last executing test programs: 5.273582437s ago: executing program 4 (id=1751): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000200)=""/9, 0x9) close(r0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) 4.917869464s ago: executing program 4 (id=1756): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000900), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) readv(r0, &(0x7f0000000440)=[{&(0x7f00000019c0)=""/4098, 0x1c}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) 4.712748743s ago: executing program 4 (id=1767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f00000005c0), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8100, 0xe, 0x0, &(0x7f00000002c0)="c8e8a1aee95e10e19e00399da26f", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.202608808s ago: executing program 4 (id=1765): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x1200022, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x1, 0x2af, &(0x7f0000000a80)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x0) 1.87850966s ago: executing program 0 (id=1816): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x2, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0xdb, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) ioctl$COMEDI_SETWSUBD(r0, 0x6411) 1.720799027s ago: executing program 0 (id=1808): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='of3[H\n', 0x6) 1.591683364s ago: executing program 0 (id=1811): timer_create(0x3, 0x0, &(0x7f0000044000)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xfffffffffffffff7]}, 0x8, 0x80000) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1.511648057s ago: executing program 2 (id=1812): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), &(0x7f00000002c0)=""/218}, 0x20) 1.45744405s ago: executing program 2 (id=1814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x9e, 0x0, 0x8000000000000000}]}) 1.311456567s ago: executing program 2 (id=1817): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {0x0, 0x1, 0x3}, 0x1}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) 1.153686845s ago: executing program 2 (id=1821): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 1.108296816s ago: executing program 4 (id=1822): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x5}, 0x1c) setsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 1.064113329s ago: executing program 2 (id=1824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009d}]}) 1.03289087s ago: executing program 3 (id=1825): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f0000000100)=ANY=[], 0x4) write$P9_RSETATTR(r0, 0x0, 0x2f) 916.465716ms ago: executing program 4 (id=1826): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f00000029c0)=[{0x0}, {&(0x7f0000000540)='A', 0x1}], 0x2) 821.92183ms ago: executing program 1 (id=1827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 811.358231ms ago: executing program 3 (id=1828): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/slaves\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='-veth0', 0x6) 801.089491ms ago: executing program 2 (id=1829): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2a0471a, &(0x7f0000000000), 0x82, 0x4a0, &(0x7f0000000240)="$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") chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x180) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000e00)={0x17c04, r0, 0x8, 0x24000003, 0x400000006, 0x6cf}) 661.394848ms ago: executing program 0 (id=1830): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file1\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1d0f04f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") clock_adjtime(0x0, &(0x7f0000000380)={0xffffffffffff2b95, 0x81, 0x1, 0x94a, 0x100, 0x8001, 0x7e, 0x8000000000000000, 0x200000000000ffb, 0xffff, 0x3b9ac9ff, 0x9854, 0x845, 0x9, 0xfff, 0x9, 0x6, 0x9a000004, 0x1000, 0xc7, 0x3, 0x400, 0x7, 0xc, 0x8000000000000003, 0x8}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x100, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20f, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x9, 0xffff}}) 661.260458ms ago: executing program 1 (id=1831): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x4, r1}) 520.346205ms ago: executing program 1 (id=1832): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844) 513.279025ms ago: executing program 3 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000010500000a5c000000180a0d00000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 368.148682ms ago: executing program 1 (id=1833): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0xf0b, 0xffffffff, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b8aca04}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4000000) 367.957552ms ago: executing program 3 (id=1834): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x11, 0x1a3, &(0x7f0000000440)="$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") syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200000, &(0x7f0000000940)={[{@namecase}, {@keep_last_dots}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@namecase}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}, {@gid}, {@gid}, {@zero_size_dir}]}, 0x9, 0x1533, &(0x7f0000006800)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x650ce4b086bd45eb) 272.344236ms ago: executing program 3 (id=1835): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=+x1111111111111111,lp', 0x55) 264.146507ms ago: executing program 0 (id=1846): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x3d) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) 104.615655ms ago: executing program 1 (id=1836): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 24.866848ms ago: executing program 0 (id=1837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000004000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000042c0001800a0001006c696d69740000001c0002800c00014000000000000000230c00024000000000000000010900010073797a30000000000900020073797a320000000014000000110001"], 0xc0}}, 0x0) close(r0) 17.842179ms ago: executing program 3 (id=1838): mkdir(&(0x7f00000003c0)='./file0\x00', 0x25) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x20000102) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x4, 0x3) 0s ago: executing program 1 (id=1839): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) read(r1, &(0x7f00000006c0)=""/32, 0x20) kernel console output (not intermixed with test programs): 34863][ T5456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 115.158076][ T5459] loop4: detected capacity change from 0 to 4096 [ 115.202196][ T5459] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 115.503743][ T4775] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.689454][ T5469] loop2: detected capacity change from 0 to 2048 [ 115.726297][ T5473] loop4: detected capacity change from 0 to 128 [ 115.749718][ T5382] loop1: detected capacity change from 0 to 32768 [ 115.770868][ T5469] NILFS (loop2): invalid segment: Inconsistency found [ 115.785704][ T5473] FAT-fs (loop4): Unrecognized mount option "vfat" or missing value [ 115.811237][ T5469] NILFS (loop2): trying rollback from an earlier position [ 115.826885][ T5382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.415 (5382) [ 115.857382][ T5476] loop5: detected capacity change from 0 to 7 [ 115.872821][ T5469] NILFS (loop2): recovery complete [ 115.891501][ T5476] Dev loop5: unable to read RDB block 7 [ 115.908766][ T5476] loop5: unable to read partition table [ 115.921349][ T5382] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 115.945041][ T5476] loop5: partition table beyond EOD, truncated [ 115.951558][ T5382] BTRFS info (device loop1): force clearing of disk cache [ 115.966144][ T5479] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 115.991097][ T144] loop: Write error at byte offset 4, length 3584. [ 115.998483][ T5382] BTRFS info (device loop1): enabling auto defrag [ 116.007679][ T5476] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 116.024431][ T5382] BTRFS info (device loop1): max_inline at 0 [ 116.030926][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 116.042434][ C1] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 116.054423][ T5382] BTRFS info (device loop1): enabling disk space caching [ 116.061754][ T5382] BTRFS info (device loop1): disk space caching is enabled [ 116.091690][ T5382] BTRFS info (device loop1): has skinny extents [ 116.228420][ T5382] BTRFS error (device loop1): open_ctree failed: -12 [ 116.371537][ T4949] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4949) [ 116.609867][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.749409][ T5520] loop2: detected capacity change from 0 to 128 [ 116.885172][ T5520] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.975357][ T5531] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 116.975357][ T5531] The task syz.0.468 (5531) triggered the difference, watch for misbehavior. [ 117.042261][ T155] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.242732][ T26] audit: type=1326 audit(1789720029.552:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5538 comm="syz.2.473" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f252e18e159 code=0x0 [ 117.370659][ T5537] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 117.381972][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.582953][ T5537] overlayfs: upper fs does not support tmpfile. [ 117.625445][ T5537] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.664119][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.716128][ T5551] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 117.898210][ T26] audit: type=1400 audit(1789785566.208:20): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=5554 comm="syz.3.482" name="p" offset=69 [ 118.130857][ T5567] set_capacity_and_notify: 3 callbacks suppressed [ 118.130875][ T5567] loop3: detected capacity change from 0 to 164 [ 118.358322][ T5575] loop1: detected capacity change from 0 to 1024 [ 118.540294][ T5575] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.564051][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.498'. [ 118.580038][ T5575] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.670191][ T5575] EXT4-fs (loop1): shut down requested (1) [ 118.705278][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.151643][ T5615] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(6) [ 119.153116][ T5614] rnbd_client L125: Can't parse path hp:127.0.0.1\ߐ?:bEz[۵>,: -22 [ 119.226160][ T5619] sctp: [Deprecated]: syz.2.511 (pid 5619) Use of int in maxseg socket option. [ 119.226160][ T5619] Use struct sctp_assoc_value instead [ 119.324390][ T5621] netlink: 11 bytes leftover after parsing attributes in process `syz.0.512'. [ 119.594752][ T5640] o2cb: This node has not been configured. [ 119.614012][ T5640] o2cb: Cluster check failed. Fix errors before retrying. [ 119.637425][ T5640] (syz.4.520,5640,1):user_dlm_register:675 ERROR: status = -22 [ 119.656237][ T5640] (syz.4.520,5640,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "domain1" [ 119.748971][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.101444][ T5663] loop2: detected capacity change from 0 to 64 [ 120.385076][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.531051][ T5673] loop2: detected capacity change from 0 to 64 [ 120.806805][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.935446][ T26] audit: type=1400 audit(2000000002.740:21): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5685 comm="syz.1.542" name="p" offset=58 [ 121.099546][ T5665] loop3: detected capacity change from 0 to 32768 [ 121.129920][ T5693] netlink: 44 bytes leftover after parsing attributes in process `syz.4.545'. [ 121.163522][ T4595] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.238622][ T5665] ea_get: invalid extended attribute [ 121.251278][ T5665] ffff88801fb1a000: f0 f1 7c 63 10 00 00 00 00 10 00 00 07 00 00 00 ..|c............ [ 121.262465][ T5665] ffff88801fb1a010: 04 00 00 00 2c 07 ....,. [ 121.433380][ T4595] usb 1-1: Using ep0 maxpacket: 8 [ 121.639758][ T4595] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.768907][ T4595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 121.794533][ T5719] program syz.2.556 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.803801][ T4595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 121.825420][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.834493][ T4595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 121.847062][ T4595] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 121.895812][ T4595] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 121.933455][ T4595] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 122.018872][ T5724] loop2: detected capacity change from 0 to 2048 [ 122.124705][ T4595] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 122.157978][ T4595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.180845][ T5730] loop3: detected capacity change from 0 to 2048 [ 122.203371][ T4595] usb 1-1: Product: syz [ 122.217620][ T4595] usb 1-1: Manufacturer: syz [ 122.229928][ T4595] usb 1-1: SerialNumber: syz [ 122.245350][ T4595] usb 1-1: config 0 descriptor?? [ 122.263699][ T5684] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.271923][ T5684] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.353786][ T5730] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 122.396781][ T5732] loop4: detected capacity change from 0 to 4096 [ 122.662910][ T4189] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 122.948842][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.015352][ T5741] loop2: detected capacity change from 0 to 32768 [ 123.059945][ T4593] usb 1-1: USB disconnect, device number 2 [ 123.144368][ T5761] loop3: detected capacity change from 0 to 512 [ 123.238899][ T5761] EXT4-fs (loop3): Ignoring removed bh option [ 123.246020][ T5741] XFS (loop2): Mounting V5 Filesystem [ 123.260199][ T5761] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 123.388548][ T5761] EXT4-fs (loop3): 1 truncate cleaned up [ 123.395909][ T5773] loop1: detected capacity change from 0 to 64 [ 123.412773][ T5741] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 123.435119][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.437100][ T5761] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,bsdgroups,usrjquota=,,errors=continue. Quota mode: none. [ 123.454613][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.478388][ T5741] XFS (loop2): Starting recovery (logdev: internal) [ 123.517939][ T5741] XFS (loop2): Ending recovery (logdev: internal) [ 123.558971][ T5773] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported. [ 123.612023][ T5773] MINIX-fs: bad superblock [ 123.656894][ T26] audit: type=1800 audit(2000000005.460:22): pid=5741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.565" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 123.959683][ T4188] XFS (loop2): Unmounting Filesystem [ 123.995815][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.276227][ T5769] loop4: detected capacity change from 0 to 40427 [ 124.447999][ T5769] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.494797][ T5793] loop1: detected capacity change from 0 to 1024 [ 124.580501][ T5793] hfsplus: bad catalog entry used to create inode [ 124.639660][ T5793] hfsplus: failed to load root directory [ 124.684832][ T5769] F2FS-fs (loop4): Start checkpoint disabled! [ 124.791993][ T5769] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 125.024146][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.349310][ T5813] loop2: detected capacity change from 0 to 8 [ 125.451863][ T5813] SQUASHFS error: Failed to read block 0x26067d: -5 [ 125.483291][ T5813] SQUASHFS error: Unable to read metadata cache entry [26067d] [ 125.518390][ T5813] SQUASHFS error: Unable to read directory block [26067d:1fff] [ 125.800623][ T5803] loop3: detected capacity change from 0 to 32768 [ 125.923759][ T5829] ima: policy update failed [ 125.937024][ T26] audit: type=1802 audit(2000000007.730:23): pid=5829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.599" res=0 errno=0 [ 126.064901][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.084804][ T5803] XFS (loop3): Mounting V5 Filesystem [ 126.190397][ T5849] loop4: detected capacity change from 0 to 2048 [ 126.286938][ T5803] XFS (loop3): Ending clean mount [ 126.292760][ T5849] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 126.443347][ T5860] netlink: 60 bytes leftover after parsing attributes in process `syz.2.608'. [ 126.479208][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.559698][ T5860] netlink: 60 bytes leftover after parsing attributes in process `syz.2.608'. [ 126.598237][ T4189] XFS (loop3): Unmounting Filesystem [ 126.636464][ T4595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.670536][ T5863] netlink: 60 bytes leftover after parsing attributes in process `syz.2.608'. [ 126.713894][ T5864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.608'. [ 127.134837][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.350262][ T5889] loop4: detected capacity change from 0 to 1024 [ 127.483417][ T5894] loop1: detected capacity change from 0 to 128 [ 127.496239][ T5889] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 127.531471][ T5889] EXT4-fs (loop4): inline encryption not supported [ 127.562019][ T5889] EXT4-fs (loop4): Ignoring removed bh option [ 127.632218][ T5894] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 127.703627][ T5894] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.722582][ T5889] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,noload,user_xattr,nolazytime,grpjquota=,nomblk_io_submit,inlinecrypt,nodiscard,bh,nombcache,resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 127.797044][ T5894] fscrypt (loop1, inode 12): Unsupported encryption flags (0x09) [ 128.143865][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.398283][ T5896] loop3: detected capacity change from 0 to 32768 [ 128.445414][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 128.733378][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 128.863655][ T7] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 128.871845][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 128.923196][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.984322][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 129.036524][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 129.093846][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.148399][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 129.192070][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.247199][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.292034][ T5940] loop3: detected capacity change from 0 to 512 [ 129.408783][ T5940] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.641: iget: bad extended attribute block 134217728 [ 129.511858][ T7] usb 3-1: GET_CAPABILITIES returned 0 [ 129.518126][ T7] usbtmc 3-1:16.0: can't read capabilities [ 129.571665][ T5940] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.641: couldn't read orphan inode 15 (err -117) [ 129.616231][ T5940] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.650667][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.681537][ T5919] loop1: detected capacity change from 0 to 40427 [ 129.699843][ T26] audit: type=1800 audit(2000000267.506:24): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.641" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 129.711035][ T5940] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.641: bg 0: block 465: padding at end of block bitmap is not set [ 129.742957][ T5940] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 129.756806][ T5940] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.641: invalid indirect mapped block 234881024 (level 0) [ 129.773323][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 129.786555][ T5910] usbtmc 3-1:16.0: Unable to send data, error -71 [ 129.789924][ T5940] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.641: invalid indirect mapped block 768 (level 1) [ 129.810950][ T7] usb 3-1: USB disconnect, device number 3 [ 129.886361][ T5919] F2FS-fs (loop1): invalid crc value [ 129.920370][ T5919] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 130.064340][ T5963] bond0: option slaves: invalid value (-veth0) [ 130.248319][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.653'. [ 130.262408][ T5919] F2FS-fs (loop1): Start checkpoint disabled! [ 130.304002][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.331584][ T5919] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7 [ 130.498122][ T5980] loop3: detected capacity change from 0 to 512 [ 130.551769][ T4292] attempt to access beyond end of device [ 130.551769][ T4292] loop1: rw=2049, want=45112, limit=40427 [ 130.583549][ T5980] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 130.592404][ T5980] EXT4-fs (loop3): Unrecognized mount option "dont_hash" or missing value [ 131.345916][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.356568][ T6022] loop1: detected capacity change from 0 to 256 [ 131.637043][ T6037] netlink: 6856 bytes leftover after parsing attributes in process `syz.2.684'. [ 131.747366][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.394246][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.499084][ T6077] loop4: detected capacity change from 0 to 4096 [ 132.577233][ T6088] tmpfs: Bad value for 'uid' [ 132.598265][ T6077] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 132.849697][ T6061] loop2: detected capacity change from 0 to 32768 [ 133.000551][ T6105] MTRR 1 not used [ 133.038354][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.044998][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074181][ T6099] loop4: detected capacity change from 0 to 8192 [ 133.109152][ T6061] XFS (loop2): Mounting V5 Filesystem [ 133.183966][ T6099] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 133.213594][ T6099] REISERFS (device loop4): using ordered data mode [ 133.240671][ T6099] reiserfs: using flush barriers [ 133.252021][ T6061] XFS (loop2): Ending clean mount [ 133.297218][ T6099] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.315293][ T6061] XFS (loop2): Quotacheck needed: Please wait. [ 133.373637][ T6099] REISERFS (device loop4): checking transaction log (loop4) [ 133.423881][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.491633][ T6061] XFS (loop2): Quotacheck: Done. [ 133.696065][ T4188] XFS (loop2): Unmounting Filesystem [ 133.768197][ T6134] loop7: detected capacity change from 0 to 7 [ 133.775438][ T6099] REISERFS (device loop4): Using tea hash to sort names [ 133.790859][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.801938][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.812524][ T6099] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 133.839348][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.850413][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.858398][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.917322][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.928773][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.956417][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 133.967606][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 133.999530][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.010723][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.026573][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.037575][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.041348][ T6139] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 134.054893][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.065850][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.073974][ T5508] ldm_validate_partition_table(): Disk read failed. [ 134.092195][ T6140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.101769][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.112938][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.122133][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 134.133200][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.142975][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 134.151875][ T5508] Dev loop7: unable to read RDB block 0 [ 134.204891][ T6142] loop1: detected capacity change from 0 to 512 [ 134.221763][ T5508] loop7: unable to read partition table [ 134.228835][ T5508] loop7: partition table beyond EOD, truncated [ 134.252318][ T6134] ldm_validate_partition_table(): Disk read failed. [ 134.284697][ T6134] Dev loop7: unable to read RDB block 0 [ 134.310393][ T6134] loop7: unable to read partition table [ 134.367755][ T6134] loop7: partition table beyond EOD, truncated [ 134.377742][ T6142] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 134.402433][ T6142] EXT4-fs (loop1): Ignoring removed bh option [ 134.426149][ T6134] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`4FLQk݊5) failed (rc=-5) [ 134.432567][ T6144] loop3: detected capacity change from 0 to 4096 [ 134.461947][ T6142] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.730: corrupted in-inode xattr [ 134.475668][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.551606][ T6144] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 134.614028][ T6142] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.730: couldn't read orphan inode 15 (err -117) [ 134.639758][ T6142] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000000000400,abort,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,grpquota,bh,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 134.744096][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.729'. [ 134.783487][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.798641][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.729'. [ 134.838620][ T6154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.729'. [ 135.011327][ T6165] loop3: detected capacity change from 0 to 512 [ 135.098141][ T6165] EXT4-fs (loop3): Ignoring removed bh option [ 135.134586][ T6165] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 135.150092][ T6165] EXT4-fs (loop3): Unrecognized mount option "=" or missing value [ 135.177185][ T6165] ip_tables: iptables: counters copy to user failed while replacing table [ 135.189770][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.550484][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.787519][ T6202] loop4: detected capacity change from 0 to 256 [ 135.932923][ T6206] bond0: invalid ARP target specified [ 136.080729][ T6214] netem: incorrect ge model size [ 136.094682][ T6214] netem: change failed [ 136.149453][ T6210] loop4: detected capacity change from 0 to 4096 [ 136.202066][ T6218] i2c i2c-0: new_device: Can't parse I2C address [ 136.227959][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.249595][ T6210] NILFS (loop4): invalid segment: Checksum error in segment payload [ 136.261995][ T6210] NILFS (loop4): trying rollback from an earlier position [ 136.321552][ T6210] NILFS (loop4): recovery complete [ 136.356755][ T6223] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.539459][ T26] audit: type=1326 audit(2000000274.346:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 136.669232][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.678042][ T26] audit: type=1326 audit(2000000274.376:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 136.702234][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.736010][ T6238] loop4: detected capacity change from 0 to 128 [ 136.825394][ T26] audit: type=1326 audit(2000000274.376:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 136.849438][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.005591][ T26] audit: type=1326 audit(2000000274.376:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 137.124044][ T26] audit: type=1326 audit(2000000274.376:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 137.148515][ C1] vkms_vblank_simulate: vblank timer overrun [ 137.276833][ T26] audit: type=1326 audit(2000000274.376:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 137.370568][ T26] audit: type=1326 audit(2000000274.386:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 137.399090][ T26] audit: type=1326 audit(2000000274.386:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 137.461170][ T26] audit: type=1326 audit(2000000274.386:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 137.535665][ T26] audit: type=1326 audit(2000000274.386:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6229 comm="syz.2.767" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 137.669286][ T6270] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.676613][ T6270] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.735996][ T6275] kvm [6273]: vcpu3, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010003 data 0x8 [ 138.151203][ T6298] loop1: detected capacity change from 0 to 1024 [ 138.244155][ T6298] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.794: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.281713][ T6298] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.794: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.353661][ T6298] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.794: Failed to acquire dquot type 0 [ 138.373680][ T6298] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 138.393770][ T6298] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.794: mark_inode_dirty error [ 138.473524][ T6298] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 138.489089][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.799'. [ 138.507748][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 138.518466][ T6298] EXT4-fs (loop1): 1 orphan inode deleted [ 138.528527][ T6313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 138.539853][ T4292] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.550412][ T6298] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 138.601068][ T4292] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:7: Failed to