last executing test programs: 3m21.559552553s ago: executing program 4 (id=3415): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat\x00') lseek(r0, 0x0, 0x1) 3m21.347978676s ago: executing program 4 (id=3419): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xec, 0x0, 0x6, 0x80000000000}, {0x8000000004}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@broadcast, 0x0, 0xff}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xfe}, 0x3502, 0x0, 0x3, 0x6, 0xae, 0xffffffff}}, 0xa7) 3m21.10708093s ago: executing program 4 (id=3424): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5a3f02000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="de00000001200000080001"], 0x50}}, 0x0) 3m20.909522743s ago: executing program 4 (id=3427): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 3m20.49811549s ago: executing program 4 (id=3433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)={0xc0, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0xac, 0x1, '\r\x80\xe9|;rl\xf6\xb8\xfb\x17\x9a\xa6\xf5d\xc1\xe8\x93|\t\xcd\xce\xf6\xd5}\xbf\x9a\xce\xd4J\x055\xef\xad\x9f\x00Z\bW\x83A!\x9d\xb8\xdd\xa6\x1f-\xfe\x97\xd0\"vW\xbc\xb7\tp\x12\xfc\xa1\t\xf9\xdfvN?\x90\x1cffff888050380000(4096) [ 466.546799][T16122] cramfs: Error -3 while decompressing! [ 466.611170][T16122] cramfs: ffffffff9754d548(18)->ffff888050380000(4096) [ 466.657942][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 466.657958][ T26] audit: type=1800 audit(466.625:1857): pid=16122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5156" name="file1" dev="loop1" ino=324 res=0 errno=0 [ 466.703789][T16132] netlink: 'syz.3.5162': attribute type 32 has an invalid length. [ 467.150525][T16141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 467.665797][T16163] loop1: detected capacity change from 0 to 2048 [ 467.723889][T16163] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 467.776090][T16171] loop0: detected capacity change from 0 to 1024 [ 467.810042][T16171] EXT4-fs: Ignoring removed bh option [ 467.832904][T16171] EXT4-fs: inline encryption not supported [ 467.893415][T16171] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 467.902041][T16163] UDF-fs: unknown compression code (0) [ 467.998311][T16171] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 2: comm syz.0.5176: lblock 2 mapped to illegal pblock 2 (length 1) [ 468.033013][T16171] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 468.051457][T16171] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 48: comm syz.0.5176: lblock 0 mapped to illegal pblock 48 (length 1) [ 468.088612][T16171] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 468.129114][T16171] EXT4-fs error (device loop0): ext4_acquire_dquot:6795: comm syz.0.5176: Failed to acquire dquot type 0 [ 468.158830][T16171] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 468.197572][T16171] EXT4-fs error (device loop0): ext4_evict_inode:279: inode #11: comm syz.0.5176: mark_inode_dirty error [ 468.246595][T16171] EXT4-fs warning (device loop0): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 468.303273][T16171] EXT4-fs (loop0): 1 orphan inode deleted [ 468.327551][T16171] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 468.327739][ T56] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 468.439842][ T56] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 468.480814][ T56] EXT4-fs error (device loop0): ext4_release_dquot:6818: comm kworker/u4:4: Failed to release dquot type 0 [ 468.565684][T16171] EXT4-fs (loop0): unmounting filesystem. [ 468.572161][T16171] EXT4-fs error (device loop0): __ext4_get_inode_loc:4506: comm syz.0.5176: Invalid inode table block 1 in block_group 0 [ 468.611357][T16171] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5885: Corrupt filesystem [ 468.669057][T16171] EXT4-fs error (device loop0): ext4_quota_off:7084: inode #3: comm syz.0.5176: mark_inode_dirty error [ 468.858388][T16201] cgroup: release_agent respecified [ 468.870160][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5192'. [ 469.026676][T16203] loop1: detected capacity change from 0 to 2048 [ 469.213979][T16203] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 469.421399][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 469.725366][T16226] loop3: detected capacity change from 0 to 2048 [ 469.797394][T16234] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 469.848623][T16236] loop0: detected capacity change from 0 to 256 [ 469.909980][T16226] NILFS (loop3): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 469.917204][ T7400] kernel write not supported for file /672/net/sockstat (pid: 7400 comm: kworker/1:10) [ 469.939739][T16226] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=16) [ 469.993044][T16226] Remounting filesystem read-only [ 469.998299][T16226] NILFS (loop3): error -5 truncating bmap (ino=16) [ 469.999699][T16236] FAT-fs (loop0): Directory bread(block 64) failed [ 470.022824][T16236] FAT-fs (loop0): Directory bread(block 65) failed [ 470.029733][T16236] FAT-fs (loop0): Directory bread(block 66) failed [ 470.052588][T16226] syz.3.5205 (16226) used greatest stack depth: 18016 bytes left [ 470.060676][T16236] FAT-fs (loop0): Directory bread(block 67) failed [ 470.102476][T16236] FAT-fs (loop0): Directory bread(block 68) failed [ 470.130875][T16236] FAT-fs (loop0): Directory bread(block 69) failed [ 470.146191][T16236] FAT-fs (loop0): Directory bread(block 70) failed [ 470.169554][T16236] FAT-fs (loop0): Directory bread(block 71) failed [ 470.177673][ T4261] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 470.187372][T16236] FAT-fs (loop0): Directory bread(block 72) failed [ 470.202891][T16236] FAT-fs (loop0): Directory bread(block 73) failed [ 471.254255][T16275] 9pnet_virtio: no channels available for device syz [ 471.350070][T16280] loop0: detected capacity change from 0 to 16 [ 471.382388][T16280] erofs: (device loop0): mounted with root inode @ nid 36. [ 471.406453][T16283] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5227'. [ 471.445839][T16280] loop0: Can't mount, would change RO state [ 471.967783][T16302] qrtr: Invalid version 0 [ 472.395784][T16316] 9pnet_fd: p9_fd_create_unix (16316): problem connecting socket: ./file0: -111 [ 472.489170][T16310] loop2: detected capacity change from 0 to 4096 [ 472.761991][T16328] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 472.922154][T16310] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 473.023797][T16310] Remounting filesystem read-only [ 473.155701][T16339] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5257'. [ 473.254517][T16341] loop1: detected capacity change from 0 to 512 [ 473.294667][T16341] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 473.328468][T16343] netlink: 'syz.0.5259': attribute type 10 has an invalid length. [ 473.353217][ T4249] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 473.383608][T16343] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 473.396292][T16341] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 473.843690][T16348] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 473.898827][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 473.955243][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5264'. [ 473.988186][T16358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5264'. [ 474.226389][T16365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 474.234686][T16365] IPv6: NLM_F_CREATE should be set when creating new route [ 474.875390][T16385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5278'. [ 475.007318][T16389] loop2: detected capacity change from 0 to 1024 [ 475.438316][T16399] device bond3 entered promiscuous mode [ 475.503371][ T11] hfsplus: b-tree write err: -5, ino 4 [ 475.565903][T16366] loop3: detected capacity change from 0 to 32768 [ 475.572559][T16404] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5288'. [ 475.614024][T16366] XFS: ikeep mount option is deprecated. [ 475.704077][ T4262] Bluetooth: hci3: Malformed Event: 0x02 [ 475.755036][T16366] XFS (loop3): Mounting V5 Filesystem [ 475.885945][T16366] XFS (loop3): Ending clean mount [ 475.962327][T16366] XFS (loop3): Quotacheck needed: Please wait. [ 476.056798][T16419] usb usb8: usbfs: process 16419 (syz.0.5291) did not claim interface 4 before use [ 476.117360][T16366] XFS (loop3): Quotacheck: Done. [ 476.354328][ T4261] XFS (loop3): Unmounting Filesystem [ 476.369983][T16393] loop5: detected capacity change from 0 to 32768 [ 476.404187][T16393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.5282 (16393) [ 476.472044][T16393] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 476.511046][T16393] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 476.572790][T16393] BTRFS info (device loop5): using free space tree [ 477.011323][T16393] BTRFS info (device loop5): enabling ssd optimizations [ 477.088209][T16459] bond0: Error: Cannot enslave bond to itself. [ 477.282102][T12117] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 477.595319][ T26] audit: type=1326 audit(477.555:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.0.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1c38d169 code=0x7ffc0000 [ 477.740156][ T26] audit: type=1326 audit(477.565:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.0.