last executing test programs: 5m2.952080246s ago: executing program 0 (id=2555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f000005000700840000000600054044"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) 5m2.734851423s ago: executing program 0 (id=2558): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 5m2.630237526s ago: executing program 0 (id=2559): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000040)='./file0\x00', 0x1818850, &(0x7f0000000140)={[{@shortname_win95}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}]}, 0x1, 0x37c, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001840)=""/189, 0xbd) 5m2.50038266s ago: executing program 0 (id=2560): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m2.453478892s ago: executing program 0 (id=2561): r0 = socket(0x1e, 0x4000000000080002, 0x0) unshare(0x22020400) bind$packet(r0, 0x0, 0x0) 5m2.120321812s ago: executing program 0 (id=2562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 5m1.789798063s ago: executing program 32 (id=2562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 21.890288942s ago: executing program 3 (id=5586): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'hsr0\x00', 0x4}, 0x18) 21.731485887s ago: executing program 3 (id=5590): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001180)=""/4059, 0xfdb}, {&(0x7f0000002e40)=""/200, 0xc8}, {&(0x7f0000000ac0)=""/279, 0x117}, {&(0x7f0000000780)=""/173, 0xad}, {&(0x7f0000000880)=""/224, 0xe0}, {&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f00000003c0)=""/232, 0xe8}, {&(0x7f0000000540)=""/113, 0x71}, {&(0x7f0000000040)=""/40, 0x28}], 0x9}, 0x120c}, {{0x0, 0x0, 0x0}, 0x3f2}], 0x4, 0x0, 0x0) 21.500442354s ago: executing program 3 (id=5592): r0 = getpgrp(0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$lock(r1, 0x24, &(0x7f0000000140)={0x1, 0x0, 0x400, 0x2, r0}) 21.419881317s ago: executing program 3 (id=5593): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x2800088, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x93, 0x2c0, &(0x7f0000000340)="$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") mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x811, 0x0) 21.052354948s ago: executing program 3 (id=5595): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "01ff"}, @main=@item_4={0x3, 0x0, 0xa, "020600"}, @local=@item_4={0x3, 0x2, 0x8, "a31df281"}, @main=@item_4={0x3, 0x0, 0xb, "9dbd9646"}, @local=@item_012={0x1, 0x2, 0x2, 'n'}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x9, '!\x00'}, @global=@item_4={0x3, 0x1, 0x2, "b78a313a"}]}}, 0x0}, 0x0) 20.602580682s ago: executing program 3 (id=5597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd25, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "19d2dcd5a3ce7b156cd10071394d0e676f"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 20.232875814s ago: executing program 33 (id=5597): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x30, r1, 0x1, 0x70bd25, 0x0, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "19d2dcd5a3ce7b156cd10071394d0e676f"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2.096131074s ago: executing program 2 (id=5758): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0xf5d9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) 1.832429693s ago: executing program 1 (id=5762): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x1800818, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0], 0xf6, 0x697, &(0x7f0000001280)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="58010000100001000000200000000000ffffffff000000000000000000000000ffffffff00000000000000000000000000040000000000040200000064000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc000000000000000000000000000000000004d132000000000000000000000000000000000000002d01000000000000fdffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000008000000ac6913a80000fdffffffffffffff00040000000000000000000800000000000200000000000000000000020000000200000000000000000000000a000001cd000000000000001c00170000000000000000002cbd70002abd700028bd7000000000004c0014"], 0x158}}, 0x0) 1.794870964s ago: executing program 4 (id=5763): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 1.550996111s ago: executing program 4 (id=5764): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000070000090500040000000000050005"], 0x34}, 0x2, 0x34005}, 0x0) 1.542223181s ago: executing program 1 (id=5766): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1.387479057s ago: executing program 4 (id=5767): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000280)={'multiq3\x00', [0x4f29, 0x5, 0x3ff, 0x601, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x805, 0x7ff, 0x2, 0x1, 0x2, 0x4, 0x101, 0xe1cb, 0x5, 0x1a44b, 0x3, 0x201, 0x8f5e, 0xfffffff9, 0x9, 0x20001e56, 0x9, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0x1]}) 1.237327521s ago: executing program 1 (id=5769): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f27, 0x4, 0x10000, 0x10100004, 0x8, 0xfffffbf9, 0x7, 0x40080000, 0x800000, 0x100100, 0x5, 0x1, 0x1, 0xfffffffe, 0x403, 0xf, 0xfffffffc, 0x0, 0x3, 0x2, 0x89, 0xfffffffd, 0x2, 0x20001e52, 0x400000b, 0xfff, 0x3a, 0x7fffffff, 0x7, 0x8000000, 0xc6b]}) 1.208290062s ago: executing program 4 (id=5770): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0xe) sendmmsg(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000400)="06", 0x1}, {0x0}], 0x2}}], 0x2a0, 0x20004840) 1.100290535s ago: executing program 2 (id=5772): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6) 974.64653ms ago: executing program 5 (id=5773): r0 = epoll_create1(0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 940.9883ms ago: executing program 2 (id=5774): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)=ANY=[@ANYBLOB="200000001a00532abd7000000000000a0000000c"], 0x20}}, 0x0) 867.924973ms ago: executing program 4 (id=5775): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x810000, &(0x7f0000000680)={[{@check_relaxed}]}, 0x5, 0x589, &(0x7f0000000c40)="$eJzs3e1u01gawPHHfYFsWdjV7gqhqsCh7EpFKsFxICjik9c5SQ2JHdkOaj+hiqaoIoUVZaVtPy1f0Iw0cxF85SLmEuZO0FxCR35JX/NC2/QF5v+LZnxiH5/znEPkR25iWwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBhOxTQLhtRdr7Wo+nMqgd8YsL3b3r19iwH9ihjxf5LLyY101Y1/7G6+Hv9vVmbSdzOSixc52bpy/a9P/j4x1t1/QEBfKXeivTc2t14vdzrtd0fZafxEXY5cLpvygZW2e6+uac8Nfbdh17RyQ1+VSyXzwUI1VFW3rsOlMNIN5QTajvxAzTn3VKFcLiqdX/JbXq1i13W6clxELNMsqaf5praD0PcePM2HzoJbr7teLakTb75vmebj+IP4zI1UpO2GUqtrnXZRKXVlUOxxpcKwWYgrWcMqWaZlFQqWVSg9Kj96bJoTh1aYB0hWY9tIJ9mcGMWHFt+yUR26gRMby/K/1MUVT1qyKKrny5GKBOJLo8/2TDf//+uB3unjUo9+9+b/bpa/sbt5WpL8fyt9d6tf/u8Ty9m9NmRTrsprWZaOdKQt7849ovTVddr91ESLJ66E4osrDbGTNSpbo6QsJSmJKS9kQaoSipKquFIXLaEsSSiR6OQT5UggWmyJxJdAlMyJI/dESUHKUpaiKNGSlyXxpSWe1KQidtLKqqwl814cOAtZpcKgCeu2ZA2odJT8fznO9ubhXcj/f3QjO3YDJ7Xdzf/9TZ5dNAAAAAAA4DQYyV/fjeQ0/2ZSqrp1bZ53WAAAAAAAYISSb/5n4kXyNf9NMTj/BwAAAADge2Mk19gZIjIlt9NS90oo/ggAAAAAAMB3Ivn+/1a8mIpLt8X4mvN/bgkAAAAAAMC35Ieh99gPm5eNX36TIJg0PjQX/2ms23E9e3083W/8YItRddq4ljWSLEoT2TtHzxjZ3S93boL5JVus9ovjz8lawzBGEID8JHfSOndW0uVKd0s62qmqW9d5x68/KYhtXxuL9GL03zdr/5Nk+D96jWuGrK512vmXbzsrSSwf4lY+rGc3UDx0H8UBsbxP7reQXHOxb8ST2cxPJhdipP0a/0/7NfeOfyzdfewIfX6U2bTO7FS6nNo//itxn4V8v9FPpVEUDoy8590jB0ZxN61zd+5uutgfRS6OwuobRdzdWqdt7Y3iWHPxFVEUh81FsRvF5G73R4kCAM7Lap8stJv/D+XdYxzl+mb3bi8jye4fZS6tMzedHFgnpnsc0c1hR3TzhHn98+TBZyD1iCLJsXG/Px/Iqp/iHT717TesW0Y8hePv1/8j1zc2t+6vrS+/ar9qv7GsYsl8aJqPLJlMhpEtyD0AgB6GP2NnaA3j4ZCz6r/t/KQgLy/lrXRkReaTqw2SXxzsbbX2l6zVqT0/Q5gfcta6W7cg8z3O6qRnXatn3d7tFs/gXwIAgLMzezgPf94+Yv6fH3LevT+XDz473pvLAQDA6dDBlydZsfmiUC4X7GhBq8B3nqnArdS0cr1IB86C7dW0agZ+5Dt+PS48dys6VGGr2fSDSFX9QDX90F1Mnvyuske/h7phe5HrhM26tkOtHN+LbCdSFTd0VLP17z8lAcQ7dy8ocOzI9T0V+q3A0XmlQq3jinU3XNCBcivai9yqGxc91Qzchh0sqed+vdXQqqJDJ3CbkZ80uNOX61X9oGFH7lXJn+M8AwBwkWxsbr1e7nTa706xcN5jBAAA+5GlAQAAAAAAAAAAAAAAAAAAAAC4+M7i+r8RFiaOt/uv6VME5BQCu7Rnzfi5z8/pFXIXI4wjFsZE5Ji7d29JcQFGMahgnFbL53lUAnAWfg8AAP//wQNC9A==") r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x50009404, &(0x7f00000004c0)={0x8, 0x4000, 0x3e, 0x7}) 867.797933ms ago: executing program 1 (id=5776): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3, 0x3, 0x0, 0x0, 0x8001}}) tkill(0x0, 0x7) 810.508565ms ago: executing program 2 (id=5777): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d344b0e15760bc06000000938037e70e457ae2bb24ef6697070000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002e00)=""/4104, 0x1008}, {&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000001ac0)=""/4147, 0x1033}, {&(0x7f00000000c0)=""/49, 0x31}], 0x4}, 0x10002) 792.388665ms ago: executing program 5 (id=5778): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) 722.496907ms ago: executing program 4 (id=5779): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000000280)="$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") unlink(&(0x7f0000000200)='./file1\x00') mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 576.297412ms ago: executing program 5 (id=5780): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r0, 0x0, 0x4000, 0x800, &(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1000005}, [@null, @default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x80) 463.977136ms ago: executing program 1 (id=5781): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_hardlimit=8']) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) 461.042675ms ago: executing program 5 (id=5782): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0xfffffffd, "050000009582"}}) 384.822378ms ago: executing program 2 (id=5783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000028850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 221.947423ms ago: executing program 1 (id=5784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2fafb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 221.807543ms ago: executing program 5 (id=5785): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) 221.730833ms ago: executing program 2 (id=5786): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 5 (id=5787): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x0) kernel console output (not intermixed with test programs): e2-f6da-4727-8c75-0525a5b65a09. [ 530.286051][T17008] loop2: detected capacity change from 0 to 40427 [ 530.301798][T17022] loop4: detected capacity change from 0 to 16 [ 530.318242][T17022] erofs: (device loop4): mounted with root inode @ nid 36. [ 530.359910][T17008] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 530.394508][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 48 @ nid 36 [ 530.431170][T17008] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 530.445194][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 530.478825][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 530.493609][T17008] F2FS-fs (loop2): invalid crc value [ 530.503273][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 37 @ nid 36 [ 530.525414][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 530.540549][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 35 @ nid 36 [ 530.559574][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 34 @ nid 36 [ 530.579918][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 33 @ nid 36 [ 530.589344][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 32 @ nid 36 [ 530.616245][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 530.632491][T17022] erofs: (device loop4): z_erofs_readahead: readahead error at folio 16 @ nid 36 [ 530.658435][T17022] syz.4.4763: attempt to access beyond end of device [ 530.658435][T17022] loop4: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 530.690561][T17022] syz.4.4763: attempt to access beyond end of device [ 530.690561][T17022] loop4: rw=524288, sector=376, nr_sectors = 32 limit=16 [ 530.704194][T17008] F2FS-fs (loop2): Found nat_bits in checkpoint [ 530.729061][T17022] syz.4.4763: attempt to access beyond end of device [ 530.729061][T17022] loop4: rw=524288, sector=384, nr_sectors = 32 limit=16 [ 530.778454][T17022] syz.4.4763: attempt to access beyond end of device [ 530.778454][T17022] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 530.824113][T17022] syz.4.4763: attempt to access beyond end of device [ 530.824113][T17022] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 530.866936][T17008] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 530.878565][T17022] syz.4.4763: attempt to access beyond end of device [ 530.878565][T17022] loop4: rw=524288, sector=720, nr_sectors = 32 limit=16 [ 530.898882][T17008] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 530.919922][T17022] syz.4.4763: attempt to access beyond end of device [ 530.919922][T17022] loop4: rw=524288, sector=728, nr_sectors = 32 limit=16 [ 530.995554][T17022] syz.4.4763: attempt to access beyond end of device [ 530.995554][T17022] loop4: rw=524288, sector=525144, nr_sectors = 32 limit=16 [ 531.399580][ T5839] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 531.599646][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 531.618304][ T5839] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 531.641705][ T5839] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 531.697779][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 531.715510][ T5839] usb 4-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 531.742763][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.785312][ T5839] usb 4-1: config 0 descriptor?? [ 532.283384][ T5839] hid (null): invalid report_size 26545 [ 532.305087][ T5839] thrustmaster 0003:044F:B320.002D: unknown main item tag 0x6 [ 532.326417][ T5839] thrustmaster 0003:044F:B320.002D: invalid report_size 26545 [ 532.346597][ T5839] thrustmaster 0003:044F:B320.002D: item 0 2 1 7 parsing failed [ 532.361761][ T5839] thrustmaster 0003:044F:B320.002D: parse failed [ 532.383308][ T5839] thrustmaster: probe of 0003:044F:B320.002D failed with error -22 [ 532.685252][ T5815] usb 4-1: USB disconnect, device number 30 [ 534.499841][T17113] openvswitch: netlink: Actions may not be safe on all matching packets [ 534.519600][ T965] IPVS: starting estimator thread 0... [ 534.609726][T17115] IPVS: using max 21 ests per chain, 50400 per kthread [ 534.656938][T17117] loop4: detected capacity change from 0 to 512 [ 534.711860][T17117] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 535.929949][ T965] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 535.949617][ T5837] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 536.106512][T17161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4837'. [ 536.119920][ T965] usb 3-1: Using ep0 maxpacket: 32 [ 536.140792][ T965] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.142325][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.161552][ T965] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 536.194034][ T965] usb 3-1: config 0 interface 0 has no altsetting 0 [ 536.194960][ T5837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.208936][ T965] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 536.231516][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.251461][ T5837] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 536.264490][ T965] usb 3-1: config 0 descriptor?? [ 536.272616][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.295610][ T5837] usb 5-1: config 0 descriptor?? [ 536.809649][ T8] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 536.905371][ T965] usb 3-1: string descriptor 0 read error: -71 [ 536.918223][ T965] uclogic 0003:5543:3031.002E: failed retrieving string descriptor #200: -71 [ 536.927401][ T5837] hid-led: probe of 0003:1D34:000A.002F failed with error -71 [ 536.937268][ T965] uclogic 0003:5543:3031.002E: failed retrieving pen parameters: -71 [ 536.947628][ T965] uclogic 0003:5543:3031.002E: failed probing pen v2 parameters: -71 [ 536.965989][ T5837] usb 5-1: USB disconnect, device number 19 [ 536.967911][ T965] uclogic 0003:5543:3031.002E: failed probing parameters: -71 [ 536.981298][ T965] uclogic: probe of 0003:5543:3031.002E failed with error -71 [ 537.012340][ T965] usb 3-1: USB disconnect, device number 30 [ 537.023020][ T8] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 537.040264][ T8] usb 2-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 537.061876][ T8] usb 2-1: config 160 has no interface number 0 [ 537.072020][ T8] usb 2-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.099630][ T8] usb 2-1: config 160 interface 200 has no altsetting 0 [ 537.115503][ T8] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 537.125511][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.135013][ T8] usb 2-1: Product: syz [ 537.139287][ T8] usb 2-1: Manufacturer: syz [ 537.145900][ T8] usb 2-1: SerialNumber: syz [ 537.155805][T17180] loop3: detected capacity change from 0 to 512 [ 537.198147][T17180] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 537.387255][T17169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4833'. [ 537.411934][ T8] usb 2-1: USB disconnect, device number 38 [ 537.651460][T17186] loop4: detected capacity change from 0 to 4096 [ 537.716002][T17189] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 537.801417][T17186] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 2 already freed [ 537.841034][T17186] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 539.115208][T17214] loop3: detected capacity change from 0 to 4096 [ 539.203711][T17217] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 539.285156][T17219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4857'. [ 539.314750][T17214] NILFS (loop3): nilfs_palloc_freev (ino=3): entry number 2 already freed [ 539.341923][T17214] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 539.949880][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 539.982299][T17244] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4869'. [ 540.149797][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 540.157008][ T8] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 130, changing to 11 [ 540.176032][ T8] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 540.194672][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 540.201412][ T8] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 540.211089][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.221626][ T8] usb 3-1: config 0 descriptor?? [ 540.640848][ T8] hid (null): invalid report_size 26545 [ 540.653166][ T8] thrustmaster 0003:044F:B320.0030: unknown main item tag 0x6 [ 540.666732][ T8] thrustmaster 0003:044F:B320.0030: invalid report_size 26545 [ 540.677964][ T8] thrustmaster 0003:044F:B320.0030: item 0 2 1 7 parsing failed [ 540.692327][ T8] thrustmaster 0003:044F:B320.0030: parse failed [ 540.698918][ T8] thrustmaster: probe of 0003:044F:B320.0030 failed with error -22 [ 540.921781][ T5781] usb 3-1: USB disconnect, device number 31 [ 540.984552][T17260] mkiss: ax0: crc mode is auto. [ 541.023850][T17262] PKCS8: Unsupported PKCS#8 version [ 541.165786][T17268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4880'. [ 541.410396][ T5815] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 541.602008][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.618560][ T5815] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.629636][ T5815] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 541.638711][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.657834][ T5815] usb 2-1: config 0 descriptor?? [ 541.792419][T17284] loop2: detected capacity change from 0 to 4096 [ 541.853483][T17288] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 541.909139][T17284] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 2 already freed [ 541.926417][T17284] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 541.963733][T17289] loop4: detected capacity change from 0 to 2048 [ 542.045980][T17289] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 542.063622][T17289] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 542.107278][T17289] UDF-fs: Scanning with blocksize 512 failed [ 542.138875][T17289] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 542.232731][ T28] audit: type=1800 audit(1778927682.474:201): pid=17289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4887" name="file2" dev="loop4" ino=839 res=0 errno=0 [ 542.369078][ T5815] hid-led: probe of 0003:1D34:000A.0031 failed with error -71 [ 542.420742][ T5815] usb 2-1: USB disconnect, device number 39 [ 543.300109][ T5837] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 543.326817][T17316] loop4: detected capacity change from 0 to 4096 [ 543.394980][T17321] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 543.486874][T17316] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 2 already freed [ 543.520346][ T5837] usb 4-1: config 160 has an invalid interface number: 200 but max is 0 [ 543.528979][ T5837] usb 4-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 543.550002][T17316] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 543.564015][ T5837] usb 4-1: config 160 has no interface number 0 [ 543.571752][ T5837] usb 4-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.589165][ T5837] usb 4-1: config 160 interface 200 has no altsetting 0 [ 543.614529][ T5837] usb 4-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 543.630114][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.655800][ T5837] usb 4-1: Product: syz [ 543.660723][ T5837] usb 4-1: Manufacturer: syz [ 543.665382][ T5837] usb 4-1: SerialNumber: syz [ 543.923454][T17307] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4897'. [ 543.961172][ T5837] usb 4-1: USB disconnect, device number 31 [ 543.978330][T17333] loop4: detected capacity change from 0 to 64 [ 544.097024][T17335] loop2: detected capacity change from 0 to 1764 [ 544.115534][T17337] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 544.324192][T17343] loop2: detected capacity change from 0 to 256 [ 544.412052][T17343] FAT-fs (loop2): Directory bread(block 64) failed [ 544.428970][T17343] FAT-fs (loop2): Directory bread(block 65) failed [ 544.438161][T17343] FAT-fs (loop2): Directory bread(block 66) failed [ 544.455999][T17343] FAT-fs (loop2): Directory bread(block 67) failed [ 544.472577][T17343] FAT-fs (loop2): Directory bread(block 68) failed [ 544.479384][T17343] FAT-fs (loop2): Directory bread(block 69) failed [ 544.497379][T17343] FAT-fs (loop2): Directory bread(block 70) failed [ 544.515081][T17343] FAT-fs (loop2): Directory bread(block 71) failed [ 544.526657][T17343] FAT-fs (loop2): Directory bread(block 72) failed [ 544.545891][T17343] FAT-fs (loop2): Directory bread(block 73) failed [ 545.321802][T17360] loop2: detected capacity change from 0 to 128 [ 545.401504][T17360] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 545.414675][T17360] ext4 filesystem being mounted at /1226/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 545.543571][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 546.589869][ T8] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 546.666771][T17376] loop4: detected capacity change from 0 to 40427 [ 546.670710][T17376] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 546.670734][T17376] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 546.671862][T17376] F2FS-fs (loop4): invalid crc value [ 546.769614][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 546.776813][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 546.776843][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.776880][ T8] usb 4-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 546.776902][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.780562][ T8] usb 4-1: config 0 descriptor?? [ 546.804529][T17398] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 546.918553][T17376] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 546.918582][T17376] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 546.960043][ T28] audit: type=1800 audit(1778927687.184:202): pid=17376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4930" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 547.070014][T11953] syz-executor: attempt to access beyond end of device [ 547.070014][T11953] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 547.073766][T11953] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 547.230353][ T8] ntrig 0003:1B96:0008.0032: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.3-1/input0 [ 547.423780][ T8] usb 4-1: USB disconnect, device number 32 [ 547.527622][T17410] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4945'. [ 547.641662][ T28] audit: type=1326 audit(1778927687.884:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.2.4946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7859ce59 code=0x7ffc0000 [ 547.690505][ T5781] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 547.700061][ T28] audit: type=1326 audit(1778927687.904:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.2.4946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7859ce59 code=0x7ffc0000 [ 547.759993][ T28] audit: type=1326 audit(1778927687.904:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.2.4946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7859ce59 code=0x7ffc0000 [ 547.822315][ T28] audit: type=1326 audit(1778927687.904:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.2.4946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fac7859ce59 code=0x7ffc0000 [ 547.868184][ T28] audit: type=1326 audit(1778927687.904:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.2.4946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7859ce59 code=0x7ffc0000 [ 547.893031][ T28] audit: type=1326 audit(1778927687.904:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.2.4946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac7859ce59 code=0x7ffc0000 [ 547.928669][ T5781] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.949693][ T5781] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.959754][ T28] audit: type=1326 audit(1778927687.904:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.2.4946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fac7859ce59 code=0x7ffc0000 [ 547.989939][ T5781] usb 2-1: config 0 interface 0 has no altsetting 0 [ 548.006914][ T5781] usb 2-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 548.029747][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.049093][ T28] audit: type=1326 audit(1778927687.904:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17411 comm="syz.2.4946" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fac7859ce59 code=0x7ffc0000 [ 548.090748][ T5781] usb 2-1: config 0 descriptor?? [ 548.140389][ T5815] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 548.339729][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 548.349496][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.373219][ T5815] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 548.390020][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.398215][ T5815] usb 3-1: Product: syz [ 548.427144][ T5815] usb 3-1: Manufacturer: syz [ 548.437404][ T5815] usb 3-1: SerialNumber: syz [ 548.452941][ T5815] usb 3-1: config 0 descriptor?? [ 548.480223][ T5815] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 548.525557][ T5781] monterey 0003:0566:3004.0033: unknown main item tag 0x0 [ 548.550619][ T5781] monterey 0003:0566:3004.0033: unknown main item tag 0x0 [ 548.557898][ T5781] monterey 0003:0566:3004.0033: unknown main item tag 0x0 [ 548.609715][ T5781] monterey 0003:0566:3004.0033: unknown main item tag 0x0 [ 548.625659][ T5781] monterey 0003:0566:3004.0033: hidraw0: USB HID v10.09 Device [HID 0566:3004] on usb-dummy_hcd.1-1/input0 [ 548.685314][ T5815] usb 3-1: qt2_attach - failed to power on unit: -71 [ 548.699818][ T5815] quatech2: probe of 3-1:0.0 failed with error -71 [ 548.710920][ T5815] usb 3-1: USB disconnect, device number 32 [ 548.811785][ T5837] usb 2-1: USB disconnect, device number 40 [ 548.877112][T17441] loop4: detected capacity change from 0 to 1764 [ 548.898076][T17437] fido_id[17437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 548.939757][ T27] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 549.129550][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 549.142474][ T27] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 549.157653][ T27] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 549.169275][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.183986][ T27] usb 4-1: Product: syz [ 549.188193][ T27] usb 4-1: Manufacturer: syz [ 549.193303][ T27] usb 4-1: SerialNumber: syz [ 549.200411][ T27] usb 4-1: config 0 descriptor?? [ 549.208700][ T27] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 549.220252][ T27] usb 4-1: setting power ON [ 549.226414][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 549.245821][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 549.256077][ T27] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 549.264917][ T27] usb 4-1: media controller created [ 549.290258][ T5815] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 549.307445][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.350852][ T27] usb 4-1: selecting invalid altsetting 6 [ 549.357443][ T27] usb 4-1: digital interface selection failed (-22) [ 549.386149][ T27] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 549.406579][ T27] usb 4-1: setting power OFF [ 549.415422][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 549.425283][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 549.437545][T17436] dvb-usb: bulk message failed: -22 (3/0) [ 549.449258][T17436] cxusb: i2c wr: len=79 is too big! [ 549.449258][T17436] [ 549.478370][T17451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4964'. [ 550.440963][ T27] (NULL device *): no alternate interface [ 550.492545][T17449] loop4: detected capacity change from 0 to 131072 [ 550.510232][T17449] F2FS-fs (loop4): Test dummy encryption mode enabled [ 550.520492][T17449] F2FS-fs (loop4): invalid crc value [ 550.531282][ T5815] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=cc.da [ 550.546449][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.555478][T17449] F2FS-fs (loop4): Found nat_bits in checkpoint [ 550.600149][T17449] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=3, run fsck to fix. [ 550.611888][T17449] F2FS-fs (loop4): Failed to read root inode [ 550.656213][ T5815] usb 3-1: Product: syz [ 550.664560][ T27] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 550.674608][ T5815] usb 3-1: Manufacturer: syz [ 550.679244][ T5815] usb 3-1: SerialNumber: syz [ 550.691103][ T5815] usb 3-1: config 0 descriptor?? [ 550.710735][ T27] usb 4-1: USB disconnect, device number 33 [ 550.720461][ T5815] usb 3-1: selecting invalid altsetting 1 [ 550.726259][ T5815] flexcop_usb: set interface failed. [ 550.779915][ T5815] b2c2_flexcop_usb: probe of 3-1:0.0 failed with error -22 [ 550.908812][ T5815] usb 3-1: USB disconnect, device number 33 [ 