release dquot type 0 [ 138.640324][ T6298] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz.1.794: Invalid inode table block 1 in block_group 0 [ 138.713596][ T6298] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 138.744390][ T6298] EXT4-fs error (device loop1): ext4_setattr:5490: inode #2: comm syz.1.794: mark_inode_dirty error [ 138.789982][ T4238] net_ratelimit: 11 callbacks suppressed [ 138.790004][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.835265][ T6323] Set syz1 is full, maxelem 14 reached [ 138.895674][ T155] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.964018][ T155] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:3: Failed to release dquot type 0 [ 139.004403][ T4197] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 139.040177][ T6332] loop4: detected capacity change from 0 to 256 [ 139.078767][ T4197] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 139.101235][ T4197] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 139.550206][ T6355] program syz.2.818 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.647323][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'. [ 139.714942][ T6361] loop3: detected capacity change from 0 to 512 [ 139.753715][ T6364] use of bytesused == 0 is deprecated and will be removed in the future, [ 139.778032][ T6364] use the actual size instead. [ 139.823598][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.906473][ T6361] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.963284][ T6361] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 140.049398][ T6361] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.100327][ T6361] EXT4-fs (loop3): 1 truncate cleaned up [ 140.134727][ T6361] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,journal_ioprio=0x0000000000000006,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 140.295044][ T6383] loop1: detected capacity change from 0 to 128 [ 140.412463][ T6383] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.542264][ T6388] loop3: detected capacity change from 0 to 512 [ 140.625149][ T6353] loop4: detected capacity change from 0 to 32768 [ 140.658711][ T6388] EXT4-fs error (device loop3): ext4_orphan_get:1410: inode #15: comm syz.3.832: iget: bad i_size value: 38620345925642 [ 140.823534][ T6388] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.832: couldn't read orphan inode 15 (err -117) [ 140.863470][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.874196][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.901388][ T6353] XFS (loop4): Mounting V5 Filesystem [ 140.937151][ T6388] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 141.023538][ T6388] EXT4-fs (loop3): shut down requested (1) [ 141.079288][ T6353] XFS (loop4): Ending clean mount [ 141.106278][ T6412] misc userio: Can't change port type on an already running userio instance [ 141.161489][ T6353] XFS (loop4): Quotacheck needed: Please wait. [ 141.170328][ T6389] attempt to access beyond end of device [ 141.170328][ T6389] loop1: rw=2049, want=237, limit=128 [ 141.201492][ T6415] loop2: detected capacity change from 0 to 128 [ 141.292271][ T6353] XFS (loop4): Quotacheck: Done. [ 141.343774][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.354387][ T6420] loop1: detected capacity change from 0 to 128 [ 141.393452][ T4198] XFS (loop4): Unmounting Filesystem [ 141.471502][ T6420] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 141.502987][ T6420] hpfs: filesystem error: improperly stopped [ 141.509147][ T6420] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 141.520466][ T6420] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 141.566228][ T6420] hpfs: You really don't want any checks? You are crazy... [ 141.590864][ T6420] hpfs: hpfs_map_sector(): read error [ 141.616049][ T6420] hpfs: code page support is disabled [ 141.624822][ T6420] hpfs: hpfs_map_4sectors(): unaligned read [ 141.631197][ T6420] hpfs: hpfs_map_4sectors(): unaligned read [ 141.648790][ T6420] hpfs: filesystem error: unable to find root dir [ 141.904277][ T4238] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.944308][ T6438] loop2: detected capacity change from 0 to 512 [ 141.983833][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.070174][ T6438] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.851: corrupted inode contents [ 142.213246][ T6438] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 142.373270][ T6438] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #15: comm syz.2.851: corrupted inode contents [ 142.509134][ T6459] loop3: detected capacity change from 0 to 512 [ 142.516473][ T6438] EXT4-fs error (device loop2): ext4_evict_inode:332: inode #15: comm syz.2.851: mark_inode_dirty error [ 142.572572][ T6438] EXT4-fs (loop2): 1 orphan inode deleted [ 142.589964][ T6438] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 142.706573][ T6459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 142.724982][ T6463] loop4: detected capacity change from 0 to 4096 [ 142.732929][ T6459] System zones: 1-12 [ 142.741622][ T6466] Bluetooth: hci0: unsupported parameter 5135 [ 142.748752][ T6466] Bluetooth: hci0: unsupported parameter 8192 [ 142.754980][ T6466] Bluetooth: hci0: unsupported parameter 5135 [ 142.761631][ T6466] Bluetooth: hci0: unsupported parameter 8192 [ 142.792310][ T6459] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.860: missing EA_INODE flag [ 142.814083][ T6459] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.860: error while reading EA inode 12 err=-117 [ 142.839750][ T6459] EXT4-fs (loop3): 1 orphan inode deleted [ 142.847295][ T6459] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 142.915733][ T6463] NILFS (loop4): invalid segment: Checksum error in segment payload [ 142.981462][ T6463] NILFS (loop4): trying rollback from an earlier position [ 143.043421][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.074977][ T6463] NILFS (loop4): recovery complete [ 143.115920][ T6475] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 143.190192][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 143.211326][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.230835][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.242491][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.278011][ T6435] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 143.298568][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.307241][ T6435] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 143.337589][ T6435] F2FS-fs (loop1): invalid crc value [ 143.356920][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.375864][ T6435] F2FS-fs (loop1): Found nat_bits in checkpoint [ 143.382350][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.402829][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.418071][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.437440][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.473450][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.488986][ T4232] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 143.497414][ T4593] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.516271][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.545201][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.563958][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.576039][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.587301][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.598583][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.607582][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.616656][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.631031][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.640798][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.643499][ T6435] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 143.659763][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.679418][ T6435] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 143.696650][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.706453][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.715347][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.727166][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.737084][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.746588][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.755846][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.780662][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.789910][ T6463] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 143.801314][ T6463] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 143.811696][ T4593] usb 1-1: Using ep0 maxpacket: 16 [ 143.953407][ T4232] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.963784][ T4593] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.977771][ T4232] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 144.008619][ T4593] usb 1-1: config 0 interface 0 has no altsetting 0 [ 144.029005][ T4593] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 144.039171][ T4232] usb 4-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 144.066515][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.070161][ T4593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.087709][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.107755][ T6493] netlink: 'syz.4.874': attribute type 8 has an invalid length. [ 144.142843][ T4593] usb 1-1: config 0 descriptor?? [ 144.166271][ T4232] idmouse 4-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 144.350016][ T6503] set_capacity_and_notify: 1 callbacks suppressed [ 144.350034][ T6503] loop1: detected capacity change from 0 to 128 [ 144.560482][ T6509] netlink: 196 bytes leftover after parsing attributes in process `syz.4.883'. [ 144.670688][ T6503] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nolazytime,errors=remount-ro,grpjquota=,acl,. Quota mode: none. [ 144.709379][ T6503] ext4 filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 145.107220][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.307378][ T6507] loop2: detected capacity change from 0 to 131072 [ 145.315823][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.381971][ T4593] mcp2221 0003:04D8:00DD.0003: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 145.412049][ T6507] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 145.420952][ T6507] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 145.432705][ T6507] F2FS-fs (loop2): invalid crc value [ 145.447726][ T6507] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.503333][ T4778] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.522929][ T6507] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.530159][ T6507] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 145.591954][ T4593] usb 1-1: USB disconnect, device number 3 [ 145.763986][ T4778] usb 5-1: Using ep0 maxpacket: 32 [ 145.884485][ T4778] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 145.918942][ T4778] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.950626][ T4778] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 145.972962][ T4238] usb 4-1: USB disconnect, device number 2 [ 145.979944][ T4778] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 145.990958][ T4238] idmouse 4-1:1.0: disconnected [ 146.004498][ T4778] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.047096][ T4778] usb 5-1: config 0 descriptor?? [ 146.058196][ T6534] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.892'. [ 146.071203][ T6534] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 146.166728][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.200464][ T6537] page:ffffea0004200000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x108000 [ 146.220194][ T6537] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 146.259073][ T6537] raw: 017ff00000001000 ffffea0004200008 ffffea0004200008 0000000000000000 [ 146.281235][ T6537] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 146.290627][ T6537] page dumped because: unmovable page [ 146.298020][ T6537] page_owner info is not present (never set?) [ 146.317395][ T6541] binder: 6540:6541 ioctl 400c620e 200000000040 returned -22 [ 146.545450][ T4778] elecom 0003:056E:011C.0004: item fetching failed at offset 5/6 [ 146.568966][ T4778] elecom: probe of 0003:056E:011C.0004 failed with error -22 [ 146.711923][ T6555] loop3: detected capacity change from 0 to 512 [ 146.748723][ T4778] usb 5-1: USB disconnect, device number 4 [ 146.799556][ T6555] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 146.852788][ T6555] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 146.913365][ T6555] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 146.956060][ T6555] EXT4-fs (loop3): 1 truncate cleaned up [ 146.961866][ T6555] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 147.118962][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.166773][ T6572] loop2: detected capacity change from 0 to 128 [ 147.183928][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.222611][ T6576] loop1: detected capacity change from 0 to 256 [ 147.294081][ T6576] exfat: Deprecated parameter 'namecase' [ 147.303242][ T6576] exfat: Deprecated parameter 'namecase' [ 147.333057][ T6572] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 147.346119][ T6572] ext4 filesystem being mounted at /187/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.375285][ T6576] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x93e0b04e, utbl_chksum : 0xe619d30d) [ 147.481114][ T6584] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 147.521642][ T6584] netlink: 'syz.3.914': attribute type 2 has an invalid length. [ 147.542429][ T6587] gfs2: path_lookup on c::: returned error -2 [ 147.574862][ T6588] netlink: 'syz.3.914': attribute type 1 has an invalid length. [ 147.604079][ T6588] netlink: 'syz.3.914': attribute type 2 has an invalid length. [ 147.722369][ T6590] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 147.748167][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.783627][ T6595] loop4: detected capacity change from 0 to 512 [ 147.904079][ T6595] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.960684][ T6595] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.036180][ T6612] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 148.089627][ T1272] wlan1: Trigger new scan to find an IBSS to join [ 148.179635][ T6618] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 148.223642][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.354386][ T6628] MTRR 1 not used [ 148.407441][ T6626] loop1: detected capacity change from 0 to 2048 [ 148.423400][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.470467][ T6630] loop4: detected capacity change from 0 to 256 [ 148.601199][ T6626] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.909980][ T6640] loop1: detected capacity change from 0 to 256 [ 148.954324][ T6640] exfat: Deprecated parameter 'utf8' [ 148.975172][ T6640] exfat: Deprecated parameter 'namecase' [ 149.021814][ T6640] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 