last executing test programs: 2m0.501376234s ago: executing program 2 (id=264): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000840)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xe}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x848d}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 2m0.354467588s ago: executing program 2 (id=267): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bind$packet(r0, &(0x7f0000000100)={0x11, 0x1a, 0x0, 0x1, 0x4, 0x6, @local}, 0x14) 1m59.646067771s ago: executing program 2 (id=277): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000d7c000/0x4000)=nil, 0x4000, 0x3) 1m59.451176622s ago: executing program 2 (id=281): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 1m59.320278713s ago: executing program 2 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="8725a5f5", 0x4}], 0x1}}], 0x1, 0x40840) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac00018010000600fa010000060000000900000018000c8014000100930a0000f602000005000000810000000c000700e60000000900000068000c80140001"], 0xec}}, 0x4000844) 1m58.96561565s ago: executing program 2 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) 1m58.661892039s ago: executing program 32 (id=291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x30}}, 0x0) 1m33.543122903s ago: executing program 4 (id=570): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)={[{@acl}, {@heartbeat_none}, {@dir_resv_level={'dir_resv_level', 0x3d, 0x3}}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@coherency_full}, {@inode64}]}, 0x1, 0x4421, &(0x7f0000004500)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4800, 0x0, 0x6, 0x0, &(0x7f0000000080)) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, 0x0, 0xfe, 0x0, &(0x7f00000002c0)) 1m31.885407148s ago: executing program 4 (id=576): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x200041d0, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffc, @mcast1}, 0x1c) 1m31.442316399s ago: executing program 4 (id=579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000300001801c00028008000200a2000000050001001d00000008000300ff0f00000d0001"], 0x44}, 0x1, 0x0, 0x0, 0x40080c1}, 0x0) 1m31.243255191s ago: executing program 4 (id=582): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x3970461, &(0x7f0000000440)={[{}]}) 1m30.823175988s ago: executing program 4 (id=588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r1, 0x7, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x270f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) 1m30.303192462s ago: executing program 4 (id=595): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1e9) 1m29.778341266s ago: executing program 33 (id=595): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x800012, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x103) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1e9) 986.445084ms ago: executing program 0 (id=1719): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000880000008500000086000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 921.356889ms ago: executing program 1 (id=1721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 839.897322ms ago: executing program 0 (id=1723): r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000400)=@file={0x1, './bus\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, 0x0) 795.405936ms ago: executing program 1 (id=1724): syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x22, 0x1517, &(0x7f0000002780)="$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") ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000000)={0xff, 0x2000003, 0x1758}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 728.306702ms ago: executing program 3 (id=1726): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000008000000ff"], 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 726.043833ms ago: executing program 5 (id=1727): chdir(&(0x7f0000000040)='./cgroup\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) 595.357543ms ago: executing program 0 (id=1728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040800) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a78000000060a030400000000000000000a0000010900010073797a31000000004c000480480001800b000100746172676574000038000280240003000739f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700000000000000000800024000000000080001004c4f47000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 592.379474ms ago: executing program 1 (id=1729): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x4018aee3, &(0x7f00000002c0)) 585.753728ms ago: executing program 3 (id=1730): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) mremap(&(0x7f0000258000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000316000/0x4000)=nil) 525.20118ms ago: executing program 5 (id=1731): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102"], 0x1c}}, 0x0) 485.044331ms ago: executing program 0 (id=1732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 465.630692ms ago: executing program 1 (id=1733): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$notify(r0, 0x402, 0x0) 408.964352ms ago: executing program 3 (id=1734): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002340)={0x198, 0x0, r1, [{0x1400000000000007, 0xffffffffffffffff, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x2, 0x14f, 0x3, '/>\rv/cuse\x00\xe5\xec\xd8\x0f\xddP\x02\x1bn\xb8\xde|\x92zQC*\xaf=\xff\x01$\xeeW=?\xc3\x94~\xf0\xdanT\xb1\xf1)\xe6\x98\x83\x85P\xa7\x85R\xf3\xe5\x12TkR\xe45\xd1\xd6\x89/i(\x1e]\x8f\xc8\xfd\xf9L\xc9\xf3W\x1e(\x04\x16j\r\x9as\x87\xdb\xff\x13\"YL\xe5\xbdQ]\xb2\xebG+\xde\"\xe5F\xd8\xe0N\x03\xae\t\xb9\xb1M\x14b\n!\xab:c\x9c\xc8\x9f\xd8\x80\xed\x1bao$W\x14Y\f\xf34Q\x05\xd1\xe9\xcaLz\xd6\x90\xfe\x99\x8f\x88m\x01\xeb\x88\xe0\x00>2\xa2\x93\x89a\"\xeb\xee V\xad\xc4|\xff#\xday\x18\xef\x80S\x97\x18io\xe5L\xe5\xce\x1c\xe0\x94\xa28\x869\xd4I\xff\xe8\xdc\xa5\xd1\xae\x9e\xc3\x87\xc5[\xa5<\a^\xceQ\xce\xd3>\x94nH\x0fw\xa0\xdd\xd7\'0K\x0eV\xc6,\x86\xb9${\\\x9dd\x7f\x8d\x1b\x0f\x01+\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\xd9L\xd0P\xa7\xf4\xbf\x92t|%\xcd\x16\x80\x1cI\x9f\xb8\xe8\x9eO\xd8\x18\xd9\xe4K\bu\tG\xec\xc2\xcf\xc7\xaa|\xdcQ\xfcU\x0e\xcb\x9cDv\x85F\x89\xdd,*p\xe1(o9\xd0{u\xe1\xf6\xba[\xa7\xe8\xb5\xa8\x91\xb2\xe9gI\x1d\xc1P\xcc\xcdYV'}]}, 0x198) 353.953121ms ago: executing program 1 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a1f0400000000000000000a0000440900010073797a31000000005c000480340001800c0001007061796c6f6164002400028008000140000000090800034000000042080004400000003b0800024000000002240001800a000100726564697200000014000280080001400000000b08000240cb3c2ca50900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) 334.988642ms ago: executing program 5 (id=1736): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000100)={0x28, r1, 0xd0b, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 279.208081ms ago: executing program 0 (id=1737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xb8c}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 239.082492ms ago: executing program 3 (id=1738): unshare(0x20400) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @mcast2={0xff, 0x3}, 0x1}, 0x1c) 237.828203ms ago: executing program 1 (id=1739): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000ff070000bf65000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000400), 0x840, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001400)={r0, &(0x7f0000000300)='B', &(0x7f0000001300)=""/223}, 0x20) 219.950123ms ago: executing program 5 (id=1740): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) 127.204292ms ago: executing program 3 (id=1741): r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e22, @broadcast}, 0x10) 111.54658ms ago: executing program 0 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1c, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x1c}}, 0x10) 106.927713ms ago: executing program 5 (id=1743): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x100, r1, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x2d}}]}, 0x100}}, 0x0) 1.268569ms ago: executing program 3 (id=1744): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x58, 0x12) 0s ago: executing program 5 (id=1745): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000000801"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4) kernel console output (not intermixed with test programs): (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.227217][ T7292] netlink: 'syz.4.519': attribute type 30 has an invalid length. [ 125.481610][ T7297] loop1: detected capacity change from 0 to 8192 [ 125.528639][ T7297] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 125.581525][ T7297] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 125.642942][ T7297] REISERFS (device loop1): using ordered data mode [ 125.649495][ T7297] reiserfs: using flush barriers [ 125.655258][ T7308] loop4: detected capacity change from 0 to 4096 [ 125.741785][ T7297] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 125.745822][ T7312] loop3: detected capacity change from 0 to 64 [ 125.808180][ T7297] REISERFS (device loop1): checking transaction log (loop1) [ 125.846935][ T7308] EXT4-fs: Ignoring removed orlov option [ 125.869156][ T7308] EXT4-fs (loop4): Test dummy encryption mode enabled [ 125.876866][ T7297] REISERFS (device loop1): Using r5 hash to sort names [ 125.900202][ T7308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.920792][ T7297] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 125.939393][ T7297] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 126.047234][ T6616] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.541100][ T7314] loop0: detected capacity change from 0 to 32768 [ 126.553908][ T7314] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.527 (7314) [ 126.582188][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 126.598999][ T7314] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 126.614112][ T7314] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 126.640764][ T7314] BTRFS info (device loop0): setting nodatasum [ 126.659848][ T7314] BTRFS info (device loop0): force zlib compression, level 3 [ 126.668601][ T7314] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 126.678529][ T7314] BTRFS info (device loop0): use lzo compression, level 0 [ 126.690020][ T7314] BTRFS info (device loop0): turning on flush-on-commit [ 126.706470][ T7314] BTRFS info (device loop0): use zlib compression, level 3 [ 126.732000][ T7314] BTRFS info (device loop0): max_inline at 7 [ 126.738048][ T7314] BTRFS info (device loop0): using free space tree [ 126.786368][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.815573][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.830172][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.840980][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.854093][ T789] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 126.863058][ T9] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 126.873209][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.881969][ T7314] BTRFS info (device loop0): enabling ssd optimizations [ 126.891125][ T7314] BTRFS info (device loop0): auto enabling async discard [ 126.899118][ T7351] netlink: 32 bytes leftover after parsing attributes in process `syz.1.535'. [ 127.006528][ T7314] fs-verity: sha512 using implementation "sha512-avx2" [ 127.019296][ T7314] BTRFS info (device loop0): setting compat-ro feature flag for VERITY (0x4) [ 127.081576][ T789] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.111293][ T5774] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.131705][ T789] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 127.153264][ T789] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.185919][ T789] usb 4-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 127.196561][ T789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.204783][ T789] usb 4-1: Product: syz [ 127.209051][ T789] usb 4-1: Manufacturer: syz [ 127.215179][ T789] usb 4-1: SerialNumber: syz [ 127.248251][ T789] usb 4-1: config 0 descriptor?? [ 127.315630][ T9] gud 5-1:1.0: No supported pixel formats found [ 127.332334][ T9] gud: probe of 5-1:1.0 failed with error -22 [ 127.387229][ T7359] usb usb1: usbfs: process 7359 (syz.0.537) did not claim interface 0 before use [ 127.498462][ T789] usb 4-1: Found UVC 34.00 device syz (8086:0b5b) [ 127.522324][ T789] usb 4-1: No valid video chain found. [ 127.541621][ T972] usb 5-1: USB disconnect, device number 2 [ 127.748051][ T5846] usb 4-1: USB disconnect, device number 6 [ 127.825822][ T7370] loop1: detected capacity change from 0 to 2048 [ 127.889303][ T7370] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.332347][ T7394] ip_tables: iptables: counters copy to user failed while replacing table [ 128.593031][ T7409] loop4: detected capacity change from 0 to 128 [ 128.699596][ T7415] loop3: detected capacity change from 0 to 128 [ 128.787791][ T7415] FAT-fs (loop3): Directory bread(block 32) failed [ 128.825202][ T7415] FAT-fs (loop3): Directory bread(block 33) failed [ 128.831861][ T7415] FAT-fs (loop3): Directory bread(block 34) failed [ 128.860648][ T7415] FAT-fs (loop3): Directory bread(block 35) failed [ 128.884874][ T7415] FAT-fs (loop3): Directory bread(block 36) failed [ 128.905032][ T7415] FAT-fs (loop3): Directory bread(block 37) failed [ 128.911734][ T7415] FAT-fs (loop3): Directory bread(block 38) failed [ 128.930363][ T7415] FAT-fs (loop3): Directory bread(block 39) failed [ 128.947998][ T7415] FAT-fs (loop3): Directory bread(block 40) failed [ 128.957264][ T7415] FAT-fs (loop3): Directory bread(block 41) failed [ 129.125140][ T27] audit: type=1800 audit(1790966255.765:36): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.557" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 129.125871][ T7415] syz.3.557: attempt to access beyond end of device [ 129.125871][ T7415] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 129.191464][ T7415] FAT-fs (loop3): Filesystem has been set read-only [ 129.209922][ T7435] loop4: detected capacity change from 0 to 2048 [ 129.217945][ T7415] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 129.247162][ T7435] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=11586, location=11586 [ 129.336368][ T7435] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.918266][ T7433] loop1: detected capacity change from 0 to 40427 [ 129.994844][ T7433] F2FS-fs (loop1): invalid crc value [ 130.040109][ T7433] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.205498][ T7433] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 130.381539][ T5773] syz-executor: attempt to access beyond end of device [ 130.381539][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 130.423649][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.785551][ T7453] loop3: detected capacity change from 0 to 32768 [ 130.826249][ T7465] loop4: detected capacity change from 0 to 32768 [ 130.861526][ T7453] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 130.881930][ T7453] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 130.979101][ T7453] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 131.037565][ T7465] JBD2: Ignoring recovery information on journal [ 131.043687][ T7453] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 131.185386][ T7465] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 131.200798][ T7483] loop1: detected capacity change from 0 to 512 [ 131.336845][ T7483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.402890][ T7483] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.607459][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.681465][ T7465] syz.4.570 (7465) used greatest stack depth: 18776 bytes left [ 131.685095][ T7493] loop0: detected capacity change from 0 to 128 [ 131.757170][ T7493] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 131.834855][ T6616] ocfs2: Unmounting device (7,4) on (node local) [ 131.964807][ T7502] loop1: detected capacity change from 0 to 512 [ 132.043515][ T7502] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.578: corrupted inode contents [ 132.104762][ T7502] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 132.199543][ T7502] EXT4-fs error (device loop1): ext4_do_update_inode:5268: inode #15: comm syz.1.578: corrupted inode contents [ 132.246131][ T7502] EXT4-fs error (device loop1): ext4_evict_inode:302: inode #15: comm syz.1.578: mark_inode_dirty error [ 132.274221][ T7502] EXT4-fs (loop1): 1 orphan inode deleted [ 132.287575][ T7502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.295180][ T7515] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 132.473760][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.520014][ T7521] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 132.565865][ T7521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.762236][ T6616] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 132.793546][ T6616] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 132.870210][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881201][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.930262][ T7542] set_capacity_and_notify: 1 callbacks suppressed [ 132.930277][ T7542] loop1: detected capacity change from 0 to 256 [ 133.118045][ T7542] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 133.145177][ T7542] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 133.158040][ T7542] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 198) [ 133.383048][ T1092] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.605997][ T1092] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.764697][ T1092] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.929859][ T1092] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.207820][ T7549] loop3: detected capacity change from 0 to 40427 [ 134.249641][ T7571] sp0: Synchronizing with TNC [ 134.265156][ T7549] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff [ 134.295941][ T7549] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x30e4 [ 134.362596][ T7549] F2FS-fs (loop3): invalid crc value [ 134.394189][ T7549] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.499063][ T7549] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x665/0x970 [ 134.568053][ T7549] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.670524][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.682528][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.692105][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.722304][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.742144][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.753318][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 135.344456][ T7582] chnl_net:caif_netlink_parms(): no params data found [ 135.593241][ T7612] loop3: detected capacity change from 0 to 512 [ 135.688385][ T7612] FAT-fs (loop3): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 135.936546][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 135.984831][ T7626] loop0: detected capacity change from 0 to 64 [ 136.113502][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.141059][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.156754][ T7582] bridge_slave_0: entered allmulticast mode [ 136.184575][ T7582] bridge_slave_0: entered promiscuous mode [ 136.204408][ T7634] loop1: detected capacity change from 0 to 1024 [ 136.214999][ T7582] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.252766][ T7634] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.264387][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.271612][ T7582] bridge_slave_1: entered allmulticast mode [ 136.307430][ T7582] bridge_slave_1: entered promiscuous mode [ 136.361005][ T7634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.400508][ T7645] overlayfs: overlapping lowerdir path [ 136.493335][ T7634] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.613: missing EA_INODE flag [ 136.544885][ T7634] EXT4-fs (loop1): Remounting filesystem read-only [ 136.575530][ T7634] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.599112][ T7582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.635157][ T7582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.748317][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.748965][ T7654] loop0: detected capacity change from 0 to 1024 [ 136.862184][ T5777] Bluetooth: hci3: command tx timeout [ 136.909016][ T7582] team0: Port device team_slave_0 added [ 136.920058][ T7582] team0: Port device team_slave_1 added [ 136.965211][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.982056][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.078872][ T7582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.129791][ T7582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.141961][ T7582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.202110][ T7582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.304044][ T1092] hsr_slave_0: left promiscuous mode [ 137.310141][ T1092] hsr_slave_1: left promiscuous mode [ 137.346830][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.365659][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.396213][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.412404][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.438156][ T1092] bridge_slave_1: left allmulticast mode [ 137.444187][ T1092] bridge_slave_1: left promiscuous mode [ 137.449935][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.493955][ T1092] bridge_slave_0: left allmulticast mode [ 137.499699][ T1092] bridge_slave_0: left promiscuous mode [ 137.510308][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.584257][ T1092] veth1_macvtap: left promiscuous mode [ 137.590998][ T1092] veth0_macvtap: left promiscuous mode [ 137.603409][ T1092] veth1_vlan: left promiscuous mode [ 137.614326][ T1092] veth0_vlan: left promiscuous mode [ 137.694903][ T7658] loop1: detected capacity change from 0 to 40427 [ 137.731658][ T7658] F2FS-fs (loop1): invalid crc value [ 137.778179][ T7658] F2FS-fs (loop1): Found nat_bits in checkpoint [ 137.922019][ T7658] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 137.995601][ T7678] netlink: 'syz.0.623': attribute type 9 has an invalid length. [ 138.007155][ T7658] F2FS-fs (loop1): Can't enable fs-verity on inode 3: the verity feature is not enabled on this filesystem [ 138.019077][ T7678] netlink: 'syz.0.623': attribute type 23 has an invalid length. [ 138.027745][ T7678] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.623'. [ 138.351833][ T7684] loop3: detected capacity change from 0 to 1024 [ 138.369793][ T7684] EXT4-fs: inline encryption not supported [ 138.381390][ T7684] EXT4-fs: Ignoring removed bh option [ 138.414360][ T7684] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 138.441065][ T7684] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 138.486277][ T7684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.605483][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.876957][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 138.917159][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 138.952553][ T5777] Bluetooth: hci3: command tx timeout [ 138.958546][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.002689][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.300355][ T1092] bond0 (unregistering): Released all slaves [ 139.537596][ T7582] hsr_slave_0: entered promiscuous mode [ 139.564410][ T7582] hsr_slave_1: entered promiscuous mode [ 139.581485][ T7582] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.593920][ T7582] Cannot create hsr debugfs directory [ 139.831786][ T7706] loop1: detected capacity change from 0 to 256 [ 139.849134][ T7706] exfat: Deprecated parameter 'namecase' [ 139.927074][ T7706] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 140.250341][ T7722] loop3: detected capacity change from 0 to 256 [ 140.268635][ T7582] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 140.306782][ T7582] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 140.348827][ T7725] loop0: detected capacity change from 0 to 512 [ 140.370279][ T7582] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 140.405202][ T7725] FAT-fs (loop0): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 140.405244][ T7582] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 140.666480][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.680719][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41613352, 0x61417272 (sector = 1) [ 140.729552][ T7582] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.750768][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.757996][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.838073][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.845298][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.032389][ T5777] Bluetooth: hci3: command tx timeout [ 141.407104][ T7582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.621146][ T7771] netlink: 48 bytes leftover after parsing attributes in process `syz.0.653'. [ 141.895473][ T7747] loop3: detected capacity change from 0 to 32768 [ 141.952960][ T7747] XFS: ikeep mount option is deprecated. [ 142.016568][ T7747] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 142.185937][ T7582] veth0_vlan: entered promiscuous mode [ 142.222958][ T7747] XFS (loop3): Ending clean mount [ 142.269393][ T7582] veth1_vlan: entered promiscuous mode [ 142.331263][ T7582] veth0_macvtap: entered promiscuous mode [ 142.340459][ T5775] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 142.348621][ T7582] veth1_macvtap: entered promiscuous mode [ 142.427891][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.442289][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.469918][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.488263][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.527175][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.547105][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.580312][ T7778] loop1: detected capacity change from 0 to 32768 [ 142.588625][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.615051][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.666732][ T27] audit: type=1326 audit(2000000001.019:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7795 comm="syz.0.657" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2cdd9e159 code=0x0 [ 142.687923][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.709317][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.724561][ T7778] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 142.734594][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.745599][ T7582] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.756729][ T7582] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.789264][ T7582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.838312][ T7778] XFS (loop1): Ending clean mount [ 142.844532][ T7582] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.892426][ T7582] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.911541][ T7778] XFS (loop1): Quotacheck needed: Please wait. [ 142.921611][ T7582] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.944308][ T7582] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.996587][ T7778] XFS (loop1): Quotacheck: Done. [ 143.105559][ T5777] Bluetooth: hci3: command tx timeout [ 143.153932][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.193931][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 143.225401][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.384177][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.426205][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.637279][ T7827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.662'. [ 143.703374][ T7825] loop3: detected capacity change from 0 to 4096 [ 143.780987][ T7825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.865425][ T7833] loop5: detected capacity change from 0 to 2048 [ 143.893529][ T7836] loop0: detected capacity change from 0 to 1024 [ 143.903113][ T7836] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.934245][ T7836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 143.968175][ T7837] EXT4-fs error (device loop3): ext4_get_first_dir_block:3606: inode #12: block 80: comm syz.3.661: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 144.012755][ T7833] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.084954][ T7837] EXT4-fs error (device loop3): ext4_get_first_dir_block:3608: inode #12: comm syz.3.661: directory missing '..' [ 144.152688][ T7836] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 144.289559][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.354041][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.830014][ T7864] loop0: detected capacity change from 0 to 64 [ 145.277340][ T7877] loop0: detected capacity change from 0 to 4096 [ 145.333172][ T7877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.388717][ T7885] loop3: detected capacity change from 0 to 256 [ 145.399821][ T7885] FAT-fs (loop3): bogus logical sector size 65529 [ 145.500740][ T7857] loop1: detected capacity change from 0 to 32768 [ 145.507188][ T7885] FAT-fs (loop3): Can't find a valid FAT filesystem [ 145.552044][ T7877] EXT4-fs error (device loop0): ext4_get_first_dir_block:3606: inode #12: block 80: comm syz.0.676: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 145.660422][ T7857] JBD2: Ignoring recovery information on journal [ 145.672186][ T7877] EXT4-fs error (device loop0): ext4_get_first_dir_block:3608: inode #12: comm syz.0.676: directory missing '..' [ 145.839615][ T7857] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 145.895610][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.011067][ T7901] loop5: detected capacity change from 0 to 16 [ 146.055702][ T7900] loop3: detected capacity change from 0 to 64 [ 146.084437][ T7901] erofs: (device loop5): mounted with root inode @ nid 36. [ 146.138500][ T27] audit: type=1800 audit(2000000004.489:38): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.685" name="file1" dev="loop5" ino=86 res=0 errno=0 [ 146.340753][ T7908] loop5: detected capacity change from 0 to 64 [ 146.361051][ T7908] hfs: unable to locate alternate MDB [ 146.399973][ T7908] hfs: continuing without an alternate MDB [ 146.408669][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 147.021509][ T7936] netlink: 'syz.1.696': attribute type 29 has an invalid length. [ 147.251116][ T7949] netlink: 52 bytes leftover after parsing attributes in process `syz.1.703'. [ 148.243449][ T8000] erofs: (device loop1): mounted with root inode @ nid 36. [ 149.080417][ T8038] set_capacity_and_notify: 1 callbacks suppressed [ 149.080433][ T8038] loop3: detected capacity change from 0 to 2368 [ 149.182138][ T6490] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.430550][ T8050] netlink: 32 bytes leftover after parsing attributes in process `syz.0.737'. [ 149.970578][ T8045] loop5: detected capacity change from 0 to 32768 [ 150.009839][ T8045] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 150.115761][ T8045] XFS (loop5): Ending clean mount [ 