last executing test programs: 33.649385398s ago: executing program 1 (id=14308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24044094}, 0x40004) 33.413653476s ago: executing program 1 (id=14311): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000010801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) 33.086530296s ago: executing program 1 (id=14317): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x1, 0x6, @random="926c81c53d8c"}, 0x10) 32.897196456s ago: executing program 1 (id=14320): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)=ANY=[@ANYBLOB='iocharset=maccroatian,errors=continue,allow_utime=00400000,\x00'], 0x1, 0x1535, &(0x7f00000001c0)="$eJzs3AucjdX6OPDnWWu9Y0jaTXIZ1lrPy04uiyTJJUkuSZIkSW4JSZIjCYkht6QhCcllSC5DSC4Tk8b9fr8kJEmTJCG5Jev/mZi/OnX+55xfnfz+Z57v57M/s55Z+1nvs+aZvfe739l802VojUY1qzYgIvhD8OKXBACIBYCBAHANAAQAUDaubFzGfHaJCX/sIOzP9VDyla6AXUnc/6yN+5+1cf+zNu5/1sb9z9q4/1kb9z9r4/4zlpVtnp7/Wr5l3Rtf/8/K+PX/v0h6ybFfrC15fVeAmH81hfv//z/8A7nc//9awb9yJ+5/1sb9z6pir3QB7H8BfvxnBdn+4Qz3P2vj/jOWlf3yWnAsXPnr0X/1DSL/yb+B+F4Xf8pXfp//cP+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4Iy/TAFA5vhK18UYY4wxxhhjjLE/j892pStgjDHGGGOMMcbYfx6CAAkKAoiBbBAL2SEHCICYzPlrIQ6ug9xwPeSBvJAP8kM8FICCoMGABYIQCkFhiMINUARuhKJQDIpDCXBQEkrBTVAaboYycAuUhVuhHNwG5aECVIRKcDtUhjugCtwJVeEuqAbVoQbUhLuhFtwDteFeqAP3QV24H+rBA1AfHoQG8BA0hIehETwCjeFRaAJNoRk0hxb/o/wXoAe8CD2hFyRAb+gDL0Ff6Af9YQAMhJdhELwCg+FVSIQhMBReg2HwOgyHN2AEjIRR8CaMhrdgDIyFcTAekmACTIS3YRK8A5NhCkyFaZAM02EGvAszYRbMhvdgDrwPc2EezIcFkAIfwEJYBKnwISyGjyANlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wFbYBtthB+yEj2EXfAK7YQ/shU9hH3z2b+af/rv8rggIKFCgQoUxGIOxGIs5MAfmxJyYC3NhBCMYh3GYG3NjHsyD+TAfxmM8FsSCaNAgIWEhLIRRjGIRLIJFsSgWx+Lo0GEpLIWl8WYsg2WwLJbFclgOy2MFrICVsBJWxspYBatgVayK1bAa1sAaeDfejb2xNtbGOlgH62LdzMtT2AAbYENsiI2wETbGxtgEm2AzbIYtsAW2xJbYClthG2yDbbEttsN22B7bYwfsgB2xI3bCTtgZO2MX7IJdsRt2S38hG+CL+CL2wmqiN/bBPtgXE7P1xwE4AF/GQfgKvoKvYiIOwaH4Gr6Gr+NwPIUjLozEUTgKK4u3cAyORRLjMQmTcCJOxEk4CSfjFJyC0zAZp+MMnIEzcRbOwvdwDr6P7+M8nIcLMAVTcCEuwlRMxcV4GtNwCS7FZbgcV+ByXIWrcRWuxXW4FjfgBtyEm3ALbsFtuA134A78GBUAfoJ7cA8m4j7ch/txPx7AA3gQD2I6puMhPISH8TAewSN4FI/iMTyOJ/A4nsSTeApP4xk8g+fwHJ7H5+K/avhxsTWJIDIooUSMiBGxIlbkEDlETpFT5BK5RERERJyIE7lFbpFH5BH5RD4RL+JFQVFQGGEEiTDjmUJERVQUEUVEUVFUFBfFhRNOlBKlRGlRWpQRZURZcasoJ24T5UUF0dpVEpVEZdHGVRF3iqqiqqgmqosaoqaoKWqJWqK2qC3qiDqirqgr6okHRH3RG/vjQyKjM43EEGwshmIT0VTIS89QLcVwbCVaizbiCTESR2A70dK1F0+LDmIMdhR/E2PxWdFZjMcu4nnRVXQT3cULoodo5XqKXmIy9hZ9xDTsK/qJ/mKAmInVxXs4J3sN8apIFEPEUPGaWICvi+HiKjFCjBSjxJtitHhLjBFjxTgxXiSJCWKieFtMEu+IyWKKmCqmiWQxXcwQ74qZYpaYLd4Tc8T7Yq6YJ+aLBSJFfCAWikUiVXwoFouPRJpYIpaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdoqPxS7xidgt9oi94lOxT3wm9ovPxQHxhTgovhTp4itxSHwtDotvxBHxrTgqvhPHxHFxQnwvToofxClxWpwRZ8U58aM4L34SF4QXIFEKKaWSgYyR2WSszC5zyKtkThlkPv/LOHmdzC2vl3lkXplP5pfxsoAsKLU00kqSoSwkC8uovEEWkTfKorKYLC5LSCdLylLyJlla3izLyFtkWXmrLCdvk+VlBVlRVpK3y8ryDgmRi8eoJqvLGrKmvFsmwD2ytrxX1pH3ybryfllPPiDrywdlA/mQbCgflo3kI7KxfFQ2kU1lM9lctpCPyZbycdlKtpZt5BOyrXxStpNPyfbyadlB+ku/Is/KzvI52UU+L7vKbrK7/ElekF72lL0k9AbZR74k+8p+sr8cIAfKl+Ug+YocLF+ViXKIHCpfk8Pk63K4fEOOkCPlKPmmHC3fkmPkWDlOjpdJcoKcKN+Wk+Q7crKcIqfKaTJZTpf9L600W8p/mv/27+QP/vnom+RmuUVuldvkdrlD7pQfy11yl9wtd8u9cq/cJ/fJ/XK/PCAPyIPyoEyX6fKQPCQPy8PyiDwij8qj8pg8Ls/K7+VJ+YM8JU/L0/KsPCfPyfOXfgagUAkllVKBilHZVKzKrnKoq1ROdbXKpa5REXWtilPXqdzqepVH5VX5VH4Vrwqogkoro6wiFapCqrCKqhvw0i+MKq5KKKdKqlLqpn8nXxVRN6qiqtiv8jPrS/gH9bVQLVRL1VK1Uq1UG9VGtVVtVTvVTrVX7VUH1UF1VB1VJ9VJdVadVRfVRXVVXVV31V31UD1UT9VTJagE1Ue9pPqqfqq/GqAGqpdFxh4Gq8EqUSWqoWqoGqaGqeFquBqhRqhRapQarUarMWqMGqfGqSSVpCaqiWqSmqQmq8lqqpqqklWymqFmqJlqppqtZqs5ao6aq+aq+Wq+SlEpaqFaqFJVqlqsFqs0tUQtUcvUMrVCrVCr1Cq1Rq1R69Q6tUFtUGlqs9qstqqtarvarnaqnWqX2qV2q91qr9qr9ql9ar/arw6oA+qgOqjSVbo6pA6pw+qwOqKOqKPqqDqmjqkT6oQ6qU6qU+qUOqPOqHPqnDqvzqsL6kLGaV8gAhGoQAUxQUwQG8QGOYIcQc4gZ5AryBVEgkgQF8QFuYPrgzxB3iBfkD+IDwoEBQMdmMAG4lLTo8ENQZHgxqBoUCwoHpQIXFAyKBXcFJQObg7KBLcEZYNbg3LBbUH5oEJQMagU3B5UDu4IqgR3BlWDu4JqQfWgRlAzuDuoFdwT1A7uDeoE9wV1g/uDesEDQf3gwaBB8FDQMHg4aBQ8EjQOHg2aBE2DZkHzoMWfur73p/I+7nrqXjpB99Z99Eu6r+6n++sBeqB+WQ/Sr+jB+lWdqIfoofo1PUy/rofrN/QIPVKP0m/q0fotPUaP1eP0eJ2kJ+iJ+m09Sb+jJ+speqqeppP1dD1Dv6tn6ll6tn5Pz9Hv67l6np6vF+gU/YFeqBfpVP2hXqw/0ml6iV6ql+nleoVeqVfp1XqNXqvX6fV6g96oN+nNeoveqrfp7XqH3qk/1rv0J3q33qP36k/1Pv2Z3q8/1wf0F/qg/lKn66/0If21Pqy/0Uf0t/qo/k4f08d1Gf29Pql/0Kf0aX1Gn9Xn9I/6vP5JX9A+4+Q+4+XdKKNMjIkxsSbW5DA5TE6T0+QyuUzEREyciTO5TW6Tx+Qx+Uw+E2/iTUFT0GQgQ6aQKWSiJmqKmCKmqClqipvixhlnSplSprQpbcqYMqasKWvKmXKmvClvKpqK5nZzu7nD3GHuNHeau8xdprqpbmqamqaWqWVqm9qmjqlj6pq6pp6pZ+qb+qaBaWAamoamkWlkGpvGpolpYpqZZqaFaWFampamlWll2pg2pq1pa9qZdqa9aW86mA6mo+loOplOprPpbLqYLqar6Wq6m+6mh+lhepqeJsEkmD6mj+lr+pr+pr8ZaAaaQWaQGWwGm0STaIaaoWaYGWaGm+FmhBlpRmWcqJq3zBgz1owz402SSTITzUQzyUwyk81kM9VMNckm2cwwM8xMM9PMNrPNHDPHzDVzzXwz36SYFLPQLDSpJtUsNotNmkkzS81Ss9wsNyvNSrParDZrzVqzHtabjWaj2Ww2m61mq9lutpudZqfZZXaZ3Wa32Wv2mn1mn9lv9psD5oA5aA6adJNuDplD5rA5bI6YI+aoOWqOmWPmhDlhTpqT5pQ5Zc6YM+acyXvp9dKbWJvd5rBX2Zz2apvLXmP/Ps5n89t4W8AWtNrmsXl/FRtrbVFbzBa3JayzJW0pe9Nv4vK2gq1oK9nbbWV7h63ym7iWvcfWtvfaOvY+W9Pe/au4rr3f1rOP2PqIALapbWib20b2EdvYPmqb2Ka2mW1u29onbTv7lG1vn7Yd7DO/iRfaRXa1XWPX2nV2t91jz9iz9rD9xp6zP9qetpcdaF+2g+wrdrB91SbaIb+JR9k37Wj7lh1jx9pxdvxv4ql2mk220+0M+66daWf9Jk6xH9g5NtXOtfPsfLvg5zijplT7oV1sP7JpNoCldpldblfYlXbV/611md1gN9pNdpf9xG612+x2u8PuzDwRtnvsXvup3Wc/s4fs1/aA/cIetEdsuv3q5zhjf0fst/ao/c4es8ftCfu9PWl/UJnZGXv/3v5kL1hvgZCAJCkKKIayUSxlpxx0FeWkqykXXUMRupbi6DrKTddTHspL+Sg/xVMBKkiaDFkiCqkQFaYo3UCZ5RWnEuSoJJWim6g03Uxl6BYqS7dSObqNylMFqkiV6HaqTHdQFbqTqtJdVI2qUw2qSXdTLbqHatO9VIfuo7p0P9WjB6g+PUgN6CFqSA9TI3qEGtOj1ISaUjNqTi3oMWpJj1Mrak1t6AlqS09SO3qK2tPT1IGeoY70N+pEz1Jneo660PPUlbpRd3qBetCL1JN6UQL1pj70EvWlftSfBtBAepkG0Ss0mF6lRBpCQ+k1Gkav03B6g0bQSBpFb9JoeovG0FgaR+MpiSbQRHqbJtE7NJmm0FSaRsk0nWbQuzSTZtFseo/m0Ps0l+bRfFpAKfQBLaRFlEof0mL6iNJoCS2lZbScVtBKWkWraQ2tpXW0njbQRtpEm2kLbaVttJ120E76mHbRJ7Sb9tBe+pT20We0nz6nA/QFHaQvKZ2+okP0NR2mb+gIfet70Xd0jI7TCfqeTtIPdIpO0xk6S+foRzpPP9EF8gQhhiKUoQqDMCbMFsaG2cMc4VVhzvDqMFd4TRgJrw3jwuvC3OH1YZ4wb5gvzB/GhwXCgqEOTWhDCsOwUFg4jIY3hEXCG8OiYbGweFgidGHJsFR4U1g6vDksE94Slg1vDcuFt4XlwwrhI/dVCm8PK4d3hFXCO8Oq4V1htbB6WCOsGd4d1grvCWuH94Z1wvvCMuH9Yb3wgbB++GDYIHwobBg+HDYKHwkbh4+GTcKmYbOwedgifCxsGT4etgpbh23Cq8K24ZNhu/CpsH34dNghfObn+fsXZc4/8Zv5hLB32Cd8KXwp9P5eOT+6IJoS/SC6MLoomhr9MLo4+lE0LbokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujG6Kep9zWzg0AknnXKBi3HZXKzL7nK4q1xOd7XL5a5xEXeti3PXudzuepfH5XX5XH4X7wq4gk4746wjF7pCrrCLuhtcEXejK+qKueKuhHOupCvlmrsWroVr6R53rVxr18Y94Z5wT7on3VPuKfe06+CecR3d31wn96zr7J5zz7nnXVfXzXV3L7gebkKui4/JBNfH9XF9XV/X3/V3A91AN8gNcoPdYJfoEt1QN9QNc8PccDfcjXAj3Cg3yo12o90YN8aNc+NckktyE91EN8lNcpPdZDfVTXXJLtnNcDPcTDfTVZ518Shz3Vw33813KS7FLXQZ54ypbrFb7NJcmlvqlrrlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ul1ul9vtr7m4qNvn9rv97oA74A66L126+8odcl+7w+4bd8R9646679wxd9ydcN+7k+4Hd8qddmfcWXfO/ejOu5/cBeddUmRCZGLk7cikyDuRyZEpkamRaZHkyPTIjMi7kZmRWZHZkfcicyLvR+ZG5kXmRxZEUiIfRBZGFkVSIx9GFkc+iqRFlkSWRpZFlkdWRLwvsDX0hXxhH/U3+CL+Rl/UF/PFfQnvfElfyt/kS1+sO837W305f5sv7yv4iv5R38Q39c18c9/CP+Zb+sd9K9/at/FP+Lb+Sd/OP+Xb+6d9B/+M7+j/5jv5Z31n/5zv4p/3XX03392/4Hv4F31P38sn+N6+j3/J9/X9fH8/wA/0L/tB/hU/2L/qE/0QP9S/5of51/1w/4Yf4Uf6UTFv+tGZb5FhvE/yE/xE/7af5N/xk/0UP9VP88l+up/h3/Uz/Sw/27/n5/j3/Vw/z8/3C3yK/8Av9It8qv/QL/Yf+TS/JPOisV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/ntfoff6T/2u/wnfrff4/f6T/0+/5nf7z/3B/wX/qD/0qf7r/wh/7U/7L/xR/y3/qj/zh/zx/0J/70/6X/wp/xpf8af9ef8j/68/8lf4H+zxhhjjDH2L5lweSh+PXPxcn7v38kRv7hzHwC4elv+9F/OZ5xRrs9zcdxPxMdmfH26V5eHMm/VqiUkJFy6b5qEoPA8gMy/BGX4+aMHl+Il0AaehPbQGkr/bv39RLdz9E/Wj94KkOMXORkFZcaX1/8cABN+s99+4rEnRi0sF56J+3+sPw+gaOHLOdnhcrwE2vx8faU1lPkH9edt+U/qz/5FEkCrX+TkhMvx5fpLwePwDLT/1T0ZY4wxxhhjjLGL+omKnTLff2Z+4vP33p/Hq8s52eBy/M/enzPGGGOMMcYYY+zKe7Zb96cea9++dad/f1Dlf5T1Lw8aw39qZR787sB7gMzvKAD4gwsCZAzkX7mLLX/JsRIvPXT+fmr5WR/A/45W/hmDK/zExBhjjDHGGPvTXT7p//X31ZUqiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy4L+iv9O7ErvkTHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGLvS/k8AAAD///P/+v8=") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) 32.563441209s ago: executing program 1 (id=14327): setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x61d2, 0x0) 32.23221283s ago: executing program 1 (id=14331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000800) 31.956839754s ago: executing program 32 (id=14331): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "89"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000800) 1.420689828s ago: executing program 5 (id=14625): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000000)=0xe, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f0000000080)=0xfffffffffffffec4) 1.210586981s ago: executing program 5 (id=14628): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.171538107s ago: executing program 2 (id=14629): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r1, &(0x7f0000000380)}, 0x20) 1.122328804s ago: executing program 0 (id=14630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) 1.110812966s ago: executing program 4 (id=14631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) 1.08590347s ago: executing program 3 (id=14632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 939.868913ms ago: executing program 2 (id=14633): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000002280)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000080)="d6", 0x1}], 0x1}}], 0x1, 0x4008851) setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8) 934.583634ms ago: executing program 0 (id=14634): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 896.52066ms ago: executing program 4 (id=14635): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000020601030000ffffffe90000050000001400078008000a40fffffffb0800124000e200ff0900020073797a3100000000050005000a000000050005000a000000050001"], 0x4c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c0003"], 0xcd0}}, 0x0) 882.181992ms ago: executing program 3 (id=14636): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x8d, 0x0, 0x1, 0xffff, 0xa0, "3f3c5e0000109c56cda10f677b0000a1ffff00", 0x9, 0x80000010}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xff) 826.119901ms ago: executing program 5 (id=14637): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x20) ioctl$SOUND_PCM_READ_RATE(r0, 0x80045002, &(0x7f0000000000)) 717.717338ms ago: executing program 3 (id=14638): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r0}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={'sha384\x00'}}) 657.885607ms ago: executing program 0 (id=14639): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)={0x1}) 604.486126ms ago: executing program 4 (id=14640): r0 = socket$kcm(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) 584.787069ms ago: executing program 2 (id=14641): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000580)=[{0x4, 0x0, [0x0, 0x8, 0x9, 0x4cda5471, 0x0, 0x9, 0x6, 0x10001, 0xffffde1c, 0x8, 0x7, 0x6, 0xffffffff, 0x61, 0x400, 0x2]}], r1, 0x1, 0x1, 0x48}}, 0x20) 509.279851ms ago: executing program 5 (id=14642): unshare(0x20060400) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) vmsplice(r0, &(0x7f0000000400)=[{&(0x7f0000000340)="fa31fbe90a", 0x5}], 0x1, 0x4) 476.123056ms ago: executing program 3 (id=14643): mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) 453.207139ms ago: executing program 4 (id=14644): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0x11, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x10, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 428.191303ms ago: executing program 0 (id=14645): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 375.500781ms ago: executing program 2 (id=14646): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x200000000001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0xf69a214fda618004, 0xc2c, {}, {0x4, 0x8, 0x2, 0xb7, 0x0, 0x9, "784fa10e"}, 0x6, 0x1, {0x0}, 0x49a0}) 297.785674ms ago: executing program 5 (id=14647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) unshare(0x20000400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0xedc, r0, 0x4}, 0x38) 257.30696ms ago: executing program 0 (id=14648): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x499b, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) 228.777295ms ago: executing program 3 (id=14649): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', &(0x7f0000000e00)=@ethtool_per_queue_op={0x4b, 0x1, [0x6da, 0x949, 0x7fff, 0x5aa104ec, 0x5, 0x800, 0x0, 0x0, 0x2, 0x8, 0x400, 0x100007, 0xcce0, 0x7ff, 0x8, 0x4, 0x10, 0x9, 0x80000001, 0xc, 0x4, 0xe5f, 0xbbd, 0x3, 0xf, 0xfffffffb, 0x7, 0x4, 0x1, 0x401, 0xab05, 0x74f, 0x200, 0xa01f, 0x8, 0x2, 0x6, 0x6, 0x2, 0xc, 0x7fffffff, 0xffff0001, 0x10, 0x1ff, 0xa3eb, 0x0, 0x6, 0xffffffff, 0x186f, 0x2, 0xfffffff8, 0x9, 0x1075ed75, 0x5c, 0x1, 0x8, 0x3, 0x1, 0x3, 0x7d, 0x0, 0x6, 0x5, 0x1, 0x55, 0x10000, 0x4000004, 0xb09, 0x7, 0x1, 0x4, 0x7, 0x3d80, 0x4, 0x3, 0x9, 0x2, 0x800, 0x1, 0x3, 0x40, 0x1ff, 0xc147, 0x9, 0x8000, 0x80000001, 0x5, 0x9, 0x93, 0x1, 0x7, 0x80000001, 0x6, 0xf, 0x4, 0x1, 0x9, 0x6, 0x80000001, 0xfffffff8, 0x4, 0x7, 0x7, 0x40, 0x3, 0x6, 0x1200, 0x1, 0x1563, 0x9, 0x5, 0x5, 0x8, 0x301, 0x3, 0x4, 0x3, 0xbb3b, 0x90, 0x7, 0x9, 0x2, 0x4, 0x0, 0x0, 0x2, 0xfffffff1, 0xd]}}) 199.205569ms ago: executing program 4 (id=14650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r1}, 0xc) 185.477731ms ago: executing program 2 (id=14651): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f00000001c0)) 56.395062ms ago: executing program 5 (id=14652): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) mremap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffc000/0x3000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 39.619584ms ago: executing program 3 (id=14653): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 33.160975ms ago: executing program 4 (id=14654): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000000008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 21.415307ms ago: executing program 0 (id=14655): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, 0x0) 0s ago: executing program 2 (id=14656): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40240) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x0, 0x0, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x3, 0x9dc5, 0x0, 0x0, 0xef7826c8d995ba17}) kernel console output (not intermixed with test programs): [ 919.265367][T32664] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 919.282657][T32664] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 919.436144][T32664] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix. [ 919.653556][T32704] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13165'. [ 919.777335][ T6312] gspca_zc3xx: reg_w_i err -71 [ 919.782317][ T6312] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 919.833914][ T6312] usb 2-1: USB disconnect, device number 47 [ 919.967985][T32713] loop4: detected capacity change from 0 to 512 [ 920.041048][T32713] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.13169: corrupted inode contents [ 920.056946][T32713] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 920.091723][T32713] EXT4-fs error (device loop4): ext4_do_update_inode:5279: inode #15: comm syz.4.13169: corrupted inode contents [ 920.151989][T32713] EXT4-fs error (device loop4): ext4_evict_inode:329: inode #15: comm syz.4.13169: mark_inode_dirty error [ 920.205246][T32713] EXT4-fs (loop4): 1 orphan inode deleted [ 920.211802][T32713] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 920.285243][T32713] EXT4-fs error (device loop4): __ext4_iget:5102: inode #14: block 1886221359: comm syz.4.13169: invalid block [ 920.300688][ T26] audit: type=1326 audit(2000000014.860:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd819e159 code=0x7ffc0000 [ 920.334014][T32726] loop2: detected capacity change from 0 to 256 [ 920.375363][ T26] audit: type=1326 audit(2000000014.860:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd819e159 code=0x7ffc0000 [ 920.430638][ T26] audit: type=1326 audit(2000000014.890:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fbcd819e159 code=0x7ffc0000 [ 