last executing test programs: 25.629433885s ago: executing program 0 (id=5813): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd7000000000000a010101000000000000000000000000ac1414aa00000000000000000000000000000080000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000008000100000000000e0000000000000000000000000000000000000000000000ffffffffffffffff040000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg(r2, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x80, 0x0}, 0x20000000) 25.148076867s ago: executing program 0 (id=5814): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nogrpid}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), 0x0, 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {0x1, 0x2}, [], {0x4, 0x4}, [], {}, {0x20, 0x7}}, 0x24, 0x3) 24.499887313s ago: executing program 0 (id=5819): r0 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x4, @pix_mp={0xfffffffe, 0xfffffffe, 0x47504a50, 0x8, 0x3, [{0xfffff883, 0x4}, {0x400, 0x7fffffff}, {0xc8f, 0x6}, {0x9, 0x8}, {0x400, 0x4}, {0x50b, 0x9}, {0x6, 0x3}, {0xfff, 0x9}], 0x6, 0x1, 0x6, 0x1}}) 24.324373128s ago: executing program 0 (id=5821): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0x9361, 0x0) 24.099455304s ago: executing program 0 (id=5823): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e000000100"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) r1 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, 0x0, 0x0, 0x4855}, 0x24000052) 23.679426714s ago: executing program 0 (id=5824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000003c0)=""/188, 0xbc}], 0x1}}], 0x1, 0x40000102, 0x0) 23.256911775s ago: executing program 32 (id=5824): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x0, &(0x7f00000038c0)=[{&(0x7f00000003c0)=""/188, 0xbc}], 0x1}}], 0x1, 0x40000102, 0x0) 11.640063337s ago: executing program 3 (id=5868): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(0x0, r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.30575905s ago: executing program 3 (id=5873): mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0xee00, 0xee00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 10.173254224s ago: executing program 3 (id=5875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x4e}, 0x28) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56}, 0x28) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 2.048230198s ago: executing program 1 (id=5901): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003240)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="433df4e6f0b92bf353a02a40740b3fda71dc52edb0e5926787bc3702000000476dd6ac00594b52150085af1152c29991f4539dc1b72bc521f77d4f9189442e822702a78098f146634c461d429081abae0a51995853ea832f46d085", 0x5b}, {&(0x7f00000000c0)="618d03dccad07264e133815886c1f478c67670b1b7004f8693852d8a8366", 0x1e}], 0x2, 0x0, 0x0, 0x4000804}], 0x1, 0x1) 1.821905844s ago: executing program 4 (id=5826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f00000000c0)="040000005b", &(0x7f0000000600)=""/176}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r2, r1, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @echo_request={0x91}}}}}}, 0x0) 1.694957307s ago: executing program 2 (id=5903): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000007fc0)={0x28, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x14, 0xce, 0x0, 0x0, @ipv6=@remote}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) 1.558012921s ago: executing program 1 (id=5904): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) 1.557012751s ago: executing program 4 (id=5905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 1.476244833s ago: executing program 2 (id=5906): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190008000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500e00000020000000000000000000000060000000000000000000000000a01010000000000000000000000000000000000010000000500000000000000400000007f800001000000000000000000000000000000006c00000000000000fc000000000000000000000000000001000000000001000081000000000000000000000000000000000000000000000000000000000004d66c0000000a000000e00000010000000000000000000000000135000005"], 0x17c}, 0x1, 0x0, 0x0, 0x85}, 0x4001) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0xa0100) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba90100"/236, 0xec, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)='7:0\x00', 0x4) 1.345395136s ago: executing program 1 (id=5907): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nogrpid}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f00000006c0)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) 1.335549517s ago: executing program 4 (id=5908): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000006b00)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000000340)="6f86fe28679984aea0ffc509fbead1db117bc6b5a0bc83209c9bd3f96eaa6cadb63f4da4c3f78fbe26a443c22e857f7c39b9de4d83bf114163ffeb12a273a10b12ead26a6f3520082e8840202c8cbee696d2ca0524726d20653521481608327818470b272113f1f8f62c840b6ce9ccef64302c0b79c23e7fbb60cbf67a72f32f3e3ec916f2589c4d564c25fa7178cf759ebf94d02297b5e99e376eb0cbb5d9360b09e587f2681a1b2411023d6c207a474413fdc5aa6cefbe8546ab2e006feb8694db34cf4baf60c7dae0bb1cd42cc2f07313bd476c3657f7ad7a058cdfc83d5f7a52cf124fc2ef69a2f28fe0717c02403866b2ca57cddbf68c89553db0094e0ca5dedfa9fbf2dfa1494dea4a545413aa8a6371b3c8983d8f142798fca78b320ddf0b404b88f70f9a274a7d28a452c3f57facb626a3d6b2d81c27fc89d348f61c05cf60dba8577ce459d29af4ffc5c9eb6ff11bab4ad0e9f04902d3e607ab16a820c186b1ea79c8f0faea14e26f086de7a4c41a3d5f461832405c3b18aec07bf108321bfe53b57ae847e3f6f3b9c3f9234b8ecffb81e003364be924ce6f2eaaae5ca5874d5576780f8267a9c3e2cb26a733424e470d06d52ff6027a16073cf722bf9a09829aecc60c0966b3e8a144ad7c11d07ec6d4baebf685b24cecfadb62b81c4b7d9277f14eb5f2e5f81d58572e382f5528cb891e65c3dcf9df91190dcb270ee4a4dbbc78d200959a08fcf9576b3e807ebec1995199c4ed933be88d45c891cfc26ae00e051030c0dc325cc0c9fd83f5d13c7a06af0eaae549ea17706023af2d33746f8af2a41b8e4b4a54edb16127da5804f9491638ad26310aed0311c138726d1a8344cf7f89ef0f0ccfd0d8862723e776276d6d99658bcee3828ddbb62427f169dd35ef043ed7841f6a9d2e3cb5aae7809fbd65f7dde833f699675bce0b0e1ef93e30a2e931bf8c0a505a2e15408026aaabbfc397de45a3b0c0cc14443eee3f696f5bfefecc5c7b0de600d32c5c52eca58345d86c816cd45c2d5a9573ebbadbe6711e71074143aaadbd64c9510178b01c9f292ddbeced6096c4d2328e394115dc1a33a33a8ad5de374bb19355103b0baa4f47ac37584741c9096ce5deff1ab44e0a71fa1974a5a9af0f154f363ba48c09d61765fdbeaac6681124fe2977d5c5e48b3cf618b19d75295c9473a15c15dffecb3c66e830a4e388fb5e3bbd0706b90100ec29b782fa117c5f4216bb4c9ce421e21b825e94b1870bb45b03e566336432ff1e7d08c0b009f688d451d135d0dd180cb4e7c72166d30df2b2934a42840bc228f73a4951af8227f55e30473dfd29c9440f1a933234927211fb70d7350106d7952588b491c959861fc83afbe803097cc9b573313e289793bca67cc4348e6eeaf938bfc1b36563c815f053b8bf7a8ad7685122a7532b67781dec0e77ada600fe7216a23c5d539724788ff8d9c27c905ce92009d3318d4ff53e88a8b614aa448e443b0db841befa296a4d1961f0cf997a23c55cf19e26f195aaea77085287211f81c8651befa3a3e4c169533758cdfd906daaa2baf5ab7c074269609ab041b9baba440f667ecbade08253c97a3e85c57a9b5186eda51535f909a40ba78b0e07c52fe82cb21f70e3e4cc7d5887da376fdf39ae2d28ee0a9a2167e8f800fe69444ca3ff5802566cb028faa314bb249a89040c3f2fe77083b96f2a062069b9ab17ad0e138ea38241416243e98298fa1c782d4502beed3f60acdb14fb7f5e22da6ce7b2b9bab108c3470131ebe2316e1b0f0da85e309ca9e65bfc2f70be5fc6dd74c9080b3a5466df36b8d34b014ff8d451acbe35ad8081000457f08cd337c801e5ffb7e81fd52fac9b35f511b404090050c7d31da88f25161b2783ffc1051ccbb60a9994cc9d3548d3affa743c798003a4c149aea45209503967b6f3f88c786da918c311e42d8fd4e2c8b8d6be70d6bbeb0901667b68adc094b64c6731c994f2d3cfeb966afa924ec5450f59da464c1718dedc95e6eb5de6d8f509cba7d05c9f1cfb1c30c7dec56433f6b5da8a5515dd67108909e888a739f4ac8636611bc2dd9c89f035f6b2e281ff19b241c16c059eccfac9907223540a4df6bd46cfe8cb5f4f774cc30b7f9d495635b065cdb42e00f2799b9980db18dcd03ab4c43524b579de3705e2a8814c2c0e505b60b8fc5cf0a6b8d9229e6d88f95147b344223650fface6d146e93f49da8723202b88bc3ad17eafb52a195efec74057dc72d5e89377ea490092df5bf589de3117d7b8807fa7a31f5bbb3c1fc99dc0f09b09ebe91f810216d8ebea01a6a074b2f7afccba0908ca9238cde416badec92151618dd31a1b4a30440f1fbd26a7e9fe0465c821992e6df6944787092184e4702f87612dce6e3699a641b0d68e01ca995f5c02ff9d5a308aa6beeabc89426b766016753a96cf98225498706753541976ff50b19fa0875838db77239bc7187b09bebde94c7b0d63fce2f543929338ee197316ceaa1f3b3e892679ebf989376abd1ea865cb1e724d9679f39cd748c904cbdec8805abf3f7eea7734ca1804069b39567bca71a7749eb4cc67c620aeca5c943135dc1d53c92df2e99033299ff6b69b1f9f89ab96a7b8306870dc222146c97143bfa34404a28592a8312f894250860ea2d6377f5ef471ab2a960fa3ffff55933c9c58e4be702dc04b856c6c02aaf8653fcae694bcef08827b58a314c25514bf32056696d36be31d4dec9f44d341cf6dfec66be5ed5038068b61e5bc51f534dfe46c00e230733080474a94b926c869818d57e97b6d4672f49b8bec79906b0b234d1e864bf682d89a89d0001d27e80b66dd30194692745743ce4671b5ea8d5d8a629804356494eb3f91c9e0a1786c2df8e51ae62a493c365ab9ed57b15ebc2d2098a8fe7ba98682d69f617c44103c758b023fe342385cc96f1f6de7ad99041f4d7a18e8d010746f67453f8a1b2bfcc01adb001da87da34179b5f40fd172f62b6600ec54b8ab892054cae94cf5fef2807d3678e359bee2da8a7550b27bb550a1e16f5ad2946f05ad4acec803989d504708d85fd3a9e46a57fe0635c5b54789ce1990c78721663a9ebead94b6a1db03adf03108eef90ebeb4e3af2c4894ceb273e644b647eb8c906f93c2c881ae5912e5cfe8d0561f633289086b324c3b5a9b7b60315912f28338d9abc180a1a658598c5c84daf2a16740b21daaa88d27c510e610cca652b374006beb8a564f923acffd8d11c3c6d2a49b2e9181429f6fa243068c54e71a83857ac6dc19a4a9e1f3c9338d360ee3954a41a9d76f0fc8d0992ab375dbb3df84c99094a4e64209afc5150ddd0b636564dd7370515c89d11e531a163430a9ab3de3bc2c67f3a1ee9808dcb3490f65b8732bf91f9a4867c194be03bd5f46b6d3a3983ccc51bf4069b781518af75d39cc7a080dba79b194e9b262f9e5783eb47c2772115c408f3a5e64acfd25edb91a721dc81f6b072e89b6d7e8a475f0afd44df29c93515d14deb58be554c015bc7b35a5dffd3c9a2ad16b80aeafa6226c40b4149090f3d48ed79f4fe55300ba2b17eecee18cba5503649564fc6c19bf62eb71c50c4a5dff0a49ed6169947ee5d6378c3f03ac07f74d7012a0876eaee2f911a6f645d51b76dc16fcc6380bc593e33d6288caf76e6267061e3a4dfeec80acbd5ad91723dc32a8702df0b8a59091a6f5f971f920d363ea58f8f43c239f6f760f99c9f9c8b2021b3d2a4a8a8012fb4f16d4f5791a16e6544a524c5536fc4cf20de161faaecfbefbc4abd1d1348ec09e2af90bff61abecbfa6ee03bba09f04104609dcef7775ffb83caf14ae2313c1795b5dfacab38b12359e0bd05ad76425da0ed31ea6e97336f17b7fb5c96922ab69932d0bd5771ec7aec75a6bdc8635306f8f10a5aa8c470b622d6908d1f5b77e813fe9997ee78ff90a538de7d8b46d9181b2385409804b67e9b9067067aa5d4ac850e57f84c12d0d2c52debb13dc7bc39c1e2218d07340c9bfcf1f6cb36d3e97b24f310929cfdd87a929515661b36cf6ecf530e6c0a4a32fe209ad7694da5b715b9f5ec119c94086da3597f3019fb55c38f8a86d71640c5eb939eb32c43ab0b1333ce13e65275a3444baaccd8e900c66e2699a596f3ff7308afe2c451589c4335ad5a32ba3a3853fcec49545fc85aa69737daec29c9406922ec955b318c87daa6875aae64f60c9d2898a5b032ec457436b249940b6f61a7eb3233714ad0e21738b9281fe17c683bb9db2103eb987c868613d37c648a2c8de07177edbbc667e93693b0a18b36505f9a04cdfcc02b76ef533fe675caadb271e3368b839e4fda226acf4cf017375877af1a091ee15dc9b0c1f16438112d51e42ece2ddc40fd4f1383fd2c301160d0d6a9b2a4fcd1b5990aad86763c29a1ca46c5e487836aa626d970edbc411727af9a794776da9e3ad99bd5dcc646b0b77c94ad0c79701877f848c94c438ac19785c5acfccda73a1731ca9c2d9332713809e364a4080e5d95324f0a445f16551dda15f37a8387944020a71f0b5aeba4e7fd52daffcb44dea8d17505e6cefa8e370f7f0ea27be92d6b737f4b9023fa4af0262e40fb4d4e58341c0a65a4019125bcddd6ec906708c4aaa5b13816cf47cace7857f804984e173474866925a493627f48e8884f51a397b5b6a8fd97317fa902964be3650608eef1679e85190f8310f36ee5cbd3e39131149237c347f1276ebe7ab79f570565b57378804a04d2119f8319ccc09464dba4a450460c84f776e8d5e197097053321c3d3d811eac100e2aa2a16aec0eb2f50eb17f4ef49472fce91bee2e3619be8d45441f8620e424ce92d3985f69dae82aadd034221aab6dd091f59421b29ee388de0df0acff9f4e25df6f107475f9b97e198454911e5d42bb20af40d8468e41fcc539f7465104f76c8848f06b06347efb5ed9fea4f4807da600df0ceb129d55a82cd86696a309a40a5cc0937a79fbc8263768fa7a310f59a895252fd676cf54c86150fdeb6e82498981f31265443158e81671db1bbe4411de5cb2d86bd52daa93302f905d305845a665a59fbee4891538f53475ae40dead1ae2829b4a280f452e72232bdae0fb67d2a3d6ea3492b05af0fe31fa0e942d7136abbc10fa3e488220920c9d86e9bd2672bd39358b9bd77d136d932c90b10511dabbed1494a177925144e8d3ea0e31948a3431938d384f28afdb1ef4e177852c35ebe4c7b72d87a72927ecf3b81f36eb7f4162dc4dd4679bc54e7718ae2365db67d7a9a5d6690d7d2424406dd58ecaae69e2c049ca2fcd58e027aed5dd13275bb82404ed9d677fa487635722c7e1480b3f4d9694a9d7d0448fbf5ea302b4363c254256a3f81e81fa15bb69a7f4ce8025beb66f4b2340fa56f90891f80ce6b97dfe618f55fd550f863780e7e6d1028d3e90155c31e71e4106d7feb39edbed544280969bd3e0aa21d77d6d013eeb52527fd2c7b05987ea8f1809d927d463e1b04322a11c2ed2493b0e722572b8632448b0e3b5e49499399ffc19e648b58b2e2b3ccf85438528e0a1e05c14c521b1a9c09832de1ac2e0689508c365e72097320f690338bef922d44da4ee13539f4ee649a6bbc905a1985b92634bdd7833003d16adc4552309e5be27a9b8028c08374a4364060a790491e52bf28bd5a38f5269f1c78775c0fe7fd3de4aae243724f6b137e5ee8bbc5457684faa5267a7893d634f18ad34d1b84748cb59129db00b92a2026c0b9452db19f1d80013aa100ac652113b465e074781a192f71c230fe85911de15f64751ea5c31d3fae5118f8ceb6170234f6f1247448473f933a0654a41e5916e9f413a065ddc62580ee6678b6ffaabfb0507f796d0574f47896ac70332f63b39c525b3816313a22314f3f08e76a736270d969e5079b6e4332c3986a5e5d363c1a27514f279b205dad5809a73728056db8ac57964eaffbdb38af681b21192a9d20cda22e38be33f3ea3101d52336c57804277d9ffefd0ddb305586aff1ccd63996b0d9abea5bd2b4b174b2f1cb93c6c2e2fe32f1da609777d4774b98d9d83fe7c0bb9094e26befc7e25bd1928ac8bed7dd1c3436371df1f78c23f6b5fa8644ece5a10111f9cbed480a789b65e3ef87d7a33a54a3944277f0c246407e58981007b1e1697c1675efa732ecaf8dcfb806d863a0b24ff41cbe65b6e3c34477e237cbf60d5f3cc2f14c8f3b88243780e8811c6a0f5f53224dfd68813789e6c59e0105aa174431ae7daae38401b62d3e9ec6439ab447bb0e66299e9b40cdad180f3e5c63c69d8756ebacdbc31dfd862834a25f4683e5905acab998347e6bf75c5c4f039934b1ef15f7a17c79ca2caf593c1d5dc7328f8f52cc6e1b15415c880868c1d4b36371c73398fdcf7995e0df62d37fa231ebe92b39f479d776fdc7cd0c689d49efc3ab61f863b123ad32e9540cf9ced01b4baa23c227463da91795c580ef622a936d774ebcf14426b463a726b8cbf1213238d1a06ddc4588c832391eda8726c7384bcb9dc2e601a0ae1d7e35a5f7b5897f0ef1517953599a89765efff8e33765c11f65f8c57817638c305b571babd4c19f4429e4b04ea7ddb91689de61a00e42d5b03d11f23fcdffa22237354ce6b2b66b8b8bbd4bc8ac1ca5b4ff3cbe5c8026a710d2ec7f2ba6d8efb3399c633012725355ea11cf9d2b3f16c972a2a4824a8c545a234a6e20ef39869af722f6061b005318ae1ef489eb1912263a60debdf0b9af236ba6c18deea06a554944f37bcb32ae1c487863a1db2f9311ff3f3c981099ca833a10c75a5127307fa5fef612d555f5465afa11f33fe9d3164d0a6d3697ef9dbd7ae3e1f61b306fabedb8fc46676651110d764ccacc747b3b1398f28e0488d20be3bbfc3f90f6fd7b2404b2a04908c66b3da6fe595dd617f9b6580de5df754410a3d4bd691b3bf65b08e9c7b6bb1582f6569d15b770a38782e555dd5f98ba62a15623af9e97b156547c6ccde978b27d2a54d1536a309046e2a190cd5cee6498d408a1323b6fde085541cff5c535e4c65a60c6093d915cbbb3f8b07e9afb0980b292ad021b2d66c83a01f28a269eb49cb3ad46986c8970710f80bcc1f80cc617984a5c9b9f6d701ac95379ffa5008b6df7df790ceb2b89e03802615431d82ff84ba39e640f7d9e4d91972873def7571caf1394da80f285a69c76015b46156f89a7366ff1b26fb9b400c5a7478b945e212c4dcdb050113171cc33f521be1a1bc9c2d9400e499946095b1a756c72313573bb371daf751706f4c549306c4fea39cc72cd350aaf7d0b08014ec251dcb5fac0ef3365fb03a7c4538b2188d92ae14f83f944128e5add25072ea99e21cf81caf23341c4fff52760e38f7256f4f4b1b0fe48c816b8550adeadc517478882e56d72892582f48cd6f95467553ab22c2af7032c52263f20a01d8c170a135c535c9b4ea99742fca9f9e67d5118639399687465d9c5a085666c2b93a944cda373af7752a255952548bb13251a0612d67fcba89b40e35ea5b3c31a3d19d4659267a42b84e35c733c8f4f9368bf333baabd6a4cb140f982b5caba78209dbe6d087746688737c62bf8dccc82dfef60a464374443828cd30f5a9ef07b86bb102771ecf0c837123b3ce2e9782d57089b570e7d0bfcb8aeccfe77019d47859ac43f4242a4df80266cdf284a995022560cbcf9e8cb52b83bd3155b1634167040441dce41913260906f90dc5bce58601bc79c2d255754d6d6ef3d038fec25dc079424f73efd771b3beec66f162b22d8631d252c67f72a7e155de3eb10c7cc545c501cf16e42aced59ca68ddafc427a0726de873f40dbe3ca5cc47e1935b4f3bfabee64d0b4be59eb9ab180ab6f6b20d3439112992d7474c5a4388d19426c36866e9fbd70b649203fb07ec9b360f7fcd36c953008d7024de17915f8e6af617ce6ab1bd61487207ff5f8691ee3e3a2b87a15a7f66143e5e00d29462ca654de64b33685f4965c3b23b6206e0fa8528d1b3891d6458491be913dbb19f4c5f88c6bfef310e3606d528abcc43a77e6a8743e3fc9b1f8558b12e87b7955e9197034e50e7fd53478d47ed7f060883666d47a5e2a33666dbe95c5bf53ad07ed976a1d8b47b91340e5e5aca100df39fb31b95e1ea25380174e177c9e9e970f976ec21332326266e02e262b81ab27a59e692d41b5776e52947d2bdc5a6326c58c2bad4cb5649108eb7f5bf00f27e69cb3d08f43fdfae51b2dbfebb4a2e66cf636d1495a477257bc1940f0049d172dc3814a78d7b2abda19c28020268be5521460d3c549b96d74926a65c29bfce76598d0888517469e7cd4457cabcd7e0c4ff0cf75a6acdd4cc6efef3158c90005668b9aa8578720051463fdf150e5ef31ec0ac93bda066eb88efafcbfc75a0cd704eed2f9bf3f085f22bdbcca1528669a54ef97138e3a7e1a26aa397ccc039654de28e3a5e19e33db08c628b8cd1ca7a5215632257e8ce61f2caa752ccb2946d3076b36752a4f8e150d39fb11a5b1379dc0c6ba150621b7bae647b4318c1f8f056c89843103d438a2fe32057cd341bf4eec7d6701aa8445c9c94b46bd8051e5515c248b3911335e61de53db40f4996d6e2bc6d5b2a2dd04674d348f0d875d7851d2d3f7a99366d08944ba8298c3a7e5f2f55c848dc74e2d87bda930a6aaef0c188befff6d164f50e04bfbd1bb41b65659abd3b2063d88c6e27ce1a50a2b05b918cdd09c3ee0d78020ede9790cb5dd9eb44de394ed148e1d9ea4d1d4a44a7115afa0b5ce3a23c6d9cb4dbef3d3c2154b75ecfdd5726b3c25a37b08d233ea852e5f0373c37ac646b483b22d1b8d52ac10bfaafacf488446517a610d5c84e3e0c2c81320fe94b289c577e5723f16eb5c56f1ed0c313ef1863e8125e09a6864306dfbc848ad52894461817ceead3f44648af86b45a30475e8d2b87832aad9fbbb421fd722e43b7c08be89202709ec733fa5826939cbf5569c8b17751f49c0eda59a4ca816f88f10b18f57f75472968a25fc0f516a42c9bcd5a942e034d8a8b455430da883b5b1df8cb58bea52265c82f54222de181baca9cba3f1e9277b2dab40de4ce66fa4315a2b73abfdaaa190beddec261f04b1d5893849d7dd072a791142f4bc87df3e1db4c739f7a86751f4dac66677c401998373ed345e6db824c66fcefca11ebd765a89a1caa287c0757e0168817e4fd2f97a2793937b63915e645662b1773b45a326dfa45b75de5f0ead6ad312bec2dc5cc89b11325462e2220660f8335be0c005e06e09e5513ed2aaaf80dacac2db5f5c3b8d075e883bb65b6942eac969215efb84a2a9c3eb7ea0fb67f693507366094852c86227db33a553c505ba02bcfd9fbee634e4a188417030ef7225335b03522c0eb0d87c65afab95fea6093b6898e5ab469df5789774e5b1bbfa73942f8b0f85604625468ec7210fa6be6856ae5769513cd0083d8245c4786fb718befa03cc22471e5e92c0e08ca828ee372fcefa06ae454c59b19e926fafee10f745ea091c6cf55be25ee7a0d91dfce3e6dee257c36eafc2d4cd705a3f63667cc6189884c0c3b3e3509447943ccaa083ca815f4eec01ea51a7b47154ecae0441e5270f6ad022b7b4fd330047b303492e7082c3748106809f64ec800366b5f41bbc6e1049c642611c93ad506a11169524af39de46aeda2272418b00b54733be15539a6453f0977fdaf42424f8db25ef58c95b7394649dfaec9dea0d4d72bc3f215cabffc92eceb07c7365c778ebd8a51fe010fba3b0b4a5532259e9444ceaea63310196ae3bfa112f70bde0da2fcfad673c836b526f4b0178f4be76b5c10d72d663facfe8136ea7c96b2fb2a19f955605515557110c4b33089da69a155313225eea4681293cd06b1ae59ca1d36b0864436404ee7dcece4c72117e3949c73590f23609bd0a6360187b76c6b6a7c56d1eb75b030f0829021def670c91e235cd897e6fe09053f0c18b129b7f91887f65bf5746a1aede98fde78eeef4eb67a9b7ee0f84e856c50e148a6dc3c34a38383d25b3086d8cddc020dc12e7462520ef8f17fdb61d89b13028f1b605bcfea213bb9a10c6dad5a9f71777143669f283f77880b27b882e4ff12d291c2ee24cff7f792d3754b89ccfdf1f3cba51d4a4aa138b697feaa2fc5afffc41bca1ba85afafa62dc53c9a22e5a9b09ccae35c2c81d597c630c7aff9649ac2136390cff21c0996033ce920e86fa709a38c7af37132e27f078b38bc58a93d0b0c0b85034635bb51c93b9a42df76d4836e50838d11978526f2d7d7939ffe033f0471c8a0456a497df40958e451266b904020b8f91c8b10252427665516cb2a70106c8227ed1e8a6ebbc0ae2eeaa6f2360de4c43a0201286d76b69d30babb4b9e59c9ddd695c485a69bc4ee77401a33add75f3b341d89abaea9ebdba0e25d9184043cb72eda61eb8012d27f056c65b31a7a997a8701eb4017fd8f47c645b5ccbecc645736b1a587309701453efcbf4681cc9df8aef5b3a56394d9a575025312403bd067b23eb5b0a8b008b9c8f99b25126e8337b26fdce35dcb816f90fe138d198b80ef184507b7b4e09f9c3b445e0295aea15d9e1d64d848b76fd8e8ea072e577616f2426c5d0b879ef79c3450195de26e2e657e47932095c50a3d30f11b60e5a2df0e74673157228e3f5b42e60f4904a7f9203f561677cc4457f418cc74951369ab406baaac10763a757cbd6613166d78be131c3d3031bcbd96172f5827776d40f381660d7d098ca0eabb8bae898998106b3817106d0a1698d1ceab71a37a4c294e15f1dbd2e6ba5604fedab90b5faf636b395911002f750e72c31f695d274e2d16191c1f81410f7f4420e6a4eea3b43dbb5932ae5b5d65402be99c03fac3c0ff805142e72de0cb269d372242c273ee6313169cd31e44d8a66626337a29b426d87430366473887d7e825c354af53af43dc1fae19c4c7038776c17ca8b458b2bb1cd839a9d8cedf5701c2875a8c9266b11c7eb96ec8fe874f789aa888f5005af9f0fd8fb1df7494e5af19460269acbfda0963b3b063cc92d6355ef44a780c15c7838c9225b5fac7af93d78dc78637e38afe4aec1ae8d1b17f16321d566932e12690db16951e8920ae857e8e6962caad5bdd48092fd82940c64887e5b79a1b88e09d91b7d7169dafe1ff1b62fd1ed43ba7cd247227cfc081ad1cc5a05a5d38b701be5831667ab6edb45bca1adb66b933532f1401b1d37fec7b61c74dba1f07cfd7e1b91fef723f1f92a2e9329a637a8ab102ab47ecc82cc9ab6f24e297fd456781b1a41e0feceae57bb157b82a93d443eb0530b4211b49b85fcb658a1eb17a3f76894f8ac87238d1739bcab1479c1c747c9aa7c795e32e082df15812ac8bb09524b798a2a5cad28987db1429423b4727422d6c238c7f15504cfca829273a3b4577e9fbe8032bde1b9bd0f9123a2ba167ffdc5d6d68723a863ead21662e3a6cae45f92271b1eba04ba1f9da781eec4858c40ce7c08fc728e57051588ea0207125db4cc48e7c454b5223bbfcb545ab2a660873a086183e9262f46040a829466f0bd65cd4de1ce8d6232904e89b018bc41043e3f01b056a9582c615cdc09c53dc", 0x2000, &(0x7f000000b900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.167433631s ago: executing program 2 (id=5909): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0xee00, 0xee00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 1.088122913s ago: executing program 4 (id=5910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.008741845s ago: executing program 2 (id=5911): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1}, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x0) 924.794187ms ago: executing program 2 (id=5912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', r1}, 0x94) 854.554609ms ago: executing program 1 (id=5913): io_submit(0x0, 0x20000007, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x20, 0x7, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x201}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 695.707753ms ago: executing program 2 (id=5914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000000)=""/106, &(0x7f0000000300), &(0x7f00000004c0), 0x80, r2, 0x0, 0x7}, 0x38) 481.274398ms ago: executing program 3 (id=5915): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e00330020180600080211000000080211000001ffffffffffff64000002080008021100000000"], 0x54}, 0x1, 0x0, 0x0, 0x4018010}, 0x804) 325.156252ms ago: executing program 1 (id=5916): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x24}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4044050}, 0x200400d0) 246.030044ms ago: executing program 3 (id=5917): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7c010000190008000000000001000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000500e00000020000000000000000000000060000000000000000000000000a01010000000000000000000000000000000000010000000500000000000000400000007f800001000000000000000000000000000000006c00000000000000fc000000000000000000000000000001000000000001000081000000000000000000000000000000000000000000000000000000000004d66c0000000a000000e00000010000000000000000000000000135000005"], 0x17c}, 0x1, 0x0, 0x0, 0x85}, 0x4001) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x1b6) fallocate(r1, 0x0, 0x0, 0x10000) pwrite64(r1, &(0x7f0000000100)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c532ba90100"/236, 0xec, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='md123', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='1.1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000700)='7:0\x00', 0x4) 242.980204ms ago: executing program 4 (id=5918): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000006b00)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000000340)="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", 0x2000, &(0x7f000000b900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 97.248628ms ago: executing program 4 (id=5919): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0xee00, 0xee00, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) 96.447348ms ago: executing program 1 (id=5920): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1}, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x0) 0s ago: executing program 3 (id=5921): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x10000800, &(0x7f00000002c0)={0xa, 0x5e1f, 0x3, @mcast2}, 0x1c) kernel console output (not intermixed with test programs): blocknr=18446744073709551615, size=1024 [ 1816.618897][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1816.651855][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1816.698816][T14731] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 1816.739097][T14731] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 1816.795034][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1816.834456][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1816.856048][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1816.901010][T14731] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 1816.924757][T14731] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 1816.937286][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1816.995436][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1817.054369][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1817.093532][T14731] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 1817.143195][T14731] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 1817.150548][T14731] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 1817.226367][T14731] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 1817.265347][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1817.302764][T14731] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 1817.355165][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1817.392532][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1817.440444][T14731] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 1817.504177][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1817.539623][T14731] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 1817.573037][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1817.635097][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1817.692391][T14731] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 1817.730382][T14731] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1818.060335][T23908] loop2: detected capacity change from 0 to 512 [ 1818.297642][T23904] loop1: detected capacity change from 0 to 40427 [ 1818.404243][T23904] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1818.411592][T23904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1818.573585][T23904] F2FS-fs (loop1): Image doesn't support compression [ 1818.716123][T23904] F2FS-fs (loop1): Image doesn't support compression [ 1818.877718][T23904] F2FS-fs (loop1): invalid crc value [ 1819.092786][T23904] F2FS-fs (loop1): Start checkpoint disabled! [ 