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fec1c38d169 code=0x7ffc0000 [ 477.882699][ T26] audit: type=1326 audit(477.565:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16473 comm="syz.0.5309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1c38d169 code=0x7ffc0000 [ 477.934830][T16487] loop3: detected capacity change from 0 to 256 [ 478.136125][T16487] FAT-fs (loop3): Directory bread(block 64) failed [ 478.153019][T16487] FAT-fs (loop3): Directory bread(block 65) failed [ 478.196753][T16487] FAT-fs (loop3): Directory bread(block 66) failed [ 478.229397][T16487] FAT-fs (loop3): Directory bread(block 67) failed [ 478.252858][T16487] FAT-fs (loop3): Directory bread(block 68) failed [ 478.259468][T16487] FAT-fs (loop3): Directory bread(block 69) failed [ 478.303100][T16487] FAT-fs (loop3): Directory bread(block 70) failed [ 478.309709][T16487] FAT-fs (loop3): Directory bread(block 71) failed [ 478.322759][T16487] FAT-fs (loop3): Directory bread(block 72) failed [ 478.349695][T16487] FAT-fs (loop3): Directory bread(block 73) failed [ 478.391005][T16500] loop1: detected capacity change from 0 to 16 [ 478.491416][T16500] erofs: (device loop1): mounted with root inode @ nid 36. [ 478.569881][T16500] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 478.621689][T16500] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -35 in[64, 4032] out[1851] [ 478.672819][T16500] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 479.140010][T16491] loop2: detected capacity change from 0 to 32768 [ 479.225475][T16526] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 479.235516][T16526] overlayfs: missing 'lowerdir' [ 479.278794][T16491] XFS (loop2): Mounting V5 Filesystem [ 479.413757][T16491] XFS (loop2): Ending clean mount [ 479.642082][ T4249] XFS (loop2): Unmounting Filesystem [ 479.839994][T16548] loop5: detected capacity change from 0 to 128 [ 480.052800][T12117] sysv_free_block: flc_count > flc_size [ 480.058450][T12117] sysv_free_block: flc_count > flc_size [ 480.090060][T12117] sysv_free_block: flc_count > flc_size [ 480.109359][T12117] sysv_free_block: flc_count > flc_size [ 480.126388][T12117] sysv_free_block: flc_count > flc_size [ 480.132049][T12117] sysv_free_block: flc_count > flc_size [ 480.153326][T12117] sysv_free_block: flc_count > flc_size [ 480.158940][T12117] sysv_free_block: flc_count > flc_size [ 480.185099][T12117] sysv_free_block: flc_count > flc_size [ 480.190708][T12117] sysv_free_block: flc_count > flc_size [ 480.233502][T12117] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 480.417954][T16563] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 480.679156][T16575] No such timeout policy "syz1" [ 481.200818][T16593] loop5: detected capacity change from 0 to 256 [ 481.275948][T16593] FAT-fs (loop5): Directory bread(block 64) failed [ 481.311191][T16593] FAT-fs (loop5): Directory bread(block 65) failed [ 481.361322][T16593] FAT-fs (loop5): Directory bread(block 66) failed [ 481.388704][T16593] FAT-fs (loop5): Directory bread(block 67) failed [ 481.414637][T16593] FAT-fs (loop5): Directory bread(block 68) failed [ 481.421235][T16593] FAT-fs (loop5): Directory bread(block 69) failed [ 481.465039][T16593] FAT-fs (loop5): Directory bread(block 70) failed [ 481.489548][T16573] loop0: detected capacity change from 0 to 32768 [ 481.503101][T16593] FAT-fs (loop5): Directory bread(block 71) failed [ 481.510572][T16593] FAT-fs (loop5): Directory bread(block 72) failed [ 481.526666][T16593] FAT-fs (loop5): Directory bread(block 73) failed [ 481.555214][T16573] ea_get: invalid extended attribute [ 481.561178][T16573] ffff888071e90c70: 04 00 00 00 .... [ 481.901848][ T52] block nbd3: Attempted send on invalid socket [ 481.908535][ T52] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 481.923058][T16611] vxfs: unable to read disk superblock at 1 [ 481.931002][ T93] block nbd3: Attempted send on invalid socket [ 481.937282][ T93] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 481.962860][T16611] vxfs: unable to read disk superblock at 8 [ 481.994537][T16611] vxfs: can't find superblock. [ 482.285377][T16628] netlink: 'syz.5.5379': attribute type 1 has an invalid length. [ 482.834651][T16649] dlm: no locking on control device [ 483.759961][T16679] ipt_REJECT: ECHOREPLY no longer supported. [ 483.867307][T16651] loop3: detected capacity change from 0 to 32768 [ 483.965455][T16651] XFS (loop3): Mounting V5 Filesystem [ 484.106924][T16651] XFS (loop3): Ending clean mount [ 484.161516][T16695] loop0: detected capacity change from 0 to 256 [ 484.162740][ T7405] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 484.172973][T16651] XFS (loop3): Quotacheck needed: Please wait. [ 484.251740][T16695] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb080095b, utbl_chksum : 0xe619d30d) [ 484.329984][T16651] XFS (loop3): Quotacheck: Done. [ 484.362728][ T7405] usb 2-1: Using ep0 maxpacket: 16 [ 484.370094][ T7405] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 484.388922][ T7405] usb 2-1: config 252 has no interface number 0 [ 484.409730][ T7405] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 484.484497][ T7405] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 484.506366][ T7405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.516066][ T7405] usb 2-1: Product: syz [ 484.520290][ T7405] usb 2-1: Manufacturer: syz [ 484.534206][ T4261] XFS (loop3): Unmounting Filesystem [ 484.571347][ T7405] usb 2-1: SerialNumber: syz [ 484.654260][ T7405] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 484.853568][ T11] usb 2-1: Failed to submit usb control message: -71 [ 484.861086][ T11] usb 2-1: unable to send the bmi data to the device: -71 [ 484.874464][ T7405] usb 2-1: USB disconnect, device number 21 [ 484.932795][ T11] usb 2-1: unable to get target info from device [ 484.962377][ T11] usb 2-1: could not get target info (-71) [ 485.009421][ T11] usb 2-1: could not probe fw (-71) [ 485.201524][ T26] audit: type=1326 audit(485.165:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2138d169 code=0x7ffc0000 [ 485.262930][ T26] audit: type=1326 audit(485.165:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2138d169 code=0x7ffc0000 [ 485.342825][ T26] audit: type=1326 audit(485.195:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f1e2138d169 code=0x7ffc0000 [ 485.422808][ T26] audit: type=1326 audit(485.195:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2138d169 code=0x7ffc0000 [ 485.504472][ T26] audit: type=1326 audit(485.195:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.5423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e2138d169 code=0x7ffc0000 [ 485.563602][T16728] loop0: detected capacity change from 0 to 4096 [ 485.621668][T16728] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 485.691293][T16728] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 486.076545][T16754] QAT: Invalid ioctl 1075883590 [ 486.132981][T16754] QAT: Invalid ioctl 1075883590 [ 486.138493][T16754] QAT: Invalid ioctl 1075883590 [ 486.148657][T16754] QAT: Invalid ioctl 1075883590 [ 486.163000][ T7405] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 486.170723][T16754] QAT: Invalid ioctl 1075883590 [ 486.179884][T16754] QAT: Invalid ioctl 1075883590 [ 486.179960][T16754] QAT: Invalid ioctl 1075883590 [ 486.180034][T16754] QAT: Invalid ioctl 1075883590 [ 486.180108][T16754] QAT: Invalid ioctl 1075883590 [ 486.180181][T16754] QAT: Invalid ioctl 1075883590 [ 486.372790][ T7405] usb 2-1: Using ep0 maxpacket: 16 [ 486.379839][ T7405] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 486.412160][ T7405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.450672][ T7405] usb 2-1: config 0 descriptor?? [ 486.489906][ T7405] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 486.850660][T16781] netlink: 'syz.2.5452': attribute type 12 has an invalid length. [ 486.890201][ T7405] gspca_sonixj: reg_r err -71 [ 486.892886][T16781] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 486.895202][ T7405] sonixj: probe of 2-1:0.0 failed with error -71 [ 486.977402][ T7405] usb 2-1: USB disconnect, device number 22 [ 487.015649][T16784] IPVS: length: 182 != 8 [ 487.069692][T16788] loop0: detected capacity change from 0 to 164 [ 487.487061][T16798] loop2: detected capacity change from 0 to 2048 [ 487.493355][ T26] audit: type=1326 audit(487.455:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16801 comm="syz.5.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 487.553212][T16798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 487.588456][ T26] audit: type=1326 audit(487.485:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16801 comm="syz.5.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 487.641201][ T4328] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 487.678974][ T26] audit: type=1326 audit(487.485:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16801 comm="syz.5.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 487.701011][ C1] vkms_vblank_simulate: vblank timer overrun [ 487.727907][ T26] audit: type=1326 audit(487.485:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16801 comm="syz.5.5462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 487.960830][T16817] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 488.020121][T16817] overlayfs: conflicting options: userxattr,redirect_dir=off [ 488.043381][ T26] audit: type=1326 audit(488.015:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16819 comm="syz.0.5472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec1c38d169 code=0x7ffc0000 [ 488.270443][T16826] netlink: 'syz.2.5474': attribute type 1 has an invalid length. [ 488.338071][T16826] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.5474'. [ 488.338096][T16831] device lo left promiscuous mode [ 488.412121][T16831] device tunl0 left promiscuous mode [ 488.428843][T16831] device gre0 left promiscuous mode [ 488.451140][T16831] device gretap0 left promiscuous mode [ 488.520570][T16831] device erspan0 left promiscuous mode [ 488.560530][T16831] device ip_vti0 left promiscuous mode [ 488.583753][T16831] device ip6_vti0 left promiscuous mode [ 488.604087][T16831] device sit0 left promiscuous mode [ 488.623688][T16831] device ip6tnl0 left promiscuous mode [ 488.630214][T16831] device ip6gre0 left promiscuous mode [ 488.647699][T16831] device syz_tun left promiscuous mode [ 488.660800][T16831] device ip6gretap0 left promiscuous mode [ 488.670425][T16831] device vcan0 left promiscuous mode [ 488.686102][T16831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 488.706636][T16831] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 488.719233][T16831] device bond0 left promiscuous mode [ 488.727421][T16831] device bond_slave_0 left promiscuous mode [ 488.738658][T16831] device bond_slave_1 left promiscuous mode [ 488.749244][T16831] device team0 left promiscuous mode [ 488.759957][T16831] device team_slave_0 left promiscuous mode [ 488.769702][T16831] device team_slave_1 left promiscuous mode [ 488.783774][T16831] device dummy0 left promiscuous mode [ 