149.293517][ T6619] loop3: detected capacity change from 0 to 32768 [ 149.313880][ T6646] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 149.333640][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.363344][ T6646] netdevsim netdevsim1 netdevsim0: Failed to get key data for SA table [ 149.471490][ T6648] loop2: detected capacity change from 0 to 2048 [ 149.591372][ T6648] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 149.664451][ T6648] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 149.664534][ T6648] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 149.664551][ T6648] UDF-fs: Scanning with blocksize 512 failed [ 149.670098][ T6648] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.192887][ T6636] loop4: detected capacity change from 0 to 40427 [ 150.271816][ T6636] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 150.314802][ T6636] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 150.344466][ T6636] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 150.398965][ T6636] F2FS-fs (loop4): invalid crc value [ 150.430178][ T4195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.452565][ T6636] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 150.760064][ T6636] F2FS-fs (loop4): Start checkpoint disabled! [ 150.806041][ T6636] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 150.843299][ T6636] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 150.940112][ T6636] attempt to access beyond end of device [ 150.940112][ T6636] loop4: rw=2049, want=53264, limit=40427 [ 151.091791][ T154] attempt to access beyond end of device [ 151.091791][ T154] loop4: rw=2049, want=45104, limit=40427 [ 151.121045][ T6686] loop2: detected capacity change from 0 to 512 [ 151.312785][ T6671] loop1: detected capacity change from 0 to 32768 [ 151.397878][ T6671] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 151.399731][ T6672] loop3: detected capacity change from 0 to 32768 [ 151.418438][ T6671] BTRFS info (device loop1): using free space tree [ 151.426254][ T6671] BTRFS info (device loop1): has skinny extents [ 151.504936][ T4593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.514263][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.544121][ T6672] XFS (loop3): Mounting V5 Filesystem [ 151.791147][ T6672] XFS (loop3): Ending clean mount [ 151.807444][ T6672] XFS (loop3): Quotacheck needed: Please wait. [ 151.831385][ T6671] BTRFS info (device loop1): enabling ssd optimizations [ 151.932012][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 151.932030][ T26] audit: type=1326 audit(2000000289.736:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.072780][ T6732] logitech-hidpp-device 0003:046D:C082.0005: received hid++ report of bad size (5) [ 152.092033][ T6672] XFS (loop3): Quotacheck: Done. [ 152.133272][ T26] audit: type=1326 audit(2000000289.786:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.163671][ T6732] logitech-hidpp-device 0003:046D:C082.0005: Event data for report 16 was too short (6 vs 4) [ 152.206819][ T4195] logitech-hidpp-device 0003:046D:C082.0005: Device not connected [ 152.256290][ T26] audit: type=1326 audit(2000000289.786:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.391277][ T6738] netlink: 16 bytes leftover after parsing attributes in process `syz.2.977'. [ 152.402672][ T26] audit: type=1326 audit(2000000289.796:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f252e14e98e code=0x7ffc0000 [ 152.483569][ T6740] loop4: detected capacity change from 0 to 1024 [ 152.533604][ T26] audit: type=1326 audit(2000000289.796:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.651814][ T26] audit: type=1326 audit(2000000289.796:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.695248][ T26] audit: type=1326 audit(2000000289.796:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.721665][ T26] audit: type=1326 audit(2000000289.796:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.728557][ T6740] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.749835][ T26] audit: type=1326 audit(2000000289.796:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.781340][ T26] audit: type=1326 audit(2000000289.796:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=6727 comm="syz.2.962" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252e18e159 code=0x7ffc0000 [ 152.962731][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.017559][ T4189] XFS (loop3): Unmounting Filesystem [ 153.025059][ T144] wlan1: Trigger new scan to find an IBSS to join [ 153.356700][ T6771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.980'. [ 153.434492][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.796571][ T6789] loop4: detected capacity change from 0 to 256 [ 153.821957][ T6757] loop2: detected capacity change from 0 to 32768 [ 153.942414][ T6757] JBD2: Ignoring recovery information on journal [ 153.983630][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.995170][ T6757] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 154.005099][ T6757] JBD2: bad block at offset 32 [ 154.074168][ T154] wlan1: Creating new IBSS network, BSSID 26:ff:b8:0c:9f:5c [ 154.119623][ T6757] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 154.277061][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 154.361624][ T6805] i2c i2c-0: new_device: Can't parse I2C address [ 154.383961][ T6803] block2mtd: too many arguments [ 154.544473][ T6807] program syz.1.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.555623][ T6750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.030552][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.195075][ T4238] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 155.296969][ T6841] loop3: detected capacity change from 0 to 764 [ 155.411062][ T6841] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 155.553729][ T4238] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 155.579982][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.604828][ T4238] usb 5-1: config 0 descriptor?? [ 155.672016][ T4238] cp210x 5-1:0.0: cp210x converter detected [ 156.063607][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.103309][ T4238] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 156.164472][ T4238] usb 5-1: cp210x converter now attached to ttyUSB0 [ 156.356886][ T1337] usb 5-1: USB disconnect, device number 5 [ 156.386907][ T1337] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 156.429013][ T1337] cp210x 5-1:0.0: device disconnected [ 156.528311][ T6870] loop1: detected capacity change from 0 to 512 [ 156.803212][ T6870] EXT4-fs error (device loop1): ext4_orphan_get:1436: comm syz.1.1023: bad orphan inode 15 [ 156.845713][ T6881] loop2: detected capacity change from 0 to 1024 [ 156.913388][ T6870] ext4_test_bit(bit=14, block=5) = 0 [ 156.922141][ T6881] EXT4-fs (loop2): Ignoring removed bh option [ 156.936531][ T6870] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 157.000569][ T6881] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 157.037318][ T6870] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 157.074622][ T6881] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 157.097849][ T6881] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 157.104337][ T4234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.143965][ T6893] EXT4-fs (loop2): Unrecognized mount option "ext4" or missing value [ 157.189330][ T4778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.359323][ T1337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.387865][ T6897] loop3: detected capacity change from 0 to 256 [ 157.433863][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.504972][ T6897] FAT-fs (loop3): Directory bread(block 64) failed [ 157.531092][ T6897] FAT-fs (loop3): Directory bread(block 65) failed [ 157.569023][ T6897] FAT-fs (loop3): Directory bread(block 66) failed [ 157.599446][ T6897] FAT-fs (loop3): Directory bread(block 67) failed [ 157.607133][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.640321][ T6897] FAT-fs (loop3): Directory bread(block 68) failed [ 157.673446][ T6897] FAT-fs (loop3): Directory bread(block 69) failed [ 157.680490][ T6897] FAT-fs (loop3): Directory bread(block 70) failed [ 157.696773][ T6897] FAT-fs (loop3): Directory bread(block 71) failed [ 157.714096][ T6897] FAT-fs (loop3): Directory bread(block 72) failed [ 157.720792][ T6897] FAT-fs (loop3): Directory bread(block 73) failed [ 157.727972][ T4778] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 157.783030][ T6912] loop1: detected capacity change from 0 to 2048 [ 157.943977][ T6914] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 157.944006][ T4234] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 157.951973][ T6914] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 157.982054][ T6917] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 158.143597][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.223625][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.273646][ T4778] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 158.322919][ T4778] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.342919][ T4778] usb 1-1: Product: syz [ 158.353405][ T4778] usb 1-1: Manufacturer: syz [ 158.358077][ T4778] usb 1-1: SerialNumber: syz [ 158.366848][ T6929] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 158.373885][ T4234] usb 5-1: config 0 has no interfaces? [ 158.387327][ T4778] usb 1-1: config 0 descriptor?? [ 158.392971][ T6929] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 158.400905][ T6929] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 158.416573][ T6929] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 158.424650][ T6929] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 158.431513][ T6929] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 158.441736][ T4778] ch341 1-1:0.0: ch341-uart converter detected [ 158.450284][ T6929] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 158.475075][ T6929] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 158.519927][ T6929] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 158.527477][ T6929] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 158.536734][ T4234] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 158.568130][ T4234] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.603270][ T4234] usb 5-1: Product: syz [ 158.607504][ T4234] usb 5-1: Manufacturer: syz [ 158.612141][ T4234] usb 5-1: SerialNumber: syz [ 158.650196][ T6936] loop2: detected capacity change from 0 to 128 [ 158.659082][ T4234] usb 5-1: config 0 descriptor?? [ 158.700482][ T6936] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 158.965479][ T4232] usb 5-1: USB disconnect, device number 6 [ 159.000147][ T6945] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.093290][ T4778] usb 1-1: failed to send control message: -71 [ 159.113245][ T4778] ch341-uart: probe of ttyUSB0 failed with error -71 [ 159.131507][ T4778] usb 1-1: USB disconnect, device number 4 [ 159.144424][ T4778] ch341 1-1:0.0: device disconnected [ 159.231833][ T6951] loop2: detected capacity change from 0 to 1024 [ 159.298514][ T6955] loop1: detected capacity change from 0 to 8 [ 159.318317][ T6951] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 159.347295][ T6951] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.505570][ T6951] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.1056: lblock 3 mapped to illegal pblock 3 (length 1) [ 159.520509][ T6955] SQUASHFS error: lzo decompression failed, data probably corrupt [ 159.532197][ T6951] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 159.578947][ T6951] EXT4-fs (loop2): This should not happen!! Data will be lost [ 159.578947][ T6951] [ 159.623863][ T6955] SQUASHFS error: Failed to read block 0x1dd: -5 [ 159.632028][ T6955] SQUASHFS error: Unable to read metadata cache entry [1db] [ 159.646434][ T6955] SQUASHFS error: Unable to read inode 0xa7 [ 159.646667][ T6958] EXT4-fs error (device loop2): ext4_free_blocks:6231: comm syz.2.1056: Freeing blocks not in datazone - block = 3, count = 1 [ 159.720295][ T6962] net_ratelimit: 1 callbacks suppressed [ 159.720314][ T6962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.735331][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.744802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.753494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.761860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.770283][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.778978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.787382][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.796012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.804821][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.501925][ T6987] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1073'. [ 160.643521][ T6992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1075'. [ 161.064781][ T7008] sp0: Synchronizing with TNC [ 161.069735][ T7011] loop1: detected capacity change from 0 to 256 [ 161.119729][ T7005] [U] [ 161.197227][ T7014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1087'. [ 161.227555][ T7011] exfat: Deprecated parameter 'namecase' [ 161.272394][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1087'. [ 161.287847][ T7011] exfat: Deprecated parameter 'namecase' [ 161.455834][ T7011] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 161.889859][ T7033] loop3: detected capacity change from 0 to 256 [ 162.013065][ T7033] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a3b, chksum : 0xd53fbf7b, utbl_chksum : 0xe619d30d) [ 162.745951][ T7053] tipc: Started in network mode [ 162.751101][ T7053] tipc: Node identity ac14140f, cluster identity 4711 [ 162.774276][ T7053] tipc: New replicast peer: 255.255.255.255 [ 162.791274][ T7053] tipc: Enabled bearer , priority 10 [ 162.871864][ T7055] loop2: detected capacity change from 0 to 128 [ 162.963767][ T7055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 163.013290][ T7055] System zones: 1-3, 19-19, 35-36 [ 163.048766][ T7055] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000004,debug,,errors=continue. Quota mode: none. [ 163.124597][ T7055] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.199427][ T7047] loop3: detected capacity change from 0 to 32768 [ 163.343811][ T7055] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: none. [ 163.599449][ T7069] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1108'. [ 163.858337][ T4232] tipc: Node number set to 2886997007 [ 163.951349][ T7078] loop4: detected capacity change from 0 to 1024 [ 164.512846][ T7096] loop3: detected capacity change from 0 to 256 [ 164.655005][ T7096] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 164.717679][ T7078] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 164.744325][ C0] net_ratelimit: 18197 callbacks suppressed [ 