1819.119878][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1819.135666][T23904] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1819.166980][T23904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1819.236722][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1819.330115][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1819.396649][T23914] loop2: detected capacity change from 0 to 2048 [ 1819.458199][T23914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1819.569347][T23917] syz.1.4436: attempt to access beyond end of device [ 1819.569347][T23917] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1819.661098][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.207468][T12058] kworker/u4:7: attempt to access beyond end of device [ 1820.207468][T12058] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1820.236217][T12058] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1821.314370][ T49] bond0 (unregistering): Released all slaves [ 1821.507704][T23930] loop1: detected capacity change from 0 to 128 [ 1821.621450][T23930] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1821.638805][T23930] ext4 filesystem being mounted at /478/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1822.111623][T23906] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4435'. [ 1824.375085][T15070] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1824.463247][T23756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.553181][T23756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.649748][T21650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.656983][T21650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.709703][T21650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.716935][T21650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.809012][T23947] loop1: detected capacity change from 0 to 512 [ 1825.008606][T23756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1825.061663][T23945] loop3: detected capacity change from 0 to 2048 [ 1825.094521][ T49] IPVS: stop unused estimator thread 0... [ 1825.137972][T23945] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1825.268121][T23955] loop1: detected capacity change from 0 to 256 [ 1825.892778][T23756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.445275][T23756] veth0_vlan: entered promiscuous mode [ 1826.509380][T23756] veth1_vlan: entered promiscuous mode [ 1826.604377][T23756] veth0_macvtap: entered promiscuous mode [ 1826.635256][T23756] veth1_macvtap: entered promiscuous mode [ 1826.685184][T23756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1826.729296][T23756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.761830][T23756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1826.801853][T23756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1826.811696][T23756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1826.992836][T23756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1827.030184][T23756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1827.041753][T23976] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4451'. [ 1827.060037][T23756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1827.070688][T23756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1827.249783][T23756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1827.435396][T23756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1827.623561][T23756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1827.805002][T23756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1827.854868][T23756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1827.889597][T23964] loop1: detected capacity change from 0 to 32768 [ 1827.892401][T23756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.913611][T23756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.922649][T23756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.931392][T23756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.046425][T23964] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 1828.091124][T23964] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1828.124671][T23964] OCFS2: File system is now read-only. [ 1828.130212][T23964] (syz.1.4449,23964,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 1828.150755][T23964] (syz.1.4449,23964,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 1828.160070][T23964] (syz.1.4449,23964,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 1828.235157][T23964] (syz.1.4449,23964,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 1828.257403][T23986] 9pnet_fd: Insufficient options for proto=fd [ 1828.265521][T23964] (syz.1.4449,23964,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 1828.277521][T21650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.330605][T21650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.600024][T21650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.738868][T21650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.745108][T23997] loop2: detected capacity change from 0 to 2048 [ 1829.979098][T24000] loop1: detected capacity change from 0 to 2048 [ 1830.010435][T24001] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1830.096530][T24000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1830.133138][T24001] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1830.219478][T24001] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1830.304508][T24001] Remounting filesystem read-only [ 1830.337231][ T3456] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 1830.401977][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1830.481940][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1830.546564][ T3456] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1830.604542][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1830.660302][ T3456] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 1830.734903][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1830.843309][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1830.852698][ T3456] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 1830.860033][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1831.058655][ T3456] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1831.104702][ T3456] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1831.169427][ T3456] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 1831.216746][ T3456] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 1831.256100][ T3456] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 1831.264707][ T3456] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1831.276049][ T3456] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 1831.283511][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1831.292615][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1831.301561][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1831.310743][ T3456] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 1831.317770][ T3456] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 1831.325329][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1831.337272][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1831.404796][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1831.475113][ T3456] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 1831.571932][ T3456] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 1832.569104][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.607387][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.651488][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.687500][T24025] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4459'. [ 1832.688692][ T3456] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 1832.706121][ T3456] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 1832.713752][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.723105][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.732646][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.742159][ T3456] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 1832.748972][ T3456] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 1832.769492][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.799673][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.846984][ T3456] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1832.910245][T23997] NILFS (loop2): mounting fs with errors [ 1832.929491][T24032] loop3: detected capacity change from 0 to 128 [ 1833.533142][T24032] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1833.638062][T24001] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1833.704469][T24001] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1833.715122][T24032] ext4 filesystem being mounted at /524/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1833.758016][T24001] Remounting filesystem read-only [ 1833.793735][T21650] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 1833.822250][T21650] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 1833.857796][T21650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1833.901717][T21650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1833.952416][T21650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1833.961385][T21650] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 1833.989412][T21650] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 1834.021449][T21650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1834.040504][T21650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1834.040530][T21650] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1834.042294][T15513] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1834.045582][T15513] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1834.045604][T15513] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 1834.045623][T15513] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 1834.045640][T15513] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1834.045657][T15513] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1834.527065][T24051] loop2: detected capacity change from 0 to 164 [ 1836.205405][T24069] syzkaller0: entered promiscuous mode [ 1836.229208][T24071] loop1: detected capacity change from 0 to 2048 [ 1836.231387][T24069] syzkaller0: entered allmulticast mode [ 1836.271100][T24069] tipc: Enabled bearer , priority 0 [ 1836.301598][T24073] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1836.312830][T24069] tipc: Resetting bearer [ 1836.348541][T24067] tipc: Resetting bearer [ 1836.417712][T24067] tipc: Disabling bearer [ 1836.422564][T24073] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1836.481943][T24073] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1836.504023][T24073] Remounting filesystem read-only [ 1836.509169][ T59] NILFS (loop1): discard dirty page: offset=65536, ino=3 [ 1836.544339][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1836.584142][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1836.616286][ T59] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1836.645788][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1836.679653][ T59] NILFS (loop1): discard dirty page: offset=196608, ino=3 [ 1836.710018][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1836.730482][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1836.749790][ T59] NILFS (loop1): discard dirty block: blocknr=49, size=1024 [ 1836.773055][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1836.796393][ T59] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 1836.803126][T24079] loop2: detected capacity change from 0 to 4096 [ 1836.828440][ T59] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1836.852091][ T59] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 1836.875536][ T59] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 1836.902829][ T59] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 1836.917612][T24079] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1836.930884][ T59] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 1836.940913][T24053] loop0: detected capacity change from 0 to 40427 [ 1836.949832][ T59] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 1837.005975][T24053] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1837.014070][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.079206][T15513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1837.091195][T24053] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1837.113058][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.151881][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.190027][T24053] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1837.192016][ T59] NILFS (loop1): discard dirty page: offset=0, ino=18 [ 1837.240036][ T59] NILFS (loop1): discard dirty block: blocknr=0, size=1024 [ 1837.263442][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.298467][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.351653][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.391315][ T59] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 1837.408508][ T59] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 1837.432934][T24053] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1837.440083][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.469296][T24053] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1837.476946][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.521867][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.556221][ T59] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 1837.585035][ T59] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 1837.603292][ T28] audit: type=1804 audit(1787969304.279:50): pid=24053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4465" name="/newroot/3/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 1837.627758][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.657844][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.679401][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.689911][ T59] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 1837.697089][ T59] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 1837.707146][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.719744][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.736565][ T59] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1837.748403][T24071] NILFS (loop1): mounting fs with errors [ 1837.849304][T24073] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1837.902124][T24073] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1837.932160][T24073] Remounting filesystem read-only [ 1837.937347][ T49] NILFS (loop1): discard dirty page: offset=0, ino=5 [ 1837.961898][ T49] NILFS (loop1): discard dirty block: blocknr=41, size=1024 [ 1837.991821][ T49] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1838.001678][ T49] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1838.032085][ T49] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1838.041058][ T49] NILFS (loop1): discard dirty page: offset=0, ino=4 [ 1838.047882][ T49] NILFS (loop1): discard dirty block: blocknr=40, size=1024 [ 1838.055290][ T49] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1838.064256][ T49] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1838.073210][ T49] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1838.093523][T15070] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 1838.114143][T15070] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 1838.120876][T15070] NILFS (loop1): discard dirty block: blocknr=42, size=1024 [ 1838.170642][T15070] NILFS (loop1): discard dirty block: blocknr=43, size=1024 [ 1838.178876][T15070] NILFS (loop1): discard dirty block: blocknr=44, size=1024 [ 1838.205540][T15070] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1838.332100][T24091] loop2: detected capacity change from 0 to 32768 [ 1838.364173][T24091] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 1838.423763][T24091] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1838.455364][T24091] OCFS2: File system is now read-only. [ 1838.460884][T24091] (syz.2.4472,24091,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 1838.492000][T24091] (syz.2.4472,24091,1):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 1838.501093][T24091] (syz.2.4472,24091,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 1838.574071][T24091] (syz.2.4472,24091,1):ocfs2_initialize_super:2252 ERROR: status = -30 [ 1838.623833][T24091] (syz.2.4472,24091,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 1839.581384][T24107] loop0: detected capacity change from 0 to 128 [ 1839.610959][T24108] loop2: detected capacity change from 0 to 128 [ 1839.621608][T24107] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1839.672117][T24108] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1839.781126][T12058] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1839.959099][T24112] loop0: detected capacity change from 0 to 164 [ 1841.415287][T24120] netlink: 'syz.2.4479': attribute type 1 has an invalid length. [ 1841.475359][T24120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1841.645624][T14731] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1841.809508][T24131] 9pnet_fd: Insufficient options for proto=fd [ 1841.994507][T24137] loop3: detected capacity change from 0 to 128 [ 1842.287929][T24137] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1842.763986][ T59] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1842.843514][T24140] overlay: filesystem on ./file0 not supported as upperdir [ 1842.931644][T24142] loop3: detected capacity change from 0 to 164 [ 1843.597986][T24152] loop2: detected capacity change from 0 to 128 [ 1843.962586][T24152] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1844.043567][T24152] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1844.135659][T24134] loop0: detected capacity change from 0 to 32768 [ 1844.191714][T24134] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 1844.238814][T24134] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1844.302068][T24134] OCFS2: File system is now read-only. [ 1844.315601][T24134] (syz.0.4484,24134,1):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 1844.330588][T24134] (syz.0.4484,24134,1):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 1844.346915][T24134] (syz.0.4484,24134,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 1844.356371][T24134] (syz.0.4484,24134,1):ocfs2_initialize_super:2252 ERROR: status = -30 [ 1844.365056][T24134] (syz.0.4484,24134,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 1845.699231][T24163] loop0: detected capacity change from 0 to 32768 [ 1845.751138][T24163] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1845.826191][T24163] XFS (loop0): Ending clean mount [ 1845.920966][T24175] loop3: detected capacity change from 0 to 128 [ 1845.942322][T24176] 9pnet_fd: Insufficient options for proto=fd [ 1845.965241][T24175] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1846.111588][T23756] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1846.152087][ T8764] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1846.418181][T24180] syzkaller0: entered promiscuous mode [ 1846.427069][T24180] syzkaller0: entered allmulticast mode [ 1848.264760][T24194] syzkaller0: entered promiscuous mode [ 1848.270364][T24194] syzkaller0: entered allmulticast mode [ 1848.337516][T24195] loop0: detected capacity change from 0 to 2048 [ 1848.447471][T24195] loop0: p3 < > p4 < > [ 1848.452191][T24195] loop0: partition table partially beyond EOD, truncated [ 1848.459519][T24195] loop0: p3 start 4284289 is beyond EOD, truncated [ 1848.511932][ T5140] loop0: p3 < > p4 < > [ 1848.536579][ T5140] loop0: partition table partially beyond EOD, truncated [ 1848.572077][ T5140] loop0: p3 start 4284289 is beyond EOD, truncated [ 1848.670971][T24200] 9pnet_fd: Insufficient options for proto=fd [ 1848.828050][T13363] udevd[13363]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1848.884269][T13363] udevd[13363]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1848.913294][T24204] netlink: 'syz.3.4505': attribute type 1 has an invalid length. [ 1849.003816][T24208] loop0: detected capacity change from 0 to 512 [ 1849.057600][T24204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1849.106211][T24208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1849.171985][T24208] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1849.295265][T24213] syzkaller0: entered promiscuous mode [ 1849.307220][T24213] syzkaller0: entered allmulticast mode [ 1849.519344][T23756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1850.480776][T24221] syzkaller0: entered promiscuous mode [ 1850.501911][T24221] syzkaller0: entered allmulticast mode [ 1850.862453][T24226] loop1: detected capacity change from 0 to 2048 [ 1851.138263][T24226] loop1: p3 < > p4 < > [ 1851.213989][T24226] loop1: partition table partially beyond EOD, truncated [ 1851.272364][T24226] loop1: p3 start 4284289 is beyond EOD, truncated [ 1851.452193][T24230] 9pnet_fd: Insufficient options for proto=fd [ 1851.525652][T24234] netlink: 'syz.0.4515': attribute type 1 has an invalid length. [ 1852.060626][T24249] syzkaller0: entered promiscuous mode [ 1852.092789][T24249] syzkaller0: entered allmulticast mode [ 1853.363953][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.371152][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.942867][T24264] loop1: detected capacity change from 0 to 512 [ 1854.163212][T24266] 9pnet_fd: Insufficient options for proto=fd [ 1854.364230][T15513] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1854.512442][T24276] syzkaller0: entered promiscuous mode [ 1854.517982][T24276] syzkaller0: entered allmulticast mode [ 1854.810437][T24259] loop3: detected capacity change from 0 to 40427 [ 1854.820298][T24259] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1854.835166][T24259] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1854.845452][T24259] F2FS-fs (loop3): Image doesn't support compression [ 1854.876373][T24259] F2FS-fs (loop3): Image doesn't support compression [ 1855.037129][T24259] F2FS-fs (loop3): invalid crc value [ 1855.666226][T24259] F2FS-fs (loop3): Start checkpoint disabled! [ 1855.743738][T24259] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1855.771859][T24259] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1855.806213][T24292] loop2: detected capacity change from 0 to 512 [ 1855.875020][T24297] 9pnet_fd: Insufficient options for proto=fd [ 1856.823814][T24301] syz.3.4522: attempt to access beyond end of device [ 1856.823814][T24301] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1857.121973][T21650] kworker/u4:1: attempt to access beyond end of device [ 1857.121973][T21650] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1857.207982][T21650] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1857.331742][T24308] syzkaller0: entered promiscuous mode [ 1857.355003][T24308] syzkaller0: entered allmulticast mode [ 1857.579791][T24311] syzkaller0: entered promiscuous mode [ 1857.592360][T24311] syzkaller0: entered allmulticast mode [ 1858.595465][T24325] loop3: detected capacity change from 0 to 128 [ 1859.502934][T24325] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1859.524612][T24325] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1860.985190][T24336] loop0: detected capacity change from 0 to 128 [ 1861.041146][T24336] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1861.084374][T24340] 9pnet_fd: Insufficient options for proto=fd [ 1861.598668][T24344] loop1: detected capacity change from 0 to 512 [ 1861.635759][T14731] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1864.906548][T24382] loop1: detected capacity change from 0 to 128 [ 1865.815137][T24390] loop1: detected capacity change from 0 to 128 [ 1866.014223][T24390] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1866.027902][T24390] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1868.313754][T15070] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1868.685125][T24403] loop3: detected capacity change from 0 to 32768 [ 1868.736593][T24403] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1868.747380][T24403] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1868.756684][T24403] BTRFS info (device loop3): turning on sync discard [ 1868.778813][T24403] BTRFS info (device loop3): turning off barriers [ 1868.787662][T24403] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1868.815270][T24403] BTRFS info (device loop3): trying to use backup root at mount time [ 1868.834659][T24403] BTRFS info (device loop3): enabling auto defrag [ 1868.841173][T24403] BTRFS info (device loop3): max_inline at 0 [ 1868.847637][T24403] BTRFS info (device loop3): using free space tree [ 1869.003098][ T142] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 1869.063073][T24403] BTRFS error (device loop3): failed to load root extent [ 1869.080418][T24403] BTRFS warning (device loop3): try to load backup roots slot 1 [ 1869.102061][ T59] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 1869.137583][T24403] BTRFS warning (device loop3): couldn't read tree root [ 1869.150445][T24403] BTRFS warning (device loop3): try to load backup roots slot 2 [ 1869.166508][T12058] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1869.182335][T24405] loop1: detected capacity change from 0 to 40427 [ 1869.194145][T24403] BTRFS warning (device loop3): couldn't read tree root [ 1869.201149][T24403] BTRFS warning (device loop3): try to load backup roots slot 3 [ 1869.218981][T24405] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1869.254384][T24405] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1869.255093][T24403] BTRFS info (device loop3): enabling ssd optimizations [ 1869.294162][T24403] BTRFS info (device loop3): rebuilding free space tree [ 1869.299083][T24405] F2FS-fs (loop1): Image doesn't support compression [ 1869.338881][T24405] F2FS-fs (loop1): Image doesn't support compression [ 1869.362275][T24405] F2FS-fs (loop1): invalid crc value [ 1869.366177][T24403] BTRFS info (device loop3): checking UUID tree [ 1869.532963][T14731] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1869.592511][T24405] F2FS-fs (loop1): Start checkpoint disabled! [ 1869.655705][T24405] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1869.671309][T24405] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1869.880252][T24426] loop3: detected capacity change from 0 to 128 [ 1869.919999][T24426] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1870.110735][T24428] syz.1.4563: attempt to access beyond end of device [ 1870.110735][T24428] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1870.616618][T12058] kworker/u4:7: attempt to access beyond end of device [ 1870.616618][T12058] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1870.667795][T12058] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1871.921211][T24441] syz_tun: entered allmulticast