last executing test programs: 2m6.596189425s ago: executing program 1 (id=3376): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0xfdfffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1243, 0x108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20045808}, 0x0) 2m6.328620784s ago: executing program 1 (id=3377): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x0, 0x2, 0x6170, 0x1, 0xeaa}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r0, 0x80585414, &(0x7f0000000080)) 2m6.113399261s ago: executing program 1 (id=3378): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0xfffffffffffffffe, 0xff80) 2m5.694253825s ago: executing program 1 (id=3382): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) 2m5.044376786s ago: executing program 1 (id=3387): open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000040)) 2m4.537588963s ago: executing program 1 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="31000e008000fc00ffffffffffff080100000000000000000308710701ffff0000546800000020000e80"], 0x88}}, 0x0) 2m4.216391083s ago: executing program 32 (id=3391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32, @ANYBLOB="31000e008000fc00ffffffffffff080100000000000000000308710701ffff0000546800000020000e80"], 0x88}}, 0x0) 43.746497255s ago: executing program 4 (id=3999): prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 43.57716164s ago: executing program 4 (id=4000): r0 = socket(0x2, 0x3, 0x6a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 43.405578496s ago: executing program 4 (id=4003): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xf}, 0x20, 0x0, 0x0) r0 = epoll_create(0x1) epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x1, 0x0, 0x0) 43.260581071s ago: executing program 4 (id=4006): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 43.137457425s ago: executing program 4 (id=4008): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 42.790809886s ago: executing program 4 (id=4013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000006c00010000000000fddbdf2500000000", @ANYRES32=r0, @ANYBLOB="00000000049000002c00348028"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 42.497182105s ago: executing program 33 (id=4013): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0000006c00010000000000fddbdf2500000000", @ANYRES32=r0, @ANYBLOB="00000000049000002c00348028"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.534295973s ago: executing program 3 (id=4294): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107042, 0xc4) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x40000000) 3.99057753s ago: executing program 3 (id=4298): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x2808000, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$eJzs3c1qY1UcAPD/TZM0VSFZuBLBC7pwFabzBBOkwmBWSha60cHpgCSh0EDAD4xduRdc+Q6+gw/gxjdw4VJwZxfilfTem6+mrYE0HcLvt8k/55z/+cppC4V78tmbw/7zs9GLi29+j0YjicqTeBKXSbSiEqXvAgDYJ5dZFn9lubvaVqMeEVmzeFfZwfQAgHuwyd9/AGA/fPTxJx90ut2TD9O0ETH8ftxLIn/N6zsv4osYxGk8imb8E5HN5PFrT7snUU3T8p8B46PoRQw//bV43/kz4ir/OJrRup7//tPuyXGai3eGk3FvOvL0tRavJBGdLMk7ehzNeD0iq0XRyTz/8Zr86NXj3bd/Kub/72m0oxm/fR5nMYjnV13M8789TtP3sh///jpfQS8imYx7h1ft5rKDnX0oAAAAAAAAAAAAAAAAAAAAAADsvXY601q8P6e8DbDdXl9/4/1AxQ0/k4X7dR6laVpe4zPu1SLPr8Yb1ag+3MoBAAAAAAAAAAAAAAAAAADg5TH68qv+s8Hg9Hwp+CVbLbk7qC6UlI/1b5C+FPR/jtg86/8EcVBMbZBcGyIpq7Yw1uEmjY/WDRqVm/awOoh88j9sPrG3trXAW4PydPWfJXFH48b6Q7JwMo+Kzs5Hya2HdjnI1mzdwY1Z9S2tvf7qdjdzuuLabDOX2zSmn+RCSW3LPykrknv5/QMAAAAAAAAAAAAAAAAAAMzNH/qNP65VXjzIlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5+bf/z8LorVashpMiuTb2pTB4flozbCtHS8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPfdfAAAA///SBV2L") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.561909404s ago: executing program 3 (id=4301): syz_mount_image$xfs(&(0x7f00000003c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000440)={[{@dax}, {@nolargeio}, {@gquota}]}, 0x1, 0x9914, &(0x7f00000130c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) fchown(r0, 0x0, 0x0) 3.181492826s ago: executing program 2 (id=4303): syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000300)='./file1\x00', 0x8008, &(0x7f00000000c0)=ANY=[], 0xfd, 0x149, &(0x7f00000009c0)="$eJzs0EFLOkEYx/Hvurrqf/WvQUHHwMtmmFrRLUijoEMJQZeuuVGwm6IQHuveoXt76AUsnnoBZScjIYpehjfBi7Exuy7YrRcwn8vM/J55nmV2d2tgkNUiTO007GbLbLfN+tJR7WAvFuZxIOHv7GZLJRXmTxU4F2sUhjdQB17SETwsc/W0YYnzsAIGSao6nF3E1LD3H1Cd/1oGyywT9Bu5JL2suGeZa3727Rk56C0EGTOqmSArAd72NJsLMjFvBHSc8AmF/GhDrYA28TyPjqPjvkantVtxKbWocmxqgCL6Pov9wnux634Mwu/d65vrpXLSrwPXd2K9ghP//krXVQ/f+vuFvCZmiD+qTDxHAdevD5+VNKAzrtnxYOBlZvY5vYdxzRYjHxOQBaXjqP+JKWE92Gi/TpIkSZIkSZIkSZL0Jz8BAAD//wFsTrE=") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 2.76939482s ago: executing program 2 (id=4305): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a000100000002002000000080000000", @ANYRES32=0x0, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 2.47258948s ago: executing program 2 (id=4307): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002a2b8d240bb2170200b87010203010902240001a00800040904c81e01"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00(\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00'], 