164.744343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.758677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.767059][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.775387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.783806][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.792107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.800545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.808978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.815479][ T7078] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 164.817818][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.832963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.849825][ T7078] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 164.909885][ T7078] EXT4-fs warning (device loop4): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 165.021146][ T7108] zero sized request [ 165.644446][ T7128] loop4: detected capacity change from 0 to 1024 [ 165.717864][ T7128] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 165.763878][ T7128] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,block_validity,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 166.434044][ T7120] loop3: detected capacity change from 0 to 32768 [ 166.736773][ T7120] XFS (loop3): Mounting V5 Filesystem [ 166.773622][ T7137] loop2: detected capacity change from 0 to 32768 [ 166.783873][ T7148] loop1: detected capacity change from 0 to 256 [ 167.087895][ T7120] XFS (loop3): Ending clean mount [ 167.118378][ T7120] XFS (loop3): Quotacheck needed: Please wait. [ 167.310191][ T7120] XFS (loop3): Quotacheck: Done. [ 167.429970][ T7120] XFS (loop3): User initiated shutdown received. [ 167.464102][ T7120] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 167.478445][ T7120] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 167.558154][ T4189] XFS (loop3): Unmounting Filesystem [ 168.003815][ T7157] loop4: detected capacity change from 0 to 32768 [ 168.301957][ T7168] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1152'. [ 168.304022][ T7157] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 168.642720][ T7137] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 168.689213][ T146] block nbd1: Receive control failed (result -32) [ 168.716788][ T4198] ocfs2: Unmounting device (7,4) on (node local) [ 168.791898][ T7137] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 168.923369][ T7137] (syz.2.1141,7137,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1 [ 168.960776][ T7137] (syz.2.1141,7137,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 168.991262][ T7137] (syz.2.1141,7137,1):ocfs2_mknod:299 ERROR: status = -2 [ 169.033909][ T7137] (syz.2.1141,7137,1):ocfs2_mknod:509 ERROR: status = -2 [ 169.072804][ T7137] (syz.2.1141,7137,1):ocfs2_create:683 ERROR: status = -2 [ 169.393756][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 169.439992][ T7148] FAT-fs (loop1): Directory bread(block 64) failed [ 169.495838][ T7148] FAT-fs (loop1): Directory bread(block 65) failed [ 169.543612][ T7148] FAT-fs (loop1): Directory bread(block 66) failed [ 169.580662][ T7148] FAT-fs (loop1): Directory bread(block 67) failed [ 169.594981][ T7148] FAT-fs (loop1): Directory bread(block 68) failed [ 169.628876][ T7148] FAT-fs (loop1): Directory bread(block 69) failed [ 169.665736][ T7148] FAT-fs (loop1): Directory bread(block 70) failed [ 169.723069][ T7148] FAT-fs (loop1): Directory bread(block 71) failed [ 169.753261][ C1] net_ratelimit: 18092 callbacks suppressed [ 169.753280][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.767938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.777094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.785546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.794020][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.802687][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.811035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.819357][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.827875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.834320][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.846272][ T7148] FAT-fs (loop1): Directory bread(block 72) failed [ 169.868040][ T7148] FAT-fs (loop1): Directory bread(block 73) failed [ 170.048094][ T7198] netlink: 'syz.0.1166': attribute type 10 has an invalid length. [ 170.110350][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.190379][ T7198] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.197828][ T7198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.289390][ T7198] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 170.351357][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 170.422533][ T7205] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 170.474551][ T7200] device bridge_slave_1 left promiscuous mode [ 170.480824][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.528373][ T7200] device bridge_slave_0 left promiscuous mode [ 170.563523][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.604740][ T7200] bond0: (slave bridge0): Releasing backup interface [ 170.797632][ T7182] loop2: detected capacity change from 0 to 1024 [ 170.916148][ T7182] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.1159: lblock 2 mapped to illegal pblock 2 (length 1) [ 170.979421][ T7190] loop3: detected capacity change from 0 to 32768 [ 171.050889][ T7182] __quota_error: 4 callbacks suppressed [ 171.050909][ T7182] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 171.132519][ T7182] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.1159: lblock 0 mapped to illegal pblock 48 (length 1) [ 171.173705][ T7182] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 171.186475][ T7190] XFS (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 171.203213][ T7182] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.1159: Failed to acquire dquot type 0 [ 171.203568][ T7190] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 171.233584][ T7182] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 171.260938][ T7190] XFS (loop3): DAX and reflink cannot be used together! [ 171.290294][ T7182] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.1159: mark_inode_dirty error [ 171.373203][ T7182] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 171.408790][ T7182] EXT4-fs (loop2): 1 orphan inode deleted [ 171.427845][ T7182] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x0000000000000007,nodiscard,stripe=0x0000000000000004,noauto_da_alloc,,errors=continue. Quota mode: none. [ 171.490611][ T1272] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 171.560651][ T7216] loop4: detected capacity change from 0 to 8 [ 171.603453][ T1272] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 171.657153][ T1272] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 171.701684][ T4188] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 171.740237][ T4188] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 171.788375][ T4188] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 172.661415][ T7222] loop1: detected capacity change from 0 to 256 [ 172.811401][ T7226] loop2: detected capacity change from 0 to 512 [ 172.941798][ T7226] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 173.001223][ T7226] ext4 filesystem being mounted at /257/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.098384][ T26] audit: type=1400 audit(2000000310.896:53): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7232 comm="syz.0.1176" name="p" offset=64 [ 173.107178][ T7226] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 174.199083][ T6750] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 174.232736][ T7271] loop4: detected capacity change from 0 to 64 [ 174.473315][ T6750] usb 3-1: Using ep0 maxpacket: 32 [ 174.607005][ T6750] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 174.624365][ T6750] usb 3-1: config 0 has no interface number 0 [ 174.651779][ T6750] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 174.705675][ T7276] loop1: detected capacity change from 0 to 512 [ 174.717141][ T6750] usb 3-1: config 0 interface 85 has no altsetting 0 [ 174.763218][ C1] net_ratelimit: 26773 callbacks suppressed [ 174.763238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.777764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.786616][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.794970][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.803428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.811863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.820231][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.828848][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.837444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.845854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.937982][ T6750] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 174.958017][ T6750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.988277][ T6750] usb 3-1: Product: syz [ 174.993985][ T6750] usb 3-1: Manufacturer: syz [ 174.998667][ T6750] usb 3-1: SerialNumber: syz [ 175.011729][ T6750] usb 3-1: config 0 descriptor?? [ 175.733483][ T6750] appletouch 3-1:0.85: Geyser mode initialized. [ 175.748721][ T6750] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input11 [ 175.920914][ T7276] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 175.936763][ T7276] System zones: 1-12 [ 175.963509][ T7276] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.1194: missing EA_INODE flag [ 175.981571][ T7276] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.1194: error while reading EA inode 12 err=-117 [ 176.000546][ T4195] usb 3-1: USB disconnect, device number 4 [ 176.002371][ T7276] EXT4-fs (loop1): 1 orphan inode deleted [ 176.012383][ T7276] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 176.056927][ T7276] fscrypt (loop1, inode 15): Mutually exclusive encryption flags (0x1c) [ 176.071343][ T4195] appletouch 3-1:0.85: input: appletouch disconnected [ 176.347534][ T7317] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 176.372433][ T7317] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 176.418016][ T7319] loop1: detected capacity change from 0 to 1764 [ 176.843175][ T26] audit: type=1400 audit(2000000314.646:54): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=7335 comm="syz.2.1220" name="p" offset=64 [ 177.029378][ T7271] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 177.112709][ T7344] loop2: detected capacity change from 0 to 256 [ 177.368126][ T7348] loop1: detected capacity change from 0 to 1024 [ 178.306768][ T7360] loop4: detected capacity change from 0 to 32768 [ 178.495088][ T7360] XFS (loop4): Mounting V5 Filesystem [ 178.670457][ T7360] XFS (loop4): Ending clean mount [ 178.682023][ T7370] loop2: detected capacity change from 0 to 40427 [ 178.757510][ T7370] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 178.770805][ T7370] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 178.780342][ T4198] XFS (loop4): Unmounting Filesystem [ 178.906404][ T7370] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.148356][ T7370] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 179.178433][ T7370] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.524417][ T4188] attempt to access beyond end of device [ 179.524417][ T4188] loop2: rw=2049, want=45104, limit=40427 [ 179.773256][ C1] net_ratelimit: 26461 callbacks suppressed [ 179.773274][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.787597][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.795965][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.804281][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.812578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.821008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.829346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.837714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.846168][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.855019][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.117962][ T7409] loop4: detected capacity change from 0 to 164 [ 180.300376][ T7416] loop2: detected capacity change from 0 to 256 [ 180.432836][ T7416] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 181.707604][ T7450] netlink: 'syz.3.1279': attribute type 3 has an invalid length. [ 181.719424][ T7450] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1279'. [ 181.856343][ T7458] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 181.892927][ T7460] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(6) [ 181.904769][ T7457] loop5: detected capacity change from 0 to 7 [ 181.915095][ T1092] print_req_error: 26 callbacks suppressed [ 181.915126][ T1092] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 181.995517][ T7457] Dev loop5: unable to read RDB block 7 [ 182.048644][ T7457] loop5: unable to read partition table [ 182.082972][ T7457] loop5: partition table beyond EOD, truncated [ 182.127515][ T7463] loop1: detected capacity change from 0 to 2048 [ 182.163251][ T7457] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 182.279567][ T7463] NILFS (loop1): invalid segment: Inconsistency found [ 182.353291][ T7463] NILFS (loop1): trying rollback from an earlier position [ 182.441856][ T7463] NILFS (loop1): recovery complete [ 182.474095][ T7473] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.501392][ T7470] loop2: detected capacity change from 0 to 4096 [ 182.590684][ T7470] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 182.734473][ T26] audit: type=1400 audit(2000000320.546:55): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=3A2020202030202020313120202020312020202030202020202030202020202020203020202020202020202020300A65727370616E303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020313420202020302020202030202020202030202020202020203020202020202020202020300A69705F767469303A202020202020203020202020202020302020202030202020203020202020302020202020302020202020202020202030202020202020202020302020202020202020302020202020202030202020203020202020302020202030202020202030202020202020203020202020202020202020300A6970365F767469303A20202020202020302020202020202030202020203020202020302020202030202020202030202020202020202020203020202020202020202030202020202020202030202020202020203020202020352020202035202020203020202020203020202020202020352020202020202 [ 183.670260][ T7499] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 183.790856][ T7499] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 183.890948][ T7503] kAFS: bad VL server IP address [ 183.971542][ T7506] loop1: detected capacity change from 0 to 16 [ 184.028562][ T7506] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.072415][ T7506] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.162907][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.371645][ T7518] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1300'. [ 184.783189][ C1] net_ratelimit: 29313 callbacks suppressed [ 