920.460991][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 920.470987][T32726] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 920.556057][ T26] audit: type=1326 audit(2000000014.890:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbcd819dec2 code=0x7ffc0000 [ 920.669559][ T26] audit: type=1326 audit(2000000014.890:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbcd815e98e code=0x7ffc0000 [ 920.725423][T32730] loop1: detected capacity change from 0 to 4096 [ 920.750857][ T26] audit: type=1326 audit(2000000014.890:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fbcd819df87 code=0x7ffc0000 [ 920.787281][ T26] audit: type=1326 audit(2000000014.890:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbcd815e98e code=0x7ffc0000 [ 920.818101][ T26] audit: type=1326 audit(2000000014.890:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbcd819ddeb code=0x7ffc0000 [ 920.846574][ T26] audit: type=1326 audit(2000000014.930:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32725 comm="syz.2.13184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbcd815e98e code=0x7ffc0000 [ 920.867960][T32730] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 920.875076][T32742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13180'. [ 920.901602][T32739] o2cb: This node has not been configured. [ 920.944582][T32739] o2cb: Cluster check failed. Fix errors before retrying. [ 920.955352][T32730] ntfs: volume version 3.1. [ 920.974088][T32739] (syz.2.13179,32739,0):user_dlm_register:674 ERROR: status = -22 [ 921.007759][T32739] (syz.2.13179,32739,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "domain1" [ 921.497143][T32754] loop2: detected capacity change from 0 to 4096 [ 921.538609][T32754] NILFS (loop2): mounting unchecked fs [ 921.558189][T32754] NILFS (loop2): recovery required for readonly filesystem [ 921.579792][T32754] NILFS (loop2): write access will be enabled during recovery [ 921.619975][T32754] NILFS (loop2): invalid segment: Checksum error in segment payload [ 921.662039][T32754] NILFS (loop2): trying rollback from an earlier position [ 921.703225][T32754] NILFS (loop2): norecovery option specified, skipping roll-forward recovery [ 922.045046][ T5810] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 922.271708][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 922.295719][ T5810] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 922.320367][ T5810] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 922.350093][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.374359][ T5810] usb 2-1: Product: syz [ 922.379241][ T5810] usb 2-1: Manufacturer: syz [ 922.399232][ T5810] usb 2-1: SerialNumber: syz [ 922.477379][ T323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13204'. [ 922.605984][ T321] loop4: detected capacity change from 0 to 4096 [ 922.660133][ T5810] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 922.882739][ T5810] usb 2-1: USB disconnect, device number 48 [ 922.922903][ T5810] usblp0: removed [ 922.963843][ T336] device vlan2 entered promiscuous mode [ 922.994458][ T336] device bond_slave_0 entered promiscuous mode [ 923.084087][ T340] loop2: detected capacity change from 0 to 4096 [ 923.129913][ T340] EXT4-fs: inline encryption not supported [ 923.168673][ T340] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 923.217660][ T340] EXT4-fs (loop2): Test dummy encryption mode enabled [ 923.271592][ T340] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 923.314897][ T347] loop4: detected capacity change from 0 to 1024 [ 923.340563][ T340] System zones: 0-5 [ 923.348788][ T340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 923.581323][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 923.999023][ T370] loop4: detected capacity change from 0 to 16 [ 924.026205][ T370] erofs: (device loop4): mounted with root inode @ nid 36. [ 924.189318][ T376] loop2: detected capacity change from 0 to 256 [ 924.273169][ T376] exfat: Deprecated parameter 'utf8' [ 924.301420][ T376] exfat: Deprecated parameter 'namecase' [ 924.304345][ T380] loop4: detected capacity change from 0 to 512 [ 924.332988][ T376] exfat: Deprecated parameter 'namecase' [ 924.354362][ T376] exfat: Deprecated parameter 'utf8' [ 924.366164][ T380] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 924.447782][ T376] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 925.543940][ T409] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 925.555226][ T410] jffs2: notice: (410) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 925.557418][ T5810] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 925.594778][ T387] loop3: detected capacity change from 0 to 40427 [ 925.634483][ T387] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 925.654252][ T387] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 925.661998][ T407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 925.684771][ T387] F2FS-fs (loop3): invalid crc value [ 925.707873][ T387] F2FS-fs (loop3): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root [ 925.796892][ T387] F2FS-fs (loop3): Found nat_bits in checkpoint [ 925.893843][ T421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13248'. [ 925.923408][ T421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13248'. [ 926.016070][ T387] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 926.042315][ T387] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 926.127323][ T429] loop2: detected capacity change from 0 to 64 [ 926.163540][ T26] kauditd_printk_skb: 33 callbacks suppressed [ 926.163558][ T26] audit: type=1800 audit(2000000020.721:838): pid=387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13234" name="file2" dev="loop3" ino=10 res=0 errno=0 [ 926.194879][ C0] vkms_vblank_simulate: vblank timer overrun [ 926.300900][ T4273] syz-executor: attempt to access beyond end of device [ 926.300900][ T4273] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 926.474255][ T442] loop2: detected capacity change from 0 to 1024 [ 926.489990][ T442] EXT4-fs: Ignoring removed bh option [ 926.498432][ T444] loop1: detected capacity change from 0 to 256 [ 926.516799][ T442] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 926.546635][ T444] exfat: Deprecated parameter 'utf8' [ 926.566831][ T444] exfat: Deprecated parameter 'namecase' [ 926.572932][ T444] exfat: Deprecated parameter 'namecase' [ 926.619946][ T442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 926.622486][ T444] exfat: Deprecated parameter 'utf8' [ 926.665993][ T442] EXT4-fs error (device loop2): ext4_check_all_de:666: inode #12: block 7: comm syz.2.13260: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 926.711035][ T442] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2805: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 926.780165][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 926.802717][ T444] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 927.138231][ T459] loop1: detected capacity change from 0 to 128 [ 927.191851][ T463] loop2: detected capacity change from 0 to 512 [ 927.326321][ T463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 927.404414][ T463] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2826c018, mo2=0002] [ 927.419145][ T463] System zones: 1-12 [ 927.456160][ T463] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.13267: corrupted inode contents [ 927.470501][ T470] loop1: detected capacity change from 0 to 512 [ 927.547354][ T463] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 927.566902][ T470] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.13271: corrupted inode contents [ 927.614594][ T470] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 927.624498][ T463] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.13267: corrupted inode contents [ 927.665671][ T470] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #15: comm syz.1.13271: corrupted inode contents [ 927.685316][ T463] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.13267: mark_inode_dirty error [ 927.711122][ T470] EXT4-fs error (device loop1): ext4_evict_inode:329: inode #15: comm syz.1.13271: mark_inode_dirty error [ 927.724972][ T463] EXT4-fs (loop2): 1 orphan inode deleted [ 927.730902][ T463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 927.748074][ T470] EXT4-fs (loop1): 1 orphan inode deleted [ 927.760760][ T470] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 927.806884][ T470] EXT4-fs error (device loop1): __ext4_iget:5102: inode #14: block 1886221359: comm syz.1.13271: invalid block [ 927.855684][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 927.985945][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 928.154741][ T485] scsi_nl_rcv_msg: discarding partial skb [ 928.511206][ T500] netlink: 'syz.1.13285': attribute type 1 has an invalid length. [ 928.547285][ T5810] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 928.741919][ T509] loop2: detected capacity change from 0 to 512 [ 928.786455][ T5810] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 928.796851][ T509] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.13289: corrupted inode contents [ 928.814744][ T509] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 928.817844][ T5810] usb 4-1: config 0 has no interface number 0 [ 928.830581][ T5810] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 928.842363][ T5810] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 928.852968][ T5810] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 928.853202][ T509] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #15: comm syz.2.13289: corrupted inode contents [ 928.862194][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.864549][ T5810] usb 4-1: config 0 descriptor?? [ 928.905916][ T5810] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 928.925594][ T509] EXT4-fs error (device loop2): ext4_evict_inode:329: inode #15: comm syz.2.13289: mark_inode_dirty error [ 928.957803][ T509] EXT4-fs (loop2): 1 orphan inode deleted [ 928.963672][ T509] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 929.017261][ T509] EXT4-fs error (device loop2): __ext4_iget:5102: inode #14: block 1886221359: comm syz.2.13289: invalid block [ 929.123647][ T491] iowarrior 4-1:0.1: Error -90 while submitting URB [ 929.156906][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 929.166777][ T5810] usb 4-1: USB disconnect, device number 49 [ 929.303363][ T524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13297'. [ 929.350609][ T26] audit: type=1326 audit(2000000023.911:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f511a19e159 code=0x7ffc0000 [ 929.383386][ T528] loop1: detected capacity change from 0 to 256 [ 929.412870][ T26] audit: type=1326 audit(2000000023.941:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f511a19e159 code=0x7ffc0000 [ 929.462032][ T528] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 929.462126][ T26] audit: type=1326 audit(2000000023.941:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f511a19dec2 code=0x7ffc0000 [ 929.534350][ T26] audit: type=1326 audit(2000000023.941:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f511a15e98e code=0x7ffc0000 [ 929.593371][ T26] audit: type=1326 audit(2000000023.941:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f511a19df87 code=0x7ffc0000 [ 929.644021][ T26] audit: type=1326 audit(2000000023.941:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f511a15e98e code=0x7ffc0000 [ 929.740874][ T26] audit: type=1326 audit(2000000023.941:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f511a19ddeb code=0x7ffc0000 [ 929.824216][ T26] audit: type=1326 audit(2000000023.971:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f511a15e98e code=0x7ffc0000 [ 929.917661][ T26] audit: type=1326 audit(2000000023.971:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=526 comm="syz.1.13296" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f511a15e98e code=0x7ffc0000 [ 929.957086][ T551] device vlan2 entered promiscuous mode [ 929.962728][ T551] device bond_slave_0 entered promiscuous mode [ 930.494542][ T575] [U]  [ 930.497395][ T575] [U] K{ [ 930.500448][ T575] [U] t 1ŠFfˊ`GJgo/mC [ 930.507439][ T575] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 930.523914][ T575] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 930.534624][ T575] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 930.570382][ T575] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 930.593963][ T575] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 930.605279][ T575] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 930.616846][ T575] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 930.711999][ T583] loop1: detected capacity change from 0 to 256 [ 930.732529][ T575] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 930.732607][ T575] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 930.732620][ T575] [U] 22Ʃx?0;3u [ 930.732639][ T575] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 930.732659][ T575] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 930.732670][ T575] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 930.732679][ T575] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 930.732691][ T575] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 930.732702][ T575] [U] ec [ 930.732712][ T575] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 930.732827][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.841950][ T583] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d) [ 930.842727][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.870579][ T5810] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 930.889067][ T574] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 931.067674][ T5810] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 931.084811][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 931.092906][ T5810] usb 4-1: Product: syz [ 931.123832][ T5810] usb 4-1: Manufacturer: syz [ 931.387478][ T601] Bluetooth: MGMT ver 1.22 [ 931.403247][ T601] Bluetooth: hci0: unsupported parameter 5135 [ 931.425389][ T601] Bluetooth: hci0: unsupported parameter 8192 [ 931.431745][ T601] Bluetooth: hci0: unsupported parameter 5135 [ 931.453498][ T601] Bluetooth: hci0: unsupported parameter 8192 [ 931.565756][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.603629][ T610] loop2: detected capacity change from 0 to 512 [ 931.625084][ T610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 931.637543][ T610] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 931.679252][ T610] EXT4-fs (loop2): orphan cleanup on readonly fs [ 931.705406][ T610] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 931.713583][ T610] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 931.754808][ T5810] scsi host1: uas [ 931.769507][ C0] usb 4-1: stat urb: no pending cmd for uas-tag 78 [ 931.839617][ T610] EXT4-fs (loop2): 1 truncate cleaned up [ 931.845734][ T610] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 931.863391][ T610] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 931.962190][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 931.985575][ C0] usb 4-1: cmd cmplt err -71 [ 932.053968][ T6312] usb 4-1: USB disconnect, device number 50 [ 932.062459][ T6312] scsi 1:0:0:0: tag#16 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 932.070367][ T6312] scsi 1:0:0:0: tag#16 CDB: Inquiry 12 00 00 00 24 00 [ 932.587602][ T645] loop4: detected capacity change from 0 to 256 [ 932.624450][ T645] exfat: Deprecated parameter 'utf8' [ 932.629913][ T645] exfat: Deprecated parameter 'namecase' [ 932.683415][ T645] exfat: Deprecated parameter 'namecase' [ 932.703980][ T645] exfat: Deprecated parameter 'utf8' [ 932.759110][ T649] loop2: detected capacity change from 0 to 512 [ 932.783866][ T645] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 932.835181][ T649] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 933.009447][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 933.009466][ T26] audit: type=1800 