last executing test programs: 2.150237949s ago: executing program 2 (id=11405): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7, 0xe5, 0x4e, 0x567}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x28, 0x12, 0xa01, 0x0, 0x5, {0xa}, [@typed={0x14, 0x5b, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}}, 0x0) 1.860571968s ago: executing program 2 (id=11408): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 1.175258353s ago: executing program 3 (id=11415): unshare(0x2040400) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ppoll(&(0x7f0000000500)=[{r0, 0x1008}], 0x1, &(0x7f0000000540)={0x0, 0x3938700}, 0x0, 0x0) 1.001549514s ago: executing program 1 (id=11417): r0 = io_uring_setup(0x3142, &(0x7f0000000b80)={0x0, 0x7516, 0x80, 0x0, 0x157}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000d40)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000002540)={&(0x7f0000003000)={[{0x0}]}, 0x1, 0x1}, 0x1) 919.06523ms ago: executing program 2 (id=11418): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) 918.98563ms ago: executing program 3 (id=11419): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x28040600) fdatasync(r0) 918.22576ms ago: executing program 0 (id=11427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 751.415171ms ago: executing program 1 (id=11420): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000008000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005800800024000000002080001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 750.694301ms ago: executing program 3 (id=11422): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x9}, 0x0, 0x0, 0x0) 722.530183ms ago: executing program 0 (id=11423): unshare(0x2040400) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) 647.016487ms ago: executing program 0 (id=11424): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x121001) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000100)="04be01ff9b8c", 0x0, 0x0, 0x1c, 0x0, 0x0}) 604.56954ms ago: executing program 2 (id=11425): unshare(0x22020600) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2, 0x20}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 588.411201ms ago: executing program 1 (id=11426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b160000000000000000020000085400048018000180080001006f7366000c00028008000140000000043800018008000100647570002c0002800800014000000016080001400000001d0800014000000014080002400000001708000440000000110900010073797a30000000000900020073797a3200000000140000001100e1"], 0xa8}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 575.944992ms ago: executing program 3 (id=11428): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl816\x00', [0x4f27, 0x20, 0x3, 0x4, 0x5, 0xcc9, 0xf, 0x4, 0xa, 0xfffffffc, 0x2, 0x3, 0xfffffffe, 0x1, 0x7, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x2, 0xcaa7, 0x6, 0x20001e58, 0x7, 0x63e, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) 469.057629ms ago: executing program 0 (id=11429): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x6}, @NHA_ENCAP={0x8, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x4}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x30}}, 0x0) 424.357442ms ago: executing program 1 (id=11430): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00 rejected, failed to enable media [ 863.744138][T30204] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 863.766790][T30204] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 863.794388][T30211] loop2: detected capacity change from 0 to 256 [ 863.795724][T30204] REISERFS (device loop0): using ordered data mode [ 863.860662][T30211] FAT-fs (loop2): Directory bread(block 64) failed [ 863.868242][T30211] FAT-fs (loop2): Directory bread(block 65) failed [ 863.877549][T30211] FAT-fs (loop2): Directory bread(block 66) failed [ 863.886128][T30204] reiserfs: using flush barriers [ 863.892727][T30211] FAT-fs (loop2): Directory bread(block 67) failed [ 863.904258][T30211] FAT-fs (loop2): Directory bread(block 68) failed [ 863.913107][T30204] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 863.916395][T30211] FAT-fs (loop2): Directory bread(block 69) failed [ 863.949365][T30211] FAT-fs (loop2): Directory bread(block 70) failed [ 863.960088][T30211] FAT-fs (loop2): Directory bread(block 71) failed [ 863.969723][T30211] FAT-fs (loop2): Directory bread(block 72) failed [ 863.977305][T30211] FAT-fs (loop2): Directory bread(block 73) failed [ 864.016191][T30204] REISERFS (device loop0): checking transaction log (loop0) [ 864.244773][T30218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11043'. [ 864.298593][T30222] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 864.366241][T30204] REISERFS (device loop0): Using tea hash to sort names [ 864.409488][T30204] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 864.823343][T30236] loop1: detected capacity change from 0 to 4096 [ 864.862644][T30236] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 864.932627][T30235] loop2: detected capacity change from 0 to 8192 [ 864.988615][T30236] ntfs: volume version 3.1. [ 865.025656][T30235] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 865.104178][T30236] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-6. You might want to try to use the mount option nls=utf8. [ 865.127014][T30235] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 865.145825][T30235] REISERFS (device loop2): using ordered data mode [ 865.154060][T30235] reiserfs: using flush barriers [ 865.160422][T30236] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 865.200475][T30235] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 865.301819][T30235] REISERFS (device loop2): checking transaction log (loop2) [ 865.346888][T30235] REISERFS (device loop2): Using r5 hash to sort names [ 865.356841][T30235] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 865.730748][T30240] loop0: detected capacity change from 0 to 32768 [ 865.765641][T15804] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 865.785317][T30240] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 865.876771][ T4120] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 865.925010][T30240] XFS (loop0): Ending clean mount [ 865.965863][T15804] usb 2-1: Using ep0 maxpacket: 32 [ 866.004141][T15804] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 866.028178][T15804] usb 2-1: config 0 has no interface number 0 [ 866.041391][T15804] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 866.051133][T15804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.060466][T15804] usb 2-1: Product: syz [ 866.065028][T15804] usb 2-1: Manufacturer: syz [ 866.071889][T15804] usb 2-1: SerialNumber: syz [ 866.083286][T15804] usb 2-1: config 0 descriptor?? [ 866.107306][T15804] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 866.127954][T15804] usb 2-1: selecting invalid altsetting 1 [ 866.133839][T15804] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 866.161410][T15804] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 866.180270][T15804] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 866.189785][ T787] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 