184.783210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.797775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.805938][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.814995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.823364][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.831716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.840042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.848425][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.856946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.906589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.395434][ T7527] loop3: detected capacity change from 0 to 32768 [ 185.552013][ T7527] XFS (loop3): Mounting V5 Filesystem [ 185.734340][ T7540] loop2: detected capacity change from 0 to 2048 [ 185.935128][ T7540] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 185.957301][ T7540] ext4 filesystem being mounted at /280/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.996742][ T7527] XFS (loop3): Ending clean mount [ 186.400602][ T4189] XFS (loop3): Unmounting Filesystem [ 186.980803][ T7568] device team_slave_0 entered promiscuous mode [ 186.987091][ T7568] device team_slave_1 entered promiscuous mode [ 187.027129][ T7570] rnbd_client L599: Mapping device / on session s1, (access_mode: rw, nr_poll_queues: 0) [ 187.059316][ T7570] rnbd_client L1280: Session s1 not found, and path parameter not given [ 187.068304][ T7568] device macvlan2 entered promiscuous mode [ 187.098831][ T7568] device team0 entered promiscuous mode [ 187.117849][ T7568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.458670][ T7583] loop1: detected capacity change from 0 to 4096 [ 188.351943][ T7587] loop2: detected capacity change from 0 to 32768 [ 188.397139][ T7599] loop3: detected capacity change from 0 to 256 [ 188.502482][ T7587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1325 (7587) [ 188.595187][ T7587] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 188.615420][ T7587] BTRFS info (device loop2): disabling tree log [ 188.621758][ T7587] BTRFS info (device loop2): using free space tree [ 188.654432][ T7587] BTRFS info (device loop2): has skinny extents [ 188.868745][ T26] audit: type=1400 audit(2000000326.676:56): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=7624 comm="syz.4.1337" name="p" offset=58 [ 188.951461][ T7587] BTRFS info (device loop2): enabling ssd optimizations [ 189.183322][ T7583] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 189.810544][ C1] net_ratelimit: 23026 callbacks suppressed [ 189.810566][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.825098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.833411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.841951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.850328][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.858785][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.867122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.875445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.883806][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.892143][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.932313][ T7642] loop4: detected capacity change from 0 to 512 [ 189.964797][ T5745] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5745) [ 190.158639][ T7642] EXT4-fs (loop4): Ignoring removed bh option [ 190.209687][ T4949] udevd[4949]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 190.263531][ T7642] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 190.324043][ T4949] udevd[4949]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 190.377779][ T7642] EXT4-fs (loop4): 1 truncate cleaned up [ 190.409893][ T7642] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,max_dir_size_kb=0x0000000000000001,bh,noload,bsdgroups,usrjquota=,,errors=continue. Quota mode: none. [ 190.519151][ T4292] ntfs3: loop1: ino=1b, Internal error [ 190.533383][ T4292] ntfs3: loop1: ntfs3_write_inode r=1b failed, -22. [ 191.434266][ T4195] Bluetooth: hci0: command 0x0406 tx timeout [ 191.451286][ T4195] Bluetooth: hci2: command 0x0406 tx timeout [ 191.460995][ T4195] Bluetooth: hci3: command 0x0406 tx timeout [ 191.475286][ T4195] Bluetooth: hci1: command 0x0406 tx timeout [ 191.835806][ T7656] loop1: detected capacity change from 0 to 40427 [ 192.044846][ T7656] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.105550][ T7692] tmpfs: Bad value for 'uid' [ 192.223964][ T7656] F2FS-fs (loop1): Start checkpoint disabled! [ 192.243322][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1366'. [ 192.253835][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1366'. [ 192.263553][ T7700] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1366'. [ 192.324547][ T7656] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 192.516826][ T7709] bond0: invalid ARP target specified [ 192.751598][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1372'. [ 192.774524][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 192.826397][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1372'. [ 193.194863][ T26] audit: type=1400 audit(2000000331.006:57): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7726 comm="syz.2.1377" [ 193.980963][ T23] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 194.430791][ T23] usb 5-1: not running at top speed; connect to a high speed hub [ 194.476379][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.483080][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.534601][ T7760] binder: 7759:7760 ioctl 400c620e 200000000040 returned -22 [ 194.623252][ T7761] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1392'. [ 194.694213][ T7761] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 194.813262][ C1] net_ratelimit: 23321 callbacks suppressed [ 194.813286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.827747][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.836081][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.844460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.852887][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.861253][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.869799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.878161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.886577][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.895087][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.982194][ T23] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 195.003168][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.052521][ T23] usb 5-1: Product: syz [ 195.059948][ T23] usb 5-1: Manufacturer: syz [ 195.093662][ T23] usb 5-1: SerialNumber: syz [ 195.175694][ T4778] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 195.193691][ T23] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 195.231673][ T7746] loop1: detected capacity change from 0 to 32768 [ 195.239764][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 195.350130][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 195.372273][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 195.393122][ C0] sched: RT throttling activated [ 195.453618][ T23] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 195.731626][ T4234] usb 5-1: USB disconnect, device number 7 [ 195.750456][ T4234] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 195.786499][ T4234] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 195.846421][ T4234] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 195.863215][ T4778] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.887315][ T4778] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 195.901539][ T4234] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 195.927587][ T4778] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 195.939012][ T4234] keyspan 5-1:1.0: device disconnected [ 195.968898][ T4778] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.060290][ T4778] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 196.372831][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1397'. [ 197.011943][ T7787] loop1: detected capacity change from 0 to 512 [ 197.118905][ T7787] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 197.143361][ T7787] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 197.174345][ T7787] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 197.261014][ T7787] EXT4-fs (loop1): 1 truncate cleaned up [ 197.279893][ T7787] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000007,bsddf,nomblk_io_submit,data_err=ignore,nomblk_io_submit,,errors=continue. Quota mode: none. [ 197.622043][ T7805] program syz.4.1409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.835865][ T23] usb 3-1: USB disconnect, device number 5 [ 197.853933][ T23] idmouse 3-1:1.0: disconnected [ 197.888068][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1410'. [ 198.567929][ T7839] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 198.628356][ T7839] netlink: 'syz.4.1422': attribute type 2 has an invalid length. [ 198.668804][ T7840] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 198.702840][ T7840] netlink: 'syz.4.1422': attribute type 2 has an invalid length. [ 198.880853][ T7846] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 198.973894][ T7849] netlink: 'syz.3.1428': attribute type 1 has an invalid length. [ 199.096105][ T7854] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 199.217906][ T7863] MTRR 1 not used [ 199.491911][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 199.558998][ T7878] loop4: detected capacity change from 0 to 64 [ 199.685460][ T7878] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 199.773338][ T7878] gfs2: path_lookup on c::: returned error -2 [ 199.823528][ C1] net_ratelimit: 24571 callbacks suppressed [ 199.823551][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.837836][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.846539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.855072][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.863528][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.871845][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.880417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.888766][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.896943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.905114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.113720][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 200.233487][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 200.264540][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.303417][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 200.368500][ T23] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 200.411691][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.472373][ T23] usb 3-1: config 0 descriptor?? [ 200.660145][ T7876] loop1: detected capacity change from 0 to 32768 [ 200.976355][ T23] elecom 0003:056E:011C.0006: item fetching failed at offset 5/6 [ 200.991905][ T23] elecom: probe of 0003:056E:011C.0006 failed with error -22 [ 201.198155][ T4778] usb 3-1: USB disconnect, device number 6 [ 201.482982][ T7876] XFS (loop1): Mounting V5 Filesystem [ 201.661258][ T7876] XFS (loop1): Ending clean mount [ 201.706342][ T7876] XFS (loop1): Quotacheck needed: Please wait. [ 201.858010][ T7915] loop2: detected capacity change from 0 to 256 [ 201.909931][ T7876] XFS (loop1): Quotacheck: Done. [ 202.057926][ T4197] XFS (loop1): Unmounting Filesystem [ 202.150049][ T7926] program syz.3.1462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 202.410930][ T26] audit: type=1400 audit(2000000340.216:58): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7929 comm="syz.3.1464" [ 202.615777][ T7936] loop4: detected capacity change from 0 to 764 [ 202.683983][ T7936] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 204.403799][ T7965] binder: 7962:7965 ioctl 400c620e 200000000040 returned -22 [ 204.474431][ T7966] loop4: detected capacity change from 0 to 512 [ 204.823603][ T7966] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.839161][ T7961] net_ratelimit: 23768 callbacks suppressed [ 204.839181][ T7961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.854453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.862832][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.871182][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.880860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.889177][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.897498][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.906057][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.914360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.922645][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.964490][ T7966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.060324][ T7966] EXT4-fs (loop4): 1 truncate cleaned up [ 205.173914][ T7966] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,journal_ioprio=0x0000000000000006,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 206.051409][ T7951] loop2: detected capacity change from 0 to 32768 [ 207.050539][ T7998] netlink: 'syz.4.1487': attribute type 1 has an invalid length. [ 207.141170][ T7998] netlink: 'syz.4.1487': attribute type 1 has an invalid length. [ 209.017326][ T8016] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1503'. [ 209.844826][ C0] net_ratelimit: 19629 callbacks suppressed [ 209.844847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.859209][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.867900][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.876157][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.885373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.893726][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.902090][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.910516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.918831][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.927264][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.567592][ T8041] loop2: detected capacity change from 0 to 128 [ 210.820422][ T8041] FAT-fs (loop2): Directory bread(block 32) failed [ 210.863279][ T8041] FAT-fs (loop2): Directory bread(block 33) failed [ 210.914847][ T8041] FAT-fs (loop2): Directory bread(block 34) failed [ 210.921780][ T8041] FAT-fs (loop2): Directory bread(block 35) failed [ 211.018104][ T8041] FAT-fs (loop2): Directory bread(block 36) failed [ 211.049720][ T8041] FAT-fs (loop2): Directory bread(block 37) failed [ 211.072557][ T8050] loop4: detected capacity change from 0 to 8 [ 211.099469][ T8041] FAT-fs (loop2): Directory bread(block 38) failed [ 211.184351][ T8041] FAT-fs (loop2): Directory bread(block 39) failed [ 211.239590][ T8041] FAT-fs (loop2): Directory bread(block 40) failed [ 211.267315][ T8041] FAT-fs (loop2): Directory bread(block 41) failed [ 211.302587][ T8050] SQUASHFS error: lzo decompression failed, data probably corrupt [ 211.388129][ T8050] SQUASHFS error: Failed to read block 0x1dd: -5 [ 211.415145][ T8050] SQUASHFS error: Unable to read metadata cache entry [1db] [ 211.468941][ T8050] SQUASHFS error: Unable to read inode 0xa7 [ 214.853139][ C1] net_ratelimit: 23482 callbacks suppressed [ 214.853159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.867567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.875943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.884375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.892669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.901271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.909625][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.917994][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.926336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.934815][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.303264][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 215.364702][ T8095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1547'. [ 215.818195][ T8109] loop4: detected capacity change from 0 to 256 [ 215.889235][ T8109] exfat: Deprecated parameter 'namecase' [ 215.918083][ T8109] exfat: Deprecated parameter 'namecase' [ 216.215016][ T8109] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 216.345649][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1541'. [ 218.653927][ T8165] sp0: Synchronizing with TNC [ 218.715294][ T8163] [U] [ 219.863245][ C0] net_ratelimit: 18641 callbacks suppressed [ 219.863265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.877627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.886002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.894412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.902724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.911230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.919662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.927998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.936338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.944683][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.014554][ T8180] tipc: Started in network mode [ 220.019512][ T8180] tipc: Node identity ac14140f, cluster identity 4711 [ 220.053336][ T8180] tipc: New replicast peer: 255.255.255.255 [ 220.059780][ T8180] tipc: Enabled bearer , priority 10 [ 220.292355][ T8186] loop1: detected capacity change from 0 to 1024 [ 221.132185][ T4232] tipc: Node number set to 2886997007 [ 221.987577][ T8186] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 222.045931][ T8186] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 222.101127][ T8186] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.212526][ T8186] EXT4-fs warning (device loop1): empty_inline_dir:1879: bad inline directory (dir #12) - no `..' [ 222.979577][ T8234] loop1: detected capacity change from 0 to 1024 [ 223.025641][ T8235] sp0: Synchronizing with TNC [ 223.070293][ T8233] [U] [ 224.516240][ T8245] zero sized request [ 224.871478][ T8234] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 224.889900][ C0] net_ratelimit: 22773 callbacks suppressed [ 224.889922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.904322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.912823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.921353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.929794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.938141][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.946677][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.955044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.963752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.972332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.286455][ T8234] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodiscard,abort,discard,max_batch_time=0x0000000000000ac9,data=ordered,mblk_io_submit,usrquota,init_itable,block_validity,bsddf,auto_da_alloc,,errors=continue. Quota mode: writeback. [ 226.130670][ T8264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1618'. [ 226.486550][ T8276] loop2: detected capacity change from 0 to 256 [ 226.724819][ T8282] loop1: detected capacity change from 0 to 128 [ 227.196680][ T8276] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 227.388421][ T4232] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 227.791162][ T4232] usb 1-1: Using ep0 maxpacket: 16 [ 227.840628][ T8297] netlink: 'syz.1.1628': attribute type 3 has an invalid length. [ 227.909611][ T8265] loop4: detected capacity change from 0 to 32768 [ 228.045742][ T4232] usb 1-1: too many endpoints for config 0 interface 0 altsetting 6: 255, using maximum allowed: 30 [ 228.089392][ T4232] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.135022][ T4232] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 228.173143][ T4232] usb 1-1: config 0 interface 0 has no altsetting 0 [ 228.179850][ T4232] usb 1-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.00 [ 228.225458][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.244097][ T4232] usb 1-1: config 0 descriptor?? [ 228.368234][ T8265] XFS (loop4): Mounting V5 Filesystem [ 228.752744][ T4232] input: HID 045e:0713 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:0713.0007/input/input12 [ 228.778872][ T8265] XFS (loop4): Ending clean mount [ 228.874733][ T8265] XFS (loop4): Quotacheck needed: Please wait. [ 228.891102][ T4232] microsoft 0003:045E:0713.0007: input,hidraw0: USB HID vd.8b Joystick [HID 045e:0713] on usb-dummy_hcd.0-1/input0 [ 229.031142][ T4232] usb 1-1: USB disconnect, device number 5 [ 229.119388][ T8265] XFS (loop4): Quotacheck: Done. [ 229.221496][ T4198] XFS (loop4): Unmounting Filesystem [ 229.349131][ T8317] fido_id[8317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 229.904219][ C0] net_ratelimit: 18289 callbacks suppressed [ 229.904239][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.918612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.926923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.935238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.943738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.952044][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.960387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.968835][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.977397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.985977][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.119974][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1643'. [ 230.383934][ T8345] netlink: 'syz.0.1646': attribute type 5 has an invalid length. [ 230.541783][ T26] audit: type=1400 audit(2000000368.346:59): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=8346 comm="syz.3.1648" [ 230.573327][ T4778] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 231.000664][ T8360] Bluetooth: hci1: too big key_count value 37575 [ 231.011297][ T4778] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 231.029231][ T4778] usb 3-1: can't read configurations, error -71 [ 231.739577][ T26] audit: type=1326 audit(2000000369.546:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8383 comm="syz.3.1665" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c6ceed159 code=0x0 [ 232.950272][ T8386] loop2: detected capacity change from 0 to 32768 [ 233.154685][ T8412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1677'. [ 233.162832][ T8415] program syz.2.1678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.186512][ T8410] block device autoloading is deprecated and will be removed. [ 233.450573][ T8421] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(1) [ 233.619775][ T26] audit: type=1326 audit(2000000371.426:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=8428 comm="syz.2.1685" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f252e18e159 code=0x0 [ 233.695955][ T8432] loop2: detected capacity change from 0 to 2048 [ 233.741186][ T8432] UDF-fs: error (device loop2): udf_read_tagged: block 97: CRC length 511 exceeds block size [ 233.775528][ T8432] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2) [ 233.943233][ T4280] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 234.285152][ T4280] usb 1-1: Using ep0 maxpacket: 16 [ 234.349928][ T8448] loop4: detected capacity change from 0 to 512 [ 234.421274][ T8451] tun0: tun_chr_ioctl cmd 1074025680 [ 234.461450][ T4280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.573883][ T4280] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 234.583034][ T4280] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 234.599801][ T4280] usb 1-1: Manufacturer: syz [ 234.622555][ T4280] usb 1-1: config 0 descriptor?? [ 234.772225][ T8464] loop1: detected capacity change from 0 to 256 [ 234.913181][ C0] net_ratelimit: 23372 callbacks suppressed [ 234.913202][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.927834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.936174][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.944493][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.952775][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.961192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.969655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.977972][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.986394][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.994706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.220574][ T4280] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.0008/input/input13 [ 235.353071][ T4280] creative-sb0540 0003:041E:3100.0008: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 235.620359][ T4778] usb 1-1: USB disconnect, device number 6 [ 235.626952][ T8448] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #15: comm syz.4.1635: iget: bad i_size value: 38620345925642 [ 235.678898][ T8448] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.1635: couldn't read orphan inode 15 (err -117) [ 235.712811][ T8448] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 236.128237][ T8464] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 236.487385][ T4197] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 196) [ 236.614919][ T8486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1707'. [ 236.657576][ T8486] netlink: 'syz.2.1707': attribute type 2 has an invalid length. [ 237.010707][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 237.025201][ T8496] loop0: detected capacity change from 0 to 512 [ 237.038169][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 237.047863][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 237.057794][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 237.067036][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 237.077026][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 237.087184][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 237.097360][ T8494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1711'. [ 237.165711][ T8498] loop2: detected capacity change from 0 to 2048 [ 237.232741][ T8498] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 237.563989][ T8511] netlink: 'syz.2.1719': attribute type 8 has an invalid length. [ 237.884814][ T8519] loop2: detected capacity change from 0 to 1024 [ 237.925259][ T8523] program syz.4.1703 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.936171][ T8521] loop1: detected capacity change from 0 to 128 [ 238.005303][ T8496] EXT4-fs (loop0): 1 truncate cleaned up [ 238.011199][ T8496] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 238.361305][ T8519] EXT4-fs (loop2): Ignoring removed bh option [ 238.436171][ T8519] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,resuid=0x0000000000000000,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 238.952606][ T8554] loop2: detected capacity change from 0 to 512 [ 239.779169][ T8576] netlink: 'syz.1.1743': attribute type 8 has an invalid length. [ 239.923200][ C1] net_ratelimit: 25661 callbacks suppressed [ 239.923223][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.937565][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.945910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.954556][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.962904][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.971539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.979930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.988372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.996807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.005410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.134394][ T8588] loop0: detected capacity change from 0 to 512 [ 240.158809][ T8554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 240.173984][ T8554] System zones: 1-12 [ 240.227890][ T8554] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.1747: missing EA_INODE flag [ 240.276643][ T8554] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.1747: error while reading EA inode 12 err=-117 [ 240.325585][ T8554] EXT4-fs (loop2): 1 orphan inode deleted [ 240.331611][ T8554] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 240.355744][ T8588] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #15: comm syz.0.1752: iget: bad i_size value: 38620345925642 [ 240.443077][ T8588] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.1752: couldn't read orphan inode 15 (err -117) [ 240.507966][ T8608] logitech-hidpp-device 0003:046D:C082.0009: received hid++ report of bad size (5) [ 240.538725][ T8608] logitech-hidpp-device 0003:046D:C082.0009: Event data for report 16 was too short (6 vs 4) [ 240.562613][ T4232] logitech-hidpp-device 0003:046D:C082.0009: Device not connected [ 240.578884][ T8588] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.635790][ T8588] EXT4-fs (loop0): shut down requested (1) [ 241.066130][ T8626] loop4: detected capacity change from 0 to 512 [ 241.127451][ T8624] loop1: detected capacity change from 0 to 4096 [ 241.151438][ T8628] loop2: detected capacity change from 0 to 512 [ 241.233366][ T8628] EXT4-fs (loop2): Ignoring removed bh option [ 241.239725][ T8628] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 241.258402][ T8624] NILFS (loop1): invalid segment: Checksum error in segment payload [ 241.272985][ T8624] NILFS (loop1): trying rollback from an earlier position [ 241.282651][ T8628] EXT4-fs (loop2): Unrecognized mount option "=" or missing value [ 241.318890][ T8624] NILFS (loop1): recovery complete [ 241.340451][ T8635] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.380545][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 239 already freed [ 241.399322][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.410926][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.429401][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.448709][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.508686][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.527668][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.545034][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.559126][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.569995][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.608803][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.626901][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.641465][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.652038][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.679580][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.698049][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.715163][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.739060][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.749717][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.782736][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.809418][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.847821][ T8652] loop0: detected capacity change from 0 to 256 [ 241.861455][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.892327][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.928709][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.947501][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.960873][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.972573][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 241.985463][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 242.012016][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 242.021792][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 242.058062][ T8624] NILFS (loop1): nilfs_palloc_freev (ino=3): entry number 0 already freed [ 242.085751][ T8624] NILFS (loop1): nilfs_sufile_do_free: segment 9 is already clean [ 242.707138][ T8689] MTRR 1 not used [ 243.747571][ T8729] __nla_validate_parse: 13 callbacks suppressed [ 243.747591][ T8729] netlink: 6856 bytes leftover after parsing attributes in process `syz.1.1813'. [ 244.429883][ T8760] loop2: detected capacity change from 0 to 512 [ 244.458574][ T8761] bond0: option slaves: invalid value (-veth0) [ 244.642552][ T8765] loop0: detected capacity change from 0 to 4096 [ 244.689071][ T4195] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 244.794444][ T8770] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 244.934003][ C1] net_ratelimit: 24587 callbacks suppressed [ 244.934023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.948686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.957196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.965559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.974461][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.978471][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.983285][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.996946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.005301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.013720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.022005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.135412][ T4195] usb 5-1: Using ep0 maxpacket: 8 [ 245.211860][ C1] ================================================================== [ 245.220730][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 245.228354][ C1] Read of size 2 at addr ffff888022fcf080 by task ksoftirqd/1/20 [ 245.236111][ C1] [ 245.238484][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Not tainted syzkaller #0 [ 245.245983][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.256102][ C1] Call Trace: [ 245.259442][ C1] [ 245.262410][ C1] dump_stack_lvl+0x188/0x250 [ 245.267139][ C1] ? show_regs_print_info+0x20/0x20 [ 245.272410][ C1] ? _printk+0xda/0x130 [ 245.276610][ C1] ? __nft_trace_packet+0x135/0x150 [ 245.281857][ C1] ? load_image+0x410/0x410 [ 245.286424][ C1] print_address_description+0x60/0x2d0 [ 245.292121][ C1] ? __nft_trace_packet+0x135/0x150 [ 245.297467][ C1] kasan_report+0xdf/0x130 [ 245.301933][ C1] ? __nft_trace_packet+0x135/0x150 [ 245.307303][ C1] __nft_trace_packet+0x135/0x150 [ 245.312415][ C1] nft_do_chain+0x1299/0x14d0 [ 245.317152][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 245.323096][ C1] ? ip_vs_service_find+0xaaf/0xf70 [ 245.328382][ C1] ? nf_nat_inet_fn+0x8a0/0xad0 [ 245.333304][ C1] nft_do_chain_inet+0x25c/0x340 [ 245.338287][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 245.343186][ C1] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 245.348613][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 245.353517][ C1] nf_hook_slow+0xb9/0x200 [ 245.357974][ C1] ? NF_HOOK+0x390/0x390 [ 245.362518][ C1] NF_HOOK+0x1f2/0x390 [ 245.366629][ C1] ? NF_HOOK+0x390/0x390 [ 245.370920][ C1] ? ip_local_deliver+0x180/0x180 [ 245.376041][ C1] ? NF_HOOK+0x390/0x390 [ 245.380328][ C1] ? ip_local_deliver+0x107/0x180 [ 245.385395][ C1] ? ip_rcv_core+0xb30/0xb30 [ 245.390033][ C1] NF_HOOK+0x303/0x390 [ 245.394150][ C1] ? ip_rcv_core+0xb30/0xb30 [ 245.398883][ C1] ? ip_local_deliver+0x180/0x180 [ 245.403961][ C1] ? ip_rcv_core+0xb30/0xb30 [ 245.408599][ C1] ? ip_rcv_core+0x72c/0xb30 [ 245.413237][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 245.418914][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 245.424602][ C1] __netif_receive_skb+0xcc/0x290 [ 245.429680][ C1] process_backlog+0x366/0x770 [ 245.434525][ C1] ? rps_trigger_softirq+0x210/0x210 [ 245.439838][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 245.445853][ C1] ? lock_chain_count+0x20/0x20 [ 245.450734][ C1] __napi_poll+0xbb/0x430 [ 245.455250][ C1] net_rx_action+0x522/0xa80 [ 245.459888][ C1] ? net_tx_action+0x880/0x880 [ 245.464688][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 245.470736][ C1] ? detach_timer+0x2b0/0x2b0 [ 245.475458][ C1] handle_softirqs+0x336/0x830 [ 245.480252][ C1] ? run_ksoftirqd+0xa4/0x100 [ 245.485167][ C1] ? do_softirq+0x210/0x210 [ 245.489886][ C1] ? run_ksoftirqd+0x81/0x100 [ 245.494601][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 245.499831][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 245.505244][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 245.510489][ C1] run_ksoftirqd+0xa4/0x100 [ 245.515023][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 245.520249][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 245.525750][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 245.531036][ C1] smpboot_thread_fn+0x520/0x990 [ 245.536020][ C1] kthread+0x42e/0x520 [ 245.540116][ C1] ? cpu_report_death+0x180/0x180 [ 245.545162][ C1] ? kthread_blkcg+0xd0/0xd0 [ 245.549871][ C1] ret_from_fork+0x1f/0x30 [ 245.554317][ C1] [ 245.557365][ C1] [ 245.559708][ C1] Allocated by task 20: [ 245.563999][ C1] __kasan_slab_alloc+0x92/0xc0 [ 245.568885][ C1] slab_post_alloc_hook+0x4c/0x380 [ 245.574017][ C1] kmem_cache_alloc_node+0x184/0x2c0 [ 245.579324][ C1] __alloc_skb+0xf4/0x750 [ 245.583676][ C1] synproxy_send_client_synack+0x16c/0xd90 [ 245.589751][ C1] nft_synproxy_eval_v4+0x35f/0x4e0 [ 245.595084][ C1] nft_synproxy_do_eval+0x32e/0x550 [ 245.600306][ C1] nft_do_chain+0x491/0x14d0 [ 245.605001][ C1] nft_do_chain_inet+0x25c/0x340 [ 245.609952][ C1] nf_hook_slow+0xb9/0x200 [ 245.614390][ C1] NF_HOOK+0x1f2/0x390 [ 245.618474][ C1] NF_HOOK+0x303/0x390 [ 245.622757][ C1] __netif_receive_skb+0xcc/0x290 [ 245.627827][ C1] process_backlog+0x366/0x770 [ 245.632618][ C1] __napi_poll+0xbb/0x430 [ 245.637018][ C1] net_rx_action+0x522/0xa80 [ 245.641627][ C1] handle_softirqs+0x336/0x830 [ 245.646519][ C1] run_ksoftirqd+0xa4/0x100 [ 245.651041][ C1] smpboot_thread_fn+0x520/0x990 [ 245.656104][ C1] kthread+0x42e/0x520 [ 245.660191][ C1] ret_from_fork+0x1f/0x30 [ 245.664632][ C1] [ 245.666974][ C1] Freed by task 20: [ 245.670817][ C1] kasan_set_track+0x4b/0x70 [ 245.675433][ C1] kasan_set_free_info+0x1f/0x40 [ 245.680392][ C1] ____kasan_slab_free+0xd5/0x110 [ 245.685539][ C1] slab_free_freelist_hook+0xec/0x170 [ 245.690932][ C1] kmem_cache_free+0x8f/0x210 [ 245.695625][ C1] nft_synproxy_eval_v4+0x367/0x4e0 [ 245.700953][ C1] nft_synproxy_do_eval+0x32e/0x550 [ 245.706170][ C1] nft_do_chain+0x491/0x14d0 [ 245.710772][ C1] nft_do_chain_inet+0x25c/0x340 [ 245.715735][ C1] nf_hook_slow+0xb9/0x200 [ 245.720172][ C1] NF_HOOK+0x1f2/0x390 [ 245.724260][ C1] NF_HOOK+0x303/0x390 [ 245.728357][ C1] __netif_receive_skb+0xcc/0x290 [ 245.733446][ C1] process_backlog+0x366/0x770 [ 245.738238][ C1] __napi_poll+0xbb/0x430 [ 245.742588][ C1] net_rx_action+0x522/0xa80 [ 245.747369][ C1] handle_softirqs+0x336/0x830 [ 245.752182][ C1] run_ksoftirqd+0xa4/0x100 [ 245.756807][ C1] smpboot_thread_fn+0x520/0x990 [ 245.761765][ C1] kthread+0x42e/0x520 [ 245.765851][ C1] ret_from_fork+0x1f/0x30 [ 245.770369][ C1] [ 245.772715][ C1] The buggy address belongs to the object at ffff888022fcf000 [ 245.772715][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 245.787580][ C1] The buggy address is located 128 bytes inside of [ 245.787580][ C1] 232-byte region [ffff888022fcf000, ffff888022fcf0e8) [ 245.801098][ C1] The buggy address belongs to the page: [ 245.806745][ C1] page:ffffea00008bf3c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22fcf [ 245.817006][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 245.824590][ C1] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888144bf0140 [ 245.833203][ C1] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 245.841901][ C1] page dumped because: kasan: bad access detected [ 245.848323][ C1] page_owner tracks the page as allocated [ 245.854052][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 20, ts 204469299785, free_ts 200687694548 [ 245.871692][ C1] get_page_from_freelist+0x24f6/0x2670 [ 245.877282][ C1] __alloc_pages+0x1ee/0x480 [ 245.881903][ C1] new_slab+0xc0/0x4b0 [ 245.886194][ C1] ___slab_alloc+0x807/0xdd0 [ 245.890819][ C1] kmem_cache_alloc_node+0x118/0x2c0 [ 245.896157][ C1] __alloc_skb+0xf4/0x750 [ 245.900520][ C1] synproxy_send_client_synack+0x16c/0xd90 [ 245.906421][ C1] nft_synproxy_eval_v4+0x35f/0x4e0 [ 245.911658][ C1] nft_synproxy_do_eval+0x32e/0x550 [ 245.917044][ C1] nft_do_chain+0x491/0x14d0 [ 245.921844][ C1] nft_do_chain_inet+0x25c/0x340 [ 245.926810][ C1] nf_hook_slow+0xb9/0x200 [ 245.931251][ C1] NF_HOOK+0x1f2/0x390 [ 245.935344][ C1] NF_HOOK+0x303/0x390 [ 245.939533][ C1] __netif_receive_skb+0xcc/0x290 [ 245.944580][ C1] process_backlog+0x366/0x770 [ 245.949363][ C1] page last free stack trace: [ 245.954049][ C1] free_unref_page_prepare+0x637/0x6c0 [ 245.959527][ C1] free_unref_page+0x8f/0x2a0 [ 245.964662][ C1] __unfreeze_partials+0x188/0x1e0 [ 245.969823][ C1] put_cpu_partial+0x12d/0x190 [ 245.974617][ C1] qlist_free_all+0x35/0x90 [ 245.979242][ C1] kasan_quarantine_reduce+0x150/0x160 [ 245.984732][ C1] __kasan_slab_alloc+0x2f/0xc0 [ 245.989615][ C1] slab_post_alloc_hook+0x4c/0x380 [ 245.994759][ C1] kmem_cache_alloc+0x15d/0x280 [ 245.999658][ C1] jbd2__journal_start+0x13c/0x5a0 [ 246.004972][ C1] __ext4_journal_start_sb+0x167/0x360 [ 246.010464][ C1] ext4_dirty_inode+0x8b/0x100 [ 246.015523][ C1] __mark_inode_dirty+0x2c8/0xc90 [ 246.020578][ C1] generic_update_time+0x1cd/0x1f0 [ 246.025727][ C1] file_update_time+0x3c0/0x440 [ 246.030612][ C1] ext4_page_mkwrite+0x1bc/0x1250 [ 246.035754][ C1] [ 246.038196][ C1] Memory state around the buggy address: [ 246.043863][ C1] ffff888022fcef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 246.052132][ C1] ffff888022fcf000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.060413][ C1] >ffff888022fcf080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 246.068938][ C1] ^ [ 246.073038][ C1] ffff888022fcf100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 246.081240][ C1] ffff888022fcf180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 246.089421][ C1] ================================================================== [ 246.097588][ C1] Disabling lock debugging due to kernel taint [ 246.104447][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 246.111678][ C1] CPU: 1 PID: 20 Comm: ksoftirqd/1 Tainted: G B syzkaller #0 [ 246.120506][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.130617][ C1] Call Trace: [ 246.134023][ C1] [ 246.136989][ C1] dump_stack_lvl+0x188/0x250 [ 246.141713][ C1] ? show_regs_print_info+0x20/0x20 [ 246.146932][ C1] ? load_image+0x410/0x410 [ 246.151550][ C1] panic+0x2f8/0x850 [ 246.155500][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 246.160024][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 246.165935][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 246.171855][ C1] ? _raw_spin_unlock+0x40/0x40 [ 246.176818][ C1] ? print_memory_metadata+0x314/0x400 [ 246.182391][ C1] ? __nft_trace_packet+0x135/0x150 [ 246.187636][ C1] check_panic_on_warn+0x80/0xa0 [ 246.192689][ C1] ? __nft_trace_packet+0x135/0x150 [ 246.197928][ C1] end_report+0x6d/0xf0 [ 246.202104][ C1] kasan_report+0x102/0x130 [ 246.206625][ C1] ? __nft_trace_packet+0x135/0x150 [ 246.211837][ C1] __nft_trace_packet+0x135/0x150 [ 246.216888][ C1] nft_do_chain+0x1299/0x14d0 [ 246.221589][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 246.227510][ C1] ? ip_vs_service_find+0xaaf/0xf70 [ 246.232742][ C1] ? nf_nat_inet_fn+0x8a0/0xad0 [ 246.237630][ C1] nft_do_chain_inet+0x25c/0x340 [ 246.242599][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 246.247610][ C1] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 246.253529][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 246.258429][ C1] nf_hook_slow+0xb9/0x200 [ 246.262892][ C1] ? NF_HOOK+0x390/0x390 [ 246.267176][ C1] NF_HOOK+0x1f2/0x390 [ 246.271641][ C1] ? NF_HOOK+0x390/0x390 [ 246.275902][ C1] ? ip_local_deliver+0x180/0x180 [ 246.280958][ C1] ? NF_HOOK+0x390/0x390 [ 246.285321][ C1] ? ip_local_deliver+0x107/0x180 [ 246.290365][ C1] ? ip_rcv_core+0xb30/0xb30 [ 246.295505][ C1] NF_HOOK+0x303/0x390 [ 246.299612][ C1] ? ip_rcv_core+0xb30/0xb30 [ 246.304262][ C1] ? ip_local_deliver+0x180/0x180 [ 246.309413][ C1] ? ip_rcv_core+0xb30/0xb30 [ 246.314124][ C1] ? ip_rcv_core+0x72c/0xb30 [ 246.318855][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 246.324511][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 246.330161][ C1] __netif_receive_skb+0xcc/0x290 [ 246.335446][ C1] process_backlog+0x366/0x770 [ 246.340279][ C1] ? rps_trigger_softirq+0x210/0x210 [ 246.346018][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 246.352048][ C1] ? lock_chain_count+0x20/0x20 [ 246.356926][ C1] __napi_poll+0xbb/0x430 [ 246.361284][ C1] net_rx_action+0x522/0xa80 [ 246.365928][ C1] ? net_tx_action+0x880/0x880 [ 246.370712][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 246.376979][ C1] ? detach_timer+0x2b0/0x2b0 [ 246.382033][ C1] handle_softirqs+0x336/0x830 [ 246.387182][ C1] ? run_ksoftirqd+0xa4/0x100 [ 246.391976][ C1] ? do_softirq+0x210/0x210 [ 246.396597][ C1] ? run_ksoftirqd+0x81/0x100 [ 246.401294][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 246.406514][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 246.411830][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 246.417050][ C1] run_ksoftirqd+0xa4/0x100 [ 246.421568][ C1] ? ksoftirqd_should_run+0x20/0x20 [ 246.426788][ C1] ? preempt_schedule_thunk+0x16/0x18 [ 246.432181][ C1] ? smpboot_thread_fn+0x5d9/0x990 [ 246.437314][ C1] smpboot_thread_fn+0x520/0x990 [ 246.442490][ C1] kthread+0x42e/0x520 [ 246.446577][ C1] ? cpu_report_death+0x180/0x180 [ 246.451621][ C1] ? kthread_blkcg+0xd0/0xd0 [ 246.456230][ C1] ret_from_fork+0x1f/0x30 [ 246.460669][ C1] [ 246.464119][ C1] Kernel Offset: disabled [ 246.468473][ C1] Rebooting in 86400 seconds..