488.790234][T16831] device caif0 left promiscuous mode [ 488.815466][T16831] device vlan0 left promiscuous mode [ 488.835602][T16831] device netdevsim0 left promiscuous mode [ 488.861524][T16844] netlink: 'syz.3.5483': attribute type 21 has an invalid length. [ 488.900117][T16844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5483'. [ 489.143020][ T7405] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 489.344858][ T7405] usb 6-1: Using ep0 maxpacket: 16 [ 489.353992][ T7405] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 489.375294][ T7405] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 489.397265][ T7405] usb 6-1: config 0 interface 0 has no altsetting 0 [ 489.429489][ T7405] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 489.446254][ T4748] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 489.463640][ T7405] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.471727][ T7405] usb 6-1: Product: syz [ 489.493308][ T7405] usb 6-1: Manufacturer: syz [ 489.503017][ T7405] usb 6-1: SerialNumber: syz [ 489.519103][ T7405] usb 6-1: config 0 descriptor?? [ 489.522041][T16868] loop2: detected capacity change from 0 to 16 [ 489.564354][T16868] erofs: (device loop2): mounted with root inode @ nid 36. [ 489.642757][ T4748] usb 1-1: Using ep0 maxpacket: 32 [ 489.654452][ T4748] usb 1-1: unable to get BOS descriptor or descriptor too short [ 489.671046][ T4748] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 489.693739][ T4748] usb 1-1: config 7 has no interface number 0 [ 489.700167][ T4748] usb 1-1: config 7 interface 187 has no altsetting 0 [ 489.761020][ T4748] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 489.790890][ T4748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.824501][ T4748] usb 1-1: Product: syz [ 489.828732][ T4748] usb 1-1: Manufacturer: syz [ 489.846195][ T4748] usb 1-1: SerialNumber: syz [ 489.966444][ T7400] usb 6-1: USB disconnect, device number 8 [ 490.085180][ T4748] usb 1-1: Invalid number of CPorts: 0 [ 490.090735][ T4748] es2_ap_driver: probe of 1-1:7.187 failed with error -22 [ 490.100896][T16882] device gtp0 entered promiscuous mode [ 490.166691][T16884] loop3: detected capacity change from 0 to 1024 [ 490.251473][T16884] syz.3.5503: attempt to access beyond end of device [ 490.251473][T16884] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 490.281326][T16884] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 490.283048][T16886] loop1: detected capacity change from 0 to 512 [ 490.294145][T16884] syz.3.5503: attempt to access beyond end of device [ 490.294145][T16884] loop3: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 490.319600][T16884] Buffer I/O error on dev loop3, logical block 100663296, async page read [ 490.323699][ T7405] usb 1-1: USB disconnect, device number 20 [ 490.376919][T16886] EXT4-fs (loop1): orphan cleanup on readonly fs [ 490.393573][T16889] [U] v3f"S/4:XTzWtlW= [ 490.400598][T16889] [U] J"e:" [ 490.400793][T16886] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.5504: corrupted in-inode xattr [ 490.443426][T16886] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.5504: couldn't read orphan inode 15 (err -117) [ 490.477919][T16886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 490.632231][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 490.632248][ T26] audit: type=1326 audit(490.595:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16894 comm="syz.3.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae9f8d169 code=0x7ffc0000 [ 490.712974][ T26] audit: type=1326 audit(490.625:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16894 comm="syz.3.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae9f8d169 code=0x7ffc0000 [ 490.734823][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.753938][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 490.870157][ T26] audit: type=1326 audit(490.635:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16894 comm="syz.3.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f6ae9f8d169 code=0x7ffc0000 [ 490.995497][ T26] audit: type=1326 audit(490.635:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16894 comm="syz.3.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae9f8d169 code=0x7ffc0000 [ 491.095142][ T26] audit: type=1326 audit(490.635:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16894 comm="syz.3.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae9f8d169 code=0x7ffc0000 [ 491.191500][T16911] device netdevsim0 entered promiscuous mode [ 491.283252][T16911] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 491.469034][T16921] loop2: detected capacity change from 0 to 8 [ 491.517803][T16921] cramfs: Error -3 while decompressing! [ 491.553005][T16921] cramfs: ffffffff97551568(26)->ffff88804bd63000(4096) [ 491.559978][T16921] cramfs: Error -3 while decompressing! [ 491.607921][T16921] cramfs: ffffffff97551582(26)->ffff88804fabb000(4096) [ 491.611956][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5522'. [ 491.633032][T16921] cramfs: Error -3 while decompressing! [ 491.643037][T16921] cramfs: ffffffff9755159c(16)->ffff88804fa88000(4096) [ 491.678686][T16925] netlink: 'syz.5.5523': attribute type 15 has an invalid length. [ 491.682833][T16921] cramfs: Error -3 while decompressing! [ 491.725555][T16921] cramfs: ffffffff97551568(26)->ffff88804bd63000(4096) [ 491.737031][T16925] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5523'. [ 492.080161][T16904] loop1: detected capacity change from 0 to 32768 [ 492.134079][T16904] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.5511 (16904) [ 492.226391][T16904] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 492.248964][T16904] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 492.312783][T16904] BTRFS info (device loop1): setting nodatacow, compression disabled [ 492.372826][T16904] BTRFS info (device loop1): force clearing of disk cache [ 492.380068][T16904] BTRFS info (device loop1): enabling ssd optimizations [ 492.402724][T16904] BTRFS info (device loop1): using spread ssd allocation scheme [ 492.410444][T16904] BTRFS info (device loop1): doing ref verification [ 492.463021][T16904] BTRFS info (device loop1): force zlib compression, level 3 [ 492.489745][T16904] BTRFS info (device loop1): not using ssd optimizations [ 492.490842][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5533'. [ 492.531462][T16904] BTRFS info (device loop1): not using spread ssd allocation scheme [ 492.572776][T16904] BTRFS info (device loop1): using free space tree [ 492.795869][T16904] BTRFS info (device loop1): rebuilding free space tree [ 493.256568][ T4248] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 493.723574][T17000] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5552'. [ 494.009561][T17005] netlink: 'syz.1.5546': attribute type 1 has an invalid length. [ 494.369226][T17021] loop3: detected capacity change from 0 to 64 [ 494.568822][T17018] loop1: detected capacity change from 0 to 4096 [ 494.614151][T17018] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 494.654892][T17018] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 494.692802][T17018] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 494.713485][ T26] audit: type=1326 audit(494.685:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17030 comm="syz.5.5566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 494.762743][T17018] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 494.795627][T17033] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 494.829855][T17029] loop3: detected capacity change from 0 to 4096 [ 494.866047][T17018] ntfs: volume version 3.1. [ 494.930799][T17029] ntfs: volume version 3.1. [ 495.522982][ T4478] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 495.717840][ T4478] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 495.736664][ T4478] usb 2-1: config 0 has no interface number 1 [ 495.745380][ T4478] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 495.790414][ T4478] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 495.794813][T17065] loop3: detected capacity change from 0 to 256 [ 495.824864][ T4478] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 495.868853][ T4478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 495.887475][ T4478] usb 2-1: SerialNumber: syz [ 495.889383][T17065] FAT-fs (loop3): Directory bread(block 64) failed [ 495.901988][ T4478] usb 2-1: config 0 descriptor?? [ 495.918305][T17065] FAT-fs (loop3): Directory bread(block 65) failed [ 495.922351][ T4478] usb 2-1: Found UVC 0.00 device (0002:0000) [ 495.935383][T17065] FAT-fs (loop3): Directory bread(block 66) failed [ 495.955412][T17063] loop2: detected capacity change from 0 to 4096 [ 495.972893][ T4478] usb 2-1: No valid video chain found. [ 495.982006][T17065] FAT-fs (loop3): Directory bread(block 67) failed [ 496.007079][T17065] FAT-fs (loop3): Directory bread(block 68) failed [ 496.051404][T17065] FAT-fs (loop3): Directory bread(block 69) failed [ 496.080544][T17065] FAT-fs (loop3): Directory bread(block 70) failed [ 496.108228][T17065] FAT-fs (loop3): Directory bread(block 71) failed [ 496.133045][T17065] FAT-fs (loop3): Directory bread(block 72) failed [ 496.150083][T17065] FAT-fs (loop3): Directory bread(block 73) failed [ 496.171705][ T4748] usb 2-1: USB disconnect, device number 23 [ 496.884423][T17098] loop2: detected capacity change from 0 to 512 [ 496.891523][T17098] EXT4-fs: Ignoring removed mblk_io_submit option [ 496.969642][T17098] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 497.042701][T17098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 497.050900][T17098] System zones: 1-12 [ 497.123063][T17098] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.5597: corrupted in-inode xattr [ 497.153594][T17112] netlink: 'syz.3.5605': attribute type 2 has an invalid length. [ 497.161480][T17112] netlink: 'syz.3.5605': attribute type 1 has an invalid length. [ 497.235371][T17098] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.5597: couldn't read orphan inode 15 (err -117) [ 497.270419][T17098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 497.586471][ T4249] EXT4-fs (loop2): unmounting