last executing test programs: 4.373856073s ago: executing program 1 (id=3144): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x2, 0x5, 0x8, 0x200}, [{0x4, 0x20000007, 0x6, 0x3, 0x9, 0x6, 0xffff, 0x5}, {0x6474e551, 0xd, 0x40, 0x6, 0xd2a5, 0x7fff, 0x8000, 0x7}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 4.135787519s ago: executing program 1 (id=3146): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x6) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x42, 0x5a) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x100) tee(r1, r2, 0x3, 0x0) 3.910724025s ago: executing program 0 (id=3147): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/events/irq_vectors/local_timer_exit/enable\x00', 0x525000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, 0x0, 0x0) 3.806428047s ago: executing program 0 (id=3148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) listen(0xffffffffffffffff, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000480)=""/238, 0xfffffffffffffd24, 0x10120, 0x0, 0x43) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) 3.501879754s ago: executing program 2 (id=3149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 3.326091089s ago: executing program 2 (id=3150): socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 3.218283821s ago: executing program 2 (id=3151): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) close(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x25da, &(0x7f0000000540)={0x0, 0xb04, 0x100, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8000, 0x2100, 0x385, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x519e, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x0, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) 3.110587364s ago: executing program 1 (id=3152): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 2.960525808s ago: executing program 1 (id=3153): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r1, &(0x7f0000000240)="5cb0", 0x2) 2.610560566s ago: executing program 0 (id=3154): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000180)={'wlan0\x00'}) r1 = memfd_create(&(0x7f00000005c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x99\xb8r7, 0x2}) mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x200000b, 0x12, r9, 0x0) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e006e0007010015002f6465762f646d615f686561702f73797374656d00"], 0x1e) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x101a02, 0xc8) sendfile(r12, r12, 0x0, 0x101) write(r11, &(0x7f00000001c0)='1', 0x1) ioctl$EVIOCSMASK(r10, 0x40104593, &(0x7f0000001480)={0x0, 0x2, &(0x7f0000000480)="97ec"}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) 2.426468871s ago: executing program 1 (id=3155): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 2.286350154s ago: executing program 3 (id=3156): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.214174686s ago: executing program 0 (id=3157): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, 0x0) 2.04251445s ago: executing program 3 (id=3158): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 1.963765692s ago: executing program 3 (id=3159): socket$nl_netfilter(0x10, 0x3, 0xc) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000180), 0x10) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1.907142343s ago: executing program 2 (id=3160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x3000000, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 1.763495076s ago: executing program 3 (id=3161): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.745525667s ago: executing program 2 (id=3162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300), 0x0, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000340)="01", 0x1}], 0x1}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) listen(0xffffffffffffffff, 0xfffffffe) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000480)=""/238, 0xfffffffffffffd24, 0x10120, 0x0, 0x43) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x8182) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f0000000100)={0xe000000, 0x52424752, 0xf00, 0x870, 0x2, @stepwise={{0x1fb, 0xfffffff7}, {0x100, 0x5}, {0x2, 0x10001}}}) 1.486462384s ago: executing program 3 (id=3163): io_setup(0x4, 0x0) unshare(0x28000600) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, 0x0, 0x8010) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000160a030200000000001fc700020000000900020073790000000000000900010073797a300000"], 0x80}}, 0x20000084) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.410868376s ago: executing program 1 (id=3164): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x1, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000, 0xfffffffe}, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x20, 0x10, 0x401, 0x70bd25, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x503}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000100)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x6) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r6, r6, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0x457, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) 1.264686339s ago: executing program 3 (id=3165): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES8], 0x10, 0x121f, &(0x7f0000001840)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x210810, 0x0, 0x60, 0x0, &(0x7f0000000100)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 335.184082ms ago: executing program 0 (id=3166): r0 = creat(&(0x7f0000000000)='./file0\x00', 0x6b) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x0, 0x2, 0x8d, 0x4, 0x3, 0x6, 0x8, 0x19, 0x38, 0x25e, 0x408, 0x4, 0x20, 0x2, 0x5, 0x8, 0x200}, [{0x6474e551, 0x8, 0x5, 0x3, 0x2, 0xc, 0x8, 0x6}, {0x6474e551, 0xd, 0x40, 0x6, 0xd2a5, 0x7fff, 0x8000, 0x7}]}, 0x78) close(r0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 202.407955ms ago: executing program 2 (id=3167): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x800718, &(0x7f0000000040)={[{@delalloc}, {@mblk_io_submit}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nobh}, {@errors_remount}, {@stripe}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x754}}, {@mb_optimize_scan}, {@stripe={'stripe', 0x3d, 0x20ad}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}], [{@smackfsfloor}]}, 0x22, 0x4a7, &(0x7f00000010c0)="$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") r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002bbd7000fddbdf251a0000000600210062000000180022800400"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8080) 0s ago: executing program 0 (id=3168): setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) kernel console output (not intermixed with test programs): error -23 [ 587.448259][ T6015] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 587.627613][ T6015] usb 1-1: Using ep0 maxpacket: 32 [ 587.634541][ T6015] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 587.643412][ T6015] usb 1-1: config 0 has no interface number 0 [ 587.652766][ T6015] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 587.662302][ T6015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.670684][ T6015] usb 1-1: Product: syz [ 587.674882][ T6015] usb 1-1: Manufacturer: syz [ 587.679877][ T6015] usb 1-1: SerialNumber: syz [ 587.686717][ T6015] usb 1-1: config 0 descriptor?? [ 587.688269][ T5812] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 587.706577][ T6015] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 587.715881][ T6015] usb 1-1: selecting invalid altsetting 1 [ 587.721769][ T6015] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 587.739404][ T6015] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 587.750265][ T6015] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 587.759065][ T6015] usb 1-1: media controller created [ 587.782999][ T6015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.867756][ T5812] usb 2-1: device descriptor read/64, error -71 [ 588.147907][ T5812] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 588.350324][ T5812] usb 2-1: device descriptor read/64, error -71 [ 588.530622][ T5812] usb usb2-port1: attempt power cycle [ 588.853908][ T6015] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 588.862524][ T6015] zl10353_read_register: readreg error (reg=127, ret==-110) [ 588.987873][ T5812] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 589.028756][ T5812] usb 2-1: device descriptor read/8, error -71 [ 589.048054][ T6671] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 589.115672][T13209] Invalid ELF header magic: != ELF [ 589.126123][T13209] overlayfs: overlapping lowerdir path [ 589.247490][ T6671] usb 3-1: Using ep0 maxpacket: 8 [ 589.261893][ T6671] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 589.271943][ T6671] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 589.283543][ T6671] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 589.294045][ T6671] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 589.307476][ T6671] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 589.316822][ T6671] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.331250][ T5812] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 589.378484][ T5812] usb 2-1: device descriptor read/8, error -71 [ 589.499539][ T5812] usb usb2-port1: unable to enumerate USB device [ 589.678996][ T6671] usb 3-1: usb_control_msg returned -71 [ 589.686043][ T6671] usbtmc 3-1:16.0: can't read capabilities [ 589.704850][ T6671] usb 3-1: USB disconnect, device number 32 [ 590.057662][ T6015] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 590.116318][ T5812] usb 1-1: USB disconnect, device number 10 [ 590.255214][ T6015] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 590.268753][ T6015] usb 4-1: config 0 has no interface number 0 [ 590.284509][ T6015] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 590.296157][ T6015] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 590.313015][ T6015] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 590.323307][ T6015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.338720][ T6015] usb 4-1: config 0 descriptor?? [ 590.344634][T13220] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 590.358993][ T6015] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 590.579329][ T6015] usb 4-1: USB disconnect, device number 31 [ 590.579394][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 591.197655][ T5812] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 591.387700][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 591.402811][ T5812] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.423621][ T5812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 591.442903][ T5812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 591.453957][ T5812] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.468170][ T5812] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 591.477414][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.507898][T13076] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 591.657727][T13076] usb 4-1: device descriptor read/64, error -71 [ 591.941154][ T5812] usb 3-1: usb_control_msg returned -71 [ 591.957694][T13076] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 591.994360][ T5812] usbtmc 3-1:16.0: can't read capabilities [ 592.018335][ T5812] usb 3-1: USB disconnect, device number 33 [ 592.147818][T13076] usb 4-1: device descriptor read/64, error -71 [ 592.217869][T13260] syzkaller0: entered promiscuous mode [ 592.223483][T13260] syzkaller0: entered allmulticast mode [ 592.236389][T13260] tipc: Started in network mode [ 592.244070][T13260] tipc: Node identity 1abbc21fdd9f, cluster identity 4711 [ 592.262227][T13260] tipc: Enabled bearer , priority 0 [ 592.277795][T13076] usb usb4-port1: attempt power cycle [ 592.298178][T13260] tipc: Resetting bearer [ 592.331886][T13259] tipc: Resetting bearer [ 592.382183][T13259] tipc: Disabling bearer [ 592.777656][T13076] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 592.970359][T13076] usb 4-1: device descriptor read/8, error -71 [ 593.301396][T13076] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 593.490420][T13076] usb 4-1: device descriptor read/8, error -71 [ 593.635340][T13076] usb usb4-port1: unable to enumerate USB device [ 593.921353][ T28] Process accounting resumed [ 595.566631][T13307] netlink: 'syz.0.2353': attribute type 10 has an invalid length. [ 595.603173][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.947054][T13307] bridge_slave_1: left allmulticast mode [ 595.952941][T13307] bridge_slave_1: left promiscuous mode [ 595.959925][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.002888][T13307] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 598.979881][ T6671] Process accounting resumed [ 601.543017][T13338] netlink: 'syz.0.2367': attribute type 10 has an invalid length. [ 605.485145][ T27] audit: type=1800 audit(1787252670.596:245): pid=13380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2379" name="console" dev="configfs" ino=35868 res=0 errno=0 [ 605.509465][ T5812] Process accounting resumed [ 608.063753][T13410] netlink: 'syz.3.2384': attribute type 10 has an invalid length. [ 608.886651][ T6671] Process accounting resumed [ 611.212186][T13431] trusted_key: encrypted_key: master key parameter 'truste' is invalid [ 612.578281][T13445] netlink: 'syz.3.2397': attribute type 10 has an invalid length. [ 614.606741][ T5812] Process accounting resumed [ 615.108089][ T27] audit: type=1800 audit(1787252680.206:246): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2406" name="console" dev="configfs" ino=37036 res=0 errno=0 [ 616.864530][ T5812] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 617.877716][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 617.891921][ T5812] usb 3-1: unable to get BOS descriptor or descriptor too short [ 617.914282][ T5812] usb 3-1: string descriptor 0 read error: -22 [ 617.921381][ T5812] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 617.930826][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.958635][ T5812] dw2102: su3000_identify_state [ 617.963567][ T5812] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 617.992923][ T5812] dw2102: su3000_power_ctrl: 1, initialized 0 [ 618.002205][ T5812] dvb-usb: bulk message failed: -22 (2/0) [ 618.031045][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 618.068321][ T5812] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 618.077031][ T5812] usb 3-1: media controller created [ 618.092099][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 618.110163][ T5812] dw2102: i2c transfer failed. [ 618.117967][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 618.123755][ T5812] dw2102: i2c transfer failed. [ 618.135407][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 618.142679][ T5812] dw2102: i2c transfer failed. [ 