866.226719][ T5777] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 866.233926][T15804] usb 2-1: media controller created [ 866.260036][T15804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 866.332562][T15804] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 866.361333][T15804] zl10353_read_register: readreg error (reg=127, ret==-71) [ 866.415744][T15804] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 866.455706][ T787] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 866.471099][ T787] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 866.490943][ T787] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 866.498525][T30268] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11063'. [ 866.546212][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 866.626133][ T787] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 866.638744][T15804] usb 2-1: USB disconnect, device number 77 [ 866.680956][ T787] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 866.693664][ T787] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 866.703843][ T787] usb 4-1: Product: syz [ 866.709847][ T787] usb 4-1: Manufacturer: syz [ 866.759545][ T787] cdc_wdm 4-1:1.0: skipping garbage [ 866.769601][ T787] cdc_wdm 4-1:1.0: skipping garbage [ 866.816052][ T787] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 866.825748][ T787] cdc_wdm 4-1:1.0: Unknown control protocol [ 867.078501][T15804] usb 4-1: USB disconnect, device number 74 [ 867.270010][T30284] loop1: detected capacity change from 0 to 8 [ 867.568193][T30274] loop0: detected capacity change from 0 to 40427 [ 867.604672][T30274] F2FS-fs (loop0): invalid crc value [ 867.662908][T30274] F2FS-fs (loop0): Found nat_bits in checkpoint [ 867.826950][T30274] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 867.841422][T30299] hugetlbfs: Bad value 'ß' for mount option 'size' [ 867.841422][T30299] [ 867.871240][T30274] syz.0.11066: attempt to access beyond end of device [ 867.871240][T30274] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 867.906224][T30274] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 868.625934][T30304] loop2: detected capacity change from 0 to 32768 [ 868.647061][T30304] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 868.679299][T30304] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 868.725744][T30304] BTRFS info (device loop2): using free space tree [ 868.775184][T30312] loop3: detected capacity change from 0 to 32768 [ 868.834188][T30312] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 868.875303][T30304] BTRFS info (device loop2): enabling ssd optimizations [ 868.898333][T30312] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 868.920101][T30304] BTRFS info (device loop2): auto enabling async discard [ 869.147465][T30344] loop0: detected capacity change from 0 to 4096 [ 869.201250][T30346] tipc: Started in network mode [ 869.204572][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 869.218505][T30346] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 869.229798][T30346] tipc: Enabling of bearer rejected, failed to enable media [ 869.238995][T30347] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 869.277810][T30312] XFS (loop3): Ending clean mount [ 869.394259][ T5776] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 869.666659][T30351] loop0: detected capacity change from 0 to 1024 [ 869.813087][T30351] hfsplus: xattr searching failed [ 869.985034][T30358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11094'. [ 870.128721][T30362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11095'. [ 871.000037][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.397215][T30410] loop2: detected capacity change from 0 to 1024 [ 871.430814][T30411] program syz.3.11118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.585223][ T4120] hfsplus: b-tree write err: -5, ino 25 [ 871.623061][ T4120] hfsplus: b-tree write err: -5, ino 4 [ 871.641993][ T4120] hfsplus: b-tree write err: -5, ino 2 [ 871.650459][T30123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 871.833156][T30422] xt_l2tp: v2 tid > 0xffff: 37482740 [ 872.374602][T30440] loop3: detected capacity change from 0 to 512 [ 872.387838][T30440] EXT4-fs: Ignoring removed bh option [ 872.423818][T30440] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 872.501683][T30440] EXT4-fs (loop3): 1 truncate cleaned up [ 872.560028][T30440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 872.744154][T30448] loop2: detected capacity change from 0 to 256 [ 872.768593][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.809961][T30448] exfat: Deprecated parameter 'namecase' [ 872.845694][T30448] exfat: Deprecated parameter 'utf8' [ 872.888820][T30448] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 873.384247][T30466] loop0: detected capacity change from 0 to 4096 [ 873.843231][T30474] netlink: 'syz.2.11146': attribute type 3 has an invalid length. [ 873.975812][T30477] loop2: detected capacity change from 0 to 128 [ 874.003931][T30477] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 874.021614][T30477] sysv_free_block: trying to free block not in datazone [ 874.032378][T30477] sysv_free_block: trying to free block not in datazone [ 874.044628][T30477] sysv_free_block: getblk() failed [ 874.051240][T30477] sysv_free_block: getblk() failed [ 874.057114][T30477] sysv_free_block: getblk() failed [ 874.063079][T30477] sysv_free_block: getblk() failed [ 874.068798][T30477] sysv_free_block: getblk() failed [ 874.074264][T30477] sysv_free_block: getblk() failed [ 874.079579][T30477] sysv_free_block: getblk() failed [ 874.084911][T30477] sysv_free_block: getblk() failed [ 874.090314][T30477] sysv_free_block: getblk() failed [ 874.095631][T30477] sysv_free_block: getblk() failed [ 874.101403][T30477] sysv_free_block: getblk() failed [ 874.106913][T30477] sysv_free_block: getblk() failed [ 874.115045][T30477] sysv_free_block: getblk() failed [ 874.120472][T30477] sysv_free_block: getblk() failed [ 874.126217][T30477] sysv_free_block: getblk() failed [ 874.131848][T30477] sysv_free_block: getblk() failed [ 874.137279][T30477] sysv_free_block: getblk() failed [ 874.142608][T30477] sysv_free_block: getblk() failed [ 874.148307][T30477] sysv_free_block: getblk() failed [ 874.153878][T30477] sysv_free_block: getblk() failed [ 874.160576][T30477] sysv_free_block: getblk() failed [ 874.166185][T30477] sysv_free_block: getblk() failed [ 874.171767][T30477] sysv_free_block: getblk() failed [ 874.177525][T30477] sysv_free_block: getblk() failed [ 874.183041][T30477] sysv_free_block: getblk() failed [ 874.188760][T30477] sysv_free_block: getblk() failed [ 874.194181][T30477] sysv_free_block: getblk() failed [ 874.200413][T30477] sysv_free_block: getblk() failed [ 874.206056][T30477] sysv_free_block: getblk() failed [ 874.211915][T30477] sysv_free_block: getblk() failed [ 874.217512][T30477] sysv_free_block: getblk() failed [ 874.222763][T30477] sysv_free_block: getblk() failed [ 874.228131][T30477] sysv_free_block: getblk() failed [ 874.233454][T30477] sysv_free_block: getblk() failed [ 874.238891][T30477] sysv_free_block: getblk() failed [ 874.244343][T30477] sysv_free_block: getblk() failed [ 874.250027][T30477] sysv_free_block: getblk() failed [ 874.255190][T30477] sysv_free_block: getblk() failed [ 874.260621][T30477] sysv_free_block: getblk() failed [ 874.266044][T30477] sysv_free_block: getblk() failed [ 874.271648][T30477] sysv_free_block: getblk() failed [ 874.277293][T30477] sysv_free_block: trying to free block not in datazone [ 874.294895][T30477] sysv_free_block: getblk() failed [ 874.300931][T30477] sysv_free_block: getblk() failed [ 874.306651][T30477] sysv_free_block: getblk() failed [ 874.312205][T30477] sysv_free_block: getblk() failed [ 874.320174][T30477] sysv_free_block: getblk() failed [ 874.325796][T30477] sysv_free_block: getblk() failed [ 874.331228][T30477] sysv_free_block: getblk() failed [ 874.336993][T30477] sysv_free_block: getblk() failed [ 874.342606][T30477] sysv_free_block: getblk() failed [ 874.348250][T30477] sysv_free_block: getblk() failed [ 874.353799][T30477] sysv_free_block: getblk() failed [ 874.359544][T30477] sysv_free_block: getblk() failed [ 874.365308][T30477] sysv_free_block: getblk() failed [ 874.371030][T30477] sysv_free_block: getblk() failed [ 874.376409][T30477] sysv_free_block: getblk() failed [ 874.382002][T30477] sysv_free_block: getblk() failed [ 874.387799][T30477] sysv_free_block: getblk() failed [ 874.394949][T30477] sysv_free_block: getblk() failed [ 874.401165][T30477] sysv_free_block: getblk() failed [ 874.407489][T30477] sysv_free_block: getblk() failed [ 874.413666][T30477] sysv_free_block: getblk() failed [ 874.420479][T30477] sysv_free_block: getblk() failed [ 874.427243][T30477] sysv_free_block: getblk() failed [ 874.433985][T30477] sysv_free_block: getblk() failed [ 874.440371][T30477] sysv_free_block: getblk() failed [ 874.447811][T30477] sysv_free_block: getblk() failed [ 874.454122][T30477] sysv_free_block: getblk() failed [ 874.460503][T30477] sysv_free_block: getblk() failed [ 874.466743][T30477] sysv_free_block: getblk() failed [ 874.472203][T30477] sysv_free_block: getblk() failed [ 874.479186][T30477] sysv_free_block: getblk() failed [ 874.485920][T30477] sysv_free_block: getblk() failed [ 874.492365][T30477] sysv_free_block: getblk() failed [ 874.499229][T30477] sysv_free_block: getblk() failed [ 874.505111][T30477] sysv_free_block: getblk() failed [ 874.511594][T30477] sysv_free_block: getblk() failed [ 874.517645][T30477] sysv_free_block: getblk() failed [ 874.523633][T30477] sysv_free_block: getblk() failed [ 874.530817][T30477] sysv_free_block: getblk() failed [ 874.536648][T30477] sysv_free_block: getblk() failed [ 874.542257][T30477] sysv_free_block: getblk() failed [ 874.548036][T30477] sysv_free_block: getblk() failed [ 874.554254][T30477] sysv_free_block: getblk() failed [ 874.560080][T30477] sysv_free_block: getblk() failed [ 874.565368][T30477] sysv_free_block: getblk() failed [ 874.570831][T30477] sysv_free_block: getblk() failed [ 874.576664][T30477] sysv_free_block: getblk() failed [ 874.582310][T30477] sysv_free_block: getblk() failed [ 874.588586][T30477] sysv_free_block: getblk() failed [ 874.594463][T30477] sysv_free_block: getblk() failed [ 874.600180][T30477] sysv_free_block: getblk() failed [ 874.605998][T30477] sysv_free_block: getblk() failed [ 874.611526][T30477] sysv_free_block: getblk() failed [ 874.617068][T30477] sysv_free_block: getblk() failed [ 874.622590][T30477] sysv_free_block: getblk() failed [ 874.627861][T30477] sysv_free_block: getblk() failed [ 874.633278][T30477] sysv_free_block: getblk() failed [ 874.639217][T30477] sysv_free_block: getblk() failed [ 874.644741][T30477] sysv_free_block: getblk() failed [ 874.651882][T30477] sysv_free_block: getblk() failed [ 874.657822][T30477] sysv_free_block: getblk() failed [ 874.665582][T30477] sysv_free_block: getblk() failed [ 874.671906][T30477] sysv_free_block: getblk() failed [ 874.678061][T30477] sysv_free_block: getblk() failed [ 874.684535][T30477] sysv_free_block: getblk() failed [ 874.690434][T30477] sysv_free_block: getblk() failed [ 874.697155][T30477] sysv_free_block: getblk() failed [ 874.703874][T30477] sysv_free_block: getblk() failed [ 874.709764][T30477] sysv_free_block: getblk() failed [ 874.715940][T30477] sysv_free_block: getblk() failed [ 874.722040][T30477] sysv_free_block: getblk() failed [ 874.727563][T30477] sysv_free_block: getblk() failed [ 874.733155][T30477] sysv_free_block: getblk() failed [ 874.738851][T30477] sysv_free_block: getblk() failed [ 874.744515][T30477] sysv_free_block: getblk() failed [ 874.750389][T30477] sysv_free_block: getblk() failed [ 874.755872][T30477] sysv_free_block: getblk() failed [ 874.761298][T30477] sysv_free_block: getblk() failed [ 874.767019][T30477] sysv_free_block: getblk() failed [ 874.772526][T30477] sysv_free_block: getblk() failed [ 874.778290][T30477] sysv_free_block: getblk() failed [ 874.783982][T30477] sysv_free_block: getblk() failed [ 874.789423][T30477] sysv_free_block: getblk() failed [ 874.795190][T30477] sysv_free_block: getblk() failed [ 874.801032][T30477] sysv_free_block: getblk() failed [ 874.806357][T30477] sysv_free_block: getblk() failed [ 874.812035][T30477] sysv_free_block: getblk() failed [ 874.817302][T30477] sysv_free_block: getblk() failed [ 874.823115][T30477] sysv_free_block: getblk() failed [ 874.828634][T30477] sysv_free_block: getblk() failed [ 874.833967][T30477] sysv_free_block: getblk() failed [ 874.840966][T30477] sysv_free_block: getblk() failed [ 874.846427][T30477] sysv_free_block: getblk() failed [ 874.851953][T30477] sysv_free_block: getblk() failed [ 874.857906][T30477] sysv_free_block: getblk() failed [ 874.863604][T30477] sysv_free_block: getblk() failed [ 874.869023][T30477] sysv_free_block: getblk() failed [ 874.874708][T30477] sysv_free_block: getblk() failed [ 874.880368][T30477] sysv_free_block: getblk() failed [ 874.886125][T30477] sysv_free_block: getblk() failed [ 874.891566][T30477] sysv_free_block: getblk() failed [ 874.896965][T30477] sysv_free_block: getblk() failed [ 874.902419][T30477] sysv_free_block: getblk() failed [ 874.907928][T30477] sysv_free_block: getblk() failed [ 874.913435][T30477] sysv_free_block: getblk() failed [ 874.919199][T30477] sysv_free_block: getblk() failed [ 874.924616][T30477] sysv_free_block: getblk() failed [ 874.930850][T30477] sysv_free_block: getblk() failed [ 874.937025][T30477] sysv_free_block: getblk() failed [ 874.942976][T30477] sysv_free_block: getblk() failed [ 874.948733][ C0] sched: RT throttling activated [ 874.970248][T30477] sysv_free_block: getblk() failed [ 874.975887][T30477] sysv_free_block: getblk() failed [ 874.981849][T30477] sysv_free_block: getblk() failed [ 874.987194][T30477] sysv_free_block: getblk() failed [ 874.992620][T30477] sysv_free_block: getblk() failed [ 874.998830][T30477] sysv_free_block: getblk() failed [ 875.004136][T30477] sysv_free_block: getblk() failed [ 875.009797][T30477] sysv_free_block: getblk() failed [ 875.015149][T30477] sysv_free_block: getblk() failed [ 875.015642][ T787] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 875.020996][T30477] sysv_free_block: getblk() failed [ 875.036241][T30477] sysv_free_block: getblk() failed [ 875.043582][T30477] sysv_free_block: getblk() failed [ 875.049200][T30477] sysv_free_block: getblk() failed [ 875.055128][T30477] sysv_free_block: getblk() failed [ 875.060441][T30477] sysv_free_block: getblk() failed [ 875.066859][T30477] sysv_free_block: getblk() failed [ 875.072319][T30477] sysv_free_block: getblk() failed [ 875.077634][T30477] sysv_free_block: getblk() failed [ 875.083036][T30477] sysv_free_block: trying to free block not in datazone [ 875.091602][T30477] sysv_free_block: trying to free block not in datazone [ 875.099270][T30477] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 875.238065][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.279659][ T787] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 875.321100][ T787] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 875.331497][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.354667][ T787] usb 2-1: config 0 descriptor?? [ 875.368778][ T787] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 875.404344][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 875.436758][ T787] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 875.469163][ T787] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 875.485719][ T787] usb 2-1: media controller created [ 875.505152][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 875.619777][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 875.655899][ T787] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 875.715961][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55 [ 875.771903][ T787] dvb-usb: schedule remote query interval to 150 msecs. [ 875.791322][ T787] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 875.845964][ T787] usb 2-1: USB disconnect, device number 78 [ 875.944739][ T787] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 876.384722][T30504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11159'. [ 876.492254][T30508] loop1: detected capacity change from 0 to 64 [ 877.085761][ T787] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 877.186585][T30526] loop1: detected capacity change from 0 to 1024 [ 877.227255][T30526] EXT4-fs: Ignoring removed orlov option [ 877.255079][T30526] EXT4-fs (loop1): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 877.305592][ T787] usb 4-1: Using ep0 maxpacket: 32 [ 877.311278][T30511] loop0: detected capacity change from 0 to 32768 [ 877.313228][ T787] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 877.349706][T30526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.363634][T30511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.11162 (30511) [ 877.365546][ T787] usb 4-1: config 0 has no interface number 0 [ 877.397693][T30123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 877.415690][T30511] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 877.452094][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 877.466387][T30511] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 877.477285][T30511] BTRFS info (device loop0): setting nodatasum [ 877.484289][T30511] BTRFS info (device loop0): force zlib compression, level 3 [ 877.497780][ T787] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 877.515831][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.524826][ T787] usb 4-1: Product: syz [ 877.524926][T30511] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 877.533606][ T787] usb 4-1: Manufacturer: syz [ 877.544072][ T787] usb 4-1: SerialNumber: syz [ 877.552044][ T787] usb 4-1: config 0 descriptor?? [ 877.564784][ T787] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 877.595772][T30511] BTRFS info (device loop0): use lzo compression, level 0 [ 877.617441][T30511] BTRFS info (device loop0): turning on flush-on-commit [ 877.645111][T30511] BTRFS info (device loop0): enabling auto defrag [ 877.676712][T30511] BTRFS info (device loop0): max_inline at 4096 [ 877.684231][T30511] BTRFS info (device loop0): using free space tree [ 877.804922][ T787] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 877.875978][ T787] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 877.888520][T30511] BTRFS info (device loop0): enabling ssd optimizations [ 878.209471][ T5777] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 878.213275][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 878.423453][T16997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (16997) [ 878.498744][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 878.515849][ T787] usb 4-1: USB disconnect, device number 75 [ 878.524154][T30561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11175'. [ 878.564481][ T787] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 878.760296][ T787] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 878.827934][ T787] quatech2 4-1:0.51: device disconnected [ 879.149786][T30577] netlink: 180 bytes leftover after parsing attributes in process `syz.1.11184'. [ 879.199957][T30577] xt_time: unknown flags 0xf4 [ 879.386878][T30581] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 879.394003][T30581] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 879.453612][T30581] vhci_hcd vhci_hcd.0: Device attached [ 879.551926][T30583] vhci_hcd: connection closed [ 879.565786][ T3424] vhci_hcd: stop threads [ 879.615990][ T3424] vhci_hcd: release socket [ 879.626872][T30591] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 1, id = 0 [ 879.632594][ T3424] vhci_hcd: disconnect device [ 879.666288][ T5760] vhci_hcd: vhci_device speed not set [ 879.881537][T30573] loop0: detected capacity change from 0 to 40427 [ 879.910332][T30573] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 879.924516][T30573] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 879.947708][T30573] F2FS-fs (loop0): invalid crc value [ 879.959461][T30573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 879.976310][ T787] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 880.049122][T30573] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 880.057596][T30573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 880.219099][ T787] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 880.241108][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.275551][ T787] usb 4-1: Product: syz [ 880.284625][ T787] usb 4-1: Manufacturer: syz [ 880.294833][ T787] usb 4-1: SerialNumber: syz [ 880.513171][T30611] loop2: detected capacity change from 0 to 256 [ 880.543546][ T787] usb 4-1: unit 5 not found! [ 880.563594][ T787] usb 4-1: unit 102 not found! [ 880.649319][ T787] usb 4-1: USB disconnect, device number 76 [ 880.731496][T16997] udevd[16997]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 880.840539][T30604] loop1: detected capacity change from 0 to 32768 [ 880.926474][ T28] audit: type=1326 audit(880.912:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30616 comm="syz.2.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513b19c819 code=0x7ffc0000 [ 880.967642][T30604] jfs: Unrecognized mount option "quota=" or missing value [ 880.996364][ T28] audit: type=1326 audit(880.942:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30616 comm="syz.2.