150.444625][ T7582] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 150.847698][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 151.063167][ T8127] loop3: detected capacity change from 0 to 512 [ 151.116603][ T8127] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.761: corrupted inode contents [ 151.135491][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 151.150348][ T8136] loop5: detected capacity change from 0 to 128 [ 151.198174][ T8127] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 151.250917][ T8127] EXT4-fs error (device loop3): ext4_do_update_inode:5268: inode #15: comm syz.3.761: corrupted inode contents [ 151.268815][ T8127] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.761: mark_inode_dirty error [ 151.293863][ T5763] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.341513][ T8139] loop1: detected capacity change from 0 to 2048 [ 151.361020][ T8127] EXT4-fs (loop3): 1 orphan inode deleted [ 151.401191][ T8139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.403966][ T8127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.579329][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.728784][ T8151] loop5: detected capacity change from 0 to 1024 [ 151.753217][ T8151] EXT4-fs: Ignoring removed nobh option [ 151.764091][ T8151] EXT4-fs: Ignoring removed bh option [ 151.856875][ T8151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.048027][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.172552][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 152.348995][ T8183] loop0: detected capacity change from 0 to 512 [ 152.386650][ T8] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 152.408689][ T8] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 152.433603][ T8] usb 4-1: Product: syz [ 152.440791][ T8183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.469372][ T8] usb 4-1: Manufacturer: syz [ 152.474171][ T8] usb 4-1: SerialNumber: syz [ 152.481269][ T8183] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.481638][ T8] usb 4-1: config 0 descriptor?? [ 152.564112][ T8183] EXT4-fs error (device loop0): ext4_get_first_dir_block:3597: inode #12: comm syz.0.784: directory missing '.' [ 152.577010][ T8183] EXT4-fs (loop0): Remounting filesystem read-only [ 152.657186][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.874757][ T28] usb 4-1: USB disconnect, device number 7 [ 153.180685][ T8222] ip_tables: iptables: counters copy to user failed while replacing table [ 153.300382][ T8226] loop0: detected capacity change from 0 to 512 [ 153.338511][ T8226] EXT4-fs: inline encryption not supported [ 153.366616][ T8226] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.403917][ T8226] EXT4-fs (loop0): 1 truncate cleaned up [ 153.415926][ T8226] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.521353][ T8226] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5972: inode #12: comm syz.0.800: bad extra_isize 62 (inode size 256) [ 153.566225][ T8226] EXT4-fs (loop0): Remounting filesystem read-only [ 153.644843][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.718075][ T8217] loop5: detected capacity change from 0 to 32768 [ 153.884857][ T8217] UFO tlock:0xffffc900028da090 [ 153.933718][ T8217] MetaData crosses page boundary!! [ 153.933814][ T8217] lblock = 6300000010, size = -820051968 [ 153.933857][ T8217] CPU: 1 PID: 8217 Comm: syz.5.796 Not tainted syzkaller #0 [ 153.933879][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.933898][ T8217] Call Trace: [ 153.933906][ T8217] [ 153.933914][ T8217] dump_stack_lvl+0x18c/0x250 [ 153.933949][ T8217] ? show_regs_print_info+0x20/0x20 [ 153.933976][ T8217] ? load_image+0x420/0x420 [ 153.934005][ T8217] ? folio_unlock+0x118/0x2f0 [ 153.934031][ T8217] __get_metapage+0xaac/0xfa0 [ 153.934063][ T8217] dtSearch+0x58d/0x21a0 [ 153.934101][ T8217] ? rcu_is_watching+0x15/0xb0 [ 153.934142][ T8217] jfs_lookup+0x1b1/0x420 [ 153.934165][ T8217] ? jfs_get_parent+0xb0/0xb0 [ 153.934181][ T8217] ? __asan_memset+0x22/0x40 [ 153.934224][ T8217] ? __lock_acquire+0x7d80/0x7d80 [ 153.934248][ T8217] ? __rwlock_init+0x150/0x150 [ 153.934270][ T8217] ? d_set_d_op+0x25f/0x370 [ 153.934292][ T8217] ? do_raw_spin_unlock+0x121/0x230 [ 153.934320][ T8217] ? _raw_spin_unlock+0x28/0x40 [ 153.934343][ T8217] ? d_alloc+0x1eb/0x250 [ 153.934363][ T8217] lookup_one_qstr_excl+0x112/0x250 [ 153.934386][ T8217] filename_create+0x246/0x450 [ 153.934412][ T8217] ? kern_path_create+0x50/0x50 [ 153.934433][ T8217] ? __virt_addr_valid+0x10c/0x380 [ 153.934465][ T8217] do_mkdirat+0xa9/0x450 [ 153.934489][ T8217] ? vfs_mkdir+0x470/0x470 [ 153.934518][ T8217] __x64_sys_mkdirat+0x89/0xa0 [ 153.934548][ T8217] do_syscall_64+0x55/0xb0 [ 153.934572][ T8217] ? clear_bhb_loop+0x40/0x90 [ 153.934598][ T8217] ? clear_bhb_loop+0x40/0x90 [ 153.934624][ T8217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.934655][ T8217] RIP: 0033:0x7f400859cfc7 [ 153.934678][ T8217] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.934695][ T8217] RSP: 002b:00007f4009500e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 153.934722][ T8217] RAX: ffffffffffffffda RBX: 00007f4009500ee0 RCX: 00007f400859cfc7 [ 153.934738][ T8217] RDX: 00000000000001ff RSI: 0000200000000680 RDI: 00000000ffffff9c [ 153.934752][ T8217] RBP: 0000200000000080 R08: 0000200000000d40 R09: 0000000000000000 [ 153.934767][ T8217] R10: 0000200000000080 R11: 0000000000000246 R12: 0000200000000680 [ 153.934780][ T8217] R13: 00007f4009500ea0 R14: 0000000000000000 R15: 0000000000000000 [ 153.934810][ T8217] [ 153.934818][ T8217] bread failed! [ 153.934850][ T8217] jfs_lookup: dtSearch returned -5 [ 154.225402][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 154.525065][ T8260] loop3: detected capacity change from 0 to 128 [ 154.580738][ T8260] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 154.580874][ T8260] hpfs: filesystem error: improperly stopped [ 154.580891][ T8260] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 154.580907][ T8260] hpfs: You really don't want any checks? You are crazy... [ 154.580922][ T8260] hpfs: Code page index out of array [ 154.580930][ T8260] hpfs: code page support is disabled [ 154.583094][ T8260] hpfs: hpfs_map_4sectors(): unaligned read [ 154.583598][ T8260] hpfs: hpfs_map_4sectors(): unaligned read [ 154.583611][ T8260] hpfs: filesystem error: unable to find root dir [ 154.879595][ T8275] loop3: detected capacity change from 0 to 8 [ 155.092397][ T8281] loop1: detected capacity change from 0 to 2048 [ 155.114485][ T8281] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.188494][ T8285] loop0: detected capacity change from 0 to 2048 [ 155.234394][ T8285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.355563][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.831'. [ 155.641195][ T8305] loop0: detected capacity change from 0 to 512 [ 155.670053][ T8305] EXT4-fs (loop0): Test dummy encryption mode enabled [ 155.745389][ T8305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.804381][ T8314] loop1: detected capacity change from 0 to 4096 [ 155.868399][ T8317] loop5: detected capacity change from 0 to 512 [ 155.909805][ T8321] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.921489][ T8322] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.941214][ T8317] EXT4-fs error (device loop5): ext4_orphan_get:1434: comm syz.5.842: bad orphan inode 15 [ 156.022209][ T8317] ext4_test_bit(bit=14, block=18) = 1 [ 156.032936][ T8317] is_bad_inode(inode)=0 [ 156.037149][ T8317] NEXT_ORPHAN(inode)=1023 [ 156.071232][ T8325] loop3: detected capacity change from 0 to 64 [ 156.075185][ T8317] max_ino=32 [ 156.082358][ T8317] i_nlink=0 [ 156.096165][ T8317] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2974: inode #15: comm syz.5.842: corrupted xattr block 19: invalid header [ 156.143564][ T8325] hfs: unable to locate alternate MDB [ 156.158051][ T8317] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 156.164137][ T8325] hfs: continuing without an alternate MDB [ 156.178549][ T8327] loop1: detected capacity change from 0 to 8 [ 156.189377][ T8317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 156.224427][ T8317] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.406482][ T8305] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 156.463786][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 156.525219][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.748234][ T8343] loop0: detected capacity change from 0 to 2048 [ 156.768944][ T8343] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 156.793678][ T8343] UDF-fs: Scanning with blocksize 512 failed [ 156.818139][ T8343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.882032][ T28] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 157.032229][ T8351] vivid-000: disconnect [ 157.037750][ T8350] vivid-000: reconnect [ 157.078095][ T28] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 157.102338][ T28] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 157.131110][ T28] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 157.147166][ T28] usb 6-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 157.157373][ T28] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.168045][ T8337] F2FS-fs (loop1): invalid crc value [ 157.179143][ T28] usb 6-1: config 0 descriptor?? [ 157.199200][ T8337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 157.262240][ T8356] ptrace attach of ""[8357] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8356] [ 157.346419][ T8337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 157.479521][ T8337] syz.1.846: attempt to access beyond end of device [ 157.479521][ T8337] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 157.547994][ T8348] (syz.3.851,8348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.584173][ T5773] syz-executor: attempt to access beyond end of device [ 157.584173][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 157.600310][ T8348] (syz.3.851,8348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 157.618767][ T28] wacom 0003:056A:00B7.0003: unknown main item tag 0x0 [ 157.639421][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 157.647696][ T28] wacom 0003:056A:00B7.0003: unknown main item tag 0x0 [ 157.666525][ T28] wacom 0003:056A:00B7.0003: unknown main item tag 0x0 [ 157.675090][ T28] wacom 0003:056A:00B7.0003: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 157.696946][ T28] wacom 0003:056A:00B7.0003: hidraw0: USB HID v0.05 Device [HID 056a:00b7] on usb-dummy_hcd.5-1/input0 [ 157.735447][ T28] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:00B7.0003/input/input6 [ 157.745222][ T8348] JBD2: Ignoring recovery information on journal [ 157.850439][ T28] usb 6-1: USB disconnect, device number 2 [ 157.915665][ T8348] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 157.992628][ T8348] (syz.3.851,8348,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 158.123833][ T8372] netlink: 192 bytes leftover after parsing attributes in process `syz.0.857'. [ 158.205589][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 159.005074][ T8392] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 159.055190][ T8392] ntfs3: loop5: ino=19, mi_enum_attr [ 159.060692][ T8392] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 159.075559][ T8392] ntfs3: loop5: ino=18, mi_enum_attr [ 159.253173][ T789] kernel write not supported for file /dsp (pid: 789 comm: kworker/0:2) [ 159.461978][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 159.665843][ T8] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 159.687364][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 159.719004][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 159.770174][ T8] usb 4-1: New USB device found, idVendor=056a, idProduct=00b7, bcdDevice= 0.00 [ 159.792596][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.810817][ T8] usb 4-1: config 0 descriptor?? [ 159.937515][ T8429] set_capacity_and_notify: 4 callbacks suppressed [ 159.937530][ T8429] loop5: detected capacity change from 0 to 512 [ 160.020351][ T8429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.072108][ T8429] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.137130][ T8429] EXT4-fs error (device loop5): ext4_empty_dir:3138: inode #12: comm syz.5.884: invalid size [ 160.258043][ T8] wacom 0003:056A:00B7.0004: unknown main item tag 0x0 [ 160.271938][ T8] wacom 0003:056A:00B7.0004: unknown main item tag 0x0 [ 160.281945][ T8] wacom 0003:056A:00B7.0004: unknown main item tag 0x0 [ 160.300030][ T8] wacom 0003:056A:00B7.0004: Unknown device_type for 'HID 056a:00b7'. Assuming pen. [ 160.320428][ T8] wacom 0003:056A:00B7.0004: hidraw0: USB HID v0.05 Device [HID 056a:00b7] on usb-dummy_hcd.3-1/input0 [ 160.346174][ T8] input: Wacom Intuos3 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B7.0004/input/input9 [ 160.492176][ T8] usb 4-1: USB disconnect, device number 8 [ 160.509537][ T8434] fido_id[8434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 160.765059][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.513526][ T8468] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.894'. [ 161.964092][ T8461] loop5: detected capacity change from 0 to 32768 [ 162.030786][ T8461] JBD2: Ignoring recovery information on journal [ 162.063583][ T8462] loop1: detected capacity change from 0 to 32768 [ 162.135381][ T8461] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 162.150398][ T8462] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 162.252750][ T8462] XFS (loop1): Ending clean mount [ 162.296280][ T8462] XFS (loop1): Quotacheck needed: Please wait. [ 162.435556][ T8462] XFS (loop1): Quotacheck: Done. [ 162.476070][ T7582] ocfs2: Unmounting device (7,5) on (node local) [ 162.617398][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 163.314651][ T8527] loop5: detected capacity change from 0 to 128 [ 163.386739][ T8527] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 163.409498][ T8527] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.544982][ T7582] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.857101][ T8552] loop1: detected capacity change from 0 to 512 [ 163.896291][ T8552] EXT4-fs: Ignoring removed bh option [ 163.954986][ T8552] EXT4-fs (loop1): Test dummy encryption mode enabled [ 163.995260][ T8552] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.916: corrupted in-inode xattr: invalid ea_ino [ 164.034689][ T8552] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.916: couldn't read orphan inode 15 (err -117) [ 164.106801][ T8552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.238948][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.360020][ T8571] loop1: detected capacity change from 0 to 2048 [ 164.416878][ T8571] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 164.476324][ T8544] loop5: detected capacity change from 0 to 32768 [ 164.516366][ T8544] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 164.585335][ T8544] XFS (loop5): Ending clean mount [ 164.739462][ T7582] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 165.164540][ T8593] loop3: detected capacity change from 0 to 128 [ 165.376554][ T8600] loop3: detected capacity change from 0 to 64 [ 165.514477][ T8602] bond1: (slave wg2): Device is not bonding slave [ 165.528159][ T8585] loop1: detected capacity change from 0 to 40427 [ 165.544976][ T8585] F2FS-fs (loop1): Fix alignment : internally, start(4096) end(16896) block(12288) [ 165.554827][ T8602] bond1: option active_slave: invalid value (wg2) [ 165.568127][ T8585] F2FS-fs (loop1): invalid crc value [ 165.579167][ T8602] bond1 (unregistering): Released all slaves [ 165.590401][ T8585] F2FS-fs (loop1): Found nat_bits in checkpoint [ 165.684693][ T8585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 166.052447][ T8618] Zero length message leads to an empty skb [ 166.431627][ T8631] loop5: detected capacity change from 0 to 4096 [ 166.506560][ T8631] ntfs: volume version 3.1. [ 166.537477][ T8639] loop3: detected capacity change from 0 to 512 [ 166.626958][ T8631] ntfs: (device loop5): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set koi8-r. You might want to try to use the mount option nls=utf8. [ 166.660092][ T8645] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.939'. [ 166.689954][ T8639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.702052][ T8631] ntfs: (device loop5): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 166.711300][ T8645] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 166.719533][ T8639] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.880332][ T8639] EXT4-fs error (device loop3): ext4_empty_dir:3138: inode #12: comm syz.3.937: invalid size [ 166.977650][ T8657] IPVS: stopping backup sync thread 8658 ... [ 166.980743][ T8658] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 4, id = 0 [ 167.049117][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.107549][ T8664] loop5: detected capacity change from 0 to 256 [ 167.235245][ T8662] loop1: detected capacity change from 0 to 4096 [ 167.307498][ T8664] FAT-fs (loop5): Directory bread(block 64) failed [ 167.324213][ T8662] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 167.336446][ T8664] FAT-fs (loop5): Directory bread(block 65) failed [ 167.390925][ T8664] FAT-fs (loop5): Directory bread(block 66) failed [ 167.414208][ T8664] FAT-fs (loop5): Directory bread(block 67) failed [ 167.420921][ T8664] FAT-fs (loop5): Directory bread(block 68) failed [ 167.454205][ T8664] FAT-fs (loop5): Directory bread(block 69) failed [ 167.461050][ T8664] FAT-fs (loop5): Directory bread(block 70) failed [ 167.488853][ T8664] FAT-fs (loop5): Directory bread(block 71) failed [ 167.516332][ T8664] FAT-fs (loop5): Directory bread(block 72) failed [ 167.550373][ T8662] ntfs3: loop1: ino=19, mi_enum_attr [ 167.550983][ T8664] FAT-fs (loop5): Directory bread(block 73) failed [ 167.571103][ T8662] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 167.598148][ T8662] ntfs3: loop1: ino=18, mi_enum_attr [ 168.835772][ T8739] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.969'. [ 168.871588][ T5777] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 168.879019][ T5088] Bluetooth: hci0: command 0x1407 tx timeout [ 168.912229][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.5.973'. [ 168.913613][ T8744] netlink: 'syz.5.973': attribute type 13 has an invalid length. [ 168.913631][ T8744] netlink: 44 bytes leftover after parsing attributes in process `syz.5.973'. [ 169.126111][ T8754] netlink: 92 bytes leftover after parsing attributes in process `syz.1.975'. [ 169.147354][ T8757] tipc: Started in network mode [ 169.147393][ T8757] tipc: Node identity 00000000000000000000ffffac141422, cluster identity 4711 [ 169.147442][ T8757] tipc: Enabling of bearer rejected, failed to enable media [ 169.392424][ T5846] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 169.414687][ T8766] loop0: detected capacity change from 0 to 128 [ 169.603873][ T5846] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.635287][ T5846] usb 6-1: config 0 has no interfaces? [ 169.641234][ T5846] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 169.660226][ T5846] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.690858][ T5846] usb 6-1: config 0 descriptor?? [ 169.914238][ T8] usb 6-1: USB disconnect, device number 3 [ 170.057993][ T8795] loop3: detected capacity change from 0 to 256 [ 170.435376][ T8813] vivid-001: disconnect [ 170.448409][ T8812] vivid-001: reconnect [ 170.519877][ T8815] loop0: detected capacity change from 0 to 512 [ 170.541347][ T8815] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 170.562054][ T5846] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 170.601064][ T8815] EXT4-fs (loop0): 1 truncate cleaned up [ 170.608384][ T8815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.634267][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 170.711295][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1006'. [ 170.728763][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.754427][ T5846] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.774552][ T5846] usb 2-1: not running at top speed; connect to a high speed hub [ 170.784611][ T5846] usb 2-1: config 6 has an invalid interface number: 3 but max is 2 [ 170.809757][ T5846] usb 2-1: config 6 has an invalid interface number: 215 but max is 2 [ 170.826221][ T5846] usb 2-1: config 6 has an invalid interface number: 41 but max is 2 [ 170.847721][ T5846] usb 2-1: config 6 has no interface number 0 [ 170.861149][ T5846] usb 2-1: config 6 has no interface number 1 [ 170.871015][ T5846] usb 2-1: config 6 has no interface number 2 [ 170.888635][ T5846] usb 2-1: config 6 interface 3 has no altsetting 0 [ 170.898723][ T5846] usb 2-1: config 6 interface 215 has no altsetting 0 [ 170.907936][ T8834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1007'. [ 170.912864][ T5846] usb 2-1: config 6 interface 41 has no altsetting 0 [ 170.934395][ T8834] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1007'. [ 170.936569][ T5846] usb 2-1: New USB device found, idVendor=1410, idProduct=a007, bcdDevice=b3.7c [ 170.954469][ T8832] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1007'. [ 170.961798][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.982092][ T5846] usb 2-1: Product: syz [ 170.986309][ T5846] usb 2-1: Manufacturer: syz [ 170.990921][ T5846] usb 2-1: SerialNumber: syz [ 171.021466][ T8838] loop3: detected capacity change from 0 to 1024 [ 171.092981][ T8838] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 171.136770][ T8841] loop0: detected capacity change from 0 to 256 [ 171.276910][ T5846] usb 2-1: USB disconnect, device number 6 [ 171.555532][ T8856] loop5: detected capacity change from 0 to 256 [ 171.599262][ T8856] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 171.670300][ T8858] loop0: detected capacity change from 0 to 4096 [ 171.701285][ T8858] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 171.779082][ T8858] ntfs3: loop0: ino=19, mi_enum_attr [ 171.812340][ T8858] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 171.882684][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 172.049606][ T8865] loop1: detected capacity change from 0 to 4096 [ 172.077124][ T8865] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 172.102567][ T8] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 172.119291][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.146984][ T8] usb 4-1: Product: syz [ 172.160085][ T8865] ntfs: volume version 3.1. [ 172.168315][ T8] usb 4-1: Manufacturer: syz [ 172.177105][ T8] usb 4-1: SerialNumber: syz [ 172.190201][ T8869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 172.201569][ T8] usb 4-1: config 0 descriptor?? [ 172.229632][ T8] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 172.250426][ T8869] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 172.273762][ T8869] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 172.282694][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 172.301677][ T8] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 172.319673][ T8] usb 4-1: media controller created [ 172.390576][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.399331][ T27] audit: type=1800 audit(2000000030.729:39): pid=8856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1020" name="file1" dev="loop5" ino=1048669 res=0 errno=0 [ 172.493299][ T8860] dvb-usb: bulk message failed: -22 (7/0) [ 172.579736][ T8872] netem: change failed [ 172.613185][ T8] DVB: Unable to find symbol mt352_attach() [ 172.631178][ T8874] netlink: 'syz.1.1028': attribute type 12 has an invalid length. [ 172.651506][ T8874] netlink: 'syz.1.1028': attribute type 44 has an invalid length. [ 172.712059][ T8] DVB: Unable to find symbol nxt6000_attach() [ 172.724055][ T8] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 172.764920][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 172.822503][ T8] dvb-usb: schedule remote query interval to 1000 msecs. [ 172.839818][ T8] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 172.860259][ T8] dvb-usb: bulk message failed: -22 (7/0) [ 172.870295][ T8] dvb-usb: bulk message failed: -22 (7/0) [ 172.918118][ T8] usb 4-1: USB disconnect, device number 9 [ 173.125300][ T8] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 173.380035][ T8900] loop3: detected capacity change from 0 to 2048 [ 173.386150][ T8896] loop1: detected capacity change from 0 to 4096 [ 173.438523][ T8900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.472492][ T8907] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.517655][ T8908] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 173.653864][ T8896] NILFS (loop1): error -22 preparing GC: cannot mark copying blocks dirty [ 173.706082][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.085636][ T8924] loop5: detected capacity change from 0 to 8192 [ 174.425743][ T8942] overlayfs: workdir and upperdir must be separate subtrees [ 174.660113][ T8956] loop1: detected capacity change from 0 to 256 [ 175.295064][ T8988] EXT4-fs: Ignoring removed nobh option [ 175.323898][ T8988] EXT4-fs (loop1): Test dummy encryption mode enabled [ 175.340504][ T8988] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 175.372220][ T8988] EXT4-fs (loop1): 1 truncate cleaned up [ 175.379552][ T8988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.532929][ T8988] EXT4-fs warning (device loop1): verify_group_input:151: Cannot add at group 9 (only 1 groups) [ 175.624755][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.785207][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 175.844908][ T9013] bridge0: port 3(veth0_vlan) entered blocking state [ 175.852127][ T9013] bridge0: port 3(veth0_vlan) entered disabled state [ 175.863251][ T9013] veth0_vlan: entered allmulticast mode [ 175.870592][ T9013] veth0_vlan: left allmulticast mode [ 175.906035][ T9015] set_capacity_and_notify: 1 callbacks suppressed [ 175.906049][ T9015] loop0: detected capacity change from 0 to 256 [ 175.939247][ T9015] FAT-fs (loop0): Directory bread(block 1285) failed [ 175.956788][ T9015] FAT-fs (loop0): Directory bread(block 1286) failed [ 175.972762][ T9015] FAT-fs (loop0): Directory bread(block 1287) failed [ 175.991588][ T9015] FAT-fs (loop0): Directory bread(block 1288) failed [ 176.042853][ T9015] FAT-fs (loop0): Directory bread(block 1285) failed [ 176.050069][ T9015] FAT-fs (loop0): Directory bread(block 1286) failed [ 176.067375][ T9015] FAT-fs (loop0): Directory bread(block 1287) failed [ 176.088437][ T9015] FAT-fs (loop0): Directory bread(block 1288) failed [ 176.097202][ T9015] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 176.106131][ T9022] FAT-fs (loop0): Directory bread(block 1285) failed [ 176.229012][ T9025] loop0: detected capacity change from 0 to 128 [ 176.239917][ T9025] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 176.256674][ T9003] loop3: detected capacity change from 0 to 32768 [ 176.288075][ T9025] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 176.315094][ T9003] jfs_lookup: iget failed on inum 4 [ 176.321162][ T9003] jfs_lookup: iget failed on inum 4 [ 176.351977][ T5823] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 176.511610][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1097'. [ 176.520926][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1097'. [ 176.545070][ T5823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 176.555897][ T5823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.569660][ T5823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 176.585398][ T5823] usb 2-1: config 1 has no interface number 0 [ 176.600410][ T5823] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 176.619888][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.631937][ T5823] usb 2-1: Product: syz [ 176.640113][ T5823] usb 2-1: Manufacturer: syz [ 176.650223][ T5823] usb 2-1: SerialNumber: syz [ 176.767519][ T9036] loop0: detected capacity change from 0 to 4096 [ 176.803737][ T9038] loop5: detected capacity change from 0 to 2048 [ 176.805272][ T9036] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 176.838128][ T9038] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.918495][ T9036] ntfs3: loop0: ino=19, mi_enum_attr [ 176.939673][ T9036] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 177.208635][ T9044] loop5: detected capacity change from 0 to 256 [ 177.295643][ T5823] us122l: couldn't allocate write buffer [ 177.315828][ T5823] snd-usb-us122l: probe of 2-1:1.1 failed with error -22 [ 177.340531][ T5823] usb 2-1: USB disconnect, device number 7 [ 177.380928][ T9049] loop5: detected capacity change from 0 to 1024 [ 177.406561][ T9049] EXT4-fs: Ignoring removed orlov option [ 177.462992][ T9049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.494747][ T9049] EXT4-fs error (device loop5): ext4_lookup:1860: inode #16: comm syz.5.1106: unexpected EA_INODE flag [ 177.531571][ T9055] loop0: detected capacity change from 0 to 2048 [ 177.558498][ T9055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.563532][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.939240][ T9072] loop5: detected capacity change from 0 to 64 [ 178.084221][ T9078] loop3: detected capacity change from 0 to 256 [ 178.105219][ T9078] exfat: Deprecated parameter 'namecase' [ 178.122433][ T9078] exfat: Deprecated parameter 'utf8' [ 178.212980][ T9078] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe5fd08b, utbl_chksum : 0xe619d30d) [ 178.284165][ T9080] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 178.481675][ T9092] ip_tables: iptables: counters copy to user failed while replacing table [ 178.548741][ T9094] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 178.572287][ T9094] hpfs: filesystem error: improperly stopped [ 178.594377][ T9094] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 178.615057][ T9094] hpfs: You really don't want any checks? You are crazy... [ 178.643745][ T9094] hpfs: Code page index out of array [ 178.649085][ T9094] hpfs: code page support is disabled [ 178.679866][ T9094] hpfs: hpfs_map_4sectors(): unaligned read [ 178.696983][ T9094] hpfs: hpfs_map_4sectors(): unaligned read [ 178.717253][ T9094] hpfs: filesystem error: unable to find root dir [ 178.770319][ T9102] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 178.835182][ T9099] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.848025][ T9102] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.895683][ T9102] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.902348][ T9099] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.002556][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.138188][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.173618][ T9118] tmpfs: Cannot change global quota limit on remount [ 179.303314][ T9124] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 179.367026][ T9128] EXT4-fs: Ignoring removed nobh option [ 179.455717][ T9128] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.525422][ T5784] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 179.549858][ T9128] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 179.661546][ T7582] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 179.762364][ T5784] usb 4-1: Using ep0 maxpacket: 16 [ 179.782851][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 179.799376][ T5784] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26223, setting to 1024 [ 179.811200][ T5784] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.825017][ T5784] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 179.835307][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.866472][ T5784] usb 4-1: config 0 descriptor?? [ 179.872334][ T9122] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.903037][ T5784] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 179.938386][ T9134] hugetlbfs: Bad value 'z' for mount option 'nr_inodes' [ 179.938386][ T9134] [ 180.250684][ T5784] usb 4-1: USB disconnect, device number 10 [ 180.326076][ T9140] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1147'. [ 180.514158][ T9144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.639375][ T9152] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.650316][ T9150] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #13: comm syz.1.1151: iget: bogus i_mode (1) [ 180.681404][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.681788][ T9150] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1151: couldn't read orphan inode 13 (err -117) [ 180.705863][ T9150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.868270][ T9150] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 180.902148][ T9150] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 180.911596][ T9150] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1151: Failed to acquire dquot type 1 [ 181.015841][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.108088][ T9164] scsi_nl_rcv_msg: discarding partial skb [ 181.220321][ T9163] set_capacity_and_notify: 9 callbacks suppressed [ 181.220336][ T9163] loop3: detected capacity change from 0 to 8192 [ 181.250484][ T9163] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 181.264393][ T9163] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 181.275116][ T9163] REISERFS (device loop3): using ordered data mode [ 181.285757][ T9163] reiserfs: using flush barriers [ 181.292127][ T9169] loop0: detected capacity change from 0 to 1024 [ 181.324174][ T9163] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.344037][ T9163] REISERFS (device loop3): checking transaction log (loop3) [ 181.377179][ T9169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.424281][ T9163] REISERFS (device loop3): Using r5 hash to sort names [ 181.460070][ T9163] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 181.482667][ T9169] CIFS: iocharset name too long [ 181.495325][ T9161] loop5: detected capacity change from 0 to 32768 [ 181.536284][ T9161] JBD2: Ignoring recovery information on journal [ 181.610415][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.630528][ T9161] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 181.873076][ T27] audit: type=1326 audit(2000000040.229:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9181 comm="syz.3.1164" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d4939e159 code=0x0 [ 181.902979][ T9184] loop1: detected capacity change from 0 to 512 [ 181.916493][ T9184] EXT4-fs (loop1): Test dummy encryption mode enabled [ 181.941777][ T9184] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.1165: corrupted in-inode xattr: invalid ea_ino [ 181.961328][ T7582] ocfs2: Unmounting device (7,5) on (node local) [ 181.986416][ T9184] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1165: couldn't read orphan inode 15 (err -117) [ 182.044958][ T9184] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.152831][ T9184] EXT4-fs error (device loop1): ext4_empty_dir:3138: inode #2: comm syz.1.1165: invalid size [ 182.211189][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.578967][ T9209] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1176'. [ 182.767999][ T9205] loop1: detected capacity change from 0 to 32768 [ 183.447118][ T9243] loop5: detected capacity change from 0 to 256 [ 183.472735][ T9243] exfat: Deprecated parameter 'utf8' [ 183.478077][ T9243] exfat: Deprecated parameter 'utf8' [ 183.497574][ T9243] exfat: Deprecated parameter 'namecase' [ 183.503507][ T9243] exfat: Deprecated parameter 'namecase' [ 183.527691][ T9243] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf6e788d, utbl_chksum : 0xe619d30d) [ 183.595648][ T9247] loop1: detected capacity change from 0 to 64 [ 183.809206][ T9256] loop3: detected capacity change from 0 to 512 [ 183.830356][ T9256] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.883489][ T9256] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 183.891549][ T9256] System zones: 1-12 [ 183.907204][ T9256] EXT4-fs (loop3): 1 truncate cleaned up [ 183.921130][ T9259] loop5: detected capacity change from 0 to 4096 [ 183.923972][ T9256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.944525][ T9259] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 184.003362][ T9259] ntfs3: loop5: ino=19, mi_enum_attr [ 184.008724][ T9259] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 184.019371][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.041200][ T9259] ntfs3: loop5: ino=1a, mi_enum_attr [ 184.052028][ T9259] ntfs3: loop5: ino=1a, mi_enum_attr [ 184.079241][ T9259] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 184.203701][ T9264] loop3: detected capacity change from 0 to 4096 [ 184.232163][ T9264] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 184.317919][ T9266] dummy0: entered promiscuous mode [ 184.333318][ T9266] macvtap1: entered allmulticast mode [ 184.348992][ T9266] dummy0: entered allmulticast mode [ 184.367258][ T9266] dummy0: left allmulticast mode [ 184.375691][ T9266] dummy0: left promiscuous mode [ 184.751696][ T9276] ntfs3: loop3: ino=19, mi_enum_attr [ 184.761478][ T9276] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 185.022043][ T5088] Bluetooth: hci0: command 0x1407 tx timeout [ 185.341195][ T9312] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1220'. [ 185.359342][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1221'. [ 185.377191][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1221'. [ 185.401817][ T9313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1221'. [ 185.822078][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 186.018732][ T8] usb 6-1: unable to get BOS descriptor or descriptor too short [ 186.038136][ T8] usb 6-1: New USB device found, idVendor=1111, idProduct=2222, bcdDevice= 1.00 [ 186.061993][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.113720][ T9347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.136347][ T9347] ext4 filesystem being mounted at /305/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.208311][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.340144][ T8] scsi host1: uas [ 186.589968][ C0] usb 6-1: stat urb: status -71 [ 186.590142][ T23] usb 6-1: USB disconnect, device number 4 [ 186.595800][ C0] usb 6-1: cmd cmplt err -71 [ 186.619964][ T23] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 186.628191][ T23] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 186.780552][ T9345] set_capacity_and_notify: 2 callbacks suppressed [ 186.780568][ T9345] loop1: detected capacity change from 0 to 32768 [ 186.822586][ T9345] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 186.867721][ T9345] XFS (loop1): Ending clean mount [ 186.984617][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 187.470132][ T9398] loop1: detected capacity change from 0 to 8192 [ 187.488902][ T9398] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.509045][ T9398] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 187.519509][ T9398] REISERFS (device loop1): using ordered data mode [ 187.527627][ T9398] reiserfs: using flush barriers [ 187.537274][ T9398] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.554967][ T9398] REISERFS (device loop1): checking transaction log (loop1) [ 187.585011][ T9398] REISERFS (device loop1): Using r5 hash to sort names [ 187.609601][ T9398] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 187.736700][ T9409] loop3: detected capacity change from 0 to 512 [ 187.831152][ T9407] loop5: detected capacity change from 0 to 8192 [ 187.878249][ T9407] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 187.897042][ T9407] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 187.906979][ T9407] REISERFS (device loop5): using ordered data mode [ 187.914644][ T9407] reiserfs: using flush barriers [ 187.932122][ T9407] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.949587][ T9407] REISERFS (device loop5): checking transaction log (loop5) [ 187.979435][ T9412] loop1: detected capacity change from 0 to 4096 [ 187.983205][ T9407] REISERFS (device loop5): Using r5 hash to sort names [ 188.012224][ T9412] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 188.032393][ T9407] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 188.129216][ T9412] ntfs3: loop1: ino=19, mi_enum_attr [ 188.155156][ T9412] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 188.184687][ T9412] ntfs3: loop1: ino=19, mi_enum_attr [ 188.190040][ T9412] ntfs3: loop1: Failed to initialize $Extend/$ObjId. [ 188.480503][ T9425] loop1: detected capacity change from 0 to 64 [ 188.626524][ T9431] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1261'. [ 188.635924][ T9431] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1261'. [ 188.858340][ T9439] dummy0: entered promiscuous mode [ 188.866543][ T9439] macvtap1: entered allmulticast mode [ 188.876410][ T9439] dummy0: entered allmulticast mode [ 188.885377][ T9439] dummy0: left allmulticast mode [ 188.891041][ T9439] dummy0: left promiscuous mode [ 188.965271][ T27] audit: type=1326 audit(2000000047.319:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.010533][ T27] audit: type=1326 audit(2000000047.319:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.082123][ T27] audit: type=1326 audit(2000000047.319:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.123953][ T27] audit: type=1326 audit(2000000047.319:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.147992][ T27] audit: type=1326 audit(2000000047.319:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.173896][ T27] audit: type=1326 audit(2000000047.319:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.200529][ T27] audit: type=1326 audit(2000000047.319:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.264163][ T27] audit: type=1326 audit(2000000047.319:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.317805][ T27] audit: type=1326 audit(2000000047.319:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.348746][ T27] audit: type=1326 audit(2000000047.319:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9444 comm="syz.1.1266" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d50f9e159 code=0x7ffc0000 [ 189.659600][ T9466] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1277'. [ 189.898541][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 189.918601][ T9482] loop5: detected capacity change from 0 to 256 [ 190.242380][ T9498] bridge_slave_0: invalid flags given to default FDB implementation [ 190.252309][ T9497] Bluetooth: hci0: unsupported parameter 5134 [ 190.276255][ T9497] Bluetooth: hci0: unsupported parameter 8192 [ 190.302006][ T9497] Bluetooth: hci0: unsupported parameter 5134 [ 190.322319][ T9497] Bluetooth: hci0: unsupported parameter 8192 [ 190.351230][ T9502] ALSA: mixer_oss: invalid OSS volume '' [ 190.514217][ T9510] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 190.588061][ T9512] loop3: detected capacity change from 0 to 256 [ 190.838643][ T9520] bridge0: port 3(batadv1) entered blocking state [ 190.849591][ T9520] bridge0: port 3(batadv1) entered disabled state [ 190.857315][ T9520] batadv1: entered allmulticast mode [ 190.857890][ T9522] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1304'. [ 190.864552][ T9520] batadv1: entered promiscuous mode [ 190.890881][ T9520] bridge0: adding interface batadv1 with same address as a received packet (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 190.963820][ T9500] loop1: detected capacity change from 0 to 40427 [ 190.982292][ T9500] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 191.000480][ T9500] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 191.025665][ T9500] F2FS-fs (loop1): invalid crc value [ 191.031119][ T9500] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 191.077025][ T9500] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.220388][ T9500] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 191.233968][ T9500] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 191.300560][ T9535] program syz.5.1309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.345575][ T5773] syz-executor: attempt to access beyond end of device [ 191.345575][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.370258][ T1100] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 191.380057][ T1100] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 191.384619][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 191.413360][ T9539] binder: 9538:9539 ioctl c018620c 200000000140 returned -22 [ 191.522424][ T1100] bond0: (slave bond_slave_0): interface is now down [ 191.529626][ T1100] bond0: (slave bond_slave_1): interface is now down [ 191.606897][ T1100] bond0: now running without any active interface! [ 191.925378][ T9561] loop0: detected capacity change from 0 to 128 [ 191.963890][ T9561] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.077441][ T9565] loop5: detected capacity change from 0 to 64 [ 192.200488][ T9565] Trying to free block not in datazone [ 192.664923][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'. [ 192.702005][ T5777] Bluetooth: hci3: command 0x0405 tx timeout [ 192.718961][ T9595] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1339'. [ 193.137578][ T9615] loop0: detected capacity change from 0 to 256 [ 193.146623][ T9613] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1348'. [ 193.258491][ T9593] loop3: detected capacity change from 0 to 40427 [ 193.281359][ T9617] loop1: detected capacity change from 0 to 64 [ 193.306566][ T9593] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 193.329577][ T9593] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 193.340512][ T9593] F2FS-fs (loop3): invalid crc value [ 193.433024][ T9622] loop0: detected capacity change from 0 to 1024 [ 193.455751][ T9622] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 193.491132][ T9622] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 193.560348][ T9593] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 193.589082][ T9593] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.597497][ T9622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.616824][ T9622] EXT4-fs (loop0): Online resizing not supported with sparse_super2 [ 193.664137][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.757804][ T5775] syz-executor: attempt to access beyond end of device [ 193.757804][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 193.790660][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 194.014533][ T8] kernel write not supported for file [eventfd] (pid: 8 comm: kworker/0:0) [ 194.308896][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315725][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.326220][ T9642] bond1 (unregistering): Released