618.166097][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 618.176478][ T5812] dw2102: i2c transfer failed. [ 618.183544][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 618.198627][ T5812] dw2102: i2c transfer failed. [ 618.213057][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 618.241078][T13076] Process accounting resumed [ 618.274535][ T5812] dw2102: i2c transfer failed. [ 618.306506][ T5812] dvb-usb: MAC address: 02:02:02:02:02:02 [ 618.730574][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.367965][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 619.373827][ T5812] dw2102: command 0x0e transfer failed. [ 619.382596][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 619.389985][ T5812] dw2102: command 0x0e transfer failed. [ 620.470099][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 620.475923][ T5812] dw2102: command 0x0e transfer failed. [ 620.481590][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 620.492327][ T5812] dw2102: command 0x0e transfer failed. [ 621.434220][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 621.440165][ T5812] dw2102: command 0x51 transfer failed. [ 621.944991][ T5812] DVB: Unable to find symbol ds3000_attach() [ 621.951272][ T5812] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 622.031570][T13531] 9pnet_virtio: no channels available for device syz [ 622.148079][ T5812] rc_core: IR keymap rc-su3000 not found [ 622.153802][ T5812] Registered IR keymap rc-empty [ 622.200499][ T5812] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 622.259982][ T5812] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input35 [ 622.301137][ T5812] dvb-usb: schedule remote query interval to 150 msecs. [ 622.310594][ T5812] dw2102: su3000_power_ctrl: 0, initialized 1 [ 622.319597][ T5812] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 622.354496][ T5812] usb 3-1: USB disconnect, device number 34 [ 622.783153][ T5812] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 624.594214][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.600726][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.383578][T13587] loop0: detected capacity change from 0 to 512 [ 625.397996][T13588] loop1: detected capacity change from 0 to 512 [ 626.491121][ T5814] Process accounting resumed [ 627.907283][T13622] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2457'. [ 629.746552][T13076] Process accounting resumed [ 631.374571][T13661] syzkaller0: entered promiscuous mode [ 631.397480][T13661] syzkaller0: entered allmulticast mode [ 633.810649][ T6671] hid-generic 0005:0457:0009.0009: unknown main item tag 0x0 [ 633.822294][ T6671] hid-generic 0005:0457:0009.0009: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 634.310493][T13727] Invalid ELF header magic: != ELF [ 634.325438][T13727] overlayfs: overlapping lowerdir path [ 635.088033][T12319] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 636.543705][T13744] loop0: detected capacity change from 0 to 164 [ 636.547910][T12319] usb 2-1: device descriptor read/64, error -71 [ 636.817678][T12319] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 636.915264][T13753] loop3: detected capacity change from 0 to 2048 [ 636.949980][T13753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.987792][T12319] usb 2-1: device descriptor read/64, error -71 [ 637.079811][T13762] ALSA: seq fatal error: cannot create timer (-22) [ 637.107009][T13752] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 637.137703][T12319] usb usb2-port1: attempt power cycle [ 637.145422][T13752] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 637.167814][T13752] EXT4-fs (loop3): This should not happen!! Data will be lost [ 637.167814][T13752] [ 637.188932][T13752] EXT4-fs (loop3): Total free blocks count 0 [ 637.196824][T13752] EXT4-fs (loop3): Free/Dirty block details [ 637.205502][T13752] EXT4-fs (loop3): free_blocks=2415919504 [ 637.214443][T13752] EXT4-fs (loop3): dirty_blocks=16 [ 637.222138][T13752] EXT4-fs (loop3): Block reservation details [ 637.230788][T13752] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 637.240253][T13764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2504'. [ 637.324950][ T6417] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 28 [ 637.567659][T12319] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 637.640274][T12319] usb 2-1: device descriptor read/8, error -71 [ 637.959673][T12319] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 637.986928][ T3560] hid-generic 0005:0457:0009.000A: unknown main item tag 0x0 [ 638.020689][ T3560] hid-generic 0005:0457:0009.000A: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 638.207728][T12319] usb 2-1: device not accepting address 13, error -71 [ 638.217872][T12319] usb usb2-port1: unable to enumerate USB device [ 638.348730][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2513'. [ 638.398201][T13792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2514'. [ 639.057936][ T3560] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 639.228280][ T3560] usb 3-1: device descriptor read/64, error -71 [ 639.628232][ T3560] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 639.878055][ T3560] usb 3-1: device descriptor read/64, error -71 [ 640.104798][ T3560] usb usb3-port1: attempt power cycle [ 640.659512][ T23] Process accounting resumed [ 640.677892][ T3560] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 640.920123][ T3560] usb 3-1: device descriptor read/8, error -71 [ 641.259295][ T3560] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 641.430264][ T3560] usb 3-1: device descriptor read/8, error -71 [ 641.578019][ T3560] usb usb3-port1: unable to enumerate USB device [ 641.989240][T13839] ALSA: seq fatal error: cannot create timer (-22) [ 646.421179][ T5814] Process accounting resumed [ 646.733068][ T5814] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 646.947673][ T5814] usb 3-1: device descriptor read/64, error -71 [ 647.277630][ T5814] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 647.427619][ T5814] usb 3-1: device descriptor read/64, error -71 [ 647.548043][ T5814] usb usb3-port1: attempt power cycle [ 647.987602][ T5814] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 649.374317][ T5814] usb 3-1: device descriptor read/8, error -71 [ 649.853670][ T3560] Process accounting resumed [ 651.191081][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'. [ 651.208259][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2558'. [ 651.237749][T13921] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.246535][T13921] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.255407][T13921] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.264221][T13921] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.729535][ T6671] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 651.768562][T13935] Invalid ELF header magic: != ELF [ 651.833558][T13935] overlayfs: overlapping lowerdir path [ 652.471938][T13938] loop2: detected capacity change from 0 to 2048 [ 652.523843][T13938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.630695][T13937] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 652.672579][T13937] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 652.686897][T13937] EXT4-fs (loop2): This should not happen!! Data will be lost [ 652.686897][T13937] [ 652.727682][ T6671] usb 2-1: device descriptor read/64, error -71 [ 652.729077][T13937] EXT4-fs (loop2): Total free blocks count 0 [ 652.753272][T13937] EXT4-fs (loop2): Free/Dirty block details [ 652.759489][T13937] EXT4-fs (loop2): free_blocks=2415919504 [ 652.765445][T13937] EXT4-fs (loop2): dirty_blocks=16 [ 652.771519][T13937] EXT4-fs (loop2): Block reservation details [ 652.781547][T13937] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 652.833227][ T6429] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 4 with error 28 [ 652.956153][T13947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2566'. [ 653.027613][ T6671] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 653.187667][ T6671] usb 2-1: device descriptor read/64, error -71 [ 653.209800][T13953] loop0: detected capacity change from 0 to 1024 [ 653.224659][T13953] journal_path: Lookup failure for './file0' [ 653.246974][T13953] EXT4-fs: error: could not find journal device path [ 653.307833][ T6671] usb usb2-port1: attempt power cycle [ 653.748376][ T6671] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 653.798456][ T6671] usb 2-1: device descriptor read/8, error -71 [ 654.077630][ T6671] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 654.108414][ T6671] usb 2-1: device descriptor read/8, error -71 [ 654.232618][ T6671] usb usb2-port1: unable to enumerate USB device [ 655.498061][T13978] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2578'. [ 656.864851][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 656.939110][T13076] Process accounting resumed [ 657.142266][ T23] usb 1-1: device descriptor read/64, error -71 [ 657.477669][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 657.648191][ T23] usb 1-1: device descriptor read/64, error -71 [ 657.789013][ T23] usb usb1-port1: attempt power cycle [ 659.282939][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 659.711945][T13076] Process accounting resumed [ 659.858973][ T23] usb 1-1: device descriptor read/8, error -71 [ 662.593140][T14065] syzkaller0: entered promiscuous mode [ 662.603471][T14065] syzkaller0: entered allmulticast mode [ 662.727886][ T6671] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 662.860827][ T23] Process accounting resumed [ 662.917662][ T6671] usb 4-1: device descriptor read/64, error -71 [ 663.887825][ T6671] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 664.034509][T14082] loop1: detected capacity change from 0 to 1024 [ 664.046984][T14082] EXT4-fs: inline encryption not supported [ 664.058505][ T6671] usb 4-1: device descriptor read/64, error -71 [ 664.068363][T14082] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 664.133378][T14082] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #3: block 1: comm syz.1.2616: lblock 1 mapped to illegal pblock 1 (length 1) [ 664.149958][T14082] EXT4-fs (loop1): Remounting filesystem read-only [ 664.156596][T14082] Quota error (device loop1): write_blk: dquota write failed [ 664.164908][T14082] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 664.176047][T14082] EXT4-fs (loop1): 1 orphan inode deleted [ 664.182221][ T6671] usb usb4-port1: attempt power cycle [ 664.192488][T14082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.302779][T12734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.607780][ T6671] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 664.651269][ T6671] usb 4-1: device descriptor read/8, error -71 [ 667.286328][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.304100][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.315676][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.326573][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.334859][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 667.362363][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.519709][T14122] lo speed is unknown, defaulting to 1000 [ 667.837977][ T23] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 668.229533][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 668.324140][ T23] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 668.366798][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 668.449587][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.502186][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 668.537424][ T23] usb 1-1: invalid MIDI out EP 0 [ 668.579685][ T6426] tipc: Disabling bearer [ 668.633837][ T6426] tipc: Left network mode [ 668.713433][T12303] udevd[12303]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 668.805736][ T23] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 668.849286][ T23] usb 1-1: USB disconnect, device number 15 [ 669.021941][T14122] chnl_net:caif_netlink_parms(): no params data found [ 669.487905][ T51] Bluetooth: hci0: command tx timeout [ 669.540283][T14122] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.577880][T14122] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.594199][ C1] sd 0:0:1:0: [sda] tag#7319 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 669.604787][ C1] sd 0:0:1:0: [sda] tag#7319 CDB: Write(6) 0a 00 00 00 0e 00 00 00 3e 01 00 00 [ 669.608266][T14122] bridge_slave_0: entered allmulticast mode [ 669.653413][T14122] bridge_slave_0: entered promiscuous mode [ 669.684591][T14154] syzkaller0: entered promiscuous mode [ 669.702599][T14154] syzkaller0: entered allmulticast mode [ 669.743747][T14161] tipc: Started in network mode [ 669.752154][T14161] tipc: Node identity ea138536487e, cluster identity 4711 [ 669.768508][T14161] tipc: Enabled bearer , priority 0 [ 669.821978][T14122] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.858155][T14122] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.865605][T14122] bridge_slave_1: entered allmulticast mode [ 669.878651][T14122] bridge_slave_1: entered promiscuous mode [ 669.928686][T14150] tipc: Resetting bearer [ 670.029173][T14150] tipc: Disabling bearer [ 670.332218][T14122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.355365][T14122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.664135][T14122] team0: Port device team_slave_0 added [ 670.723948][T14122] team0: Port device team_slave_1 added [ 670.864058][ T6426] hsr_slave_0: left promiscuous mode [ 670.938816][ T6426] hsr_slave_1: left promiscuous mode [ 670.957459][ T6426] bridge_slave_0: left allmulticast mode [ 670.974119][ T6426] bridge_slave_0: left promiscuous mode [ 670.994241][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.026947][ T6426] bond1 (unregistering): Released all slaves [ 671.584948][ T51] Bluetooth: hci0: command tx timeout [ 672.353108][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 672.551147][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 672.573244][ T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 672.593341][ T23] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 672.617890][ T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 672.626997][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.689489][ T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 672.701681][ T6426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 672.845473][ T23] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 672.861942][ T6426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 672.926378][ T23] usb 2-1: USB disconnect, device number 18 [ 672.966782][ T6426] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 673.152682][T13076] Process accounting resumed [ 673.659739][ T51] Bluetooth: hci0: command tx timeout [ 674.072435][ C1] sd 0:0:1:0: [sda] tag#7324 