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f513b19c819 code=0x7ffc0000 [ 881.040895][ T28] audit: type=1326 audit(880.942:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30616 comm="syz.2.11200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f513b19c819 code=0x7ffc0000 [ 881.225198][T30619] loop2: detected capacity change from 0 to 4096 [ 881.263606][T30624] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 881.292686][T30623] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 881.306688][T30623] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 881.325664][T30623] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 881.332370][T30623] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 881.360193][T30623] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 881.378401][T30623] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 881.402802][T30623] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 881.421050][T30623] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 881.451181][T30623] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 881.481505][T30623] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 881.505119][T30623] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 881.529472][T30623] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 881.547227][T30623] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 881.935624][T30622] loop1: detected capacity change from 0 to 32768 [ 882.149757][T30642] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 882.167713][T30642] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 882.174775][T30642] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 882.195992][T30642] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 882.205650][T18426] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 882.206008][T30642] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 882.412476][T18426] usb 4-1: Using ep0 maxpacket: 32 [ 882.424470][T18426] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 882.454742][T18426] usb 4-1: config 0 has no interface number 0 [ 882.472678][T18426] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 882.504647][T18426] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.520660][T18426] usb 4-1: Product: syz [ 882.525324][T18426] usb 4-1: Manufacturer: syz [ 882.531186][T18426] usb 4-1: SerialNumber: syz [ 882.546755][T18426] usb 4-1: config 0 descriptor?? [ 882.560473][T18426] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 882.575568][T18426] usb 4-1: selecting invalid altsetting 1 [ 882.585592][T18426] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 882.606677][T18426] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 882.625918][T18426] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 882.644732][T18426] usb 4-1: media controller created [ 882.648069][T30644] loop2: detected capacity change from 0 to 32768 [ 882.653380][T30648] loop1: detected capacity change from 0 to 4096 [ 882.670468][T30648] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 882.701565][T30644] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 882.720479][T18426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 882.753958][T30648] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 882.773428][T30648] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 882.816890][T18426] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 882.837372][T18426] zl10353_read_register: readreg error (reg=127, ret==-71) [ 882.864561][T30644] XFS (loop2): Ending clean mount [ 882.865773][T18426] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 882.875172][T30644] XFS (loop2): Quotacheck needed: Please wait. [ 883.053137][T18426] usb 4-1: USB disconnect, device number 77 [ 883.078113][T30644] XFS (loop2): Quotacheck: Done. [ 883.157805][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 883.300297][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 883.443601][T30668] loop1: detected capacity change from 0 to 512 [ 883.481446][T30668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.632827][T30668] EXT4-fs error (device loop1): ext4_get_first_dir_block:3584: inode #12: comm syz.1.11222: Directory block failed checksum [ 883.651407][T30675] loop3: detected capacity change from 0 to 128 [ 883.671629][T30675] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 883.696742][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 883.709354][T30675] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 883.964784][T30677] loop1: detected capacity change from 0 to 4096 [ 884.004867][T30677] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512). [ 884.223048][ T28] audit: type=1326 audit(884.202:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.11230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2cb9c819 code=0x7ffc0000 [ 884.295661][ T28] audit: type=1326 audit(884.202:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.11230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2cb9c819 code=0x7ffc0000 [ 884.345602][ T28] audit: type=1326 audit(884.232:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.11230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f9d2cb9c819 code=0x7ffc0000 [ 884.434208][ T28] audit: type=1326 audit(884.232:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.11230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2cb9c819 code=0x7ffc0000 [ 884.524312][ T28] audit: type=1326 audit(884.232:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.11230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2cb9c819 code=0x7ffc0000 [ 884.627113][ T28] audit: type=1326 audit(884.262:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.11230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f9d2cb9c819 code=0x7ffc0000 [ 884.679061][ T28] audit: type=1326 audit(884.262:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30687 comm="syz.1.11230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d2cb9c819 code=0x7ffc0000 [ 885.295918][T30709] loop3: detected capacity change from 0 to 4096 [ 885.325586][T30709] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 885.440327][T30709] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 885.928341][T30735] netlink: 'syz.1.11248': attribute type 62 has an invalid length. [ 886.216274][T30748] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11254'. [ 886.433441][ T28] kauditd_printk_skb: 185 callbacks suppressed [ 886.433457][ T28] audit: type=1326 audit(886.412:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30752 comm="syz.0.11256" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f669db9c819 code=0x0 [ 886.711113][T30738] loop3: detected capacity change from 0 to 40427 [ 886.732950][T30738] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 886.763005][T30738] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 886.787656][T30738] F2FS-fs (loop3): Image doesn't support compression [ 886.828784][T30738] F2FS-fs (loop3): invalid crc value [ 886.857927][T30738] F2FS-fs (loop3): Found nat_bits in checkpoint [ 886.993455][T30738] F2FS-fs (loop3): Start checkpoint disabled! [ 887.001065][T30750] loop2: detected capacity change from 0 to 40427 [ 887.045983][T30750] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 887.057012][T30738] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 887.084635][T30750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 887.122007][T30750] F2FS-fs (loop2): invalid crc value [ 887.158274][T30738] syz.3.11250: attempt to access beyond end of device [ 887.158274][T30738] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 887.178009][T30750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 887.203644][T30738] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 887.345264][T30750] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 887.353553][T30750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 887.683578][ T3491] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 887.708574][ T3491] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 888.143801][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11264'. [ 888.154101][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11264'. [ 888.276646][ T170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 888.813571][T30794] openvswitch: netlink: Actions may not be safe on all matching packets [ 888.880471][T30783] loop3: detected capacity change from 0 to 40427 [ 888.909914][T30783] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x7ffff [ 888.940173][T30783] F2FS-fs (loop3): invalid crc value [ 888.978263][T30783] F2FS-fs (loop3): Found nat_bits in checkpoint [ 889.112595][T30783] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 889.303727][ T5776] syz-executor: attempt to access beyond end of device [ 889.303727][ T5776] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 889.336916][ T5776] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 890.213729][T30806] loop1: detected capacity change from 0 to 40427 [ 890.224654][T30806] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 890.242448][T30806] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 890.262190][T30806] F2FS-fs (loop1): invalid crc value [ 890.272775][T30806] F2FS-fs (loop1): Found nat_bits in checkpoint [ 890.361088][T30806] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 890.372793][T30806] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 891.150310][T30822] loop3: detected capacity change from 0 to 256 [ 891.208390][T30822] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 891.625356][T30831] loop1: detected capacity change from 0 to 4096 [ 892.064568][T30828] loop3: detected capacity change from 0 to 32768 [ 892.106491][T30837] CUSE: unknown device info "" [ 892.111596][T30837] CUSE: unknown device info "" [ 892.142819][T30837] CUSE: unknown device info "" [ 892.151558][T30837] CUSE: zero length info key specified [ 892.158632][T30828] jfs: Unrecognized mount option "quota=" or missing value [ 892.441873][T30847] loop1: detected capacity change from 0 to 64 [ 892.887824][T30859] loop2: detected capacity change from 0 to 2048 [ 892.962256][T30859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 893.045583][ T1187] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 893.087788][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.247285][ T1187] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 893.253674][T30861] loop3: detected capacity change from 0 to 40427 [ 893.265589][ T1187] usb 2-1: config 2 interface 0 has no altsetting 0 [ 893.279167][ T1187] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 893.284245][T30861] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 893.299883][T30861] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 893.304782][ T1187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.310750][T30861] F2FS-fs (loop3): invalid crc value [ 893.334043][ T1187] usb 2-1: Product: syz [ 893.344109][T30861] F2FS-fs (loop3): Found nat_bits in checkpoint [ 893.350792][ T1187] usb 2-1: Manufacturer: syz [ 893.359771][ T1187] usb 2-1: SerialNumber: syz [ 893.388505][ T1187] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 893.403197][ T1187] usb 2-1: selecting invalid altsetting 0 [ 893.406082][ T3477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 893.455928][ T1187] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 893.536092][T30861] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 893.565721][T30861] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 893.660443][ T1187] usb 2-1: USB disconnect, device number 79 [ 894.141143][T30882] loop2: detected capacity change from 0 to 64 [ 894.473915][T30894] loop1: detected capacity change from 0 to 512 [ 894.570542][T30894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.694680][T30901] loop0: detected capacity change from 0 to 4096 [ 894.742977][T30901] ntfs: volume version 3.1. [ 894.836511][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.889147][T30904] loop3: detected capacity change from 0 to 512 [ 894.947752][T30904] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 895.024571][T30904] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.11319: bad orphan inode 131083 [ 895.067296][T30904] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 895.263308][T30910] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 895.302641][ T5776] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.781918][T30921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11325'. [ 895.866721][T30926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11325'. [ 896.111478][T30907] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 896.193442][T30936] set_capacity_and_notify: 2 callbacks suppressed [ 896.193458][T30936] loop0: detected capacity change from 0 to 4096 [ 896.313914][T30907] XFS (loop1): Ending clean mount [ 896.362392][T30907] XFS (loop1): Quotacheck needed: Please wait. [ 896.435766][T30947] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 896.439376][T30936] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 896.515670][T30907] XFS (loop1): Quotacheck: Done. [ 896.538233][T30936] NILFS (loop0): mounting fs with errors [ 896.716780][T30936] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 896.794088][T30936] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 896.866956][T30936] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 896.869099][T30951] loop2: detected capacity change from 0 to 128 [ 896.967829][T30951] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 896.982713][ T5769] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 897.104623][T30942] loop3: detected capacity change from 0 to 32768 [ 897.184826][ T5772] sysv_free_block: trying to free block not in datazone [ 897.255190][ T5772] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 897.396999][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11339'. [ 897.436552][T30955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11339'. [ 897.464711][T30955] netlink: 'syz.0.11339': attribute type 19 has an invalid length. [ 897.485629][T30955] netlink: 'syz.0.11339': attribute type 20 has an invalid length. [ 898.145920][T30976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11347'. [ 