filesystem. [ 497.797132][T17132] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 497.857336][T17132] xt_CT: You must specify a L4 protocol and not use inversions on it [ 497.878100][T17138] No such timeout policy "syz0" [ 498.729464][T17165] loop1: detected capacity change from 0 to 4096 [ 498.815746][T17172] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 498.871608][T17175] loop0: detected capacity change from 0 to 512 [ 498.878176][T17165] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 498.917143][T17165] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12) [ 498.959784][T17165] Remounting filesystem read-only [ 498.967219][T17175] EXT4-fs (loop0): orphan cleanup on readonly fs [ 499.012783][T17175] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 499.021021][T17165] NILFS (loop1): error -5 truncating bmap (ino=12) [ 499.050032][T17175] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 499.067548][T17175] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.5633: attempt to clear invalid blocks 2 len 1 [ 499.083472][T17175] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5633: invalid indirect mapped block 1819239214 (level 0) [ 499.140783][T17175] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.5633: invalid indirect mapped block 1819239214 (level 1) [ 499.188492][T17175] EXT4-fs (loop0): 1 truncate cleaned up [ 499.194456][ T4248] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 499.212269][T17175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 499.235465][T17175] EXT4-fs (loop0): unmounting filesystem. [ 499.872867][ T7400] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 500.062876][ T7400] usb 4-1: Using ep0 maxpacket: 16 [ 500.074651][ T7400] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 500.102757][ T7400] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 500.155143][ T7400] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 500.207680][ T7400] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 500.227079][ T7400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.257449][ T7400] usb 4-1: Product: syz [ 500.261674][ T7400] usb 4-1: Manufacturer: syz [ 500.287813][ T7400] usb 4-1: SerialNumber: syz [ 500.304818][ T7400] usb 4-1: config 0 descriptor?? [ 500.331546][T17198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 500.360089][T17198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 500.387627][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 500.400599][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 500.409626][ T7400] port100 4-1:0.0: NFC: Could not get supported command types [ 500.625942][T17234] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551459) [ 500.648477][ T4478] usb 4-1: USB disconnect, device number 14 [ 500.682720][T17234] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 500.787764][T17238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5663'. [ 500.822872][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5663'. [ 500.930419][T17215] loop1: detected capacity change from 0 to 32768 [ 500.988743][T17215] [ 500.988743][T17215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 500.988743][T17215] [ 501.074620][T17215] [ 501.074620][T17215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.074620][T17215] [ 501.112754][T17215] [ 501.112754][T17215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.112754][T17215] [ 501.165920][ T107] [ 501.165920][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.165920][ T107] [ 501.197014][T17250] loop0: detected capacity change from 0 to 256 [ 501.269151][T17248] loop5: detected capacity change from 0 to 4096 [ 501.314358][ T56] [ 501.314358][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.314358][ T56] [ 501.339992][T17248] __ntfs_error: 11 callbacks suppressed [ 501.340013][T17248] ntfs: (device loop5): ntfs_is_extended_system_file(): Inode hard link count doesn't match number of name attributes. You should run chkdsk. [ 501.358667][ T56] [ 501.358667][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.358667][ T56] [ 501.386073][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.392471][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.430839][ T4248] [ 501.430839][ T4248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.430839][ T4248] [ 501.452036][T17248] ntfs: (device loop5): ntfs_read_locked_inode(): $DATA attribute is missing. [ 501.472813][T17248] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 501.492034][ T108] [ 501.492034][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.492034][ T108] [ 501.521899][ T4248] [ 501.521899][ T4248] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.521899][ T4248] [ 501.566409][T17248] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 501.602394][T17248] ntfs: volume version 3.1. [ 501.617571][T17248] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 501.820763][T17262] netlink: 'syz.0.5676': attribute type 3 has an invalid length. [ 502.372748][T17278] loop5: detected capacity change from 0 to 256 [ 502.391015][T17278] exfat: Deprecated parameter 'namecase' [ 502.437792][T17278] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1cbb3694, utbl_chksum : 0xe619d30d) [ 502.459299][T17254] loop3: detected capacity change from 0 to 32768 [ 502.509351][T17254] find_entry called with index = 0 [ 502.523233][T17278] exFAT-fs (loop5): error, found bogus dentry(5) beyond unused empty group(4) (start_clu : 5, cur_clu : 5) [ 502.563185][T17254] read_mapping_page failed! [ 502.567900][T17254] ERROR: (device loop3): txCommit: [ 502.567900][T17254] [ 502.637313][T17254] ERROR: (device loop3): remounting filesystem as read-only [ 502.673684][T17254] ERROR: (device loop3): diFree: numfree > numinos [ 502.673684][T17254] [ 503.023018][T17294] loop2: detected capacity change from 0 to 64 [ 503.326860][T17306] Option ' ' to dns_resolver key: bad/missing value [ 503.675364][T17319] loop5: detected capacity change from 0 to 22 [ 503.715268][T17319] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 503.741928][T17321] netlink: 920 bytes leftover after parsing attributes in process `syz.1.5703'. [ 503.742377][T17319] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 503.785995][T17321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5703'. [ 504.358153][T17341] loop5: detected capacity change from 0 to 2048 [ 504.411189][T17345] loop3: detected capacity change from 0 to 128 [ 504.418482][T17346] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 504.702322][ T26] audit: type=1326 audit(504.665:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17353 comm="syz.5.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 504.811414][ T26] audit: type=1326 audit(504.705:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17353 comm="syz.5.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 504.833300][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.896200][ T26] audit: type=1326 audit(504.705:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17353 comm="syz.5.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 504.918045][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.985077][ T26] audit: type=1326 audit(504.705:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17353 comm="syz.5.5718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 505.036988][T17369] loop5: detected capacity change from 0 to 128 [ 505.053004][ T7405] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 505.117088][T17365] loop3: detected capacity change from 0 to 4096 [ 505.150540][T17365] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 505.225921][T17365] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 505.262941][ T7405] usb 1-1: Using ep0 maxpacket: 8 [ 505.270730][ T7405] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 505.304303][ T7405] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 505.321945][T17376] loop2: detected capacity change from 0 to 128 [ 505.325834][ T7405] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.365538][ T7405] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 505.366250][T17376] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 505.380049][ T7405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.391371][ T7405] usb 1-1: Product: syz [ 505.397294][ T7405] usb 1-1: Manufacturer: syz [ 505.402427][ T7405] usb 1-1: SerialNumber: syz [ 505.462832][T17376] sysv_count_free_blocks: >flc_size entries in free-list block [ 505.502079][T17376] sysv_count_free_inodes: unable to read inode table [ 505.713063][ T4249] sysv_free_block: flc_count > flc_size [ 505.718728][ T4249] sysv_free_block: flc_count > flc_size [ 505.782984][ T4249] sysv_free_block: flc_count > flc_size [ 505.788623][ T4249] sysv_free_block: flc_count > flc_size [ 505.837062][ T4249] sysv_free_block: flc_count > flc_size [ 505.867517][ T4249] sysv_free_block: flc_count > flc_size [ 505.876031][ T7405] usb 1-1: 0:2 : does not exist [ 505.924465][ T4249] sysv_free_block: flc_count > flc_size [ 505.930070][ T4249] sysv_free_block: flc_count > flc_size [ 505.935958][ T7405] usb 1-1: USB disconnect, device number 21 [ 505.954754][ T4249] sysv_free_block: flc_count > flc_size [ 505.961278][ T4249] sysv_free_block: flc_count > flc_size [ 505.971528][ T4249] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 505.984278][T17391] loop5: detected capacity change from 0 to 256 [ 506.155497][ T4328] udevd[4328]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.632479][T17385] loop3: detected capacity change from 0 to 32768 [ 506.700925][T17385] [ 506.700925][T17385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 506.700925][T17385] [ 506.781830][T17385] [ 506.781830][T17385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 506.781830][T17385] [ 506.820060][T17385] [ 506.820060][T17385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 506.820060][T17385] [ 506.853112][T17385] [ 506.853112][T17385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 506.853112][T17385] [ 506.912848][T17385] [ 506.912848][T17385] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 506.912848][T17385] [ 506.946535][ T107] [ 