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 674.082976][ C1] sd 0:0:1:0: [sda] tag#7324 CDB: Write(6) 0a 00 00 00 0e 00 00 00 3e 01 00 00 [ 674.334217][ T6426] bond0 (unregistering): Released all slaves [ 674.497650][T14122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.504664][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.533249][T14122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.582399][T14122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.603029][T14122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.640346][T14122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.844404][T14217] syzkaller0: entered promiscuous mode [ 674.851632][T14217] syzkaller0: entered allmulticast mode [ 674.875658][T14122] hsr_slave_0: entered promiscuous mode [ 674.907216][T14122] hsr_slave_1: entered promiscuous mode [ 674.926653][T14217] tipc: Started in network mode [ 674.957410][T14217] tipc: Node identity 82c30961c41a, cluster identity 4711 [ 675.025880][T14217] tipc: Enabled bearer , priority 0 [ 675.062061][T14216] tipc: Resetting bearer [ 675.134006][T14216] tipc: Disabling bearer [ 675.728098][ T51] Bluetooth: hci0: command tx timeout [ 676.868749][ T6015] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 677.098778][ T6015] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 677.138429][ T6015] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 677.179842][ T6015] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 677.208143][ T6015] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 677.237914][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.274947][ T6015] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 677.312153][T14256] loop0: detected capacity change from 0 to 1024 [ 677.346850][T14256] EXT4-fs: inline encryption not supported [ 677.354280][T14256] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 677.435438][T14256] EXT4-fs error (device loop0): ext4_map_blocks:720: inode #3: block 1: comm syz.0.2658: lblock 1 mapped to illegal pblock 1 (length 1) [ 677.452028][T14256] EXT4-fs (loop0): Remounting filesystem read-only [ 677.470103][T14122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 677.495729][T14256] Quota error (device loop0): write_blk: dquota write failed [ 677.507044][ T6015] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 677.509173][T14256] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 677.525852][T14256] EXT4-fs (loop0): 1 orphan inode deleted [ 677.537322][T14122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 677.551993][T14256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.585587][ T6015] usb 3-1: USB disconnect, device number 43 [ 677.614953][T14122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 677.630008][T14122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 677.746474][T12259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.829359][T14262] tipc: Enabling of bearer rejected, failed to enable media [ 677.914387][T14265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2660'. [ 677.948325][T14122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.001438][T14122] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.024837][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.033206][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.111594][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.118856][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.642576][T14283] loop2: detected capacity change from 0 to 8192 [ 678.727303][T14283] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 678.787954][T14122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.798797][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 678.819108][T14283] FAT-fs (loop2): Filesystem has been set read-only [ 678.838030][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 678.856642][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 678.878460][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 678.896828][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 678.917653][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 678.935064][T14122] veth0_vlan: entered promiscuous mode [ 678.964807][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 678.986164][T14122] veth1_vlan: entered promiscuous mode [ 679.003583][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.068954][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.079230][T14122] veth0_macvtap: entered promiscuous mode [ 679.094005][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.105059][T14122] veth1_macvtap: entered promiscuous mode [ 679.128716][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.153998][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.179797][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.219302][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.231866][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.256876][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.269070][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.287797][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.299476][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.302377][T14296] loop0: detected capacity change from 0 to 2048 [ 679.326815][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.341315][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.352782][T14122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.362336][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.384441][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.397856][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.406949][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.409018][T14296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.417818][T14283] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 679.437107][T14122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.449534][T14122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.470906][T14122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.491825][T14122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.501990][T14122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.504232][ T27] audit: type=1800 audit(679.455:247): pid=14283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2666" name="file2" dev="loop2" ino=1048624 res=0 errno=0 [ 679.512047][T14122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.539624][T14122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.694556][ T1126] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 679.770920][ T1126] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 679.827721][ T1126] EXT4-fs (loop0): This should not happen!! Data will be lost [ 679.827721][ T1126] [ 679.868481][ T1126] EXT4-fs (loop0): Total free blocks count 0 [ 679.874563][ T1126] EXT4-fs (loop0): Free/Dirty block details [ 679.916017][ T1126] EXT4-fs (loop0): free_blocks=2415919504 [ 679.928041][ T1126] EXT4-fs (loop0): dirty_blocks=16 [ 679.944840][ T1126] EXT4-fs (loop0): Block reservation details [ 679.964476][T14304] loop2: detected capacity change from 0 to 512 [ 680.003466][ T1126] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 680.037314][T14304] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 680.097148][ T1140] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 680.112359][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.125689][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.143930][T14304] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 680.251369][T14309] netlink: 'syz.1.2670': attribute type 10 has an invalid length. [ 680.274798][T14309] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.422806][T14309] bridge_slave_1: left allmulticast mode [ 680.428762][T14309] bridge_slave_1: left promiscuous mode [ 680.435430][T14309] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.482913][T14309] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 680.948059][T14304] EXT4-fs (loop2): 1 truncate cleaned up [ 680.955287][T14304] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.036230][ T6429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.101974][ T6429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.241546][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.441964][ T3560] Process accounting resumed [ 682.395593][T14332] 9pnet_fd: Insufficient options for proto=fd [ 682.438194][T13076] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 682.661427][T13076] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 682.698100][T13076] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 682.722916][T13076] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 682.743731][T14346] Bluetooth: MGMT ver 1.22 [ 682.748347][T13076] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 682.748420][T13076] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.806624][T13076] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 683.007033][T12443] udevd[12443]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 683.049377][T13076] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 683.056799][T12443] udevd[12443]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 683.098876][T13076] usb 3-1: USB disconnect, device number 44 [ 683.158785][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2683'. [ 683.467796][T12965] Process accounting resumed [ 684.366498][T14371] tipc: Enabling of bearer rejected, failed to enable media [ 685.802235][T12640] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 685.812418][T12640] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 685.824312][T12640] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 685.834193][T12640] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 685.859787][T12640] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 685.870775][T12640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 685.972595][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.979166][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.119407][T14399] lo speed is unknown, defaulting to 1000 [ 686.346302][T14391] Invalid ELF header magic: != ELF [ 686.389196][T14391] overlayfs: overlapping lowerdir path [ 686.802956][T14426] loop3: detected capacity change from 0 to 2048 [ 686.961835][T14429] netlink: 'syz.1.2698': attribute type 10 has an invalid length. [ 687.571659][T14426] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.635093][T14423] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 687.908369][T14399] chnl_net:caif_netlink_parms(): no params data found [ 687.927643][T14122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.967682][ T51] Bluetooth: hci2: command tx timeout [ 688.107450][T14443] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2703'. [ 688.379157][T14451] loop3: detected capacity change from 0 to 1024 [ 688.394766][T14451] EXT4-fs: Ignoring removed bh option [ 688.435603][T14451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.496731][ T6426] tipc: Left network mode [ 688.617602][T14399] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.635117][T14399] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.650875][T14399] bridge_slave_0: entered allmulticast mode [ 688.669435][T14399] bridge_slave_0: entered promiscuous mode [ 688.670128][T14122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.693390][T14399] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.716722][T14399] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.743518][T14399] bridge_slave_1: entered allmulticast mode [ 688.776935][T14399] bridge_slave_1: entered promiscuous mode [ 689.087208][T14399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.119463][T14399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.185767][T14399] team0: Port device team_slave_0 added [ 689.245674][T14399] team0: Port device team_slave_1 added [ 689.287820][T12965] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 689.329138][T14473] loop3: detected capacity change from 0 to 256 [ 690.047770][ T51] Bluetooth: hci2: command tx timeout [ 690.153323][T12965] usb 2-1: Using ep0 maxpacket: 8 [ 690.168818][T12965] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 690.205945][T12965] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 690.239620][T14477] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 690.239640][T12965] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 690.263307][T12965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.284834][T12965] usbtmc 2-1:16.0: bulk endpoints not found [ 690.419963][T14399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.426980][T14399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.502563][T14399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.564751][T14488] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2711'. [ 690.595579][T14399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.613244][T14399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.677633][T14399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.114452][T14491] loop3: detected capacity change from 0 to 8192 [ 691.141212][T14399] hsr_slave_0: entered promiscuous mode [ 691.177302][T14491] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 691.191503][T14399] hsr_slave_1: entered promiscuous mode [ 691.231087][T14399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 691.257260][T14399] Cannot create hsr debugfs directory [ 691.291214][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.360060][T14491] FAT-fs (loop3): Filesystem has been set read-only [ 691.432138][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.548357][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.593089][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.689652][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.732944][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.762249][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.771474][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.779601][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.787618][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.795731][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.803802][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.812462][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.820583][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.828859][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.836879][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.861217][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.902342][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.933920][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 691.952257][T14491] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 692.013178][ T27] audit: type=1800 audit(692.015:248): pid=14491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2713" name="file2" dev="loop3" ino=1048628 res=0 errno=0 [ 692.099659][T12965] usb 2-1: USB disconnect, device number 19 [ 692.129127][ T51] Bluetooth: hci2: command tx timeout [ 692.577021][ T6426] hsr_slave_0: left promiscuous mode [ 692.588467][ T6426] hsr_slave_1: left promiscuous mode [ 692.650718][ T6426] pim6reg (unregistering): left allmulticast mode [ 693.622799][T14533] loop1: detected capacity change from 0 to 512 [ 693.648154][T14533] EXT4-fs: Ignoring removed nobh option [ 693.685562][T14533] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 693.720828][T14533] EXT4-fs (loop1): 1 truncate cleaned up [ 693.746538][T14533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 693.867418][T12734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.216106][ T51] Bluetooth: hci2: command tx timeout [ 694.635375][ T6426] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 695.032726][ T6426] bond0 (unregistering): Released all slaves [ 695.200184][T14525] syzkaller0: entered promiscuous mode [ 695.205854][T14525] syzkaller0: entered allmulticast mode [ 695.222202][T14528] netlink: 'syz.0.2718': attribute type 10 has an invalid length. [ 695.310651][T14537] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2720'. [ 695.677743][T14542] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2722'. [ 697.107380][ T6426] IPVS: stop unused estimator thread 0... [ 697.302171][T14566] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2728'. [ 697.437428][T14568] syzkaller0: entered promiscuous mode [ 697.467728][T14568] syzkaller0: entered allmulticast mode [ 697.482321][T14399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 697.545047][T14572] loop1: detected capacity change from 0 to 1024 [ 697.559747][T14572] EXT4-fs: Ignoring removed bh option [ 697.684574][T14399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 697.733006][T14572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.791562][T14399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 697.887273][T14399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 698.035461][T12734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.129213][T12319] Process accounting resumed [ 698.497915][T14581] syzkaller0: entered promiscuous mode [ 698.606511][T14581] syzkaller0: entered allmulticast mode [ 699.091412][T14399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.157365][T14399] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.343722][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.351011][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.454026][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.461300][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.998196][T14399] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 700.019435][T14399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.115634][T14601] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2737'. [ 700.841209][T14616] syzkaller0: entered promiscuous mode [ 700.866164][T14616] syzkaller0: entered allmulticast mode [ 701.182967][ C1] sd 0:0:1:0: [sda] tag#7349 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 701.193503][ C1] sd 0:0:1:0: [sda] tag#7349 CDB: Write(6) 0a 00 00 00 0e 00 00 00 3e 01 00 00 [ 701.409213][T14399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.848804][T14399] veth0_vlan: entered promiscuous mode [ 701.905281][T14399] veth1_vlan: entered promiscuous mode [ 701.936852][T14399] veth0_macvtap: entered promiscuous mode [ 701.956060][T14399] veth1_macvtap: entered promiscuous mode [ 702.029204][T14399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.054814][T14399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.087417][T14399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.116730][T14399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.137538][T14399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 702.169023][T14399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.193915][T14399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.230201][T14644] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2747'. [ 702.261472][T14399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.302134][T14399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.351635][T14399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.397585][T14399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.439549][T14399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 702.491386][T14399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.504033][ C1] sd 0:0:1:0: [sda] tag#7350 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 702.514874][ C1] sd 0:0:1:0: [sda] tag#7350 CDB: Write(6) 0a 00 00 00 0e 00 00 00 3e 01 00 00 [ 702.515532][T14399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.835559][T14399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.896779][T14399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.964063][T14399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.029124][T14399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.153831][T14661] syzkaller0: entered promiscuous mode [ 703.189672][T14661] syzkaller0: entered allmulticast mode [ 703.830677][ T6419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.878216][ T6419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.966399][ C1] sd 0:0:1:0: [sda] tag#7352 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 703.976959][ C1] sd 0:0:1:0: [sda] tag#7352 CDB: Write(6) 0a 00 00 00 0e 00 00 00 3e 01 00 00 [ 703.999039][ T6416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.006924][ T6416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.052759][T14686] loop3: detected capacity change from 0 to 1024 [ 704.229047][T14686] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 704.301331][ T27] audit: type=1800 audit(704.295:249): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2756" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 704.530105][T14701] loop2: detected capacity change from 0 to 8192 [ 704.597617][T14691] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 704.617112][T14701] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 705.024815][ T27] audit: type=1800 audit(704.335:250): pid=14686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2756" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 705.342368][T14699] xt_CT: No such helper "netbios-ns" [ 705.437328][T14691] EXT4-fs (loop3): Remounting filesystem read-only [ 705.510036][T14122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 706.888364][T14733] loop0: detected capacity change from 0 to 1024 [ 706.921398][T14733] journal_path: Lookup failure for './file0' [ 706.947776][T14733] EXT4-fs: error: could not find journal device path [ 707.511138][T14751] loop0: detected capacity change from 0 to 1024 [ 707.533860][T14751] EXT4-fs: Ignoring removed orlov option [ 707.573207][T14751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c118, mo2=0002] [ 707.601938][T14751] System zones: 0-1, 3-12 [ 707.617060][T14751] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.636161][T14754] syzkaller0: entered promiscuous mode [ 707.646817][T14754] syzkaller0: entered allmulticast mode [ 707.776691][T12259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.980183][T14762] loop1: detected capacity change from 0 to 1024 [ 708.000096][T14762] journal_path: Lookup failure for './file0' [ 708.012602][T14762] EXT4-fs: error: could not find journal device path [ 708.683732][T14781] syzkaller0: entered promiscuous mode [ 708.699395][T14781] syzkaller0: entered allmulticast mode [ 709.170458][T14789] loop0: detected capacity change from 0 to 2048 [ 709.208955][T14789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 709.309274][T14788] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 709.408081][T12259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.518574][T14794] netlink: 'syz.3.2796': attribute type 10 has an invalid length. [ 709.592118][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.616780][T14794] bridge_slave_1: left allmulticast mode [ 709.625011][T14794] bridge_slave_1: left promiscuous mode [ 709.696993][ T6015] Process accounting resumed [ 710.447146][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.462990][T14794] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 711.185362][T14811] loop0: detected capacity change from 0 to 8192 [ 711.274572][T14811] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 711.329865][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.349481][T14811] FAT-fs (loop0): Filesystem has been set read-only [ 711.386953][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.395129][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.428774][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.483827][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.492455][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.500720][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.508913][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.516789][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.525911][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.534473][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.542618][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.550813][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.559007][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.572415][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.580566][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.590309][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.598532][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.606695][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.634635][T14811] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 711.654905][ T27] audit: type=1800 audit(711.655:251): pid=14811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2805" name="file2" dev="loop0" ino=1048636 res=0 errno=0 [ 711.724975][T14818] loop1: detected capacity change from 0 to 2048 [ 711.793003][T14818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 711.950005][T14817] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 712.594661][ T5814] Process accounting resumed [ 712.941092][T12734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.445401][T14844] syzkaller0: entered promiscuous mode [ 713.451173][T14844] syzkaller0: entered allmulticast mode [ 713.896521][T13076] hid-generic 0005:0457:0009.000B: unknown main item tag 0x0 [ 713.919653][T13076] hid-generic 0005:0457:0009.000B: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 714.010812][T14854] loop3: detected capacity change from 0 to 2048 [ 714.095159][T14854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 714.173689][T14851] loop2: detected capacity change from 0 to 8192 [ 714.180946][T14852] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 714.261201][T14851] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 714.313357][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.341857][T14851] FAT-fs (loop2): Filesystem has been set read-only [ 714.356066][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.387604][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.428066][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.445586][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.473610][T14122] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 714.483304][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.506908][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.529507][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.577952][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.585848][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 714.863764][T14864] loop1: detected capacity change from 0 to 8192 [ 715.121089][T14864] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 715.667637][T14862] xt_CT: No such helper "netbios-ns" [ 715.670127][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.764265][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.773616][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.783932][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.795112][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.807912][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.818279][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.834904][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.848718][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 715.874402][T14311] Process accounting resumed [ 716.070412][T14851] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 716.730335][ T27] audit: type=1800 audit(716.645:252): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2818" name="file2" dev="loop2" ino=1048637 res=0 errno=0 [ 717.355060][T14880] syzkaller0: entered promiscuous mode [ 717.387616][T14880] syzkaller0: entered allmulticast mode [ 717.540138][T14890] loop1: detected capacity change from 0 to 2048 [ 717.587376][T14890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 717.615102][T14889] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 717.671460][T12734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 717.870950][T13076] Process accounting resumed [ 718.739686][T14895] loop2: detected capacity change from 0 to 8192 [ 718.784185][T14895] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 718.801672][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.810168][T14895] FAT-fs (loop2): Filesystem has been set read-only [ 718.817315][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.826061][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.834547][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.858369][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.881426][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.906571][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.940041][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.949250][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 718.967673][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 719.020597][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 719.043519][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 719.078179][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 719.092977][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 719.128498][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 719.147628][T14895] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 719.197900][ T27] audit: type=1800 audit(719.205:253): pid=14895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2831" name="file2" dev="loop2" ino=1048642 res=0 errno=0 [ 719.360431][T14916] loop1: detected capacity change from 0 to 1024 [ 719.399120][T14916] journal_path: Lookup failure for './file0' [ 719.417638][T14916] EXT4-fs: error: could not find journal device path [ 720.235249][T14311] Process accounting resumed [ 721.185816][T14940] loop2: detected capacity change from 0 to 1024 [ 721.211593][T14940] journal_path: Lookup failure for './file0' [ 721.218633][T14940] EXT4-fs: error: could not find journal device path [ 721.663810][T14941] loop0: detected capacity change from 0 to 8192 [ 721.790627][T14941] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 721.795247][T14949] syzkaller0: entered promiscuous mode [ 721.827687][T14949] syzkaller0: entered allmulticast mode [ 721.846655][T14947] tipc: Enabled bearer , priority 0 [ 721.856164][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 721.914754][T14946] tipc: Resetting bearer [ 721.960962][T14941] FAT-fs (loop0): Filesystem has been set read-only [ 722.025871][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.097219][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.175271][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.189612][T14946] tipc: Disabling bearer [ 722.239508][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.307225][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.335888][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.345397][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.353590][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.365847][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.417669][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.468323][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.476256][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.547591][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.617864][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.625777][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.675242][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.685032][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.694758][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.717524][T14941] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 722.735193][ T27] audit: type=1800 audit(722.735:254): pid=14941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2848" name="file2" dev="loop0" ino=1048643 res=0 errno=0 [ 722.972562][T14969] loop1: detected capacity change from 0 to 8192 [ 723.120029][T14969] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 723.612853][T14967] xt_CT: No such helper "netbios-ns" [ 724.046369][T14959] Invalid ELF header magic: != ELF [ 724.078477][T14959] overlayfs: overlapping lowerdir path [ 724.439447][T14980] syzkaller0: entered promiscuous mode [ 724.445149][T14980] syzkaller0: entered allmulticast mode [ 724.458171][T14980] tipc: Enabled bearer , priority 0 [ 724.508022][T14979] tipc: Resetting bearer [ 724.678765][T14979] tipc: Disabling bearer [ 725.043101][T14993] loop2: detected capacity change from 0 to 8192 [ 725.051380][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 726.574122][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 726.580318][T14993] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 726.664483][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 726.714013][T14991] xt_CT: No such helper "netbios-ns" [ 726.765285][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 726.812356][ T9] usb 4-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 726.847371][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 726.902830][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 726.931753][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.989345][ T9] usbtmc 4-1:16.0: bulk endpoints not found [ 727.308422][ T23] Process accounting resumed [ 728.073599][T15001] loop1: detected capacity change from 0 to 8192 [ 728.171364][T15001] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 728.230621][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.247672][T15001] FAT-fs (loop1): Filesystem has been set read-only [ 728.280725][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.328872][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.357662][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.375086][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.401891][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.437738][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.445635][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.476411][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.497643][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.527111][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.545545][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.574073][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.591909][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.605612][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.640580][T15001] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 728.657323][ T27] audit: type=1800 audit(728.655:255): pid=15001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2870" name="file2" dev="loop1" ino=1048650 res=0 errno=0 [ 729.115533][T15016] syzkaller0: entered promiscuous mode [ 729.126042][T15016] syzkaller0: entered allmulticast mode [ 729.138897][ T23] usb 4-1: USB disconnect, device number 40 [ 729.149177][T15016] tipc: Enabled bearer , priority 0 [ 729.207902][T15015] tipc: Resetting bearer [ 729.275459][T15015] tipc: Disabling bearer [ 729.633960][T15028] loop0: detected capacity change from 0 to 8192 [ 729.670998][T15028] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 730.293946][T15026] xt_CT: No such helper "netbios-ns" [ 730.647369][T15035] loop3: detected capacity change from 0 to 8192 [ 730.752872][T15035] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 731.263447][T15033] xt_CT: No such helper "netbios-ns" [ 732.387004][T15038] Process accounting resumed [ 732.570598][T15040] loop0: detected capacity change from 0 to 8192 [ 732.703378][T15050] Invalid argument reading file caps for ./file0 [ 732.712847][T15040] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 732.752127][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 732.760191][ T6015] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 732.887577][T15040] FAT-fs (loop0): Filesystem has been set read-only [ 732.894304][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 733.124826][ T6015] usb 3-1: Using ep0 maxpacket: 8 [ 733.138481][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 733.140341][ T6015] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 733.167638][ T6015] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 733.352253][ T6015] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 733.362289][ T6015] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 733.372248][ T6015] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 733.388229][ T6015] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 733.747677][T15058] netlink: 'syz.1.2887': attribute type 10 has an invalid length. [ 733.927958][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 733.962736][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.056292][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.098944][ T6015] usbtmc: probe of 3-1:16.0 failed with error -22 [ 734.110285][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.123434][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.147221][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.275174][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.344268][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.358256][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.394008][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.443404][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.474722][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.508108][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.552122][T15040] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 734.587847][ T27] audit: type=1800 audit(734.585:256): pid=15040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2882" name="file2" dev="loop0" ino=1048655 res=0 errno=0 [ 735.004939][T15068] syzkaller0: entered promiscuous mode [ 735.034772][T15068] syzkaller0: entered allmulticast mode [ 735.094894][T15068] tipc: Enabled bearer , priority 0 [ 735.116342][T15067] tipc: Resetting bearer [ 735.220121][T15067] tipc: Disabling bearer [ 735.889631][T15081] loop3: detected capacity change from 0 to 8192 [ 735.954406][T15081] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 736.507253][T15079] xt_CT: No such helper "netbios-ns" [ 736.521961][T13076] usb 3-1: USB disconnect, device number 45 [ 737.168056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 737.227761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 737.643420][T15091] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 737.880080][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.520523][T15091] bridge_slave_1: left allmulticast mode [ 738.526202][T15091] bridge_slave_1: left promiscuous mode [ 738.531973][T15091] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.548911][T15091] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 739.037941][T15095] loop3: detected capacity change from 0 to 8192 [ 739.097189][T15095] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 739.117030][T15098] syzkaller0: entered promiscuous mode [ 739.127242][T15098] syzkaller0: entered allmulticast mode [ 739.154987][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.178498][T15095] FAT-fs (loop3): Filesystem has been set read-only [ 739.185886][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.192004][T15101] syzkaller0: entered promiscuous mode [ 739.213732][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.222514][T15101] syzkaller0: entered allmulticast mode [ 739.246350][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.302397][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.349682][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.378089][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.403779][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.455850][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.513023][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.543713][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.563091][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.571356][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.579504][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.603067][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.620472][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.642796][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.651786][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.670008][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.691866][T15095] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 739.751336][ T27] audit: type=1800 audit(739.715:257): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2898" name="file2" dev="loop3" ino=1048658 res=0 errno=0 [ 741.362906][T15118] loop3: detected capacity change from 0 to 8192 [ 741.716458][T15118] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 741.980141][T15116] xt_CT: No such helper "netbios-ns" [ 742.513580][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 742.721004][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 742.736316][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 742.746394][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 742.756432][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 742.767306][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 742.777934][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 742.791060][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 742.801304][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.815579][ T9] usbtmc: probe of 4-1:16.0 failed with error -22 [ 743.651308][T15101] tipc: Enabled bearer , priority 0 [ 743.672781][T15100] tipc: Resetting bearer [ 743.774348][T15100] tipc: Disabling bearer [ 744.778258][T15133] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2909'. [ 744.883068][T15125] Process accounting resumed [ 745.004922][T15135] loop2: detected capacity change from 0 to 8192 [ 745.025634][T15135] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 745.060915][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.116837][T15135] FAT-fs (loop2): Filesystem has been set read-only [ 745.126248][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.134761][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.164130][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.194041][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.206790][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.222436][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.232315][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.250740][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.273987][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.283065][ T6015] usb 4-1: USB disconnect, device number 41 [ 745.309718][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.321351][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.329961][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.341878][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.351990][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.364597][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.374713][T15143] loop1: detected capacity change from 0 to 512 [ 745.382487][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.399943][T15143] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 745.429067][T15143] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 745.437931][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.456129][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.472659][T15143] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.2913: corrupted xattr entries [ 745.506901][T15135] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 745.515080][T15143] EXT4-fs (loop1): 1 orphan inode deleted [ 745.519956][T15143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 745.581894][ T27] audit: type=1800 audit(745.585:258): pid=15135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2910" name="file2" dev="loop2" ino=1048662 res=0 errno=0 [ 745.650296][T12734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.673117][T15145] syzkaller0: entered promiscuous mode [ 745.679358][T15145] syzkaller0: entered allmulticast mode [ 746.214853][T15159] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2918'. [ 747.416397][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.433775][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.618097][ T6015] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 750.196144][T15182] loop3: detected capacity change from 0 to 8192 [ 750.223618][T15182] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 