all slaves [ 194.379081][ T9634] loop1: detected capacity change from 0 to 32768 [ 194.404225][ T9634] (syz.1.1357,9634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.420665][ T9634] (syz.1.1357,9634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 194.459225][ T9634] JBD2: Ignoring recovery information on journal [ 194.578496][ T9634] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 194.816267][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 194.825330][ T9662] loop5: detected capacity change from 0 to 164 [ 195.075858][ T8] IPVS: starting estimator thread 0... [ 195.179101][ T9671] IPVS: using max 18 ests per chain, 43200 per kthread [ 195.329371][ T9684] xt_hashlimit: overflow, try lower: 0/0 [ 195.368833][ T9686] netlink: 'syz.0.1379': attribute type 2 has an invalid length. [ 195.433263][ T9688] loop1: detected capacity change from 0 to 256 [ 195.669639][ T9702] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1387'. [ 195.702106][ T9702] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1387'. [ 195.711101][ T9702] netlink: 'syz.3.1387': attribute type 5 has an invalid length. [ 195.738174][ T9702] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1387'. [ 196.110884][ T9726] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 196.185189][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1401'. [ 196.206634][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1401'. [ 196.812711][ T9738] loop1: detected capacity change from 0 to 32768 [ 197.243197][ T9769] loop0: detected capacity change from 0 to 512 [ 197.271700][ T9769] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.338458][ T9769] EXT4-fs (loop0): 1 truncate cleaned up [ 197.366185][ T9769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.472641][ T5784] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 197.558761][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.670473][ T9761] loop3: detected capacity change from 0 to 40427 [ 197.685127][ T5784] usb 6-1: config index 0 descriptor too short (expected 1572, got 36) [ 197.691297][ T9761] F2FS-fs (loop3): invalid crc value [ 197.701584][ T5784] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.704319][ T9761] F2FS-fs (loop3): Found nat_bits in checkpoint [ 197.756358][ T5784] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 197.786015][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.808055][ T5784] usb 6-1: Product: syz [ 197.826610][ T5784] usb 6-1: Manufacturer: syz [ 197.831251][ T5784] usb 6-1: SerialNumber: syz [ 197.878147][ T5784] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input14 [ 197.908858][ T9761] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 197.958486][ T9765] loop1: detected capacity change from 0 to 32768 [ 198.026626][ T9765] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 198.066491][ T27] kauditd_printk_skb: 5 callbacks suppressed [ 198.066505][ T27] audit: type=1800 audit(2000000056.419:56): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1417" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 198.071050][ T5128] bcm5974 6-1:1.0: could not read from device [ 198.124241][ T9765] XFS (loop1): Ending clean mount [ 198.156322][ T5784] bcm5974 6-1:1.0: could not read from device [ 198.175351][ T5773] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 198.189564][ T5775] syz-executor: attempt to access beyond end of device [ 198.189564][ T5775] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.207725][ T5775] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 198.246129][ T5128] bcm5974 6-1:1.0: could not read from device [ 198.283047][ T5784] input: failed to attach handler mousedev to device input14, error: -5 [ 198.303701][ T5128] bcm5974 6-1:1.0: could not read from device [ 198.328386][ T5784] usb 6-1: USB disconnect, device number 5 [ 198.892857][ T9803] loop3: detected capacity change from 0 to 4096 [ 198.944155][ T9803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.988499][ T9806] loop5: detected capacity change from 0 to 24 [ 199.046614][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.407319][ T9820] loop1: detected capacity change from 0 to 128 [ 199.448283][ T27] audit: type=1326 audit(2000000057.799:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.486607][ T27] audit: type=1326 audit(2000000057.799:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.522698][ T27] audit: type=1326 audit(2000000057.829:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.552398][ T27] audit: type=1326 audit(2000000057.829:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.606749][ T27] audit: type=1326 audit(2000000057.829:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.632518][ T5773] sysv_free_block: flc_count > flc_size [ 199.638805][ T5773] sysv_free_block: flc_count > flc_size [ 199.644588][ T27] audit: type=1326 audit(2000000057.829:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.644630][ T27] audit: type=1326 audit(2000000057.829:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.644668][ T27] audit: type=1326 audit(2000000057.829:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.644716][ T27] audit: type=1326 audit(2000000057.829:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.3.1438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d4939e159 code=0x7ffc0000 [ 199.650345][ T9827] loop3: detected capacity change from 0 to 1024 [ 199.717075][ T5773] sysv_free_block: flc_count > flc_size [ 199.717124][ T5773] sysv_free_block: flc_count > flc_size [ 199.717133][ T5773] sysv_free_block: flc_count > flc_size [ 199.717141][ T5773] sysv_free_block: flc_count > flc_size [ 199.717149][ T5773] sysv_free_block: flc_count > flc_size [ 199.717157][ T5773] sysv_free_block: flc_count > flc_size [ 199.717164][ T5773] sysv_free_block: flc_count > flc_size [ 199.717178][ T5773] sysv_free_block: flc_count > flc_size [ 199.719390][ T5773] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 200.186986][ T9838] loop5: detected capacity change from 0 to 4096 [ 200.222821][ T9838] ntfs: volume version 3.1. [ 200.408741][ T9832] loop3: detected capacity change from 0 to 32768 [ 200.629751][ T9835] loop1: detected capacity change from 0 to 32768 [ 200.720014][ T9835] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 200.998244][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 201.192038][ T5774] sysv_free_block: flc_count > flc_size [ 201.197649][ T5774] sysv_free_block: flc_count > flc_size [ 201.221966][ T5774] sysv_free_block: flc_count > flc_size [ 201.227652][ T5774] sysv_free_block: flc_count > flc_size [ 201.251979][ T5774] sysv_free_block: flc_count > flc_size [ 201.257558][ T5774] sysv_free_block: flc_count > flc_size [ 201.292782][ T5774] sysv_free_block: flc_count > flc_size [ 201.298365][ T5774] sysv_free_block: flc_count > flc_size [ 201.330437][ T5774] sysv_free_block: flc_count > flc_size [ 201.352065][ T5774] sysv_free_block: flc_count > flc_size [ 201.358341][ T5774] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 201.503730][ T51] Bluetooth: hci0: command 0x1407 tx timeout [ 201.515665][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 201.516254][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 201.839695][ T7582] sysv_free_block: flc_count > flc_size [ 201.853030][ T7582] sysv_free_block: flc_count > flc_size [ 201.858622][ T7582] sysv_free_block: flc_count > flc_size [ 201.892402][ T7582] sysv_free_block: flc_count > flc_size [ 201.902780][ T7582] sysv_free_block: flc_count > flc_size [ 201.932311][ T7582] sysv_free_block: flc_count > flc_size [ 201.937911][ T7582] sysv_free_block: flc_count > flc_size [ 201.947509][ T7582] sysv_free_block: flc_count > flc_size [ 201.961134][ T7582] sysv_free_block: flc_count > flc_size [ 201.970968][ T7582] sysv_free_block: flc_count > flc_size [ 201.980629][ T7582] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 202.400277][ T9911] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1480'. [ 202.429531][ T9913] set_capacity_and_notify: 2 callbacks suppressed [ 202.429546][ T9913] loop1: detected capacity change from 0 to 1024 [ 202.443061][ T9911] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 202.455485][ T9915] loop5: detected capacity change from 0 to 64 [ 202.480681][ T9913] EXT4-fs: inline encryption not supported [ 202.534056][ T9913] EXT4-fs: Ignoring removed bh option [ 202.569403][ T9913] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 202.607062][ T9913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.787656][ T9910] loop3: detected capacity change from 0 to 32768 [ 202.834925][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.938978][ T9924] loop5: detected capacity change from 0 to 8 [ 202.990447][ T9924] SQUASHFS error: Unable to read inode 0xa7 [ 203.523542][ T5846] IPVS: starting estimator thread 0... [ 203.622121][ T9941] IPVS: using max 19 ests per chain, 45600 per kthread [ 203.765783][ T9927] loop0: detected capacity change from 0 to 40427 [ 203.818503][ T9927] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 203.831208][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1498'. [ 203.852247][ T9927] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 203.906705][ T9927] F2FS-fs (loop0): invalid crc value [ 203.914295][ T9927] F2FS-fs (loop0): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 203.940436][ T9932] loop3: detected capacity change from 0 to 32768 [ 203.958813][ T9927] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.001771][ T9932] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 204.091468][ T9966] dvmrp12: entered allmulticast mode [ 204.100075][ T9932] XFS (loop3): Starting recovery (logdev: internal) [ 204.158036][ T9927] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 204.189494][ T9927] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.193505][ T9932] XFS (loop3): Ending recovery (logdev: internal) [ 204.262563][ T9969] vlan2: entered allmulticast mode [ 204.267740][ T9969] veth0_vlan: entered allmulticast mode [ 204.357834][ T9927] F2FS-fs (loop0): Stopped filesystem due to reason: 0 [ 204.423166][ T9973] loop5: detected capacity change from 0 to 8 [ 204.630471][ T5775] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 204.872414][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 204.872430][ T27] audit: type=1326 audit(2000000063.219:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.0.1506" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2cdd9e159 code=0x0 [ 205.094191][ T9971] loop1: detected capacity change from 0 to 40427 [ 205.138064][ T9971] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 205.147822][ T9971] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 205.177166][ T9971] F2FS-fs (loop1): Image doesn't support compression [ 205.201987][ T9971] F2FS-fs (loop1): Image doesn't support compression [ 205.218928][ T9971] F2FS-fs (loop1): invalid crc value [ 205.411763][ T9971] F2FS-fs (loop1): Start checkpoint disabled! [ 205.445969][ T9971] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 205.458134][ T9979] loop5: detected capacity change from 0 to 32768 [ 205.467407][ T9971] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 205.483360][ T9979] (syz.5.1508,9979,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.534006][ T9979] (syz.5.1508,9979,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 205.597743][ T9979] JBD2: Ignoring recovery information on journal [ 205.669783][ T11] kworker/u4:0: attempt to access beyond end of device [ 205.669783][ T11] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 205.693907][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 205.725021][ T9979] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 206.014145][ T7582] ocfs2: Unmounting device (7,5) on (node local) [ 206.198643][ T9989] loop3: detected capacity change from 0 to 1024 [ 206.323091][ T1092] hfsplus: b-tree write err: -5, ino 25 [ 206.329465][ T1092] hfsplus: b-tree write err: -5, ino 4 [ 206.353671][ T1092] hfsplus: b-tree write err: -5, ino 2 [ 206.580322][ T9998] syz.0.1515: attempt to access beyond end of device [ 206.580322][ T9998] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 206.596405][ T27] audit: type=1800 audit(2000000064.929:71): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1515" name="file2" dev="loop0" ino=1048689 res=0 errno=0 [ 206.654857][ T9998] FAT-fs (loop0): error, invalid access to FAT (entry 0x0000e1b1) [ 206.688111][ T9998] FAT-fs (loop0): Filesystem has been set read-only [ 206.829081][T10005] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 206.902117][T10005] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 206.924777][T10005] ntfs3: loop3: mft corrupted [ 206.939813][T10005] ntfs3: loop3: Failed to load $Extend (-22). [ 206.956744][T10005] ntfs3: loop3: Failed to initialize $Extend. [ 207.219187][ T9996] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1512 (9996) [ 207.249985][T10013] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1521'. [ 207.271100][ T9996] BTRFS info (device loop5): first mount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 207.310341][ T9996] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 207.340309][ T9996] BTRFS info (device loop5): using free space tree [ 207.504844][ T9996] BTRFS info (device loop5): enabling ssd optimizations [ 207.542261][ T9996] BTRFS info (device loop5): auto enabling async discard [ 207.751790][ T7582] BTRFS info (device loop5): last unmount of filesystem 97240a68-9a28-4597-b04c-66b27e1182f2 [ 207.802536][T10009] set_capacity_and_notify: 3 callbacks suppressed [ 207.802552][T10009] loop0: detected capacity change from 0 to 40427 [ 207.841113][T10043] loop3: detected capacity change from 0 to 512 [ 207.866753][T10009] F2FS-fs (loop0): invalid crc value [ 207.898594][T10043] EXT4-fs (loop3): orphan cleanup on readonly fs [ 207.915902][T10009] F2FS-fs (loop0): Found nat_bits in checkpoint [ 208.009467][T10043] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 208.024227][T10043] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 208.034435][T10043] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.1528: Failed to acquire dquot type 1 [ 208.062989][T10043] EXT4-fs (loop3): 1 truncate cleaned up [ 208.100305][ T6490] BTRFS: device fsid 97240a68-9a28-4597-b04c-66b27e1182f2 devid 1 transid 9 /dev/loop5 scanned by udevd (6490) [ 208.109285][T10043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.145657][T10009] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 208.168412][T10043] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 208.198015][T10043] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 208.243928][ T27] audit: type=1800 audit(2000000066.589:72): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1519" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 208.269436][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1529'. [ 208.352902][ T5774] syz-executor: attempt to access beyond end of device [ 208.352902][ T5774] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 208.387250][ T5774] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 208.412886][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.607352][T10061] ip_tables: iptables: counters copy to user failed while replacing table [ 208.608802][T10059] loop5: detected capacity change from 0 to 512 [ 208.685010][T10059] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1535: inode has both inline data and extents flags [ 208.728955][T10059] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1535: couldn't