898.377994][T30987] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 898.457026][T18426] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 898.681028][T18426] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 898.706074][T18426] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.728367][T18426] usb 3-1: Product: syz [ 898.733366][T18426] usb 3-1: Manufacturer: syz [ 898.745574][T18426] usb 3-1: SerialNumber: syz [ 898.767095][T18426] usb 3-1: config 0 descriptor?? [ 898.801158][T18426] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 898.849536][T18426] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 898.884608][T18426] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 898.906446][T18426] usb 3-1: media controller created [ 898.960287][T18426] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 899.096533][T18426] DVB: Unable to find symbol mt352_attach() [ 899.156334][ T170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 899.176066][T18426] DVB: Unable to find symbol nxt6000_attach() [ 899.209619][T18426] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 899.247759][T18426] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input56 [ 899.264393][T18426] dvb-usb: schedule remote query interval to 1000 msecs. [ 899.272768][T18426] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 899.285840][T18426] dvb-usb: bulk message failed: -22 (7/0) [ 899.292005][T18426] dvb-usb: bulk message failed: -22 (7/0) [ 899.304230][T18426] usb 3-1: USB disconnect, device number 85 [ 899.428477][T18426] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 899.448677][T31003] loop3: detected capacity change from 0 to 32768 [ 899.516188][T31003] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 899.572594][T31003] JBD2: Ignoring recovery information on journal [ 899.628690][T31003] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 899.927811][T31024] batadv0: Device is already in use. [ 899.986928][ T5776] ocfs2: Unmounting device (7,3) on (node local) [ 900.369307][T31022] loop2: detected capacity change from 0 to 32768 [ 900.397475][T31022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.11367 (31022) [ 900.414784][T31032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11372'. [ 900.465904][T31022] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 900.485747][T31022] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 900.516021][T31022] BTRFS info (device loop2): using free space tree [ 900.646330][T31022] BTRFS info (device loop2): enabling ssd optimizations [ 900.664934][T31022] BTRFS info (device loop2): auto enabling async discard [ 900.769803][T31059] netlink: 'syz.1.11376': attribute type 1 has an invalid length. [ 900.928110][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 901.298912][T16997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (16997) [ 901.309663][T31068] loop3: detected capacity change from 0 to 4096 [ 901.429086][T31076] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 901.715719][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 902.375319][T31103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11395'. [ 902.425916][T31103] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11395'. [ 902.474493][T31105] loop1: detected capacity change from 0 to 4096 [ 902.484091][T31109] batadv0: Device is already in use. [ 902.616480][T31113] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 902.818292][T31118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11403'. [ 902.865642][T31118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11403'. [ 902.907892][T31118] netlink: 'syz.3.11403': attribute type 19 has an invalid length. [ 902.938067][T31118] netlink: 'syz.3.11403': attribute type 20 has an invalid length. [ 902.953544][T31125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11405'. [ 903.210130][T31134] loop3: detected capacity change from 0 to 256 [ 903.217072][T31135] loop1: detected capacity change from 0 to 256 [ 903.328030][T31135] FAT-fs (loop1): Directory bread(block 64) failed [ 903.363593][T31135] FAT-fs (loop1): Directory bread(block 65) failed [ 903.388404][T31135] FAT-fs (loop1): Directory bread(block 66) failed [ 903.398937][T31135] FAT-fs (loop1): Directory bread(block 67) failed [ 903.411602][T31135] FAT-fs (loop1): Directory bread(block 68) failed [ 903.431661][T31135] FAT-fs (loop1): Directory bread(block 69) failed [ 903.448558][T31135] FAT-fs (loop1): Directory bread(block 70) failed [ 903.456446][T31135] FAT-fs (loop1): Directory bread(block 71) failed [ 903.490436][T31135] FAT-fs (loop1): Directory bread(block 72) failed [ 903.518487][T31135] FAT-fs (loop1): Directory bread(block 73) failed [ 904.107399][T31157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11418'. [ 904.137435][T31157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11418'. [ 904.157413][T31157] netlink: 'syz.2.11418': attribute type 19 has an invalid length. [ 904.185904][T31157] netlink: 'syz.2.11418': attribute type 20 has an invalid length. [ 904.446631][T31172] comedi comedi3: pcl816: I/O port conflict (0x4f27,16) [ 904.916151][T30123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 904.937262][T31193] [ 904.939828][T31193] ====================================================== [ 904.947909][T31193] WARNING: possible circular locking dependency detected [ 904.954965][T31193] syzkaller #0 Not tainted [ 904.960018][T31193] ------------------------------------------------------ [ 904.967059][T31193] syz.0.11437/31193 is trying to acquire lock: [ 904.973591][T31193] ffffffff9768ff58 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 904.984730][T31193] [ 904.984730][T31193] but task is already holding lock: [ 904.992652][T31193] ffff8881416418b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 905.004434][T31193] [ 905.004434][T31193] which lock already depends on the new lock. [ 905.004434][T31193] [ 905.015661][T31193] [ 905.015661][T31193] the existing dependency chain (in reverse order) is: [ 905.026811][T31193] [ 905.026811][T31193] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 905.038235][T31193] __mutex_lock+0x136/0xcc0 [ 905.044772][T31193] nf_tables_dumpreset_obj+0x72/0xa0 [ 905.050912][T31193] netlink_dump+0x747/0xe50 [ 905.056038][T31193] __netlink_dump_start+0x5f1/0x810 [ 905.062501][T31193] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 905.069567][T31193] nf_tables_getobj_reset+0x1e1/0x630 [ 905.076715][T31193] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 905.082828][T31193] netlink_rcv_skb+0x241/0x4d0 [ 905.088205][T31193] nfnetlink_rcv+0x2c9/0x24a0 [ 905.093806][T31193] netlink_unicast+0x751/0x8d0 [ 905.099494][T31193] netlink_sendmsg+0x8d0/0xbf0 [ 905.105521][T31193] ____sys_sendmsg+0x5ba/0x960 [ 905.111449][T31193] ___sys_sendmsg+0x2a6/0x360 [ 905.116873][T31193] __se_sys_sendmsg+0x1c2/0x2b0 [ 905.122978][T31193] do_syscall_64+0x55/0xa0 [ 905.128146][T31193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.135378][T31193] [ 905.135378][T31193] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 905.144531][T31193] __mutex_lock+0x136/0xcc0 [ 905.149746][T31193] __netlink_dump_start+0xf4/0x810 [ 905.155666][T31193] ip_set_dump+0x15c/0x1f0 [ 905.160820][T31193] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 905.162902][T31202] netlink: 'syz.1.11442': attribute type 2 has an invalid length. [ 905.166645][T31193] netlink_rcv_skb+0x241/0x4d0 [ 905.166678][T31193] nfnetlink_rcv+0x2c9/0x24a0 [ 905.166697][T31193] netlink_unicast+0x751/0x8d0 [ 905.166716][T31193] netlink_sendmsg+0x8d0/0xbf0 [ 905.166734][T31193] ____sys_sendmsg+0x5ba/0x960 [ 905.166749][T31193] ___sys_sendmsg+0x2a6/0x360 [ 905.166762][T31193] __se_sys_sendmsg+0x1c2/0x2b0 [ 905.166778][T31193] do_syscall_64+0x55/0xa0 [ 905.166792][T31193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.166813][T31193] [ 905.166813][T31193] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 905.166839][T31193] __lock_acquire+0x2df1/0x7d40 [ 905.243028][T31193] lock_acquire+0x19e/0x420 [ 905.248660][T31193] __mutex_lock+0x136/0xcc0 [ 905.253986][T31193] ip_set_nfnl_get_byindex+0x67/0x230 [ 905.260443][T31193] set_match_v1_checkentry+0x71/0x230 [ 905.266625][T31193] xt_check_match+0x429/0xaf0 [ 905.272161][T31193] __nft_match_init+0x67a/0x8d0 [ 905.278002][T31193] nf_tables_newrule+0x176c/0x2880 [ 905.284276][T31193] nfnetlink_rcv+0x113e/0x24a0 [ 905.289700][T31193] netlink_unicast+0x751/0x8d0 [ 905.295514][T31193] netlink_sendmsg+0x8d0/0xbf0 [ 905.301453][T31193] ____sys_sendmsg+0x5ba/0x960 [ 905.307277][T31193] ___sys_sendmsg+0x2a6/0x360 [ 905.312862][T31193] __se_sys_sendmsg+0x1c2/0x2b0 [ 905.318738][T31193] do_syscall_64+0x55/0xa0 [ 905.323901][T31193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.331046][T31193] [ 905.331046][T31193] other info that might help us debug this: [ 905.331046][T31193] [ 905.342013][T31193] Chain exists of: [ 905.342013][T31193] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 905.342013][T31193] [ 905.357070][T31193] Possible unsafe locking scenario: [ 905.357070][T31193] [ 905.365658][T31193] CPU0 CPU1 [ 905.372310][T31193] ---- ---- [ 905.378790][T31193] lock(&nft_net->commit_mutex); [ 905.385344][T31193] lock(nlk_cb_mutex-NETFILTER); [ 905.393441][T31193] lock(&nft_net->commit_mutex); [ 905.401982][T31193] lock(nfnl_subsys_ipset); [ 905.406858][T31193] [ 905.406858][T31193] *** DEADLOCK *** [ 905.406858][T31193] [ 905.415240][T31193] 1 lock held by syz.0.11437/31193: [ 905.420888][T31193] #0: ffff8881416418b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 905.433597][T31193] [ 905.433597][T31193] stack backtrace: [ 905.441144][T31193] CPU: 1 PID: 31193 Comm: syz.0.11437 Not tainted syzkaller #0 [ 905.449589][T31193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 905.461566][T31193] Call Trace: [ 905.465364][T31193] [ 905.468657][T31193] dump_stack_lvl+0x18c/0x250 [ 905.474743][T31193] ? load_image+0x420/0x420 [ 905.479613][T31193] ? show_regs_print_info+0x20/0x20 [ 905.485651][T31193] ? print_circular_bug+0x12b/0x1a0 [ 905.491994][T31193] check_noncircular+0x2fc/0x400 [ 905.497224][T31193] ? print_deadlock_bug+0x5d0/0x5d0 [ 905.503050][T31193] ? lockdep_lock+0xf5/0x230 [ 905.508865][T31193] ? _find_first_zero_bit+0xd3/0x100 [ 905.514852][T31193] __lock_acquire+0x2df1/0x7d40 [ 905.520416][T31193] ? mark_lock+0x94/0x320 [ 905.525258][T31193] ? verify_lock_unused+0x140/0x140 [ 905.531086][T31193] ? __lock_acquire+0x1273/0x7d40 [ 905.537096][T31193] lock_acquire+0x19e/0x420 [ 905.541977][T31193] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 905.548056][T31193] ? __might_sleep+0xe0/0xe0 [ 905.552736][T31193] ? read_lock_is_recursive+0x20/0x20 [ 905.558373][T31193] __mutex_lock+0x136/0xcc0 [ 905.562905][T31193] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 905.568860][T31193] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 905.574797][T31193] ? ip_set_pernet+0x23/0x230 [ 905.579570][T31193] ? mutex_lock_nested+0x20/0x20 [ 905.584777][T31193] ? ip_set_pernet+0x23/0x230 [ 905.590508][T31193] ? ip_set_pernet+0x23/0x230 [ 905.595460][T31193] ip_set_nfnl_get_byindex+0x67/0x230 [ 905.602280][T31193] set_match_v1_checkentry+0x71/0x230 [ 905.607761][T31193] xt_check_match+0x429/0xaf0 [ 905.612802][T31193] ? flush_work+0x20/0x20 [ 905.617664][T31193] ? xt_check_proc_name+0x270/0x270 [ 905.622961][T31193] ? __stack_depot_save+0x1f/0x630 [ 905.628355][T31193] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 905.634790][T31193] __nft_match_init+0x67a/0x8d0 [ 905.640020][T31193] ? ___sys_sendmsg+0x2a6/0x360 [ 905.645299][T31193] ? nft_match_large_dump+0x50/0x50 [ 905.650981][T31193] ? nf_tables_newrule+0x150e/0x2880 [ 905.656981][T31193] ? rcu_is_watching+0x15/0xb0 [ 905.662822][T31193] ? nf_tables_newrule+0x150e/0x2880 [ 905.669249][T31193] ? __kmalloc+0xe2/0x230 [ 905.673860][T31193] nf_tables_newrule+0x176c/0x2880 [ 905.679511][T31193] ? nf_tables_delchain+0x1060/0x1060 [ 905.686082][T31193] ? __lock_acquire+0x7d40/0x7d40 [ 905.692363][T31193] ? mutex_unlock+0x10/0x10 [ 905.698335][T31193] ? __nla_parse+0x40/0x50 [ 905.705550][T31193] nfnetlink_rcv+0x113e/0x24a0 [ 905.712700][T31193] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 905.719865][T31193] ? __lock_acquire+0x7d40/0x7d40 [ 905.726559][T31193] ? netlink_deliver_tap+0x2e/0x1b0 [ 905.732227][T31193] netlink_unicast+0x751/0x8d0 [ 905.738310][T31193] netlink_sendmsg+0x8d0/0xbf0 [ 905.743381][T31193] ? netlink_getsockopt+0x590/0x590 [ 905.748871][T31193] ? aa_sock_msg_perm+0x94/0x150 [ 905.754542][T31193] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 905.760035][T31193] ? security_socket_sendmsg+0x80/0xa0 [ 905.766291][T31193] ? netlink_getsockopt+0x590/0x590 [ 905.772466][T31193] ____sys_sendmsg+0x5ba/0x960 [ 905.778551][T31193] ? __asan_memset+0x22/0x40 [ 905.784194][T31193] ? __sys_sendmsg_sock+0x30/0x30 [ 905.789685][T31193] ? __import_iovec+0x5f2/0x850 [ 905.794999][T31193] ? import_iovec+0x73/0xa0 [ 905.799788][T31193] ___sys_sendmsg+0x2a6/0x360 [ 905.805108][T31193] ? __sys_sendmsg+0x2a0/0x2a0 [ 905.810668][T31193] __se_sys_sendmsg+0x1c2/0x2b0 [ 905.815832][T31193] ? __x64_sys_sendmsg+0x80/0x80 [ 905.821495][T31193] ? lockdep_hardirqs_on+0x98/0x150 [ 905.827250][T31193] do_syscall_64+0x55/0xa0 [ 905.832039][T31193] ? clear_bhb_loop+0x40/0x90 [ 905.837208][T31193] ? clear_bhb_loop+0x40/0x90 [ 905.842747][T31193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 905.848997][T31193] RIP: 0033:0x7f669db9c819 [ 905.854274][T31193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.877271][T31193] RSP: 002b:00007f669eb4c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.889593][T31193] RAX: ffffffffffffffda RBX: 00007f669de15fa0 RCX: 00007f669db9c819 [ 905.900438][T31193] RDX: 0000000024044010 RSI: 0000200000000140 RDI: 0000000000000003 [ 905.909419][T31193] RBP: 00007f669dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 905.919428][T31193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.928324][T31193] R13: 00007f669de16038 R14: 00007f669de15fa0 R15: 00007ffd554a6708 [ 905.937049][T31193] [ 905.946574][T31193] set match dimension is over the limit! [ 910.676163][ T3424] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration