ T27] audit: type=1326 audit(2000000232.503:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d75d5e84e code=0x7ffc0000 [ 1491.744408][T29533] bond0: (slave batadv0): Releasing backup interface [ 1491.829859][T29533] bridge0: port 4(batadv0) entered blocking state [ 1491.853043][T29533] bridge0: port 4(batadv0) entered disabled state [ 1492.159800][T21700] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1492.170456][T21700] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1492.339544][ T27] audit: type=1326 audit(2000000233.103:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f3d75d9de47 code=0x7ffc0000 [ 1492.402703][T29527] loop6: detected capacity change from 0 to 32768 [ 1492.409344][ T27] audit: type=1326 audit(2000000233.163:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d75d5e84e code=0x7ffc0000 [ 1492.503409][ T27] audit: type=1326 audit(2000000233.163:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d75d9dcab code=0x7ffc0000 [ 1492.505639][T29527] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1492.605187][ T27] audit: type=1326 audit(2000000233.213:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3d75d5e84e code=0x7ffc0000 [ 1492.656542][ T27] audit: type=1326 audit(2000000233.213:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29525 comm="syz.6.9554" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3d75d5e84e code=0x7ffc0000 [ 1492.787377][T29527] XFS (loop6): Ending clean mount [ 1492.907182][T29563] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9561'. [ 1492.952248][T29563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9561'. [ 1493.046799][T15786] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1493.746962][T29581] loop6: detected capacity change from 0 to 64 [ 1494.331157][T29597] loop7: detected capacity change from 0 to 1764 [ 1494.368943][T29597] iso9660: Corrupted directory entry in block 0 of inode 1920 [ 1495.501146][T29616] loop7: detected capacity change from 0 to 40427 [ 1495.522440][T29616] F2FS-fs (loop7): Corrupted extension count (64 + 1 > 64) [ 1495.570529][T29616] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1495.613823][T29616] F2FS-fs (loop7): Image doesn't support compression [ 1495.620613][T29616] F2FS-fs (loop7): Image doesn't support compression [ 1495.673753][T29616] F2FS-fs (loop7): invalid crc value [ 1496.033715][T29616] F2FS-fs (loop7): Start checkpoint disabled! [ 1496.150503][T29616] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1496.166421][T29616] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1496.280954][T29616] F2FS-fs (loop7): Inconsistent segment (8) type [1, 0] in SIT and SSA [ 1496.332621][T29616] F2FS-fs (loop7): Stopped filesystem due to reason: 4 [ 1496.758984][T29641] loop6: detected capacity change from 0 to 40427 [ 1496.847633][T29641] F2FS-fs (loop6): invalid crc value [ 1496.869533][T29641] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1496.932421][T21090] Bluetooth: hci3: command 0x0406 tx timeout [ 1497.054284][T29641] F2FS-fs (loop6): Start checkpoint disabled! [ 1497.174041][T29641] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1497.378970][T29676] loop7: detected capacity change from 0 to 512 [ 1497.414876][T29676] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1497.492982][T29676] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1497.532559][T29676] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.9608: corrupted in-inode xattr: e_value size too large [ 1497.613781][T29676] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.9608: couldn't read orphan inode 15 (err -117) [ 1497.634375][T29676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1497.637297][ T4499] kworker/u4:10: attempt to access beyond end of device [ 1497.637297][ T4499] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1497.711754][ T4499] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1497.734768][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1497.751627][ T4499] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1498.470492][T29698] netlink: 88 bytes leftover after parsing attributes in process `syz.0.9617'. [ 1498.858315][T29689] loop7: detected capacity change from 0 to 32768 [ 1498.899512][T29689] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1499.243279][T25118] ocfs2: Unmounting device (7,7) on (node local) [ 1499.799042][T29731] netlink: 'syz.6.9632': attribute type 30 has an invalid length. [ 1502.193780][T25915] kernel write not supported for file /5232/attr/keycreate (pid: 25915 comm: kworker/0:6) [ 1502.357453][T29808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1502.380342][T29808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9669'. [ 1502.739070][ T27] kauditd_printk_skb: 12 callbacks suppressed [ 1502.739097][ T27] audit: type=1326 audit(2000000243.503:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29822 comm="syz.0.9676" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8b0859e019 code=0x0 [ 1503.169446][T29824] loop7: detected capacity change from 0 to 32768 [ 1503.198627][T29824] JBD2: Ignoring recovery information on journal [ 1503.235348][T29824] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1503.437818][T25118] ocfs2: Unmounting device (7,7) on (node local) [ 1503.486881][T29833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9682'. [ 1503.497278][T29833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9682'. [ 1504.786898][T29868] loop6: detected capacity change from 0 to 32768 [ 1504.812268][T29868] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.9696 (29868) [ 1504.833462][T29868] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1504.844144][T29868] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1504.854083][T29868] BTRFS info (device loop6): setting nodatasum [ 1504.860411][T29868] BTRFS info (device loop6): force zlib compression, level 3 [ 1504.868711][T29868] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1504.879641][T29868] BTRFS info (device loop6): use lzo compression, level 0 [ 1504.887185][T29868] BTRFS info (device loop6): turning on flush-on-commit [ 1504.894797][T29868] BTRFS info (device loop6): enabling auto defrag [ 1504.901415][T29868] BTRFS info (device loop6): max_inline at 4096 [ 1504.908569][T29868] BTRFS info (device loop6): using free space tree [ 1505.132061][T29868] BTRFS info (device loop6): enabling ssd optimizations [ 1505.407640][T15786] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1505.936281][T29907] loop6: detected capacity change from 0 to 128 [ 1506.033981][ T27] audit: type=1800 audit(2000000246.783:491): pid=29907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9702" name="file2" dev="loop6" ino=1048884 res=0 errno=0 [ 1506.085855][T29907] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 1506.097694][T29907] FAT-fs (loop6): Filesystem has been set read-only [ 1506.126817][T29907] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 1506.165010][T29907] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000f0b) [ 1506.291985][T21090] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1506.292861][T26833] Bluetooth: hci4: command 0x1003 tx timeout [ 1506.754750][T29920] loop7: detected capacity change from 0 to 4096 [ 1506.818481][T29923] xfrm0: entered allmulticast mode [ 1506.839076][T29923] team0: Device xfrm0 is of different type [ 1506.846592][T29924] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1507.398234][T29933] mtd partition "ss_mixer" doesn't have enough space: 0x20003 < 0x7261632f646e756f, disabled [ 1507.443802][T29933] ftl_cs: FTL header not found. [ 1508.640404][T29961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9731'. [ 1510.528118][ T27] audit: type=1326 audit(2000000251.284:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.570090][ T27] audit: type=1326 audit(2000000251.284:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.601594][ T27] audit: type=1326 audit(2000000251.294:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.632582][ T27] audit: type=1326 audit(2000000251.294:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.662577][ T27] audit: type=1326 audit(2000000251.294:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.688222][ T27] audit: type=1326 audit(2000000251.304:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.721933][ T27] audit: type=1326 audit(2000000251.304:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.747997][ T27] audit: type=1326 audit(2000000251.304:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.777181][ T27] audit: type=1326 audit(2000000251.304:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.802597][ T27] audit: type=1326 audit(2000000251.304:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30001 comm="syz.1.9761" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1510.871916][T25915] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1511.051641][T25915] usb 1-1: Using ep0 maxpacket: 16 [ 1511.059517][T25915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.070762][T25915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.081224][T25915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1511.094519][T25915] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1511.104174][T25915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.115159][T25915] usb 1-1: config 0 descriptor?? [ 1511.545284][T25915] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0055/input/input60 [ 1511.637617][T25915] microsoft 0003:045E:07DA.0055: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1511.771212][T25915] usb 1-1: USB disconnect, device number 67 [ 1512.366697][T30010] program syz.0.9754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1512.631938][T25915] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1512.770823][T30013] loop6: detected capacity change from 0 to 8192 [ 1512.830670][T30013] loop6: p1 < > p3 p4 < > [ 1512.842233][T30013] loop6: p3 size 218103808 extends beyond EOD, truncated [ 1512.855024][T25915] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1512.874023][T25915] usb 2-1: config 0 has no interface number 0 [ 1512.880432][T25915] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1512.894963][T25915] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1512.907749][T25915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.918977][T25915] usb 2-1: Product: syz [ 1512.927807][T25915] usb 2-1: Manufacturer: syz [ 1512.936355][T25915] usb 2-1: SerialNumber: syz [ 1512.958189][T25915] usb 2-1: config 0 descriptor?? [ 1513.077322][T25306] udevd[25306]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 1513.095109][T25318] udevd[25318]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1513.097976][T25452] udevd[25452]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1513.581457][T25915] CoreChips: probe of 2-1:0.41 failed with error -71 [ 1513.599643][T25915] usb 2-1: USB disconnect, device number 76 [ 1515.596232][T30072] netlink: 'syz.1.9784': attribute type 1 has an invalid length. [ 1516.745934][T30097] vivid-000: ================= START STATUS ================= [ 1516.775316][T30097] vivid-000: Radio HW Seek Mode: Bounded [ 1516.811189][T30097] vivid-000: Radio Programmable HW Seek: false [ 1516.817458][T30097] vivid-000: RDS Rx I/O Mode: Block I/O [ 1516.842579][T30097] vivid-000: Generate RBDS Instead of RDS: false [ 1516.849023][T30097] vivid-000: RDS Reception: true [ 1516.871780][T30097] vivid-000: RDS Program Type: 0 inactive [ 1516.877635][T30097] vivid-000: RDS PS Name: inactive [ 1516.899154][T30097] vivid-000: RDS Radio Text: inactive [ 1516.909610][T30097] vivid-000: RDS Traffic Announcement: false inactive [ 1516.917407][T30097] vivid-000: RDS Traffic Program: false inactive [ 1516.924646][T30097] vivid-000: RDS Music: false inactive [ 1516.930576][T30097] vivid-000: ================== END STATUS ================== [ 1517.161657][T25915] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1517.351249][T25915] usb 2-1: Using ep0 maxpacket: 32 [ 1517.364511][T25915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 125, changing to 10 [ 1517.391103][T25915] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1517.421137][T25915] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 1517.430265][T25915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.453705][T25915] usb 2-1: config 0 descriptor?? [ 1517.901274][T25915] chicony 0003:04F2:1236.0056: collection stack underflow [ 1517.908590][T25915] chicony 0003:04F2:1236.0056: item 0 4 0 12 parsing failed [ 1517.922895][T25915] chicony 0003:04F2:1236.0056: Chicony hid parse failed: -22 [ 1517.930619][T25915] chicony: probe of 0003:04F2:1236.0056 failed with error -22 [ 1517.938012][T30110] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1517.945384][T30110] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1517.955768][T30110] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 1517.965525][T30110] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1517.985671][T30110] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1517.993772][T30110] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1518.000820][T30110] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1518.007618][T30110] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1518.032798][T30110] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1518.039388][T30110] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1518.062637][T30110] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1518.069179][T30110] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1518.101288][T30110] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 1518.107969][T30110] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 1518.135883][T30112] loop6: detected capacity change from 0 to 512 [ 1518.145962][T25915] usb 2-1: USB disconnect, device number 77 [ 1518.171651][T30110] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1518.187297][T30110] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1518.194000][T30110] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1518.203089][T30110] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 1518.222142][T30112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.222381][T30112] ext4 filesystem being mounted at /1251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1518.294550][T30112] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.9806: corrupted inode contents [ 1518.311327][T30112] EXT4-fs error (device loop6): ext4_dirty_inode:6144: inode #2: comm syz.6.9806: mark_inode_dirty error [ 1518.334112][T30112] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.9806: corrupted inode contents [ 1518.374573][T30116] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.9806: corrupted inode contents [ 1518.421088][T30116] EXT4-fs error (device loop6): ext4_dirty_inode:6144: inode #2: comm syz.6.9806: mark_inode_dirty error [ 1518.442910][T30116] EXT4-fs error (device loop6): ext4_do_update_inode:5256: inode #2: comm syz.6.9806: corrupted inode contents [ 1518.503802][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.938597][T30132] sp0: Synchronizing with TNC [ 1520.173332][T30141] mtd partition "ss_mixer" doesn't have enough space: 0x20003 < 0x7261632f646e756f, disabled [ 1520.207538][T30141] ftl_cs: FTL header not found. [ 1520.320175][T10899] Bluetooth: hci4: Frame reassembly failed (-84) [ 1520.649293][T30155] vivid-002: disconnect [ 1520.659754][T30154] vivid-002: reconnect [ 1520.749447][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1520.749464][ T27] audit: type=1326 audit(2000000261.504:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.9825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1520.811305][T23352] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1520.821651][ T27] audit: type=1326 audit(2000000261.504:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.9825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1520.876340][ T27] audit: type=1326 audit(2000000261.544:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.9825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1520.900756][ T27] audit: type=1326 audit(2000000261.544:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.9825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1520.931930][ T27] audit: type=1326 audit(2000000261.544:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.9825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1520.964800][ T27] audit: type=1326 audit(2000000261.544:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.9825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1520.989644][ T27] audit: type=1326 audit(2000000261.544:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.9825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1521.025118][ T27] audit: type=1326 audit(2000000261.544:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30156 comm="syz.1.9825" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1521.072904][T23352] usb 1-1: Using ep0 maxpacket: 32 [ 1521.085690][T23352] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 1521.097103][T23352] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1521.106674][T23352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.114848][T23352] usb 1-1: Product: syz [ 1521.119053][T23352] usb 1-1: Manufacturer: syz [ 1521.123822][T23352] usb 1-1: SerialNumber: syz [ 1521.132224][T23352] usb 1-1: config 0 descriptor?? [ 1521.141545][T23352] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1521.149645][T23352] dvb-usb: bulk message failed: -22 (2/0) [ 1521.159144][T23352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1521.170001][T23352] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1521.178731][T23352] usb 1-1: media controller created [ 1521.203640][T23352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1521.225102][T23352] usb 1-1: selecting invalid altsetting 7 [ 1521.231460][T23352] cxusb: set interface failed [ 1521.236191][T23352] dvb-usb: bulk message failed: -22 (1/0) [ 1521.276284][T23352] DVB: Unable to find symbol lgdt330x_attach() [ 1521.282899][T23352] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1521.344375][T30153] dvb-usb: bulk message failed: -22 (3/0) [ 1521.363882][T23352] rc_core: IR keymap rc-dvico-portable not found [ 1521.370263][T23352] Registered IR keymap rc-empty [ 1521.377132][T23352] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1521.389495][T23352] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input61 [ 1521.406705][T23352] dvb-usb: schedule remote query interval to 100 msecs. [ 1521.414086][T23352] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1521.428035][T23352] usb 1-1: USB disconnect, device number 68 [ 1521.463259][T23352] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1521.983296][T30169] loop6: detected capacity change from 0 to 512 [ 1522.063916][T30169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1522.093809][T30169] ext4 filesystem being mounted at /1258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1522.126336][T30169] EXT4-fs error (device loop6): ext4_empty_dir:3145: inode #12: block 32: comm syz.6.9835: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1522.167743][T30169] EXT4-fs warning (device loop6): ext4_empty_dir:3147: inode #12: comm syz.6.9835: directory missing '.' [ 1522.235318][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.371503][T21090] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1522.372416][T26833] Bluetooth: hci4: command 0x1003 tx timeout [ 1523.043939][T30190] netlink: 'syz.6.9832': attribute type 10 has an invalid length. [ 1523.094393][T30190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.133715][T30190] batadv0: entered allmulticast mode [ 1523.182210][T30190] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1523.211325][T30191] netlink: 'syz.6.9832': attribute type 10 has an invalid length. [ 1523.281144][T30191] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9832'. [ 1523.320914][T30191] batadv0: entered promiscuous mode [ 1523.371922][T30191] bond0: (slave batadv0): Releasing backup interface [ 1523.443108][T30191] bridge0: port 3(batadv0) entered blocking state [ 1523.473582][T30191] bridge0: port 3(batadv0) entered disabled state [ 1523.652614][ T42] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1523.662145][ T42] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1523.858036][T30185] loop7: detected capacity change from 0 to 40427 [ 1523.888497][T30185] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1523.914784][T30185] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1523.936204][T30185] F2FS-fs (loop7): invalid crc value [ 1523.990276][T30185] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1524.089039][T30185] F2FS-fs (loop7): Start checkpoint disabled! [ 1524.119793][T30185] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1524.127794][T30185] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1524.275772][T30185] syz.7.9831: attempt to access beyond end of device [ 1524.275772][T30185] loop7: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 1524.503806][T30216] loop6: detected capacity change from 0 to 2048 [ 1524.590751][T30216] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1524.654460][ T27] audit: type=1800 audit(2000000265.404:514): pid=30216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9843" name="bus" dev="loop6" ino=1367 res=0 errno=0 [ 1524.738214][T10901] kworker/u4:9: attempt to access beyond end of device [ 1524.738214][T10901] loop7: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1524.790953][T10901] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1524.797922][T10901] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1524.821105][T10901] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1524.828296][T10901] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1526.219280][T30250] veth1_macvtap: left promiscuous mode [ 1526.237617][T30250] macsec0: entered allmulticast mode [ 1526.273770][T30251] veth1_macvtap: entered promiscuous mode [ 1526.279574][T30251] veth1_macvtap: entered allmulticast mode [ 1526.360642][T30251] macsec0: left allmulticast mode [ 1526.365770][T30251] veth1_macvtap: left allmulticast mode [ 1526.530291][T30234] loop6: detected capacity change from 0 to 40427 [ 1526.555478][T30234] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1526.571418][T30234] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1526.583339][T30234] F2FS-fs (loop6): invalid crc value [ 1526.637179][T30234] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1526.837614][T30234] F2FS-fs (loop6): Start checkpoint disabled! [ 1526.892772][T30234] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 1526.910134][T30234] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 1527.005300][T30234] syz.6.9854: attempt to access beyond end of device [ 1527.005300][T30234] loop6: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 1527.254598][T10901] kworker/u4:9: attempt to access beyond end of device [ 1527.254598][T10901] loop6: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1527.277796][T10901] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1527.296169][T10901] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1527.312182][T10901] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1527.319390][T10901] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1527.644271][T30272] comedi comedi3: 8255: I/O port conflict (0xffffffff80002002,4) [ 1527.661876][T30272] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 1527.669428][T30272] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1528.460736][T30292] sp0: Synchronizing with TNC [ 1529.734295][T30314] loop6: detected capacity change from 0 to 32768 [ 1529.800560][ T27] audit: type=1800 audit(2000000270.555:515): pid=30314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9886" name="file1" dev="loop6" ino=4 res=0 errno=0 [ 1530.298485][T30330] loop7: detected capacity change from 0 to 256 [ 1530.688614][T21090] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 1531.080774][T23352] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1531.166142][T30350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9906'. [ 1531.297652][T23352] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1531.322520][T23352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.336022][T23352] usb 1-1: Product: syz [ 1531.344826][T23352] usb 1-1: Manufacturer: syz [ 1531.349589][T23352] usb 1-1: SerialNumber: syz [ 1531.364729][T23352] usb 1-1: config 0 descriptor?? [ 1531.379757][T23352] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1531.401718][T23352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1531.424295][T23352] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1531.437755][T23352] usb 1-1: media controller created [ 1531.475225][T23352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1531.580590][T23352] DVB: Unable to find symbol mt352_attach() [ 1531.675747][T23352] DVB: Unable to find symbol nxt6000_attach() [ 1531.682384][T23352] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1531.702421][T23352] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input62 [ 1531.728211][T23352] dvb-usb: schedule remote query interval to 1000 msecs. [ 1531.744436][T23352] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1531.764041][T23352] dvb-usb: bulk message failed: -22 (7/0) [ 1531.775370][T23352] dvb-usb: bulk message failed: -22 (7/0) [ 1531.816244][T23352] usb 1-1: USB disconnect, device number 69 [ 1531.971770][T23352] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1533.059916][ T9] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1533.253736][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1533.268998][ T9] usb 2-1: config 0 has no interface number 0 [ 1533.289855][ T9] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1533.317714][ T9] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.339333][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1533.353202][ T9] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 1533.372893][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.398269][ T9] usb 2-1: config 0 descriptor?? [ 1534.047231][ T9] uclogic 0003:2179:0053.0057: failed retrieving string descriptor #100: -71 [ 1534.072212][ T9] uclogic 0003:2179:0053.0057: failed retrieving pen parameters: -71 [ 1534.081617][ T9] uclogic 0003:2179:0053.0057: pen probing failed: -71 [ 1534.088554][ T9] uclogic 0003:2179:0053.0057: failed probing parameters: -71 [ 1534.106436][ T9] uclogic: probe of 0003:2179:0053.0057 failed with error -71 [ 1534.136170][ T9] usb 2-1: USB disconnect, device number 78 [ 1534.942155][T30408] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1535.420754][T30418] netlink: 'syz.0.9938': attribute type 8 has an invalid length. [ 1537.603677][T30477] tipc: Invalid UDP bearer configuration [ 1537.603739][T30477] tipc: Enabling of bearer rejected, failed to enable media [ 1537.841980][T30483] loop6: detected capacity change from 0 to 512 [ 1537.862599][T30483] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1537.907280][T30483] EXT4-fs (loop6): 1 truncate cleaned up [ 1537.921885][T30483] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1537.970598][T14706] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1538.037481][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1538.176133][T14706] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1538.195659][T14706] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1538.220457][T14706] usb 1-1: config 220 has no interface number 2 [ 1538.236688][T14706] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1538.261062][T14706] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1538.278227][T14706] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1538.290100][T14706] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1538.308648][T14706] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1538.319531][T14706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1538.339003][T14706] usb 1-1: Product: syz [ 1538.349954][T14706] usb 1-1: Manufacturer: syz [ 1538.354639][T14706] usb 1-1: SerialNumber: syz [ 1538.597521][T14706] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1538.604439][T14706] usb 1-1: No valid video chain found. [ 1538.610645][T14706] usb 1-1: selecting invalid altsetting 0 [ 1538.636254][T14706] usb 1-1: selecting invalid altsetting 0 [ 1538.642477][T14706] usbtest: probe of 1-1:220.1 failed with error -22 [ 1538.656826][T14706] usb 1-1: USB disconnect, device number 70 [ 1540.240356][ T9] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 1540.434120][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1540.451008][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.466931][ T9] usb 1-1: config 0 descriptor?? [ 1540.497381][T30503] loop7: detected capacity change from 0 to 32768 [ 1540.545847][T30503] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1540.610985][T30503] XFS (loop7): Ending clean mount [ 1540.736708][T25118] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1540.914498][ T9] koneplus 0003:1E7D:2E22.0058: unknown main item tag 0x0 [ 1540.933733][ T9] koneplus 0003:1E7D:2E22.0058: unknown main item tag 0x0 [ 1540.985346][ T9] koneplus 0003:1E7D:2E22.0058: unknown main item tag 0x0 [ 1541.039938][ T9] koneplus 0003:1E7D:2E22.0058: unknown main item tag 0x0 [ 1541.049204][ T9] koneplus 0003:1E7D:2E22.0058: unknown main item tag 0x0 [ 1541.057966][ T9] koneplus 0003:1E7D:2E22.0058: unknown main item tag 0x0 [ 1541.065765][ T9] koneplus 0003:1E7D:2E22.0058: unknown main item tag 0x0 [ 1541.076610][ T9] koneplus 0003:1E7D:2E22.0058: unknown main item tag 0x0 [ 1541.099265][ T9] koneplus 0003:1E7D:2E22.0058: hidraw0: USB HID vef.fd Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 1541.162407][ T9] usb 1-1: USB disconnect, device number 71 [ 1541.299126][T30522] fido_id[30522]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1542.186640][T30552] program syz.0.9994 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1542.643790][T30564] scsi_nl_rcv_msg: discarding partial skb [ 1542.810257][ T27] audit: type=1400 audit(2000000283.565:516): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F2602 pid=30566 comm="syz.1.10000" [ 1542.838420][T30567] tipc: Invalid UDP bearer configuration [ 1542.838478][T30567] tipc: Enabling of bearer rejected, failed to enable media [ 1542.937916][T30559] loop6: detected capacity change from 0 to 32768 [ 1542.980603][T30559] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.9997 (30559) [ 1543.033088][T30559] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1543.060377][T30559] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 1543.069199][T30559] BTRFS info (device loop6): setting nodatasum [ 1543.088550][T30559] BTRFS info (device loop6): force zlib compression, level 3 [ 1543.133754][T30559] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1543.170014][T30559] BTRFS info (device loop6): use lzo compression, level 0 [ 1543.177261][T30559] BTRFS info (device loop6): turning on flush-on-commit [ 1543.217157][T30559] BTRFS info (device loop6): enabling auto defrag [ 1543.235024][T30559] BTRFS info (device loop6): max_inline at 4096 [ 1543.249786][T30559] BTRFS info (device loop6): using free space tree [ 1543.337706][T30559] BTRFS info (device loop6): enabling ssd optimizations [ 1543.524388][ T27] audit: type=1800 audit(2000000284.285:517): pid=30559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9997" name="file1" dev="loop6" ino=260 res=0 errno=0 [ 1543.617918][T15786] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1543.724710][ T9] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1543.814023][T25306] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop6 scanned by udevd (25306) [ 1543.950063][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1543.983191][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.007174][ T9] usb 2-1: probing VID:PID(0424:012C) [ 1544.018396][ T9] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 1544.045760][ T9] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1544.056410][ T9] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 1544.066013][ T9] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1544.084995][ T9] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1544.394999][T30602] Bluetooth: MGMT ver 1.22 [ 1545.219989][ T5763] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1545.233859][T30613] loop6: detected capacity change from 0 to 32768 [ 1545.254545][ T9] vub300: probe of 2-1:1.0 failed with error -110 [ 1545.280662][T30613] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1545.398763][T30613] XFS (loop6): Ending clean mount [ 1545.441283][ T9] usb 2-1: USB disconnect, device number 79 [ 1545.449659][ T5763] usb 1-1: Using ep0 maxpacket: 16 [ 1545.457166][ T5763] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1545.479320][ T5763] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 1545.500591][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.541917][ T5763] usb 1-1: config 0 descriptor?? [ 1545.585146][T15786] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1545.896841][T30634] loop7: detected capacity change from 0 to 1024 [ 1545.925041][T30634] EXT4-fs: Ignoring removed orlov option [ 1545.939896][T30634] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1545.971433][ T5763] lenovo 0003:17EF:60B5.0059: unknown main item tag 0x1 [ 1545.982493][ T5763] lenovo 0003:17EF:60B5.0059: ignoring exceeding usage max [ 1545.995059][ T5763] lenovo 0003:17EF:60B5.0059: ignoring exceeding usage max [ 1546.030399][T30634] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1546.043637][ T5763] lenovo 0003:17EF:60B5.0059: hidraw0: USB HID v0.81 Device [HID 17ef:60b5] on usb-dummy_hcd.0-1/input0 [ 1546.195421][ T5763] usb 1-1: USB disconnect, device number 72 [ 1546.302170][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.308570][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.345358][T30639] fido_id[30639]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1546.371705][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1546.459529][T21090] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1546.472014][T21090] Bluetooth: hci2: command 0x0406 tx timeout [ 1547.007715][T30661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1547.355612][T30657] loop7: detected capacity change from 0 to 32768 [ 1547.374392][T30657] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 1547.390110][ T1191] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1547.474559][T25306] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 10 [ 1547.589906][ T1191] usb 2-1: Using ep0 maxpacket: 8 [ 1547.599028][ T1191] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1547.607079][ T5763] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1547.624987][ T1191] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1547.636995][ T1191] usb 2-1: string descriptor 0 read error: -22 [ 1547.643870][ T1191] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1547.653629][ T1191] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1547.676573][ T1191] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1547.695554][ T1191] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1547.709014][ T1191] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1547.717399][ T1191] usb 2-1: media controller created [ 1547.765527][ T1191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1547.819518][ T5763] usb 1-1: Using ep0 maxpacket: 32 [ 1547.826945][ T5763] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1547.840760][ T5763] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1547.847498][ T5763] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1547.857573][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.871260][ T5763] usb 1-1: config 0 descriptor?? [ 1548.308178][ T5763] dragonrise 0003:0079:0011.005A: unknown main item tag 0x0 [ 1548.316242][ T5763] dragonrise 0003:0079:0011.005A: unknown main item tag 0x0 [ 1548.326286][ T5763] dragonrise 0003:0079:0011.005A: report_id 0 is invalid [ 1548.333489][ T5763] dragonrise 0003:0079:0011.005A: item 0 2 1 8 parsing failed [ 1548.342881][ T5763] dragonrise 0003:0079:0011.005A: parse failed [ 1548.349192][ T5763] dragonrise: probe of 0003:0079:0011.005A failed with error -22 [ 1548.534774][ T9] usb 1-1: USB disconnect, device number 73 [ 1548.864901][ T1191] zl10353_read_register: readreg error (reg=127, ret==0) [ 1548.911853][ T1191] usb 2-1: USB disconnect, device number 80 [ 1549.361794][T30683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10040'. [ 1549.453037][T30685] loop6: detected capacity change from 0 to 256 [ 1549.497373][T30685] exfat: Deprecated parameter 'namecase' [ 1549.523514][T30685] exfat: Deprecated parameter 'namecase' [ 1549.561048][T30685] exfat: Deprecated parameter 'namecase' [ 1549.641840][T30685] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd6f0c8a0, utbl_chksum : 0xe619d30d) [ 1550.079890][T30681] loop7: detected capacity change from 0 to 40427 [ 1550.119759][T30681] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1550.148074][T30681] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1550.180407][T30681] F2FS-fs (loop7): invalid crc value [ 1550.451954][T30681] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1550.469665][T30681] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1550.649747][T30681] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix. [ 1551.182247][T30713] loop6: detected capacity change from 0 to 4096 [ 1551.256950][T30714] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1551.291234][T30713] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1551.327667][T30713] NILFS (loop6): mounting fs with errors [ 1551.847867][T30720] loop7: detected capacity change from 0 to 4096 [ 1552.309243][ T5763] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1552.519275][ T5763] usb 2-1: Using ep0 maxpacket: 16 [ 1552.526460][ T5763] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 1552.539403][ T5763] usb 2-1: config 0 has no interface number 0 [ 1552.556038][ T5763] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1552.588029][ T5763] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1552.615605][ T5763] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1552.635165][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1552.655248][ T5763] usb 2-1: Product: syz [ 1552.665151][ T5763] usb 2-1: SerialNumber: syz [ 1552.682216][ T5763] usb 2-1: config 0 descriptor?? [ 1552.691821][ T5763] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 1552.730524][ T5763] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input63 [ 