550.932317][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.989981][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.029659][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.071809][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.102703][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.149677][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.181557][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.211793][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.249898][T17472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.261678][T17482] loop3: detected capacity change from 0 to 1024 [ 551.287930][T17472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.329041][T17472] batadv_slave_1: entered promiscuous mode [ 551.390889][T17482] hfsplus: bad catalog entry type [ 551.499279][ T59] hfsplus: b-tree write err: -5, ino 25 [ 551.521507][ T59] hfsplus: b-tree write err: -5, ino 4 [ 551.527099][ T59] hfsplus: b-tree write err: -5, ino 2 [ 552.192973][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4989'. [ 552.194517][T17500] loop4: detected capacity change from 0 to 4096 [ 552.220042][T17506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4989'. [ 552.270983][T17500] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 552.340346][T17500] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 552.391966][T17500] ntfs: volume version 3.1. [ 552.633575][T17514] loop4: detected capacity change from 0 to 64 [ 552.691910][T17512] loop3: detected capacity change from 0 to 4096 [ 552.724697][T17512] __ntfs_error: 5 callbacks suppressed [ 552.724712][T17512] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 552.769374][T17512] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 552.824805][T17512] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 552.879944][T17512] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 552.913375][T17512] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 552.972066][T17512] ntfs: volume version 3.1. [ 553.019297][T17512] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 553.069584][T17512] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 553.126146][T17512] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 553.160469][T17512] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 553.220384][T17512] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 553.339698][T17525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4998'. [ 554.189976][ T8] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 554.210609][T17553] usb usb4: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 554.359383][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5012'. [ 554.380033][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 554.393544][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.411463][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.421749][ T8] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 554.433235][T17559] loop3: detected capacity change from 0 to 16 [ 554.440074][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.452346][ T8] usb 2-1: config 0 descriptor?? [ 554.462655][T17559] erofs: (device loop3): mounted with root inode @ nid 36. [ 554.893736][ T8] bigben 0003:146B:0902.0034: unexpected rdesc, please submit for review [ 554.923815][ T8] bigben 0003:146B:0902.0034: unknown main item tag 0x0 [ 554.940840][ T8] bigben 0003:146B:0902.0034: unknown main item tag 0x0 [ 554.982091][ T8] bigben 0003:146B:0902.0034: unknown main item tag 0x0 [ 555.006349][ T8] bigben 0003:146B:0902.0034: unknown main item tag 0x0 [ 555.016076][ T8] bigben 0003:146B:0902.0034: item fetching failed at offset 4/5 [ 555.030834][ T8] bigben 0003:146B:0902.0034: parse failed [ 555.036881][ T8] bigben: probe of 0003:146B:0902.0034 failed with error -22 [ 555.147448][ T8] usb 2-1: USB disconnect, device number 41 [ 555.202907][T17573] loop2: detected capacity change from 0 to 2048 [ 555.241884][T17573] NILFS (loop2): couldn't find nilfs on the device [ 555.318378][ T5789] udevd[5789]: incorrect nilfs2 checksum on /dev/loop2 [ 555.328271][T17561] loop4: detected capacity change from 0 to 32768 [ 555.557496][T17580] loop4: detected capacity change from 0 to 1024 [ 556.081706][T17582] loop2: detected capacity change from 0 to 32768 [ 556.169804][T17588] can0: slcan on ttyS3. [ 556.321668][T17587] can0 (unregistered): slcan off ttyS3. [ 556.824131][T17584] loop4: detected capacity change from 0 to 40427 [ 556.867564][T17605] loop2: detected capacity change from 0 to 512 [ 556.890350][T17584] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 556.908967][T17584] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 556.928773][T17608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5034'. [ 556.931973][T17584] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 556.992407][T17605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.048563][T17584] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 557.075433][T17605] ext4 filesystem being mounted at /1255/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 557.086353][T17584] F2FS-fs (loop4): Image doesn't support compression [ 557.107317][T17590] loop3: detected capacity change from 0 to 32768 [ 557.150765][T17584] F2FS-fs (loop4): invalid crc value [ 557.173787][T17590] JBD2: Ignoring recovery information on journal [ 557.218283][T17584] F2FS-fs (loop4): Found nat_bits in checkpoint [ 557.328109][T17590] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 557.404848][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.432668][T17590] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74) [ 557.452505][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.490480][T17584] F2FS-fs (loop4): Start checkpoint disabled! [ 557.521196][T17590] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 557.562520][T17590] OCFS2: File system is now read-only. [ 557.575816][T17590] (syz.3.5028,17590,1):ocfs2_search_one_group:1684 ERROR: status = -30 [ 557.588189][T17584] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 557.606352][T17584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 557.630530][T17590] (syz.3.5028,17590,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 557.639110][T17590] (syz.3.5028,17590,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 557.730040][T17590] (syz.3.5028,17590,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 557.755955][T17590] (syz.3.5028,17590,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 557.789221][T17590] (syz.3.5028,17590,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 557.822089][T17590] (syz.3.5028,17590,1):ocfs2_mknod:385 ERROR: status = -30 [ 557.845654][T17590] (syz.3.5028,17590,1):ocfs2_mknod:502 ERROR: status = -30 [ 557.869979][T17590] (syz.3.5028,17590,0):ocfs2_mkdir:659 ERROR: status = -30 [ 558.090957][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 558.440454][ T1188] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 558.674209][ T1188] usb 3-1: Using ep0 maxpacket: 32 [ 558.685774][ T1188] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 558.698709][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.727174][ T1188] usb 3-1: Product: syz [ 558.737297][ T1188] usb 3-1: Manufacturer: syz [ 558.747401][ T1188] usb 3-1: SerialNumber: syz [ 558.772743][ T1188] usb 3-1: config 0 descriptor?? [ 558.809363][ T1188] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 558.833085][ T1188] dvb-usb: bulk message failed: -22 (4/0) [ 558.838968][ T1188] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 558.869717][ T1188] dvb-usb: bulk message failed: -22 (5/0) [ 558.875498][ T1188] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 558.919919][ T965] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 558.923306][ T1188] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 558.960589][ T1188] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 558.968669][ T1188] usb 3-1: media controller created [ 559.031466][T17636] dvb-usb: bulk message failed: -22 (7/0) [ 559.037244][T17636] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 559.068027][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 559.081008][T17636] ttusb2: i2c transfer failed. [ 559.126950][ T1188] usb 3-1: selecting invalid altsetting 3 [ 559.136869][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.137158][ T1188] ttusb2: set interface to alts=3 failed [ 559.166065][T17663] team_slave_0: entered promiscuous mode [ 559.171805][T17663] team_slave_1: entered promiscuous mode [ 559.180670][ T965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.200353][T17663] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 559.217984][T17663] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 559.223528][ T965] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 559.259788][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.296125][ T965] usb 5-1: config 0 descriptor?? [ 559.319423][ T1188] DVB: Unable to find symbol tda10086_attach() [ 559.325841][ T1188] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 559.373043][ T1188] dvb-usb: bulk message failed: -22 (4/0) [ 559.378827][ T1188] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 559.412032][ T1188] dvb-usb: bulk message failed: -22 (5/0) [ 559.426427][ T1188] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 559.437620][ T1188] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 559.468573][ T1188] usb 3-1: USB disconnect, device number 34 [ 559.574149][ T1188] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 559.738017][ T965] wacom 0003:056A:030C.0035: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.4-1/input0 [ 559.939296][ T8] usb 5-1: USB disconnect, device number 20 [ 561.289981][T17718] loop4: detected capacity change from 0 to 2048 [ 561.358159][T17718] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 561.390099][T17718] System zones: 0-7 [ 561.398357][T17718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.509728][T17731] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5075'. [ 561.537097][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.731543][T17737] ip6gretap1: entered allmulticast mode [ 561.926577][T17745] loop4: detected capacity change from 0 to 512 [ 561.978934][T17745] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 1024: comm syz.4.5083: invalid block [ 561.996440][T17745] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5083: invalid indirect mapped block 1024 (level 0) [ 562.026952][T17747] loop2: detected capacity change from 0 to 4096 [ 562.045926][T17745] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.5083: bg 0: block 35: padding at end of block bitmap is not set [ 562.095338][T17745] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 562.145590][T17752] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 562.145852][T17745] EXT4-fs (loop4): 1 truncate cleaned up [ 562.166767][T17750] loop3: detected capacity change from 0 to 4096 [ 562.178842][T17745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.258184][T17750] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 562.320737][T17750] ntfs3: loop3: Failed to load $Extend (-22). [ 562.326888][T17750] ntfs3: loop3: Failed to initialize $Extend. [ 562.380448][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.882179][ T27] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 562.890485][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.897578][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.968241][T17772] loop2: detected capacity change from 0 to 1024 [ 563.081629][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.109561][ T27] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 563.139080][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.182684][ T27] usb 4-1: config 0 descriptor?? [ 563.626484][ T27] ath6kl: Unsupported hardware version: 0x0 [ 563.672298][ T27] ath6kl: Failed to init ath6kl core: -22 [ 563.720526][ T27] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 563.877169][ T27] usb 4-1: USB disconnect, device number 34 [ 564.055466][T17799] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5107'. [ 564.064982][T17799] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5107'. [ 564.076507][T17799] netlink: 'syz.1.5107': attribute type 6 has an invalid length. [ 564.089583][T17799] netlink: 'syz.1.5107': attribute type 6 has an invalid length. [ 564.499991][ T1188] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 564.714994][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.761413][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.782107][ T1188] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 564.818329][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.839781][ T1188] usb 2-1: config 0 descriptor?? [ 565.256547][T17809] loop4: detected capacity change from 0 to 32768 [ 565.288591][ T1188] pyra 0003:1E7D:2CF6.0036: unknown main item tag 0x2 [ 565.319406][T17809] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 565.325856][ T1188] pyra 0003:1E7D:2CF6.0036: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 565.434597][T17809] XFS (loop4): Ending clean mount [ 565.459825][ T27] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 565.478877][ T1188] pyra 0003:1E7D:2CF6.0036: couldn't init struct pyra_device [ 565.510008][ T1188] pyra 0003:1E7D:2CF6.0036: couldn't install mouse [ 565.521811][ T1188] pyra: probe of 0003:1E7D:2CF6.0036 failed with error -71 [ 565.561664][ T1188] usb 2-1: USB disconnect, device number 42 [ 565.626389][T17840] fido_id[17840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 565.668437][T11953] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 565.679913][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 565.686991][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.713376][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 565.755492][ T27] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 565.799836][ T27] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 565.808257][ T27] usb 3-1: Product: syz [ 565.821263][ T27] usb 3-1: Manufacturer: syz [ 565.825920][ T27] usb 3-1: SerialNumber: syz [ 565.904567][ T27] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input55 [ 566.005677][T17847] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5125'. [ 566.151366][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 566.151370][ T965] usb 3-1: USB disconnect, device number 35 [ 566.195180][ T965] appletouch 3-1:1.0: input: appletouch disconnected [ 566.760079][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5137'. [ 567.162069][T17885] loop2: detected capacity change from 0 to 2048 [ 567.201862][T17885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.229942][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 567.229956][ T28] audit: type=1326 audit(1778927707.454:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17854 comm="syz.4.5129" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf159ce59 code=0x7fc00000 [ 567.285149][T17885] ext4 filesystem being mounted at /1280/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 567.370298][T17885] EXT4-fs (loop2): resizing filesystem from 256 to 0 blocks [ 567.377664][T17885] EXT4-fs warning (device loop2): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 567.512926][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.641387][T17898] loop4: detected capacity change from 0 to 4096 [ 567.655140][T17898] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 