750.268102][ T6015] usb 1-1: Using ep0 maxpacket: 8 [ 750.279930][ T6015] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 750.298567][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.300505][ T6015] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 750.306439][T15182] FAT-fs (loop3): Filesystem has been set read-only [ 750.306462][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.306485][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.318819][ T6015] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 750.352054][ T6015] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 750.362502][ T6015] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 750.376464][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.386343][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.411926][ T6015] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 750.428849][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.439160][ T6015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.477863][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.491337][ T6015] usbtmc: probe of 1-1:16.0 failed with error -22 [ 750.509992][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.540286][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.570696][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.593984][T15187] loop1: detected capacity change from 0 to 2048 [ 750.600704][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.629939][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.645149][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.653816][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.663934][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.672982][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.684078][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.694148][T15188] Invalid ELF header magic: != ELF [ 750.705117][T15188] overlayfs: overlapping lowerdir path [ 750.719155][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.728800][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.733163][T15187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 750.765179][T15182] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 750.795699][ T6427] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 750.827632][ T27] audit: type=1800 audit(750.795:259): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2924" name="file2" dev="loop3" ino=1048663 res=0 errno=0 [ 750.850319][ T6427] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 750.883673][ T6427] EXT4-fs (loop1): This should not happen!! Data will be lost [ 750.883673][ T6427] [ 750.896216][ T6427] EXT4-fs (loop1): Total free blocks count 0 [ 750.902685][ T6427] EXT4-fs (loop1): Free/Dirty block details [ 750.912213][ T6427] EXT4-fs (loop1): free_blocks=2415919504 [ 750.927898][ T6427] EXT4-fs (loop1): dirty_blocks=16 [ 750.937774][ T6427] EXT4-fs (loop1): Block reservation details [ 750.948495][ T6427] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 750.957138][ T6427] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28 [ 751.286545][T15196] syzkaller0: entered promiscuous mode [ 751.293907][T15196] syzkaller0: entered allmulticast mode [ 751.381724][T15201] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2930'. [ 752.263143][ T23] usb 1-1: USB disconnect, device number 16 [ 754.766189][T15220] loop3: detected capacity change from 0 to 512 [ 755.464178][T15226] loop2: detected capacity change from 0 to 8192 [ 755.746086][T15226] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 755.925320][T15234] xt_CT: No such helper "netbios-ns" [ 756.010041][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.119556][T15226] FAT-fs (loop2): Filesystem has been set read-only [ 756.187965][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.340660][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.469603][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.559802][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.650456][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.722712][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.820521][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.858654][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.866570][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.874676][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.882678][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.891959][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.900110][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.908415][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.916349][T15226] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 756.924708][ T27] audit: type=1800 audit(756.925:260): pid=15226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2936" name="file2" dev="loop2" ino=1048664 res=0 errno=0 [ 757.107172][T15242] syzkaller0: entered promiscuous mode [ 757.137715][T15242] syzkaller0: entered allmulticast mode [ 757.282471][T15249] Invalid ELF header magic: != ELF [ 757.293532][T15249] overlayfs: overlapping lowerdir path [ 760.386171][T15247] tipc: Enabled bearer , priority 0 [ 760.399074][T15246] tipc: Disabling bearer [ 760.964329][T15267] loop2: detected capacity change from 0 to 8192 [ 761.015908][T15267] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 761.061753][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.078581][T15267] FAT-fs (loop2): Filesystem has been set read-only [ 761.088931][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.135164][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.157118][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.207425][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.255446][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.317663][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.325575][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.377630][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.389962][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.421841][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.460453][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.509477][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.537861][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.582506][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.634561][T15267] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 761.668986][ T27] audit: type=1800 audit(761.675:261): pid=15267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2950" name="file2" dev="loop2" ino=1048665 res=0 errno=0 [ 761.671823][T15281] syzkaller0: entered promiscuous mode [ 761.728224][T15281] syzkaller0: entered allmulticast mode [ 761.819410][T15284] Invalid ELF header magic: != ELF [ 761.830594][T15284] overlayfs: overlapping lowerdir path [ 761.993086][T13076] hid-generic 0005:0457:0009.000C: unknown main item tag 0x0 [ 762.016148][T13076] hid-generic 0005:0457:0009.000C: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 764.857657][T12640] Bluetooth: hci3: command 0x0406 tx timeout [ 765.852817][T15293] tipc: Enabling of bearer rejected, failed to enable media [ 767.688078][T15330] tipc: Started in network mode [ 767.693044][T15330] tipc: Node identity 5ab0ff1c896b, cluster identity 4711 [ 767.723795][T15330] tipc: Enabled bearer , priority 0 [ 767.746949][T15329] tipc: Disabling bearer [ 768.116250][T15339] 0: reclassify loop, rule prio 0, protocol 03 [ 768.235931][T15332] loop0: detected capacity change from 0 to 8192 [ 768.454551][T15332] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 768.569492][ T9] hid-generic 0005:0457:0009.000D: unknown main item tag 0x0 [ 768.596431][ T9] hid-generic 0005:0457:0009.000D: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 768.631058][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 768.643546][T15332] FAT-fs (loop0): Filesystem has been set read-only [ 768.650445][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 768.670093][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 768.731756][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 768.802062][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 768.995232][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.097818][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.236792][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.247361][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.282127][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.319559][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.328813][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.336783][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.345614][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.354131][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.362489][T15332] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 769.372046][ T27] audit: type=1800 audit(769.375:262): pid=15332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2967" name="file2" dev="loop0" ino=1048666 res=0 errno=0 [ 772.208171][T15364] tipc: Started in network mode [ 772.213171][T15364] tipc: Node identity 8e4f99e5be8f, cluster identity 4711 [ 772.220795][T15364] tipc: Enabled bearer , priority 0 [ 772.342752][T15363] tipc: Disabling bearer [ 772.753726][T15376] loop2: detected capacity change from 0 to 8192 [ 774.354666][T15376] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 774.597542][T12965] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 774.739797][T15378] loop1: detected capacity change from 0 to 8192 [ 774.798681][T15378] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 774.809908][T12965] usb 4-1: Using ep0 maxpacket: 8 [ 774.833567][T12965] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 774.865729][T12965] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 774.884312][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 774.908131][T12965] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 774.916234][T15378] FAT-fs (loop1): Filesystem has been set read-only [ 774.928252][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 774.939731][T12965] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 775.074098][T15386] loop0: detected capacity change from 0 to 8192 [ 775.098345][T15386] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 775.142529][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 775.194671][T12965] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 775.236636][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 775.442514][T12965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.539068][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 775.805657][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 775.882262][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 775.941755][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 775.953800][T12965] usb 4-1: can't set config #16, error -71 [ 775.982071][T12965] usb 4-1: USB disconnect, device number 42 [ 775.997684][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 776.005581][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 776.054432][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 776.087646][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 776.095547][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 776.157526][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 776.165672][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 776.307590][T15378] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 776.367415][ T27] audit: type=1800 audit(776.345:263): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2982" name="file2" dev="loop1" ino=1048671 res=0 errno=0 [ 777.377978][T15387] Invalid ELF header magic: != ELF [ 777.415305][T15387] overlayfs: overlapping lowerdir path [ 778.050003][ T23] hid-generic 0005:0457:0009.000E: unknown main item tag 0x0 [ 778.068122][ T23] hid-generic 0005:0457:0009.000E: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 778.207730][T15412] loop0: detected capacity change from 0 to 8192 [ 779.305516][T15412] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 779.767305][T15414] fido_id[15414]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 779.920484][T15422] loop3: detected capacity change from 0 to 8192 [ 781.578556][T15422] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 782.165807][T15425] loop2: detected capacity change from 0 to 8192 [ 782.281339][T15425] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 782.338894][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.363180][T15425] FAT-fs (loop2): Filesystem has been set read-only [ 782.437503][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.445401][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.572330][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.627908][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.728354][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.737084][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.788167][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.827557][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.848852][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.863484][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.892571][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.912813][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.930007][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.951072][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 782.982161][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 783.004492][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 783.033109][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 783.051466][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 783.067542][T15425] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 783.203073][T15442] loop1: detected capacity change from 0 to 8192 [ 783.267069][T15442] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 783.302301][ T27] audit: type=1800 audit(783.295:264): pid=15425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2996" name="file2" dev="loop2" ino=1048680 res=0 errno=0 [ 784.689270][T15451] loop0: detected capacity change from 0 to 8192 [ 784.814711][T15451] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 784.844808][T15453] Invalid ELF header magic: != ELF [ 784.855879][T15453] overlayfs: overlapping lowerdir path [ 785.943547][T15472] loop1: detected capacity change from 0 to 8192 [ 786.090786][T15472] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 786.188742][T15464] loop3: detected capacity change from 0 to 8192 [ 786.457959][T15464] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 786.681419][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 786.747325][T15464] FAT-fs (loop3): Filesystem has been set read-only [ 786.758503][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 786.767516][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 786.775391][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 786.824086][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 786.897924][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 786.905832][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 786.972188][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 786.994005][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 787.027734][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 787.055974][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 787.087648][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 787.094065][T15484] loop1: detected capacity change from 0 to 8192 [ 787.107195][T15484] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 787.121714][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 787.163071][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 787.181880][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 787.204013][T15464] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 787.230893][ T27] audit: type=1800 audit(787.225:265): pid=15464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3012" name="file2" dev="loop3" ino=1048691 res=0 errno=0 [ 789.119416][T15510] Invalid ELF header magic: != ELF [ 789.130989][T15510] overlayfs: overlapping lowerdir path [ 789.269429][T15509] loop1: detected capacity change from 0 to 8192 [ 789.334298][T15509] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 789.356138][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.377525][T15509] FAT-fs (loop1): Filesystem has been set read-only [ 789.397495][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.405376][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.486754][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.522310][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.551443][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.580557][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.609215][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.647706][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.667595][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.675485][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.767886][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.817523][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.855985][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.877770][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.894912][T15530] loop0: detected capacity change from 0 to 512 [ 789.924565][T15509] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 789.941371][T15528] loop3: detected capacity change from 0 to 8192 [ 789.966191][T15528] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 789.966208][T15530] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 789.966229][T15530] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 789.997988][ T27] audit: type=1800 audit(789.965:266): pid=15509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3028" name="file2" dev="loop1" ino=1048694 res=0 errno=0 [ 790.136490][T15530] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.3036: corrupted xattr entries [ 790.253497][T15530] EXT4-fs (loop0): 1 orphan inode deleted [ 790.322860][T15530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.488144][T12640] Bluetooth: hci0: command 0x0406 tx timeout [ 790.576108][T12259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.927929][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 790.987665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 791.337611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 792.407304][T15553] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3043'. [ 792.755769][T15566] loop0: detected capacity change from 0 to 8192 [ 792.769033][T15566] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 793.049147][ T6666] hid-generic 0005:0457:0009.000F: unknown main item tag 0x0 [ 793.068075][ T6666] hid-generic 0005:0457:0009.000F: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 794.066925][T15561] loop2: detected capacity change from 0 to 8192 [ 794.172093][T15561] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 794.236076][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.277581][T15561] FAT-fs (loop2): Filesystem has been set read-only [ 794.293976][T15573] fido_id[15573]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 794.353310][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.399817][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.487727][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.575372][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.617825][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.639567][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.673123][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.710290][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.761000][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.796557][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.854576][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.890376][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.925110][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.941986][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.972100][T15561] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 794.996920][ T27] audit: type=1800 audit(794.995:267): pid=15561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3046" name="file2" dev="loop2" ino=1048701 res=0 errno=0 [ 795.891109][T15600] loop2: detected capacity change from 0 to 8192 [ 795.910098][T15602] loop3: detected capacity change from 0 to 8192 [ 795.923854][T15602] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 795.927899][T15600] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 796.029404][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.050344][T15600] FAT-fs (loop2): Filesystem has been set read-only [ 796.070684][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.091848][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.117706][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.153971][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.165024][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.175470][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.184442][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.192692][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.201027][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.210490][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.218825][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.226824][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.240487][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.254796][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.265513][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.280031][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.292229][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.302818][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.315499][T15600] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 796.326065][ T27] audit: type=1800 audit(796.325:268): pid=15600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3060" name="file2" dev="loop2" ino=1048704 res=0 errno=0 [ 796.478247][T15607] loop2: detected capacity change from 0 to 512 [ 796.510414][T15607] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.3062: inode has both inline data and extents flags [ 796.529667][T15607] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3062: couldn't read orphan inode 15 (err -117) [ 796.551426][T15607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 796.717059][T14399] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.811747][T15612] loop0: detected capacity change from 0 to 8192 [ 796.857345][T15612] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 798.505363][T15636] loop3: detected capacity change from 0 to 8192 [ 798.516708][T15636] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 798.518699][T15630] loop0: detected capacity change from 0 to 8192 [ 798.580068][T15630] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 798.626583][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.640337][T15630] FAT-fs (loop0): Filesystem has been set read-only [ 798.667857][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.715658][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.753009][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.778797][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.796603][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.816936][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.835687][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.858263][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.866263][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.883245][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.917367][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.946365][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.971518][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 798.996252][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 799.017517][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 799.037380][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 799.046795][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 799.062636][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 799.072180][T15630] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 799.086483][ T27] audit: type=1800 audit(799.085:269): pid=15630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3070" name="file2" dev="loop0" ino=1048711 res=0 errno=0 [ 799.114712][T15646] loop2: detected capacity change from 0 to 8192 [ 799.125824][T15646] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 799.915952][T15661] syzkaller0: entered promiscuous mode [ 799.925157][T15661] syzkaller0: entered allmulticast mode [ 799.952779][T15661] tipc: Enabled bearer , priority 0 [ 799.984722][T15661] tipc: Resetting bearer [ 800.009092][T15660] tipc: Resetting bearer [ 800.083923][T15660] tipc: Disabling bearer [ 800.394213][T15670] loop3: detected capacity change from 0 to 128 [ 800.526012][T15668] loop1: detected capacity change from 0 to 8192 [ 800.589379][T15668] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 800.640925][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.678142][T15668] FAT-fs (loop1): Filesystem has been set read-only [ 800.719823][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.744652][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.768108][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.795780][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.821311][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.830461][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.844371][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.855569][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.871350][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.898368][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.927755][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.935661][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.972410][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 800.997836][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 801.025164][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 801.037084][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 801.045500][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 801.053726][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 801.061877][T15668] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 801.162813][T15688] loop3: detected capacity change from 0 to 8192 [ 801.181558][T15688] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 801.214863][ T27] audit: type=1800 audit(801.215:270): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3085" name="file2" dev="loop1" ino=1048717 res=0 errno=0 [ 801.917782][ T5814] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 802.119634][ T5814] usb 3-1: Using ep0 maxpacket: 8 [ 802.127042][ T5814] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 802.159695][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 802.190735][ T5814] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 802.239063][ T5814] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 802.287660][ T5814] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 802.329114][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.528056][T15715] loop3: detected capacity change from 0 to 8192 [ 802.598264][ T5814] usb 3-1: GET_CAPABILITIES returned 0 [ 802.615750][T15715] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 802.648163][ T5814] usbtmc 3-1:16.0: can't read capabilities [ 802.730284][T15712] loop1: detected capacity change from 0 to 8192 [ 802.786844][T15712] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 802.827069][ T5814] usb 3-1: USB disconnect, device number 46 [ 803.782451][T15731] loop1: detected capacity change from 0 to 8192 [ 803.965156][T15729] loop3: detected capacity change from 0 to 512 [ 804.022331][T15731] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 804.112660][T15734] loop2: detected capacity change from 0 to 256 [ 804.127033][T15734] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 804.178232][T15729] EXT4-fs error (device loop3): ext4_quota_enable:7140: comm syz.3.3109: Bad quota inum: 1, type: 2 [ 804.240162][T15729] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 804.249383][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.273310][T15729] EXT4-fs (loop3): mount failed [ 804.295480][T15734] FAT-fs (loop2): Filesystem has been set read-only [ 804.428346][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.436960][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.447251][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.459917][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.476754][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.485833][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.513759][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.537341][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.575664][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.605543][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.639014][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.664446][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.674877][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.703413][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.735023][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.772530][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.792142][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.802419][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.816996][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.827223][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.851261][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.865232][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3111'. [ 