1552.987205][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1552.998000][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.005376][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.012915][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.020518][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.027857][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.035084][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.042657][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.053974][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.069502][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1553.087602][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1553.096737][ T5763] usb 2-1: USB disconnect, device number 81 [ 1553.134766][T30748] loop6: detected capacity change from 0 to 1024 [ 1553.175256][ T5763] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1553.184617][T30748] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1553.197260][T30734] loop7: detected capacity change from 0 to 32768 [ 1553.230685][T30734] (syz.7.10062,30734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1553.248338][T30734] (syz.7.10062,30734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1553.280557][T30748] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 2: comm syz.6.10069: lblock 2 mapped to illegal pblock 2 (length 1) [ 1553.303941][T30734] JBD2: Ignoring recovery information on journal [ 1553.324904][T30748] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1553.333939][T23352] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1553.346889][T30748] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.10069: lblock 0 mapped to illegal pblock 48 (length 1) [ 1553.374462][T30748] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1553.383760][T30748] EXT4-fs error (device loop6): ext4_acquire_dquot:6953: comm syz.6.10069: Failed to acquire dquot type 0 [ 1553.398324][T30748] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 1553.410616][T30748] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.10069: mark_inode_dirty error [ 1553.411408][T30734] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1553.441455][T30748] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1553.457525][T30748] EXT4-fs (loop6): 1 orphan inode deleted [ 1553.465192][T30748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1553.485170][ T42] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1553.521753][ T42] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1553.539265][ T42] EXT4-fs error (device loop6): ext4_release_dquot:6989: comm kworker/u4:2: Failed to release dquot type 0 [ 1553.557666][T23352] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.597118][T23352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1553.629360][T23352] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 1553.656623][T23352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.684456][T30748] EXT4-fs: Ignoring removed bh option [ 1553.692207][T23352] usb 1-1: config 0 descriptor?? [ 1553.723962][T30748] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 1553.797032][T25118] ocfs2: Unmounting device (7,7) on (node local) [ 1553.806387][T30748] EXT4-fs error (device loop6): ext4_map_blocks:610: inode #3: block 48: comm syz.6.10069: lblock 0 mapped to illegal pblock 48 (length 1) [ 1553.850205][T30748] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 1553.911174][T30754] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10071'. [ 1553.968050][T30754] vlan3: entered allmulticast mode [ 1553.986568][T30754] gretap0: entered allmulticast mode [ 1553.997147][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.137203][T23352] wacom 0003:056A:0333.005B: unknown main item tag 0x0 [ 1554.169303][T23352] wacom 0003:056A:0333.005B: unknown main item tag 0x0 [ 1554.176308][T23352] wacom 0003:056A:0333.005B: unknown main item tag 0x0 [ 1554.195497][T23352] wacom 0003:056A:0333.005B: unknown main item tag 0x0 [ 1554.219529][T23352] wacom 0003:056A:0333.005B: unknown main item tag 0x0 [ 1554.226513][T23352] wacom 0003:056A:0333.005B: unknown main item tag 0x0 [ 1554.279097][T23352] wacom 0003:056A:0333.005B: unknown main item tag 0x0 [ 1554.319861][T23352] wacom 0003:056A:0333.005B: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.0-1/input0 [ 1554.376177][T23352] usb 1-1: USB disconnect, device number 74 [ 1554.534650][T30765] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10075'. [ 1554.583068][T30761] fido_id[30761]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1555.120533][T30784] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5776] was attempted by ""[30784] [ 1555.140002][ T5763] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1555.331583][ T5763] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1555.348963][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.369859][ T5763] usb 2-1: config 0 descriptor?? [ 1555.395612][T30794] CacheFiles: Failed to register: -95 [ 1555.526292][T30800] netlink: 128 bytes leftover after parsing attributes in process `syz.7.10091'. [ 1555.994396][T30806] loop7: detected capacity change from 0 to 1024 [ 1556.045829][T30806] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1556.214445][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.394508][ T5763] [drm] vendor descriptor length:6 data:06 5f 01 00 04 03 00 00 00 00 00 [ 1556.403945][ T5763] [drm:udl_init] *ERROR* Selecting channel failed [ 1556.434752][ T5763] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 1556.443534][ T5763] [drm] Initialized udl on minor 2 [ 1556.452992][ T5763] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1556.465718][ T5763] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1556.478646][T23107] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1556.510285][ T5763] usb 2-1: USB disconnect, device number 82 [ 1556.521143][T23107] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1556.558699][T23107] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1556.746436][T23107] kernel write not supported for file /amidi2 (pid: 23107 comm: kworker/1:1) [ 1557.453533][T30825] loop7: detected capacity change from 0 to 256 [ 1557.527240][T30825] FAT-fs (loop7): Directory bread(block 64) failed [ 1557.549104][T30825] FAT-fs (loop7): Directory bread(block 65) failed [ 1557.566148][T30825] FAT-fs (loop7): Directory bread(block 66) failed [ 1557.576133][T30825] FAT-fs (loop7): Directory bread(block 67) failed [ 1557.603011][T30825] FAT-fs (loop7): Directory bread(block 68) failed [ 1557.636009][T30825] FAT-fs (loop7): Directory bread(block 69) failed [ 1557.644543][T30825] FAT-fs (loop7): Directory bread(block 70) failed [ 1557.652052][T30825] FAT-fs (loop7): Directory bread(block 71) failed [ 1557.660805][T30825] FAT-fs (loop7): Directory bread(block 72) failed [ 1557.667402][T30825] FAT-fs (loop7): Directory bread(block 73) failed [ 1558.044296][T30831] loop7: detected capacity change from 0 to 1764 [ 1558.053724][T30833] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1558.434854][T30839] loop6: detected capacity change from 0 to 512 [ 1558.452120][T30839] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1558.480351][T30841] loop7: detected capacity change from 0 to 128 [ 1558.490062][T30839] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 1558.520407][T23107] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1558.533632][T30841] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1558.568411][T26833] Bluetooth: hci0: unknown advertising packet type: 0x6c [ 1558.568450][T26833] Bluetooth: hci0: unknown advertising packet type: 0x87 [ 1558.575917][T26833] Bluetooth: hci0: unknown advertising packet type: 0x90 [ 1558.579270][T30841] hpfs: filesystem error: improperly stopped [ 1558.585614][T26833] Bluetooth: hci0: unknown advertising packet type: 0x76 [ 1558.597205][T26833] Bluetooth: hci0: unknown advertising packet type: 0xa1 [ 1558.604898][T26833] Bluetooth: hci0: unknown advertising packet type: 0xa8 [ 1558.619672][T26833] Bluetooth: hci0: unknown advertising packet type: 0xf9 [ 1558.629019][T30841] [ 1558.638422][T30841] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1558.698991][T30841] hpfs: You really don't want any checks? You are crazy... [ 1558.729555][T23107] usb 2-1: Using ep0 maxpacket: 8 [ 1558.737624][T23107] usb 2-1: config 0 interface 0 altsetting 95 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1558.741720][T30841] hpfs: hpfs_map_sector(): read error [ 1558.762105][T23107] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1558.777618][T23107] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1558.788168][T23107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.798180][T30841] hpfs: code page support is disabled [ 1558.813161][T23107] usb 2-1: config 0 descriptor?? [ 1558.831739][T30841] hpfs: hpfs_map_4sectors(): unaligned read [ 1558.838038][T30841] hpfs: hpfs_map_4sectors(): unaligned read [ 1558.845618][T30841] hpfs: filesystem error: unable to find root dir [ 1559.271005][T23107] logitech 0003:046D:C294.005C: unknown main item tag 0x2 [ 1559.278255][T23107] logitech 0003:046D:C294.005C: unknown main item tag 0x6 [ 1559.338391][T30849] loop6: detected capacity change from 0 to 4096 [ 1559.340591][T23107] logitech 0003:046D:C294.005C: ignoring exceeding usage max [ 1559.384681][T23107] logitech 0003:046D:C294.005C: hidraw0: USB HID v0.01 Device [HID 046d:c294] on usb-dummy_hcd.1-1/input0 [ 1559.390398][T30849] NILFS (loop6): invalid segment: Checksum error in segment payload [ 1559.416979][T23107] logitech 0003:046D:C294.005C: no inputs found [ 1559.433445][T30849] NILFS (loop6): trying rollback from an earlier position [ 1559.498752][T30849] NILFS (loop6): recovery complete [ 1559.524349][T30853] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1559.562972][T23352] usb 2-1: USB disconnect, device number 83 [ 1559.723753][T30852] fido_id[30852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1559.929209][T30864] netlink: 'syz.0.10122': attribute type 1 has an invalid length. [ 1560.842981][T30869] loop7: detected capacity change from 0 to 32768 [ 1560.884506][T30869] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 scanned by syz.7.10124 (30869) [ 1561.000546][T30869] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1561.013973][T30871] loop6: detected capacity change from 0 to 32768 [ 1561.023411][T30869] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 1561.065083][T30869] BTRFS info (device loop7): using free space tree [ 1561.219008][T30869] BTRFS info (device loop7): enabling ssd optimizations [ 1561.226127][T30869] BTRFS info (device loop7): auto enabling async discard [ 1561.494131][T25118] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1561.921205][T25318] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 9 /dev/loop7 scanned by udevd (25318) [ 1561.970728][T30905] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10135'. [ 1562.215382][T30912] loop6: detected capacity change from 0 to 64 [ 1562.322589][ T27] audit: type=1800 audit(2000000303.076:518): pid=30912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10137" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 1562.720989][T30920] sch_fq: defrate 2 ignored. [ 1564.012750][T30955] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1564.342132][T30963] loop7: detected capacity change from 0 to 128 [ 1564.764776][T30973] loop6: detected capacity change from 0 to 24 [ 1566.414857][T31000] loop6: detected capacity change from 0 to 32768 [ 1566.493847][T31000] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1566.577353][T31000] XFS (loop6): Ending clean mount [ 1566.593575][T31000] XFS (loop6): Quotacheck needed: Please wait. [ 1566.676775][T31000] XFS (loop6): Quotacheck: Done. [ 1566.893828][T15786] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1566.924808][ T1191] kernel write not supported for file /input/event0 (pid: 1191 comm: kworker/1:2) [ 1566.984143][T31025] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1568.403618][T31067] bridge0: port 3(ipvlan2) entered blocking state [ 1568.436592][T31067] bridge0: port 3(ipvlan2) entered disabled state [ 1568.474241][T31067] ipvlan2: entered allmulticast mode [ 1568.494285][T31067] bridge0: entered allmulticast mode [ 1568.529235][T31067] ipvlan2: left allmulticast mode [ 1568.552656][T31067] bridge0: left allmulticast mode [ 1569.064186][T31091] program syz.0.10218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1569.545404][T31109] vivid-000: disconnect [ 1569.552175][T31108] vivid-000: reconnect [ 1569.738679][T23352] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1569.841631][T31119] kernel profiling enabled (shift: 9) [ 1569.931840][T23352] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1569.949832][T23352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1569.961827][T23352] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1569.976222][T23352] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1569.985802][T23352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.996847][T23352] usb 2-1: config 0 descriptor?? [ 1570.003611][T31107] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1570.062246][T31126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10234'. [ 1570.430269][T23352] hid (null): global environment stack underflow [ 1570.479096][T23352] uclogic 0003:28BD:0075.005D: interface is invalid, ignoring [ 1570.636266][T23352] usb 2-1: USB disconnect, device number 84 [ 1570.770689][T31147] loop6: detected capacity change from 0 to 512 [ 1570.825042][T31149] loop7: detected capacity change from 0 to 128 [ 1570.835747][T31147] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1570.872718][T31147] EXT4-fs (loop6): 1 orphan inode deleted [ 1570.907168][T31147] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1571.051054][T31147] EXT4-fs error (device loop6): __ext4_remount:6756: comm syz.6.10244: Abort forced by user [ 1571.071351][T31147] EXT4-fs (loop6): Remounting filesystem read-only [ 1571.079515][T31147] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1571.101362][T31147] ext4 filesystem being remounted at /1340/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1571.200105][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.405331][T31162] loop6: detected capacity change from 0 to 4096 [ 1571.431528][T31162] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1571.487436][T31162] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1571.737387][T31166] tipc: Enabling of bearer rejected, failed to enable media [ 1572.083201][T31176] bridge0: entered promiscuous mode [ 1572.089831][T31176] macsec2: entered allmulticast mode [ 1572.095194][T31176] bridge0: entered allmulticast mode [ 1572.107280][T31176] bridge0: port 4(macsec2) entered blocking state [ 1572.114776][T31176] bridge0: port 4(macsec2) entered disabled state [ 1572.138857][T31176] bridge0: left allmulticast mode [ 1572.149818][T31176] bridge0: left promiscuous mode [ 1572.512243][T31186] binder: 31185:31186 ioctl c018620c 2000000004c0 returned -22 [ 1572.652358][T31192] loop7: detected capacity change from 0 to 128 [ 1572.681801][T31192] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 1572.940265][T31192] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1572.978671][T31204] loop6: detected capacity change from 0 to 64 [ 1572.996322][T31192] ext2 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1573.235531][T25118] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1573.885678][T31232] loop7: detected capacity change from 0 to 64 [ 1574.107756][T31234] loop6: detected capacity change from 0 to 2048 [ 1574.164490][T31234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.392025][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.611525][T31246] loop6: detected capacity change from 0 to 512 [ 1574.621361][T31246] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1574.636048][T31246] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 1574.674329][T31246] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1574.716131][T31246] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4059: comm syz.6.10288: Allocating blocks 41-42 which overlap fs metadata [ 1574.747422][T31246] EXT4-fs (loop6): Remounting filesystem read-only [ 1574.771791][T31246] Quota error (device loop6): write_blk: dquota write failed [ 1574.797666][T31246] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1574.814943][T31246] EXT4-fs (loop6): 1 truncate cleaned up [ 1574.822267][T31246] EXT4-fs (loop6): pa ffff8880792eb488: logic 1, phys. 41, len 23 [ 1574.836838][T31246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1574.953188][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.986150][T31253] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10291'. [ 1575.092976][T31255] loop7: detected capacity change from 0 to 512 [ 1575.146749][T31255] EXT4-fs error (device loop7): __ext4_iget:5079: inode #11: block 1: comm syz.7.10293: invalid block [ 1575.174906][T31255] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.10293: couldn't read orphan inode 11 (err -117) [ 1575.246442][T31255] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.441133][T31267] loop6: detected capacity change from 0 to 512 [ 1575.456802][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.473469][T31267] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1575.501243][T31267] EXT4-fs (loop6): 1 truncate cleaned up [ 1575.544678][T31267] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1575.773564][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1576.564033][T31301] loop6: detected capacity change from 0 to 4096 [ 1576.715009][T31301] ntfs3: loop6: failed to convert "0000" to iso8859-6 [ 1576.739161][T31301] ntfs3: loop6: failed to convert "0030" to iso8859-6 [ 1576.767555][T31301] ntfs3: loop6: failed to convert name for inode 1e. [ 1576.778167][T31301] ntfs3: loop6: failed to convert "0032" to iso8859-6 [ 1576.809579][T31301] ntfs3: loop6: failed to convert "0033" to iso8859-6 [ 1577.206339][ T27] audit: type=1800 audit(2000000317.967:519): pid=31305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.10315" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 1578.237314][T31332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10328'. [ 1579.489665][T31381] vivid-007: ================= START STATUS ================= [ 1579.517719][T31381] vivid-007: Enable Output Cropping: true [ 1579.524612][T31381] vivid-007: Enable Output Composing: true [ 1579.564902][T31381] vivid-007: Enable Output Scaler: true [ 1579.577887][T31381] vivid-007: Tx RGB Quantization Range: Automatic [ 1579.588677][T31381] vivid-007: Transmit Mode: HDMI [ 1579.602050][T31381] vivid-007: Display Present: true inactive [ 1579.624321][T31381] vivid-007: Hotplug Present: 0x00000001 [ 1579.630465][T31381] vivid-007: RxSense Present: 0x00000001 [ 1579.645310][T31381] vivid-007: EDID Present: 0x00000001 [ 1579.653616][T31381] vivid-007: ================== END STATUS ================== [ 1579.932346][T31393] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10358'. [ 1580.728647][T31420] bond3: invalid ARP target 0.0.0.0 specified for addition [ 1580.735792][T31416] loop6: detected capacity change from 0 to 4096 [ 1580.736846][T31420] bond3: option arp_ip_target: invalid value (0) [ 1580.753934][T31420] bond3 (unregistering): Released all slaves [ 1580.795990][T31416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1580.889304][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1581.577306][T31441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10380'. [ 1581.762323][T31447] loop6: detected capacity change from 0 to 2048 [ 1581.772769][T31447] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1581.831100][T31447] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1581.877060][T31447] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1582.107606][ T1191] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1582.309688][ T1191] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.320621][ T1191] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1582.342397][ T1191] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1582.352359][ T1191] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1582.359745][ T1191] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 1582.369372][ T1191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.388968][ T1191] usb 2-1: config 0 descriptor?? [ 1582.689148][T31473] loop6: detected capacity change from 0 to 128 [ 1582.764342][T31473] VFS: Found a Xenix FS (block size = 512) on device loop6 [ 1582.811503][T31473] sysv_free_block: trying to free block not in datazone [ 1582.834329][ T1191] kye 0003:0458:5015.005E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1582.866976][ T1191] kye 0003:0458:5015.005E: unknown main item tag 0x0 [ 1582.902463][ T1191] kye 0003:0458:5015.005E: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.1-1/input0 [ 1582.934316][ T1191] kye 0003:0458:5015.005E: tablet-enabling feature report not found [ 1582.954639][ T1191] kye 0003:0458:5015.005E: tablet enabling failed [ 1583.086506][T15786] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1583.094874][T31482] loop7: detected capacity change from 0 to 512 [ 1583.139682][ T9] usb 2-1: USB disconnect, device number 85 [ 1583.177928][T31482] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.10399: Unimplemented hash flags: 0x0001 [ 1583.193245][T31482] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.10399: Corrupt directory, running e2fsck is recommended [ 1583.210265][T31482] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 1583.219608][T31482] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.10399: corrupted in-inode xattr: invalid ea_ino [ 1583.237872][T31482] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.10399: couldn't read orphan inode 15 (err -117) [ 1583.319400][T31482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1583.403643][T31482] EXT4-fs warning (device loop7): dx_probe:869: inode #2: comm syz.7.10399: Unimplemented hash flags: 0x0001 [ 1583.433997][T31482] EXT4-fs warning (device loop7): dx_probe:966: inode #2: comm syz.7.10399: Corrupt directory, running e2fsck is recommended [ 1583.460949][T31482] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 3: comm syz.7.10399: path /543/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 1583.480952][ C1] vkms_vblank_simulate: vblank timer overrun [ 1583.526739][T31482] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 2: comm syz.7.10399: path /543/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=4, size=1024 fake=0 [ 1583.575613][T31482] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 8: comm syz.7.10399: path /543/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33261, rec_len=1050, size=1024 fake=0 [ 1583.730320][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.949306][ T27] audit: type=1326 audit(2000000324.718:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31497 comm="syz.7.10404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03f19e019 code=0x7ffc0000 [ 1584.059714][ T27] audit: type=1326 audit(2000000324.748:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31497 comm="syz.7.10404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa03f19e019 code=0x7ffc0000 [ 1584.143373][ T27] audit: type=1326 audit(2000000324.748:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31497 comm="syz.7.10404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa03f19e019 code=0x7ffc0000 [ 1584.201141][T31503] loop6: detected capacity change from 0 to 1024 [ 1584.228403][ T27] audit: type=1326 audit(2000000324.748:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31497 comm="syz.7.10404" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa03f19e019 code=0x7ffc0000 [ 1584.303928][T31503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1584.483452][T15786] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 88: padding at end of block bitmap is not set [ 1584.525524][T15786] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 1584.546769][T31516] loop7: detected capacity change from 0 to 164 [ 1584.572461][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.682648][T31516] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1584.763244][T31516] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 1585.028191][T31526] loop7: detected capacity change from 0 to 64 [ 1585.058066][ T1191] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1585.258349][ T1191] usb 2-1: Using ep0 maxpacket: 16 [ 1585.276435][ T1191] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1585.293904][ T1191] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1585.306169][ T1191] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1585.354744][ T1191] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1585.377872][ T1191] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1585.387483][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.395650][ T1191] usb 2-1: Product: syz [ 1585.410462][ T1191] usb 2-1: Manufacturer: syz [ 1585.420861][ T1191] usb 2-1: SerialNumber: syz [ 1585.430059][T31536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10423'. [ 1585.446507][ T1191] usb 2-1: config 0 descriptor?? [ 1585.694529][ T1191] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input67 [ 1585.760345][ T5125] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1585.808349][ T5125] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1585.834516][ T5125] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1585.872381][ T5125] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1585.982661][ T5125] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1586.016376][T31520] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1586.044895][T25452] synaptics_usb 2-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1586.091495][ T9] usb 2-1: USB disconnect, device number 86 [ 1586.226127][T31557] loop7: detected capacity change from 0 to 256 [ 1586.259172][T31557] exfat: Deprecated parameter 'utf8' [ 1586.264653][T31557] exfat: Deprecated parameter 'namecase' [ 1586.318155][T31557] exfat: Deprecated parameter 'namecase' [ 1586.327598][T31557] exfat: Deprecated parameter 'namecase' [ 1586.356615][T31557] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1586.425692][ T27] audit: type=1804 audit(2000000327.178:524): pid=31557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.10432" name=2F6E6577726F6F742F3535312F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop7" ino=1048925 res=1 errno=0 [ 1586.594074][T31563] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1586.829855][T31571] loop6: detected capacity change from 0 to 1024 [ 1586.931437][T31571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1586.958339][T31571] ext4 filesystem being mounted at /1405/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.991885][T31577] loop7: detected capacity change from 0 to 164 [ 1587.099200][T31571] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1587.128455][T31571] EXT4-fs: journaled quota format not specified [ 1587.159593][T31579] 9pnet_rdma: rdma_create_trans (31579): problem binding to privport: 13 [ 1587.258482][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1587.433641][T31583] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10446'. [ 1587.761042][T31592] ALSA: mixer_oss: invalid OSS volume '' [ 1587.795895][T31594] loop7: detected capacity change from 0 to 8 [ 1587.837892][T31594] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1587.877322][T31594] SQUASHFS error: Failed to read block 0x91: -5 [ 1587.883661][T31594] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1587.934824][T31594] SQUASHFS error: Unable to read inode 0x11f [ 1588.280701][T31565] overlayfs: failed to resolve './file0': -2 [ 1589.214528][T31638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10471'. [ 1590.386693][T31675] trusted_key: encrypted_key: key trusted:syz not found [ 1592.221595][T31714] netlink: 100 bytes leftover after parsing attributes in process `syz.6.10508'. [ 1592.584798][T31723] loop7: detected capacity change from 0 to 512 [ 1592.615485][T31723] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1592.702558][T31723] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1592.761948][T31723] EXT4-fs error (device loop7): ext4_iget_extra_inode:4740: inode #15: comm syz.7.10512: corrupted in-inode xattr: e_value size too large [ 1592.848386][T31723] EXT4-fs error (device loop7): ext4_orphan_get:1409: comm syz.7.10512: couldn't read orphan inode 15 (err -117) [ 1592.873286][T31732] loop6: detected capacity change from 0 to 1024 [ 1592.896155][T31723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1593.094816][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1594.144516][T31763] loop7: detected capacity change from 0 to 64 [ 1594.496100][T31771] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1594.728514][T31780] loop6: detected capacity change from 0 to 64 [ 1594.790145][T31780] syz.6.10539: attempt to access beyond end of device [ 1594.790145][T31780] loop6: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 1594.816885][T31780] Buffer I/O error on dev loop6, logical block 512, async page read [ 1594.859264][T31780] syz.6.10539: attempt to access beyond end of device [ 1594.859264][T31780] loop6: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 1594.888575][T31780] Buffer I/O error on dev loop6, logical block 56576, async page read [ 1595.513110][T31804] netlink: 'syz.6.10550': attribute type 1 has an invalid length. [ 1595.536530][T31804] netlink: 244 bytes leftover after parsing attributes in process `syz.6.10550'. [ 1596.214756][T31820] loop6: detected capacity change from 0 to 256 [ 1596.233810][T31820] exfat: Deprecated parameter 'utf8' [ 1596.250344][T31820] exfat: Deprecated parameter 'namecase' [ 1596.326384][T31801] loop7: detected capacity change from 0 to 40427 [ 1596.336156][T31820] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe6e0c303, utbl_chksum : 0xe619d30d) [ 1596.368770][T31801] F2FS-fs (loop7): invalid crc value [ 1596.386716][ T1191] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1596.414311][T31801] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1596.597341][ T1191] usb 2-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 1596.619343][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.635847][T31801] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1596.653521][ T1191] usb 2-1: Product: syz [ 1596.676987][ T1191] usb 2-1: Manufacturer: syz [ 1596.692186][ T1191] usb 2-1: SerialNumber: syz [ 1596.698785][T31826] loop6: detected capacity change from 0 to 512 [ 1596.758530][T31826] FAT-fs (loop6): error, fat_bmap_cluster: request beyond EOF (i_pos 50) [ 1596.771703][ T27] audit: type=1800 audit(2000000337.528:525): pid=31826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.10559" name="file1" dev="loop6" ino=1048927 res=0 errno=0 [ 1596.858003][T25118] syz-executor: attempt to access beyond end of device [ 1596.858003][T25118] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1596.879113][T25118] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1597.918050][T31838] loop7: detected capacity change from 0 to 128 [ 1597.952535][ T1191] usbhid 2-1:1.0: can't add hid device: -22 [ 1597.962422][T31838] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1597.974449][T31840] bond0: option arp_interval: invalid value (18446744073709551615) [ 1597.986851][ T1191] usbhid: probe of 2-1:1.0 failed with error -22 [ 1597.994047][T31840] bond0: option arp_interval: allowed values 0 - 2147483647 [ 1598.014566][ T1191] usb 2-1: USB disconnect, device number 87 [ 1598.025582][T31838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1598.509582][T31852] loop7: detected capacity change from 0 to 4096 [ 1600.963525][T31903] XFS (nullb0): Invalid superblock magic number [ 1602.083513][T31935] XFS (nullb0): Invalid superblock magic number [ 1602.365596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1602.629202][T31950] loop6: detected capacity change from 0 to 4096 [ 1602.738315][ T27] audit: type=1326 audit(2000000343.499:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1602.820296][ T27] audit: type=1326 audit(2000000343.499:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1602.901277][ T27] audit: type=1326 audit(2000000343.509:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1602.978789][ T27] audit: type=1326 audit(2000000343.509:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1603.064825][ T27] audit: type=1326 audit(2000000343.509:530): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1603.156532][ T27] audit: type=1326 audit(2000000343.509:531): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1603.220808][ T27] audit: type=1326 audit(2000000343.509:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1603.261928][ T27] audit: type=1326 audit(2000000343.509:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1603.309524][ T27] audit: type=1326 audit(2000000343.509:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1603.387134][ T27] audit: type=1326 audit(2000000343.509:535): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=31955 comm="syz.0.10612" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f8b0859e019 code=0x7ffc0000 [ 1603.882345][T31954] loop7: detected capacity change from 0 to 32768 [ 1603.898250][T31954] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 1604.136435][T25306] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 1605.138936][T31996] program syz.6.10632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1605.736596][T32006] loop6: detected capacity change from 0 to 4096 [ 1605.916657][T32013] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1606.807301][T32035] loop6: detected capacity change from 0 to 256 [ 1606.857212][T32035] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1607.581519][T32052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.593465][T32052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.612850][T32052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.624358][T32052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.638628][T32052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.650469][T32052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.662078][T32052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1607.679043][T32052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1607.694406][T32052] batadv_slave_1: entered promiscuous mode [ 1607.740038][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.748864][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.035495][T32064] tipc: New replicast peer: 255.255.255.255 [ 1608.043767][T32064] tipc: Enabled bearer , priority 10 [ 1608.767409][T32082] loop7: detected capacity change from 0 to 4096 [ 1608.794485][T32083] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1608.926722][T21090] Bluetooth: hci3: command 0x0406 tx timeout [ 1608.940811][T32085] loop7: detected capacity change from 0 to 512 [ 1608.949329][T32085] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1608.974255][T32085] EXT4-fs (loop7): 1 truncate cleaned up [ 1608.982733][T32085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1609.034821][T32085] EXT4-fs error (device loop7): __ext4_expand_extra_isize:5960: inode #12: comm syz.7.10672: bad extra_isize 62 (inode size 256) [ 1609.066325][T32085] EXT4-fs (loop7): Remounting filesystem read-only [ 1609.102692][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1609.341678][T32094] mkiss: ax0: crc mode is auto. [ 1609.518103][T32098] tipc: Enabling of bearer rejected, failed to enable media [ 1609.979456][T32112] loop7: detected capacity change from 0 to 64 [ 1610.221184][T32116] ALSA: seq fatal error: cannot create timer (-19) [ 1610.629845][T32128] loop7: detected capacity change from 0 to 64 [ 1610.664169][T32128] syz.7.10691: attempt to access beyond end of device [ 1610.664169][T32128] loop7: rw=0, sector=412, nr_sectors = 2 limit=64 [ 1610.696171][T32128] Buffer I/O error on dev loop7, logical block 206, async page read [ 1610.707389][T32128] syz.7.10691: attempt to access beyond end of device [ 1610.707389][T32128] loop7: rw=0, sector=412, nr_sectors = 2 limit=64 [ 1610.723873][T32128] Buffer I/O error on dev loop7, logical block 206, async page read [ 1610.739661][ T27] kauditd_printk_skb: 125 callbacks suppressed [ 1610.739677][ T27] audit: type=1800 audit(2000000351.509:661): pid=32128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10691" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1612.251118][T32178] loop6: detected capacity change from 0 to 128 [ 1612.299458][T32178] ufs: ufstype=nextstep is supported read-only [ 1612.617982][T32189] mkiss: ax0: crc mode is auto. [ 1615.120743][T32240] autofs4:pid:32240:autofs_fill_super: called with bogus options [ 1615.974624][T21090] Bluetooth: hci1: command tx timeout [ 1616.113326][T32258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10752'. [ 1616.123027][T32258] nbd: illegal input index -1113835520 [ 1616.471684][T32268] loop7: detected capacity change from 0 to 4096 [ 1616.509494][T32268] NILFS (loop7): invalid segment: Checksum error in segment payload [ 1616.521641][T32268] NILFS (loop7): trying rollback from an earlier position [ 1616.545731][T32268] NILFS (loop7): recovery complete [ 1616.570731][T32271] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1617.822086][T32298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1617.886542][T32305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10774'. [ 1617.913608][T32307] loop7: detected capacity change from 0 to 128 [ 1617.972652][T32307] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1618.013043][T32307] hpfs: filesystem error: improperly stopped [ 1618.020536][T32307] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1618.041063][T32307] hpfs: You really don't want any checks? You are crazy... [ 1618.068421][T32307] hpfs: hpfs_map_sector(): read error [ 1618.073887][T32307] hpfs: code page support is disabled [ 1618.082122][T32307] hpfs: hpfs_map_4sectors(): unaligned read [ 1618.089386][T32307] hpfs: hpfs_map_4sectors(): unaligned read [ 1618.096479][T32307] hpfs: filesystem error: unable to find root dir [ 1619.641558][T32361] netlink: 'syz.0.10802': attribute type 10 has an invalid length. [ 1619.653026][T32361] netlink: 'syz.0.10802': attribute type 10 has an invalid length. [ 1619.660170][T32360] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10801'. [ 1619.782911][T32364] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1620.214851][T32381] netem: invalid attributes len -24 [ 1620.956263][T32407] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 1621.792205][T32434] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1622.393300][T32453] netlink: 44 bytes leftover after parsing attributes in process `syz.6.10848'. [ 1622.413000][T32453] netlink: 'syz.6.10848': attribute type 1 has an invalid length. [ 1622.509796][T32455] loop7: detected capacity change from 0 to 512 [ 1622.570763][T32455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1622.802163][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1623.022753][T32463] loop7: detected capacity change from 0 to 4096 [ 1623.031124][T32463] ntfs: (device loop7): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 1623.139760][T32463] ntfs: volume version 3.1. [ 1623.285651][T32463] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1623.336918][T32463] ntfs: (device loop7): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 1623.393347][T32463] ntfs: (device loop7): ntfs_cluster_alloc(): Failed to map page. [ 1623.418614][T32463] ntfs: (device loop7): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 1623.450348][T32463] ntfs: (device loop7): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 1623.941747][ T27] audit: type=1800 audit(2000000364.710:662): pid=32467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.10852" name="file1" dev="loop7" ino=67 res=0 errno=0 [ 1624.138856][T25118] ntfs: (device loop7): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1624.396903][T32482] loop6: detected capacity change from 0 to 1024 [ 1624.410970][T32482] EXT4-fs: inline encryption not supported [ 1624.439742][T32482] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1624.510327][T32484] overlayfs: missing 'lowerdir' [ 1624.559147][T32482] EXT4-fs error (device loop6): ext4_free_blocks:6694: comm syz.6.10861: Freeing blocks not in datazone - block = 0, count = 4096 [ 1624.658424][T32482] EXT4-fs (loop6): Remounting filesystem read-only [ 1624.695827][T32482] EXT4-fs (loop6): 1 orphan inode deleted [ 1624.703107][T32494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10866'. [ 1624.719860][T10912] EXT4-fs (loop6): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 1624.733695][T32494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10866'. [ 1624.745983][T32482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1624.763141][T10912] Quota error (device loop6): write_blk: dquota write failed [ 1624.768677][T32494] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 1624.782090][T10912] Quota error (device loop6): remove_free_dqentry: Can't write block (2) with free entries [ 1624.831869][T10912] EXT4-fs (loop6): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 1624.875967][T10912] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 1624.915619][T15786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.099141][T32500] loop6: detected capacity change from 0 to 4096 [ 1625.132676][T32500] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1625.250858][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10871'. [ 1625.290233][T32500] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 1625.309886][T32504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10871'. [ 1625.321649][T32500] ntfs3: loop6: ino=1e, "file1" attr_set_size [ 1625.334922][T32504] netlink: 'syz.1.10871': attribute type 13 has an invalid length. [ 1625.356246][T32504] netlink: 'syz.1.10871': attribute type 12 has an invalid length. [ 1625.414226][T10912] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22. [ 1625.431542][T15786] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 1625.455421][T15786] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1625.462544][T15786] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 1625.492889][T10912] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22. [ 1625.711359][T32517] netlink: 216 bytes leftover after parsing attributes in process `syz.1.10876'. [ 1626.105274][ T1191] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1626.315558][ T1191] usb 2-1: Using ep0 maxpacket: 32 [ 1626.329069][ T1191] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 1626.340213][ T1191] usb 2-1: config 0 has no interface number 0 [ 1626.347104][ T1191] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1626.357664][ T1191] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1626.374108][ T1191] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1626.387777][ T1191] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 1626.397410][ T1191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.406077][ T1191] usb 2-1: Product: syz [ 1626.410740][ T1191] usb 2-1: Manufacturer: syz [ 1626.415792][ T1191] usb 2-1: SerialNumber: syz [ 1626.423116][ T1191] usb 2-1: config 0 descriptor?? [ 1626.429605][T32522] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1626.653541][ T1191] usb-storage 2-1:0.20: USB Mass Storage device detected [ 1626.670566][ T1191] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 1626.867078][ T1191] scsi host1: usb-storage 2-1:0.20 [ 1627.070971][ T1191] usb 2-1: USB disconnect, device number 88 [ 1627.693597][T32548] netlink: 'syz.7.10891': attribute type 10 has an invalid length. [ 1627.766840][T32548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.778697][T32548] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1627.968651][T32557] loop7: detected capacity change from 0 to 64 [ 1628.925088][T32591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10911'. [ 1630.244931][T23107] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1630.463122][T23107] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1630.485051][T23107] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1630.495594][T23107] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1630.505043][T23107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.519763][T32609] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1630.548060][T23107] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1630.811021][T23352] usb 2-1: USB disconnect, device number 89 [ 1632.159285][T32641] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10934'. [ 1632.169365][T32641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10934'. [ 1632.179755][T32641] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10934'. [ 1632.943890][T32663] netlink: 64 bytes leftover after parsing attributes in process `syz.6.10945'. [ 1633.318240][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 1633.318256][ T27] audit: type=1326 audit(2000000374.090:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1633.397794][ T27] audit: type=1326 audit(2000000374.090:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1633.510380][ T27] audit: type=1326 audit(2000000374.120:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1633.592908][ T27] audit: type=1326 audit(2000000374.120:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1633.648174][ T27] audit: type=1326 audit(2000000374.120:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f851659e019 code=0x7ffc0000 [ 1633.705196][ T27] audit: type=1326 audit(2000000374.120:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f851659dd82 code=0x7ffc0000 [ 1633.737778][ T27] audit: type=1326 audit(2000000374.120:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f851655e84e code=0x7ffc0000 [ 1633.763818][ T27] audit: type=1326 audit(2000000374.140:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f851659de47 code=0x7ffc0000 [ 1633.840956][ T27] audit: type=1326 audit(2000000374.140:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f851655e84e code=0x7ffc0000 [ 1633.909451][ T27] audit: type=1326 audit(2000000374.140:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32674 comm="syz.1.10950" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f851659dcab code=0x7ffc0000 [ 1634.216014][T32700] loop7: detected capacity change from 0 to 164 [ 1634.274951][T32700] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1634.463107][T32705] ip_tables: iptables: counters copy to user failed while replacing table [ 1634.559390][T32708] loop7: detected capacity change from 0 to 2048 [ 1634.602611][T32710] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1634.659022][T32708] syz.7.10965: attempt to access beyond end of device [ 1634.659022][T32708] loop7: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 1634.713066][T32708] NILFS error (device loop7): nilfs_readdir: bad page in #2 [ 1634.751504][T32708] Remounting filesystem read-only [ 1635.023263][T32716] loop6: detected capacity change from 0 to 512 [ 1635.101162][T32716] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1635.280034][T32723] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_virt_wifi, syncid = 4, id = 0 [ 1635.858058][T32742] loop6: detected capacity change from 0 to 24 [ 1635.873545][T32742] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1635.915886][T32742] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1636.261930][T32754] netlink: 'syz.7.10988': attribute type 3 has an invalid length. [ 1636.274139][T32754] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10988'. [ 1636.715651][T32764] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10992'. [ 1636.945267][ T302] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10995'. [ 1637.204593][ T307] netlink: 30 bytes leftover after parsing attributes in process `syz.6.10998'. [ 1637.213812][ T307] netlink: 3 bytes leftover after parsing attributes in process `syz.6.10998'. [ 1637.477718][ T313] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1637.504556][ T313] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1637.531547][ T313] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1637.574506][ T313] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 1637.581210][ T313] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1637.626267][ T313] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1637.632821][ T313] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1637.685129][ T313] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1637.695300][ T313] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1637.712519][ T313] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1637.724857][ T313] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1638.608850][ T351] netlink: 296 bytes leftover after parsing attributes in process `syz.7.11019'. [ 1638.869405][ T362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11024'. [ 1638.966131][ T364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11026'. [ 1638.990526][ T366] loop7: detected capacity change from 0 to 256 [ 1638.997540][ T5763] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1639.051899][ T366] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1639.205852][ T5763] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1639.234080][ T5763] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1639.250190][ T5763] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1639.260334][ T5763] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1639.269595][ T5763] usb 2-1: Product: syz [ 1639.273970][ T5763] usb 2-1: Manufacturer: syz [ 1639.286909][ T5763] hub 2-1:4.0: USB hub found [ 1639.316605][ T372] netlink: 'syz.7.11029': attribute type 27 has an invalid length. [ 1639.491547][ T5763] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1639.777207][ T388] loop7: detected capacity change from 0 to 1024 [ 1639.818079][T23107] usb 2-1: USB disconnect, device number 90 [ 1639.836292][ T388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1639.850627][ T388] ext4 filesystem being mounted at /691/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1639.918558][T25118] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1640.097914][ T399] loop7: detected capacity change from 0 to 128 [ 1640.113063][ T399] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1640.127937][ T399] hpfs: filesystem error: improperly stopped [ 1640.140013][ T399] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1640.159439][ T399] hpfs: You really don't want any checks? You are crazy... [ 1640.167135][ T399] hpfs: Code page index out of array [ 1640.172563][ T399] hpfs: code page support is disabled [ 1640.180692][ T399] hpfs: hpfs_map_4sectors(): unaligned read [ 1640.186938][ T399] hpfs: hpfs_map_4sectors(): unaligned read [ 1640.192916][ T399] hpfs: filesystem error: unable to find root dir [ 1640.247556][ T399] hpfs: hpfs_map_4sectors(): unaligned read [ 1640.776234][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 1640.776251][ T27] audit: type=1326 audit(2000000381.551:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=411 comm="syz.6.11048" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d75d9e019 code=0x0 [ 1640.890745][ T417] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11049'. [ 1640.924625][ T417] openvswitch: netlink: Tunnel attr 255 out of range max 16 [ 1641.123880][ T423] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1641.132333][ T423] team0: Device ipvlan2 is already an upper device of the team interface [ 1642.462819][ T444] loop7: detected capacity change from 0 to 32768 [ 1642.523265][ T444] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 1642.607470][ T444] JBD2: Ignoring recovery information on journal [ 1642.671100][ T444] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1642.835583][T23352] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1642.867611][T25118] ocfs2: Unmounting device (7,7) on (node local) [ 1643.026425][T23352] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1643.054601][T23352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 