mode [ 1872.716146][T24454] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1872.741051][T21324] IPVS: starting estimator thread 0... [ 1872.853084][T24455] IPVS: using max 19 ests per chain, 45600 per kthread [ 1873.101321][T24462] loop2: detected capacity change from 0 to 128 [ 1873.120178][T24462] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1873.241904][T24462] loop2: detected capacity change from 128 to 1 [ 1873.404383][T13363] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1874.741686][T24476] syzkaller0: entered promiscuous mode [ 1874.751858][T24476] syzkaller0: entered allmulticast mode [ 1874.877982][T24467] loop0: detected capacity change from 0 to 40427 [ 1874.903289][T24467] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 1874.911555][T24467] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1874.923482][T24467] F2FS-fs (loop0): Image doesn't support compression [ 1874.930222][T24467] F2FS-fs (loop0): Image doesn't support compression [ 1875.006856][T24467] F2FS-fs (loop0): invalid crc value [ 1875.332606][T24467] F2FS-fs (loop0): Start checkpoint disabled! [ 1875.478667][T24467] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1875.487700][T24467] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1875.778829][T24505] syz.0.4575: attempt to access beyond end of device [ 1875.778829][T24505] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1875.996770][ T59] kworker/u4:4: attempt to access beyond end of device [ 1875.996770][ T59] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1876.022983][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1876.313668][T24507] loop3: detected capacity change from 0 to 40427 [ 1876.356721][T24507] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1876.379355][T24507] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1876.403113][T24507] F2FS-fs (loop3): Image doesn't support compression [ 1876.410547][T24507] F2FS-fs (loop3): Image doesn't support compression [ 1876.435684][T24507] F2FS-fs (loop3): invalid crc value [ 1876.656539][T24507] F2FS-fs (loop3): Start checkpoint disabled! [ 1876.698441][T24507] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1876.722050][T24507] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1876.738756][T24512] loop0: detected capacity change from 0 to 128 [ 1876.764136][T24512] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1877.012667][T24512] loop0: detected capacity change from 128 to 1 [ 1877.116565][T24515] syz.3.4582: attempt to access beyond end of device [ 1877.116565][T24515] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1877.437315][T13363] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1877.658783][T21650] kworker/u4:1: attempt to access beyond end of device [ 1877.658783][T21650] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1877.686522][T21650] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1880.220763][T24543] loop3: detected capacity change from 0 to 16 [ 1880.252949][T24543] erofs: (device loop3): mounted with root inode @ nid 36. [ 1880.999929][T24547] loop3: detected capacity change from 0 to 128 [ 1881.045083][T24547] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 1881.194250][T24547] loop3: detected capacity change from 128 to 1 [ 1883.708117][T24576] loop2: detected capacity change from 0 to 16 [ 1883.748639][T24576] erofs: (device loop2): mounted with root inode @ nid 36. [ 1885.611314][T24612] tipc: Enabling of bearer rejected, failed to enable media [ 1885.671286][T24614] loop0: detected capacity change from 0 to 16 [ 1885.679236][T24614] erofs: (device loop0): mounted with root inode @ nid 36. [ 1887.223302][T24636] tipc: Enabling of bearer rejected, failed to enable media [ 1888.086607][T24654] nbd: must specify an index to disconnect [ 1889.589689][T24680] syzkaller0: entered promiscuous mode [ 1889.595434][T24680] syzkaller0: entered allmulticast mode [ 1889.619117][T24680] tipc: Enabled bearer , priority 0 [ 1889.667923][T24680] tipc: Resetting bearer [ 1889.699326][T24679] tipc: Resetting bearer [ 1889.764749][T24656] loop3: detected capacity change from 0 to 40427 [ 1889.776382][T24679] tipc: Disabling bearer [ 1889.789707][T24656] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1889.799829][T24656] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1889.815857][T24656] F2FS-fs (loop3): Image doesn't support compression [ 1889.835823][T24656] F2FS-fs (loop3): Image doesn't support compression [ 1889.884229][T24656] F2FS-fs (loop3): invalid crc value [ 1890.088174][T24656] F2FS-fs (loop3): Start checkpoint disabled! [ 1890.131834][T24656] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1890.149082][T24656] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1890.999022][T24697] syzkaller0: entered promiscuous mode [ 1891.029255][T24697] syzkaller0: entered allmulticast mode [ 1891.046845][T24697] tipc: Enabling of bearer rejected, failed to enable media [ 1891.785329][T24693] loop1: detected capacity change from 0 to 32768 [ 1891.815974][T24693] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 1891.816008][T24693] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1891.816021][T24693] OCFS2: File system is now read-only. [ 1891.816031][T24693] (syz.1.4641,24693,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 1891.816126][T24693] (syz.1.4641,24693,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 1891.816151][T24693] (syz.1.4641,24693,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 1891.816173][T24693] (syz.1.4641,24693,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 1891.816283][T24693] (syz.1.4641,24693,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 1893.010992][T24711] loop1: detected capacity change from 0 to 32768 [ 1893.118001][T24711] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1893.156819][T24711] XFS (loop1): Ending clean mount [ 1893.412089][T15070] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1893.819802][T24728] loop0: detected capacity change from 0 to 40427 [ 1893.844661][T24728] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 1893.858348][T24728] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1893.935842][T24728] F2FS-fs (loop0): Image doesn't support compression [ 1893.963903][T24728] F2FS-fs (loop0): Image doesn't support compression [ 1893.994086][T24728] F2FS-fs (loop0): invalid crc value [ 1894.899478][T24728] F2FS-fs (loop0): Start checkpoint disabled! [ 1894.960246][T24728] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1894.967555][T24728] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1895.937588][T24761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4660'. [ 1897.223083][T24778] syzkaller0: entered promiscuous mode [ 1897.228630][T24778] syzkaller0: entered allmulticast mode [ 1897.277768][T24778] tipc: Started in network mode [ 1897.296320][T24778] tipc: Node identity 523a21c2e656, cluster identity 4711 [ 1897.304680][T24778] tipc: Enabled bearer , priority 0 [ 1897.337761][T24778] tipc: Resetting bearer [ 1897.359820][T24776] tipc: Resetting bearer [ 1897.420071][T24776] tipc: Disabling bearer [ 1897.453315][T24781] loop3: detected capacity change from 0 to 4096 [ 1897.477261][T24781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1897.614969][T14731] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1897.771694][T24777] loop2: detected capacity change from 0 to 40427 [ 1897.840937][T24777] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1897.860848][T24777] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1897.891545][T24777] F2FS-fs (loop2): Image doesn't support compression [ 1897.973517][T24777] F2FS-fs (loop2): Image doesn't support compression [ 1898.121958][T24777] F2FS-fs (loop2): invalid crc value [ 1898.477416][T24777] F2FS-fs (loop2): Start checkpoint disabled! [ 1898.507436][T24777] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1898.521926][T24777] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1898.731487][T24804] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4674'. [ 1899.660045][T24812] loop1: detected capacity change from 0 to 4096 [ 1899.826180][T24812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1900.283485][T15070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1901.260422][T24835] loop2: detected capacity change from 0 to 4096 [ 1901.299471][T24835] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1901.397575][T24835] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1901.416765][T24835] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 1901.529056][ T3456] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1901.589093][T15513] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1901.632007][T15513] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1901.644011][T15513] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 1901.667468][ T49] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 1902.382049][T24899] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4687'. [ 1902.736275][T24904] syz_tun: entered allmulticast mode [ 1903.437998][T24843] loop3: detected capacity change from 0 to 40427 [ 1903.667553][T24843] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1903.679729][T24843] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1903.696675][T24843] F2FS-fs (loop3): Image doesn't support compression [ 1903.706036][T24843] F2FS-fs (loop3): Image doesn't support compression [ 1903.805814][T14009] IPVS: starting estimator thread 0... [ 1903.881902][T24843] F2FS-fs (loop3): invalid crc value [ 1903.952042][T24917] IPVS: using max 19 ests per chain, 45600 per kthread [ 1904.683870][T24843] F2FS-fs (loop3): Start checkpoint disabled! [ 1905.161972][T24913] loop2: detected capacity change from 0 to 40427 [ 1905.183735][T24913] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1905.201497][T24913] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1905.227757][T24913] F2FS-fs (loop2): Image doesn't support compression [ 1905.236660][T24913] F2FS-fs (loop2): Image doesn't support compression [ 1905.260601][T24913] F2FS-fs (loop2): invalid crc value [ 1905.496863][T24913] F2FS-fs (loop2): Start checkpoint disabled! [ 1905.583954][T24913] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1905.604114][T24913] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1905.882706][T24926] loop1: detected capacity change from 0 to 40427 [ 1905.940919][T24926] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1905.954743][T24937] syz.2.4692: attempt to access beyond end of device [ 1905.954743][T24937] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1905.973566][T24939] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4700'. [ 1905.983613][T24926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1906.026520][T24926] F2FS-fs (loop1): Image doesn't support compression [ 1906.045745][T24926] F2FS-fs (loop1): Image doesn't support compression [ 1906.069298][T24926] F2FS-fs (loop1): invalid crc value [ 1906.238286][ T11] kworker/u4:0: attempt to access beyond end of device [ 1906.238286][ T11] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1906.381596][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1907.031374][T24926] F2FS-fs (loop1): Start checkpoint disabled! [ 1907.102005][T24926] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1907.109128][T24926] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1907.794436][T24946] syz.1.4696: attempt to access beyond end of device [ 1907.794436][T24946] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1908.207891][T24948] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1908.462911][ T11] kworker/u4:0: attempt to access beyond end of device [ 1908.462911][ T11] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1908.722307][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1909.984057][T24967] syz_tun: entered allmulticast mode [ 1910.196082][T24972] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4710'. [ 1912.299923][T25000] syz_tun: entered allmulticast mode [ 1913.756484][T25013] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4724'. [ 1914.746395][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.887656][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1918.056162][T25050] overlayfs: failed to resolve './bus': -2 [ 1918.119421][T25044] loop2: detected capacity change from 0 to 4096 [ 1918.161681][T25044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1918.752981][T15513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1921.274513][T25086] overlayfs: failed to resolve './bus': -2 [ 1923.463195][T25115] overlayfs: failed to resolve './bus': -2 [ 1924.873195][T25126] loop2: detected capacity change from 0 to 131072 [ 1924.885637][T25126] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 1924.893581][T25126] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1924.901953][T25126] F2FS-fs (loop2): Test dummy encryption mode enabled [ 1924.911633][T25126] F2FS-fs (loop2): invalid crc value [ 1924.942678][T25126] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1925.008258][T25126] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1925.038366][T25126] F2FS-fs (loop2): Start checkpoint disabled! [ 1925.056528][T25126] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1925.064395][T25126] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1925.344727][T25120] loop1: detected capacity change from 0 to 40427 [ 1925.429590][T25142] netlink: 'syz.2.4762': attribute type 4 has an invalid length. [ 1925.437555][T25142] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1925.720440][T25120] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1925.787558][T25120] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1925.844662][T25120] F2FS-fs (loop1): Image doesn't support compression [ 1925.895422][T25120] F2FS-fs (loop1): Image doesn't support compression [ 1925.947836][T25120] F2FS-fs (loop1): invalid crc value [ 1926.184486][ T5085] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1926.195294][ T5085] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1926.204730][ T5085] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1926.212702][ T5085] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1926.220905][ T5085] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1926.228620][ T5085] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1926.409409][T25120] F2FS-fs (loop1): Start checkpoint disabled! [ 1926.461449][T25120] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1926.481807][T25120] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1926.835034][T25156] syz.1.4760: attempt to access beyond end of device [ 1926.835034][T25156] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1927.083298][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 1927.283115][T14731] syz_tun (unregistering): left allmulticast mode [ 1927.339469][T25144] chnl_net:caif_netlink_parms(): no params data found [ 1927.367236][T24874] kworker/u4:6: attempt to access beyond end of device [ 1927.367236][T24874] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1927.413292][T24874] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1927.548292][T24872] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1927.769085][T24872] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1927.991582][T24872] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.040474][T25144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1928.060123][T25144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1928.110980][T25144] bridge_slave_0: entered allmulticast mode [ 1928.131621][T25144] bridge_slave_0: entered promiscuous mode [ 1928.274050][T24872] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1928.689381][ T5789] Bluetooth: hci4: command tx timeout [ 1928.952510][T25144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1928.972176][T25144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1928.979428][T25144] bridge_slave_1: entered allmulticast mode [ 1929.036276][T25144] bridge_slave_1: entered promiscuous mode [ 1930.437661][T25144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1930.523484][T25144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1930.722432][T25194] netlink: 142 bytes leftover after parsing attributes in process `syz.1.4775'. [ 1930.732954][T25144] team0: Port device team_slave_0 added [ 1930.751857][T24872] tipc: Disabling bearer [ 1930.769556][ T5789] Bluetooth: hci4: command tx timeout [ 1930.782008][T24872] tipc: Left network mode [ 1930.788582][T25144] team0: Port device team_slave_1 added [ 1930.871483][T25144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1930.885589][T25144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.912214][T25144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1930.943778][T25144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1930.950789][T25144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1930.998897][T25144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1932.277538][T25218] loop1: detected capacity change from 0 to 16 [ 1932.290242][T25144] hsr_slave_0: entered promiscuous mode [ 1932.312432][T25218] erofs: (device loop1): mounted with root inode @ nid 36. [ 1932.330981][T25144] hsr_slave_1: entered promiscuous mode [ 1932.352918][T25144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1932.370849][T25144] Cannot create hsr debugfs directory [ 1932.376904][T25218] overlayfs: missing 'lowerdir' [ 1932.822753][ T5789] Bluetooth: hci4: command tx timeout [ 1933.932492][T25249] loop2: detected capacity change from 0 to 16 [ 1933.969295][T25249] erofs: (device loop2): mounted with root inode @ nid 36. [ 1934.042604][T25249] overlay: Unknown parameter '/' [ 1934.258755][T25252] netlink: 'syz.2.4793': attribute type 29 has an invalid length. [ 1934.335976][T25144] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1934.355424][T25252] netlink: 'syz.2.4793': attribute type 29 has an invalid length. [ 1934.370187][T25254] netlink: 'syz.2.4793': attribute type 29 has an invalid length. [ 1934.389607][T25243] loop1: detected capacity change from 0 to 40427 [ 1934.397472][T25144] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1934.423642][T25243] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1934.438323][T25144] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1934.445259][T25243] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1934.463011][T25243] F2FS-fs (loop1): Image doesn't support compression [ 1934.474511][T25253] netlink: 'syz.2.4793': attribute type 29 has an invalid length. [ 1934.493577][T25243] F2FS-fs (loop1): Image doesn't support compression [ 1934.519810][T24872] hsr_slave_0: left promiscuous mode [ 1934.530792][T25243] F2FS-fs (loop1): invalid crc value [ 1934.539695][T24872] hsr_slave_1: left promiscuous mode [ 1934.568492][T24872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1934.576186][T24872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1934.594215][T24872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1934.601665][T24872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1934.627015][T24872] bridge_slave_1: left allmulticast mode [ 1934.654739][T24872] bridge_slave_1: left promiscuous mode [ 1934.660537][T24872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1934.704429][T24872] bridge_slave_0: left allmulticast mode [ 1934.710215][T24872] bridge_slave_0: left promiscuous mode [ 1934.732725][T24872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1934.802939][T24872] veth1_macvtap: left promiscuous mode [ 1934.808515][T24872] veth0_macvtap: left promiscuous mode [ 1934.824452][T24872] veth1_vlan: left promiscuous mode [ 1934.829832][T24872] veth0_vlan: left promiscuous mode [ 1934.904106][ T5789] Bluetooth: hci4: command tx timeout [ 1934.938319][T25243] F2FS-fs (loop1): Start checkpoint disabled! [ 1934.982405][T25243] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1934.998430][T25243] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1935.430555][T25261] syz.1.4789: attempt to access beyond end of device [ 1935.430555][T25261] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1935.920424][T24876] kworker/u4:11: attempt to access beyond end of device [ 1935.920424][T24876] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1935.958180][T24876] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1936.109915][T24872] bond1 (unregistering): Released all slaves [ 1937.449846][T25276] loop2: detected capacity change from 0 to 16 [ 1937.484313][T25276] erofs: (device loop2): mounted with root inode @ nid 36. [ 1937.514230][T25276] overlay: Unknown parameter '/' [ 1937.660432][T24872] team0 (unregistering): Port device team_slave_1 removed [ 1937.772152][T25280] loop2: detected capacity change from 0 to 4096 [ 1937.961911][T24872] team0 (unregistering): Port device team_slave_0 removed [ 1938.002900][T25280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1938.065639][T24872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1938.165230][T25286] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1938.754461][T24872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1938.901678][T15513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1939.748869][T24872] bond0 (unregistering): Released all slaves [ 1939.878261][T25144] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1939.932124][T25301] tipc: Enabling of bearer rejected, failed to enable media [ 1940.226705][T25144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1940.322544][T25144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1940.384973][T24885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1940.392186][T24885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1940.420201][T25314] loop1: detected capacity change from 0 to 16 [ 1940.445927][T25314] erofs: (device loop1): mounted with root inode @ nid 36. [ 1940.497775][T25314] overlay: Unknown parameter '/' [ 1940.633157][T24885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1940.640354][T24885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1941.432253][T24872] IPVS: stop unused estimator thread 0... [ 1942.743462][T25340] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1943.415538][T25144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1943.479747][T25144] veth0_vlan: entered promiscuous mode [ 1943.505111][T25144] veth1_vlan: entered promiscuous mode [ 1943.637367][T25144] veth0_macvtap: entered promiscuous mode [ 1943.684112][T25144] veth1_macvtap: entered promiscuous mode [ 1943.746852][T25144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1943.775246][T25144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.806100][T25144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1943.831175][T25144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.873000][T25144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1943.889141][T25144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.901718][T25144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1943.923383][T25144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1943.944283][T25144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1943.956361][T25356] loop0: detected capacity change from 0 to 16 [ 1943.967541][T25144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1943.993078][T25356] erofs: (device loop0): mounted with root inode @ nid 36. [ 1944.110912][T25144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1944.180978][T25144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1944.192239][T25144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1944.203497][T25144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1944.227859][T25144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.237607][T25144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.246455][T25144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.260683][T25144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1944.511446][T24882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.550974][T24882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1944.700809][T24885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1944.732577][T24885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1945.569601][T25394] loop1: detected capacity change from 0 to 16 [ 1945.597079][T25394] erofs: (device loop1): mounted with root inode @ nid 36. [ 1946.060688][T25406] tipc: Enabled bearer , priority 0 [ 1946.095401][T25404] tipc: Disabling bearer [ 1946.508785][T25387] loop0: detected capacity change from 0 to 40427 [ 1946.530332][T25387] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 1946.549451][T25387] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1946.578370][T25387] F2FS-fs (loop0): Image doesn't support compression [ 1946.625911][T25387] F2FS-fs (loop0): Image doesn't support compression [ 1946.666929][T25387] F2FS-fs (loop0): invalid crc value [ 1946.831533][T25425] loop2: detected capacity change from 0 to 16 [ 1946.850073][T25425] erofs: (device loop2): mounted with root inode @ nid 36. [ 1946.989925][T25387] F2FS-fs (loop0): Start checkpoint disabled! [ 1947.058160][T25387] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1947.088277][T25387] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1947.693575][T25437] syz.0.4824: attempt to access beyond end of device [ 1947.693575][T25437] loop0: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1948.227641][T24882] kworker/u4:15: attempt to access beyond end of device [ 1948.227641][T24882] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1948.262270][T24882] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1948.943419][T25443] tipc: Enabled bearer , priority 0 [ 1948.996153][T25442] tipc: Disabling bearer [ 1949.047333][T25441] loop1: detected capacity change from 0 to 40427 [ 1949.073562][T25441] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 1949.080813][T25441] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1949.109128][T25441] F2FS-fs (loop1): Image doesn't support compression [ 1949.130997][T25441] F2FS-fs (loop1): Image doesn't support compression [ 1949.149187][T25445] syz_tun: entered allmulticast mode [ 1949.155809][T25441] F2FS-fs (loop1): invalid crc value [ 1949.446034][T25441] F2FS-fs (loop1): Start checkpoint disabled! [ 1949.511823][T25441] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1949.533521][T25441] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1949.894697][T25463] syz.1.4841: attempt to access beyond end of device [ 1949.894697][T25463] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1950.372481][T24889] kworker/u4:18: attempt to access beyond end of device [ 1950.372481][T24889] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1950.394554][T25467] tipc: Enabled bearer , priority 0 [ 1950.401431][T24889] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1950.456179][T25464] tipc: Disabling bearer [ 