506.946535][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 506.946535][ T107] [ 507.046628][T17421] loop2: detected capacity change from 0 to 128 [ 507.060717][ T4261] [ 507.060717][ T4261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 507.060717][ T4261] [ 507.105049][ T4261] [ 507.105049][ T4261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 507.105049][ T4261] [ 507.661019][T17441] loop3: detected capacity change from 0 to 256 [ 507.772970][T17441] FAT-fs (loop3): Directory bread(block 64) failed [ 507.815999][T17441] FAT-fs (loop3): Directory bread(block 65) failed [ 507.843080][T17441] FAT-fs (loop3): Directory bread(block 66) failed [ 507.872809][T17441] FAT-fs (loop3): Directory bread(block 67) failed [ 507.887857][T17441] FAT-fs (loop3): Directory bread(block 68) failed [ 507.913352][T17441] FAT-fs (loop3): Directory bread(block 69) failed [ 507.937188][T17441] FAT-fs (loop3): Directory bread(block 70) failed [ 507.972249][T17441] FAT-fs (loop3): Directory bread(block 71) failed [ 507.986310][T17441] FAT-fs (loop3): Directory bread(block 72) failed [ 508.007390][T17441] FAT-fs (loop3): Directory bread(block 73) failed [ 508.142762][ T4295] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 508.332384][T17464] program syz.1.5771 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 508.345442][T17464] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 508.362730][ T4295] usb 3-1: Using ep0 maxpacket: 8 [ 508.369712][ T4295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 508.392792][ T4295] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 508.434883][ T4295] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 508.470023][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.502055][ T4295] usb 3-1: Product: syz [ 508.527295][ T4295] usb 3-1: Manufacturer: syz [ 508.533566][T17468] loop5: detected capacity change from 0 to 256 [ 508.543172][ T4295] usb 3-1: SerialNumber: syz [ 508.563800][ T4295] usb 3-1: config 0 descriptor?? [ 508.574127][T17468] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 509.004918][ T4295] usb 3-1: USB disconnect, device number 19 [ 509.295894][T17498] loop3: detected capacity change from 0 to 256 [ 509.347160][T17498] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 509.567662][T17504] loop0: detected capacity change from 0 to 64 [ 509.642795][T17504] Trying to free block not in datazone [ 509.648356][T17504] Trying to free block not in datazone [ 509.723407][T17504] Trying to free block not in datazone [ 509.852874][T17514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5796'. [ 509.952570][T17519] loop3: detected capacity change from 0 to 64 [ 510.045396][ T26] audit: type=1326 audit(510.015:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.1.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc958d169 code=0x7ffc0000 [ 510.122723][ T26] audit: type=1326 audit(510.015:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.1.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fafc958d169 code=0x7ffc0000 [ 510.185325][T17529] loop1: detected capacity change from 0 to 128 [ 510.202125][ T26] audit: type=1326 audit(510.015:1895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17521 comm="syz.1.5802" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafc958d169 code=0x7ffc0000 [ 510.236940][T17529] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 510.291423][T17529] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 510.318781][T17529] FAT-fs (loop1): Filesystem has been set read-only [ 510.456304][ T4248] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 510.965132][T17549] loop1: detected capacity change from 0 to 512 [ 511.101688][T17523] loop2: detected capacity change from 0 to 32768 [ 511.126430][T17549] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.5813: corrupted inode contents [ 511.177440][T17549] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #16: comm syz.1.5813: mark_inode_dirty error [ 511.180353][T17523] [ 511.180353][T17523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.180353][T17523] [ 511.190420][T17549] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.5813: corrupted inode contents [ 511.204629][T17556] loop3: detected capacity change from 0 to 256 [ 511.239937][T17549] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.5813: mark_inode_dirty error [ 511.254091][T17549] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.5813: corrupted inode contents [ 511.308155][T17549] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 511.314390][T17523] [ 511.314390][T17523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.314390][T17523] [ 511.328039][T17549] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.5813: corrupted inode contents [ 511.350919][T17523] [ 511.350919][T17523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.350919][T17523] [ 511.360395][T17549] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.5813: mark_inode_dirty error [ 511.374748][T17549] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 511.387135][T17549] EXT4-fs (loop1): 1 truncate cleaned up [ 511.393559][T17549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 511.402991][T17523] [ 511.402991][T17523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.402991][T17523] [ 511.404366][ T4306] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 511.442255][ T4306] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:6: Failed to release dquot type 1 [ 511.468144][T17533] loop5: detected capacity change from 0 to 32768 [ 511.477528][T17523] [ 511.477528][T17523] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.477528][T17523] [ 511.512902][ T108] [ 511.512902][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.512902][ T108] [ 511.548063][T17533] [ 511.548063][T17533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.548063][T17533] [ 511.574093][T17533] [ 511.574093][T17533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.574093][T17533] [ 511.583168][ T4249] [ 511.583168][ T4249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.583168][ T4249] [ 511.592710][ T4295] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 511.609010][T17533] [ 511.609010][T17533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.609010][T17533] [ 511.610486][ T4249] [ 511.610486][ T4249] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.610486][ T4249] [ 511.660482][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 511.672347][T17533] [ 511.672347][T17533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.672347][T17533] [ 511.793833][T17533] [ 511.793833][T17533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.793833][T17533] [ 511.815490][ T4295] usb 1-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 511.832787][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.872210][ T4295] pwc: Logitech ViewPort AV 100 webcam detected. [ 511.883559][T17564] netlink: 2980 bytes leftover after parsing attributes in process `syz.3.5820'. [ 511.906110][T17533] [ 511.906110][T17533] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.906110][T17533] [ 512.019563][ T56] [ 512.019563][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 512.019563][ T56] [ 512.059081][ T56] [ 512.059081][ T56] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 512.059081][ T56] [ 512.106407][ T108] [ 512.106407][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 512.106407][ T108] [ 512.153006][T12117] [ 512.153006][T12117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 512.153006][T12117] [ 512.174195][T12117] [ 512.174195][T12117] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 512.174195][T12117] [ 512.206132][T17569] loop3: detected capacity change from 0 to 256 [ 512.241847][T17569] exfat: Deprecated parameter 'namecase' [ 512.273607][T17569] exfat: Deprecated parameter 'namecase' [ 512.286933][ T4295] pwc: send_video_command error -71 [ 512.292319][ T4295] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 512.315670][ T4295] Philips webcam: probe of 1-1:127.0 failed with error -71 [ 512.338105][T17569] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 512.357160][ T4295] usb 1-1: USB disconnect, device number 22 [ 512.509303][T17574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5825'. [ 512.549239][T17574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5825'. [ 512.710818][ T26] audit: type=1326 audit(512.675:1896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.5.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 512.732807][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.853879][ T26] audit: type=1326 audit(512.675:1897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.5.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 512.991413][ T26] audit: type=1326 audit(512.675:1898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.5.