567.718312][T17898] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 567.750616][T17898] ntfs3: loop4: Failed to load $Extend (-22). [ 567.763392][T17898] ntfs3: loop4: Failed to initialize $Extend. [ 568.108830][T17916] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5156'. [ 568.149787][T17914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5155'. [ 568.164481][T17916] vlan5: entered promiscuous mode [ 568.209527][T17914] netlink: 'syz.4.5155': attribute type 4 has an invalid length. [ 568.792163][T17939] loop2: detected capacity change from 0 to 4096 [ 568.853273][T17942] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 569.104144][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5171'. [ 569.173347][T17937] loop3: detected capacity change from 0 to 32768 [ 569.250675][T17937] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 569.279023][T17937] JBD2: Ignoring recovery information on journal [ 569.363029][T17955] loop4: detected capacity change from 0 to 256 [ 569.387535][T17937] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 569.807555][ T5771] ocfs2: Unmounting device (7,3) on (node local) [ 569.965616][T17969] netlink: 'syz.2.5181': attribute type 3 has an invalid length. [ 569.978815][T17969] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5181'. [ 570.493517][T17990] loop2: detected capacity change from 0 to 1024 [ 570.704784][ T49] hfsplus: b-tree write err: -5, ino 25 [ 570.736323][ T49] hfsplus: b-tree write err: -5, ino 4 [ 570.750297][ T49] hfsplus: b-tree write err: -5, ino 2 [ 570.921636][T18002] hugetlbfs: Bad value for 'uid' [ 570.999631][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 571.200480][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 571.211204][ T8] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 571.219347][ T8] usb 4-1: config 0 has no interface number 0 [ 571.243156][ T8] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 571.259764][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.267809][ T8] usb 4-1: Product: syz [ 571.280470][ T8] usb 4-1: Manufacturer: syz [ 571.285121][ T8] usb 4-1: SerialNumber: syz [ 571.322607][ T8] usb 4-1: config 0 descriptor?? [ 571.353481][ T8] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 571.550874][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 571.576814][ T8] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 571.873542][T18028] netlink: 'syz.4.5198': attribute type 11 has an invalid length. [ 572.071207][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 572.074149][ T1188] usb 4-1: USB disconnect, device number 35 [ 572.105811][ T1188] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 572.167365][ T1188] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 572.208173][ T1188] quatech2 4-1:0.51: device disconnected [ 572.513647][T18024] loop2: detected capacity change from 0 to 32768 [ 572.541456][T18024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5197 (18024) [ 572.613201][T18024] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.634805][T18024] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 572.664979][T18024] BTRFS info (device loop2): setting nodatasum [ 572.684989][T18024] BTRFS info (device loop2): force zlib compression, level 3 [ 572.701159][T18024] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 572.718919][T18024] BTRFS info (device loop2): use lzo compression, level 0 [ 572.753590][T18024] BTRFS info (device loop2): turning on flush-on-commit [ 572.769792][T18024] BTRFS info (device loop2): enabling auto defrag [ 572.785172][T18024] BTRFS info (device loop2): max_inline at 4096 [ 572.807695][T18024] BTRFS info (device loop2): using free space tree [ 572.905837][T18060] loop4: detected capacity change from 0 to 512 [ 573.003084][T18024] BTRFS info (device loop2): enabling ssd optimizations [ 573.030043][T18060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 573.047688][T18066] loop3: detected capacity change from 0 to 8192 [ 573.081763][T18060] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.5207: invalid indirect mapped block 4294967295 (level 0) [ 573.137707][T18066] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 573.150694][T18060] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.5207: invalid indirect mapped block 4294967295 (level 1) [ 573.163875][T18060] EXT4-fs (loop4): 1 orphan inode deleted [ 573.171254][T18060] EXT4-fs (loop4): 1 truncate cleaned up [ 573.178258][T18060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.260663][T18066] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 573.270545][T18066] REISERFS (device loop3): using ordered data mode [ 573.288811][T18066] reiserfs: using flush barriers [ 573.314530][T18066] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 573.353804][T18060] EXT4-fs error (device loop4): ext4_nfs_get_inode:1548: inode #15: comm syz.4.5207: iget: bad extra_isize 46 (inode size 256) [ 573.380213][T18066] REISERFS (device loop3): checking transaction log (loop3) [ 573.435743][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 573.565303][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.657967][T18066] REISERFS (device loop3): Using tea hash to sort names [ 573.669148][T18066] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 573.771006][T18077] tipc: Enabled bearer , priority 10 [ 573.986426][T18083] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5214'. [ 574.189682][T18089] netlink: 'syz.1.5218': attribute type 30 has an invalid length. [ 574.392733][T18097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5221'. [ 575.034655][T18114] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5230'. [ 575.101514][T18117] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5229'. [ 575.572072][T18134] program syz.3.5239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.826822][T18118] loop4: detected capacity change from 0 to 32768 [ 575.927074][T18118] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 575.985781][T18118] XFS (loop4): Ending clean mount [ 576.029972][ T28] audit: type=1800 audit(1778927716.274:212): pid=18118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5231" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 576.142661][T11953] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 576.469199][T18164] netlink: 'syz.1.5251': attribute type 10 has an invalid length. [ 576.510563][T18164] dummy0: entered allmulticast mode [ 576.533246][T18164] team0: Port device dummy0 added [ 576.551592][T18166] program syz.2.5252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 576.570330][T18167] netlink: 'syz.1.5251': attribute type 10 has an invalid length. [ 576.597303][T18167] dummy0: left allmulticast mode [ 576.626951][T18169] loop4: detected capacity change from 0 to 512 [ 576.646290][T18167] team0: Port device dummy0 removed [ 576.674392][T18167] dummy0: entered allmulticast mode [ 576.698532][T18167] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 576.711577][T18169] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 576.732012][T18169] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 576.765078][T18169] System zones: 0-1, 15-15, 18-18, 34-34 [ 576.783622][T18169] EXT4-fs (loop4): orphan cleanup on readonly fs [ 576.802498][T18169] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 576.869922][T18169] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 576.896518][T18177] loop2: detected capacity change from 0 to 2048 [ 576.917265][T18177] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 576.942204][T18169] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 576.962618][T18169] EXT4-fs (loop4): 1 truncate cleaned up [ 576.970349][T18177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 576.979848][T18169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 577.048810][T18169] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 577.177475][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.327895][T18185] loop4: detected capacity change from 0 to 512 [ 577.348675][T18185] EXT4-fs (loop4): Test dummy encryption mode enabled [ 577.377188][T18185] EXT4-fs error (device loop4): ext4_iget_extra_inode:4739: inode #15: comm syz.4.5259: corrupted in-inode xattr: invalid ea_ino [ 577.389157][T18185] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.5259: couldn't read orphan inode 15 (err -117) [ 577.448301][T18185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 577.548946][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.446696][T18215] loop4: detected capacity change from 0 to 1024 [ 578.666881][T18217] loop2: detected capacity change from 0 to 4096 [ 579.378708][T18229] loop4: detected capacity change from 0 to 164 [ 579.424356][T18213] loop3: detected capacity change from 0 to 32768 [ 579.436602][T18229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 579.460240][T18213] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.5271 (18213) [ 579.516667][T18234] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 579.583767][T18213] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 579.594771][T18234] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 579.594966][T18234] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 579.664977][T18234] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 579.672751][T18213] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 579.697592][T18213] BTRFS info (device loop3): use zlib compression, level 3 [ 579.709886][T18234] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 579.739595][T18213] BTRFS info (device loop3): turning on async discard [ 579.746696][T18213] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 579.757606][T18234] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 579.765602][T18234] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 579.779695][T18234] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 579.799875][T18213] BTRFS info (device loop3): trying to use backup root at mount time [ 579.821681][T18234] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 579.828293][T18234] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 579.839635][T18213] BTRFS info (device loop3): enabling auto defrag [ 579.846102][T18213] BTRFS info (device loop3): disabling tree log [ 579.857786][T18213] BTRFS info (device loop3): using free space tree [ 579.864744][T18234] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 579.877702][T18234] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 579.886443][T18234] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 579.903088][T18234] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 579.916048][T18234] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 579.934793][T18234] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 579.985021][T18234] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 580.001433][T18234] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 580.053489][ T1097] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 580.074897][T18234] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 580.089871][T18234] comedi comedi3: 8255: I/O port conflict (0x1000,4) [ 580.110500][T18234] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 580.146053][T18213] BTRFS error (device loop3): failed to load root extent [ 580.161774][T18234] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 580.169686][T18213] BTRFS warning (device loop3): try to load backup roots slot 1 [ 580.199764][T18234] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4) [ 580.210839][ T980] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 580.257474][T18213] BTRFS warning (device loop3): couldn't read tree root [ 580.299655][T18213] BTRFS warning (device loop3): try to load backup roots slot 2 [ 580.309071][ T49] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 580.339793][T18213] BTRFS warning (device loop3): couldn't read tree root [ 580.346816][T18213] BTRFS warning (device loop3): try to load backup roots slot 3 [ 580.390298][T18213] BTRFS info (device loop3): enabling ssd optimizations [ 580.423273][T18213] BTRFS info (device loop3): rebuilding free space tree [ 580.460175][T18213] BTRFS info (device loop3): checking UUID tree [ 580.629934][ T5771] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 580.973898][T18256] loop4: detected capacity change from 0 to 32768 [ 581.012191][T18256] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5285 (18256) [ 581.099772][T18256] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 581.121914][T18256] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 581.156873][T18256] BTRFS info (device loop4): setting nodatasum [ 581.173931][T18256] BTRFS info (device loop4): force zlib compression, level 3 [ 581.213396][T18256] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 581.243172][T18256] BTRFS info (device loop4): use lzo compression, level 0 [ 581.256785][T18256] BTRFS info (device loop4): turning on flush-on-commit [ 581.289361][T18256] BTRFS info (device loop4): enabling auto defrag [ 581.313065][T18256] BTRFS info (device loop4): max_inline at 4096 [ 581.319405][T18256] BTRFS info (device loop4): using free space tree [ 581.430910][T18275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.628830][T18256] BTRFS info (device loop4): enabling ssd optimizations [ 581.718297][ T28] audit: type=1326 audit(1778927721.944:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 581.811690][ T28] audit: type=1326 audit(1778927721.944:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 581.858850][ T28] audit: type=1326 audit(1778927721.954:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 581.906120][ T28] audit: type=1326 audit(1778927721.954:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 581.979150][T11953] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 582.004841][ T28] audit: type=1326 audit(1778927721.954:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 582.080848][ T28] audit: type=1326 audit(1778927721.954:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 582.154285][ T28] audit: type=1326 audit(1778927721.984:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 582.227560][ T28] audit: type=1326 audit(1778927721.984:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 582.313377][ T28] audit: type=1326 audit(1778927721.984:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 582.377641][ T28] audit: type=1326 audit(1778927721.984:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18301 comm="syz.3.5298" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f7b0c19ce59 code=0x7ffc0000 [ 582.406696][T18314] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 582.744913][T18322] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5316'. [ 582.890488][T18326] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 583.051830][T18332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5312'. [ 583.137595][T18334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5313'. [ 583.211272][T18334] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5313'. [ 583.229876][T18334] tipc: Started in network mode [ 583.244973][T18334] tipc: Node identity ffffffff, cluster identity 7 [ 583.259694][T18334] tipc: Node number set to 4294967295 [ 583.276782][T18338] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 583.491939][T18325] loop2: detected capacity change from 0 to 32768 [ 583.589804][T18325] JBD2: Ignoring recovery information on journal [ 583.773005][T18325] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 584.156876][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 584.315130][T18361] loop3: detected capacity change from 0 to 128 [ 584.328368][T18362] loop4: detected capacity change from 0 to 512 [ 584.344985][T18361] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 584.374716][T18362] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 584.457664][T18362] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5328: invalid indirect mapped block 9 (level 0) [ 584.477522][T18362] EXT4-fs (loop4): 1 truncate cleaned up [ 584.525442][T18362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.611319][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.798313][T18372] netlink: 268 bytes leftover after parsing attributes in process `syz.4.5331'. [ 584.821663][ T1188] kernel write not supported for file /dsp (pid: 1188 comm: kworker/1:2) [ 584.830707][T18372] netlink: 136 bytes leftover after parsing attributes in process `syz.4.5331'. [ 584.859960][T18372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5331'. [ 584.923625][T18376] netlink: 'syz.3.5332': attribute type 10 has an invalid length. [ 585.039326][T18376] dummy0: entered allmulticast mode [ 585.056714][T18376] dummy0: entered promiscuous mode [ 585.073683][T18376] team0: Port device dummy0 added [ 585.099911][T18378] netlink: 'syz.3.5332': attribute type 10 has an invalid length. [ 585.170717][T18378] dummy0: left allmulticast mode [ 585.220186][T18378] dummy0: left promiscuous mode [ 585.264518][T18378] team0: Port device dummy0 removed [ 585.305792][T18378] dummy0: entered allmulticast mode [ 585.321770][T18378] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 585.456048][T18393] loop4: detected capacity change from 0 to 512 [ 585.495843][T18393] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 585.570258][T18393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 585.578353][T18393] System zones: 1-12 [ 585.607633][T18393] EXT4-fs (loop4): orphan cleanup on readonly fs [ 585.615074][T18393] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5339: invalid indirect mapped block 12 (level 1) [ 585.625613][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5343'. [ 585.645946][T18393] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.5339: invalid indirect mapped block 2 (level 2) [ 585.682116][T18393] EXT4-fs (loop4): 1 truncate cleaned up [ 585.689089][T18393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 585.702747][T18400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5343'. [ 585.712272][T18400] netlink: 'syz.3.5343': attribute type 15 has an invalid length. [ 585.896266][T18406] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 585.896266][T18406] program syz.3.5346 not setting count and/or reply_len properly [ 585.918999][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 586.106166][T18412] loop2: detected capacity change from 0 to 512 [ 586.136255][T18412] EXT4-fs: Ignoring removed nobh option [ 586.232872][T18412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.254976][T18421] binder: 18417:18421 ioctl c0306201 200000000080 returned -22 [ 586.274863][T18412] ext4 filesystem being mounted at /1337/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 586.544743][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.162624][T18450] loop4: detected capacity change from 0 to 4096 [ 587.205472][T18454] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 587.321870][T18433] loop3: detected capacity change from 0 to 32768 [ 587.340201][T18458] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 587.346721][T18458] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 587.373568][T18458] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 587.383628][T18433] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.5357 (18433) [ 587.405870][T18458] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 587.441112][T18458] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 587.451354][T18433] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 587.465849][T18458] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 587.506255][T18458] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 587.510063][T18433] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 587.545725][T18433] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 587.561059][T18460] loop4: detected capacity change from 0 to 64 [ 587.586248][T18433] BTRFS info (device loop3): use zstd compression, level 3 [ 587.601901][T18433] BTRFS info (device loop3): using free space tree [ 587.776996][T18433] BTRFS info (device loop3): enabling ssd optimizations [ 587.825085][T18433] BTRFS info (device loop3): auto enabling async discard [ 587.834138][T18482] netlink: 532 bytes leftover after parsing attributes in process `syz.2.5373'. [ 587.883111][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 587.883126][ T28] audit: type=1326 audit(1778927728.114:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.1.5372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107019ce59 code=0x7ffc0000 [ 588.053067][ T28] audit: type=1326 audit(1778927728.114:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.1.5372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107019ce59 code=0x7ffc0000 [ 588.170150][ T28] audit: type=1326 audit(1778927728.114:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.1.5372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f107019ce59 code=0x7ffc0000 [ 588.224152][ T28] audit: type=1326 audit(1778927728.114:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.1.5372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107019ce59 code=0x7ffc0000 [ 588.273481][ T28] audit: type=1326 audit(1778927728.114:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18476 comm="syz.1.5372" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f107019ce59 code=0x7ffc0000 [ 588.347862][ T5771] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 588.490323][ T27] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 588.502978][ T1188] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 588.557308][T18497] loop3: detected capacity change from 0 to 512 [ 588.701853][ T1188] usb 5-1: Using ep0 maxpacket: 8 [ 588.708119][T18497] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.5378: corrupted inode contents [ 588.738457][ T27] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 588.748014][ T27] usb 3-1: config 0 has no interface number 0 [ 588.765197][ T27] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 588.780885][T18497] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #16: comm syz.3.5378: mark_inode_dirty error [ 588.792467][ T1188] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 588.817622][ T1188] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 588.833181][T18497] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.5378: corrupted inode contents [ 588.847697][ T27] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 588.859990][ T1188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.868041][ T1188] usb 5-1: Product: syz [ 588.877733][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.888136][ T1188] usb 5-1: Manufacturer: syz [ 588.893165][ T27] usb 3-1: Product: syz [ 588.897370][ T27] usb 3-1: Manufacturer: syz [ 588.903264][T18497] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.5378: mark_inode_dirty error [ 588.919682][ T1188] usb 5-1: SerialNumber: syz [ 588.938372][ T1188] usb 5-1: config 0 descriptor?? [ 588.943839][ T27] usb 3-1: SerialNumber: syz [ 588.963895][ T1188] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 588.974217][T18497] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.5378: corrupted inode contents [ 588.990932][ T27] usb 3-1: config 0 descriptor?? [ 589.009596][ T1188] usb 5-1: setting power ON [ 589.014236][ T1188] dvb-usb: bulk message failed: -22 (2/0) [ 589.034290][ T27] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 589.047057][ T1188] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 589.056675][T18497] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 589.087858][ T1188] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 589.096947][T18497] EXT4-fs error (device loop3): ext4_do_update_inode:5255: inode #16: comm syz.3.5378: corrupted inode contents [ 589.124582][ T1188] usb 5-1: media controller created [ 589.137426][T18497] EXT4-fs error (device loop3): ext4_truncate:4301: inode #16: comm syz.3.5378: mark_inode_dirty error [ 589.180169][T18497] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 589.187980][T18490] dvb-usb: bulk message failed: -22 (3/0) [ 589.195363][T18490] dvb-usb: bulk message failed: -22 (33/0) [ 589.209728][T18497] EXT4-fs (loop3): 1 truncate cleaned up [ 589.220049][ T1188] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 589.231690][ T980] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 589.244932][ T980] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 1 [ 589.257311][T18497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.278783][ T1188] usb 5-1: selecting invalid altsetting 6 [ 589.289640][ T8] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 589.294450][ T1188] usb 5-1: digital interface selection failed (-22) [ 589.305020][ T1188] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 589.330745][T18497] ext4 filesystem being mounted at /1340/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.344518][ T1188] usb 5-1: setting power OFF [ 589.371172][ T27] usb 3-1: USB disconnect, device number 36 [ 589.379027][ T1188] dvb-usb: bulk message failed: -22 (2/0) [ 589.386022][ T27] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 589.397394][ T1188] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 589.417285][ T1188] (NULL device *): no alternate interface [ 589.494994][ T1188] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 589.514265][ T8] usb 2-1: unable to get BOS descriptor or descriptor too short [ 589.533057][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.535560][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.556442][ T8] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 589.566702][ T8] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 589.577691][ T1188] usb 5-1: USB disconnect, device number 21 [ 589.595797][ T8] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice= 0.40 [ 589.636039][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.648365][ T8] usb 2-1: Product: syz [ 589.696663][ T8] usb 2-1: Manufacturer: syz [ 589.717002][ T8] usb 2-1: SerialNumber: syz [ 589.994280][ T8] usb 2-1: Can't get UAC3 power state for id 10 [ 590.004354][ T8] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 590.022649][ T8] usb 2-1: 2:0: cannot get min/max values for control 2 (id 2) [ 590.154504][ T8] usb 2-1: USB disconnect, device number 43 [ 590.373180][T16558] udevd[16558]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.478563][T18514] loop4: detected capacity change from 0 to 512 [ 590.497061][T18514] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 590.516731][T18514] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.5386: bad orphan inode 131083 [ 590.529122][T18514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.556985][T18514] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 12: comm syz.4.5386: lblock 0 mapped to illegal pblock 12 (length 1) [ 590.573588][T18514] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz.4.5386: error -117 reading directory block [ 590.663656][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.786588][T18519] loop4: detected capacity change from 0 to 64 [ 591.019387][T18525] loop2: detected capacity change from 0 to 1024 [ 591.027248][T18525] EXT4-fs: Ignoring removed nomblk_io_submit option [ 591.051964][T18525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 591.104246][T18525] EXT4-fs (loop2): can't mount with commit=4, fs mounted w/o journal [ 591.392279][T18538] loop4: detected capacity change from 0 to 64 [ 591.437727][ T28] audit: type=1800 audit(1778927731.674:234): pid=18538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5397" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 591.466471][T18538] hfs: request for non-existent node -16318464 in B*Tree [ 591.485810][T18538] hfs: request for non-existent node -16318464 in B*Tree [ 591.543748][ T59] hfs: request for non-existent node -16318464 in B*Tree [ 591.561489][ T59] hfs: request for non-existent node -16318464 in B*Tree [ 591.942085][T18554] loop4: detected capacity change from 0 to 1024 [ 592.144889][T18560] loop3: detected capacity change from 0 to 2048 [ 592.201846][T18560] UDF-fs: bad mount option "n" or missing value [ 592.286487][ T8019] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 592.476547][T18568] loop4: detected capacity change from 0 to 512 [ 592.564189][T18568] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.5411: corrupted inode contents [ 592.603008][T18568] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #16: comm syz.4.5411: mark_inode_dirty error [ 592.649792][T18568] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.5411: corrupted inode contents [ 592.709567][T18568] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.5411: mark_inode_dirty error [ 592.742526][T18568] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.5411: corrupted inode contents [ 592.775209][T18568] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 592.792124][T18568] EXT4-fs error (device loop4): ext4_do_update_inode:5255: inode #16: comm syz.4.5411: corrupted inode contents [ 592.842276][T18568] EXT4-fs error (device loop4): ext4_truncate:4301: inode #16: comm syz.4.5411: mark_inode_dirty error [ 592.879518][T18568] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 592.907375][T18577] loop3: detected capacity change from 0 to 4096 [ 592.950535][T18577] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 592.964617][T18568] EXT4-fs (loop4): 1 truncate cleaned up [ 592.986493][T18568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.996252][ T1097] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 593.038936][T18568] ext4 filesystem being mounted at /689/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.046573][ T1097] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 593.085626][T18577] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 593.153119][T18536] loop2: detected capacity change from 0 to 65536 [ 593.278388][ T5771] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 593.286454][T18536] XFS (loop2): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 593.303325][ T5771] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 593.341877][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.469218][T18536] XFS (loop2): Ending clean mount [ 593.787519][T18596] loop3: detected capacity change from 0 to 128 [ 593.883258][T18596] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 593.893880][T18596] FAT-fs (loop3): Filesystem has been set read-only [ 594.023591][T18600] macvtap1: entered promiscuous mode [ 594.037203][T18602] netlink: 'syz.4.5423': attribute type 3 has an invalid length. [ 594.045286][ T5772] XFS (loop2): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 594.430023][T18615] loop3: detected capacity change from 0 to 256 [ 594.441235][T18615] exfat: Deprecated parameter 'utf8' [ 594.446702][T18615] exfat: Deprecated parameter 'utf8' [ 594.536204][T18615] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18acb235, utbl_chksum : 0xe619d30d) [ 594.856961][T18629] loop3: detected capacity change from 0 to 1024 [ 594.894211][T18629] hfsplus: bad catalog entry type [ 594.985687][ T59] hfsplus: b-tree write err: -5, ino 25 [ 594.993966][ T59] hfsplus: b-tree write err: -5, ino 4 [ 595.011490][ T59] hfsplus: b-tree write err: -5, ino 2 [ 595.017064][ T28] audit: type=1326 audit(1778927735.254:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.5438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.073654][ T28] audit: type=1326 audit(1778927735.254:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.5438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.149944][ T28] audit: type=1326 audit(1778927735.304:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.5438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.205878][ T28] audit: type=1326 audit(1778927735.304:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.5438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.243147][ T28] audit: type=1326 audit(1778927735.304:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.5438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.273885][ T28] audit: type=1326 audit(1778927735.304:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.5438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.324337][T18639] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 786440, id = 0 [ 595.348816][ T28] audit: type=1326 audit(1778927735.304:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.5438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.389864][T18637] IPVS: stopping backup sync thread 18639 ... [ 595.445433][ T28] audit: type=1326 audit(1778927735.304:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18632 comm="syz.4.5438" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.501578][ T28] audit: type=1326 audit(1778927735.624:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18638 comm="syz.4.5441" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdaf159ce59 code=0x7ffc0000 [ 595.643087][T18642] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5442'. [ 595.705911][T18646] loop4: detected capacity change from 0 to 1024 [ 595.740594][T18646] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 595.864154][T18646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.080563][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.108590][T18655] loop2: detected capacity change from 0 to 8192 [ 596.140417][T18655] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 596.160626][T18655] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 596.170303][T18655] REISERFS (device loop2): using ordered data mode [ 596.177870][T18655] reiserfs: using flush barriers [ 596.188039][T18655] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 596.205169][T18655] REISERFS (device loop2): checking transaction log (loop2) [ 596.232108][T18655] REISERFS (device loop2): Using r5 hash to sort names [ 596.246057][T18655] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 596.540194][T18668] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 596.551684][T18668] @0Ù: renamed from bond_slave_1 (while UP) [ 596.745477][T18671] loop2: detected capacity change from 0 to 2048 [ 596.809969][T18671] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 596.828944][T18671] NILFS (loop2): mounting unchecked fs [ 596.862045][T18671] NILFS (loop2): recovery complete [ 596.887931][T18673] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 597.124183][T18678] loop4: detected capacity change from 0 to 512 [ 597.236592][T18678] EXT4-fs error (device loop4): ext4_orphan_get:1430: comm syz.4.5455: bad orphan inode 11862016 [ 597.275644][T18678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 597.285866][T18683] tipc: Enabled bearer , priority 10 [ 597.323338][T18678] ext4 filesystem being mounted at /702/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 597.392013][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 597.576663][T18693] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 597.670038][T18697] tmpfs: Cannot disable swap on remount [ 598.885728][T18755] loop2: detected capacity change from 0 to 512 [ 598.919575][T18755] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 598.953834][T18755] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.5491: bg 0: block 104: invalid block bitmap [ 598.982632][T18755] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 599.020018][ T5839] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 599.035569][T18755] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5491: invalid indirect mapped block 1 (level 1) [ 599.053995][T18755] EXT4-fs (loop2): 1 truncate cleaned up [ 599.063694][T18755] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.234681][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.237577][ T5839] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 599.280083][ T5839] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 599.315211][ T5839] usb 4-1: New USB device found, idVendor=813a, idProduct=22fe, bcdDevice=89.9c [ 599.345166][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.369606][ T5839] usb 4-1: Product: syz [ 599.373822][ T5839] usb 4-1: Manufacturer: syz [ 599.378480][ T5839] usb 4-1: SerialNumber: syz [ 599.633912][T18751] loop4: detected capacity change from 0 to 32768 [ 599.684995][ T1188] usb 4-1: USB disconnect, device number 36 [ 599.707509][T18751] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 599.771350][T18751] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 600.056662][T18751] XFS (loop4): Ending clean mount [ 600.079404][T18751] XFS (loop4): Quotacheck needed: Please wait. [ 600.109315][T18767] loop2: detected capacity change from 0 to 32768 [ 600.182456][T18751] XFS (loop4): Quotacheck: Done. [ 600.230371][T18767] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 600.230371][T18767] [ 600.555248][T18776] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 600.582365][T18776] @0Ù: renamed from bond_slave_1 (while UP) [ 600.673551][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.771249][T11953] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 600.943137][T18783] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 600.950251][T18783] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 601.002898][T18783] vhci_hcd vhci_hcd.0: Device attached [ 601.259548][ T5839] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 601.270249][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 601.308952][T18795] loop2: detected capacity change from 0 to 512 [ 601.338831][T18795] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.5506: iget: bad i_size value: 38620345925642 [ 601.357237][T18795] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.5506: couldn't read orphan inode 15 (err -117) [ 601.379031][T18795] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.469520][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 601.495052][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 601.537274][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 601.548000][T18787] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 601.566332][ T8] usb 4-1: no configurations [ 601.601565][ T8] usb 4-1: can't read configurations, error -22 [ 601.632747][ T49] vhci_hcd: stop threads [ 601.641660][ T49] vhci_hcd: release socket [ 601.648302][ T49] vhci_hcd: disconnect device [ 601.694249][T18799] loop2: detected capacity change from 0 to 128 [ 601.726541][T18799] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 601.747992][T18799] ext4 filesystem being mounted at /1367/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 601.816090][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 602.262556][T18812] loop3: detected capacity change from 0 to 1024 [ 602.396157][T18812] hfsplus: catalog searching failed [ 603.012229][T18810] loop2: detected capacity change from 0 to 32768 [ 603.053715][T18810] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 603.111106][T18810] XFS (loop2): Ending clean mount [ 603.261306][ T5772] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 603.435845][T18835] nbd: must specify a device to reconfigure [ 603.671367][T18823] loop3: detected capacity change from 0 to 40427 [ 603.712859][T18823] F2FS-fs (loop3): invalid crc value [ 603.744524][T18823] F2FS-fs (loop3): Found nat_bits in checkpoint [ 603.913752][T18823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 604.127837][ T5771] syz-executor: attempt to access beyond end of device [ 604.127837][ T5771] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 604.172959][ T5771] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 604.457977][T18850] loop2: detected capacity change from 0 to 32768 [ 604.509384][T18850] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 604.707568][T18850] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 604.758724][T18850] XFS (loop2): Starting recovery (logdev: internal) [ 604.850096][T18850] XFS (loop2): Ending recovery (logdev: internal) [ 605.044659][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 605.080028][ T1188] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 605.283749][ T1188] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 605.318854][ T1188] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.348754][ T1188] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 605.389651][ T1188] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 605.398676][ T1188] usb 5-1: Manufacturer: syz [ 605.425345][ T1188] usb 5-1: config 0 descriptor?? [ 605.589622][ T1188] rc_core: IR keymap rc-hauppauge not found [ 605.605825][ T1188] Registered IR keymap rc-empty [ 605.632866][ T1188] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 605.669100][ T1188] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input57 [ 605.699678][ T8] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 605.911269][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 605.946922][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 605.976090][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 606.016795][ T8] usb 4-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 606.029941][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.042748][ T8] usb 4-1: config 0 descriptor?? [ 606.048673][T18882] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 606.177382][ T5773] usb 5-1: USB disconnect, device number 22 [ 606.207730][T18901] mmap: syz.1.5544 (18901): VmData 37584896 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 606.400000][ T5839] vhci_hcd: vhci_device speed not set [ 606.471279][ T8] elecom 0003:056E:00FC.0037: unknown main item tag 0x3 [ 606.478351][ T8] elecom 0003:056E:00FC.0037: unknown global tag 0xe [ 606.485720][ T8] elecom 0003:056E:00FC.0037: item 0 1 1 14 parsing failed [ 606.510376][ T8] elecom: probe of 0003:056E:00FC.0037 failed with error -22 [ 606.678586][ T1188] usb 4-1: USB disconnect, device number 39 [ 606.790336][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5553'. [ 606.939891][T18928] tmpfs: Bad value for 'nr_inodes' [ 607.520077][ T1188] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 607.759518][ T1188] usb 3-1: Using ep0 maxpacket: 16 [ 607.772615][ T1188] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 607.806212][ T1188] usb 3-1: config 127 has no interface number 0 [ 607.814462][ T1188] usb 3-1: config 127 interface 124 has no altsetting 0 [ 607.830578][ T1188] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 607.857179][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.869960][ T1188] usb 3-1: Product: syz [ 607.874174][ T1188] usb 3-1: Manufacturer: syz [ 607.878800][ T1188] usb 3-1: SerialNumber: syz [ 608.570024][ T5839] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 608.675653][T18982] tmpfs: Cannot change global quota limit on remount [ 608.769538][ T5839] usb 2-1: Using ep0 maxpacket: 16 [ 608.777342][ T5839] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.785874][ T5839] usb 2-1: config 0 has no interface number 0 [ 608.794943][ T5839] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 608.806407][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.814025][ T1188] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 608.823135][ T5839] usb 2-1: Product: syz [ 608.823167][ T5839] usb 2-1: Manufacturer: syz [ 608.823183][ T5839] usb 2-1: SerialNumber: syz [ 608.841730][ T5839] usb 2-1: config 0 descriptor?? [ 608.854137][ T5839] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 609.019816][ T5815] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 609.230071][ T5815] usb 5-1: Using ep0 maxpacket: 8 [ 609.237538][ T5815] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 609.246373][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 609.256555][ T5815] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 609.273556][ T1188] usb 3-1: failed to restore interface 124 altsetting 11 (error=-71) [ 609.284225][ T5815] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 609.308392][ T5815] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.331460][ T5815] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 609.333219][ T1188] usb 3-1: USB disconnect, device number 37 [ 609.359885][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.402261][ T5815] usbtmc 5-1:16.0: bulk endpoints not found [ 609.446329][T18986] loop3: detected capacity change from 0 to 512 [ 609.455615][T18986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 609.466883][T18986] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 609.470485][ T5839] gspca_spca1528: reg_w err -71 [ 609.494632][T18986] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 609.530624][ T5839] spca1528: probe of 2-1:0.1 failed with error -71 [ 609.542990][T18986] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4059: comm syz.3.5579: Allocating blocks 41-42 which overlap fs metadata [ 609.567064][ T5839] usb 2-1: USB disconnect, device number 44 [ 609.577167][ T8019] udevd[8019]: setting mode of /dev/bus/usb/002/044 to 020664 failed: No such file or directory [ 609.588230][ T8019] udevd[8019]: setting owner of /dev/bus/usb/002/044 to uid=0, gid=0 failed: No such file or directory [ 609.621429][T18986] EXT4-fs (loop3): Remounting filesystem read-only [ 609.628119][T18986] __quota_error: 7 callbacks suppressed [ 609.628133][T18986] Quota error (device loop3): write_blk: dquota write failed [ 609.631966][ T5815] usb 5-1: USB disconnect, device number 23 [ 609.659316][T18986] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 609.668817][T18986] Quota error (device loop3): write_blk: dquota write failed [ 609.682626][T18986] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 609.694186][T18986] EXT4-fs (loop3): 1 truncate cleaned up [ 609.703797][T18986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 609.775628][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.139626][ T5839] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 610.333221][ T5839] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 610.351458][ T5839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 610.377996][ T5839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 610.421876][ T5839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.457337][ T5839] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=61.23 [ 610.479594][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.497945][ T5839] usbtmc 5-1:16.0: bulk endpoints not found [ 610.531785][ T5839] ati_remote 5-1:16.0: ati_remote_probe: Unexpected endpoint_in [ 610.704998][T19019] loop3: detected capacity change from 0 to 256 [ 610.714557][T19018] loop2: detected capacity change from 0 to 16 [ 610.755363][T19018] erofs: (device loop2): mounted with root inode @ nid 36. [ 610.791809][ T5839] usb 5-1: USB disconnect, device number 24 [ 610.799325][ T28] audit: type=1800 audit(1778927751.034:251): pid=19018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5594" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 610.926641][ T5771] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 610.940168][ T5771] FAT-fs (loop3): Filesystem has been set read-only [ 610.993472][ T5771] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 611.276559][ C0] vkms_vblank_simulate: vblank timer overrun [ 611.847590][T19028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5601'. [ 611.874629][T19030] loop2: detected capacity change from 0 to 2048 [ 611.936236][T19032] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 612.623005][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 612.634081][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 612.642566][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 612.653462][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 612.681587][ T5787] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 612.688995][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 612.741285][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 612.760596][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 612.769690][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 612.777773][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 612.810711][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 612.825995][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 612.890237][T19060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5613'. [ 613.509782][T19053] chnl_net:caif_netlink_parms(): no params data found [ 613.728712][T19092] usb usb8: usbfs: process 19092 (syz.1.5627) did not claim interface 0 before use [ 613.771179][T19053] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.778372][T19053] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.820701][T19053] bridge_slave_0: entered allmulticast mode [ 613.839890][T19053] bridge_slave_0: entered promiscuous mode [ 613.858973][T19053] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.873929][T19053] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.891025][T19053] bridge_slave_1: entered allmulticast mode [ 613.917381][T19053] bridge_slave_1: entered promiscuous mode [ 613.919091][T19070] loop2: detected capacity change from 0 to 40427 [ 613.995700][T19070] F2FS-fs (loop2): Found nat_bits in checkpoint [ 614.037522][T19053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.093563][T19070] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 614.105241][T19053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.215126][T19053] team0: Port device team_slave_0 added [ 614.249999][T19053] team0: Port device team_slave_1 added [ 614.324905][T19053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.335157][T19053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.337168][T19103] netlink: 436 bytes leftover after parsing attributes in process `syz.1.5631'. [ 614.390227][T19103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5631'. [ 614.409572][T19053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.482114][T19053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.489126][T19053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.562100][T19053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.653088][T19094] loop4: detected capacity change from 0 to 32768 [ 614.672793][T19053] hsr_slave_0: entered promiscuous mode [ 614.704215][T19053] hsr_slave_1: entered promiscuous mode [ 614.721768][T19053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.725126][T19094] JBD2: Ignoring recovery information on journal [ 614.740192][T19053] Cannot create hsr debugfs directory [ 614.813831][T19094] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 614.890201][ T5787] Bluetooth: hci2: command tx timeout [ 614.953023][ T28] audit: type=1800 audit(1778927755.194:252): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5628" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 615.150275][T11953] ocfs2: Unmounting device (7,4) on (node local) [ 615.480617][T19053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 615.513245][T19053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 615.552335][T19053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 615.577649][T19053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 615.650730][ T1188] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 615.816617][T19053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.857701][T19053] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.875877][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 615.902257][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.909533][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.910310][ T1188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 615.928445][ T1188] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 615.959281][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.966258][ T1188] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 615.966345][ T1188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.978407][ T1188] usb 3-1: config 0 descriptor?? [ 615.983626][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.000340][T19122] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 616.130905][T19124] loop4: detected capacity change from 0 to 32768 [ 616.157737][T19124] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5639 (19124) [ 616.204607][T19124] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 616.218206][T19124] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 616.242586][T19124] BTRFS info (device loop4): setting nodatasum [ 616.251315][T19124] BTRFS info (device loop4): enabling auto defrag [ 616.259184][T19124] BTRFS info (device loop4): disabling tree log [ 616.270978][T19124] BTRFS info (device loop4): using free space tree [ 616.400542][T19124] BTRFS info (device loop4): enabling ssd optimizations [ 616.408371][T19124] BTRFS info (device loop4): auto enabling async discard [ 616.447429][ T1188] gt683r_led 0003:1770:FF00.0038: collection stack underflow [ 616.459921][ T1188] gt683r_led 0003:1770:FF00.0038: item 0 2 0 12 parsing failed [ 616.468289][ T1188] gt683r_led 0003:1770:FF00.0038: hid parsing failed [ 616.476356][ T1188] gt683r_led: probe of 0003:1770:FF00.0038 failed with error -22 [ 616.590797][T11953] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 616.694117][T19053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.726881][ T5773] usb 3-1: USB disconnect, device number 38 [ 616.979261][ T5787] Bluetooth: hci2: command tx timeout [ 617.120177][ T5839] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 617.321277][ T5839] usb 5-1: Using ep0 maxpacket: 16 [ 617.341389][ T5839] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.379628][ T5839] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.411660][T19053] veth0_vlan: entered promiscuous mode [ 617.424181][ T5839] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 617.453725][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.477588][T19053] veth1_vlan: entered promiscuous mode [ 617.599267][T19053] veth0_macvtap: entered promiscuous mode [ 617.654608][T19053] veth1_macvtap: entered promiscuous mode [ 617.676574][T19173] loop2: detected capacity change from 0 to 256 [ 617.690909][T19173] exfat: Deprecated parameter 'utf8' [ 617.720523][T19173] exfat: Deprecated parameter 'namecase' [ 617.726321][T19173] exfat: Deprecated parameter 'namecase' [ 617.769868][T19173] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 617.786693][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.799900][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.810948][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.822859][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.840085][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.859561][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.878750][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.907194][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.942484][ T5839] mcp2221 0003:04D8:00DD.0039: unexpected long global item [ 617.949857][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.964993][ T5839] mcp2221 0003:04D8:00DD.0039: can't parse reports [ 617.972047][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.983302][ T5839] mcp2221: probe of 0003:04D8:00DD.0039 failed with error -22 [ 617.994631][T19053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 618.051798][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.077607][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.093623][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.104531][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.115231][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.133695][ T8] usb 5-1: USB disconnect, device number 25 [ 618.137384][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.154568][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.165812][T19176] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 618.174745][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.188922][T19053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 618.201424][T19053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.214323][T19053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 618.232090][T19053] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.249508][T19053] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.258259][T19053] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.273580][T19053] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.379921][T19176] usb 2-1: Using ep0 maxpacket: 8 [ 618.399865][T19176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.430686][T19176] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.455209][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.461092][T19176] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 618.489922][T19176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.502454][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.519033][T19176] usb 2-1: config 0 descriptor?? [ 618.583784][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.593730][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.981038][T19176] logitech 0003:046D:C294.003A: unknown main item tag 0x0 [ 618.995038][T19176] logitech 0003:046D:C294.003A: unknown main item tag 0x4 [ 619.019610][T19176] logitech 0003:046D:C294.003A: unknown main item tag 0xd [ 619.026807][T19176] logitech 0003:046D:C294.003A: item fetching failed at offset 38/41 [ 619.040525][ T5787] Bluetooth: hci2: command tx timeout [ 619.060640][T19176] logitech 0003:046D:C294.003A: parse failed [ 619.069757][T19176] logitech: probe of 0003:046D:C294.003A failed with error -22 [ 619.252309][T19176] usb 2-1: USB disconnect, device number 45 [ 619.358581][T19181] loop2: detected capacity change from 0 to 40427 [ 619.367985][T19181] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288) [ 619.387327][T19181] F2FS-fs (loop2): invalid crc value [ 619.404757][T19181] F2FS-fs (loop2): Found nat_bits in checkpoint [ 619.479755][T19181] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 619.545207][T19181] F2FS-fs (loop2): Try to recover all the superblocks, ret: 0 [ 619.644703][T19186] loop4: detected capacity change from 0 to 32768 [ 619.714747][T19186] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 619.845025][T19186] XFS (loop4): Ending clean mount [ 619.909869][ T28] audit: type=1800 audit(1778927760.144:253): pid=19186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5654" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 620.057783][T11953] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 620.178328][T19192] loop5: detected capacity change from 0 to 40427 [ 620.218502][T19192] F2FS-fs (loop5): build fault injection attr: rate: 14, type: 0x7ffff [ 620.270329][T19192] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0xe4 [ 620.306343][T19192] F2FS-fs (loop5): invalid crc value [ 620.339229][T19192] F2FS-fs (loop5): Found nat_bits in checkpoint [ 620.476223][T19192] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0 [ 620.576036][T19192] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 620.634605][T19192] F2FS-fs (loop5): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70 [ 620.679034][T19192] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x127/0xb50 [ 621.120123][ T5787] Bluetooth: hci2: command tx timeout [ 621.472882][T19224] loop4: detected capacity change from 0 to 32768 [ 621.532463][T19224] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 621.577441][T19224] JBD2: Ignoring recovery information on journal [ 621.729330][T19224] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 622.006956][T11953] ocfs2: Unmounting device (7,4) on (node local) [ 622.627069][T19260] tipc: Enabling of bearer rejected, failed to enable media [ 622.780952][T19246] loop2: detected capacity change from 0 to 32768 [ 622.815774][T19246] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.5675 (19246) [ 622.823014][T19264] loop5: detected capacity change from 0 to 2048 [ 622.872066][T19246] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 622.903784][T19246] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 622.934944][T19246] BTRFS info (device loop2): enabling auto defrag [ 622.958183][T19270] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 622.989751][T19246] BTRFS info (device loop2): force clearing of disk cache [ 623.007254][T19246] BTRFS info (device loop2): ignoring data csums [ 623.028182][T19246] BTRFS info (device loop2): turning on async discard [ 623.040311][T19272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5686'. [ 623.050294][T19246] BTRFS info (device loop2): setting nodatacow, compression disabled [ 623.059392][T19246] BTRFS info (device loop2): turning off async discard [ 623.110555][T19246] BTRFS info (device loop2): disabling free space tree [ 623.340772][T19289] loop4: detected capacity change from 0 to 512 [ 623.393624][T19289] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 623.429276][T19289] EXT4-fs (loop4): orphan cleanup on readonly fs [ 623.453047][T19293] loop5: detected capacity change from 0 to 512 [ 623.465609][T19289] EXT4-fs warning (device loop4): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 623.488580][ T5772] BTRFS info (device loop2: state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 623.492743][T19289] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 623.506829][T19289] EXT4-fs error (device loop4): ext4_ext_check_inode:530: inode #13: comm syz.4.5687: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 623.529972][T19289] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.5687: couldn't read orphan inode 13 (err -117) [ 623.548735][T19293] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5688: invalid indirect mapped block 10 (level 1) [ 