1643.072974][T23352] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1643.087187][T23352] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 1643.103528][T23352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.116312][T23352] usb 2-1: config 0 descriptor?? [ 1643.122784][ T458] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1643.552090][T23352] betop 0003:11C2:2208.005F: unknown main item tag 0x3 [ 1643.565203][T23352] betop 0003:11C2:2208.005F: unexpected long global item [ 1643.573324][T23352] betop 0003:11C2:2208.005F: parse failed [ 1643.580437][T23352] betop: probe of 0003:11C2:2208.005F failed with error -22 [ 1643.756551][T23107] usb 2-1: USB disconnect, device number 91 [ 1644.108026][ T479] netlink: 'syz.0.11074': attribute type 3 has an invalid length. [ 1644.117499][ T479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11074'. [ 1644.183255][ T481] tipc: Enabled bearer , priority 10 [ 1647.099134][ T510] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11090'. [ 1647.335686][ T506] loop7: detected capacity change from 0 to 32768 [ 1647.362711][ T506] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 scanned by syz.7.11088 (506) [ 1647.428046][ T506] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1647.464106][ T506] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1647.473659][ T506] BTRFS info (device loop7): using free space tree [ 1647.732320][ T506] BTRFS info (device loop7): enabling ssd optimizations [ 1647.744233][ T506] BTRFS info (device loop7): auto enabling async discard [ 1647.914104][ T506] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1649.592728][ T566] loop7: detected capacity change from 0 to 16 [ 1649.681010][ T566] erofs: (device loop7): mounted with root inode @ nid 36. [ 1650.546572][ T584] netlink: 'syz.7.11115': attribute type 2 has an invalid length. [ 1651.308971][ T601] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 1651.324650][ T601] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1651.331453][ T601] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1651.343123][ T601] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1651.354008][ T601] comedi comedi3: 8255: I/O port conflict (0x10001,4) [ 1651.374607][ T601] comedi comedi3: 8255: I/O port conflict (0x1000008,4) [ 1651.402178][ T601] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1651.418364][ T601] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1651.437366][ T601] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1651.464155][ T601] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1651.487067][ T601] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1651.536057][ T601] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1651.572332][ T601] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1651.589675][ T601] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1651.609943][ T601] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1651.624519][ T601] comedi comedi3: 8255: I/O port conflict (0xffffffff80000088,4) [ 1651.674009][ T601] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffefe,4) [ 1651.682133][ T601] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1651.719929][ T601] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 1651.759613][ T601] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1651.787426][ T601] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1652.851907][ T623] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11136'. [ 1654.446103][ T647] netlink: 'syz.1.11148': attribute type 10 has an invalid length. [ 1654.465370][ T647] batadv0: left allmulticast mode [ 1654.485667][ T647] batadv0: left promiscuous mode [ 1654.490946][ T647] bridge0: port 4(batadv0) entered disabled state [ 1654.534534][ T647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1654.574422][ T647] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1654.848608][ T637] loop6: detected capacity change from 0 to 32768 [ 1654.925000][ T637] (syz.6.11143,637,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1654.998274][ T637] (syz.6.11143,637,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1655.107307][ T637] JBD2: Ignoring recovery information on journal [ 1655.193096][ T657] loop7: detected capacity change from 0 to 256 [ 1655.217803][ T637] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1655.415051][ T637] [ 1655.417465][ T637] ====================================================== [ 1655.424518][ T637] WARNING: possible circular locking dependency detected [ 1655.431587][ T637] syzkaller #0 Not tainted [ 1655.436082][ T637] ------------------------------------------------------ [ 1655.443248][ T637] syz.6.11143/637 is trying to acquire lock: [ 1655.449268][ T637] ffff888053525118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_xattr_set+0xbe8/0x13a0 [ 1655.461567][ T637] [ 1655.461567][ T637] but task is already holding lock: [ 1655.468984][ T637] ffff8880534aeab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 1655.478584][ T637] [ 1655.478584][ T637] which lock already depends on the new lock. [ 1655.478584][ T637] [ 1655.489034][ T637] [ 1655.489034][ T637] the existing dependency chain (in reverse order) is: [ 1655.498093][ T637] [ 1655.498093][ T637] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 1655.505985][ T637] down_read+0x46/0x2e0 [ 1655.510727][ T637] ocfs2_init_acl+0x30a/0x770 [ 1655.515990][ T637] ocfs2_mknod+0x1427/0x2310 [ 1655.521197][ T637] ocfs2_create+0x196/0x430 [ 1655.526267][ T637] path_openat+0x1705/0x3270 [ 1655.531422][ T637] do_filp_open+0x1f2/0x430 [ 1655.536511][ T637] do_sys_openat2+0x134/0x1d0 [ 1655.541762][ T637] __x64_sys_openat+0x139/0x160 [ 1655.547183][ T637] do_syscall_64+0x55/0xb0 [ 1655.552167][ T637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.558631][ T637] [ 1655.558631][ T637] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1655.567202][ T637] down_read+0x46/0x2e0 [ 1655.571943][ T637] ocfs2_start_trans+0x3a8/0x6f0 [ 1655.577471][ T637] ocfs2_shutdown_local_alloc+0x1f7/0xac0 [ 1655.583762][ T637] ocfs2_dismount_volume+0x1e5/0x890 [ 1655.589613][ T637] generic_shutdown_super+0x134/0x2b0 [ 1655.595558][ T637] kill_block_super+0x44/0x90 [ 1655.600807][ T637] deactivate_locked_super+0x97/0x100 [ 1655.606753][ T637] cleanup_mnt+0x3d7/0x460 [ 1655.611741][ T637] task_work_run+0x1d4/0x260 [ 1655.616908][ T637] exit_to_user_mode_loop+0xe6/0x110 [ 1655.622831][ T637] exit_to_user_mode_prepare+0xee/0x180 [ 1655.628968][ T637] syscall_exit_to_user_mode+0x1a/0x50 [ 1655.635003][ T637] do_syscall_64+0x61/0xb0 [ 1655.639986][ T637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.646490][ T637] [ 1655.646490][ T637] -> #1 (sb_internal#5){.+.+}-{0:0}: [ 1655.654029][ T637] ocfs2_start_trans+0x2a9/0x6f0 [ 1655.659547][ T637] ocfs2_remove_btree_range+0x816/0x15e0 [ 1655.665756][ T637] ocfs2_commit_truncate+0xc27/0x24b0 [ 1655.671703][ T637] ocfs2_evict_inode+0x1022/0x4280 [ 1655.677396][ T637] evict+0x4b7/0x8a0 [ 1655.681863][ T637] vfs_rmdir+0x378/0x4b0 [ 1655.686687][ T637] do_rmdir+0x29f/0x590 [ 1655.691411][ T637] __x64_sys_unlinkat+0xc4/0xe0 [ 1655.696834][ T637] do_syscall_64+0x55/0xb0 [ 1655.701818][ T637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.708288][ T637] [ 1655.708288][ T637] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 1655.718869][ T637] __lock_acquire+0x37ef/0x7d80 [ 1655.724363][ T637] lock_acquire+0x19e/0x420 [ 1655.729432][ T637] down_write+0x97/0x200 [ 1655.734243][ T637] ocfs2_xattr_set+0xbe8/0x13a0 [ 1655.739755][ T637] ocfs2_set_acl+0x4d4/0x580 [ 1655.744923][ T637] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1655.750530][ T637] vfs_set_acl+0x80f/0xa70 [ 1655.755544][ T637] do_set_acl+0xf5/0x180 [ 1655.760389][ T637] path_setxattr+0x362/0x590 [ 1655.765560][ T637] __x64_sys_setxattr+0xbb/0xd0 [ 1655.770993][ T637] do_syscall_64+0x55/0xb0 [ 1655.775975][ T637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.782443][ T637] [ 1655.782443][ T637] other info that might help us debug this: [ 1655.782443][ T637] [ 1655.792893][ T637] Chain exists of: [ 1655.792893][ T637] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 1655.792893][ T637] [ 1655.809920][ T637] Possible unsafe locking scenario: [ 1655.809920][ T637] [ 1655.817421][ T637] CPU0 CPU1 [ 1655.822833][ T637] ---- ---- [ 1655.828333][ T637] lock(&oi->ip_xattr_sem); [ 1655.832979][ T637] lock(&journal->j_trans_barrier); [ 1655.840847][ T637] lock(&oi->ip_xattr_sem); [ 1655.848013][ T637] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 1655.855356][ T637] [ 1655.855356][ T637] *** DEADLOCK *** [ 1655.855356][ T637] [ 1655.863543][ T637] 3 locks held by syz.6.11143/637: [ 1655.868693][ T637] #0: ffff88801b74c418 (sb_writers#34){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1655.878010][ T637] #1: ffff8880534aed98 (&type->i_mutex_dir_key#31){++++}-{3:3}, at: vfs_set_acl+0x368/0xa70 [ 1655.888274][ T637] #2: ffff8880534aeab8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 1655.898281][ T637] [ 1655.898281][ T637] stack backtrace: [ 1655.904216][ T637] CPU: 0 PID: 637 Comm: syz.6.11143 Not tainted syzkaller #0 [ 1655.911635][ T637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1655.921829][ T637] Call Trace: [ 1655.925148][ T637] [ 1655.928251][ T637] dump_stack_lvl+0x18c/0x250 [ 1655.932986][ T637] ? load_image+0x420/0x420 [ 1655.937587][ T637] ? show_regs_print_info+0x20/0x20 [ 1655.942844][ T637] ? print_circular_bug+0x12b/0x1a0 [ 1655.948104][ T637] check_noncircular+0x2fc/0x400 [ 1655.953103][ T637] ? look_up_lock_class+0x75/0x140 [ 1655.958279][ T637] ? print_deadlock_bug+0x5d0/0x5d0 [ 1655.963523][ T637] ? lockdep_lock+0xf5/0x230 [ 1655.968168][ T637] ? lockdep_unlock+0x146/0x2e0 [ 1655.973071][ T637] ? _find_first_zero_bit+0xd6/0x100 [ 1655.978433][ T637] __lock_acquire+0x37ef/0x7d80 [ 1655.983363][ T637] ? _raw_spin_unlock+0x40/0x40 [ 1655.988282][ T637] ? verify_lock_unused+0x140/0x140 [ 1655.993552][ T637] lock_acquire+0x19e/0x420 [ 1655.998113][ T637] ? ocfs2_xattr_set+0xbe8/0x13a0 [ 1656.003196][ T637] ? __rwlock_init+0x150/0x150 [ 1656.008050][ T637] ? __might_sleep+0xe0/0xe0 [ 1656.012702][ T637] ? read_lock_is_recursive+0x20/0x20 [ 1656.018134][ T637] ? ocfs2_inode_lock_tracker+0x47c/0x700 [ 1656.023948][ T637] ? ocfs2_xattr_block_find+0x15b/0x4e0 [ 1656.029546][ T637] down_write+0x97/0x200 [ 1656.033850][ T637] ? ocfs2_xattr_set+0xbe8/0x13a0 [ 1656.038944][ T637] ? down_read_killable+0x340/0x340 [ 1656.044204][ T637] ocfs2_xattr_set+0xbe8/0x13a0 [ 1656.049109][ T637] ? _raw_spin_unlock+0x40/0x40 [ 1656.054036][ T637] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 1656.059810][ T637] ? ocfs2_set_acl+0xe6/0x580 [ 1656.064544][ T637] ? vfs_set_acl+0x80f/0xa70 [ 1656.069177][ T637] ? do_set_acl+0xf5/0x180 [ 1656.073633][ T637] ? path_setxattr+0x362/0x590 [ 1656.078457][ T637] ? do_syscall_64+0x55/0xb0 [ 1656.083128][ T637] ? from_kgid+0x153/0x6a0 [ 1656.087594][ T637] ? make_kgid+0x650/0x650 [ 1656.092062][ T637] ? ocfs2_set_acl+0xe6/0x580 [ 1656.096798][ T637] ? rcu_is_watching+0x15/0xb0 [ 1656.101625][ T637] ? ocfs2_set_acl+0xe6/0x580 [ 1656.106364][ T637] ? __kmalloc+0xe5/0x240 [ 1656.110753][ T637] ocfs2_set_acl+0x4d4/0x580 [ 1656.115407][ T637] ocfs2_iop_set_acl+0x1b2/0x2b0 [ 1656.120409][ T637] ? ocfs2_xattr_get+0x260/0x260 [ 1656.125397][ T637] ? evm_inode_set_acl+0xbc/0x430 [ 1656.130508][ T637] ? from_kgid+0x153/0x6a0 [ 1656.134978][ T637] ? make_kgid+0x650/0x650 [ 1656.139447][ T637] ? down_read_killable+0x340/0x340 [ 1656.144694][ T637] ? make_kgid+0x1c8/0x650 [ 1656.149169][ T637] ? evm_revalidate_status+0x4f/0xb0 [ 1656.154556][ T637] ? posix_acl_valid+0x3ba/0x430 [ 1656.159540][ T637] vfs_set_acl+0x80f/0xa70 [ 1656.164044][ T637] do_set_acl+0xf5/0x180 [ 1656.168332][ T637] path_setxattr+0x362/0x590 [ 1656.173003][ T637] ? simple_xattrs_free+0x150/0x150 [ 1656.178312][ T637] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1656.184395][ T637] ? lock_chain_count+0x20/0x20 [ 1656.189306][ T637] __x64_sys_setxattr+0xbb/0xd0 [ 1656.194223][ T637] do_syscall_64+0x55/0xb0 [ 1656.198690][ T637] ? clear_bhb_loop+0x40/0x90 [ 1656.203423][ T637] ? clear_bhb_loop+0x40/0x90 [ 1656.208150][ T637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1656.214129][ T637] RIP: 0033:0x7f3d75d9e019 [ 1656.218646][ T637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.238344][ T637] RSP: 002b:00007f3d76c5c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1656.246821][ T637] RAX: ffffffffffffffda RBX: 00007f3d76025fa0 RCX: 00007f3d75d9e019 [ 1656.254847][ T637] RDX: 00002000000024c0 RSI: 0000200000000080 RDI: 00002000000000c0 [ 1656.262865][ T637] RBP: 00007f3d75e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1656.270885][ T637] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000000 [ 1656.279011][ T637] R13: 00007f3d76026038 R14: 00007f3d76025fa0 R15: 00007ffdd92580b8 [ 1656.287046][ T637] [ 1656.434550][T15786] ocfs2: Unmounting device (7,6) on (node local)