1951.019170][T25476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1951.041949][T25476] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4853'. [ 1951.140077][T25460] loop2: detected capacity change from 0 to 40427 [ 1951.177224][T25460] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 1951.192270][T25460] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1951.211193][T25460] F2FS-fs (loop2): Image doesn't support compression [ 1951.226281][T25460] F2FS-fs (loop2): Image doesn't support compression [ 1951.243971][T25460] F2FS-fs (loop2): invalid crc value [ 1951.451794][T25460] F2FS-fs (loop2): Start checkpoint disabled! [ 1951.512572][T25460] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1951.519681][T25460] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1951.937044][T25485] syz.2.4850: attempt to access beyond end of device [ 1951.937044][T25485] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1952.496386][T24885] kworker/u4:16: attempt to access beyond end of device [ 1952.496386][T24885] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1952.538023][T24885] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1952.637371][T25481] loop1: detected capacity change from 0 to 32768 [ 1952.684331][T25481] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 1952.741399][T25481] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1952.772273][T25481] OCFS2: File system is now read-only. [ 1952.777831][T25481] (syz.1.4858,25481,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 1952.820163][T25481] (syz.1.4858,25481,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 1952.831648][T25481] (syz.1.4858,25481,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 1952.870122][T25481] (syz.1.4858,25481,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 1952.885953][T25492] tipc: Started in network mode [ 1952.902039][T25492] tipc: Node identity 6e8b3f56f85b, cluster identity 4711 [ 1952.909460][T25492] tipc: Enabled bearer , priority 0 [ 1952.915769][T25481] (syz.1.4858,25481,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 1952.975794][T25491] tipc: Disabling bearer [ 1952.996060][T25481] loop1: detected capacity change from 0 to 128 [ 1953.022718][T25481] EXT4-fs: Ignoring removed mblk_io_submit option [ 1953.063979][T25481] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1953.073686][T25481] System zones: 1-3, 19-19, 35-36 [ 1953.081839][T14213] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1953.101033][T25481] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1953.133420][T25481] ext4 filesystem being mounted at /593/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1953.301899][T14213] usb 1-1: Using ep0 maxpacket: 32 [ 1953.334856][T14213] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 1953.366898][T14213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1953.429806][T14213] usb 1-1: config 0 has no interfaces? [ 1954.032237][T14213] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1954.041643][T14213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.050699][T14213] usb 1-1: Product: syz [ 1954.056212][T14213] usb 1-1: Manufacturer: syz [ 1954.060922][T14213] usb 1-1: SerialNumber: syz [ 1954.075312][T14213] usb 1-1: config 0 descriptor?? [ 1954.337345][T15070] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1956.910830][T22871] usb 1-1: USB disconnect, device number 11 [ 1957.799373][T25549] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1960.860377][T25568] loop3: detected capacity change from 0 to 40427 [ 1960.912388][T25568] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1960.933315][T25576] loop0: detected capacity change from 0 to 131072 [ 1960.940089][T25568] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1960.951247][T25576] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 1960.959217][T25576] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1960.967522][T25576] F2FS-fs (loop0): Test dummy encryption mode enabled [ 1960.995628][T25576] F2FS-fs (loop0): invalid crc value [ 1961.007088][T25568] F2FS-fs (loop3): Image doesn't support compression [ 1961.021983][T25576] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1961.057335][T25568] F2FS-fs (loop3): Image doesn't support compression [ 1961.071271][T25576] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1961.092797][T25576] F2FS-fs (loop0): Start checkpoint disabled! [ 1961.107135][T25568] F2FS-fs (loop3): invalid crc value [ 1961.115204][T25576] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1961.122478][T25576] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1961.442554][T25568] F2FS-fs (loop3): Start checkpoint disabled! [ 1961.742345][T25568] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1961.771397][T25568] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1962.254615][T25584] syz.3.4889: attempt to access beyond end of device [ 1962.254615][T25584] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1962.810016][T24885] kworker/u4:16: attempt to access beyond end of device [ 1962.810016][T24885] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1962.871988][T24885] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1965.029411][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1965.055038][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1965.065269][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1965.076774][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1965.105227][T15070] syz_tun (unregistering): left allmulticast mode [ 1965.252524][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1965.260014][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1966.168290][T24889] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.440931][T24889] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.678755][T24889] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.381889][ T5085] Bluetooth: hci0: command tx timeout [ 1967.495198][T24889] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.815463][T25605] chnl_net:caif_netlink_parms(): no params data found [ 1968.041282][T24889] tipc: Disabling bearer [ 1968.067910][T24889] tipc: Left network mode [ 1968.098596][T25605] bridge0: port 1(bridge_slave_0) entered blocking state [ 1968.102216][T22871] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1968.118322][T25605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.125665][T25605] bridge_slave_0: entered allmulticast mode [ 1968.133236][T25605] bridge_slave_0: entered promiscuous mode [ 1968.144019][T25605] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.152684][T25605] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.160295][T25605] bridge_slave_1: entered allmulticast mode [ 1968.175005][T25605] bridge_slave_1: entered promiscuous mode [ 1968.273010][T25605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1968.297089][T25605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1968.352451][T22871] usb 3-1: Using ep0 maxpacket: 32 [ 1968.381209][T22871] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1968.402243][T22871] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.427229][T22871] usb 3-1: config 0 has no interfaces? [ 1968.451431][T22871] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1968.491798][T22871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.512296][T22871] usb 3-1: Product: syz [ 1968.516526][T22871] usb 3-1: Manufacturer: syz [ 1968.541495][T22871] usb 3-1: SerialNumber: syz [ 1968.573930][T22871] usb 3-1: config 0 descriptor?? [ 1968.639312][T25605] team0: Port device team_slave_0 added [ 1968.660645][T25605] team0: Port device team_slave_1 added [ 1969.068987][T25605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1969.084028][T25650] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 1969.104138][ T23] IPVS: starting estimator thread 0... [ 1969.145259][T25605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1969.184603][T25605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1969.251896][T25653] IPVS: using max 19 ests per chain, 45600 per kthread [ 1969.328500][T25605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1969.335751][T25605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1969.362879][T25605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1969.448035][T25605] hsr_slave_0: entered promiscuous mode [ 1969.459913][T25605] hsr_slave_1: entered promiscuous mode [ 1969.466404][ T5085] Bluetooth: hci0: command tx timeout [ 1969.495955][T25605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1969.504108][T25605] Cannot create hsr debugfs directory [ 1971.181931][T24889] hsr_slave_0: left promiscuous mode [ 1971.224934][T24889] hsr_slave_1: left promiscuous mode [ 1971.258102][T24889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1971.295505][T24889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1971.358484][T25671] loop3: detected capacity change from 0 to 40427 [ 1971.366015][T24889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1971.380866][T24889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1971.388280][T25671] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 1971.408844][T25671] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1971.418158][T24889] bridge_slave_1: left allmulticast mode [ 1971.438991][T24889] bridge_slave_1: left promiscuous mode [ 1971.449380][T25671] F2FS-fs (loop3): Image doesn't support compression [ 1971.459279][T24889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1971.468400][T25671] F2FS-fs (loop3): Image doesn't support compression [ 1971.491838][T25671] F2FS-fs (loop3): invalid crc value [ 1971.500307][T24889] bridge_slave_0: left allmulticast mode [ 1971.519873][T24889] bridge_slave_0: left promiscuous mode [ 1971.541905][ T5085] Bluetooth: hci0: command tx timeout [ 1971.553358][T24889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.869713][T14213] usb 3-1: USB disconnect, device number 69 [ 1971.875424][T25671] F2FS-fs (loop3): Start checkpoint disabled! [ 1971.938280][T25671] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1971.973900][T25671] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 1972.040373][T24889] veth1_macvtap: left promiscuous mode [ 1972.113677][T24889] veth0_macvtap: left promiscuous mode [ 1972.120522][T24889] veth1_vlan: left promiscuous mode [ 1972.128173][T24889] veth0_vlan: left promiscuous mode [ 1972.370727][T25683] syz.3.4913: attempt to access beyond end of device [ 1972.370727][T25683] loop3: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 1972.801081][ T49] kworker/u4:3: attempt to access beyond end of device [ 1972.801081][ T49] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1972.839465][ T49] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1973.626384][ T5085] Bluetooth: hci0: command tx timeout [ 1974.356544][T24889] team0 (unregistering): Port device team_slave_1 removed [ 1974.444799][T24889] team0 (unregistering): Port device team_slave_0 removed [ 1974.511645][T24889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1974.595132][T24889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1975.168294][T24889] bond0 (unregistering): Released all slaves [ 1975.992682][ T5764] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1976.186828][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.193398][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.500312][T25605] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1976.535571][T25605] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1976.661861][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 1976.684258][ T5764] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1976.709335][ T5764] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.755173][ T5764] usb 3-1: config 0 has no interfaces? [ 1976.775169][T25605] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1976.808144][T25605] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1976.817765][ T5764] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1976.830584][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.855112][ T5764] usb 3-1: Product: syz [ 1976.859347][ T5764] usb 3-1: Manufacturer: syz [ 1976.864832][ T5764] usb 3-1: SerialNumber: syz [ 1976.875602][ T5764] usb 3-1: config 0 descriptor?? [ 1977.299591][T25605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1977.355532][T25605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1977.460117][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.467388][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1977.498333][T24889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.505500][T24889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1977.778829][T25744] syzkaller0: entered promiscuous mode [ 1977.794530][T25744] syzkaller0: entered allmulticast mode [ 1978.237145][T25605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1978.562481][T25605] veth0_vlan: entered promiscuous mode [ 1978.653669][T25605] veth1_vlan: entered promiscuous mode [ 1978.789828][T25605] veth0_macvtap: entered promiscuous mode [ 1978.809884][T25605] veth1_macvtap: entered promiscuous mode [ 1978.887366][T25605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1978.926104][T25605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1978.968088][T25605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1978.979906][T25605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.009348][T25605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1979.035415][T25605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.080246][T25605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1979.115291][T25605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1979.165913][T25605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.192379][T25605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1979.232450][T25605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.269102][T25605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1979.306596][T25605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1979.370947][T25605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1979.414945][T25605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.468905][T25605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.480656][T25605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.546992][T25605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1979.831635][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1979.844306][ T5838] usb 3-1: USB disconnect, device number 70 [ 1979.873121][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1980.003857][T24889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1980.012409][T24889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.406499][T25777] loop1: detected capacity change from 0 to 131072 [ 1981.503472][T25777] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 1981.511436][T25777] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1981.519831][T25777] F2FS-fs (loop1): Test dummy encryption mode enabled [ 1981.565332][T25777] F2FS-fs (loop1): invalid crc value [ 1981.632473][T25777] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1981.677118][T25777] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1981.714660][T25777] F2FS-fs (loop1): Start checkpoint disabled! [ 1981.801930][T25777] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1981.809039][T25777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1982.756131][T25827] tipc: Enabled bearer , priority 0 [ 1982.781127][T25836] tipc: Resetting bearer [ 1982.837889][T25822] tipc: Disabling bearer [ 1983.001843][T21324] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1983.202044][T21324] usb 3-1: Using ep0 maxpacket: 32 [ 1983.214022][T21324] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 1983.242078][T21324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1983.289397][T21324] usb 3-1: config 0 has no interfaces? [ 1983.315280][T21324] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1983.344295][T21324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.366545][T21324] usb 3-1: Product: syz [ 1983.370770][T21324] usb 3-1: Manufacturer: syz [ 1983.388270][T21324] usb 3-1: SerialNumber: syz [ 1983.413290][T21324] usb 3-1: config 0 descriptor?? [ 1983.512582][T25858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1984.058550][T25873] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1984.079765][T25873] syzkaller0: Linktype set failed because interface is up [ 1984.150514][ T142] syzkaller0: tun_net_xmit 76 [ 1984.174582][ T142] syzkaller0: tun_net_xmit 48 [ 1984.180008][ T173] syzkaller0: tun_net_xmit 76 [ 1984.979690][T25883] loop1: detected capacity change from 0 to 131072 [ 1985.040883][T25883] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 1985.049648][T25883] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1985.058041][T25883] F2FS-fs (loop1): Test dummy encryption mode enabled [ 1985.067283][T25883] F2FS-fs (loop1): invalid crc value [ 1985.088583][T25883] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1985.120320][T25883] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1985.142638][T25883] F2FS-fs (loop1): Start checkpoint disabled! [ 1985.202227][T25883] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1985.209408][T25883] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1986.804428][T14213] usb 3-1: USB disconnect, device number 71 [ 1989.447888][T25889] netlink: 'syz.1.4949': attribute type 4 has an invalid length. [ 1989.455846][T25889] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4949'. [ 1989.592527][T25895] tipc: Enabling of bearer rejected, failed to enable media [ 1989.875659][T25920] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4954'. [ 1990.823284][T25921] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4953'. [ 1991.033728][T25918] loop0: detected capacity change from 0 to 131072 [ 1991.044948][T25918] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 1991.052977][T25918] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1991.061368][T25918] F2FS-fs (loop0): Test dummy encryption mode enabled [ 1991.093900][T25918] F2FS-fs (loop0): invalid crc value [ 1991.113967][T25918] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1991.157011][T25918] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1991.179506][T25918] F2FS-fs (loop0): Start checkpoint disabled! [ 1991.232143][T25918] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1991.239385][T25918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1991.641578][T25943] netlink: 'syz.0.4952': attribute type 4 has an invalid length. [ 1991.649448][T25943] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4952'. [ 1992.232001][ T5764] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1992.473840][ T5764] usb 4-1: Using ep0 maxpacket: 32 [ 1992.503284][ T5764] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 1992.511436][ T5764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1992.571853][ T5764] usb 4-1: config 0 has no interfaces? [ 1992.590100][ T5764] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1992.602381][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.666007][ T5764] usb 4-1: Product: syz [ 1992.670249][ T5764] usb 4-1: Manufacturer: syz [ 1992.701810][ T5764] usb 4-1: SerialNumber: syz [ 1992.798934][ T5764] usb 4-1: config 0 descriptor?? [ 1992.964125][T25957] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1992.970121][T25957] syzkaller0: linktype set to 825 [ 1993.466390][T25953] loop0: detected capacity change from 0 to 131072 [ 1993.474617][T25953] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 1993.482568][T25953] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1993.490849][T25953] F2FS-fs (loop0): Test dummy encryption mode enabled [ 1993.498912][T25953] F2FS-fs (loop0): invalid crc value [ 1993.565582][T25953] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1993.606941][T25953] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1993.631704][T25953] F2FS-fs (loop0): Start checkpoint disabled! [ 1993.679292][T25953] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1993.686496][T25953] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1994.432145][T25968] netlink: 'syz.0.4959': attribute type 4 has an invalid length. [ 1994.439989][T25968] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4959'. [ 1995.851552][T25979] loop2: detected capacity change from 0 to 131072 [ 1995.890429][T25979] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 1995.899008][T25979] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1995.907399][T25979] F2FS-fs (loop2): Test dummy encryption mode enabled [ 1995.936734][T25979] F2FS-fs (loop2): invalid crc value [ 1995.955559][T25979] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1995.991278][T25979] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1996.035024][T25979] F2FS-fs (loop2): Start checkpoint disabled! [ 1996.065328][T25979] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1996.072586][T25979] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1996.381370][T25985] netlink: 'syz.2.4967': attribute type 4 has an invalid length. [ 1996.389396][T25985] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4967'. [ 1997.283777][T14213] usb 4-1: USB disconnect, device number 64 [ 1997.583936][T25991] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1997.603253][T25991] syzkaller0: linktype set to 825 [ 1998.024938][T25996] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1998.896053][T25993] loop2: detected capacity change from 0 to 131072 [ 1998.941966][T25993] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 1998.949850][T25993] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 1998.958220][T25993] F2FS-fs (loop2): Test dummy encryption mode enabled [ 1998.966802][T25993] F2FS-fs (loop2): invalid crc value [ 1998.993916][T25993] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1999.049613][T25993] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 1999.070830][T25993] F2FS-fs (loop2): Start checkpoint disabled! [ 1999.104016][T25993] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 1999.111127][T25993] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1999.523896][T26018] netlink: 'syz.2.4971': attribute type 4 has an invalid length. [ 1999.531864][T26018] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4971'. [ 2000.472348][ T5784] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2000.615370][T26028] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2000.632199][T26028] syzkaller0: linktype set to 825 [ 2000.672158][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 2000.687864][ T5784] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 2000.701671][ T5784] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2000.732069][ T5784] usb 4-1: config 0 has no interfaces? [ 2000.751176][ T5784] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2000.769170][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.789794][ T5784] usb 4-1: Product: syz [ 2000.803886][ T5784] usb 4-1: Manufacturer: syz [ 2000.824639][ T5784] usb 4-1: SerialNumber: syz [ 2000.856228][ T5784] usb 4-1: config 0 descriptor?? [ 2001.081148][T26020] loop1: detected capacity change from 0 to 131072 [ 2001.091684][T26020] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 2001.099659][T26020] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 2001.103116][T26031] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4982'. [ 2001.108101][T26020] F2FS-fs (loop1): Test dummy encryption mode enabled [ 2001.128858][T26020] F2FS-fs (loop1): invalid crc value [ 2001.170720][T26020] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2001.213033][T26020] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 2001.239335][T26020] F2FS-fs (loop1): Start checkpoint disabled! [ 2001.266273][T26020] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 2001.274772][T26020] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2002.590539][T26043] netlink: 'syz.1.4977': attribute type 4 has an invalid length. [ 2002.598510][T26043] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4977'. [ 2004.756538][T21324] usb 4-1: USB disconnect, device number 65 [ 2007.341077][T21324] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2007.539951][T21324] usb 4-1: Using ep0 maxpacket: 32 [ 2007.550902][T21324] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 2007.575410][T21324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2007.597790][T21324] usb 4-1: config 0 has no interfaces? [ 2007.607914][T21324] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2007.625183][T21324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.647600][T21324] usb 4-1: Product: syz [ 2007.657507][T21324] usb 4-1: Manufacturer: syz [ 2007.666852][T21324] usb 4-1: SerialNumber: syz [ 2007.678117][T21324] usb 4-1: config 0 descriptor?? [ 2009.815708][T26077] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4992'. [ 2009.912380][T26107] tipc: Enabling of bearer rejected, failed to enable media [ 2011.324382][T26138] loop2: detected capacity change from 0 to 131072 [ 2011.360892][T26138] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 2011.368843][T26138] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 2011.378307][T26138] F2FS-fs (loop2): Test dummy encryption mode enabled [ 2011.400557][T26138] F2FS-fs (loop2): invalid crc value [ 2011.448715][T26138] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2011.492499][T26138] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 2011.513525][T26138] F2FS-fs (loop2): Start checkpoint disabled! [ 2011.537197][T26138] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 2011.544358][T26138] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2011.761812][T26146] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5004'. [ 2012.481898][T26148] netlink: 'syz.2.5002': attribute type 4 has an invalid length. [ 2012.490387][T26148] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5002'. [ 2013.478712][T14009] usb 4-1: USB disconnect, device number 66 [ 2013.520460][T26153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5006'. [ 2013.803420][T26160] tipc: Enabled bearer , priority 0 [ 2013.852749][T26160] tipc: Resetting bearer [ 2013.959233][T26171] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2013.972776][T26159] tipc: Disabling bearer [ 2013.978991][T14009] IPVS: starting estimator thread 0... [ 2014.002187][T26167] tipc: Enabling of bearer rejected, failed to enable media [ 2014.091862][T26172] IPVS: using max 19 ests per chain, 45600 per kthread [ 2014.729361][T26187] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5014'. [ 2015.519942][T26184] loop3: detected capacity change from 0 to 131072 [ 2015.537218][T26184] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 2015.547774][T26184] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2015.556169][T26184] F2FS-fs (loop3): Test dummy encryption mode enabled [ 2015.569136][T26184] F2FS-fs (loop3): invalid crc value [ 2015.600245][T26184] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2015.649021][T26184] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 2015.731606][T26184] F2FS-fs (loop3): Start checkpoint disabled! [ 2015.779214][T26184] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 2015.786400][T26184] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2015.925176][T26197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5016'. [ 2015.934454][T14009] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2016.134010][T26199] netlink: 'syz.3.5013': attribute type 4 has an invalid length. [ 2016.141927][T26199] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5013'. [ 2016.741787][T14009] usb 2-1: Using ep0 maxpacket: 32 [ 2016.753356][T14009] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 2016.774027][T14009] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.801501][T14009] usb 2-1: config 0 has no interfaces? [ 2016.809501][T14009] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2016.822581][T14009] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.840813][T14009] usb 2-1: Product: syz [ 2016.850941][T14009] usb 2-1: Manufacturer: syz [ 2016.859682][T14009] usb 2-1: SerialNumber: syz [ 2016.875226][T14009] usb 2-1: config 0 descriptor?? [ 2017.452823][T26209] syzkaller0: entered promiscuous mode [ 2017.478287][T26209] syzkaller0: entered allmulticast mode [ 2017.575774][T26210] tipc: Enabled bearer , priority 0 [ 2017.610430][T26208] tipc: Resetting bearer [ 2017.763518][T26208] tipc: Disabling bearer [ 2017.924521][T26214] tipc: Enabled bearer , priority 0 [ 2017.947772][T26214] tipc: Resetting bearer [ 2018.015921][T26213] tipc: Disabling bearer [ 2018.419411][T26225] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5024'. [ 2019.304981][T26230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5025'. [ 2019.703228][T26240] loop2: detected capacity change from 0 to 512 [ 2019.787742][T26238] syzkaller0: entered promiscuous mode [ 2019.817442][T26240] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.5028: corrupted in-inode xattr: invalid ea_ino [ 2019.887520][T26238] syzkaller0: entered allmulticast mode [ 2020.008551][T14213] usb 2-1: USB disconnect, device number 63 [ 2020.044293][T26240] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.5028: couldn't read orphan inode 15 (err -117) [ 2020.061531][T26244] tipc: Enabled bearer , priority 0 [ 2020.113281][T26240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2020.143706][T26236] tipc: Resetting bearer [ 2020.284587][T26236] tipc: Disabling bearer [ 2020.542854][T26249] fuse: Bad value for 'user_id' [ 2020.560723][T26249] usb usb7: check_ctrlrecip: process 26249 (syz.2.5028) requesting ep 01 but needs 81 [ 2020.570411][T26249] usb usb7: usbfs: process 26249 (syz.2.5028) did not claim interface 0 before use [ 2020.868320][T26250] tipc: Started in network mode [ 2020.887256][T26250] tipc: Node identity 3a265a3d555e, cluster identity 4711 [ 2020.918596][T26250] tipc: Enabled bearer , priority 0 [ 2020.954784][T26251] tipc: Resetting bearer [ 2021.042856][T26248] tipc: Disabling bearer [ 2021.097638][T15513] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2021.381353][T26259] loop3: detected capacity change from 0 to 2048 [ 2021.471210][T26259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2021.660198][T25144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2021.806645][T26273] syzkaller0: entered promiscuous mode [ 2021.812299][T26273] syzkaller0: entered allmulticast mode [ 2021.819743][T26271] loop0: detected capacity change from 0 to 512 [ 2021.829212][T26273] tipc: Enabled bearer , priority 0 [ 2021.840842][T26272] tipc: Resetting bearer [ 2021.861895][ T5838] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2021.888743][T26271] EXT4-fs error (device loop0): ext4_iget_extra_inode:4740: inode #15: comm syz.0.5041: corrupted in-inode xattr: invalid ea_ino [ 2021.911232][T26271] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.5041: couldn't read orphan inode 15 (err -117) [ 2021.941429][T26271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2021.960109][T26272] tipc: Disabling bearer [ 2022.085774][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 2022.140628][ T5838] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 2022.179734][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.214364][ T5838] usb 2-1: config 0 has no interfaces? [ 2022.222918][ T5838] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2022.305212][T26280] fuse: Bad value for 'user_id' [ 2022.323283][T26280] usb usb7: check_ctrlrecip: process 26280 (syz.0.5041) requesting ep 01 but needs 81 [ 2022.332980][T26280] usb usb7: usbfs: process 26280 (syz.0.5041) did not claim interface 0 before use [ 2022.716273][T26282] netlink: 'syz.3.5044': attribute type 29 has an invalid length. [ 2022.752268][T26282] netlink: 'syz.3.5044': attribute type 29 has an invalid length. [ 2022.776214][T26283] netlink: 'syz.3.5044': attribute type 29 has an invalid length. [ 2022.805444][T26282] netlink: 'syz.3.5044': attribute type 29 has an invalid length. [ 2022.929177][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.937602][ T5838] usb 2-1: Product: syz [ 2022.942297][ T5838] usb 2-1: Manufacturer: syz [ 2022.946918][ T5838] usb 2-1: SerialNumber: syz [ 2022.962758][ T5838] usb 2-1: config 0 descriptor?? [ 2022.974063][T23756] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2023.147128][T26287] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5046'. [ 2023.179249][T26279] loop2: detected capacity change from 0 to 32768 [ 2023.242867][T26279] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 2023.285920][T26279] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2023.354000][T26279] OCFS2: File system is now read-only. [ 2023.359552][T26279] (syz.2.5043,26279,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 2023.402089][T26279] (syz.2.5043,26279,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 2023.432210][T26279] (syz.2.5043,26279,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 2023.446831][T26279] (syz.2.5043,26279,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 2023.521963][T26279] (syz.2.5043,26279,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 2024.327576][T26307] loop2: detected capacity change from 0 to 32768 [ 2024.381758][T26313] syzkaller0: entered promiscuous mode [ 2024.387648][T26313] syzkaller0: entered allmulticast mode [ 2024.395834][T26307] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2024.409103][T26313] tipc: Enabled bearer , priority 0 [ 2024.440118][T26312] tipc: Resetting bearer [ 2024.569176][T26307] XFS (loop2): Ending clean mount [ 2024.643189][T26312] tipc: Disabling bearer [ 2025.234541][T15513] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2025.398838][T26323] loop3: detected capacity change from 0 to 512 [ 2025.438435][T26323] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.5054: corrupted in-inode xattr: invalid ea_ino [ 2025.556611][T26323] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.5054: couldn't read orphan inode 15 (err -117) [ 2025.648348][T26323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2025.974104][T26329] fuse: Bad value for 'user_id' [ 2025.981122][T26329] usb usb7: check_ctrlrecip: process 26329 (syz.3.5054) requesting ep 01 but needs 81 [ 2025.990798][T26329] usb usb7: usbfs: process 26329 (syz.3.5054) did not claim interface 0 before use [ 2026.545154][T25144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2026.693316][T14009] usb 2-1: USB disconnect, device number 64 [ 2026.896251][T26338] syzkaller0: entered promiscuous mode [ 2026.919796][T26338] syzkaller0: entered allmulticast mode [ 2026.931308][T26338] tipc: Enabled bearer , priority 0 [ 2026.993252][T26336] tipc: Resetting bearer [ 2027.074772][T26336] tipc: Disabling bearer [ 2027.194483][T26346] netlink: 'syz.0.5063': attribute type 29 has an invalid length. [ 2027.218995][T26346] netlink: 'syz.0.5063': attribute type 29 has an invalid length. [ 2027.253806][T26346] netlink: 'syz.0.5063': attribute type 29 has an invalid length. [ 2027.270972][T26350] loop3: detected capacity change from 0 to 512 [ 2027.312972][T26350] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.5065: corrupted in-inode xattr: invalid ea_ino [ 2027.342531][T26350] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.5065: couldn't read orphan inode 15 (err -117) [ 2027.404379][T26350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2027.839417][T26366] fuse: Bad value for 'user_id' [ 2027.857175][T26366] usb usb7: check_ctrlrecip: process 26366 (syz.3.5065) requesting ep 01 but needs 81 [ 2027.866893][T26366] usb usb7: usbfs: process 26366 (syz.3.5065) did not claim interface 0 before use [ 2027.881082][T14009] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 2028.082115][T14009] usb 1-1: Using ep0 maxpacket: 32 [ 2028.209943][T14009] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 2028.238499][T14009] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2028.276422][T14009] usb 1-1: config 0 has no interfaces? [ 2028.307850][T14009] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2028.338911][T14009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.396206][T14009] usb 1-1: Product: syz [ 2028.400428][T14009] usb 1-1: Manufacturer: syz [ 2028.435879][T14009] usb 1-1: SerialNumber: syz [ 2028.466520][T14009] usb 1-1: config 0 descriptor?? [ 2028.480356][T25144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2028.669233][T26373] syzkaller0: entered promiscuous mode [ 2028.690620][T26373] syzkaller0: entered allmulticast mode [ 2028.712085][T26373] tipc: Enabled bearer , priority 0 [ 2028.720216][T26372] tipc: Resetting bearer [ 2028.763879][T26372] tipc: Disabling bearer [ 2029.713982][T26394] loop1: detected capacity change from 0 to 512 [ 2029.738588][T26394] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.5082: corrupted in-inode xattr: invalid ea_ino [ 2029.819499][T26398] loop3: detected capacity change from 0 to 128 [ 2029.829286][T26394] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.5082: couldn't read orphan inode 15 (err -117) [ 2029.860720][T26394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2029.992156][T26400] tipc: Enabled bearer , priority 0 [ 2030.120872][T26400] tipc: Resetting bearer [ 2030.187340][T26403] fuse: Bad value for 'user_id' [ 2030.194389][T26403] usb usb7: check_ctrlrecip: process 26403 (syz.1.5082) requesting ep 01 but needs 81 [ 2030.204431][T26403] usb usb7: usbfs: process 26403 (syz.1.5082) did not claim interface 0 before use [ 2030.819373][T25605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2030.850781][T26399] tipc: Disabling bearer [ 2031.553566][T22871] usb 1-1: USB disconnect, device number 12 [ 2031.817283][T26429] syzkaller0: entered promiscuous mode [ 2031.823738][T26429] syzkaller0: entered allmulticast mode [ 2031.833878][T26429] tipc: Enabled bearer , priority 0 [ 2031.872948][T26429] tipc: Resetting bearer [ 2031.888178][T26428] tipc: Resetting bearer [ 2031.940118][T26428] tipc: Disabling bearer [ 2033.108791][T26458] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2033.268281][T26458] syzkaller0: linktype set to 825 [ 2033.450595][T26455] syzkaller0: entered promiscuous mode [ 2033.551949][T26455] syzkaller0: entered allmulticast mode [ 2033.602086][T26461] tipc: Enabled bearer , priority 0 [ 2033.771458][T26461] tipc: Resetting bearer [ 2033.837345][T26453] tipc: Resetting bearer [ 2033.922795][T26453] tipc: Disabling bearer [ 2034.178779][T26473] binder: 26472:26473 ioctl c0306201 200000000080 returned -14 [ 2034.219569][T26473] binder: 26472:26473 ioctl c0306201 2000000003c0 returned -14 [ 2034.354352][T26477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5113'. [ 2035.056978][T26494] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2035.076991][T26494] syzkaller0: linktype set to 825 [ 2035.524612][T26488] loop1: detected capacity change from 0 to 40427 [ 2035.556415][T26488] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 2035.601924][T26488] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2035.646316][T26488] F2FS-fs (loop1): Image doesn't support compression [ 2035.689259][T26488] F2FS-fs (loop1): Image doesn't support compression [ 2035.713509][T26498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5123'. [ 2035.748886][T26488] F2FS-fs (loop1): invalid crc value [ 2035.802692][T26500] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5124'. [ 2035.921989][T26489] loop0: detected capacity change from 0 to 131072 [ 2035.939022][T26489] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 2035.946921][T26489] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 2035.955250][T26489] F2FS-fs (loop0): Test dummy encryption mode enabled [ 2035.978936][T26489] F2FS-fs (loop0): invalid crc value [ 2036.001067][T26500] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2036.009894][T26489] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2036.049795][T26489] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 2036.078219][T26489] F2FS-fs (loop0): Start checkpoint disabled! [ 2036.109814][T26489] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 2036.116269][T26488] F2FS-fs (loop1): Start checkpoint disabled! [ 2036.117078][T26489] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2036.212055][T26488] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2036.238277][T26488] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2036.495399][T26512] netlink: 'syz.0.5117': attribute type 4 has an invalid length. [ 2036.503304][T26512] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5117'. [ 2037.318015][T26518] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2037.324401][T26518] syzkaller0: linktype set to 825 [ 2037.581804][T22871] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 2037.621205][T26523] syz.1.5119: attempt to access beyond end of device [ 2037.621205][T26523] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2037.641697][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.651943][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.774065][T22871] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 2037.796757][T22871] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 2037.807247][T22871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.822254][T22871] usb 4-1: Product: syz [ 2037.826478][T22871] usb 4-1: Manufacturer: syz [ 2037.831114][T22871] usb 4-1: SerialNumber: syz [ 2037.888264][T22871] usb 4-1: config 0 descriptor?? [ 2037.925716][T26519] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2037.954998][T22871] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 2038.178653][T26527] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2038.209122][T21324] IPVS: starting estimator thread 0... [ 2038.342319][T26528] IPVS: using max 18 ests per chain, 43200 per kthread [ 2038.938299][T22871] usb 4-1: USB disconnect, device number 67 [ 2039.051936][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5133'. [ 2040.073912][T26538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5135'. [ 2040.896140][T24893] kworker/u4:20: attempt to access beyond end of device [ 2040.896140][T24893] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2040.939417][T24893] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2041.070115][T26549] syzkaller0: entered promiscuous mode [ 2041.089679][T26549] syzkaller0: entered allmulticast mode [ 2041.124808][T26549] tipc: Enabled bearer , priority 0 [ 2041.239878][T26552] tipc: Resetting bearer [ 2041.327938][T26547] tipc: Resetting bearer [ 2041.472744][T26547] tipc: Disabling bearer [ 2041.929228][T26546] loop0: detected capacity change from 0 to 131072 [ 2041.947904][T26546] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24) [ 2041.955817][T26546] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 2041.964150][T26546] F2FS-fs (loop0): Test dummy encryption mode enabled [ 2041.978476][T26546] F2FS-fs (loop0): invalid crc value [ 2042.010623][T26546] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2042.051318][T26546] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 2042.098517][T26546] F2FS-fs (loop0): Start checkpoint disabled! [ 2042.157566][T26546] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 2042.165114][T26546] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 2042.530302][T26576] netlink: 'syz.0.5137': attribute type 4 has an invalid length. [ 2042.538225][T26576] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5137'. [ 2043.059028][T26580] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5144'. [ 2043.125801][T26583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5145'. [ 2044.118869][T26587] loop1: detected capacity change from 0 to 40427 [ 2044.162023][T26587] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 2044.169331][T26587] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2044.202828][T26587] F2FS-fs (loop1): Image doesn't support compression [ 2044.209575][T26587] F2FS-fs (loop1): Image doesn't support compression [ 2044.276039][T26587] F2FS-fs (loop1): invalid crc value [ 2044.512971][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5156'. [ 2044.543904][T26587] F2FS-fs (loop1): Start checkpoint disabled! [ 2044.595985][T26587] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2044.632085][T26587] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2044.985292][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2044.997254][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2045.005879][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2045.015567][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2045.026837][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2045.036559][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2045.317403][T26617] chnl_net:caif_netlink_parms(): no params data found [ 2045.407081][T26625] syz.1.5147: attempt to access beyond end of device [ 2045.407081][T26625] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2045.456965][T26617] bridge0: port 1(bridge_slave_0) entered blocking state [ 2045.465782][T26617] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.473570][T26617] bridge_slave_0: entered allmulticast mode [ 2045.480859][T26617] bridge_slave_0: entered promiscuous mode [ 2045.490395][T26617] bridge0: port 2(bridge_slave_1) entered blocking state [ 2045.497892][T26617] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.505434][T26617] bridge_slave_1: entered allmulticast mode [ 2045.523116][T26617] bridge_slave_1: entered promiscuous mode [ 2045.557559][T26617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2045.570333][T26617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2045.575400][T26630] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5160'. [ 2045.614218][T26617] team0: Port device team_slave_0 added [ 2045.623913][T26617] team0: Port device team_slave_1 added [ 2045.661431][T26617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2045.669613][T26617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2045.718343][T26617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2045.745804][T26617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2045.761781][T26617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2045.819838][T26617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2046.074480][T26617] hsr_slave_0: entered promiscuous mode [ 2046.114670][T26617] hsr_slave_1: entered promiscuous mode [ 2046.152717][T26617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2046.160425][T26617] Cannot create hsr debugfs directory [ 2046.438201][T26642] syzkaller0: entered promiscuous mode [ 2046.462912][T26642] syzkaller0: entered allmulticast mode [ 2046.509889][T26642] tipc: Enabled bearer , priority 0 [ 2046.622422][T26642] tipc: Resetting bearer [ 2046.660177][T26641] tipc: Resetting bearer [ 2046.725610][T26641] tipc: Disabling bearer [ 2046.754499][T24874] kworker/u4:6: attempt to access beyond end of device [ 2046.754499][T24874] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2046.806255][T24874] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2046.950972][T26648] loop3: detected capacity change from 0 to 512 [ 2046.982660][T26617] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2047.031673][T26648] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.5166: corrupted in-inode xattr: invalid ea_ino [ 2047.049506][T26648] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.5166: couldn't read orphan inode 15 (err -117) [ 2047.064975][T26648] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2047.075993][ C1] vkms_vblank_simulate: vblank timer overrun [ 2047.152066][ T5085] Bluetooth: hci2: command tx timeout [ 2047.318509][T17297] syz_tun (unregistering): left allmulticast mode [ 2047.420034][T26652] fuse: Bad value for 'user_id' [ 2047.437121][T26652] usb usb7: check_ctrlrecip: process 26652 (syz.3.5166) requesting ep 01 but needs 81 [ 2047.446834][T26652] usb usb7: usbfs: process 26652 (syz.3.5166) did not claim interface 0 before use [ 2048.107577][T25144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2048.126296][T26617] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.306802][T26658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5165'. [ 2048.333434][T26617] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.534494][T26617] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2048.581167][T26654] loop0: detected capacity change from 0 to 32768 [ 2048.590879][T26664] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5171'. [ 2048.608566][T26654] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 2048.668312][T26654] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2048.710517][T26668] Bluetooth: MGMT ver 1.22 [ 2048.715129][T26654] OCFS2: File system is now read-only. [ 2048.762475][T26654] (syz.0.5167,26654,1):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 2048.807725][T26654] (syz.0.5167,26654,1):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 2048.827748][T24874] tipc: Disabling bearer [ 2048.843251][T24874] tipc: Left network mode [ 2048.852821][T26654] (syz.0.5167,26654,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 2048.881828][T26654] (syz.0.5167,26654,1):ocfs2_initialize_super:2252 ERROR: status = -30 [ 2048.890659][T26654] (syz.0.5167,26654,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 2049.070331][T26617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2049.221978][ T5789] Bluetooth: hci2: command tx timeout [ 2049.994705][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 2050.131272][T26677] loop0: detected capacity change from 0 to 32768 [ 2050.153124][T26617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2050.173961][T26617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2050.213322][T26674] syzkaller0: entered promiscuous mode [ 2050.222191][T26674] syzkaller0: entered allmulticast mode [ 2050.227989][T26677] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2050.257965][T26676] tipc: Enabled bearer , priority 0 [ 2050.321069][T26617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2050.341136][T26677] XFS (loop0): Ending clean mount [ 2050.386741][T26670] tipc: Resetting bearer [ 2050.413491][T26670] tipc: Disabling bearer [ 2050.633718][T23756] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2050.983862][T26704] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5177'. [ 2051.272925][T26710] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5181'. [ 2051.314984][ T5085] Bluetooth: hci2: command tx timeout [ 2051.422101][T26617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2051.476614][T26718] syzkaller0: entered promiscuous mode [ 2051.500640][T26718] syzkaller0: entered allmulticast mode [ 2051.517998][T26717] tipc: Enabled bearer , priority 0 [ 2051.530571][T26617] 8021q: adding VLAN 0 to HW filter on device team0 [ 2051.620070][T26717] tipc: Resetting bearer [ 2051.644509][T24893] bridge0: port 1(bridge_slave_0) entered blocking state [ 2051.651771][T24893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2051.690448][T26716] tipc: Resetting bearer [ 2051.741305][T26716] tipc: Disabling bearer [ 2051.765455][T24893] bridge0: port 2(bridge_slave_1) entered blocking state [ 2051.772748][T24893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2052.635866][T26734] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5185'. [ 2052.873767][T24874] hsr_slave_0: left promiscuous mode [ 2052.890333][T24874] hsr_slave_1: left promiscuous mode [ 2052.906322][T24874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2052.923538][T24874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2052.938640][T24874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2052.949516][T24874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2052.958219][T24874] bridge_slave_1: left allmulticast mode [ 2052.964334][T24874] bridge_slave_1: left promiscuous mode [ 2052.970269][T24874] bridge0: port 2(bridge_slave_1) entered disabled state [ 2052.990535][T24874] bridge_slave_0: left allmulticast mode [ 2053.001800][T24874] bridge_slave_0: left promiscuous mode [ 2053.014073][T24874] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.102452][T24874] veth1_macvtap: left promiscuous mode [ 2053.114402][T24874] veth0_macvtap: left promiscuous mode [ 2053.121136][T26749] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5191'. [ 2053.130699][T24874] veth1_vlan: left promiscuous mode [ 2053.139007][T24874] veth0_vlan: left promiscuous mode [ 2053.153628][T26751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5192'. [ 2053.382135][ T5085] Bluetooth: hci2: command tx timeout [ 2053.688585][T24874] bond2 (unregistering): Released all slaves [ 2053.908112][T26779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5196'. [ 2054.021535][T24874] bond1 (unregistering): Released all slaves [ 2055.368964][T24874] team0 (unregistering): Port device team_slave_1 removed [ 2055.426503][T24874] team0 (unregistering): Port device team_slave_0 removed [ 2055.476654][T24874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2055.548059][T24874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2055.958761][T24874] bond0 (unregistering): Released all slaves [ 2056.063296][T26744] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 2056.079403][T26761] tipc: Enabled bearer , priority 0 [ 2056.096417][T26766] syzkaller0: entered promiscuous mode [ 2056.103175][T26766] syzkaller0: entered allmulticast mode [ 2056.257579][T26776] tipc: Resetting bearer [ 2056.316305][T26801] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5201'. [ 2056.396815][T26776] tipc: Disabling bearer [ 2056.730267][T26617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2056.786591][T26818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5204'. [ 2056.811018][T24874] IPVS: stop unused estimator thread 0... [ 2056.887951][T26617] veth0_vlan: entered promiscuous mode [ 2056.953612][T26617] veth1_vlan: entered promiscuous mode [ 2057.092850][T26825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2057.103164][T26617] veth0_macvtap: entered promiscuous mode [ 2057.140297][T26617] veth1_macvtap: entered promiscuous mode [ 2057.259733][T26617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2057.291109][T26617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.312348][T26617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2057.331804][T26617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.371991][T26617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2057.399348][T26617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.423925][T26617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2057.458093][T26617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.486642][T26617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.507591][T26617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.531872][T26617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.558268][T26617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2057.580913][T26617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2057.603740][T26617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2057.662345][T26823] loop0: detected capacity change from 0 to 32768 [ 2057.704299][T26823] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 2057.728221][T26823] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2057.755470][T26823] OCFS2: File system is now read-only. [ 2057.765371][T26823] (syz.0.5206,26823,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 2057.775941][T26823] (syz.0.5206,26823,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 2057.811839][T26823] (syz.0.5206,26823,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 2057.831359][T26823] (syz.0.5206,26823,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 2057.840198][T26823] (syz.0.5206,26823,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 2057.965238][T26617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2058.002078][T26617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2058.021340][T26617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2058.044841][T26617] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2058.074356][T26849] tipc: Enabling of bearer rejected, failed to enable media [ 2058.263367][T26823] loop0: detected capacity change from 0 to 128 [ 2058.278485][T26823] EXT4-fs: Ignoring removed mblk_io_submit option [ 2058.333214][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2058.341456][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.398512][T26823] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 2058.406572][T24876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2058.406594][T24876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.467267][T26823] System zones: 1-3, 19-19, 35-36 [ 2058.493568][T26823] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2058.532756][T26823] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2058.791843][T26863] binder: 26862:26863 ioctl c0306201 200000000080 returned -14 [ 2059.816747][T26867] loop1: detected capacity change from 0 to 2048 [ 2059.957604][T26867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2060.018695][T26867] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2060.201661][T23756] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2060.311328][T26867] fs-verity: sha512 using implementation "sha512-avx2" [ 2060.312702][T26877] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2060.503647][T25605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2061.365715][T26896] tipc: Enabling of bearer rejected, failed to enable media [ 2062.951439][T26921] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5228'. [ 2063.232051][T26923] tipc: Enabling of bearer rejected, failed to enable media [ 2063.856463][T26953] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5238'. [ 2065.315624][T26983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5248'. [ 2065.334852][T26971] tipc: Enabling of bearer rejected, failed to enable media [ 2065.843265][T26972] loop3: detected capacity change from 0 to 32768 [ 2065.869385][T26972] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 2065.897442][T26972] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2065.909448][T26972] OCFS2: File system is now read-only. [ 2065.921159][T26972] (syz.3.5246,26972,1):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 2065.931249][T26972] (syz.3.5246,26972,1):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 2065.970411][T26972] (syz.3.5246,26972,1):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 2065.982681][T26972] (syz.3.5246,26972,1):ocfs2_initialize_super:2252 ERROR: status = -30 [ 2065.993797][T26972] (syz.3.5246,26972,1):ocfs2_fill_super:1178 ERROR: status = -30 [ 2067.204042][T27008] loop3: detected capacity change from 0 to 32768 [ 2067.293765][T27008] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2067.391535][T27008] XFS (loop3): Ending clean mount [ 2067.424985][T27022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5259'. [ 2067.710878][T25144] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2067.830191][T27035] syzkaller0: entered promiscuous mode [ 2067.874498][T27035] syzkaller0: entered allmulticast mode [ 2067.988440][T27028] tipc: Enabled bearer , priority 0 [ 2068.086199][T27039] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2068.210172][T14009] IPVS: starting estimator thread 0... [ 2068.446762][T27040] IPVS: using max 19 ests per chain, 45600 per kthread [ 2068.476975][T27027] tipc: Resetting bearer [ 2068.867414][T27027] tipc: Disabling bearer [ 2069.219513][ T5085] Bluetooth: hci4: unexpected cc 0x0c05 length: 4 > 1 [ 2069.226648][ T5085] Bluetooth: hci4: unexpected event for opcode 0x0c05 [ 2069.400346][T27059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5271'. [ 2069.605652][T27063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5273'. [ 2069.661907][T27063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5273'. [ 2069.853314][T27069] syzkaller0: entered promiscuous mode [ 2069.871776][T27069] syzkaller0: entered allmulticast mode [ 2069.909578][T27069] tipc: Enabled bearer , priority 0 [ 2069.941513][T27068] tipc: Resetting bearer [ 2070.077595][T27068] tipc: Disabling bearer [ 2070.918569][T27065] loop1: detected capacity change from 0 to 32768 [ 2070.944382][T27065] OCFS2: ERROR (device loop1): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 2070.982163][T27065] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2071.019301][T27065] OCFS2: File system is now read-only. [ 2071.037013][T27065] (syz.1.5274,27065,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 2071.071348][T27065] (syz.1.5274,27065,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 2071.101290][T27065] (syz.1.5274,27065,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 2071.128555][T27065] (syz.1.5274,27065,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 2071.154505][T27065] (syz.1.5274,27065,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 2072.267930][T27087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5282'. [ 2072.389041][T27088] loop1: detected capacity change from 0 to 32768 [ 2072.423198][T27088] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2072.480280][T27088] XFS (loop1): Ending clean mount [ 2072.498442][T27103] syzkaller0: entered promiscuous mode [ 2072.504230][T27103] syzkaller0: entered allmulticast mode [ 2072.533238][T27103] tipc: Enabled bearer , priority 0 [ 2072.546705][T27102] tipc: Resetting bearer [ 2072.598736][T27102] tipc: Disabling bearer [ 2072.770546][T25605] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2074.145041][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5293'. [ 2074.313716][T27124] syzkaller0: entered promiscuous mode [ 2074.319254][T27124] syzkaller0: entered allmulticast mode [ 2074.364154][T27124] tipc: Started in network mode [ 2074.380367][T27124] tipc: Node identity 0ef4a09b75f6, cluster identity 4711 [ 2074.400357][T27124] tipc: Enabled bearer , priority 0 [ 2074.416922][T27123] tipc: Resetting bearer [ 2074.493806][T27133] binder: 27132:27133 ioctl c0306201 200000000080 returned -14 [ 2074.502916][T27133] binder: 27132:27133 ioctl c0306201 2000000003c0 returned -14 [ 2074.504416][T27123] tipc: Disabling bearer [ 2074.511099][T27133] binder_alloc: 27132: binder_alloc_buf, no vma [ 2074.813075][T27126] loop0: detected capacity change from 0 to 32768 [ 2074.828110][T27126] OCFS2: ERROR (device loop0): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 2074.859834][T27126] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2074.871121][T27126] OCFS2: File system is now read-only. [ 2074.881716][T27126] (syz.0.5295,27126,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 2074.890184][T27126] (syz.0.5295,27126,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 2074.900203][T27126] (syz.0.5295,27126,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 2074.913162][T27126] (syz.0.5295,27126,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 2074.921634][T27126] (syz.0.5295,27126,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 2076.171855][T27141] loop0: detected capacity change from 0 to 32768 [ 2076.238395][T27141] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2076.428653][T27141] XFS (loop0): Ending clean mount [ 2077.250050][T27139] loop2: detected capacity change from 0 to 32768 [ 2077.288576][T23756] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2077.603080][T27139] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2077.892729][T27168] binder: 27167:27168 ioctl c0306201 200000000080 returned -14 [ 2077.913108][T27168] binder: 27167:27168 ioctl c0306201 2000000003c0 returned -14 [ 2077.935164][T27168] binder_alloc: 27167: binder_alloc_buf, no vma [ 2078.023694][T27172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5304'. [ 2078.175870][T27179] loop0: detected capacity change from 0 to 128 [ 2078.330992][T27179] md/raid1:md123: active with 1 out of 1 mirrors [ 2078.345054][T27179] md123: detected capacity change from 0 to 10 [ 2078.639336][T27139] syz.2.5300 (27139) used greatest stack depth: 18840 bytes left [ 2080.095462][T27207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5319'. [ 2080.355472][T26617] ocfs2: Unmounting device (7,2) on (node local) [ 2080.903985][T27232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5331'. [ 2081.476511][T27236] loop3: detected capacity change from 0 to 32768 [ 2081.583018][T27236] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2081.609225][T27251] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2081.615552][T27251] syzkaller0: linktype set to 825 [ 2081.710704][T27256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5342'. [ 2082.717822][T27281] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2083.600558][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5353'. [ 2084.469345][T25144] ocfs2: Unmounting device (7,3) on (node local) [ 2085.198793][T27319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5370'. [ 2086.329441][T27343] FAULT_INJECTION: forcing a failure. [ 2086.329441][T27343] name failslab, interval 1, probability 0, space 0, times 1 [ 2086.347332][T27343] CPU: 1 PID: 27343 Comm: syz.3.5381 Not tainted syzkaller #0 [ 2086.354877][T27343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2086.364986][T27343] Call Trace: [ 2086.368307][T27343] [ 2086.371265][T27343] dump_stack_lvl+0x18c/0x250 [ 2086.375999][T27343] ? show_regs_print_info+0x20/0x20 [ 2086.381253][T27343] ? load_image+0x420/0x420 [ 2086.385804][T27343] ? __might_sleep+0xe0/0xe0 [ 2086.390493][T27343] ? __lock_acquire+0x7d80/0x7d80 [ 2086.395589][T27343] ? percpu_ref_put+0x12/0x100 [ 2086.400393][T27343] should_fail_ex+0x394/0x4c0 [ 2086.405190][T27343] should_failslab+0x9/0x20 [ 2086.409774][T27343] slab_pre_alloc_hook+0x59/0x300 [ 2086.414870][T27343] kmem_cache_alloc+0x5a/0x2c0 [ 2086.419699][T27343] ? vm_area_dup+0x61/0x270 [ 2086.424254][T27343] vm_area_dup+0x61/0x270 [ 2086.428637][T27343] __split_vma+0x1a8/0xc20 [ 2086.433114][T27343] ? mmap_write_unlock+0x160/0x160 [ 2086.438291][T27343] ? __lock_acquire+0x1262/0x7d80 [ 2086.443390][T27343] do_vmi_align_munmap+0x3a3/0x16a0 [ 2086.448665][T27343] ? do_vmi_munmap+0x2d0/0x2d0 [ 2086.453496][T27343] ? mtree_range_walk+0x68c/0x7b0 [ 2086.458608][T27343] ? mas_find_setup+0x47f/0x590 [ 2086.463624][T27343] do_vmi_munmap+0x252/0x2d0 [ 2086.468279][T27343] do_munmap+0xe6/0x140 [ 2086.472501][T27343] ? do_vmi_align_munmap+0x16a0/0x16a0 [ 2086.478010][T27343] ? mtree_load+0x7a4/0x840 [ 2086.482570][T27343] ? mtree_load+0x109/0x840 [ 2086.487134][T27343] ? mas_alloc_nodes+0x8c0/0x8c0 [ 2086.492156][T27343] ? down_write_killable+0x181/0x230 [ 2086.497675][T27343] mremap_to+0x310/0x5d0 [ 2086.501994][T27343] __se_sys_mremap+0x6a8/0x11a0 [ 2086.506930][T27343] ? __x64_sys_mremap+0xc0/0xc0 [ 2086.511859][T27343] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2086.517972][T27343] ? lock_chain_count+0x20/0x20 [ 2086.522913][T27343] ? lockdep_hardirqs_on+0x98/0x150 [ 2086.528166][T27343] ? __x64_sys_mremap+0x20/0xc0 [ 2086.533072][T27343] do_syscall_64+0x55/0xb0 [ 2086.537632][T27343] ? clear_bhb_loop+0x40/0x90 [ 2086.542358][T27343] ? clear_bhb_loop+0x40/0x90 [ 2086.547088][T27343] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2086.553048][T27343] RIP: 0033:0x7f224159e159 [ 2086.557504][T27343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2086.577227][T27343] RSP: 002b:00007f22424d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2086.585668][T27343] RAX: ffffffffffffffda RBX: 00007f2241825fa0 RCX: 00007f224159e159 [ 2086.593665][T27343] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000200000001000 [ 2086.601650][T27343] RBP: 00007f2241635024 R08: 0000200000005000 R09: 0000000000000000 [ 2086.609822][T27343] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2086.617813][T27343] R13: 00007f2241826038 R14: 00007f2241825fa0 R15: 00007ffecb0daaa8 [ 2086.625847][T27343] [ 2086.744222][T27323] loop1: detected capacity change from 0 to 32768 [ 2086.891265][T27323] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2088.302261][T27374] misc userio: Invalid payload size [ 2088.517767][T27323] syz.1.5371 (27323) used greatest stack depth: 17880 bytes left [ 2089.718255][T27389] binder: 27388:27389 ioctl c0306201 200000000080 returned -14 [ 2089.727322][T27389] binder: BINDER_SET_CONTEXT_MGR already set [ 2089.733408][T27389] binder: 27388:27389 ioctl 4018620d 200000000040 returned -16 [ 2089.741357][T27389] binder: 27388:27389 ioctl c0306201 2000000003c0 returned -14 [ 2090.109654][T25605] ocfs2: Unmounting device (7,1) on (node local) [ 2090.910666][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 2091.367137][T27416] binder: 27415:27416 ioctl c0306201 200000000080 returned -14 [ 2091.390347][T27419] netlink: 'syz.0.5412': attribute type 29 has an invalid length. [ 2091.445296][T27419] netlink: 'syz.0.5412': attribute type 29 has an invalid length. [ 2091.473527][T27416] binder: BINDER_SET_CONTEXT_MGR already set [ 2091.555519][T27416] binder: 27415:27416 ioctl 4018620d 200000000040 returned -16 [ 2091.645656][T27419] netlink: 'syz.0.5412': attribute type 29 has an invalid length. [ 2091.705714][T27421] binder: 27415:27421 ioctl c0306201 2000000003c0 returned -14 [ 2093.643851][T27445] netlink: 'syz.3.5422': attribute type 29 has an invalid length. [ 2093.662902][T27445] netlink: 'syz.3.5422': attribute type 29 has an invalid length. [ 2093.682241][T27445] netlink: 'syz.3.5422': attribute type 29 has an invalid length. [ 2093.879205][T27448] binder: 27447:27448 ioctl c0306201 200000000080 returned -14 [ 2093.908865][T27448] binder: BINDER_SET_CONTEXT_MGR already set [ 2093.921845][T27448] binder: 27447:27448 ioctl 4018620d 200000000040 returned -16 [ 2093.939664][T27448] binder: 27447:27448 ioctl c0306201 2000000003c0 returned -14 [ 2095.807918][T27474] netlink: 'syz.1.5431': attribute type 29 has an invalid length. [ 2095.832062][T27474] netlink: 'syz.1.5431': attribute type 29 has an invalid length. [ 2095.880377][T27474] netlink: 'syz.1.5431': attribute type 29 has an invalid length. [ 2096.096350][T27457] loop2: detected capacity change from 0 to 40427 [ 2096.103778][T27479] loop1: detected capacity change from 0 to 512 [ 2096.127655][T27457] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 2096.147607][T27482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5434'. [ 2096.156733][T27457] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2096.176111][T27479] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.5433: corrupted in-inode xattr: invalid ea_ino [ 2096.191605][T27457] F2FS-fs (loop2): Image doesn't support compression [ 2096.207205][T27457] F2FS-fs (loop2): Image doesn't support compression [ 2096.235209][T27457] F2FS-fs (loop2): invalid crc value [ 2096.244210][T27479] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.5433: couldn't read orphan inode 15 (err -117) [ 2096.294674][T27479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2096.502710][T27457] F2FS-fs (loop2): Start checkpoint disabled! [ 2096.603370][T27457] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2096.620524][T27457] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2097.772326][T27497] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2097.795089][T27497] syzkaller0: linktype set to 825 [ 2097.841514][T27487] fuse: Bad value for 'user_id' [ 2097.930257][T27487] usb usb7: check_ctrlrecip: process 27487 (syz.1.5433) requesting ep 01 but needs 81 [ 2097.994980][T27502] syz.2.5426: attempt to access beyond end of device [ 2097.994980][T27502] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2098.002429][T27487] usb usb7: usbfs: process 27487 (syz.1.5433) did not claim interface 0 before use [ 2098.241954][T27506] netlink: 'syz.3.5441': attribute type 29 has an invalid length. [ 2098.262218][T27506] netlink: 'syz.3.5441': attribute type 29 has an invalid length. [ 2098.282897][T27506] netlink: 'syz.3.5441': attribute type 29 has an invalid length. [ 2099.067135][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.073730][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.205800][T27517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5443'. [ 2099.315914][ T142] kworker/u4:5: attempt to access beyond end of device [ 2099.315914][ T142] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2099.350763][T25605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2099.366917][ T142] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 2099.855643][T27527] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2099.861628][T27527] syzkaller0: linktype set to 825 [ 2100.053093][T27536] netlink: 'syz.1.5450': attribute type 29 has an invalid length. [ 2100.061447][T27536] netlink: 'syz.1.5450': attribute type 29 has an invalid length. [ 2100.075291][T27536] netlink: 'syz.1.5450': attribute type 29 has an invalid length. [ 2100.414874][T27540] trusted_key: syz.3.5451 sent an empty control message without MSG_MORE. [ 2101.142247][T27542] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5453'. [ 2101.203730][T27544] loop3: detected capacity change from 0 to 512 [ 2101.278810][T27544] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.5454: corrupted in-inode xattr: invalid ea_ino [ 2101.382474][T27544] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.5454: couldn't read orphan inode 15 (err -117) [ 2101.461555][T27544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2101.812834][T27539] loop1: detected capacity change from 0 to 40427 [ 2101.830782][T27539] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 2101.841645][T27539] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2101.852030][T27539] F2FS-fs (loop1): Image doesn't support compression [ 2101.863111][T27539] F2FS-fs (loop1): Image doesn't support compression [ 2101.892273][T27539] F2FS-fs (loop1): invalid crc value [ 2101.922621][T27556] fuse: Bad value for 'user_id' [ 2101.934578][T27556] usb usb7: check_ctrlrecip: process 27556 (syz.3.5454) requesting ep 01 but needs 81 [ 2101.944503][T27556] usb usb7: usbfs: process 27556 (syz.3.5454) did not claim interface 0 before use [ 2102.462027][T25144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2102.532924][T27561] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2102.555467][T27561] syzkaller0: linktype set to 825 [ 2102.608735][T27539] F2FS-fs (loop1): Start checkpoint disabled! [ 2102.627156][T27564] netlink: 'syz.3.5460': attribute type 29 has an invalid length. [ 2102.643636][T27539] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2102.651151][T27564] netlink: 'syz.3.5460': attribute type 29 has an invalid length. [ 2102.659582][T27539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2102.668479][T27564] netlink: 'syz.3.5460': attribute type 29 has an invalid length. [ 2102.923189][T27570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5463'. [ 2103.047141][T27573] syz.1.5452: attempt to access beyond end of device [ 2103.047141][T27573] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2103.679792][T27584] loop2: detected capacity change from 0 to 512 [ 2103.723290][T27584] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.5469: corrupted in-inode xattr: invalid ea_ino [ 2103.738311][T27584] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.5469: couldn't read orphan inode 15 (err -117) [ 2103.765106][T27584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2104.221748][T27587] fuse: Bad value for 'user_id' [ 2104.233241][T27587] usb usb7: check_ctrlrecip: process 27587 (syz.2.5469) requesting ep 01 but needs 81 [ 2104.244036][T27587] usb usb7: usbfs: process 27587 (syz.2.5469) did not claim interface 0 before use [ 2104.832343][T26617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2104.959714][T24893] kworker/u4:20: attempt to access beyond end of device [ 2104.959714][T24893] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2104.979852][T27593] netlink: 'syz.2.5471': attribute type 29 has an invalid length. [ 2104.991267][T27593] netlink: 'syz.2.5471': attribute type 29 has an invalid length. [ 2105.008479][T24893] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2105.014939][T27593] netlink: 'syz.2.5471': attribute type 29 has an invalid length. [ 2105.057337][T27593] netlink: 'syz.2.5471': attribute type 29 has an invalid length. [ 2105.829958][T27615] loop1: detected capacity change from 0 to 512 [ 2106.000795][T27615] EXT4-fs error (device loop1): ext4_iget_extra_inode:4740: inode #15: comm syz.1.5479: corrupted in-inode xattr: invalid ea_ino [ 2106.037464][T27615] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.5479: couldn't read orphan inode 15 (err -117) [ 2106.059393][T27615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2106.424607][T27621] fuse: Bad value for 'user_id' [ 2106.436031][T27621] usb usb7: check_ctrlrecip: process 27621 (syz.1.5479) requesting ep 01 but needs 81 [ 2106.445714][T27621] usb usb7: usbfs: process 27621 (syz.1.5479) did not claim interface 0 before use [ 2107.037485][T25605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2107.101006][T27628] netlink: 'syz.2.5482': attribute type 29 has an invalid length. [ 2107.118628][T27628] netlink: 'syz.2.5482': attribute type 29 has an invalid length. [ 2107.128313][T27628] netlink: 'syz.2.5482': attribute type 29 has an invalid length. [ 2107.139102][T27628] netlink: 'syz.2.5482': attribute type 29 has an invalid length. [ 2108.165106][T27625] loop3: detected capacity change from 0 to 40427 [ 2108.196572][T27625] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 2108.209998][T27625] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2108.237588][T27625] F2FS-fs (loop3): Image doesn't support compression [ 2108.258463][T27625] F2FS-fs (loop3): Image doesn't support compression [ 2108.279103][T27625] F2FS-fs (loop3): invalid crc value [ 2108.568806][T27625] F2FS-fs (loop3): Start checkpoint disabled! [ 2108.760968][T27625] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2109.081802][T27625] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2109.232312][T27660] loop2: detected capacity change from 0 to 512 [ 2109.287198][T27660] EXT4-fs error (device loop2): ext4_iget_extra_inode:4740: inode #15: comm syz.2.5491: corrupted in-inode xattr: invalid ea_ino [ 2109.364931][T27660] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.5491: couldn't read orphan inode 15 (err -117) [ 2109.396003][T27660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2109.723960][T27650] loop1: detected capacity change from 0 to 32768 [ 2109.827817][T27666] fuse: Bad value for 'user_id' [ 2109.838298][T27666] usb usb7: check_ctrlrecip: process 27666 (syz.2.5491) requesting ep 01 but needs 81 [ 2109.848011][T27666] usb usb7: usbfs: process 27666 (syz.2.5491) did not claim interface 0 before use [ 2110.185350][T27650] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2110.429555][T26617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2110.572004][T27670] netlink: 'syz.2.5493': attribute type 29 has an invalid length. [ 2110.590730][T27670] netlink: 'syz.2.5493': attribute type 29 has an invalid length. [ 2110.623029][T27670] netlink: 'syz.2.5493': attribute type 29 has an invalid length. [ 2110.642286][T27670] netlink: 'syz.2.5493': attribute type 29 has an invalid length. [ 2111.972071][T24893] kworker/u4:20: attempt to access beyond end of device [ 2111.972071][T24893] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2112.084955][T24893] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 2112.856333][T26853] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 2112.870041][T25605] ocfs2: Unmounting device (7,1) on (node local) [ 2112.895448][T27692] loop3: detected capacity change from 0 to 512 [ 2112.915411][T27692] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.5501: corrupted in-inode xattr: invalid ea_ino [ 2112.962565][T27692] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.5501: couldn't read orphan inode 15 (err -117) [ 2113.029180][T27692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2113.051757][T26853] usb 1-1: Using ep0 maxpacket: 32 [ 2113.063791][T26853] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 2113.076444][T26853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2113.097516][T26853] usb 1-1: config 0 has no interfaces? [ 2113.113917][T26853] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2113.128509][T26853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.146554][T26853] usb 1-1: Product: syz [ 2113.156017][T26853] usb 1-1: Manufacturer: syz [ 2113.167101][T26853] usb 1-1: SerialNumber: syz [ 2113.203341][T26853] usb 1-1: config 0 descriptor?? [ 2113.260705][T27698] netlink: 'syz.1.5502': attribute type 29 has an invalid length. [ 2113.282292][T27698] netlink: 'syz.1.5502': attribute type 29 has an invalid length. [ 2113.319242][T27698] netlink: 'syz.1.5502': attribute type 29 has an invalid length. [ 2113.350750][T27698] netlink: 'syz.1.5502': attribute type 29 has an invalid length. [ 2113.512904][T27701] fuse: Bad value for 'user_id' [ 2113.524423][T27701] usb usb7: check_ctrlrecip: process 27701 (syz.3.5501) requesting ep 01 but needs 81 [ 2113.534119][T27701] usb usb7: usbfs: process 27701 (syz.3.5501) did not claim interface 0 before use [ 2113.995464][T25144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2114.059007][T27705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5503'. [ 2114.120835][ T5789] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 2114.389708][T27717] binder: 27714:27717 ioctl c0306201 200000000080 returned -14 [ 2114.438327][T27717] binder: 27714:27717 ioctl c0306201 2000000003c0 returned -14 [ 2114.541337][T27722] md: could not open device unknown-block(7,0). [ 2114.729608][T27727] netlink: 'syz.1.5512': attribute type 29 has an invalid length. [ 2114.738254][T27727] netlink: 'syz.1.5512': attribute type 29 has an invalid length. [ 2115.193214][ T5789] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2115.432415][T27735] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5516'. [ 2115.442635][T27719] loop2: detected capacity change from 0 to 32768 [ 2115.501868][T27719] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2116.019079][T27745] binder: 27744:27745 ioctl c0306201 200000000080 returned -14 [ 2116.072576][T27745] binder: 27744:27745 ioctl c0306201 2000000003c0 returned -14 [ 2116.146750][T21324] usb 1-1: USB disconnect, device number 13 [ 2116.268381][T27750] validate_nla: 2 callbacks suppressed [ 2116.268425][T27750] netlink: 'syz.1.5521': attribute type 29 has an invalid length. [ 2116.290203][T27750] netlink: 'syz.1.5521': attribute type 29 has an invalid length. [ 2116.300058][T27750] netlink: 'syz.1.5521': attribute type 29 has an invalid length. [ 2116.308901][T27750] netlink: 'syz.1.5521': attribute type 29 has an invalid length. [ 2116.814417][ T5789] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 2116.914728][T27761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5526'. [ 2116.926542][T26617] ocfs2: Unmounting device (7,2) on (node local) [ 2117.139663][T27765] binder: 27764:27765 ioctl c0306201 200000000080 returned -14 [ 2117.158338][T27765] binder: 27764:27765 ioctl c0306201 2000000003c0 returned -14 [ 2117.283251][T26853] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2117.331150][T27771] netlink: 'syz.2.5531': attribute type 29 has an invalid length. [ 2117.339788][T27771] netlink: 'syz.2.5531': attribute type 29 has an invalid length. [ 2117.349858][T27771] netlink: 'syz.2.5531': attribute type 29 has an invalid length. [ 2117.358373][T27771] netlink: 'syz.2.5531': attribute type 29 has an invalid length. [ 2117.482576][T26853] usb 4-1: Using ep0 maxpacket: 32 [ 2117.502483][T26853] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 2117.517118][T26853] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2117.529305][T26853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.539524][T26853] usb 4-1: Product: syz [ 2117.542052][T21324] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 2117.556390][T26853] usb 4-1: Manufacturer: syz [ 2117.561876][T26853] usb 4-1: SerialNumber: syz [ 2117.581007][T26853] usb 4-1: config 0 descriptor?? [ 2117.606800][T26853] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 2117.624991][T26853] dvb-usb: bulk message failed: -22 (2/0) [ 2117.646098][T26853] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2117.661443][T26853] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 2117.672122][T26853] usb 4-1: media controller created [ 2117.697817][T26853] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2117.726074][T26853] usb 4-1: selecting invalid altsetting 7 [ 2117.732072][T26853] cxusb: set interface failed [ 2117.736777][T26853] dvb-usb: bulk message failed: -22 (1/0) [ 2117.751834][T21324] usb 1-1: Using ep0 maxpacket: 32 [ 2117.760252][T21324] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 2117.770723][T21324] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2117.791759][T21324] usb 1-1: config 0 has no interfaces? [ 2117.809272][T21324] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2117.825161][T21324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.837068][T26853] DVB: Unable to find symbol lgdt330x_attach() [ 2117.843904][T26853] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 2117.847349][T21324] usb 1-1: Product: syz [ 2117.865225][T21324] usb 1-1: Manufacturer: syz [ 2117.876564][T21324] usb 1-1: SerialNumber: syz [ 2117.891706][T21324] usb 1-1: config 0 descriptor?? [ 2117.971920][T26853] rc_core: IR keymap rc-dvico-portable not found [ 2117.979772][T26853] Registered IR keymap rc-empty [ 2117.987117][T26853] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 2118.000136][T26853] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input88 [ 2118.034474][T26853] dvb-usb: schedule remote query interval to 100 msecs. [ 2118.041566][T26853] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 2118.054804][T26853] usb 4-1: USB disconnect, device number 68 [ 2118.112259][T26853] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 2118.875033][T27792] loop1: detected capacity change from 0 to 32768 [ 2118.907882][T27792] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 2118.942078][T27800] binder: 27799:27800 ioctl c0306201 200000000080 returned -14 [ 2119.036651][T27800] binder: 27799:27800 ioctl c0306201 2000000003c0 returned -14 [ 2119.559441][T25605] ocfs2: Unmounting device (7,1) on (node local) [ 2120.776111][T27820] netlink: 'syz.1.5540': attribute type 29 has an invalid length. [ 2120.777952][T27817] loop2: detected capacity change from 0 to 128 [ 2120.798463][T27817] EXT4-fs: Ignoring removed mblk_io_submit option [ 2120.806614][T27820] netlink: 'syz.1.5540': attribute type 29 has an invalid length. [ 2120.862520][T27817] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 2120.898221][T27817] System zones: 1-3, 19-19, 35-36 [ 2120.924672][T27817] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2120.957049][T27817] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2122.293042][T26617] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2122.417094][T27836] binder: 27835:27836 ioctl c0306201 200000000080 returned -14 [ 2122.473982][T27836] binder: 27835:27836 ioctl c0306201 2000000003c0 returned -14 [ 2122.782164][T27838] loop2: detected capacity change from 0 to 32768 [ 2122.825916][T27838] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 2123.118810][T27844] md: could not open device unknown-block(7,0). [ 2123.173892][T25892] usb 1-1: USB disconnect, device number 14 [ 2123.460245][T27852] validate_nla: 2 callbacks suppressed [ 2123.460262][T27852] netlink: 'syz.0.5553': attribute type 29 has an invalid length. [ 2123.497344][T27852] netlink: 'syz.0.5553': attribute type 29 has an invalid length. [ 2123.507235][T27852] netlink: 'syz.0.5553': attribute type 29 has an invalid length. [ 2123.530050][T27852] netlink: 'syz.0.5553': attribute type 29 has an invalid length. [ 2124.544816][T26617] ocfs2: Unmounting device (7,2) on (node local) [ 2125.683136][T27869] md: could not open device unknown-block(7,0). [ 2125.927854][T27877] loop2: detected capacity change from 0 to 512 [ 2125.966002][T27877] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.5556: corrupted inode contents [ 2126.024772][T27877] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 2126.039164][T27877] EXT4-fs error (device loop2): ext4_do_update_inode:5256: inode #15: comm syz.2.5556: corrupted inode contents [ 2126.057937][T27877] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.5556: mark_inode_dirty error [ 2126.080589][T27877] EXT4-fs (loop2): 1 orphan inode deleted [ 2126.088669][T27877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2126.102539][T22871] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2126.150083][T26617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2126.321895][T22871] usb 2-1: Using ep0 maxpacket: 32 [ 2126.331434][T22871] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 2126.348088][T22871] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2126.367788][T22871] usb 2-1: config 0 has no interfaces? [ 2126.380860][T22871] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2126.399493][T22871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2126.414889][T22871] usb 2-1: Product: syz [ 2126.423332][T22871] usb 2-1: Manufacturer: syz [ 2126.434081][T22871] usb 2-1: SerialNumber: syz [ 2126.447502][T22871] usb 2-1: config 0 descriptor?? [ 2126.651306][T27883] loop2: detected capacity change from 0 to 40427 [ 2126.661591][T27883] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 2126.697373][T27883] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2126.711484][T27883] F2FS-fs (loop2): Image doesn't support compression [ 2126.742708][T27883] F2FS-fs (loop2): Image doesn't support compression [ 2126.752967][T27883] F2FS-fs (loop2): invalid crc value [ 2127.163790][T27883] F2FS-fs (loop2): Start checkpoint disabled! [ 2127.940141][T27883] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2127.951834][T27883] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2128.223979][T27894] syz.2.5564: attempt to access beyond end of device [ 2128.223979][T27894] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2128.506942][T24876] kworker/u4:11: attempt to access beyond end of device [ 2128.506942][T24876] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2128.551157][T24876] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 2128.899891][T27885] loop3: detected capacity change from 0 to 32768 [ 2129.090133][T27885] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 2129.628402][T21324] usb 2-1: USB disconnect, device number 65 [ 2129.985918][T25144] ocfs2: Unmounting device (7,3) on (node local) [ 2130.396938][T27918] loop3: detected capacity change from 0 to 128 [ 2130.412429][T27918] EXT4-fs: Ignoring removed mblk_io_submit option [ 2130.444805][T27918] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 2130.474101][T27918] System zones: 1-3, 19-19, 35-36 [ 2130.495840][T27918] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 2130.526602][T27918] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2130.717508][T27924] md: could not open device unknown-block(7,0). [ 2131.971887][T26853] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 2132.002292][T25144] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2132.161900][T26853] usb 1-1: Using ep0 maxpacket: 32 [ 2132.169402][T26853] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 2132.177971][T26853] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.188497][T26853] usb 1-1: config 0 has no interfaces? [ 2132.196854][T26853] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2132.206534][T26853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.214920][T26853] usb 1-1: Product: syz [ 2132.219254][T26853] usb 1-1: Manufacturer: syz [ 2132.228467][T26853] usb 1-1: SerialNumber: syz [ 2132.246545][T26853] usb 1-1: config 0 descriptor?? [ 2132.784911][T27953] md: could not open device unknown-block(7,0). [ 2132.952327][T27956] loop2: detected capacity change from 0 to 1024 [ 2132.970912][T27956] EXT4-fs: Ignoring removed orlov option [ 2133.015585][T27956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2133.344176][T26617] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2134.791323][T25892] usb 1-1: USB disconnect, device number 15 [ 2135.411471][T27996] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2136.141861][T26853] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2136.331835][T26853] usb 2-1: Using ep0 maxpacket: 32 [ 2136.341225][T26853] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 2136.351378][T26853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2136.366350][T26853] usb 2-1: config 0 has no interfaces? [ 2136.375362][T26853] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2136.389117][T26853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.398254][T26853] usb 2-1: Product: syz [ 2136.409546][T26853] usb 2-1: Manufacturer: syz [ 2136.416746][T26853] usb 2-1: SerialNumber: syz [ 2136.428272][T26853] usb 2-1: config 0 descriptor?? [ 2137.305154][T28011] loop3: detected capacity change from 0 to 131072 [ 2137.331900][T28011] F2FS-fs (loop3): Wrong secs_per_zone / total_sections (512, 24) [ 2137.340070][T28011] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 2137.348673][T28011] F2FS-fs (loop3): Test dummy encryption mode enabled [ 2137.356401][T28011] F2FS-fs (loop3): invalid crc value [ 2137.396401][T28011] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2137.439282][T28011] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 2137.603380][T28011] F2FS-fs (loop3): Start checkpoint disabled! [ 2137.637919][T28011] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 2137.645153][T28011] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2138.627573][T28028] netlink: 'syz.3.5609': attribute type 4 has an invalid length. [ 2138.635463][T28028] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5609'. [ 2140.168364][T28042] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2141.144521][T28046] md: could not open device unknown-block(7,0). [ 2141.526010][ T5838] usb 2-1: USB disconnect, device number 66 [ 2142.857628][T28076] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2143.971844][T26853] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 2144.201778][T26853] usb 3-1: Using ep0 maxpacket: 32 [ 2144.219591][T26853] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 2144.248405][T26853] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2144.283011][T26853] usb 3-1: config 0 has no interfaces? [ 2144.299041][T26853] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2144.317153][T26853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2144.335545][T26853] usb 3-1: Product: syz [ 2144.346221][T26853] usb 3-1: Manufacturer: syz [ 2144.359489][T26853] usb 3-1: SerialNumber: syz [ 2144.383700][T26853] usb 3-1: config 0 descriptor?? [ 2144.829557][T28091] tipc: Enabled bearer , priority 0 [ 2144.840184][T28091] tipc: Resetting bearer [ 2145.031306][T28090] tipc: Disabling bearer [ 2145.590037][T28110] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5638'. [ 2145.710947][ T5789] Bluetooth: hci0: unexpected event for opcode 0x202f [ 2146.593322][T28131] tipc: Enabled bearer , priority 0 [ 2146.642881][T28131] tipc: Resetting bearer [ 2146.706921][T28130] tipc: Disabling bearer [ 2146.719866][T28135] FAULT_INJECTION: forcing a failure. [ 2146.719866][T28135] name failslab, interval 1, probability 0, space 0, times 0 [ 2146.777356][T28135] CPU: 1 PID: 28135 Comm: syz.0.5647 Not tainted syzkaller #0 [ 2146.784895][T28135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2146.795036][T28135] Call Trace: [ 2146.798360][T28135] [ 2146.801330][T28135] dump_stack_lvl+0x18c/0x250 [ 2146.806096][T28135] ? show_regs_print_info+0x20/0x20 [ 2146.811350][T28135] ? load_image+0x420/0x420 [ 2146.815897][T28135] ? __might_sleep+0xe0/0xe0 [ 2146.820544][T28135] ? __lock_acquire+0x7d80/0x7d80 [ 2146.825615][T28135] ? mark_lock+0x94/0x320 [ 2146.829998][T28135] should_fail_ex+0x394/0x4c0 [ 2146.834782][T28135] should_failslab+0x9/0x20 [ 2146.839362][T28135] slab_pre_alloc_hook+0x59/0x300 [ 2146.844454][T28135] kmem_cache_alloc+0x5a/0x2c0 [ 2146.849276][T28135] ? mas_alloc_nodes+0x2f8/0x8c0 [ 2146.854349][T28135] mas_alloc_nodes+0x2f8/0x8c0 [ 2146.859187][T28135] mas_preallocate+0xa1f/0x1170 [ 2146.864093][T28135] ? lockdep_softirqs_off+0x440/0x440 [ 2146.869562][T28135] ? mas_destroy+0x20a0/0x20a0 [ 2146.874393][T28135] ? vma_iter_config+0xe6/0x270 [ 2146.879339][T28135] __split_vma+0x2dd/0xc20 [ 2146.883851][T28135] ? mmap_write_unlock+0x160/0x160 [ 2146.889022][T28135] ? __lock_acquire+0x1262/0x7d80 [ 2146.894113][T28135] do_vmi_align_munmap+0x310/0x16a0 [ 2146.899395][T28135] ? verify_lock_unused+0x140/0x140 [ 2146.904663][T28135] ? do_vmi_munmap+0x2d0/0x2d0 [ 2146.909504][T28135] ? mtree_range_walk+0x68c/0x7b0 [ 2146.914596][T28135] ? mas_find_setup+0x47f/0x590 [ 2146.919519][T28135] do_vmi_munmap+0x252/0x2d0 [ 2146.924194][T28135] do_munmap+0xe6/0x140 [ 2146.928424][T28135] ? do_vmi_align_munmap+0x16a0/0x16a0 [ 2146.933960][T28135] ? mtree_load+0x7a4/0x840 [ 2146.938538][T28135] ? mtree_load+0x109/0x840 [ 2146.943094][T28135] ? mas_alloc_nodes+0x8c0/0x8c0 [ 2146.948083][T28135] ? down_write_killable+0x181/0x230 [ 2146.953438][T28135] mremap_to+0x310/0x5d0 [ 2146.957749][T28135] __se_sys_mremap+0x6a8/0x11a0 [ 2146.962680][T28135] ? __x64_sys_mremap+0xc0/0xc0 [ 2146.967593][T28135] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2146.973650][T28135] ? lock_chain_count+0x20/0x20 [ 2146.978559][T28135] ? lockdep_hardirqs_on+0x98/0x150 [ 2146.983818][T28135] ? __x64_sys_mremap+0x20/0xc0 [ 2146.988706][T28135] do_syscall_64+0x55/0xb0 [ 2146.993180][T28135] ? clear_bhb_loop+0x40/0x90 [ 2146.997905][T28135] ? clear_bhb_loop+0x40/0x90 [ 2147.002630][T28135] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2147.008573][T28135] RIP: 0033:0x7fdc3dd9e159 [ 2147.013036][T28135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2147.032686][T28135] RSP: 002b:00007fdc3eceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2147.041174][T28135] RAX: ffffffffffffffda RBX: 00007fdc3e025fa0 RCX: 00007fdc3dd9e159 [ 2147.049204][T28135] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000200000001000 [ 2147.057218][T28135] RBP: 00007fdc3de35024 R08: 0000200000005000 R09: 0000000000000000 [ 2147.065248][T28135] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2147.073274][T28135] R13: 00007fdc3e026038 R14: 00007fdc3e025fa0 R15: 00007ffe8e040cb8 [ 2147.081316][T28135] [ 2147.105022][T28123] loop1: detected capacity change from 0 to 40427 [ 2147.127266][T28123] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 2147.199167][T28123] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2147.274731][T28123] F2FS-fs (loop1): Image doesn't support compression [ 2147.281505][T28123] F2FS-fs (loop1): Image doesn't support compression [ 2147.484146][T28123] F2FS-fs (loop1): invalid crc value [ 2148.611118][T28147] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5651'. [ 2148.621196][T28123] F2FS-fs (loop1): Start checkpoint disabled! [ 2148.675972][T28123] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2148.706332][T28123] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2149.054678][T28155] syz.1.5641: attempt to access beyond end of device [ 2149.054678][T28155] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2149.158458][T25892] usb 3-1: USB disconnect, device number 72 [ 2149.300100][T24891] kworker/u4:19: attempt to access beyond end of device [ 2149.300100][T24891] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2149.317660][T24891] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2149.635994][T28164] syzkaller0: entered promiscuous mode [ 2149.641543][T28164] syzkaller0: entered allmulticast mode [ 2149.677681][T28164] tipc: Enabled bearer , priority 0 [ 2149.713780][T28164] tipc: Resetting bearer [ 2149.750998][T28163] tipc: Resetting bearer [ 2149.823858][T28163] tipc: Disabling bearer [ 2151.206336][T28178] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2151.667070][T21324] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 2151.806814][T21324] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2151.911800][T25892] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 2152.077432][T28188] fido_id[28188]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2152.131760][T25892] usb 3-1: Using ep0 maxpacket: 32 [ 2152.151534][T25892] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 2152.184443][T25892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.235483][T25892] usb 3-1: config 0 has no interfaces? [ 2152.294487][T25892] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2152.294694][T28194] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5665'. [ 2152.314674][T25892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.335575][T25892] usb 3-1: Product: syz [ 2152.339799][T25892] usb 3-1: Manufacturer: syz [ 2152.367136][T25892] usb 3-1: SerialNumber: syz [ 2152.388003][T25892] usb 3-1: config 0 descriptor?? [ 2155.426037][T28231] FAULT_INJECTION: forcing a failure. [ 2155.426037][T28231] name failslab, interval 1, probability 0, space 0, times 0 [ 2155.440703][T28232] loop1: detected capacity change from 0 to 1024 [ 2155.448524][T28232] EXT4-fs: Ignoring removed orlov option [ 2155.474666][T28231] CPU: 1 PID: 28231 Comm: syz.3.5672 Not tainted syzkaller #0 [ 2155.482278][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2155.492377][T28231] Call Trace: [ 2155.495689][T28231] [ 2155.498657][T28231] dump_stack_lvl+0x18c/0x250 [ 2155.503409][T28231] ? show_regs_print_info+0x20/0x20 [ 2155.508650][T28231] ? load_image+0x420/0x420 [ 2155.513204][T28231] ? __lock_acquire+0x7d80/0x7d80 [ 2155.518289][T28231] should_fail_ex+0x394/0x4c0 [ 2155.523023][T28231] should_failslab+0x9/0x20 [ 2155.527571][T28231] slab_pre_alloc_hook+0x59/0x300 [ 2155.532663][T28231] ? key_alloc+0x34a/0x1030 [ 2155.537251][T28231] ? key_alloc+0x34a/0x1030 [ 2155.541799][T28231] __kmem_cache_alloc_node+0x53/0x250 [ 2155.547243][T28231] ? slab_post_alloc_hook+0x86/0x4d0 [ 2155.552584][T28231] ? key_alloc+0x34a/0x1030 [ 2155.557132][T28231] __kmalloc_node_track_caller+0xa4/0x230 [ 2155.562931][T28231] kmemdup+0x2b/0x70 [ 2155.566875][T28231] key_alloc+0x34a/0x1030 [ 2155.571258][T28231] keyring_alloc+0x45/0xb0 [ 2155.575718][T28231] lookup_user_key+0x4aa/0x1140 [ 2155.580631][T28231] ? lookup_user_key_possessed+0x40/0x40 [ 2155.586314][T28231] ? do_futex+0x2ff/0x3e0 [ 2155.590712][T28231] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 2155.596761][T28231] ? strncpy_from_user+0x1a1/0x2f0 [ 2155.601925][T28231] __se_sys_add_key+0x315/0x410 [ 2155.606822][T28231] ? __x64_sys_add_key+0xc0/0xc0 [ 2155.611810][T28231] ? lockdep_hardirqs_on+0x98/0x150 [ 2155.617044][T28231] ? __x64_sys_add_key+0x20/0xc0 [ 2155.622024][T28231] do_syscall_64+0x55/0xb0 [ 2155.626476][T28231] ? clear_bhb_loop+0x40/0x90 [ 2155.631285][T28231] ? clear_bhb_loop+0x40/0x90 [ 2155.636016][T28231] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2155.641959][T28231] RIP: 0033:0x7f224159e159 [ 2155.646409][T28231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2155.666052][T28231] RSP: 002b:00007f22424d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2155.674524][T28231] RAX: ffffffffffffffda RBX: 00007f2241825fa0 RCX: 00007f224159e159 [ 2155.682530][T28231] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 2155.690529][T28231] RBP: 00007f2241635024 R08: fffffffffffffffe R09: 0000000000000000 [ 2155.698533][T28231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2155.706541][T28231] R13: 00007f2241826038 R14: 00007f2241825fa0 R15: 00007ffecb0daaa8 [ 2155.714598][T28231] [ 2155.882016][T28232] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2156.025557][T28237] loop3: detected capacity change from 0 to 256 [ 2156.037236][T25605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2158.309196][T14009] usb 3-1: USB disconnect, device number 73 [ 2158.571549][T28267] loop1: detected capacity change from 0 to 8192 [ 2158.635645][T28271] FAULT_INJECTION: forcing a failure. [ 2158.635645][T28271] name failslab, interval 1, probability 0, space 0, times 0 [ 2158.648591][T28271] CPU: 1 PID: 28271 Comm: syz.0.5682 Not tainted syzkaller #0 [ 2158.656099][T28271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2158.666196][T28271] Call Trace: [ 2158.669508][T28271] [ 2158.672479][T28271] dump_stack_lvl+0x18c/0x250 [ 2158.677229][T28271] ? show_regs_print_info+0x20/0x20 [ 2158.682497][T28271] ? load_image+0x420/0x420 [ 2158.687048][T28271] ? __might_sleep+0xe0/0xe0 [ 2158.691686][T28271] ? __lock_acquire+0x7d80/0x7d80 [ 2158.696766][T28271] ? mas_prev_slot+0x82a/0x8a0 [ 2158.701600][T28271] should_fail_ex+0x394/0x4c0 [ 2158.706337][T28271] should_failslab+0x9/0x20 [ 2158.710900][T28271] slab_pre_alloc_hook+0x59/0x300 [ 2158.715988][T28271] kmem_cache_alloc+0x5a/0x2c0 [ 2158.720818][T28271] ? __ksm_enter+0x34/0x480 [ 2158.725372][T28271] __ksm_enter+0x34/0x480 [ 2158.729755][T28271] ksm_madvise+0x279/0x360 [ 2158.734234][T28271] do_madvise+0x117d/0x3790 [ 2158.738820][T28271] ? madvise_set_anon_name+0x440/0x440 [ 2158.744335][T28271] ? schedule+0xc7/0x170 [ 2158.748634][T28271] ? futex_wait_queue+0x27/0x1b0 [ 2158.753617][T28271] ? futex_wait_queue+0x138/0x1b0 [ 2158.758680][T28271] ? futex_unqueue+0xcb/0xf0 [ 2158.763309][T28271] ? futex_wait+0x4a7/0x5c0 [ 2158.767864][T28271] ? futex_wait_setup+0x270/0x270 [ 2158.772952][T28271] ? file_end_write+0x159/0x250 [ 2158.777829][T28271] ? vfs_write+0x5de/0x9a0 [ 2158.782288][T28271] ? do_futex+0x2ff/0x3e0 [ 2158.786638][T28271] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2158.792571][T28271] ? lock_chain_count+0x20/0x20 [ 2158.797447][T28271] __x64_sys_madvise+0xa6/0xc0 [ 2158.802281][T28271] do_syscall_64+0x55/0xb0 [ 2158.806730][T28271] ? clear_bhb_loop+0x40/0x90 [ 2158.811444][T28271] ? clear_bhb_loop+0x40/0x90 [ 2158.816154][T28271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2158.822078][T28271] RIP: 0033:0x7fdc3dd9e159 [ 2158.826510][T28271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2158.846150][T28271] RSP: 002b:00007fdc3eceb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2158.854591][T28271] RAX: ffffffffffffffda RBX: 00007fdc3e025fa0 RCX: 00007fdc3dd9e159 [ 2158.862594][T28271] RDX: 000000000000000c RSI: 0000000000002000 RDI: 0000200000ffc000 [ 2158.870584][T28271] RBP: 00007fdc3de35024 R08: 0000000000000000 R09: 0000000000000000 [ 2158.878572][T28271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2158.886586][T28271] R13: 00007fdc3e026038 R14: 00007fdc3e025fa0 R15: 00007ffe8e040cb8 [ 2158.894601][T28271] [ 2159.180008][T28273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5684'. [ 2159.577840][T28269] loop2: detected capacity change from 0 to 32768 [ 2159.630584][T28269] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: inline data i_size 8875750440617115960 exceeds id_count 312 [ 2159.675245][T28269] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 2159.685551][T28285] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5687'. [ 2159.696291][T28269] OCFS2: File system is now read-only. [ 2159.702032][T28269] (syz.2.5683,28269,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 