read orphan inode 15 (err -117) [ 208.754052][T10059] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.820373][ T27] audit: type=1800 audit(2000000067.169:73): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1535" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 209.246221][T10057] loop1: detected capacity change from 0 to 32768 [ 209.310285][T10057] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 209.327115][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.347290][T10070] loop3: detected capacity change from 0 to 4096 [ 209.454119][T10070] NILFS (loop3): invalid segment: Checksum error in segment payload [ 209.462908][T10070] NILFS (loop3): trying rollback from an earlier position [ 209.496709][T10070] NILFS (loop3): recovery complete [ 209.553541][T10084] loop5: detected capacity change from 0 to 256 [ 209.560144][T10085] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 209.596453][T10057] XFS (loop1): Ending clean mount [ 209.655726][T10057] XFS (loop1): Quotacheck needed: Please wait. [ 209.750620][T10057] XFS (loop1): Quotacheck: Done. [ 209.958716][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 210.343632][T10094] loop3: detected capacity change from 0 to 4096 [ 210.388505][T10094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.434523][T10089] loop5: detected capacity change from 0 to 32768 [ 210.505546][T10094] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 210.582449][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.691328][T10099] loop1: detected capacity change from 0 to 4096 [ 210.751009][T10099] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 210.837318][T10103] loop3: detected capacity change from 0 to 1024 [ 210.851514][T10099] ntfs3: loop1: failed to convert "0000" to iso8859-2 [ 210.874477][T10099] ntfs3: loop1: failed to convert name for inode 1e. [ 210.913976][T10099] ntfs3: loop1: ino=1f, mi_enum_attr [ 210.931734][T10099] ntfs3: loop1: ino=1f, mi_enum_attr [ 211.277984][T10110] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 212.027719][T10137] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.095123][T10137] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 212.148689][T10137] EXT4-fs (loop5): Remounting filesystem read-only [ 212.307620][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.520407][T10155] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1571'. [ 212.542691][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1571'. [ 212.551593][T10155] netlink: 'syz.5.1571': attribute type 14 has an invalid length. [ 212.749655][ T27] audit: type=1800 audit(2000000071.099:74): pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1575" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 212.823037][T10164] set_capacity_and_notify: 2 callbacks suppressed [ 212.823051][T10164] loop5: detected capacity change from 0 to 4096 [ 212.900717][T10169] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.010095][T10173] loop1: detected capacity change from 0 to 512 [ 213.064453][T10173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 213.190473][T10173] EXT4-fs warning (device loop1): dx_probe:869: inode #2: comm syz.1.1580: Unimplemented hash flags: 0x0001 [ 213.251293][T10173] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1580: Corrupt directory, running e2fsck is recommended [ 213.292480][T10173] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 3: comm syz.1.1580: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 213.384497][T10188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1587'. [ 213.480249][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1589'. [ 213.540686][T10196] loop5: detected capacity change from 0 to 64 [ 213.569595][T10196] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 213.593768][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.691826][T10198] trusted_key: encrypted_key: key trusted:syz not found [ 213.819980][T10206] loop3: detected capacity change from 0 to 512 [ 213.852062][T10205] loop0: detected capacity change from 0 to 2048 [ 213.882306][T10206] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.1594: inode has both inline data and extents flags [ 213.912366][T10206] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.1594: couldn't read orphan inode 15 (err -117) [ 213.924550][T10209] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 213.936447][T10206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.029028][ T27] audit: type=1800 audit(2000000072.379:75): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1594" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 214.133633][T10209] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 214.175465][T10209] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 214.201180][T10209] Remounting filesystem read-only [ 214.206692][ T42] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 214.214235][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.226245][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.237354][ T42] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 214.244879][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.267608][ T42] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 214.285670][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.320935][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.330667][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.348363][ T42] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 214.361074][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.372308][ T42] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 214.379016][ T42] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 214.386794][ T42] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 214.429766][ T42] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 214.444468][ T42] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 214.456044][ T42] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 214.474166][ T42] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 214.481481][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.507813][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.517332][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.527211][ T42] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 214.534255][ T42] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 214.548774][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.567507][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.584915][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.594407][ T42] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 214.601106][ T42] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 214.612159][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.626242][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.635717][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.645247][ T42] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 214.652405][ T42] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 214.659753][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.671175][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.686777][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.696139][ T42] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 214.703215][ T42] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 214.710587][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.719817][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.729048][ T42] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.741414][ T5774] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 214.760847][ T5774] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 214.768272][ T5774] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 214.780432][ T5774] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 214.791287][ T5774] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 214.799013][ T5774] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 214.812427][ T5823] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 214.829873][T10237] loop5: detected capacity change from 0 to 512 [ 214.870949][T10237] EXT4-fs: Ignoring removed oldalloc option [ 214.882089][ T5784] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 214.904609][T10237] EXT4-fs: Ignoring removed i_version option [ 214.929623][T10237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 214.949298][T10237] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.1609: invalid block [ 214.972554][T10237] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1609: invalid indirect mapped block 4294967295 (level 1) [ 214.998228][T10237] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1609: invalid indirect mapped block 4294967295 (level 1) [ 215.001156][T10244] loop0: detected capacity change from 0 to 512 [ 215.026691][T10237] EXT4-fs (loop5): 2 truncates cleaned up [ 215.035964][ T5823] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 215.037302][T10244] EXT4-fs error (device loop0): ext4_orphan_get:1408: inode #15: comm syz.0.1611: inode has both inline data and extents flags [ 215.058687][T10237] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.078700][ T5823] usb 2-1: config 0 has no interface number 0 [ 215.085675][ T5784] usb 4-1: not running at top speed; connect to a high speed hub [ 215.092909][T10244] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.1611: couldn't read orphan inode 15 (err -117) [ 215.094872][ T5784] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1023 [ 215.122513][ T5784] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 215.131700][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.140647][ T5784] usb 4-1: Product: syz [ 215.141259][ T5823] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 215.145893][ T5784] usb 4-1: Manufacturer: syz [ 215.159389][ T5784] usb 4-1: SerialNumber: syz [ 215.165560][T10244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.190211][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.203620][ T5823] usb 2-1: Product: syz [ 215.207807][ T5823] usb 2-1: Manufacturer: syz [ 215.214314][T10237] EXT4-fs error (device loop5): __ext4_iget:5091: inode #13: block 32768: comm syz.5.1609: invalid block [ 215.222060][ T5823] usb 2-1: SerialNumber: syz [ 215.255674][ T5823] usb 2-1: config 0 descriptor?? [ 215.265073][ T27] audit: type=1800 audit(2000000073.609:76): pid=10244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1611" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 215.305039][ T5823] usb 2-1: selecting invalid altsetting 1 [ 215.314949][ T5823] dvb_ttusb_budget: ttusb_init_controller: error [ 215.321319][ T5823] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 215.336594][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.453740][ T5784] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 215.503526][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.511661][ T5784] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 215.518424][ T5823] DVB: Unable to find symbol stv0299_attach() [ 215.596964][ T5784] usb 4-1: USB disconnect, device number 11 [ 215.610626][ T6490] udevd[6490]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.676621][ T5823] DVB: Unable to find symbol tda8083_attach() [ 215.693707][ T5823] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 215.759869][ T5823] usb 2-1: USB disconnect, device number 8 [ 215.851106][T10256] loop0: detected capacity change from 0 to 1024 [ 215.878111][T10256] EXT4-fs: Ignoring removed orlov option [ 215.927773][T10256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.944548][T10262] loop5: detected capacity change from 0 to 256 [ 216.027956][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.150270][T10265] [U] [ 216.317466][T10271] loop3: detected capacity change from 0 to 4096 [ 216.435209][T10271] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 216.491222][T10278] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1625: inode has both inline data and extents flags [ 216.566777][T10278] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1625: couldn't read orphan inode 15 (err -117) [ 216.601542][T10281] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 216.626679][T10278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.763317][T10278] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 216.857793][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.941482][T10293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 216.962954][ T28] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 217.021855][T10293] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.1633: bg 0: block 5: invalid block bitmap [ 217.054494][T10293] EXT4-fs (loop0): Remounting filesystem read-only [ 217.061127][T10293] EXT4-fs (loop0): 2 truncates cleaned up [ 217.086266][T10293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.121856][T10293] EXT4-fs warning (device loop0): empty_inline_dir:1891: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 217.162022][ T28] usb 4-1: Using ep0 maxpacket: 32 [ 217.183087][ T28] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 217.211508][ T28] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 217.276153][ T28] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.288828][ T28] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 217.303082][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.309154][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.327112][ T28] usb 4-1: config 0 descriptor?? [ 217.348341][T10305] "syz.1.1637" (10305) uses obsolete ecb(arc4) skcipher [ 217.759214][ T28] input: HID 0419:0600 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0419:0600.0005/input/input15 [ 217.874835][ T28] samsung 0003:0419:0600.0005: input,hidraw0: USB HID v80.00 Joystick [HID 0419:0600] on usb-dummy_hcd.3-1/input0 [ 218.026377][T10324] set_capacity_and_notify: 4 callbacks suppressed [ 218.026392][T10324] loop1: detected capacity change from 0 to 512 [ 218.052887][T10324] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.069369][T10326] loop0: detected capacity change from 0 to 64 [ 218.108743][T10324] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 218.129940][T10324] Quota error (device loop1): write_blk: dquota write failed [ 218.137777][T10324] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 218.147085][T10324] Quota error (device loop1): write_blk: dquota write failed [ 218.155603][T10324] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 218.165244][ T5823] usb 4-1: USB disconnect, device number 12 [ 218.165736][T10324] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.1646: Failed to acquire dquot type 1 [ 218.198468][T10324] EXT4-fs (loop1): 1 truncate cleaned up [ 218.205481][T10324] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.396963][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.450163][T10332] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1) [ 218.517280][T10313] loop5: detected capacity change from 0 to 32768 [ 218.600895][T10313] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 218.686873][T10313] XFS (loop5): Ending clean mount [ 218.866893][T10349] @: renamed from veth0 (while UP) [ 218.875730][ T7582] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 219.066878][T10355] loop1: detected capacity change from 0 to 512 [ 219.168964][T10355] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1655: inode has both inline data and extents flags [ 219.220425][T10360] loop0: detected capacity change from 0 to 1024 [ 219.272269][T10355] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1655: couldn't read orphan inode 15 (err -117) [ 219.337877][T10355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.516076][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.569116][T10370] loop0: detected capacity change from 0 to 2048 [ 219.621729][T10370] NILFS (loop0): invalid segment: Magic number mismatch [ 219.639754][T10370] NILFS (loop0): trying rollback from an earlier position [ 219.669647][T10370] NILFS (loop0): recovery complete [ 219.699805][T10374] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.790534][T10381] loop1: detected capacity change from 0 to 512 [ 219.866348][T10381] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.1664: inode has both inline data and extents flags [ 219.884963][T10381] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.1664: couldn't read orphan inode 15 (err -117) [ 219.932700][T10381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.030367][ T27] audit: type=1800 audit(2000000078.379:77): pid=10381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1664" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 220.063369][T10388] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1667'. [ 220.094930][T10391] comedi: No check for data length of config insn id 10 is implemented [ 220.115678][T10391] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 220.136249][T10391] comedi: Assuming n=15 is correct [ 220.189051][T10395] loop5: detected capacity change from 0 to 64 [ 220.334871][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.700563][T10414] loop1: detected capacity change from 0 to 4096 [ 220.769123][T10414] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.853739][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.971669][T10429] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1689'. [ 221.242000][ T789] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 221.441998][ T789] usb 4-1: Using ep0 maxpacket: 16 [ 221.451194][ T789] usb 4-1: too many endpoints for config 0 interface 0 altsetting 9: 255, using maximum allowed: 30 [ 221.482054][ T789] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 144, changing to 11 [ 221.512188][ T789] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 221.552189][ T789] usb 4-1: config 0 interface 0 has no altsetting 0 [ 221.558862][ T789] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 221.595059][ T789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.623306][ T789] usb 4-1: config 0 descriptor?? [ 221.788183][T10465] loop5: detected capacity change from 0 to 512 [ 221.842642][T10465] EXT4-fs error (device loop5): ext4_orphan_get:1408: inode #15: comm syz.5.1704: inode has both inline data and extents flags [ 221.873028][T10465] EXT4-fs error (device loop5): ext4_orphan_get:1413: comm syz.5.1704: couldn't read orphan inode 15 (err -117) [ 221.894161][T10465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.970384][ T27] audit: type=1800 audit(2000000080.319:78): pid=10465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1704" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 222.091306][ T789] input: HID 17ef:60a4 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:17EF:60A4.0006/input/input16 [ 222.185159][ T789] lenovo 0003:17EF:60A4.0006: input,hidraw0: USB HID v1.00 Joystick [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 222.308806][ T5823] usb 4-1: USB disconnect, device number 13 [ 222.360115][ T7582] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.520748][T10491] netlink: 91 bytes leftover after parsing attributes in process `syz.1.1716'. [ 222.542600][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1715'. [ 222.552292][T10489] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1715'. [ 222.572051][T10489] tipc: Invalid UDP bearer configuration [ 222.572102][T10489] tipc: Enabling of bearer rejected, failed to enable media [ 223.233208][T10527] CUSE: unknown device info "n|zQC*" [ 223.233340][T10525] Cannot find set identified by id 0 to match [ 223.239063][T10527] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 223.265926][T10527] CUSE: unknown device info "" [ 223.275397][T10527] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 223.287860][T10527] CUSE: DEVNAME unspecified [ 223.619576][T10546] [ 223.621953][T10546] ====================================================== [ 223.628974][T10546] WARNING: possible circular locking dependency detected [ 223.636004][T10546] syzkaller #0 Not tainted [ 223.640429][T10546] ------------------------------------------------------ [ 223.644922][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1745'. [ 223.647430][T10546] syz.0.1742/10546 is trying to acquire lock: [ 223.647443][T10546] ffff88802cd808b8 [ 223.656446][T10550] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1745'. [ 223.662393][T10546] (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x72/0xa0 [ 223.667139][T10550] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 223.675051][T10546] [ 223.675051][T10546] but task is already holding lock: [ 223.675058][T10546] ffff888021bbb690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0 [ 223.675108][T10546] [ 223.675108][T10546] which lock already depends on the new lock. [ 223.675108][T10546] [ 223.675114][T10546] [ 223.675114][T10546] the existing dependency chain (in reverse order) is: [ 223.675120][T10546] [ 223.675120][T10546] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 223.675144][T10546] __mutex_lock+0x135/0xc80 [ 223.675161][T10546] __netlink_dump_start+0xf4/0x7a0 [ 223.675179][T10546] ip_set_dump+0x15c/0x1f0 [ 223.675200][T10546] nfnetlink_rcv_msg+0xcaf/0x1290 [ 223.675219][T10546] netlink_rcv_skb+0x235/0x4c0 [ 223.675238][T10546] nfnetlink_rcv+0x2c9/0x2490 [ 223.675255][T10546] netlink_unicast+0x7b1/0x930 [ 223.675273][T10546] netlink_sendmsg+0x8d0/0xbf0 [ 223.675292][T10546] ____sys_sendmsg+0x61b/0x980 [ 223.675313][T10546] ___sys_sendmsg+0x2a6/0x360 [ 223.675330][T10546] __se_sys_sendmsg+0x1d0/0x2c0 [ 223.742188][T10552] set_capacity_and_notify: 1 callbacks suppressed [ 223.742203][T10552] loop5: detected capacity change from 0 to 1024 [ 223.743904][T10546] do_syscall_64+0x55/0xb0 [ 223.743939][T10546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.765814][T10552] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1746'. [ 223.770518][T10546] [ 223.770518][T10546] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 223.770550][T10546] __mutex_lock+0x135/0xc80 [ 223.781195][T10552] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1746'. [ 223.786350][T10546] ip_set_nfnl_get_byindex+0x67/0x230 [ 223.786378][T10546] set_match_v1_checkentry+0x71/0x230 [ 223.786398][T10546] xt_check_match+0x49d/0xc60 [ 223.786420][T10546] __nft_match_init+0x671/0x8b0 [ 223.786442][T10546] nf_tables_newrule+0x176e/0x2870 [ 223.786459][T10546] nfnetlink_rcv+0x1133/0x2490 [ 223.786477][T10546] netlink_unicast+0x7b1/0x930 [ 223.786494][T10546] netlink_sendmsg+0x8d0/0xbf0 [ 223.786513][T10546] ____sys_sendmsg+0x61b/0x980 [ 223.786534][T10546] ___sys_sendmsg+0x2a6/0x360 [ 223.786555][T10546] __se_sys_sendmsg+0x1d0/0x2c0 [ 223.786576][T10546] do_syscall_64+0x55/0xb0 [ 223.786598][T10546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 223.786623][T10546] [ 223.786623][T10546] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 223.786653][T10546] __lock_acquire+0x37ef/0x7d80 [ 223.786675][T10546] lock_acquire+0x19e/0x420 [ 223.786693][T10546] __mutex_lock+0x135/0xc80 [ 223.786710][T10546] nf_tables_dumpreset_obj+0x72/0xa0 [ 223.786731][T10546] netlink_dump+0x738/0xec0 [ 223.786749][T10546] __netlink_dump_start+0x57c/0x7a0 [ 223.786768][T10546] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 223.786787][T10546] nf_tables_getobj_reset+0x1e1/0x630 [ 223.786805][T10546] nfnetlink_rcv_msg+0x89c/0x1290 [ 223.786824][T10546] netlink_rcv_skb+0x235/0x4c0 [ 223.786843][T10546] nfnetlink_rcv+0x2c9/0x2490 [ 223.786862][T10546] netlink_unicast+0x7b1/0x930 [ 223.786879][T10546] netlink_sendmsg+0x8d0/0xbf0 [ 224.001621][T10546] ____sys_sendmsg+0x61b/0x980 [ 224.006896][T10546] ___sys_sendmsg+0x2a6/0x360 [ 224.012088][T10546] __se_sys_sendmsg+0x1d0/0x2c0 [ 224.017444][T10546] do_syscall_64+0x55/0xb0 [ 224.022374][T10546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.028780][T10546] [ 224.028780][T10546] other info that might help us debug this: [ 224.028780][T10546] [ 224.038991][T10546] Chain exists of: [ 224.038991][T10546] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 224.038991][T10546] [ 224.053403][T10546] Possible unsafe locking scenario: [ 224.053403][T10546] [ 224.060833][T10546] CPU0 CPU1 [ 224.066180][T10546] ---- ---- [ 224.071524][T10546] lock(nlk_cb_mutex-NETFILTER); [ 224.076533][T10546] lock(nfnl_subsys_ipset); [ 224.083626][T10546] lock(nlk_cb_mutex-NETFILTER); [ 224.091155][T10546] lock(&nft_net->commit_mutex); [ 224.096165][T10546] [ 224.096165][T10546] *** DEADLOCK *** [ 224.096165][T10546] [ 224.104289][T10546] 1 lock held by syz.0.1742/10546: [ 224.109376][T10546] #0: ffff888021bbb690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x7a0 [ 224.119972][T10546] [ 224.119972][T10546] stack backtrace: [ 224.125848][T10546] CPU: 1 PID: 10546 Comm: syz.0.1742 Not tainted syzkaller #0 [ 224.133287][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.143327][T10546] Call Trace: [ 224.146596][T10546] [ 224.149541][T10546] dump_stack_lvl+0x18c/0x250 [ 224.154227][T10546] ? load_image+0x420/0x420 [ 224.158715][T10546] ? show_regs_print_info+0x20/0x20 [ 224.163905][T10546] ? print_circular_bug+0x12b/0x1a0 [ 224.169093][T10546] check_noncircular+0x2fc/0x400 [ 224.174020][T10546] ? print_deadlock_bug+0x5d0/0x5d0 [ 224.179207][T10546] ? lockdep_lock+0xf5/0x230 [ 224.183783][T10546] ? _find_first_zero_bit+0xd6/0x100 [ 224.189051][T10546] __lock_acquire+0x37ef/0x7d80 [ 224.193892][T10546] ? __lock_acquire+0x1262/0x7d80 [ 224.198908][T10546] ? verify_lock_unused+0x140/0x140 [ 224.204099][T10546] ? __stack_depot_save+0x575/0x660 [ 224.209283][T10546] ? kasan_set_track+0x4e/0x70 [ 224.214033][T10546] lock_acquire+0x19e/0x420 [ 224.218552][T10546] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 224.224001][T10546] ? __might_sleep+0xe0/0xe0 [ 224.228577][T10546] ? read_lock_is_recursive+0x20/0x20 [ 224.233938][T10546] __mutex_lock+0x135/0xc80 [ 224.238425][T10546] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 224.243871][T10546] ? __kmem_cache_alloc_node+0x194/0x250 [ 224.249493][T10546] ? nft_pernet+0x23/0x230 [ 224.253897][T10546] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 224.259344][T10546] ? __lock_acquire+0x7d80/0x7d80 [ 224.264354][T10546] ? mutex_lock_nested+0x20/0x20 [ 224.269273][T10546] ? __alloc_skb+0x138/0x2c0 [ 224.273861][T10546] ? nft_pernet+0x23/0x230 [ 224.278293][T10546] ? nft_pernet+0x23/0x230 [ 224.282701][T10546] nf_tables_dumpreset_obj+0x72/0xa0 [ 224.287978][T10546] netlink_dump+0x738/0xec0 [ 224.292472][T10546] ? netlink_lookup+0x200/0x200 [ 224.297317][T10546] ? netlink_autobind+0x300/0x300 [ 224.302336][T10546] ? netlink_lookup+0x30/0x200 [ 224.307111][T10546] ? nf_tables_dumpreset_obj_start+0xde/0x180 [ 224.313169][T10546] __netlink_dump_start+0x57c/0x7a0 [ 224.318356][T10546] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 224.324148][T10546] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 224.329771][T10546] nf_tables_getobj_reset+0x1e1/0x630 [ 224.335129][T10546] ? nfnl_pernet+0x23/0x230 [ 224.339619][T10546] ? nf_tables_delobj+0x10b0/0x10b0 [ 224.344804][T10546] ? nf_tables_getobj_single+0x600/0x600 [ 224.350424][T10546] ? nf_tables_dumpreset_obj_start+0x180/0x180 [ 224.356564][T10546] ? nf_tables_dump_obj+0xd00/0xd00 [ 224.361751][T10546] ? __nla_parse+0x40/0x50 [ 224.366156][T10546] ? nf_tables_delobj+0x10b0/0x10b0 [ 224.371336][T10546] nfnetlink_rcv_msg+0x89c/0x1290 [ 224.376358][T10546] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.382457][T10546] ? nfnetlink_rcv_msg+0x228/0x1290 [ 224.387643][T10546] ? nfnetlink_unbind+0x160/0x160 [ 224.392659][T10546] ? __dev_queue_xmit+0x1be8/0x37e0 [ 224.397842][T10546] ? __netlink_deliver_tap+0x579/0x7f0 [ 224.403298][T10546] ? netlink_deliver_tap+0x19c/0x1b0 [ 224.408598][T10546] ? netlink_unicast+0x77b/0x930 [ 224.413555][T10546] ? netlink_sendmsg+0x8d0/0xbf0 [ 224.418506][T10546] ? ____sys_sendmsg+0x61b/0x980 [ 224.423465][T10546] ? ___sys_sendmsg+0x2a6/0x360 [ 224.428333][T10546] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 224.433372][T10546] ? do_syscall_64+0x55/0xb0 [ 224.437960][T10546] netlink_rcv_skb+0x235/0x4c0 [ 224.442716][T10546] ? nfnetlink_unbind+0x160/0x160 [ 224.447728][T10546] ? netlink_ack+0x1160/0x1160 [ 224.452481][T10546] ? apparmor_capable+0x137/0x1a0 [ 224.457495][T10546] ? bpf_lsm_capable+0x9/0x10 [ 224.462157][T10546] ? security_capable+0x89/0xb0 [ 224.467009][T10546] nfnetlink_rcv+0x2c9/0x2490 [ 224.471682][T10546] ? __local_bh_enable_ip+0x13a/0x1c0 [ 224.477046][T10546] ? lockdep_hardirqs_on+0x98/0x150 [ 224.482241][T10546] ? __local_bh_enable_ip+0x13a/0x1c0 [ 224.487600][T10546] ? _local_bh_enable+0xa0/0xa0 [ 224.492440][T10546] ? __dev_queue_xmit+0x272/0x37e0 [ 224.497538][T10546] ? __dev_queue_xmit+0x1329/0x37e0 [ 224.502728][T10546] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 224.508277][T10546] ? __dev_queue_xmit+0x272/0x37e0 [ 224.513378][T10546] ? ref_tracker_free+0x686/0x830 [ 224.518390][T10546] ? refcount_inc+0x70/0x70 [ 224.522901][T10546] ? __asan_memcpy+0x40/0x70 [ 224.527478][T10546] ? __skb_clone+0x5c/0x6c0 [ 224.531971][T10546] ? __skb_clone+0x446/0x6c0 [ 224.536572][T10546] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.541767][T10546] ? __lock_acquire+0x7d80/0x7d80 [ 224.546782][T10546] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.551966][T10546] netlink_unicast+0x7b1/0x930 [ 224.556717][T10546] netlink_sendmsg+0x8d0/0xbf0 [ 224.561469][T10546] ? netlink_getsockopt+0x590/0x590 [ 224.566655][T10546] ? apparmor_socket_sendmsg+0x8e/0x330 [ 224.572196][T10546] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 224.577486][T10546] ? security_socket_sendmsg+0x80/0xa0 [ 224.582931][T10546] ? netlink_getsockopt+0x590/0x590 [ 224.588112][T10546] ____sys_sendmsg+0x61b/0x980 [ 224.592868][T10546] ? __asan_memset+0x22/0x40 [ 224.597444][T10546] ? __sys_sendmsg_sock+0x30/0x30 [ 224.602454][T10546] ? __import_iovec+0x5f2/0x850 [ 224.607303][T10546] ? import_iovec+0x73/0xa0 [ 224.611799][T10546] ___sys_sendmsg+0x2a6/0x360 [ 224.616463][T10546] ? __sys_sendmsg+0x2b0/0x2b0 [ 224.621223][T10546] __se_sys_sendmsg+0x1d0/0x2c0 [ 224.626072][T10546] ? __x64_sys_sendmsg+0x80/0x80 [ 224.631010][T10546] ? lockdep_hardirqs_on+0x98/0x150 [ 224.636191][T10546] do_syscall_64+0x55/0xb0 [ 224.640594][T10546] ? clear_bhb_loop+0x40/0x90 [ 224.645260][T10546] ? clear_bhb_loop+0x40/0x90 [ 224.649929][T10546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.655807][T10546] RIP: 0033:0x7fc2cdd9e159 [ 224.660221][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.679818][T10546] RSP: 002b:00007fc2cec3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.688215][T10546] RAX: ffffffffffffffda RBX: 00007fc2ce025fa0 RCX: 00007fc2cdd9e159 [ 224.696177][T10546] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000003 [ 224.704135][T10546] RBP: 00007fc2cde3506b R08: 0000000000000000 R09: 0000000000000000 [ 224.712095][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.720048][T10546] R13: 00007fc2ce026038 R14: 00007fc2ce025fa0 R15: 00007ffde5480b68 [ 224.728012][T10546] [ 225.477563][T10548] syz.3.1744 (10548): drop_caches: 1