audit(2000000027.571:860): pid=649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13355" name="file1" dev="loop2" ino=1048712 res=0 errno=0 [ 933.295169][ T662] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 933.357943][ T639] loop1: detected capacity change from 0 to 32768 [ 933.489755][ T675] loop2: detected capacity change from 0 to 64 [ 933.508112][ T639] XFS (loop1): Mounting V5 Filesystem [ 933.598790][ T675] syz.2.13366: attempt to access beyond end of device [ 933.598790][ T675] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 933.675188][ T639] XFS (loop1): Ending clean mount [ 933.684203][ T675] Buffer I/O error on dev loop2, logical block 512, async page read [ 933.698581][ T675] syz.2.13366: attempt to access beyond end of device [ 933.698581][ T675] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 933.763788][ T675] Buffer I/O error on dev loop2, logical block 56576, async page read [ 933.774743][ T4272] XFS (loop1): Unmounting Filesystem [ 934.123772][ T4326] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 934.338090][ T4326] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 934.379609][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.398547][ T4326] usb 5-1: Product: syz [ 934.402767][ T4326] usb 5-1: Manufacturer: syz [ 934.428945][ T4326] usb 5-1: SerialNumber: syz [ 934.460073][ T4326] usb 5-1: config 0 descriptor?? [ 934.676191][ T4326] usb 5-1: ignoring: probably an ADSL modem [ 934.894795][ T724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13387'. [ 935.053765][ T4324] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 935.077616][ T731] loop1: detected capacity change from 0 to 1024 [ 935.086950][ T4326] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 935.117917][ T4326] usb 5-1: USB disconnect, device number 42 [ 935.249461][ T4324] usb 4-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 935.285508][ T4324] usb 4-1: config 0 interface 0 has no altsetting 0 [ 935.295153][ T731] hfsplus: xattr searching failed [ 935.315150][ T4324] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 935.335851][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.354747][ T4324] usb 4-1: config 0 descriptor?? [ 935.697982][ T753] loop2: detected capacity change from 0 to 512 [ 935.777722][ T4324] uclogic 0003:28BD:0078.0002: interface is invalid, ignoring [ 935.823662][ T4326] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 935.973116][ T4324] usb 4-1: USB disconnect, device number 51 [ 936.016463][ T4326] usb 2-1: unable to get BOS descriptor or descriptor too short [ 936.030546][ T4326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.070687][ T4326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 936.090957][ T4326] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 936.107472][ T4326] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 936.117795][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 936.126684][ T4326] usb 2-1: Product: syz [ 936.131229][ T4326] usb 2-1: Manufacturer: syz [ 936.163304][ T4326] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 936.323637][ T6312] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 936.368548][ T4326] usb 2-1: Failed to query (GET_INFO) UVC control 2 on unit 49: -32 (exp. 1). [ 936.523510][ T6312] usb 5-1: Using ep0 maxpacket: 16 [ 936.532024][ T6312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.557632][ T6312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.569178][ T6312] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 936.583198][ T6312] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 936.593203][ T4326] usb 2-1: Failed to query (GET_INFO) UVC control 3 on unit 49: -71 (exp. 1). [ 936.597761][ T6312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.613589][ T4326] usb 2-1: Failed to query (GET_INFO) UVC control 6 on unit 49: -71 (exp. 1). [ 936.633352][ T6312] usb 5-1: config 0 descriptor?? [ 936.643055][ T4326] usb 2-1: Failed to query (GET_INFO) UVC control 8 on unit 49: -71 (exp. 1). [ 936.661126][ T4326] usb 2-1: Failed to query (GET_INFO) UVC control 9 on unit 49: -71 (exp. 1). [ 936.680770][ T4326] usb 2-1: Failed to query (GET_INFO) UVC control 5 on unit 49: -71 (exp. 1). [ 936.700575][ T4326] usb 2-1: Failed to query (GET_INFO) UVC control 11 on unit 49: -71 (exp. 1). [ 936.716063][ T4326] usb 2-1: Failed to query (GET_INFO) UVC control 13 on unit 49: -71 (exp. 1). [ 936.725659][ T4326] usb 2-1: No streaming interface found for terminal 2. [ 936.747586][ T4326] usb 2-1: USB disconnect, device number 49 [ 937.062160][ T6312] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 937.077276][ T6312] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 937.163691][ T4324] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 937.261705][ T6312] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 937.303179][ T6312] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 937.343465][ T6312] microsoft 0003:045E:07DA.0003: no inputs found [ 937.358993][ T4324] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 937.393519][ T6312] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 937.409656][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.425634][ T6312] usb 5-1: USB disconnect, device number 43 [ 937.438446][ T4324] usb 4-1: Product: syz [ 937.442737][ T4324] usb 4-1: Manufacturer: syz [ 937.483487][ T4324] usb 4-1: SerialNumber: syz [ 937.512748][ T4324] usb 4-1: config 0 descriptor?? [ 937.656675][ T808] fido_id[808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 937.765657][ T4326] usb 4-1: USB disconnect, device number 52 [ 937.771134][ T816] loop1: detected capacity change from 0 to 256 [ 938.634775][ T845] sg_read: process 5563 (syz.1.13444) changed security contexts after opening file descriptor, this is not allowed. [ 938.662855][ T849] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 938.862019][ T834] loop2: detected capacity change from 0 to 32768 [ 938.980215][ T834] XFS (loop2): Mounting V5 Filesystem [ 939.091270][ T834] XFS (loop2): Ending clean mount [ 939.144495][ T871] clip:clip_setentry: non-CLIP VCC [ 939.242901][ T4279] XFS (loop2): Unmounting Filesystem [ 939.432185][ T882] tipc: Enabling of bearer rejected, failed to enable media [ 939.809309][ T898] rtc_cmos 00:00: Alarms can be up to one day in the future [ 940.207036][ T913] loop2: detected capacity change from 0 to 64 [ 940.280766][ T913] Trying to free block not in datazone [ 940.303865][ T913] Trying to free block not in datazone [ 940.310525][ T913] minix_free_inode: bit 3 already cleared [ 940.359997][ T918] loop3: detected capacity change from 0 to 256 [ 940.382601][ T891] loop1: detected capacity change from 0 to 40427 [ 940.467634][ T891] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 940.505694][ T891] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 940.636715][ T924] Bluetooth: MGMT ver 1.22 [ 940.666669][ T891] F2FS-fs (loop1): Found nat_bits in checkpoint [ 940.867335][ T891] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 940.893376][ T891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 941.221642][ T939] loop3: detected capacity change from 0 to 1024 [ 941.413408][ T5810] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 941.605404][ T5810] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 941.637559][ T5810] usb 3-1: config 0 interface 0 has no altsetting 0 [ 941.663217][ T5810] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 941.672598][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.715742][ T5810] usb 3-1: config 0 descriptor?? [ 942.065926][ T935] loop4: detected capacity change from 0 to 40427 [ 942.131022][ T5810] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 942.141698][ T935] F2FS-fs (loop4): invalid crc value [ 942.166335][ T5810] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 942.193462][ T935] F2FS-fs (loop4): Found nat_bits in checkpoint [ 942.214458][ T5810] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 942.221933][ T5810] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 942.287253][ T5810] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 942.323513][ T5810] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 942.392398][ T935] F2FS-fs (loop4): Start checkpoint disabled! [ 942.453411][ T5810] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-38) [ 942.470674][ T5810] corsair-psu: probe of 0003:1B1C:1C09.0004 failed with error -38 [ 942.478906][ T935] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 942.507330][ T5810] usb 3-1: USB disconnect, device number 53 [ 942.570396][ T26] audit: type=1800 audit(2000000037.132:861): pid=935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13474" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 942.690058][ T941] loop3: detected capacity change from 0 to 32768 [ 942.798515][ T960] fido_id[960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 942.808714][ T941] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 942.808714][ T941] [ 942.846634][ T57] kworker/u4:4: attempt to access beyond end of device [ 942.846634][ T57] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 942.886517][ T941] xtLookup: xtSearch returned -5 [ 942.891566][ T941] add_index: get/read_metapage failed! [ 942.963140][ T941] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 942.963140][ T941] [ 943.006201][ T941] xtLookup: xtSearch returned -5 [ 943.026489][ T941] free_index: error reading directory table [ 943.032475][ T941] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 943.032475][ T941] [ 943.103243][ T941] xtLookup: xtSearch returned -5 [ 943.129061][ T941] free_index: error reading directory table [ 943.165715][ T941] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 943.165715][ T941] [ 943.201097][ T941] xtLookup: xtSearch returned -5 [ 943.233282][ T941] free_index: error reading directory table [ 943.253259][ T941] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 943.253259][ T941] [ 943.294358][ T941] xtLookup: xtSearch returned -5 [ 943.314605][ T941] free_index: error reading directory table [ 943.321057][ T941] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt [ 943.321057][ T941] [ 943.382672][ T941] xtLookup: xtSearch returned -5 [ 943.402949][ T941] free_index: error reading directory table [ 943.449086][ T961] ialloc: diAlloc returned -5! [ 943.477512][ T951] loop1: detected capacity change from 0 to 32768 [ 943.689796][ T951] XFS (loop1): Mounting V5 Filesystem [ 943.801404][ T951] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 943.824834][ T951] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 943.933932][ T951] XFS (loop1): Ending clean mount [ 944.071428][ T4272] XFS (loop1): Unmounting Filesystem [ 944.143481][ T4324] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 944.336071][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.363096][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.394965][ T4324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 944.420536][ T4324] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 944.432532][ T4324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.464715][ T4324] usb 4-1: config 0 descriptor?? [ 944.845701][ T987] loop2: detected capacity change from 0 to 32768 [ 944.886477][ T4324] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max [ 944.915982][ T4324] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 944.929548][ T987] XFS (loop2): Mounting V5 Filesystem [ 944.974450][ T1013] tmpfs: Cannot retroactively limit inodes [ 945.014149][ T4324] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 945.119473][ T4324] usb 4-1: USB disconnect, device number 53 [ 945.165795][ T987] XFS (loop2): Ending clean mount [ 945.204790][ T987] XFS (loop2): Quotacheck needed: Please wait. [ 945.371466][ T987] XFS (loop2): Quotacheck: Done. [ 945.428528][ T1032] loop1: detected capacity change from 0 to 16 [ 945.436888][ T1026] fido_id[1026]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 945.464613][ T1032] erofs: (device loop1): mounted with root inode @ nid 36. [ 945.505646][ T1032] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 945.538861][ T1032] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 945.564373][ T1032] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 945.637765][ T4279] XFS (loop2): Unmounting Filesystem [ 946.166392][ T1060] mkiss: ax0: crc mode is auto. [ 946.245138][ T1066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13519'. [ 946.413143][ T1069] netlink: 'syz.2.13506': attribute type 3 has an invalid length. [ 946.537446][ T1071] loop1: detected capacity change from 0 to 4096 [ 946.557605][ T1071] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 946.861142][ T1080] netlink: 'syz.1.13523': attribute type 1 has an invalid length. [ 946.927784][ T1082] loop3: detected capacity change from 0 to 1024 [ 947.010506][ T1065] loop4: detected capacity change from 0 to 32768 [ 947.081606][ T1065] jfs_unlink: dtDelete returned -2 [ 947.181938][ T1086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13527'. [ 947.451923][ T1091] loop2: detected capacity change from 0 to 2048 [ 947.483321][ T1095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13532'. [ 947.592936][ T1100] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 948.529700][ T1137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13551'. [ 949.072056][ T1154] can0: slcan on ptm0. [ 949.153304][ T1153] can0 (unregistered): slcan off ptm0. [ 949.301269][ T1162] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13562'. [ 949.759092][ T1185] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 950.764585][ T1226] loop4: detected capacity change from 0 to 64 [ 951.056472][ T1232] loop1: detected capacity change from 0 to 1024 [ 951.076387][ T1235] jffs2: notice: (1235) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 951.461160][ T26] audit: type=1400 audit(2000000046.022:862): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=1245 comm="syz.1.13591" [ 951.630358][ T1250] netlink: 'syz.3.13592': attribute type 3 has an invalid length. [ 952.080514][ T1269] loop2: detected capacity change from 0 to 64 [ 952.146948][ T1276] ip_tables: iptables: counters copy to user failed while replacing table [ 952.224432][ T1278] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.373828][ T1284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13605'. [ 952.403265][ T1284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13605'. [ 952.427456][ T1284] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 952.473082][ T1284] iwpm_hello_cb: Unable to parse nlmsg [ 952.736880][ T1301] Bluetooth: hci0: unsupported parameter 5135 [ 952.758933][ T1301] Bluetooth: hci0: unsupported parameter 8192 [ 952.782651][ T1301] Bluetooth: hci0: unsupported parameter 5135 [ 952.812976][ T1301] Bluetooth: hci0: unsupported parameter 8192 [ 952.880071][ T1305] netlink: 'syz.3.13613': attribute type 3 has an invalid length. [ 953.065352][ T1314] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 953.351907][ T1326] loop1: detected capacity change from 0 to 2048 [ 953.390758][ T1326] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 953.443426][ T1330] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 953.582639][ T4324] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 953.622989][ T1330] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 953.652493][ T1330] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 953.697009][ T1330] Remounting filesystem read-only [ 953.711714][ T4272] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 953.783615][ T4324] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 953.815300][ T4324] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.835786][ T4324] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 953.851704][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.889888][ T4324] hub 5-1:4.0: USB hub found [ 954.089456][ T4324] hub 5-1:4.0: 2 ports detected [ 954.095064][ T4324] usb 5-1: selecting invalid altsetting 1 [ 954.100828][ T4324] hub 5-1:4.0: Using single TT (err -22) [ 954.296216][ T4324] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 954.312838][ T4324] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 954.383275][ T4324] usb 5-1: USB disconnect, device number 44 [ 954.444257][ T1356] loop1: detected capacity change from 0 to 256 [ 954.498905][ T1356] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 954.717524][ T1343] loop3: detected capacity change from 0 to 32768 [ 954.806755][ T1343] JBD2: Ignoring recovery information on journal [ 955.053984][ T1343] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 955.232966][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 955.293852][ T1376] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13646'. [ 955.761778][ T1386] loop1: detected capacity change from 0 to 1024 [ 955.781589][ T1367] loop4: detected capacity change from 0 to 40427 [ 955.798251][ T1367] F2FS-fs (loop4): Corrupted extension count (64 + 1 > 64) [ 955.816429][ T1367] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 955.840636][ T1386] hfsplus: xattr searching failed [ 955.875478][ T1367] F2FS-fs (loop4): invalid crc value [ 955.893369][ T1367] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 955.949428][ T1369] loop2: detected capacity change from 0 to 40427 [ 956.019722][ T1369] F2FS-fs (loop2): invalid crc value [ 956.054052][ T1369] F2FS-fs (loop2): Found nat_bits in checkpoint [ 956.144652][ T1367] F2FS-fs (loop4): Start checkpoint disabled! [ 956.265848][ T1369] F2FS-fs (loop2): Start checkpoint disabled! [ 956.269886][ T1367] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 956.303874][ T1367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 956.393374][ T1369] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 956.524618][ T57] kworker/u4:4: attempt to access beyond end of device [ 956.524618][ T57] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 956.656557][ T40] kworker/u4:2: attempt to access beyond end of device [ 956.656557][ T40] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 956.687892][ T40] kworker/u4:2: attempt to access beyond end of device [ 956.687892][ T40] loop2: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 956.823073][ T1407] CUSE: info not properly terminated [ 957.006421][ T1411] loop4: detected capacity change from 0 to 64 [ 957.050834][ T1413] loop1: detected capacity change from 0 to 1024 [ 957.069445][ T1411] hfs: small file entry [ 957.119044][ T1413] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 957.444642][ T1419] loop3: detected capacity change from 0 to 4096 [ 957.556881][ T1424] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 957.748775][ T1429] overlayfs: upper fs does not support tmpfile. [ 957.818430][ T1429] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 957.845068][ T1429] overlayfs: failed to set xattr on upper [ 957.850868][ T1429] overlayfs: ...falling back to index=off,metacopy=off. [ 958.054153][ T1435] loop2: detected capacity change from 0 to 1024 [ 958.145683][ T1417] loop4: detected capacity change from 0 to 32768 [ 958.495782][ T1437] loop2: detected capacity change from 0 to 4096 [ 958.540134][ T1437] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 958.645740][ T1439] loop3: detected capacity change from 0 to 4096 [ 958.688140][ T1431] loop1: detected capacity change from 0 to 32768 [ 958.702518][ T1439] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 958.738168][ T1437] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 958.813032][ T1431] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 958.840855][ T1437] ntfs3: loop2: ino=1e, "file1" attr_set_size [ 958.866430][ T1439] ntfs3: loop3: failed to convert "c46c" to cp1251 [ 958.885969][ T1431] JBD2: Ignoring recovery information on journal [ 959.080138][ T1431] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 959.121293][ T1452] netlink: 'syz.0.13680': attribute type 153 has an invalid length. [ 959.506151][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 960.065382][ T1488] netlink: 96 bytes leftover after parsing attributes in process `syz.2.13696'. [ 960.294888][ T1490] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 960.593192][ T1508] binder: 1506:1508 ioctl c0306201 200000000100 returned -14 [ 961.193471][ T1532] set_capacity_and_notify: 2 callbacks suppressed [ 961.193488][ T1532] loop1: detected capacity change from 0 to 512 [ 961.276228][ T1532] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 961.327483][ T26] audit: type=1326 audit(2000000055.893:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1537 comm="syz.4.13723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 961.432266][ T26] audit: type=1326 audit(2000000055.933:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1537 comm="syz.4.13723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dc9b5e98e code=0x7ffc0000 [ 961.503381][ T26] audit: type=1326 audit(2000000055.933:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1537 comm="syz.4.13723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6dc9b5e98e code=0x7ffc0000 [ 961.597983][ T26] audit: type=1326 audit(2000000055.933:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1537 comm="syz.4.13723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 961.627153][ T26] audit: type=1326 audit(2000000055.933:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1537 comm="syz.4.13723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 961.651982][ T26] audit: type=1326 audit(2000000055.963:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1537 comm="syz.4.13723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 961.712517][ T26] audit: type=1326 audit(2000000055.983:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1537 comm="syz.4.13723" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 961.824038][ T1553] loop2: detected capacity change from 0 to 24 [ 961.853227][ T1553] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 961.864981][ T1553] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 961.915836][ T1553] VFS: Lookup of 'file0' in romfs loop2 would have caused loop [ 961.952986][ T1553] binfmt_misc: register: failed to install interpreter file ./file0 [ 962.255302][ T1569] loop4: detected capacity change from 0 to 128 [ 962.326282][ T1571] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13738'. [ 962.428010][ T1545] loop3: detected capacity change from 0 to 32768 [ 962.456939][ T1545] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.13726 (1545) [ 962.534903][ T1545] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 962.552233][ T1545] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 962.570835][ T1545] BTRFS info (device loop3): setting nodatasum [ 962.577366][ T1545] BTRFS info (device loop3): using free space tree [ 962.612027][ T4324] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 962.763556][ T1545] BTRFS info (device loop3): enabling ssd optimizations [ 962.814718][ T4324] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 962.824632][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.843817][ T4324] usb 3-1: config 0 descriptor?? [ 962.977302][ T1610] loop4: detected capacity change from 0 to 128 [ 963.054560][ T4273] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 963.071707][ T4324] [drm] vendor descriptor length:6 data:06 5f 01 00 04 03 00 00 00 00 00 [ 963.104998][ T1610] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 963.195148][ T1610] ext4 filesystem being mounted at /2824/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 963.283385][ T4324] [drm:udl_init] *ERROR* Selecting channel failed [ 963.324292][ T4324] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 963.370510][ T4324] [drm] Initialized udl on minor 2 [ 963.380517][ T4324] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 963.423215][ T4324] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 963.449571][ T4324] usb 3-1: USB disconnect, device number 54 [ 963.482026][ T6312] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 963.490858][ T6312] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 963.515148][ T6312] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 963.605926][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 964.083170][ T1642] netlink: 'syz.4.13762': attribute type 4 has an invalid length. [ 964.310247][ T1650] loop4: detected capacity change from 0 to 256 [ 964.358070][ T1652] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13767'. [ 964.399283][ T1650] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 964.768939][ T1664] loop2: detected capacity change from 0 to 256 [ 964.801205][ T1666] ip_tables: iptables: counters copy to user failed while replacing table [ 965.307337][ T1625] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 965.517218][ T1625] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 965.531054][ T1625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.545364][ T1625] usb 3-1: Product: syz [ 965.549880][ T1625] usb 3-1: Manufacturer: syz [ 965.555524][ T1625] usb 3-1: SerialNumber: syz [ 965.571511][ T1625] usb 3-1: config 0 descriptor?? [ 965.795815][ T4324] usb 3-1: USB disconnect, device number 55 [ 966.031527][ T1715] autofs4:pid:1715:autofs_fill_super: called with bogus options [ 966.516239][ T1738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13809'. [ 966.555486][ T26] audit: type=1326 audit(2000000061.123:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 966.632470][ T26] audit: type=1326 audit(2000000061.123:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 966.687616][ T26] audit: type=1326 audit(2000000061.153:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 966.741984][ T26] audit: type=1326 audit(2000000061.153:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 966.796984][ T26] audit: type=1326 audit(2000000061.153:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 966.855465][ T26] audit: type=1326 audit(2000000061.213:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dc9b9e159 code=0x7ffc0000 [ 966.922018][ T26] audit: type=1326 audit(2000000061.213:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6dc9b9dec2 code=0x7ffc0000 [ 966.969022][ T1750] loop2: detected capacity change from 0 to 4096 [ 967.004665][ T26] audit: type=1326 audit(2000000061.213:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6dc9b9df57 code=0x7ffc0000 [ 967.030050][ T1750] ntfs3: loop2: ino=3, Correct links count -> 2. [ 967.102735][ T26] audit: type=1326 audit(2000000061.213:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6dc9b5ae51 code=0x7ffc0000 [ 967.182810][ T26] audit: type=1326 audit(2000000061.213:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1739 comm="syz.4.13810" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6dc9b9ef49 code=0x7ffc0000 [ 967.534648][ T1767] ip_tables: iptables: counters copy to user failed while replacing table [ 968.078902][ T1785] loop3: detected capacity change from 0 to 512 [ 968.182661][ T1785] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 968.263276][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 968.382974][ T1762] loop2: detected capacity change from 0 to 32768 [ 968.553974][ T1762] XFS (loop2): Mounting V5 Filesystem [ 968.633367][ T1811] loop1: detected capacity change from 0 to 4096 [ 968.652727][ T1762] XFS (loop2): Ending clean mount [ 968.690759][ T1762] XFS (loop2): Quotacheck needed: Please wait. [ 968.744011][ T1811] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 968.806588][ T1762] XFS (loop2): Quotacheck: Done. [ 968.984775][ T4279] XFS (loop2): Unmounting Filesystem [ 969.347393][ T1822] loop3: detected capacity change from 0 to 4096 [ 969.392283][ T1822] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 969.459929][ T1822] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 969.481499][ T1822] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 969.610322][ T1808] loop4: detected capacity change from 0 to 32768 [ 969.661789][ T1831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13846'. [ 969.664264][ T1830] loop2: detected capacity change from 0 to 512 [ 969.682055][ T1808] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 969.739726][ T1808] JBD2: Ignoring recovery information on journal [ 969.821520][ T1830] EXT4-fs error (device loop2): ext4_orphan_get:1409: inode #15: comm syz.2.13853: inode has both inline data and extents flags [ 969.867142][ T1830] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.13853: couldn't read orphan inode 15 (err -117) [ 969.911120][ T1830] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 969.984209][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 969.994777][ T1808] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 970.055122][ T1843] loop3: detected capacity change from 0 to 128 [ 970.350188][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 970.441915][ T1852] netlink: 'syz.3.13855': attribute type 29 has an invalid length. [ 970.475479][ T1852] netlink: 'syz.3.13855': attribute type 29 has an invalid length. [ 970.522440][ T1856] netlink: 'syz.3.13855': attribute type 29 has an invalid length. [ 970.675043][ T1859] loop1: detected capacity change from 0 to 4096 [ 970.695980][ T1859] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 970.804916][ T1859] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 970.835384][ T1859] ntfs3: loop1: ino=1e, "file1" attr_set_size [ 971.805547][ T1898] ip_tables: iptables: counters copy to user failed while replacing table [ 971.936753][ T1901] loop2: detected capacity change from 0 to 512 [ 972.007145][ T1901] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 972.022385][ T1901] EXT4-fs (loop2): Online resizing not supported with sparse_super2 [ 972.030533][ T1906] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13878'. [ 972.057668][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 972.108475][ T1906] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 972.170626][ T1882] loop3: detected capacity change from 0 to 32768 [ 972.258437][ T1882] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 972.282752][ T1882] JBD2: Ignoring recovery information on journal [ 972.354570][ T1882] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 972.545366][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 973.451848][ T1953] sg_write: data in/out 19942/20 bytes for SCSI command 0x32-- guessing data in; [ 973.451848][ T1953] program syz.0.13898 not setting count and/or reply_len properly [ 973.469484][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 973.469502][ T26] audit: type=1326 audit(2000000068.033:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 973.529662][ T26] audit: type=1326 audit(2000000068.033:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 973.573108][ T1956] Bluetooth: hci0: too big key_count value 62977 [ 973.636550][ T26] audit: type=1326 audit(2000000068.043:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 973.726821][ T26] audit: type=1326 audit(2000000068.043:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 973.811493][ T26] audit: type=1326 audit(2000000068.043:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 973.856260][ T26] audit: type=1326 audit(2000000068.043:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 973.898236][ T1936] loop1: detected capacity change from 0 to 32768 [ 973.911540][ T1963] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 973.941534][ T26] audit: type=1326 audit(2000000068.043:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 974.036447][ T1936] XFS (loop1): Mounting V5 Filesystem [ 974.056910][ T26] audit: type=1326 audit(2000000068.043:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 974.075575][ T1946] loop2: detected capacity change from 0 to 32768 [ 974.126925][ T1946] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 974.136145][ T1936] XFS (loop1): Ending clean mount [ 974.144258][ T1946] JBD2: Ignoring recovery information on journal [ 974.150773][ T26] audit: type=1326 audit(2000000068.043:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1952 comm="syz.3.13899" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f446ad9e159 code=0x7ffc0000 [ 974.233607][ T1946] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 974.358083][ T4272] XFS (loop1): Unmounting Filesystem [ 974.451444][ T1625] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 974.509529][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 974.627799][ T1986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13910'. [ 974.664994][ T1625] usb 4-1: unable to get BOS descriptor or descriptor too short [ 974.684439][ T1625] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 974.734544][ T1625] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 974.772515][ T1625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.801065][ T1625] usb 4-1: Product: syz [ 974.831849][ T1625] usb 4-1: Manufacturer: syz [ 974.836522][ T1625] usb 4-1: SerialNumber: syz [ 975.201426][ T1990] loop1: detected capacity change from 0 to 1024 [ 975.236514][ T1984] loop4: detected capacity change from 0 to 32768 [ 975.281484][ T1990] syz.1.13909: attempt to access beyond end of device [ 975.281484][ T1990] loop1: rw=0, sector=393346, nr_sectors = 2 limit=1024 [ 975.310715][ T1990] syz.1.13909: attempt to access beyond end of device [ 975.310715][ T1990] loop1: rw=2049, sector=393220, nr_sectors = 2 limit=1024 [ 975.363067][ T1990] Buffer I/O error on dev loop1, logical block 196610, lost async page write [ 975.378256][ T1984] XFS (loop4): Mounting V5 Filesystem [ 975.410639][ T1990] syz.1.13909: attempt to access beyond end of device [ 975.410639][ T1990] loop1: rw=2049, sector=393222, nr_sectors = 120 limit=1024 [ 975.484005][ T1625] usb 4-1: unit 1 not found! [ 975.491332][ T1625] usb 4-1: unit 7 not found! [ 975.560529][ T1625] usb 4-1: USB disconnect, device number 54 [ 975.561554][ T1984] XFS (loop4): Ending clean mount [ 975.637471][ T1984] XFS (loop4): Quotacheck needed: Please wait. [ 975.776444][ T1984] XFS (loop4): Quotacheck: Done. [ 975.864472][T31569] udevd[31569]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.917487][ T4280] XFS (loop4): Unmounting Filesystem [ 975.954022][ T2009] netlink: 452 bytes leftover after parsing attributes in process `syz.1.13916'. [ 976.031501][ T2009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13916'. [ 976.391791][ T2021] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 976.776425][ T2035] loop2: detected capacity change from 0 to 256 [ 977.150329][ T2015] loop1: detected capacity change from 0 to 32768 [ 977.185789][ T2015] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.13920 (2015) [ 977.214041][ T2049] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 977.246354][ T2015] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 977.267288][ T2015] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 977.299329][ T2015] BTRFS info (device loop1): setting nodatasum [ 977.317229][ T2015] BTRFS info (device loop1): using free space tree [ 977.491444][ T2015] BTRFS info (device loop1): enabling ssd optimizations [ 977.496449][ T2060] loop4: detected capacity change from 0 to 4096 [ 977.592108][ T2082] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 978.114495][ T2090] Bluetooth: MGMT ver 1.22 [ 978.230181][ T4272] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 978.480025][ T2099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13951'. [ 978.635083][T31569] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop1 scanned by udevd (31569) [ 978.874587][ T2106] sp0: Synchronizing with TNC [ 978.912007][ T2105] [U] ` [ 978.917996][ T2110] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 979.241502][ T2117] tipc: Started in network mode [ 979.262081][ T2117] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 979.282857][ T2117] tipc: Enabled bearer , priority 10 [ 979.400008][ T2124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13961'. [ 979.611911][ T2129] loop2: detected capacity change from 0 to 4096 [ 979.669985][ T2129] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 979.772119][ T2129] ntfs3: loop2: failed to convert "c46c" to cp855 [ 980.424947][ T1625] tipc: Node number set to 9480874 [ 981.014298][ T2184] loop1: detected capacity change from 0 to 1164 [ 981.023850][ T2184] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 981.272502][ T2192] loop1: detected capacity change from 0 to 64 [ 981.298874][ T2192] hfs: unable to locate alternate MDB [ 981.318684][ T2192] hfs: continuing without an alternate MDB [ 981.683987][ T2203] loop1: detected capacity change from 0 to 64 [ 981.733875][ T2205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13998'. [ 981.763311][ C1] sd 0:0:1:0: [sda] tag#7059 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 981.773815][ C1] sd 0:0:1:0: [sda] tag#7059 CDB: Read(6) 08 00 e3 ec 00 a7 [ 981.989890][ T2214] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14001'. [ 982.358645][ T2230] delete_channel: no stack [ 982.900197][ T2253] loop2: detected capacity change from 0 to 2048 [ 982.920364][ T2253] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 982.959838][ T2253] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 982.983832][ T2253] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 983.003709][ T2253] UDF-fs: Scanning with blocksize 512 failed [ 983.045772][ T2253] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 983.541618][ T2273] tmpfs: Cannot retroactively limit inodes [ 983.672355][ T2276] loop2: detected capacity change from 0 to 4096 [ 983.759705][ T2285] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 983.915779][ T2288] overlayfs: upper fs does not support tmpfile. [ 983.994399][ T2288] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 984.031255][ T2288] overlayfs: failed to set xattr on upper [ 984.037058][ T2288] overlayfs: ...falling back to index=off,metacopy=off. [ 984.874224][ T2330] loop3: detected capacity change from 0 to 256 [ 984.903496][ T2330] exfat: Deprecated parameter 'utf8' [ 984.908895][ T2330] exfat: Deprecated parameter 'utf8' [ 984.961011][ T2330] exfat: Deprecated parameter 'namecase' [ 984.966755][ T2330] exfat: Deprecated parameter 'namecase' [ 985.000622][ T2330] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 985.044029][ T2332] loop4: detected capacity change from 0 to 4096 [ 985.131552][ T2338] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 985.236724][ T2332] overlayfs: upper fs does not support tmpfile. [ 985.260266][ T2332] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 985.287697][ T2332] overlayfs: failed to set xattr on upper [ 985.321444][ T2332] overlayfs: ...falling back to index=off,metacopy=off. [ 985.695841][ T2345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14052'. [ 985.894464][ T2325] loop2: detected capacity change from 0 to 32768 [ 985.966620][ T2325] JBD2: Ignoring recovery information on journal [ 986.062320][ T2325] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 986.304391][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 986.437600][ T2369] loop3: detected capacity change from 0 to 8 [ 987.043768][ T2399] loop1: detected capacity change from 0 to 128 [ 987.097076][ T2399] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 987.152159][ T2399] VFS: Lookup of 'file0' in vfat loop1 would have caused loop [ 987.234678][ T2406] netlink: 'syz.3.14075': attribute type 1 has an invalid length. [ 987.959302][ T2448] loop1: detected capacity change from 0 to 256 [ 987.991867][ T2448] exfat: Deprecated parameter 'namecase' [ 987.999023][ T2448] exfat: Deprecated parameter 'namecase' [ 988.047820][ T2448] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xcec2b026, utbl_chksum : 0xe619d30d) [ 988.110284][ T2456] loop4: detected capacity change from 0 to 2048 [ 988.251750][ T2456] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 988.325829][ T2456] EXT4-fs: can't change dax mount option while remounting [ 988.486198][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 988.507858][ T2470] loop1: detected capacity change from 0 to 256 [ 988.611647][ T2470] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 988.856310][ T2479] loop2: detected capacity change from 0 to 4096 [ 988.884534][ T2479] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 989.108601][ T2484] loop4: detected capacity change from 0 to 256 [ 989.208487][ T2484] FAT-fs (loop4): Directory bread(block 64) failed [ 989.229744][ T2484] FAT-fs (loop4): Directory bread(block 65) failed [ 989.261081][ T2484] FAT-fs (loop4): Directory bread(block 66) failed [ 989.299903][ T2484] FAT-fs (loop4): Directory bread(block 67) failed [ 989.341120][ T2484] FAT-fs (loop4): Directory bread(block 68) failed [ 989.348308][ T2484] FAT-fs (loop4): Directory bread(block 69) failed [ 989.369632][ T2484] FAT-fs (loop4): Directory bread(block 70) failed [ 989.392166][ T2484] FAT-fs (loop4): Directory bread(block 71) failed [ 989.392969][ T2496] loop1: detected capacity change from 0 to 64 [ 989.398828][ T2484] FAT-fs (loop4): Directory bread(block 72) failed [ 989.462007][ T2496] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 989.481059][ T2484] FAT-fs (loop4): Directory bread(block 73) failed [ 989.679972][ T2499] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14109'. [ 989.729972][ T2499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14109'. [ 990.211882][ T2528] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14120'. [ 990.222150][ T2528] netlink: 56 bytes leftover after parsing attributes in process `syz.4.14120'. [ 991.140468][ T6312] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 991.342348][ T6312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 991.360420][ T6312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 991.370234][ T6312] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 991.400124][ T6312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.422345][ T6312] usb 4-1: config 0 descriptor?? [ 991.599885][ T2552] loop1: detected capacity change from 0 to 32768 [ 991.612292][ T2554] loop4: detected capacity change from 0 to 32768 [ 991.617597][ T2552] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.14130 (2552) [ 991.681214][ T2552] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 991.693315][ T2554] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 991.720791][ T2552] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 991.730942][ T26] audit: type=1800 audit(2000000086.294:956): pid=2554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14131" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 991.753124][ T2552] BTRFS warning (device loop1): excessive commit interval 3581 [ 991.787873][ T2552] BTRFS info (device loop1): force zlib compression, level 3 [ 991.841859][ T6312] hid-steam 0003:28DE:1142.0006: item fetching failed at offset 2/5 [ 991.855595][ T2552] BTRFS info (device loop1): metadata ratio 107050 [ 991.861333][ T6312] hid-steam 0003:28DE:1142.0006: steam_probe:parse of hid interface failed [ 991.879997][ T6312] hid-steam: probe of 0003:28DE:1142.0006 failed with error -22 [ 991.896742][ T2552] BTRFS info (device loop1): turning on flush-on-commit [ 991.908339][ T2552] BTRFS info (device loop1): max_inline at 4096 [ 991.935962][ T2552] BTRFS info (device loop1): using free space tree [ 991.968751][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 992.073574][ T5808] usb 4-1: USB disconnect, device number 55 [ 992.181026][ T2552] BTRFS info (device loop1): enabling ssd optimizations [ 992.391566][ T2610] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 992.403737][ T2610] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 992.437192][ T4272] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 992.579109][T31569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (31569) [ 993.002446][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.371495][ T2612] loop2: detected capacity change from 0 to 32768 [ 993.544046][ T2626] loop4: detected capacity change from 0 to 16 [ 993.574136][ T2626] erofs: (device loop4): mounted with root inode @ nid 36. [ 993.616747][ T2618] loop3: detected capacity change from 0 to 32768 [ 993.785543][ T2618] XFS (loop3): Mounting V5 Filesystem [ 993.891368][ T2618] XFS (loop3): Ending clean mount [ 993.920588][ T2643] loop1: detected capacity change from 0 to 24 [ 994.140625][ T4273] XFS (loop3): Unmounting Filesystem [ 994.463469][ T2661] Bluetooth: hci0: unsupported parameter 5134 [ 994.483078][ T2661] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 994.579999][ T2658] loop4: detected capacity change from 0 to 4096 [ 994.653859][ T2658] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 994.698644][ T2658] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 994.730636][ T2658] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 994.770220][ T2658] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 994.811996][ T2658] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 994.877005][ T2658] ntfs: volume version 3.1. [ 994.901435][ T2658] ntfs: (device loop4): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute is resident. [ 994.930234][ T2658] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 994.959002][ T2654] loop2: detected capacity change from 0 to 32768 [ 994.974599][ T2658] ntfs: (device loop4): load_system_files(): Failed to load root directory. [ 995.007079][ T2654] (syz.2.14154,2654,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 995.030755][ T2658] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files. [ 995.070254][ T2654] (syz.2.14154,2654,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 995.118927][ T2658] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 995.200303][ T2654] JBD2: Ignoring recovery information on journal [ 995.344493][ T2654] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 995.566130][ T2692] loop1: detected capacity change from 0 to 256 [ 995.610712][ T2692] exfat: Deprecated parameter 'namecase' [ 995.616489][ T2692] exfat: Deprecated parameter 'namecase' [ 995.646171][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 995.669606][ T2692] exfat: Deprecated parameter 'utf8' [ 995.718951][ T2692] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 995.859420][ T2694] loop4: detected capacity change from 0 to 4096 [ 995.971436][ T2694] NILFS (loop4): invalid segment: Checksum error in segment payload [ 995.979524][ T2694] NILFS (loop4): trying rollback from an earlier position [ 996.081087][ T2694] NILFS (loop4): recovery complete [ 996.118394][ T2704] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 996.200299][ T2694] NILFS (loop4): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 996.215426][ T2694] NILFS (loop4): nilfs_sufile_do_free: segment 13 is already clean [ 996.340357][ T2671] loop3: detected capacity change from 0 to 40427 [ 996.365968][ T2712] netlink: 143932 bytes leftover after parsing attributes in process `syz.2.14177'. [ 996.369613][ T2671] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 996.399329][ T2712] netlink: zone id is out of range [ 996.419107][ T2671] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 996.427838][ T2712] netlink: zone id is out of range [ 996.468776][ T2712] netlink: zone id is out of range [ 996.482967][ T2671] F2FS-fs (loop3): Found nat_bits in checkpoint [ 996.521640][ T2712] netlink: zone id is out of range [ 996.521657][ T2712] netlink: zone id is out of range [ 996.521665][ T2712] netlink: zone id is out of range [ 996.521674][ T2712] netlink: zone id is out of range [ 996.521683][ T2712] netlink: zone id is out of range [ 996.521691][ T2712] netlink: zone id is out of range [ 996.624424][ T2723] loop4: detected capacity change from 0 to 256 [ 996.701285][ T2723] exfat: Deprecated parameter 'utf8' [ 996.763587][ T2723] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 996.798639][ T2671] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 996.818784][ T2671] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 997.702535][ T2734] (syz.1.14182,2734,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 997.760546][ T2734] (syz.1.14182,2734,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 997.817751][ T2734] JBD2: Ignoring recovery information on journal [ 997.981257][ T2734] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 998.189840][ T2773] device macsec1 entered promiscuous mode [ 998.234148][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 998.699128][ T26] audit: type=1326 audit(2000000093.255:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2802 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd819e159 code=0x7ffc0000 [ 998.789583][ T26] audit: type=1326 audit(2000000093.295:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2802 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd819e159 code=0x7ffc0000 [ 998.850245][ T26] audit: type=1326 audit(2000000093.295:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2802 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fbcd819e159 code=0x7ffc0000 [ 998.930052][ T26] audit: type=1326 audit(2000000093.295:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2802 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd819e159 code=0x7ffc0000 [ 998.994403][ T26] audit: type=1326 audit(2000000093.295:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2802 comm="" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcd819e159 code=0x7ffc0000 [ 999.503706][ T2801] set_capacity_and_notify: 1 callbacks suppressed [ 999.503725][ T2801] loop3: detected capacity change from 0 to 32768 [ 999.620282][ T2801] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 999.737181][ T26] audit: type=1800 audit(2000000094.295:962): pid=2801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.14208" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 999.955126][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 1000.196044][ T2857] loop4: detected capacity change from 0 to 512 [ 1000.230401][ T2857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1000.237152][ T2857] EXT4-fs: Ignoring removed mblk_io_submit option [ 1000.288435][ T2857] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1000.394677][ T2859] loop1: detected capacity change from 0 to 8192 [ 1000.403158][ T2865] loop2: detected capacity change from 0 to 16 [ 1000.414596][ T2857] EXT4-fs (loop4): 1 truncate cleaned up [ 1000.422341][ T2857] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1000.431681][ T2865] erofs: (device loop2): mounted with root inode @ nid 36. [ 1000.454407][ T2857] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5972: inode #12: comm syz.4.14229: bad extra_isize 62 (inode size 256) [ 1000.468708][ T2859] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1000.514287][ T2865] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 1000.530253][ T2859] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1000.550371][ T2859] REISERFS (device loop1): using ordered data mode [ 1000.556956][ T2859] reiserfs: using flush barriers [ 1000.574699][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1000.583804][ T2865] syz.2.14231: attempt to access beyond end of device [ 1000.583804][ T2865] loop2: rw=0, sector=296, nr_sectors = 8 limit=16 [ 1000.626205][ T2859] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1000.657815][ T2865] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 1000.693222][ T2868] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1000.693222][ T2859] REISERFS (device loop1): checking transaction log (loop1) [ 1000.713020][ T2865] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1000.746889][ T2859] REISERFS (device loop1): Using r5 hash to sort names [ 1000.780079][ T2859] REISERFS (device loop1): using 3.5.x disk format [ 1000.802781][ T2859] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1001.003300][ T2873] loop3: detected capacity change from 0 to 256 [ 1001.059045][ T2873] exfat: Deprecated parameter 'namecase' [ 1001.118996][ T2873] exfat: Deprecated parameter 'namecase' [ 1001.145257][ T2873] exfat: Deprecated parameter 'utf8' [ 1001.208630][ T2873] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 1001.274904][ T2879] loop1: detected capacity change from 0 to 512 [ 1001.363992][ T2879] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1001.530084][ T2883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14238'. [ 1001.591499][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 1001.646263][ T2870] loop4: detected capacity change from 0 to 40427 [ 1001.702168][ T2870] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 1001.730070][ T2870] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1001.824949][ T2886] loop1: detected capacity change from 0 to 4096 [ 1001.832761][ T2870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1001.853407][ T2886] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 1001.943855][ T2886] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1002.020282][ T2870] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1002.044555][ T2870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1002.121017][ T4272] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 1002.161117][ T4272] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 1002.216390][ T26] audit: type=1800 audit(2000000096.775:963): pid=2870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14232" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1002.295808][ T2877] loop2: detected capacity change from 0 to 32768 [ 1002.359243][ T4280] syz-executor: attempt to access beyond end of device [ 1002.359243][ T4280] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1002.397096][ T2877] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1002.447030][ T26] audit: type=1800 audit(2000000097.015:964): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14237" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 1002.661231][ T4279] ocfs2: Unmounting device (7,2) on (node local) [ 1003.071813][ T2914] vivid-000: disconnect [ 1003.112282][ T2913] vivid-000: reconnect [ 1003.112516][ T2916] loop4: detected capacity change from 0 to 1024 [ 1003.300015][ T5808] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 1003.424967][ T2924] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1003.522097][ T5808] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1003.549892][ T5808] usb 3-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1015, setting to 64 [ 1003.589917][ T2927] device macvtap1 entered promiscuous mode [ 1003.592523][ T5808] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1003.648699][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1003.667021][ T5808] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1003.686963][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.700700][ T5808] usb 3-1: config 0 descriptor?? [ 1003.708753][ T2912] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1004.156899][ T2943] EXT4-fs: Ignoring removed mblk_io_submit option [ 1004.172553][ T5808] elecom 0003:056E:00FB.0007: unknown main item tag 0x6 [ 1004.194235][ T5808] elecom 0003:056E:00FB.0007: unknown global tag 0xc [ 1004.205058][ T2943] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1004.222762][ T2946] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14277'. [ 1004.235495][ T5808] elecom 0003:056E:00FB.0007: item 0 1 1 12 parsing failed [ 1004.253447][ T5808] elecom: probe of 0003:056E:00FB.0007 failed with error -22 [ 1004.295825][ T2943] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.14266: invalid indirect mapped block 256 (level 2) [ 1004.314629][ T2943] EXT4-fs (loop1): 2 truncates cleaned up [ 1004.321014][ T2943] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1004.352170][ T2943] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.14266: bg 0: block 5: invalid block bitmap [ 1004.374292][ T2943] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 1004.388974][ T2943] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1004.388974][ T2943] [ 1004.399470][ T2943] EXT4-fs (loop1): Total free blocks count 0 [ 1004.406189][ T2943] EXT4-fs (loop1): Free/Dirty block details [ 1004.412870][ T2943] EXT4-fs (loop1): free_blocks=0 [ 1004.418292][ T2943] EXT4-fs (loop1): dirty_blocks=2 [ 1004.425261][ T2943] EXT4-fs (loop1): Block reservation details [ 1004.431706][ T2943] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 1004.506270][ T4324] usb 3-1: USB disconnect, device number 56 [ 1004.520237][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1004.561707][ T2952] smc: ib device syz2 ibport 2 applied user defined pnetid SYZ1 [ 1005.314938][ T2948] set_capacity_and_notify: 1 callbacks suppressed [ 1005.314956][ T2948] loop3: detected capacity change from 0 to 32768 [ 1005.386846][ T2954] loop1: detected capacity change from 0 to 32768 [ 1005.409873][ T6312] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1005.423234][ T2948] (syz.3.14267,2948,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1005.475650][ T2948] (syz.3.14267,2948,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1005.523321][ T2954] XFS (loop1): Mounting V5 Filesystem [ 1005.572626][ T2948] JBD2: Ignoring recovery information on journal [ 1005.593299][ T2954] XFS (loop1): Ending clean mount [ 1005.639899][ T6312] usb 5-1: Using ep0 maxpacket: 8 [ 1005.647057][ T6312] usb 5-1: config 0 interface 0 altsetting 10 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1005.743758][ T6312] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1005.771864][ T2948] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1005.789633][ T6312] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1005.808268][ T2968] loop2: detected capacity change from 0 to 32768 [ 1005.820375][ T4272] XFS (loop1): Unmounting Filesystem [ 1005.829679][ T6312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.846800][ T6312] usb 5-1: config 0 descriptor?? [ 1005.951241][ T2968] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 1005.951241][ T2968] [ 1006.024507][ T2968] ERROR: (device loop2): remounting filesystem as read-only [ 1006.161242][ T4273] ocfs2: Unmounting device (7,3) on (node local) [ 1006.325088][ T6312] logitech-djreceiver 0003:046D:C534.0008: unknown main item tag 0x2 [ 1006.349660][ T6312] logitech-djreceiver 0003:046D:C534.0008: unknown main item tag 0x7 [ 1006.543142][ T5808] usb 5-1: USB disconnect, device number 45 [ 1006.700844][ T2986] netlink: 'syz.2.14282': attribute type 29 has an invalid length. [ 1006.740094][ T2986] netlink: 'syz.2.14282': attribute type 29 has an invalid length. [ 1006.770095][ T2986] netlink: 'syz.2.14282': attribute type 29 has an invalid length. [ 1006.999866][ T2994] loop2: detected capacity change from 0 to 2048 [ 1007.102982][ T3000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14287'. [ 1007.149239][ T3000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14287'. [ 1007.302696][ T3002] loop3: detected capacity change from 0 to 2048 [ 1007.468109][ T3002] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1007.579623][ T6312] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1007.627468][ T3023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14297'. [ 1007.642333][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1007.769713][ T6312] usb 3-1: Using ep0 maxpacket: 32 [ 1007.775569][ T3031] loop4: detected capacity change from 0 to 512 [ 1007.776723][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.833698][ T6312] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.863997][ T6312] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1007.880050][ T6312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.889832][ T3031] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1007.899975][ T6312] usb 3-1: config 0 descriptor?? [ 1007.949704][ T3031] ext4 filesystem being mounted at /2930/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1007.955086][ T3036] device bond0 entered promiscuous mode [ 1007.986688][ T3036] device bond_slave_1 entered promiscuous mode [ 1008.057269][ T3034] device bond0 left promiscuous mode [ 1008.142032][ T3034] device bond_slave_1 left promiscuous mode [ 1008.324187][ T6312] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1008.346599][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1008.349528][ T6312] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1008.361039][ T6312] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1008.367873][ T6312] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1008.369606][ T3044] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 51000003 out of range (51000..2150000) [ 1008.405339][ T6312] savu 0003:1E7D:2D5A.0009: unknown main item tag 0x0 [ 1008.425970][ T6312] savu 0003:1E7D:2D5A.0009: unbalanced collection at end of report description [ 1008.467463][ T6312] savu 0003:1E7D:2D5A.0009: parse failed [ 1008.494373][ T6312] savu: probe of 0003:1E7D:2D5A.0009 failed with error -22 [ 1008.573364][ T6312] usb 3-1: USB disconnect, device number 57 [ 1008.744314][ T3056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14311'. [ 1008.794330][ T3056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14311'. [ 1008.825724][ T3064] Bluetooth: MGMT ver 1.22 [ 1008.830701][ T3056] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 1009.022579][ T3070] device bond0 entered promiscuous mode [ 1009.038836][ T3069] device bond0 left promiscuous mode [ 1009.257338][ T3082] loop1: detected capacity change from 0 to 256 [ 1009.307921][ T3082] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 1009.427426][ T3087] binder: 3086:3087 ioctl c0306201 2000000000c0 returned -22 [ 1010.277295][ T3103] loop2: detected capacity change from 0 to 4096 [ 1010.330590][ T3103] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 1010.451597][ T3111] netlink: 8628 bytes leftover after parsing attributes in process `syz.4.14338'. [ 1011.250190][ T3132] loop4: detected capacity change from 0 to 1024 [ 1011.267804][T29136] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1011.281507][T29136] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1011.296287][T16560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1011.304675][T29136] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1011.315783][ T3132] ext4: Bad value for 'max_batch_time' [ 1011.336669][T29136] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1011.349456][T29136] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1011.368453][ T4274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1011.406068][ T4274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1011.413731][ T4274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1011.422070][ T4274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1011.430343][ T4274] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1011.440975][ T4274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.281891][ T3155] loop2: detected capacity change from 0 to 64 [ 1012.882705][ T3133] wg2 speed is unknown, defaulting to 1000 [ 1012.912682][ T3133] wg1 speed is unknown, defaulting to 1000 [ 1013.129897][ T3171] loop3: detected capacity change from 0 to 1024 [ 1013.167638][ T3171] EXT4-fs: Ignoring removed bh option [ 1013.275503][ T3171] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1013.483604][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 1013.490334][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1014.351220][ T3202] loop3: detected capacity change from 0 to 4096 [ 1014.382755][ T3133] chnl_net:caif_netlink_parms(): no params data found [ 1014.956544][ T3133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.992091][ T3223] binder: 3222:3223 ioctl c0306201 2000000000c0 returned -22 [ 1015.009725][ T3133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.018198][ T3133] device bridge_slave_0 entered promiscuous mode [ 1015.089164][ T3133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.107642][ T3133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.123991][ T3133] device bridge_slave_1 entered promiscuous mode [ 1015.233753][ T3227] Bluetooth: MGMT ver 1.22 [ 1015.425331][ T3133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1015.486310][ T3133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1015.509165][ T6312] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1015.559084][ T4274] Bluetooth: hci0: command 0x041b tx timeout [ 1015.703049][ T6312] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1015.732701][ T6312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.756080][ T6312] usb 3-1: Product: syz [ 1015.769049][ T6312] usb 3-1: Manufacturer: syz [ 1015.786960][ T6312] usb 3-1: SerialNumber: syz [ 1015.815579][ T6312] usb 3-1: config 0 descriptor?? [ 1015.842995][ T6312] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1015.888282][ T6312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1015.929861][ T6312] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1015.961387][ T6312] usb 3-1: media controller created [ 1016.046129][ T3133] team0: Port device team_slave_0 added [ 1016.067856][ T6312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1016.099980][ T3133] team0: Port device team_slave_1 added [ 1016.169213][ T3252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14378'. [ 1016.340879][ T3133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.347905][ T3133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.475005][ T3133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.486777][ T6312] DVB: Unable to find symbol mt352_attach() [ 1016.551880][ T3133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.579095][ T3133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.676442][ T3133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.719207][ T6312] DVB: Unable to find symbol nxt6000_attach() [ 1016.725417][ T6312] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1016.789232][ T6312] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input52 [ 1016.825676][ T40] device hsr_slave_0 left promiscuous mode [ 1016.831654][ T6312] dvb-usb: schedule remote query interval to 1000 msecs. [ 1016.859086][ T40] device hsr_slave_1 left promiscuous mode [ 1016.861735][ T6312] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1016.904715][ T6312] dvb-usb: bulk message failed: -22 (7/0) [ 1016.925277][ T6312] dvb-usb: bulk message failed: -22 (7/0) [ 1016.960116][ T6312] usb 3-1: USB disconnect, device number 58 [ 1016.995084][ T40] bond7 (unregistering): Released all slaves [ 1017.061183][ T6312] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1017.273086][ T40] bond6 (unregistering): Released all slaves [ 1017.346562][ T40] bond5 (unregistering): Released all slaves [ 1017.399607][ T40] bond4 (unregistering): Released all slaves [ 1017.446614][ T40] bond3 (unregistering): Released all slaves [ 1017.464940][ T3289] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1017.480486][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1017.484610][ T40] bond2 (unregistering): Released all slaves [ 1017.640774][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 1017.652016][ T26] audit: type=1400 audit(2000000112.216:965): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=3A2F2F2604 pid=3291 comm="syz.4.14394" [ 1018.110782][ T40] bond1 (unregistering): Released all slaves [ 1018.280648][ T3296] loop4: detected capacity change from 0 to 32768 [ 1018.561428][ T3304] loop3: detected capacity change from 0 to 4096 [ 1018.691324][ T3307] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1018.712475][ T3309] loop4: detected capacity change from 0 to 164 [ 1018.764349][ T3309] ISOFS: unable to read i-node block [ 1018.776822][ T3309] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1019.304314][ T3315] loop3: detected capacity change from 0 to 8192 [ 1019.337124][ T3315] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1019.354768][ T3315] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1019.369211][ T3315] REISERFS (device loop3): using ordered data mode [ 1019.379772][ T3315] reiserfs: using flush barriers [ 1019.407136][ T3315] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1019.442172][ T3320] loop4: detected capacity change from 0 to 512 [ 1019.454543][ T3315] REISERFS (device loop3): checking transaction log (loop3) [ 1019.522505][ T3320] EXT4-fs: Ignoring removed i_version option [ 1019.528603][ T3320] EXT4-fs: Ignoring removed oldalloc option [ 1019.551446][ T3315] REISERFS (device loop3): Using r5 hash to sort names [ 1019.625848][ T3320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1019.724594][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 1019.831910][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1020.459161][ T3343] loop4: detected capacity change from 0 to 1024 [ 1021.432001][ T3355] loop4: detected capacity change from 0 to 32768 [ 1021.670941][ T40] bond0 (unregistering): Released all slaves [ 1021.759168][ T3371] loop3: detected capacity change from 0 to 64 [ 1022.074991][ T3133] device hsr_slave_0 entered promiscuous mode [ 1022.125575][ T3133] device hsr_slave_1 entered promiscuous mode [ 1022.250785][ T3384] usb usb8: usbfs: process 3384 (syz.3.14430) did not claim interface 0 before use [ 1022.501908][ T3390] loop3: detected capacity change from 0 to 128 [ 1022.649585][ T3390] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1022.692949][ T3390] ext4 filesystem being mounted at /2972/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.028213][ T3396] nvme0: failed to create debugfs attr [ 1023.028389][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1023.054293][ T2616] nvmet: connect request for invalid subsystem n! [ 1023.070065][ T3396] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 1023.162148][ T3133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1023.214134][ T3133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1023.239247][ T3406] binder: 3405:3406 ioctl 4018620d 0 returned -22 [ 1023.273029][ T3133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1023.281810][ T3406] binder: 3405:3406 ioctl c0306201 200000000240 returned -11 [ 1023.283464][ T3383] loop2: detected capacity change from 0 to 32768 [ 1023.306062][ T3133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1023.415586][ T3383] XFS (loop2): Mounting V5 Filesystem [ 1023.587286][ T3383] XFS (loop2): Ending clean mount [ 1023.791566][ T3133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.827538][ T4279] XFS (loop2): Unmounting Filesystem [ 1023.894685][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1023.910596][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1023.945874][ T3133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.971353][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1023.989353][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1024.035453][ T3364] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.042676][ T3364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.093406][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1024.149299][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1024.165772][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1024.177249][ T3364] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.184482][ T3364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.229346][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1024.262977][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1024.311998][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1024.343932][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1024.379166][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1024.400901][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1024.427147][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1024.457158][ T3133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1024.494996][ T3133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1024.527669][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1024.548631][ T3444] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1024.559541][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1024.589845][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1024.609414][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1024.629917][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1024.653648][ T3442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1025.099345][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1025.347675][ T3463] loop2: detected capacity change from 0 to 8192 [ 1025.400245][ T3463] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1025.423859][ T3463] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1025.431051][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1025.449441][ T3463] REISERFS (device loop2): using ordered data mode [ 1025.456204][ T3463] reiserfs: using flush barriers [ 1025.475034][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1025.505456][ T3133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1025.513302][ T3463] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1025.539608][ T3463] REISERFS (device loop2): checking transaction log (loop2) [ 1025.583647][ T3463] REISERFS (device loop2): Using r5 hash to sort names [ 1025.608904][ T3463] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1025.663617][ T3463] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1025.761809][ T3463] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1025.813007][ T3463] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1025.829240][ T3463] REISERFS warning (device loop2): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 1026.782812][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1026.797409][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1026.882690][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1026.897917][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1026.945378][ T3133] device veth0_vlan entered promiscuous mode [ 1026.960085][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1026.986204][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1027.032529][ T3133] device veth1_vlan entered promiscuous mode [ 1027.120165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1027.136556][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1027.186450][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1027.280366][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1027.330975][ T3133] device veth0_macvtap entered promiscuous mode [ 1027.383824][ T3133] device veth1_macvtap entered promiscuous mode [ 1027.464016][ T3133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.500483][ T3133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.533903][ T3133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.561091][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1027.580899][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1027.619100][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1027.643943][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1027.668645][ T3133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.729018][ T3133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.785675][ T3133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.818960][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1027.829448][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1027.891463][ T3133] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.916007][ T3557] loop3: detected capacity change from 0 to 128 [ 1027.922863][ T3133] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.938506][ T3133] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.999640][ T3133] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.035579][ T3556] netem: change failed [ 1028.287946][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.300490][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.351913][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1028.385574][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.405742][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.442587][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1028.602544][ T3575] overlayfs: failed to set xattr on upper [ 1028.630174][ T3575] overlayfs: ...falling back to index=off,metacopy=off. [ 1028.907909][ T3586] loop4: detected capacity change from 0 to 128 [ 1028.975654][ T3586] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1029.083969][ T3591] tipc: Started in network mode [ 1029.118535][ T3591] tipc: Node identity 8ec84e969928, cluster identity 4711 [ 1029.139110][ T3591] tipc: Enabled bearer , priority 10 [ 1029.929592][ T26] audit: type=1800 audit(2000000124.496:966): pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14494" name="file1" dev="loop4" ino=94 res=0 errno=0 [ 1030.251312][ T6312] tipc: Node number set to 400576150 [ 1030.467573][ T3634] loop4: detected capacity change from 0 to 4096 [ 1030.530547][ T3640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14510'. [ 1030.564044][ T3641] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1031.027064][ T3617] loop5: detected capacity change from 0 to 40427 [ 1031.128266][ T3617] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1031.136096][ T3617] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1031.260431][ T3617] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1031.496290][ T3617] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1031.513934][ T3617] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1031.769705][ T3672] net_ratelimit: 3661 callbacks suppressed [ 1031.769726][ T3672] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1032.721269][ T3707] netlink: 'syz.3.14535': attribute type 25 has an invalid length. [ 1032.743451][ T3699] loop2: detected capacity change from 0 to 8192 [ 1032.753265][ T3707] netlink: 'syz.3.14535': attribute type 25 has an invalid length. [ 1032.820343][ T3699] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1032.843111][ T3699] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 1032.878312][ T3699] REISERFS (device loop2): using ordered data mode [ 1032.900409][ T3699] reiserfs: using flush barriers [ 1032.941980][ T3699] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1033.038692][ T3699] REISERFS (device loop2): checking transaction log (loop2) [ 1033.346777][ T3726] loop5: detected capacity change from 0 to 512 [ 1033.420915][ T3726] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1033.438343][ T3726] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.453803][ T3699] REISERFS (device loop2): Using tea hash to sort names [ 1033.491935][ T3699] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1033.891081][ T3133] EXT4-fs (loop5): unmounting filesystem. [ 1034.311836][ T3724] loop3: detected capacity change from 0 to 32768 [ 1034.361496][ T3724] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1034.490243][ T3748] loop2: detected capacity change from 0 to 164 [ 1034.549667][ T3748] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1034.598903][ T3748] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 1034.668787][ T3748] syz.2.14549: attempt to access beyond end of device [ 1034.668787][ T3748] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1034.703690][T31569] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 1034.727814][ T3748] syz.2.14549: attempt to access beyond end of device [ 1034.727814][ T3748] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1034.771917][ T26] audit: type=1800 audit(2000000129.337:967): pid=3748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14549" name="file0" dev="loop2" ino=1862 res=0 errno=0 [ 1034.792150][ T5808] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1034.978212][ T5808] usb 5-1: Using ep0 maxpacket: 8 [ 1034.986148][ T5808] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 1035.013612][ T5808] usb 5-1: config 179 has no interface number 0 [ 1035.044003][ T5808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1035.081321][ T5808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1035.115621][ T5808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1035.147281][ T5808] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1035.182041][ T5808] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1035.233748][ T5808] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1035.263888][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.281999][ T3751] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1035.285610][ T3775] loop5: detected capacity change from 0 to 64 [ 1035.327956][ T3775] hfs: unable to locate alternate MDB [ 1035.338475][ T3775] hfs: continuing without an alternate MDB [ 1035.673102][ T3780] loop2: detected capacity change from 0 to 4096 [ 1035.720568][ T3780] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1035.811211][ T2616] usb 5-1: USB disconnect, device number 46 [ 1035.811215][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1035.877355][ T4279] EXT4-fs (loop2): unmounting filesystem. [ 1036.779816][ T3815] loop4: detected capacity change from 0 to 40427 [ 1036.797072][ T3815] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff [ 1036.810959][ T3815] F2FS-fs (loop4): invalid crc value [ 1036.827697][ T3815] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1036.932359][ T3815] F2FS-fs (loop4): Start checkpoint disabled! [ 1037.039680][ T3815] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1037.434930][ T47] kworker/u4:3: attempt to access beyond end of device [ 1037.434930][ T47] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1037.759818][ T3846] netlink: 310 bytes leftover after parsing attributes in process `syz.5.14591'. [ 1038.246840][ T3866] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1038.257535][ T3862] loop4: detected capacity change from 0 to 4096 [ 1038.333741][ T3862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1038.397895][ T6312] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1038.456996][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 1038.498025][ T2616] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1038.600653][ T6312] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.637790][ T6312] usb 6-1: config 0 has no interfaces? [ 1038.650692][ T6312] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1038.675774][ T6312] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.705838][ T6312] usb 6-1: config 0 descriptor?? [ 1038.714770][ T2616] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.742513][ T3883] loop3: detected capacity change from 0 to 512 [ 1038.752513][ T2616] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.767558][ T3883] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1038.798635][ T3883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 1038.804929][ T2616] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1038.823876][ T2616] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1038.825013][ T3883] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1038.844183][ T2616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.878190][ T3883] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3861: comm syz.3.14607: Allocating blocks 41-42 which overlap fs metadata [ 1038.903552][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1038.910756][ T3883] Quota error (device loop3): write_blk: dquota write failed [ 1038.918675][ T3883] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1038.923757][ T2616] usb 3-1: config 0 descriptor?? [ 1038.928800][ T3883] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.14607: Failed to acquire dquot type 0 [ 1038.946073][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1038.953607][ T3883] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1038.964196][ T6312] usb 6-1: USB disconnect, device number 2 [ 1038.977597][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1038.984567][ T3883] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.14607: corrupted inode contents [ 1039.017905][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.024506][ T3883] EXT4-fs error (device loop3): ext4_dirty_inode:6166: inode #12: comm syz.3.14607: mark_inode_dirty error [ 1039.070246][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.076877][ T3883] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.14607: corrupted inode contents [ 1039.116715][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.133933][ T3883] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #12: comm syz.3.14607: mark_inode_dirty error [ 1039.157268][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.176196][ T3883] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.14607: corrupted inode contents [ 1039.199536][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.217816][ T3883] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1039.248512][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.255139][ T3883] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #12: comm syz.3.14607: corrupted inode contents [ 1039.291057][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.307924][ T3883] EXT4-fs error (device loop3): ext4_truncate:4325: inode #12: comm syz.3.14607: mark_inode_dirty error [ 1039.328183][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.334765][ T3883] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1039.389025][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.390989][ T2616] hid-multitouch 0003:0EEF:72C4.000A: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 1039.395917][ T3883] EXT4-fs (loop3): 1 truncate cleaned up [ 1039.438126][ T3883] EXT4-fs (loop3): pa ffff888072427540: logic 1, phys. 41, len 23 [ 1039.446041][ T3883] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4894: group 0, free 22, pa_free 23 [ 1039.497741][ T3883] EXT4-fs (loop3): Remounting filesystem read-only [ 1039.505693][ T3883] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1039.526549][ T3885] loop4: detected capacity change from 0 to 32768 [ 1039.596646][ T3885] JBD2: Ignoring recovery information on journal [ 1039.616971][ T3897] tipc: Enabling of bearer rejected, failed to enable media [ 1039.648862][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1039.656606][ T5808] usb 3-1: USB disconnect, device number 59 [ 1039.723033][ T3894] fido_id[3894]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1039.786587][ T3885] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1039.856583][ T3902] loop3: detected capacity change from 0 to 512 [ 1040.040503][ T3902] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1040.057548][ T3902] ext4 filesystem being mounted at /3023/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.059742][ T4280] ocfs2: Unmounting device (7,4) on (node local) [ 1040.430952][ T4273] EXT4-fs (loop3): unmounting filesystem. [ 1041.233947][ T3966] netlink: 'syz.4.14635': attribute type 1 has an invalid length. [ 1042.128708][ T4006] [ 1042.131209][ T4006] ====================================================== [ 1042.138251][ T4006] WARNING: possible circular locking dependency detected [ 1042.145307][ T4006] syzkaller #0 Not tainted [ 1042.149756][ T4006] ------------------------------------------------------ [ 1042.156802][ T4006] syz.4.14654/4006 is trying to acquire lock: [ 1042.162900][ T4006] ffffffff97039438 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.173035][ T4006] [ 1042.173035][ T4006] but task is already holding lock: [ 1042.180430][ T4006] ffff88814624f2b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1042.190831][ T4006] [ 1042.190831][ T4006] which lock already depends on the new lock. [ 1042.190831][ T4006] [ 1042.201243][ T4006] [ 1042.201243][ T4006] the existing dependency chain (in reverse order) is: [ 1042.210260][ T4006] [ 1042.210260][ T4006] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 1042.218524][ T4006] __mutex_lock+0x12d/0xae0 [ 1042.223619][ T4006] nf_tables_dumpreset_obj+0x6e/0x90 [ 1042.229429][ T4006] netlink_dump+0x683/0xcd0 [ 1042.234493][ T4006] __netlink_dump_start+0x52c/0x6f0 [ 1042.240220][ T4006] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 1042.246411][ T4006] nf_tables_getobj_reset+0x1cb/0x610 [ 1042.252317][ T4006] nfnetlink_rcv_msg+0x898/0x1290 [ 1042.257916][ T4006] netlink_rcv_skb+0x1ef/0x440 [ 1042.263207][ T4006] nfnetlink_rcv+0x2b0/0x2470 [ 1042.268415][ T4006] netlink_unicast+0x7ad/0x920 [ 1042.273705][ T4006] netlink_sendmsg+0x8ad/0xbd0 [ 1042.279004][ T4006] ____sys_sendmsg+0x5ed/0x9a0 [ 1042.284337][ T4006] ___sys_sendmsg+0x2a2/0x360 [ 1042.289547][ T4006] __se_sys_sendmsg+0x1c3/0x2b0 [ 1042.294925][ T4006] do_syscall_64+0x4c/0xa0 [ 1042.299883][ T4006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.306379][ T4006] [ 1042.306379][ T4006] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 1042.314671][ T4006] __mutex_lock+0x12d/0xae0 [ 1042.319753][ T4006] __netlink_dump_start+0x11e/0x6f0 [ 1042.325475][ T4006] ip_set_dump+0x152/0x1e0 [ 1042.330419][ T4006] nfnetlink_rcv_msg+0xcab/0x1290 [ 1042.335998][ T4006] netlink_rcv_skb+0x1ef/0x440 [ 1042.341325][ T4006] nfnetlink_rcv+0x2b0/0x2470 [ 1042.346558][ T4006] netlink_unicast+0x7ad/0x920 [ 1042.351894][ T4006] netlink_sendmsg+0x8ad/0xbd0 [ 1042.357191][ T4006] ____sys_sendmsg+0x5ed/0x9a0 [ 1042.362488][ T4006] ___sys_sendmsg+0x2a2/0x360 [ 1042.367690][ T4006] __se_sys_sendmsg+0x1c3/0x2b0 [ 1042.373069][ T4006] do_syscall_64+0x4c/0xa0 [ 1042.378016][ T4006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.384446][ T4006] [ 1042.384446][ T4006] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 1042.392347][ T4006] __lock_acquire+0x2d18/0x7c40 [ 1042.397799][ T4006] lock_acquire+0x1bb/0x4a0 [ 1042.402828][ T4006] __mutex_lock+0x12d/0xae0 [ 1042.407862][ T4006] ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.413766][ T4006] set_match_v1_checkentry+0x6d/0x220 [ 1042.419755][ T4006] xt_check_match+0x499/0xc50 [ 1042.424980][ T4006] __nft_match_init+0x63d/0x860 [ 1042.430410][ T4006] nf_tables_newrule+0x170a/0x2810 [ 1042.436080][ T4006] nfnetlink_rcv+0x1119/0x2470 [ 1042.441376][ T4006] netlink_unicast+0x7ad/0x920 [ 1042.446667][ T4006] netlink_sendmsg+0x8ad/0xbd0 [ 1042.451956][ T4006] ____sys_sendmsg+0x5ed/0x9a0 [ 1042.457349][ T4006] ___sys_sendmsg+0x2a2/0x360 [ 1042.462552][ T4006] __se_sys_sendmsg+0x1c3/0x2b0 [ 1042.467932][ T4006] do_syscall_64+0x4c/0xa0 [ 1042.472880][ T4006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.479308][ T4006] [ 1042.479308][ T4006] other info that might help us debug this: [ 1042.479308][ T4006] [ 1042.489537][ T4006] Chain exists of: [ 1042.489537][ T4006] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 1042.489537][ T4006] [ 1042.503969][ T4006] Possible unsafe locking scenario: [ 1042.503969][ T4006] [ 1042.511416][ T4006] CPU0 CPU1 [ 1042.516783][ T4006] ---- ---- [ 1042.522148][ T4006] lock(&nft_net->commit_mutex); [ 1042.527181][ T4006] lock(nlk_cb_mutex-NETFILTER); [ 1042.534737][ T4006] lock(&nft_net->commit_mutex); [ 1042.542283][ T4006] lock(nfnl_subsys_ipset); [ 1042.546875][ T4006] [ 1042.546875][ T4006] *** DEADLOCK *** [ 1042.546875][ T4006] [ 1042.555023][ T4006] 1 lock held by syz.4.14654/4006: [ 1042.560137][ T4006] #0: ffff88814624f2b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 1042.570860][ T4006] [ 1042.570860][ T4006] stack backtrace: [ 1042.576751][ T4006] CPU: 1 PID: 4006 Comm: syz.4.14654 Not tainted syzkaller #0 [ 1042.584215][ T4006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1042.594278][ T4006] Call Trace: [ 1042.597611][ T4006] [ 1042.600600][ T4006] dump_stack_lvl+0x188/0x24e [ 1042.605336][ T4006] ? load_image+0x410/0x410 [ 1042.609889][ T4006] ? show_regs_print_info+0x12/0x12 [ 1042.615185][ T4006] ? print_circular_bug+0x12b/0x1a0 [ 1042.620396][ T4006] check_noncircular+0x296/0x330 [ 1042.625350][ T4006] ? add_chain_block+0x9b0/0x9b0 [ 1042.630295][ T4006] ? lockdep_lock+0xf1/0x1f0 [ 1042.634896][ T4006] ? _find_first_zero_bit+0xd2/0x100 [ 1042.640249][ T4006] __lock_acquire+0x2d18/0x7c40 [ 1042.645117][ T4006] ? mark_lock+0x94/0x320 [ 1042.649455][ T4006] ? verify_lock_unused+0x140/0x140 [ 1042.654664][ T4006] ? __lock_acquire+0x138a/0x7c40 [ 1042.659883][ T4006] lock_acquire+0x1bb/0x4a0 [ 1042.664396][ T4006] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.669952][ T4006] ? __might_sleep+0xd0/0xd0 [ 1042.674579][ T4006] ? read_lock_is_recursive+0x10/0x10 [ 1042.679963][ T4006] __mutex_lock+0x12d/0xae0 [ 1042.684475][ T4006] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.690031][ T4006] ? ip_set_pernet+0x23/0x230 [ 1042.694711][ T4006] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.700290][ T4006] ? mutex_lock_nested+0x10/0x10 [ 1042.705324][ T4006] ? __flush_work+0x109/0xac0 [ 1042.710044][ T4006] ? ip_set_pernet+0x23/0x230 [ 1042.714732][ T4006] ? ip_set_pernet+0x23/0x230 [ 1042.719415][ T4006] ip_set_nfnl_get_byindex+0x63/0x230 [ 1042.724817][ T4006] set_match_v1_checkentry+0x6d/0x220 [ 1042.730200][ T4006] xt_check_match+0x499/0xc50 [ 1042.734898][ T4006] ? xt_check_proc_name+0x270/0x270 [ 1042.740109][ T4006] ? __stack_depot_save+0x35/0x480 [ 1042.745273][ T4006] __nft_match_init+0x63d/0x860 [ 1042.750155][ T4006] ? nft_match_large_dump+0x40/0x40 [ 1042.755371][ T4006] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1042.761069][ T4006] ? nf_tables_newrule+0x14d9/0x2810 [ 1042.766365][ T4006] ? rcu_is_watching+0x11/0xa0 [ 1042.771180][ T4006] ? nf_tables_newrule+0x14d9/0x2810 [ 1042.776476][ T4006] ? __kmalloc+0xe4/0x240 [ 1042.780823][ T4006] nf_tables_newrule+0x170a/0x2810 [ 1042.785950][ T4006] ? nf_tables_delchain+0xf00/0xf00 [ 1042.791158][ T4006] ? __lock_acquire+0x7c40/0x7c40 [ 1042.796194][ T4006] ? mutex_unlock+0x10/0x10 [ 1042.800710][ T4006] ? __nla_parse+0x3c/0x50 [ 1042.805171][ T4006] nfnetlink_rcv+0x1119/0x2470 [ 1042.809962][ T4006] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 1042.815519][ T4006] ? ref_tracker_free+0x682/0x830 [ 1042.820574][ T4006] ? netlink_deliver_tap+0x2e/0x1b0 [ 1042.825780][ T4006] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 1042.831338][ T4006] ? netlink_deliver_tap+0x2e/0x1b0 [ 1042.836546][ T4006] netlink_unicast+0x7ad/0x920 [ 1042.841336][ T4006] netlink_sendmsg+0x8ad/0xbd0 [ 1042.846218][ T4006] ? netlink_getsockopt+0x550/0x550 [ 1042.851437][ T4006] ? apparmor_socket_sendmsg+0x16c/0x330 [ 1042.857121][ T4006] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1042.862435][ T4006] ? security_socket_sendmsg+0x7c/0xa0 [ 1042.867947][ T4006] ? netlink_getsockopt+0x550/0x550 [ 1042.873155][ T4006] ____sys_sendmsg+0x5ed/0x9a0 [ 1042.877929][ T4006] ? __sys_sendmsg_sock+0x30/0x30 [ 1042.882957][ T4006] ? __import_iovec+0x306/0x510 [ 1042.887822][ T4006] ? import_iovec+0x6f/0xa0 [ 1042.892361][ T4006] ___sys_sendmsg+0x2a2/0x360 [ 1042.897048][ T4006] ? __sys_sendmsg+0x2a0/0x2a0 [ 1042.901836][ T4006] __se_sys_sendmsg+0x1c3/0x2b0 [ 1042.906696][ T4006] ? __x64_sys_sendmsg+0x80/0x80 [ 1042.911644][ T4006] ? lockdep_hardirqs_on+0x94/0x140 [ 1042.916852][ T4006] do_syscall_64+0x4c/0xa0 [ 1042.921275][ T4006] ? clear_bhb_loop+0x60/0xb0 [ 1042.925954][ T4006] ? clear_bhb_loop+0x60/0xb0 [ 1042.930641][ T4006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1042.936549][ T4006] RIP: 0033:0x7f6dc9b9e159 [ 1042.941012][ T4006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.960656][ T4006] RSP: 002b:00007f6dcaad5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1042.969079][ T4006] RAX: ffffffffffffffda RBX: 00007f6dc9e25fa0 RCX: 00007f6dc9b9e159 [ 1042.977059][ T4006] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1042.985037][ T4006] RBP: 00007f6dc9c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1042.993011][ T4006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1043.000989][ T4006] R13: 00007f6dc9e26038 R14: 00007f6dc9e25fa0 R15: 00007fff67e715e8 [ 1043.008975][ T4006]