804.875383][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.907659][T15734] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 804.991442][ T27] audit: type=1800 audit(804.975:271): pid=15734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3110" name="file1" dev="loop2" ino=1048728 res=0 errno=0 [ 805.359126][T15750] loop2: detected capacity change from 0 to 8192 [ 805.602628][T15750] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 805.697571][T13076] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 805.888956][T13076] usb 4-1: Using ep0 maxpacket: 8 [ 805.898079][T13076] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 805.908676][T13076] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 805.922230][T13076] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 805.932447][T13076] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 805.945962][T13076] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 805.957293][T13076] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.197644][T13076] usb 4-1: GET_CAPABILITIES returned 0 [ 806.213364][T13076] usbtmc 4-1:16.0: can't read capabilities [ 806.422592][T13076] usb 4-1: USB disconnect, device number 43 [ 807.325532][T15778] loop3: detected capacity change from 0 to 8192 [ 807.590447][T15778] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 808.460621][T15792] loop1: detected capacity change from 0 to 2048 [ 808.502204][T15792] EXT4-fs: Ignoring removed mblk_io_submit option [ 808.580309][T15792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.851364][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.877593][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.974131][T15792] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.3131: bg 0: block 234: padding at end of block bitmap is not set [ 809.040259][T15792] EXT4-fs (loop1): Remounting filesystem read-only [ 809.159511][T12734] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.223343][T15804] loop0: detected capacity change from 0 to 8192 [ 809.231478][ T6015] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 809.251545][T15804] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 809.597724][ T6015] usb 3-1: Using ep0 maxpacket: 8 [ 809.609913][ T6015] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 809.619833][ T6015] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 810.417503][ T6015] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 810.430675][ T6015] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.448554][ T6015] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 810.477484][ T6015] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.720570][ T6015] usb 3-1: GET_CAPABILITIES returned 0 [ 810.726157][ T6015] usbtmc 3-1:16.0: can't read capabilities [ 810.747598][T15825] Invalid argument reading file caps for ./file0 [ 810.945048][ T6015] usb 3-1: USB disconnect, device number 47 [ 811.565570][T15834] Invalid ELF header magic: != ELF [ 811.591630][T15834] overlayfs: overlapping lowerdir path [ 813.278017][ T3560] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 813.477949][ T3560] usb 1-1: Using ep0 maxpacket: 8 [ 813.488473][ T3560] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 813.512318][ T3560] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 813.537530][ T3560] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 813.581796][ T3560] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.607808][ T3560] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 813.637305][ T3560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.663933][T15872] netlink: 'syz.3.3163': attribute type 1 has an invalid length. [ 813.707175][T15872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3163'. [ 813.886323][ T3560] usb 1-1: GET_CAPABILITIES returned 0 [ 813.892095][ T3560] usbtmc 1-1:16.0: can't read capabilities [ 814.097816][ T6015] usb 1-1: USB disconnect, device number 17 [ 814.180256][T15870] Invalid ELF header magic: != ELF [ 814.204898][T15870] overlayfs: overlapping lowerdir path [ 814.344228][T15878] loop3: detected capacity change from 0 to 8192 [ 814.442622][T15878] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 814.905926][T15885] loop2: detected capacity change from 0 to 512 [ 814.941975][T15884] Invalid argument reading file caps for ./file0 [ 814.961522][T15885] EXT4-fs: Ignoring removed mblk_io_submit option [ 814.987070][T15885] EXT4-fs: Ignoring removed nobh option [ 815.184917][T15885] ------------[ cut here ]------------ [ 815.191077][T15885] EA inode 11 i_nlink=1026 [ 815.207869][T15885] WARNING: CPU: 1 PID: 15885 at fs/ext4/xattr.c:1059 ext4_xattr_inode_update_ref+0x572/0x5d0 [ 815.222849][T15885] Modules linked in: [ 815.226776][T15885] CPU: 1 PID: 15885 Comm: syz.2.3167 Not tainted syzkaller #0 [ 815.234814][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.245224][T15885] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 815.252383][T15885] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f0 98 ff 49 8b 34 24 48 c7 c7 20 dd de 8a 44 89 fa e8 3e 44 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 78 5e 48 08 [ 815.272572][T15885] RSP: 0018:ffffc9000d7cf360 EFLAGS: 00010246 [ 815.278917][T15885] RAX: b518deb2e0aba200 RBX: ffff88805e5168a8 RCX: 0000000000080000 [ 815.286905][T15885] RDX: ffffc9000ed99000 RSI: 0000000000019810 RDI: 0000000000019811 [ 815.294996][T15885] RBP: ffffc9000d7cf450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 815.303418][T15885] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88805e516700 [ 815.311575][T15885] R13: ffffc9000d7cf3c0 R14: dffffc0000000000 R15: 0000000000000402 [ 815.319664][T15885] FS: 00007f2eac3f66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 815.329011][T15885] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 815.335638][T15885] CR2: 00007fb341b5a000 CR3: 00000000516f0000 CR4: 00000000003506e0 [ 815.343676][T15885] Call Trace: [ 815.346976][T15885] [ 815.350048][T15885] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 815.355747][T15885] ? __ext4_journal_ensure_credits+0x30/0x450 [ 815.362034][T15885] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 815.368131][T15885] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 815.373801][T15885] ? __ext4_journal_ensure_credits+0x450/0x450 [ 815.380061][T15885] ext4_xattr_delete_inode+0xb3b/0xd00 [ 815.385572][T15885] ? ext4_truncate+0xcc0/0x1140 [ 815.390554][T15885] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 815.396703][T15885] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 815.402629][T15885] ext4_evict_inode+0xa88/0xe70 [ 815.407770][T15885] ? evict+0x482/0x8a0 [ 815.411920][T15885] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 815.418061][T15885] ? do_raw_spin_unlock+0x121/0x230 [ 815.423416][T15885] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 815.429537][T15885] evict+0x4b7/0x8a0 [ 815.433465][T15885] ? __lock_acquire+0x7d80/0x7d80 [ 815.438610][T15885] ? proc_nr_inodes+0x230/0x230 [ 815.443496][T15885] ? do_raw_spin_unlock+0x121/0x230 [ 815.448819][T15885] ? _raw_spin_unlock+0x28/0x40 [ 815.453733][T15885] ext4_orphan_cleanup+0xc33/0x1470 [ 815.459045][T15885] ? ext4_orphan_del+0xc90/0xc90 [ 815.464285][T15885] ? ext4_register_li_request+0x182/0x930 [ 815.470218][T15885] ? errseq_check_and_advance+0x66/0x120 [ 815.475918][T15885] ext4_fill_super+0x5fb5/0x6870 [ 815.480997][T15885] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 815.487392][T15885] ? __might_sleep+0xe0/0xe0 [ 815.492182][T15885] ? read_lock_is_recursive+0x20/0x20 [ 815.497658][T15885] ? snprintf+0xe9/0x140 [ 815.501983][T15885] ? down_read_killable+0x340/0x340 [ 815.507532][T15885] ? setup_bdev_super+0x56b/0x660 [ 815.512623][T15885] get_tree_bdev+0x3e5/0x520 [ 815.517283][T15885] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 815.523725][T15885] ? setup_bdev_super+0x660/0x660 [ 815.528891][T15885] ? apparmor_capable+0x137/0x1a0 [ 815.533967][T15885] ? bpf_lsm_capable+0x9/0x10 [ 815.538770][T15885] ? security_capable+0x89/0xb0 [ 815.543701][T15885] vfs_get_tree+0x8c/0x280 [ 815.548308][T15885] do_new_mount+0x24a/0xa40 [ 815.552909][T15885] __se_sys_mount+0x2e7/0x3d0 [ 815.557761][T15885] ? __x64_sys_mount+0xc0/0xc0 [ 815.562601][T15885] ? lockdep_hardirqs_on+0x98/0x150 [ 815.568298][T15885] ? __x64_sys_mount+0x20/0xc0 [ 815.573136][T15885] do_syscall_64+0x55/0xb0 [ 815.577719][T15885] ? clear_bhb_loop+0x40/0x90 [ 815.582453][T15885] ? clear_bhb_loop+0x40/0x90 [ 815.587188][T15885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 815.593246][T15885] RIP: 0033:0x7f2eae19f34a [ 815.597777][T15885] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.618033][T15885] RSP: 002b:00007f2eac3f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 815.626517][T15885] RAX: ffffffffffffffda RBX: 00007f2eac3f5ee0 RCX: 00007f2eae19f34a [ 815.634673][T15885] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f2eac3f5ea0 [ 815.642787][T15885] RBP: 0000200000000180 R08: 00007f2eac3f5ee0 R09: 0000000000800718 [ 815.651010][T15885] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000000 [ 815.659121][T15885] R13: 00007f2eac3f5ea0 R14: 00000000000004a7 R15: 000000000000002c [ 815.667400][T15885] [ 815.670585][T15885] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 815.677902][T15885] CPU: 1 PID: 15885 Comm: syz.2.3167 Not tainted syzkaller #0 [ 815.685384][T15885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 815.695464][T15885] Call Trace: [ 815.698770][T15885] [ 815.701730][T15885] dump_stack_lvl+0x18c/0x250 [ 815.706443][T15885] ? show_regs_print_info+0x20/0x20 [ 815.711676][T15885] ? load_image+0x420/0x420 [ 815.716223][T15885] panic+0x2ca/0x720 [ 815.720160][T15885] ? bpf_jit_dump+0xd0/0xd0 [ 815.724716][T15885] __warn+0x2e0/0x470 [ 815.728755][T15885] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 815.734775][T15885] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 815.740791][T15885] report_bug+0x2be/0x4f0 [ 815.745149][T15885] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 815.751163][T15885] ? ext4_xattr_inode_update_ref+0x572/0x5d0 [ 815.757173][T15885] ? ext4_xattr_inode_update_ref+0x574/0x5d0 [ 815.763186][T15885] handle_bug+0xcf/0x120 [ 815.767463][T15885] exc_invalid_op+0x1a/0x50 [ 815.771995][T15885] asm_exc_invalid_op+0x1a/0x20 [ 815.776878][T15885] RIP: 0010:ext4_xattr_inode_update_ref+0x572/0x5d0 [ 815.783500][T15885] Code: 50 4c 89 e0 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 e7 e8 81 f0 98 ff 49 8b 34 24 48 c7 c7 20 dd de 8a 44 89 fa e8 3e 44 0a ff <0f> 0b 4c 8b 64 24 10 4c 8d 6c 24 60 e9 8e fe ff ff e8 78 5e 48 08 [ 815.803137][T15885] RSP: 0018:ffffc9000d7cf360 EFLAGS: 00010246 [ 815.809236][T15885] RAX: b518deb2e0aba200 RBX: ffff88805e5168a8 RCX: 0000000000080000 [ 815.817243][T15885] RDX: ffffc9000ed99000 RSI: 0000000000019810 RDI: 0000000000019811 [ 815.825248][T15885] RBP: ffffc9000d7cf450 R08: ffff8880b8f28c53 R09: 1ffff110171e518a [ 815.833269][T15885] R10: dffffc0000000000 R11: ffffed10171e518b R12: ffff88805e516700 [ 815.841266][T15885] R13: ffffc9000d7cf3c0 R14: dffffc0000000000 R15: 0000000000000402 [ 815.849288][T15885] ? ext4_xattr_list_entries+0x3d0/0x3d0 [ 815.854964][T15885] ? __ext4_journal_ensure_credits+0x30/0x450 [ 815.861072][T15885] ext4_xattr_inode_dec_ref_all+0x9bb/0x1030 [ 815.867095][T15885] ? ext4_xattr_delete_inode+0xd00/0xd00 [ 815.872768][T15885] ? __ext4_journal_ensure_credits+0x450/0x450 [ 815.878975][T15885] ext4_xattr_delete_inode+0xb3b/0xd00 [ 815.884474][T15885] ? ext4_truncate+0xcc0/0x1140 [ 815.889356][T15885] ? ext4_expand_extra_isize_ea+0x1e70/0x1e70 [ 815.895453][T15885] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 815.901120][T15885] ext4_evict_inode+0xa88/0xe70 [ 815.906001][T15885] ? evict+0x482/0x8a0 [ 815.910106][T15885] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 815.916039][T15885] ? do_raw_spin_unlock+0x121/0x230 [ 815.921270][T15885] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 815.927191][T15885] evict+0x4b7/0x8a0 [ 815.931114][T15885] ? __lock_acquire+0x7d80/0x7d80 [ 815.936173][T15885] ? proc_nr_inodes+0x230/0x230 [ 815.941049][T15885] ? do_raw_spin_unlock+0x121/0x230 [ 815.946280][T15885] ? _raw_spin_unlock+0x28/0x40 [ 815.951174][T15885] ext4_orphan_cleanup+0xc33/0x1470 [ 815.956409][T15885] ? ext4_orphan_del+0xc90/0xc90 [ 815.961373][T15885] ? ext4_register_li_request+0x182/0x930 [ 815.967127][T15885] ? errseq_check_and_advance+0x66/0x120 [ 815.972791][T15885] ext4_fill_super+0x5fb5/0x6870 [ 815.977804][T15885] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 815.984077][T15885] ? __might_sleep+0xe0/0xe0 [ 815.988696][T15885] ? read_lock_is_recursive+0x20/0x20 [ 815.994110][T15885] ? snprintf+0xe9/0x140 [ 815.998401][T15885] ? down_read_killable+0x340/0x340 [ 816.003630][T15885] ? setup_bdev_super+0x56b/0x660 [ 816.008681][T15885] get_tree_bdev+0x3e5/0x520 [ 816.013298][T15885] ? ext4_parse_test_dummy_encryption+0xb0/0xb0 [ 816.019571][T15885] ? setup_bdev_super+0x660/0x660 [ 816.024626][T15885] ? apparmor_capable+0x137/0x1a0 [ 816.029677][T15885] ? bpf_lsm_capable+0x9/0x10 [ 816.034391][T15885] ? security_capable+0x89/0xb0 [ 816.039266][T15885] vfs_get_tree+0x8c/0x280 [ 816.043710][T15885] do_new_mount+0x24a/0xa40 [ 816.048250][T15885] __se_sys_mount+0x2e7/0x3d0 [ 816.052959][T15885] ? __x64_sys_mount+0xc0/0xc0 [ 816.057760][T15885] ? lockdep_hardirqs_on+0x98/0x150 [ 816.062989][T15885] ? __x64_sys_mount+0x20/0xc0 [ 816.067777][T15885] do_syscall_64+0x55/0xb0 [ 816.072216][T15885] ? clear_bhb_loop+0x40/0x90 [ 816.076922][T15885] ? clear_bhb_loop+0x40/0x90 [ 816.081635][T15885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 816.087553][T15885] RIP: 0033:0x7f2eae19f34a [ 816.091993][T15885] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.111624][T15885] RSP: 002b:00007f2eac3f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 816.120070][T15885] RAX: ffffffffffffffda RBX: 00007f2eac3f5ee0 RCX: 00007f2eae19f34a [ 816.128068][T15885] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f2eac3f5ea0 [ 816.136067][T15885] RBP: 0000200000000180 R08: 00007f2eac3f5ee0 R09: 0000000000800718 [ 816.144060][T15885] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000000 [ 816.152050][T15885] R13: 00007f2eac3f5ea0 R14: 00000000000004a7 R15: 000000000000002c [ 816.160059][T15885] [ 816.163664][T15885] Kernel Offset: disabled [ 816.168135][T15885] Rebooting in 86400 seconds..