2159.711582][T28269] (syz.2.5683,28269,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 2159.726374][T28269] (syz.2.5683,28269,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 2159.735665][T28269] (syz.2.5683,28269,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 2159.752677][T28269] (syz.2.5683,28269,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 2160.822588][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.828966][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.991126][T28289] loop2: detected capacity change from 0 to 32768 [ 2161.043633][T28289] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2161.126506][T28289] XFS (loop2): Ending clean mount [ 2161.427547][T26617] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 2161.551931][T28308] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2162.443284][T28319] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5696'. [ 2162.468851][T28320] FAULT_INJECTION: forcing a failure. [ 2162.468851][T28320] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.492182][T28320] CPU: 1 PID: 28320 Comm: syz.0.5697 Not tainted syzkaller #0 [ 2162.499700][T28320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2162.509801][T28320] Call Trace: [ 2162.513112][T28320] [ 2162.516072][T28320] dump_stack_lvl+0x18c/0x250 [ 2162.520791][T28320] ? show_regs_print_info+0x20/0x20 [ 2162.526035][T28320] ? load_image+0x420/0x420 [ 2162.530586][T28320] ? __might_sleep+0xe0/0xe0 [ 2162.535214][T28320] ? __lock_acquire+0x7d80/0x7d80 [ 2162.540276][T28320] ? percpu_ref_put+0x12/0x100 [ 2162.545103][T28320] should_fail_ex+0x394/0x4c0 [ 2162.549883][T28320] should_failslab+0x9/0x20 [ 2162.554451][T28320] slab_pre_alloc_hook+0x59/0x300 [ 2162.559547][T28320] kmem_cache_alloc+0x5a/0x2c0 [ 2162.564363][T28320] ? vm_area_dup+0x61/0x270 [ 2162.569024][T28320] vm_area_dup+0x61/0x270 [ 2162.573395][T28320] __split_vma+0x1a8/0xc20 [ 2162.577878][T28320] ? mmap_write_unlock+0x160/0x160 [ 2162.583052][T28320] ? __lock_acquire+0x1262/0x7d80 [ 2162.588132][T28320] do_vmi_align_munmap+0x3a3/0x16a0 [ 2162.593385][T28320] ? do_vmi_munmap+0x2d0/0x2d0 [ 2162.598218][T28320] ? mtree_range_walk+0x68c/0x7b0 [ 2162.603300][T28320] ? mas_find_setup+0x47f/0x590 [ 2162.608211][T28320] do_vmi_munmap+0x252/0x2d0 [ 2162.612864][T28320] do_munmap+0xe6/0x140 [ 2162.617111][T28320] ? do_vmi_align_munmap+0x16a0/0x16a0 [ 2162.622626][T28320] ? mtree_load+0x7a4/0x840 [ 2162.627173][T28320] ? mtree_load+0x109/0x840 [ 2162.631730][T28320] ? mas_alloc_nodes+0x8c0/0x8c0 [ 2162.636794][T28320] ? down_write_killable+0x181/0x230 [ 2162.642142][T28320] mremap_to+0x310/0x5d0 [ 2162.646433][T28320] __se_sys_mremap+0x6a8/0x11a0 [ 2162.651340][T28320] ? __x64_sys_mremap+0xc0/0xc0 [ 2162.656258][T28320] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2162.662294][T28320] ? lock_chain_count+0x20/0x20 [ 2162.667196][T28320] ? lockdep_hardirqs_on+0x98/0x150 [ 2162.672440][T28320] ? __x64_sys_mremap+0x20/0xc0 [ 2162.677341][T28320] do_syscall_64+0x55/0xb0 [ 2162.681801][T28320] ? clear_bhb_loop+0x40/0x90 [ 2162.686552][T28320] ? clear_bhb_loop+0x40/0x90 [ 2162.691283][T28320] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2162.697253][T28320] RIP: 0033:0x7fdc3dd9e159 [ 2162.701709][T28320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2162.721353][T28320] RSP: 002b:00007fdc3eceb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 2162.729814][T28320] RAX: ffffffffffffffda RBX: 00007fdc3e025fa0 RCX: 00007fdc3dd9e159 [ 2162.737828][T28320] RDX: 0000000000004000 RSI: 0000000000003000 RDI: 0000200000001000 [ 2162.745848][T28320] RBP: 00007fdc3de35024 R08: 0000200000005000 R09: 0000000000000000 [ 2162.753902][T28320] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 2162.761960][T28320] R13: 00007fdc3e026038 R14: 00007fdc3e025fa0 R15: 00007ffe8e040cb8 [ 2162.769978][T28320] [ 2163.604489][T28341] netlink: 'syz.0.5703': attribute type 29 has an invalid length. [ 2163.613175][T28341] netlink: 'syz.0.5703': attribute type 29 has an invalid length. [ 2163.626790][T28341] netlink: 'syz.0.5703': attribute type 29 has an invalid length. [ 2163.644804][T14009] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 2164.039521][T14009] usb 3-1: Using ep0 maxpacket: 32 [ 2164.047446][T14009] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 2164.055653][T14009] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2164.065930][T14009] usb 3-1: config 0 has no interfaces? [ 2164.078474][T14009] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2164.087684][T14009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.100474][T14009] usb 3-1: Product: syz [ 2164.116303][T14009] usb 3-1: Manufacturer: syz [ 2164.855755][T14009] usb 3-1: SerialNumber: syz [ 2164.864013][T28353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5708'. [ 2164.873414][T14009] usb 3-1: config 0 descriptor?? [ 2165.019495][T28356] syzkaller0: entered promiscuous mode [ 2165.026684][T28356] syzkaller0: entered allmulticast mode [ 2165.037147][T28356] tipc: Enabled bearer , priority 0 [ 2165.051268][T28356] tipc: Resetting bearer [ 2165.076259][T28355] tipc: Resetting bearer [ 2165.129252][T28355] tipc: Disabling bearer [ 2165.425804][T28370] netlink: 'syz.3.5712': attribute type 29 has an invalid length. [ 2165.484087][T28370] netlink: 'syz.3.5712': attribute type 29 has an invalid length. [ 2165.527125][T28374] netlink: 'syz.3.5712': attribute type 29 has an invalid length. [ 2165.832641][T28382] loop3: detected capacity change from 0 to 1024 [ 2165.909119][T28382] EXT4-fs: Ignoring removed orlov option [ 2166.030517][T28382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2166.107544][T25144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2167.495740][T28403] netlink: 'syz.0.5722': attribute type 29 has an invalid length. [ 2167.506005][T28403] netlink: 'syz.0.5722': attribute type 29 has an invalid length. [ 2167.520866][T28403] netlink: 'syz.0.5722': attribute type 29 has an invalid length. [ 2167.701786][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 2168.210981][T28407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5723'. [ 2168.291322][T21324] usb 3-1: USB disconnect, device number 74 [ 2168.559919][T28416] loop1: detected capacity change from 0 to 1024 [ 2168.582999][T28416] EXT4-fs: Ignoring removed orlov option [ 2168.632565][T28416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2168.805828][T25605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2169.510535][T28439] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2169.805628][T28441] netlink: 'syz.3.5732': attribute type 29 has an invalid length. [ 2169.855644][T28441] netlink: 'syz.3.5732': attribute type 29 has an invalid length. [ 2169.932059][T28444] netlink: 'syz.3.5732': attribute type 29 has an invalid length. [ 2170.721925][T14009] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2170.917480][T28436] loop2: detected capacity change from 0 to 40427 [ 2170.942819][T28436] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 2170.950086][T28436] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2170.951804][T14009] usb 4-1: Using ep0 maxpacket: 32 [ 2170.968020][T28436] F2FS-fs (loop2): Image doesn't support compression [ 2170.981779][T28436] F2FS-fs (loop2): Image doesn't support compression [ 2171.003376][T28436] F2FS-fs (loop2): invalid crc value [ 2171.010876][T14009] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 2171.043978][T14009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2171.081829][T14009] usb 4-1: config 0 has no interfaces? [ 2171.090259][T14009] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2171.111742][T14009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.119905][T14009] usb 4-1: Product: syz [ 2171.141763][T14009] usb 4-1: Manufacturer: syz [ 2171.146421][T14009] usb 4-1: SerialNumber: syz [ 2171.196390][T14009] usb 4-1: config 0 descriptor?? [ 2171.309268][T28436] F2FS-fs (loop2): Start checkpoint disabled! [ 2171.379145][T28436] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2171.419926][T28436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2171.637576][T28455] syz.2.5730: attempt to access beyond end of device [ 2171.637576][T28455] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2171.847181][T24876] kworker/u4:11: attempt to access beyond end of device [ 2171.847181][T24876] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2171.868846][T24876] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 2174.391929][T28483] netlink: 'syz.1.5744': attribute type 29 has an invalid length. [ 2174.517408][T28483] netlink: 'syz.1.5744': attribute type 29 has an invalid length. [ 2174.544436][T28483] netlink: 'syz.1.5744': attribute type 29 has an invalid length. [ 2174.631826][T28487] netlink: 'syz.1.5744': attribute type 29 has an invalid length. [ 2174.826620][T21324] usb 4-1: USB disconnect, device number 69 [ 2174.868535][T28489] md: could not open device unknown-block(7,0). [ 2178.071885][T14009] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2178.161727][T28532] md: could not open device unknown-block(7,0). [ 2178.473510][T14009] usb 4-1: Using ep0 maxpacket: 32 [ 2178.501061][T14009] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 2178.509449][T14009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.520030][T14009] usb 4-1: config 0 has no interfaces? [ 2178.533492][T14009] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2178.552854][T14009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.567446][T14009] usb 4-1: Product: syz [ 2178.582378][T14009] usb 4-1: Manufacturer: syz [ 2178.591985][T14009] usb 4-1: SerialNumber: syz [ 2178.613992][T14009] usb 4-1: config 0 descriptor?? [ 2178.949519][T28544] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2179.194712][T28548] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5764'. [ 2180.455798][T28565] md: could not open device unknown-block(7,0). [ 2180.878535][T28563] loop1: detected capacity change from 0 to 40427 [ 2180.929689][T28563] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 2180.960475][T28563] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2180.991850][T28563] F2FS-fs (loop1): Image doesn't support compression [ 2181.004506][T28563] F2FS-fs (loop1): Image doesn't support compression [ 2181.065528][T28563] F2FS-fs (loop1): invalid crc value [ 2181.469651][T28563] F2FS-fs (loop1): Start checkpoint disabled! [ 2181.659371][T28563] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2181.681233][T28563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2182.616417][T26853] usb 4-1: USB disconnect, device number 70 [ 2183.173004][T28582] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5773'. [ 2183.944833][T28608] md: could not open device unknown-block(7,0). [ 2184.341864][ T5838] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2184.532110][ T5838] usb 2-1: Using ep0 maxpacket: 32 [ 2184.549168][ T5838] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 2184.570997][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2184.596833][ T5838] usb 2-1: config 0 has no interfaces? [ 2184.627101][ T5838] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 2184.647352][ T5838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.669159][ T5838] usb 2-1: Product: syz [ 2184.681256][ T5838] usb 2-1: Manufacturer: syz [ 2184.697982][ T5838] usb 2-1: SerialNumber: syz [ 2184.719777][ T5838] usb 2-1: config 0 descriptor?? [ 2184.837576][T28628] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5787'. [ 2184.961376][T28618] loop3: detected capacity change from 0 to 40427 [ 2184.983452][T28618] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 2184.993732][T28618] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2185.022916][T28618] F2FS-fs (loop3): Image doesn't support compression [ 2185.049941][T28618] F2FS-fs (loop3): Image doesn't support compression [ 2185.074846][T28618] F2FS-fs (loop3): invalid crc value [ 2185.352203][T28641] md: could not open device unknown-block(7,0). [ 2185.404669][T28618] F2FS-fs (loop3): Start checkpoint disabled! [ 2185.504063][T28618] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2185.565315][T28618] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 2187.431851][T28669] md: could not open device unknown-block(7,0). [ 2187.703504][T25892] usb 2-1: USB disconnect, device number 67 [ 2187.780907][T28671] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5800'. [ 2188.231967][T28660] loop2: detected capacity change from 0 to 40427 [ 2188.279120][T28660] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 2188.329725][T28660] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2188.369218][T28660] F2FS-fs (loop2): Image doesn't support compression [ 2188.409174][T28660] F2FS-fs (loop2): Image doesn't support compression [ 2188.456729][T28674] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2188.465573][T28660] F2FS-fs (loop2): invalid crc value [ 2188.879655][T28660] F2FS-fs (loop2): Start checkpoint disabled! [ 2188.972935][T28660] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2188.980141][T28660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2189.561215][T28704] syzkaller0: entered promiscuous mode [ 2189.575981][T28704] syzkaller0: entered allmulticast mode [ 2189.610117][T28704] tipc: Enabled bearer , priority 0 [ 2189.638847][T28704] tipc: Resetting bearer [ 2189.658786][T28683] loop1: detected capacity change from 0 to 40427 [ 2189.682115][T28703] tipc: Resetting bearer [ 2189.714181][T28683] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 2189.732396][T28683] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2189.740833][T28683] F2FS-fs (loop1): Image doesn't support compression [ 2189.767806][T28703] tipc: Disabling bearer [ 2189.785307][T28683] F2FS-fs (loop1): Image doesn't support compression [ 2189.825301][T28683] F2FS-fs (loop1): invalid crc value [ 2190.011246][T28710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5809'. [ 2190.135899][T28683] F2FS-fs (loop1): Start checkpoint disabled! [ 2190.316160][T28720] netlink: 68 bytes leftover after parsing attributes in process `syz.0.5813'. [ 2190.337808][T28683] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2190.366548][T28683] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2190.409207][T28721] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2191.310675][T24893] kworker/u4:20: attempt to access beyond end of device [ 2191.310675][T24893] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2191.365485][T24893] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2191.667768][T28746] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5822'. [ 2191.983500][T28744] syz_tun (unregistering): left allmulticast mode [ 2192.367403][T24876] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.523203][T24876] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.674748][T28764] loop3: detected capacity change from 0 to 1024 [ 2192.693610][T24876] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2192.705616][T28764] EXT4-fs: Ignoring removed orlov option [ 2192.778596][T28764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2192.934649][T24876] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2193.031118][T28756] loop1: detected capacity change from 0 to 40427 [ 2193.053351][T28775] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5832'. [ 2193.062873][T28756] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 2193.084786][T28756] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2193.098573][T25144] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2193.131877][T28756] F2FS-fs (loop1): Image doesn't support compression [ 2193.138617][T28756] F2FS-fs (loop1): Image doesn't support compression [ 2193.203776][T28756] F2FS-fs (loop1): invalid crc value [ 2193.461317][T24876] tipc: Left network mode [ 2193.564076][T28756] F2FS-fs (loop1): Start checkpoint disabled! [ 2193.623442][T28756] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2193.630555][T28756] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2193.929371][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2193.940109][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2193.949248][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2193.958589][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2193.966763][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2193.974548][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2194.112460][T28793] syz.1.5817: attempt to access beyond end of device [ 2194.112460][T28793] loop1: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2194.908793][T24878] kworker/u4:13: attempt to access beyond end of device [ 2194.908793][T24878] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2195.003140][T24878] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 2196.022148][ T5789] Bluetooth: hci1: command tx timeout [ 2196.866452][T28788] chnl_net:caif_netlink_parms(): no params data found [ 2197.201285][T24876] hsr_slave_0: left promiscuous mode [ 2197.244053][T28828] loop2: detected capacity change from 0 to 40427 [ 2197.340935][T28828] F2FS-fs (loop2): Corrupted extension count (64 + 1 > 64) [ 2197.348584][T24876] hsr_slave_1: left promiscuous mode [ 2197.390495][T28828] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2197.457051][T28828] F2FS-fs (loop2): Image doesn't support compression [ 2197.472608][T28828] F2FS-fs (loop2): Image doesn't support compression [ 2197.482279][T24876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2197.489740][T24876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2197.524211][T28828] F2FS-fs (loop2): invalid crc value [ 2197.581455][T24876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2197.596933][T24876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2197.626185][T24876] bridge_slave_1: left allmulticast mode [ 2197.852300][T24876] bridge_slave_1: left promiscuous mode [ 2197.861911][T24876] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.285183][ T5789] Bluetooth: hci1: command tx timeout [ 2198.331399][T24876] bridge_slave_0: left allmulticast mode [ 2198.361303][T24876] bridge_slave_0: left promiscuous mode [ 2198.376639][T24876] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.476547][T28828] F2FS-fs (loop2): Start checkpoint disabled! [ 2198.490515][T24876] veth1_macvtap: left promiscuous mode [ 2198.508545][T24876] veth0_macvtap: left promiscuous mode [ 2198.515900][T24876] veth1_vlan: left promiscuous mode [ 2198.521263][T24876] veth0_vlan: left promiscuous mode [ 2198.598354][T28828] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2198.638523][T28828] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 2198.992817][T28871] syz.2.5842: attempt to access beyond end of device [ 2198.992817][T28871] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427 [ 2199.422509][T24874] kworker/u4:6: attempt to access beyond end of device [ 2199.422509][T24874] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2199.442277][T24874] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 2200.229589][T24876] team0 (unregistering): Port device team_slave_1 removed [ 2200.317134][T24876] team0 (unregistering): Port device team_slave_0 removed [ 2200.346841][ T5789] Bluetooth: hci1: command tx timeout [ 2200.599536][T24876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.971078][T24876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2201.604812][T24876] bond0 (unregistering): Released all slaves [ 2201.892097][T28897] syzkaller0: entered promiscuous mode [ 2201.897730][T28897] syzkaller0: entered allmulticast mode [ 2202.129490][T28788] bridge0: port 1(bridge_slave_0) entered blocking state [ 2202.137155][T28788] bridge0: port 1(bridge_slave_0) entered disabled state [ 2202.145605][T28788] bridge_slave_0: entered allmulticast mode [ 2202.153337][T28788] bridge_slave_0: entered promiscuous mode [ 2202.178795][T28788] bridge0: port 2(bridge_slave_1) entered blocking state [ 2202.417224][T28788] bridge0: port 2(bridge_slave_1) entered disabled state [ 2202.522167][ T5789] Bluetooth: hci1: command tx timeout [ 2202.533554][T28788] bridge_slave_1: entered allmulticast mode [ 2202.720909][T28788] bridge_slave_1: entered promiscuous mode [ 2202.939294][T28788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2202.957360][T28918] md: could not open device unknown-block(7,0). [ 2203.010193][T28788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2203.176153][T28788] team0: Port device team_slave_0 added [ 2203.228365][T28788] team0: Port device team_slave_1 added [ 2203.310557][T28927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5865'. [ 2203.352747][T28788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2203.359829][T28788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2203.767813][T28788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2203.990831][T28788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2204.021566][T28788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2204.117363][T28788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2204.350446][T28788] hsr_slave_0: entered promiscuous mode [ 2204.384433][T28788] hsr_slave_1: entered promiscuous mode [ 2204.551158][T28941] syzkaller0: entered promiscuous mode [ 2204.572540][T28941] syzkaller0: entered allmulticast mode [ 2204.707362][T24876] IPVS: stop unused estimator thread 0... [ 2204.836633][T28956] md: could not open device unknown-block(7,0). [ 2205.826939][T28788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2205.927970][T28968] input: syz0 as /devices/virtual/input/input89 [ 2205.960225][T28788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2205.985563][T28788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2206.824701][T28788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2207.051014][T28788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2207.124937][T28788] 8021q: adding VLAN 0 to HW filter on device team0 [ 2207.137973][T28983] md: could not open device unknown-block(7,0). [ 2207.170389][T24876] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.177602][T24876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2207.238317][T24876] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.245511][T24876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2207.313877][T28985] syzkaller0: entered promiscuous mode [ 2207.319441][T28985] syzkaller0: entered allmulticast mode [ 2209.507691][T28788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2209.757013][T29024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5889'. [ 2209.872888][T29028] syzkaller0: entered promiscuous mode [ 2209.892626][T29028] syzkaller0: entered allmulticast mode [ 2209.915402][T29029] md: could not open device unknown-block(7,0). [ 2211.268298][T28788] veth0_vlan: entered promiscuous mode [ 2211.303230][T28788] veth1_vlan: entered promiscuous mode [ 2211.402434][T28788] veth0_macvtap: entered promiscuous mode [ 2211.441466][T28788] veth1_macvtap: entered promiscuous mode [ 2211.630436][T29052] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 2211.947476][T28788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2212.211715][T28788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.252134][T28788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2212.294129][T28788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.321048][T28788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2212.371585][T28788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.384249][T28788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2212.394921][T28788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2212.405516][T28788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.421907][T28788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2212.434404][T28788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.456079][T28788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2212.490478][T28788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2212.523460][T28788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2212.607581][T28788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.639660][T28788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.662172][T28788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.684998][T28788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2212.756564][T29063] md: could not open device unknown-block(7,0). [ 2213.645319][T24885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2213.711576][T24885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2213.824670][T14112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2213.847067][T14112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2214.210653][T29085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5903'. [ 2214.367590][T29088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5904'. [ 2214.543843][T29093] md: could not open device unknown-block(7,0). [ 2214.638160][T29097] loop1: detected capacity change from 0 to 1024 [ 2214.670295][T29097] EXT4-fs: Ignoring removed orlov option [ 2214.771039][T29097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2214.995977][T25605] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2215.020027][T29109] syzkaller0: entered promiscuous mode [ 2215.035461][T29109] syzkaller0: entered allmulticast mode [ 2215.085518][T29109] tipc: Started in network mode [ 2215.131791][T29109] tipc: Node identity 06c38c5939eb, cluster identity 4711 [ 2215.140967][T29109] tipc: Enabled bearer , priority 0 [ 2215.186829][T29112] tipc: Resetting bearer [ 2215.275745][T29108] tipc: Resetting bearer [ 2215.420303][T29108] tipc: Disabling bearer [ 2215.523433][T29128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5915'. [ 2215.742658][T29136] md: could not open device unknown-block(7,0). [ 2217.352545][T29158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5925'. [ 2217.775824][T29167] syzkaller0: entered promiscuous mode [ 2217.781359][T29167] syzkaller0: entered allmulticast mode [ 2217.890023][T29167] tipc: Enabled bearer , priority 0 [ 2217.951584][T29166] tipc: Resetting bearer [ 2218.173670][T29166] tipc: Disabling bearer [ 2221.945552][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.952038][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.394509][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.401070][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2316.181693][ T5085] Bluetooth: hci1: command 0x0406 tx timeout [ 2344.826115][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.832526][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.264838][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.271209][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.705929][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.712612][ T1284] ieee802154 phy1 wpan1: encryption failed: -22