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 513.122739][ T26] audit: type=1326 audit(512.675:1899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17576 comm="syz.5.5822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f665d58d169 code=0x7ffc0000 [ 513.182969][T17592] loop1: detected capacity change from 0 to 1024 [ 513.282426][T17592] EXT4-fs error (device loop1): ext4_map_blocks:744: inode #3: block 1: comm syz.1.5833: lblock 1 mapped to illegal pblock 1 (length 1) [ 513.373988][T17592] Quota error (device loop1): write_blk: dquota write failed [ 513.381457][T17592] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 513.414836][T17592] EXT4-fs error (device loop1): ext4_acquire_dquot:6795: comm syz.1.5833: Failed to acquire dquot type 0 [ 513.494152][T17592] EXT4-fs error (device loop1): ext4_free_blocks:6210: comm syz.1.5833: Freeing blocks not in datazone - block = 0, count = 4096 [ 513.561984][T17592] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.5833: Invalid inode bitmap blk 0 in block_group 0 [ 513.591686][ T11] EXT4-fs error (device loop1): ext4_map_blocks:634: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 513.608406][T17592] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 513.617917][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6818: comm kworker/u4:1: Failed to release dquot type 0 [ 513.664341][T17592] EXT4-fs (loop1): 1 orphan inode deleted [ 513.671010][T17592] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 513.761249][T17592] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 513.906144][T17617] xt_hashlimit: max too large, truncated to 1048576 [ 513.926208][ T4248] EXT4-fs (loop1): unmounting filesystem. [ 514.061089][T17621] loop2: detected capacity change from 0 to 128 [ 514.133867][ T4328] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 514.653756][T17646] loop2: detected capacity change from 0 to 1024 [ 514.782092][T17646] hfsplus: inconsistency in B*Tree (1,0,2,1,0) [ 514.797057][T17651] loop3: detected capacity change from 0 to 256 [ 514.819749][T17646] hfsplus: cannot replace xattr [ 514.823381][T17653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5862'. [ 514.877209][T17655] Scaler: ================= START STATUS ================= [ 514.922724][T17655] Scaler: ================== END STATUS ================== [ 515.138347][T17662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5865'. [ 515.222721][T17662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5865'. [ 515.345768][T17666] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.389116][T17666] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.477753][T17674] x_tables: unsorted entry at hook 2 [ 515.545842][T17676] cgroup: Need name or subsystem set [ 515.683020][T17680] UBIFS error (pid: 17680): cannot open "(null)", error -22 [ 515.855020][T17688] loop0: detected capacity change from 0 to 256 [ 515.940667][T17688] FAT-fs (loop0): Directory bread(block 64) failed [ 515.970909][T17688] FAT-fs (loop0): Directory bread(block 65) failed [ 516.002854][T17688] FAT-fs (loop0): Directory bread(block 66) failed [ 516.030092][T17688] FAT-fs (loop0): Directory bread(block 67) failed [ 516.072899][T17688] FAT-fs (loop0): Directory bread(block 68) failed [ 516.079496][T17688] FAT-fs (loop0): Directory bread(block 69) failed [ 516.153177][T17688] FAT-fs (loop0): Directory bread(block 70) failed [ 516.180077][T17688] FAT-fs (loop0): Directory bread(block 71) failed [ 516.191665][T17694] loop3: detected capacity change from 0 to 4096 [ 516.202817][T17688] FAT-fs (loop0): Directory bread(block 72) failed [ 516.219679][T17688] FAT-fs (loop0): Directory bread(block 73) failed [ 516.226432][T17694] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 516.344627][T17694] ntfs3: loop3: failed to convert "c46c" to iso8859-4 [ 516.451163][T17702] loop1: detected capacity change from 0 to 16 [ 516.496436][T17702] erofs: (device loop1): mounted with root inode @ nid 36. [ 516.783771][T17684] loop5: detected capacity change from 0 to 32768 [ 516.840041][ T4294] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 516.852060][T17684] JBD2: Ignoring recovery information on journal [ 516.960934][T17713] loop3: detected capacity change from 0 to 256 [ 517.013553][T17713] exfat: Deprecated parameter 'utf8' [ 517.021094][T17713] exfat: Deprecated parameter 'namecase' [ 517.034951][T17713] exfat: Deprecated parameter 'namecase' [ 517.052817][ T4294] usb 3-1: Using ep0 maxpacket: 16 [ 517.061287][T17713] exfat: Deprecated parameter 'utf8' [ 517.066890][ T4294] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 517.086818][T17684] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 517.096548][T17713] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 517.102730][ T4294] usb 3-1: config 0 has no interface number 0 [ 517.127380][ T4294] usb 3-1: config 0 interface 185 has no altsetting 0 [ 517.178995][ T4294] usb 3-1: New USB device found, idVendor=1ae7, idProduct=2001, bcdDevice=6c.3b [ 517.215920][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.229606][ T4294] usb 3-1: Product: syz [ 517.246311][ T4294] usb 3-1: Manufacturer: syz [ 517.266101][ T4294] usb 3-1: SerialNumber: syz [ 517.279425][ T4294] usb 3-1: config 0 descriptor?? [ 517.324804][ T4294] gspca_main: gspca_pac7302-2.14.0 probing 1ae7:2001 [ 517.335808][T12117] ocfs2: Unmounting device (7,5) on (node local) [ 517.375195][T17722] loop0: detected capacity change from 0 to 64 [ 517.421915][T17724] loop3: detected capacity change from 0 to 256 [ 517.485116][T17724] FAT-fs (loop3): Directory bread(block 64) failed [ 517.491749][T17724] FAT-fs (loop3): Directory bread(block 65) failed [ 517.509156][T17724] FAT-fs (loop3): Directory bread(block 66) failed [ 517.520919][T17724] FAT-fs (loop3): Directory bread(block 67) failed [ 517.563221][T17724] FAT-fs (loop3): Directory bread(block 68) failed [ 517.581991][T17724] FAT-fs (loop3): Directory bread(block 69) failed [ 517.621365][T17724] FAT-fs (loop3): Directory bread(block 70) failed [ 517.672207][T17724] FAT-fs (loop3): Directory bread(block 71) failed [ 517.679764][T17724] FAT-fs (loop3): Directory bread(block 72) failed [ 517.687835][T17724] FAT-fs (loop3): Directory bread(block 73) failed [ 517.724207][ T4294] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 517.731097][ T4294] gspca_pac7302: probe of 3-1:0.185 failed with error -71 [ 517.784708][ T4294] usb 3-1: USB disconnect, device number 20 [ 517.940988][T17733] loop5: detected capacity change from 0 to 2048 [ 517.954822][T17730] loop1: detected capacity change from 0 to 8192 [ 517.980779][T17733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.993673][T17730] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 518.032847][T17730] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 518.042133][T17730] REISERFS (device loop1): using ordered data mode [ 518.110681][T17730] reiserfs: using flush barriers [ 518.118636][T17730] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 518.203408][T17730] REISERFS (device loop1): checking transaction log (loop1) [ 518.250632][T17742] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5905'. [ 518.261491][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5905'. [ 518.286397][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5905'. [ 518.541176][T17730] REISERFS (device loop1): Using tea hash to sort names [ 518.563382][T17730] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 519.301359][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5921'. [ 519.352806][T17776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5921'. [ 519.361814][T17776] netlink: 'syz.0.5921': attribute type 4 has an invalid length. [ 519.466199][T17780] netlink: 'syz.5.5924': attribute type 12 has an invalid length. [ 519.511724][T17784] netlink: 'syz.1.5925': attribute type 10 has an invalid length. [ 519.547209][T17784] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 519.564806][T17784] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.804473][T17795] loop5: detected capacity change from 0 to 128 [ 520.589757][T17822] bridge0: port 3(netdevsim0) entered blocking state [ 520.621882][T17822] bridge0: port 3(netdevsim0) entered disabled state [ 521.305416][T17845] loop3: detected capacity change from 0 to 164 [ 521.463168][T17847] openvswitch: netlink: Key type 29 is not supported [ 521.506284][T17849] loop1: detected capacity change from 0 to 1024 [ 521.693356][ T56] hfsplus: b-tree write err: -5, ino 4 [ 521.716346][T17824] loop0: detected capacity change from 0 to 32768 [ 521.782096][T17824] [ 521.782096][T17824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 521.782096][T17824] [ 521.871319][T17824] [ 521.871319][T17824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 521.871319][T17824] [ 521.913107][T17824] [ 521.913107][T17824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 521.913107][T17824] [ 521.973086][T17824] [ 521.973086][T17824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 521.973086][T17824] [ 522.012484][T17824] [ 522.012484][T17824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.012484][T17824] [ 522.086784][T17824] [ 522.086784][T17824] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.086784][T17824] [ 522.266830][ T32] [ 522.266830][ T32] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.266830][ T32] [ 522.312744][ T32] [ 522.312744][ T32] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.312744][ T32] [ 522.337266][ T4257] [ 522.337266][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.337266][ T4257] [ 522.351395][ T4257] [ 522.351395][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.351395][ T4257] [ 522.384056][ T108] [ 522.384056][ T108] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 522.384056][ T108] [ 522.576527][T17851] loop2: detected capacity change from 0 to 32768 [ 522.655864][T17851] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 522.758248][T17851] (syz.2.5959,17851,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 522.778193][T17851] (syz.2.5959,17851,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 522.788306][T17851] (syz.2.5959,17851,1):ocfs2_mknod:502 ERROR: status = -117 [ 522.849811][ T4249] ocfs2: Unmounting device (7,2) on (node local) [ 523.378788][T17903] netlink: 'syz.5.5982': attribute type 1 has an invalid length. [ 523.394146][T17903] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5982'. [ 523.752365][T17914] loop0: detected capacity change from 0 to 2048 [ 524.312737][ T4294] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 524.499544][ T7405] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 524.507672][ T4294] usb 6-1: Using ep0 maxpacket: 8 [ 524.524440][ T4294] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 524.566899][ T4294] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.576164][ T4294] usb 6-1: Product: syz [ 524.580382][ T4294] usb 6-1: Manufacturer: syz [ 524.591906][ T4294] usb 6-1: SerialNumber: syz [ 524.612503][ T4294] usb 6-1: config 0 descriptor?? [ 524.631620][ T4294] gspca_main: sq930x-2.14.0 probing 2770:930c [ 524.725886][ T7405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 524.754415][ T7405] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 524.774572][ T7405] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 524.790839][ T7405] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 524.810001][ T7405] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 524.841568][ T7405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.905266][ T7405] usb 3-1: config 0 descriptor?? [ 524.959700][T17959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6010'. [ 524.975914][T17960] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 525.041370][ T4294] gspca_sq930x: ucbus_write failed -71 [ 525.047099][ T4294] sq930x: probe of 6-1:0.0 failed with error -71 [ 525.074746][ T4294] usb 6-1: USB disconnect, device number 9 [ 525.121946][ T7405] hdpvr 3-1:0.0: firmware version 0x34 dated .:&ij &usR,[L", [ 525.165707][ T7405] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 525.323516][ T7405] hdpvr 3-1:0.0: device init failed [ 525.329116][ T7405] hdpvr: probe of 3-1:0.0 failed with error -12 [ 525.357352][T17972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6017'. [ 525.369601][ T7405] usb 3-1: USB disconnect, device number 21 [ 525.393214][T17970] loop3: detected capacity change from 0 to 2048 [ 525.440379][T17970] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 525.470095][T17975] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.877287][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 525.877305][ T26] audit: type=1326 audit(525.845:1900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.3.