623.571203][T19289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 623.583953][T19293] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.5688: invalid indirect mapped block 8 (level 1) [ 623.634633][T19293] EXT4-fs (loop5): 1 truncate cleaned up [ 623.665834][T19293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.781598][T19289] EXT4-fs: Cannot specify journal on remount [ 623.873459][T19053] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.950991][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.327806][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.334396][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.064558][T19337] loop2: detected capacity change from 0 to 512 [ 625.114264][T19337] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 625.145579][T19337] EXT4-fs (loop2): 1 truncate cleaned up [ 625.168228][T19337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.277619][T19337] EXT4-fs: Ignoring removed orlov option [ 625.291086][ T27] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 625.305314][T19337] EXT4-fs: Ignoring removed orlov option [ 625.317969][T19337] EXT4-fs error (device loop2): __ext4_remount:6756: comm syz.2.5708: Abort forced by user [ 625.334946][T19337] EXT4-fs (loop2): Remounting filesystem read-only [ 625.342544][T19337] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 625.417209][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.482872][ T27] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 625.522501][ T27] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 625.549808][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 625.576952][ T27] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 625.599241][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.632766][ T27] usb 5-1: config 0 descriptor?? [ 626.071922][ T27] wacom 0003:056A:0059.003B: unknown main item tag 0x3 [ 626.095207][ T27] wacom 0003:056A:0059.003B: unknown main item tag 0x0 [ 626.115370][ T27] wacom 0003:056A:0059.003B: unknown main item tag 0x0 [ 626.140044][ T27] wacom 0003:056A:0059.003B: unknown main item tag 0x0 [ 626.167364][ T27] wacom 0003:056A:0059.003B: unknown main item tag 0x0 [ 626.187535][ T27] wacom 0003:056A:0059.003B: unknown main item tag 0x0 [ 626.205484][ T27] wacom 0003:056A:0059.003B: unknown main item tag 0x0 [ 626.219488][ T27] wacom 0003:056A:0059.003B: unknown main item tag 0x0 [ 626.243145][ T27] wacom 0003:056A:0059.003B: hidraw0: USB HID v0.04 Device [HID 056a:0059] on usb-dummy_hcd.4-1/input0 [ 626.305938][ T27] usb 5-1: USB disconnect, device number 26 [ 626.356682][T19367] loop5: detected capacity change from 0 to 1024 [ 626.442709][T19366] fido_id[19366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 626.702718][T19359] loop2: detected capacity change from 0 to 40427 [ 626.728325][T19359] F2FS-fs (loop2): invalid crc value [ 626.763949][T19359] F2FS-fs (loop2): Found nat_bits in checkpoint [ 626.920020][T19359] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 627.037802][ T5772] syz-executor: attempt to access beyond end of device [ 627.037802][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 627.060145][ T5839] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 627.089930][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 627.194797][T19386] loop4: detected capacity change from 0 to 512 [ 627.211081][T19386] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 627.270761][T19386] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e028, mo2=0002] [ 627.278766][ T5839] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 627.289763][T19386] EXT4-fs (loop4): orphan cleanup on readonly fs [ 627.290352][T19386] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.5728: bg 0: block 361: padding at end of block bitmap is not set [ 627.319565][ T5839] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 627.329815][ T5839] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 627.338892][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.357622][T19377] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 627.370077][ T5839] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 627.427210][T19386] EXT4-fs (loop4): Remounting filesystem read-only [ 627.482961][T19386] EXT4-fs (loop4): 1 truncate cleaned up [ 627.500160][T19386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 627.671135][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 627.907061][ T5839] usb 6-1: USB disconnect, device number 2 [ 627.994771][T19392] loop4: detected capacity change from 0 to 2048 [ 628.093385][T19392] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 628.296913][T11953] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.924632][T19421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5741'. [ 629.198533][T19427] loop4: detected capacity change from 0 to 1024 [ 629.269507][T19427] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 629.516771][T19439] hsr0: entered promiscuous mode [ 629.527478][T19440] netlink: 292 bytes leftover after parsing attributes in process `syz.2.5751'. [ 630.148036][T19463] loop5: detected capacity change from 0 to 128 [ 630.197115][T19463] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 630.236998][T19463] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.452201][T19053] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 630.523448][T19471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5764'. [ 631.137643][T19491] loop4: detected capacity change from 0 to 164 [ 631.368822][T19499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5777'. [ 631.437629][T19499] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5777'. [ 631.511632][T19502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5777'. [ 631.968085][T19514] [ 631.970502][T19514] ====================================================== [ 631.977553][T19514] WARNING: possible circular locking dependency detected [ 631.984602][T19514] syzkaller #0 Not tainted [ 631.989060][T19514] ------------------------------------------------------ [ 631.996100][T19514] syz.2.5786/19514 is trying to acquire lock: [ 632.002193][T19514] ffffffff97691fd8 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x67/0x230 [ 632.012250][T19514] [ 632.012250][T19514] but task is already holding lock: [ 632.019626][T19514] ffff88802b150eb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 632.029957][T19514] [ 632.029957][T19514] which lock already depends on the new lock. [ 632.029957][T19514] [ 632.040406][T19514] [ 632.040406][T19514] the existing dependency chain (in reverse order) is: [ 632.049452][T19514] [ 632.049452][T19514] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 632.057736][T19514] __mutex_lock+0x136/0xcc0 [ 632.062794][T19514] nf_tables_dumpreset_obj+0x72/0xa0 [ 632.068628][T19514] netlink_dump+0x747/0xe50 [ 632.073783][T19514] __netlink_dump_start+0x5f1/0x810 [ 632.079550][T19514] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 632.085750][T19514] nf_tables_getobj_reset+0x1e1/0x630 [ 632.091689][T19514] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 632.097275][T19514] netlink_rcv_skb+0x241/0x4d0 [ 632.102602][T19514] nfnetlink_rcv+0x2c9/0x24a0 [ 632.107840][T19514] netlink_unicast+0x751/0x8d0 [ 632.113171][T19514] netlink_sendmsg+0x8d0/0xbf0 [ 632.118502][T19514] ____sys_sendmsg+0x5ba/0x960 [ 632.123825][T19514] ___sys_sendmsg+0x2a6/0x360 [ 632.129052][T19514] __se_sys_sendmsg+0x1c2/0x2b0 [ 632.134460][T19514] do_syscall_64+0x55/0xa0 [ 632.139448][T19514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.145899][T19514] [ 632.145899][T19514] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 632.154188][T19514] __mutex_lock+0x136/0xcc0 [ 632.159245][T19514] __netlink_dump_start+0xf4/0x810 [ 632.164924][T19514] ip_set_dump+0x15c/0x1f0 [ 632.169900][T19514] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 632.175491][T19514] netlink_rcv_skb+0x241/0x4d0 [ 632.180814][T19514] nfnetlink_rcv+0x2c9/0x24a0 [ 632.186062][T19514] netlink_unicast+0x751/0x8d0 [ 632.191395][T19514] netlink_sendmsg+0x8d0/0xbf0 [ 632.196724][T19514] ____sys_sendmsg+0x5ba/0x960 [ 632.202041][T19514] ___sys_sendmsg+0x2a6/0x360 [ 632.207274][T19514] __se_sys_sendmsg+0x1c2/0x2b0 [ 632.212670][T19514] do_syscall_64+0x55/0xa0 [ 632.217640][T19514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.224090][T19514] [ 632.224090][T19514] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 632.231936][T19514] __lock_acquire+0x2df1/0x7d40 [ 632.237341][T19514] lock_acquire+0x19e/0x420 [ 632.242396][T19514] __mutex_lock+0x136/0xcc0 [ 632.247496][T19514] ip_set_nfnl_get_byindex+0x67/0x230 [ 632.253428][T19514] set_match_v1_checkentry+0x71/0x230 [ 632.259362][T19514] xt_check_match+0x4ea/0xc50 [ 632.264586][T19514] __nft_match_init+0x67a/0x8d0 [ 632.269989][T19514] nf_tables_newrule+0x176c/0x2880 [ 632.275662][T19514] nfnetlink_rcv+0x113e/0x24a0 [ 632.280972][T19501] loop4: detected capacity change from 0 to 32768 [ 632.287422][T19514] netlink_unicast+0x751/0x8d0 [ 632.292746][T19514] netlink_sendmsg+0x8d0/0xbf0 [ 632.298080][T19514] ____sys_sendmsg+0x5ba/0x960 [ 632.303405][T19514] ___sys_sendmsg+0x2a6/0x360 [ 632.308644][T19514] __se_sys_sendmsg+0x1c2/0x2b0 [ 632.314057][T19514] do_syscall_64+0x55/0xa0 [ 632.319042][T19514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.325520][T19514] [ 632.325520][T19514] other info that might help us debug this: [ 632.325520][T19514] [ 632.335779][T19514] Chain exists of: [ 632.335779][T19514] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 632.335779][T19514] [ 632.350269][T19514] Possible unsafe locking scenario: [ 632.350269][T19514] [ 632.357754][T19514] CPU0 CPU1 [ 632.363145][T19514] ---- ---- [ 632.368536][T19514] lock(&nft_net->commit_mutex); [ 632.373611][T19514] lock(nlk_cb_mutex-NETFILTER); [ 632.381198][T19514] lock(&nft_net->commit_mutex); [ 632.388783][T19514] lock(nfnl_subsys_ipset); [ 632.393408][T19514] [ 632.393408][T19514] *** DEADLOCK *** [ 632.393408][T19514] [ 632.401571][T19514] 1 lock held by syz.2.5786/19514: [ 632.406694][T19514] #0: ffff88802b150eb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x3b/0x100 [ 632.417402][T19514] [ 632.417402][T19514] stack backtrace: [ 632.423301][T19514] CPU: 1 PID: 19514 Comm: syz.2.5786 Not tainted syzkaller #0 [ 632.430767][T19514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 632.440872][T19514] Call Trace: [ 632.444186][T19514] [ 632.447138][T19514] dump_stack_lvl+0x18c/0x250 [ 632.451855][T19514] ? load_image+0x420/0x420 [ 632.456478][T19514] ? show_regs_print_info+0x20/0x20 [ 632.461728][T19514] ? print_circular_bug+0x12b/0x1a0 [ 632.466959][T19514] check_noncircular+0x2fc/0x400 [ 632.471932][T19514] ? print_deadlock_bug+0x5d0/0x5d0 [ 632.475992][T19501] [ 632.475992][T19501] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 632.475992][T19501] [ 632.477170][T19514] ? lockdep_lock+0xf5/0x230 [ 632.492218][T19514] ? _find_first_zero_bit+0xd3/0x100 [ 632.497545][T19514] __lock_acquire+0x2df1/0x7d40 [ 632.502465][T19514] ? mark_lock+0x94/0x320 [ 632.506840][T19514] ? verify_lock_unused+0x140/0x140 [ 632.512088][T19514] ? __lock_acquire+0x1273/0x7d40 [ 632.517164][T19514] lock_acquire+0x19e/0x420 [ 632.521725][T19514] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 632.527318][T19514] ? __might_sleep+0xe0/0xe0 [ 632.531954][T19514] ? read_lock_is_recursive+0x20/0x20 [ 632.537371][T19514] __mutex_lock+0x136/0xcc0 [ 632.541920][T19514] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 632.547502][T19514] ? ip_set_nfnl_get_byindex+0x67/0x230 [ 632.553074][T19514] ? ip_set_pernet+0x23/0x230 [ 632.557784][T19514] ? mutex_lock_nested+0x20/0x20 [ 632.558561][T19501] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 632.558561][T19501] [ 632.562744][T19514] ? ip_set_pernet+0x23/0x230 [ 632.562765][T19514] ? ip_set_pernet+0x23/0x230 [ 632.562786][T19514] ip_set_nfnl_get_byindex+0x67/0x230 [ 632.562806][T19514] set_match_v1_checkentry+0x71/0x230 [ 632.562850][T19514] xt_check_match+0x4ea/0xc50 [ 632.562875][T19514] ? xt_check_proc_name+0x270/0x270 [ 632.562905][T19514] ? __stack_depot_save+0x1f/0x630 [ 632.562926][T19514] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 632.562953][T19514] __nft_match_init+0x67a/0x8d0 [ 632.562975][T19514] ? ___sys_sendmsg+0x2a6/0x360 [ 632.562996][T19514] ? nft_match_large_dump+0x50/0x50 [ 632.563036][T19514] ? nf_tables_newrule+0x150e/0x2880 [ 632.604103][T19501] ERROR: (device loop4): jfs_unlink: [ 632.604103][T19501] [ 632.608908][T19514] ? rcu_is_watching+0x15/0xb0 [ 632.608938][T19514] ? nf_tables_newrule+0x150e/0x2880 [ 632.652819][T19514] ? __kmalloc+0xe2/0x230 [ 632.657209][T19514] nf_tables_newrule+0x176c/0x2880 [ 632.662476][T19514] ? nf_tables_delchain+0x1060/0x1060 [ 632.667893][T19514] ? __lock_acquire+0x7d40/0x7d40 [ 632.672972][T19514] ? mutex_unlock+0x10/0x10 [ 632.677525][T19514] ? __nla_parse+0x40/0x50 [ 632.681997][T19514] nfnetlink_rcv+0x113e/0x24a0 [ 632.686832][T19514] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 632.692474][T19514] ? __lock_acquire+0x7d40/0x7d40 [ 632.697566][T19514] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.702824][T19514] netlink_unicast+0x751/0x8d0 [ 632.707640][T19514] netlink_sendmsg+0x8d0/0xbf0 [ 632.712452][T19514] ? netlink_getsockopt+0x590/0x590 [ 632.717697][T19514] ? aa_sock_msg_perm+0x94/0x150 [ 632.722683][T19514] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 632.728023][T19514] ? security_socket_sendmsg+0x80/0xa0 [ 632.733523][T19514] ? netlink_getsockopt+0x590/0x590 [ 632.738763][T19514] ____sys_sendmsg+0x5ba/0x960 [ 632.743571][T19514] ? __asan_memset+0x22/0x40 [ 632.748207][T19514] ? __sys_sendmsg_sock+0x30/0x30 [ 632.753266][T19514] ? __import_iovec+0x5f2/0x850 [ 632.758163][T19514] ? import_iovec+0x73/0xa0 [ 632.762702][T19514] ___sys_sendmsg+0x2a6/0x360 [ 632.767424][T19514] ? __sys_sendmsg+0x2a0/0x2a0 [ 632.772235][T19514] __se_sys_sendmsg+0x1c2/0x2b0 [ 632.777131][T19514] ? __x64_sys_sendmsg+0x80/0x80 [ 632.782107][T19514] ? lockdep_hardirqs_on+0x98/0x150 [ 632.787341][T19514] do_syscall_64+0x55/0xa0 [ 632.791787][T19514] ? clear_bhb_loop+0x40/0x90 [ 632.796498][T19514] ? clear_bhb_loop+0x40/0x90 [ 632.801217][T19514] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.807170][T19514] RIP: 0033:0x7fac7859ce59 [ 632.811629][T19514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.831270][T19514] RSP: 002b:00007fac794c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.839733][T19514] RAX: ffffffffffffffda RBX: 00007fac78815fa0 RCX: 00007fac7859ce59 [ 632.847737][T19514] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 632.855851][T19514] RBP: 00007fac78632d6f R08: 0000000000000000 R09: 0000000000000000 [ 632.863884][T19514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.871896][T19514] R13: 00007fac78816038 R14: 00007fac78815fa0 R15: 00007ffdb904a498 [ 632.879911][T19514] [ 632.906670][T11953] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 632.906670][T11953] [ 632.917502][ T11] ERROR: (device loop4): diWrite: ixpxd invalid [ 632.917502][ T11] [ 632.957659][ T11] ERROR: (device loop4): txCommit: [ 632.957659][ T11] [ 632.986807][ T11] jfs_write_inode: jfs_commit_inode failed! [ 633.005959][T11953] [ 633.005959][T11953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 633.005959][T11953] [ 633.022776][T11953] [ 633.022776][T11953] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 633.022776][T11953]