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ae9f8d169 code=0x7ffc0000 [ 525.979560][ T26] audit: type=1326 audit(525.895:1901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17988 comm="syz.3.6025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f6ae9f8d169 code=0x7ffc0000 [ 526.326369][T18005] overlayfs: missing 'lowerdir' [ 526.493125][T18007] device bond0 entered promiscuous mode [ 526.498770][T18007] device bond_slave_0 entered promiscuous mode [ 526.518255][T18009] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 526.532302][T18007] device bond_slave_1 entered promiscuous mode [ 526.550061][T18007] device dummy0 entered promiscuous mode [ 526.578914][T17983] loop1: detected capacity change from 0 to 32768 [ 526.631227][T17983] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.6022 (17983) [ 526.684275][T17983] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 526.712763][T17983] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 526.780373][T17983] BTRFS info (device loop1): using free space tree [ 526.917596][T18028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6041'. [ 526.956481][T17983] BTRFS info (device loop1): enabling ssd optimizations [ 527.045181][ T4248] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 527.179505][T18043] loop3: detected capacity change from 0 to 256 [ 527.301363][T18043] FAT-fs (loop3): Directory bread(block 64) failed [ 527.338686][T18043] FAT-fs (loop3): Directory bread(block 65) failed [ 527.349972][T18043] FAT-fs (loop3): Directory bread(block 66) failed [ 527.392813][T18043] FAT-fs (loop3): Directory bread(block 67) failed [ 527.399571][T18043] FAT-fs (loop3): Directory bread(block 68) failed [ 527.423616][T18043] FAT-fs (loop3): Directory bread(block 69) failed [ 527.430327][T18043] FAT-fs (loop3): Directory bread(block 70) failed [ 527.479633][T18043] FAT-fs (loop3): Directory bread(block 71) failed [ 527.515714][T18043] FAT-fs (loop3): Directory bread(block 72) failed [ 527.534108][T18043] FAT-fs (loop3): Directory bread(block 73) failed [ 527.598059][T18055] usb usb1: usbfs: process 18055 (syz.5.6050) did not claim interface 0 before use [ 527.694931][T18053] loop2: detected capacity change from 0 to 4096 [ 527.885390][T18053] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 527.927729][T18053] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 528.485358][T18077] netlink: 'syz.1.6060': attribute type 1 has an invalid length. [ 528.813218][T18059] loop5: detected capacity change from 0 to 32768 [ 528.838118][T18082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 528.855058][T18059] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.6052 (18059) [ 528.872805][T18082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 528.888110][T18082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 528.920410][T18059] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 528.922803][T18082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 528.952277][T18059] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 528.970379][T18082] device geneve4 entered promiscuous mode [ 528.991048][T18059] BTRFS info (device loop5): force clearing of disk cache [ 529.004471][T18082] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 529.010106][T18059] BTRFS info (device loop5): force zlib compression, level 3 [ 529.049397][T18059] BTRFS info (device loop5): enabling auto defrag [ 529.055484][T18082] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 529.063912][T18059] BTRFS info (device loop5): max_inline at 0 [ 529.088981][T18059] BTRFS info (device loop5): enabling disk space caching [ 529.096435][T18082] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 529.116646][T18059] BTRFS info (device loop5): disk space caching is enabled [ 529.132741][T18082] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 529.198820][T18085] netlink: 'syz.2.6064': attribute type 5 has an invalid length. [ 529.413035][T18059] BTRFS info (device loop5): enabling ssd optimizations [ 529.665211][T12117] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 529.763644][T18125] cgroup: none used incorrectly [ 530.211978][T18132] loop1: detected capacity change from 0 to 4096 [ 530.320239][T18132] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 530.400925][T18132] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 530.605873][T18143] ptrace attach of "./syz-executor exec"[18148] was attempted by "./syz-executor exec"[18143] [ 530.934455][T18157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6090'. [ 531.006473][T18157] netlink: 'syz.3.6090': attribute type 1 has an invalid length. [ 531.491620][T18181] loop5: detected capacity change from 0 to 256 [ 531.522838][T18183] netlink: 280 bytes leftover after parsing attributes in process `syz.3.6103'. [ 531.559230][T18181] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 532.490818][T18215] loop3: detected capacity change from 0 to 64 [ 532.529363][T18213] loop5: detected capacity change from 0 to 1764 [ 532.578113][T18213] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 532.684500][T18220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.723465][T18220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.769985][T18187] loop0: detected capacity change from 0 to 32768 [ 532.805007][T18187] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.6105 (18187) [ 532.894947][T18187] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 532.926939][T18187] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 532.955492][T18187] BTRFS info (device loop0): using free space tree [ 533.125712][T18237] loop3: detected capacity change from 0 to 2048 [ 533.194145][T18245] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 533.249466][T18237] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=16, inode=25769803778, rec_len=0, name_len=0 [ 533.310174][T18187] BTRFS info (device loop0): enabling ssd optimizations [ 533.409375][ T4257] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 533.484309][T18237] Remounting filesystem read-only [ 534.352728][ T7408] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 534.532750][ T7408] usb 6-1: Using ep0 maxpacket: 32 [ 534.544682][ T7408] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.600082][ T7408] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 534.643167][ T7408] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.658182][ T7408] usb 6-1: Product: syz [ 534.681823][ T7408] usb 6-1: Manufacturer: syz [ 534.693499][ T7408] usb 6-1: SerialNumber: syz [ 534.728325][ T7408] usb 6-1: config 0 descriptor?? [ 534.747533][ T7408] usb 6-1: bad CDC descriptors [ 534.762961][ T7408] usb 6-1: unsupported MDLM descriptors [ 534.970173][ T7408] usb 6-1: USB disconnect, device number 10 [ 535.315952][T18316] loop2: detected capacity change from 0 to 256 [ 535.697292][T18327] netlink: 'syz.3.6162': attribute type 28 has an invalid length. [ 535.706888][T18327] netlink: 'syz.3.6162': attribute type 3 has an invalid length. [ 535.721708][T18327] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6162'. [ 535.948534][T18307] loop0: detected capacity change from 0 to 32768 [ 536.045745][T18307] (syz.0.6154,18307,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 536.093260][T18307] (syz.0.6154,18307,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 536.142000][T18343] netlink: 'syz.5.6168': attribute type 4 has an invalid length. [ 536.182767][T18343] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6168'. [ 536.196742][T18307] JBD2: Ignoring recovery information on journal [ 536.340040][T18350] IPv6: NLM_F_CREATE should be specified when creating new route [ 536.390062][T18307] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 536.487216][T18307] [ 536.489692][T18307] ====================================================== [ 536.496735][T18307] WARNING: possible circular locking dependency detected [ 536.503791][T18307] 6.1.131-syzkaller #0 Not tainted [ 536.508932][T18307] ------------------------------------------------------ [ 536.515983][T18307] syz.0.6154/18307 is trying to acquire lock: [ 536.522077][T18307] ffff888030908650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_write_info+0x124/0x3a0 [ 536.531283][T18307] [ 536.531283][T18307] but task is already holding lock: [ 536.538676][T18307] ffff8880479e6a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 536.549620][T18307] [ 536.549620][T18307] which lock already depends on the new lock. [ 536.549620][T18307] [ 536.560052][T18307] [ 536.560052][T18307] the existing dependency chain (in reverse order) is: [ 536.569094][T18307] [ 536.569094][T18307] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 536.578005][T18307] lock_acquire+0x1f8/0x5a0 [ 536.583084][T18307] down_write+0x36/0x60 [ 536.587805][T18307] ocfs2_lock_global_qf+0x221/0x2a0 [ 536.593561][T18307] ocfs2_acquire_dquot+0x2ad/0xb60 [ 536.599231][T18307] dqget+0x762/0xe90 [ 536.600448][T18361] loop3: detected capacity change from 0 to 256 [ 536.603668][T18307] __dquot_initialize+0x2d9/0xea0 [ 536.603706][T18307] ocfs2_get_init_inode+0x154/0x1c0 [ 536.603735][T18307] ocfs2_mknod+0xe32/0x2e20 [ 536.603756][T18307] ocfs2_mkdir+0x1c0/0x4e0 [ 536.603777][T18307] vfs_mkdir+0x3b6/0x590 [ 536.636052][T18307] do_mkdirat+0x225/0x360 [ 536.640952][T18307] __x64_sys_mkdirat+0x85/0x90 [ 536.645194][T18361] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 536.646270][T18307] do_syscall_64+0x3b/0xb0 [ 536.646299][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.669650][T18307] [ 536.669650][T18307] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 536.680223][T18307] lock_acquire+0x1f8/0x5a0 [ 536.685295][T18307] down_write+0x36/0x60 [ 536.690019][T18307] ocfs2_lock_global_qf+0x202/0x2a0 [ 536.695776][T18307] ocfs2_acquire_dquot+0x2ad/0xb60 [ 536.701458][T18307] dqget+0x762/0xe90 [ 536.705921][T18307] __dquot_initialize+0x2d9/0xea0 [ 536.711513][T18307] ocfs2_get_init_inode+0x154/0x1c0 [ 536.717269][T18307] ocfs2_mknod+0xe32/0x2e20 [ 536.722330][T18307] ocfs2_mkdir+0x1c0/0x4e0 [ 536.727302][T18307] vfs_mkdir+0x3b6/0x590 [ 536.732106][T18307] do_mkdirat+0x225/0x360 [ 536.736999][T18307] __x64_sys_mkdirat+0x85/0x90 [ 536.742329][T18307] do_syscall_64+0x3b/0xb0 [ 536.747299][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.753752][T18307] [ 536.753752][T18307] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 536.756573][T18363] loop2: detected capacity change from 0 to 164 [ 536.761431][T18307] lock_acquire+0x1f8/0x5a0 [ 536.761468][T18307] __mutex_lock+0x132/0xd80 [ 536.777812][T18307] dquot_commit+0x57/0x510 [ 536.782796][T18307] ext4_write_dquot+0x1fd/0x360 [ 536.788222][T18307] mark_all_dquot_dirty+0xf7/0x400 [ 536.793876][T18307] __dquot_free_space+0x956/0xe70 [ 536.799452][T18307] ext4_free_blocks+0x1fb4/0x3020 [ 536.805014][T18307] ext4_ext_remove_space+0x25c6/0x4f40 [ 536.811013][T18307] ext4_ext_truncate+0x201/0x360 [ 536.816491][T18307] ext4_truncate+0xa1d/0x1290 [ 536.821703][T18307] ext4_process_orphan+0x1aa/0x2d0 [ 536.827380][T18307] ext4_orphan_cleanup+0xb70/0x1400 [ 536.833110][T18307] ext4_fill_super+0x84b2/0x89e0 [ 536.838584][T18307] get_tree_bdev+0x3fe/0x620 [ 536.843708][T18307] vfs_get_tree+0x88/0x270 [ 536.848659][T18307] do_new_mount+0x2ba/0xb40 [ 536.853696][T18307] __se_sys_mount+0x2d5/0x3c0 [ 536.858909][T18307] do_syscall_64+0x3b/0xb0 [ 536.863857][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.870280][T18307] [ 536.870280][T18307] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 536.877959][T18307] lock_acquire+0x1f8/0x5a0 [ 536.882997][T18307] down_write+0x36/0x60 [ 536.887688][T18307] ext4_truncate+0x999/0x1290 [ 536.892896][T18307] ext4_setattr+0x10f5/0x1a00 [ 536.898104][T18307] notify_change+0xce3/0xfc0 [ 536.903220][T18307] do_truncate+0x21c/0x300 [ 536.908172][T18307] do_sys_ftruncate+0x2e2/0x380 [ 536.913556][T18307] do_syscall_64+0x3b/0xb0 [ 536.918498][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.924949][T18307] [ 536.924949][T18307] -> #2 (jbd2_handle){++++}-{0:0}: [ 536.932263][T18307] lock_acquire+0x1f8/0x5a0 [ 536.937304][T18307] start_this_handle+0x1f71/0x21b0 [ 536.942947][T18307] jbd2__journal_start+0x2d1/0x5c0 [ 536.948591][T18307] jbd2_journal_start+0x25/0x30 [ 536.953974][T18307] ocfs2_start_trans+0x3c0/0x6f0 [ 536.959446][T18307] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 536.965698][T18307] ocfs2_dismount_volume+0x1fb/0x960 [ 536.971518][T18307] generic_shutdown_super+0x130/0x340 [ 536.977421][T18307] kill_block_super+0x7a/0xe0 [ 536.982635][T18307] deactivate_locked_super+0xa0/0x110 [ 536.988541][T18307] cleanup_mnt+0x490/0x520 [ 536.993492][T18307] task_work_run+0x246/0x300 [ 536.998614][T18307] exit_to_user_mode_loop+0xde/0x100 [ 537.004424][T18307] exit_to_user_mode_prepare+0xb1/0x140 [ 537.010493][T18307] syscall_exit_to_user_mode+0x60/0x270 [ 537.016661][T18307] do_syscall_64+0x47/0xb0 [ 537.021602][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.028027][T18307] [ 537.028027][T18307] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 537.036550][T18307] lock_acquire+0x1f8/0x5a0 [ 537.041587][T18307] down_read+0xad/0xa30 [ 537.046280][T18307] ocfs2_start_trans+0x3b5/0x6f0 [ 537.051759][T18307] ocfs2_shutdown_local_alloc+0x214/0xa90 [ 537.058005][T18307] ocfs2_dismount_volume+0x1fb/0x960 [ 537.063825][T18307] generic_shutdown_super+0x130/0x340 [ 537.069728][T18307] kill_block_super+0x7a/0xe0 [ 537.074969][T18307] deactivate_locked_super+0xa0/0x110 [ 537.080921][T18307] cleanup_mnt+0x490/0x520 [ 537.085883][T18307] task_work_run+0x246/0x300 [ 537.091100][T18307] exit_to_user_mode_loop+0xde/0x100 [ 537.096932][T18307] exit_to_user_mode_prepare+0xb1/0x140 [ 537.103012][T18307] syscall_exit_to_user_mode+0x60/0x270 [ 537.109089][T18307] do_syscall_64+0x47/0xb0 [ 537.114028][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.120454][T18307] [ 537.120454][T18307] -> #0 (sb_internal#5){.+.+}-{0:0}: [ 537.127944][T18307] validate_chain+0x1661/0x5950 [ 537.133319][T18307] __lock_acquire+0x125b/0x1f80 [ 537.138700][T18307] lock_acquire+0x1f8/0x5a0 [ 537.143736][T18307] ocfs2_start_trans+0x2b0/0x6f0 [ 537.149210][T18307] ocfs2_write_info+0x124/0x3a0 [ 537.154590][T18307] dquot_set_dqinfo+0x488/0x6f0 [ 537.160401][T18307] quota_setinfo+0x3d6/0x4f0 [ 537.165525][T18307] __se_sys_quotactl+0x2b1/0x770 [ 537.170988][T18307] do_syscall_64+0x3b/0xb0 [ 537.175929][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.182356][T18307] [ 537.182356][T18307] other info that might help us debug this: [ 537.182356][T18307] [ 537.192585][T18307] Chain exists of: [ 537.192585][T18307] sb_internal#5 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key [ 537.192585][T18307] [ 537.209559][T18307] Possible unsafe locking scenario: [ 537.209559][T18307] [ 537.217008][T18307] CPU0 CPU1 [ 537.222372][T18307] ---- ---- [ 537.227735][T18307] lock(&ocfs2_quota_ip_alloc_sem_key); [ 537.233375][T18307] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 537.243274][T18307] lock(&ocfs2_quota_ip_alloc_sem_key); [ 537.251434][T18307] lock(sb_internal#5); [ 537.255689][T18307] [ 537.255689][T18307] *** DEADLOCK *** [ 537.255689][T18307] [ 537.263831][T18307] 3 locks held by syz.0.6154/18307: [ 537.269027][T18307] #0: ffff8880309080e0 (&type->s_umount_key#84){++++}-{3:3}, at: user_get_super+0x11a/0x250 [ 537.279240][T18307] #1: ffff8880479e6d88 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x202/0x2a0 [ 537.292218][T18307] #2: ffff8880479e6a20 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x221/0x2a0 [ 537.303540][T18307] [ 537.303540][T18307] stack backtrace: [ 537.309432][T18307] CPU: 0 PID: 18307 Comm: syz.0.6154 Not tainted 6.1.131-syzkaller #0 [ 537.317592][T18307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 537.327740][T18307] Call Trace: [ 537.331023][T18307] [ 537.333959][T18307] dump_stack_lvl+0x1e3/0x2cb [ 537.338645][T18307] ? nf_tcp_handle_invalid+0x647/0x647 [ 537.344113][T18307] ? print_circular_bug+0x12b/0x1a0 [ 537.349323][T18307] check_noncircular+0x2fa/0x3b0 [ 537.354268][T18307] ? add_chain_block+0x850/0x850 [ 537.359212][T18307] ? lockdep_lock+0x11f/0x2a0 [ 537.363906][T18307] ? _find_first_zero_bit+0xd0/0x100 [ 537.369198][T18307] validate_chain+0x1661/0x5950 [ 537.374088][T18307] ? stack_trace_save+0x113/0x1c0 [ 537.379130][T18307] ? reacquire_held_locks+0x660/0x660 [ 537.384510][T18307] ? stack_trace_snprint+0xe0/0xe0 [ 537.389632][T18307] ? lockdep_unlock+0x165/0x300 [ 537.394510][T18307] ? mark_lock+0x9a/0x340 [ 537.398848][T18307] __lock_acquire+0x125b/0x1f80 [ 537.403723][T18307] lock_acquire+0x1f8/0x5a0 [ 537.408241][T18307] ? ocfs2_write_info+0x124/0x3a0 [ 537.413368][T18307] ? read_lock_is_recursive+0x10/0x10 [ 537.418753][T18307] ? __lock_acquire+0x1f80/0x1f80 [ 537.423883][T18307] ? __might_sleep+0xb0/0xb0 [ 537.428485][T18307] ? do_raw_spin_unlock+0x137/0x8a0 [ 537.433693][T18307] ? do_raw_spin_unlock+0x137/0x8a0 [ 537.438903][T18307] ocfs2_start_trans+0x2b0/0x6f0 [ 537.443860][T18307] ? ocfs2_write_info+0x124/0x3a0 [ 537.448890][T18307] ? down_write+0x42/0x60 [ 537.453234][T18307] ? ocfs2_recovery_exit+0x280/0x280 [ 537.458543][T18307] ocfs2_write_info+0x124/0x3a0 [ 537.463412][T18307] ? ocfs2_mark_dquot_dirty+0xd10/0xd10 [ 537.468967][T18307] ? do_raw_spin_unlock+0x137/0x8a0 [ 537.474179][T18307] dquot_set_dqinfo+0x488/0x6f0 [ 537.479041][T18307] quota_setinfo+0x3d6/0x4f0 [ 537.483649][T18307] ? quota_getinfo+0x420/0x420 [ 537.488418][T18307] ? security_capable+0x86/0xb0 [ 537.493279][T18307] ? bpf_lsm_quotactl+0x5/0x10 [ 537.498046][T18307] ? security_quotactl+0x86/0xb0 [ 537.502991][T18307] ? do_quotactl+0x496/0x6c0 [ 537.507620][T18307] __se_sys_quotactl+0x2b1/0x770 [ 537.512568][T18307] ? __x64_sys_quotactl+0xa0/0xa0 [ 537.517604][T18307] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 537.523601][T18307] ? print_irqtrace_events+0x210/0x210 [ 537.529076][T18307] ? print_irqtrace_events+0x210/0x210 [ 537.534549][T18307] ? syscall_enter_from_user_mode+0x2e/0x230 [ 537.540658][T18307] ? lockdep_hardirqs_on+0x94/0x130 [ 537.545867][T18307] ? syscall_enter_from_user_mode+0x2e/0x230 [ 537.551943][T18307] do_syscall_64+0x3b/0xb0 [ 537.556365][T18307] ? clear_bhb_loop+0x45/0xa0 [ 537.561066][T18307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 537.566971][T18307] RIP: 0033:0x7fec1c38d169 [ 537.571390][T18307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.591004][T18307] RSP: 002b:00007fec1d1f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 537.599427][T18307] RAX: ffffffffffffffda RBX: 00007fec1c5a5fa0 RCX: 00007fec1c38d169 [ 537.607409][T18307] RDX: 0000000000000000 RSI: 0000200000000340 RDI: ffffffff80000601 [ 537.615398][T18307] RBP: 00007fec1c40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 537.623376][T18307] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 537.631352][T18307] R13: 0000000000000000 R14: 00007fec1c5a5fa0 R15: 00007fffc5b90078 [ 537.639363][T18307] [ 537.727746][T18363] Unsupported NM flag settings (8) [ 537.757581][ T4257] ocfs2: Unmounting device (7,0) on (node local)