0x24}}, 0x0) 1.989503536s ago: executing program 0 (id=4309): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8a04}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 1.577497149s ago: executing program 0 (id=4313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)) 1.333293057s ago: executing program 0 (id=4314): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000001c0)={0x400, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.316891327s ago: executing program 5 (id=4315): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 1.199673201s ago: executing program 3 (id=4316): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r0, 0xc0844123, &(0x7f0000000040)) 1.017530507s ago: executing program 5 (id=4317): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000019580)=""/102394, &(0x7f0000000040)=0x18ffa) 849.369633ms ago: executing program 0 (id=4318): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0xd0f, 0x2003, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x8}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x2739}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 845.020193ms ago: executing program 5 (id=4319): r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x2, &(0x7f0000000000)="dd4e2f1099", 0x5) getsockopt$inet_int(r0, 0x10d, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x1c) 621.66641ms ago: executing program 2 (id=4320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x94, r1, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x6a, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x94}}, 0x0) 620.48912ms ago: executing program 5 (id=4321): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x15) writev(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)="f8", 0x1}], 0x2) 532.151632ms ago: executing program 0 (id=4322): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 427.941656ms ago: executing program 3 (id=4323): unshare(0x26020480) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 356.445269ms ago: executing program 2 (id=4324): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000f00050000"], 0x44}}, 0x0) 331.748399ms ago: executing program 5 (id=4325): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file2\x00', 0x8040, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x2d1, &(0x7f0000000740)="$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") statfs(&(0x7f0000002480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 229.692482ms ago: executing program 0 (id=4326): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r0, 0x1, 0xfffffffd, 0x1000, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}}, 0x890) 158.860565ms ago: executing program 3 (id=4327): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 125.647416ms ago: executing program 2 (id=4328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000700)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x801}}, 0x14}, 0x1, 0x0, 0x0, 0x20040011}, 0x24044808) 0s ago: executing program 5 (id=4329): sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100082a9181b747e4a0dff00000104030000001c0000001800"], 0x2c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) kernel console output (not intermixed with test programs): ce not active [ 426.778042][ T2908] IPVS: stop unused estimator thread 0... [ 427.026714][T13832] hsr_slave_0: entered promiscuous mode [ 427.041808][T13832] hsr_slave_1: entered promiscuous mode [ 427.093597][T13832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.101247][T13832] Cannot create hsr debugfs directory [ 427.721152][T13832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 427.797661][T13832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.838618][T13832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.864508][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'. [ 427.878136][T13832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.032034][ T5792] Bluetooth: hci2: command tx timeout [ 428.100536][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'. [ 428.260914][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.315246][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.365265][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.372675][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.403934][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.411433][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.503883][T13971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'. [ 428.549500][T13832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.563351][T13965] loop0: detected capacity change from 0 to 32768 [ 428.631670][T13979] loop2: detected capacity change from 0 to 8192 [ 428.702422][T13979] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 428.778422][T13979] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 428.794323][T13989] loop3: detected capacity change from 0 to 128 [ 428.812832][T13979] REISERFS (device loop2): using ordered data mode [ 428.830820][T13979] reiserfs: using flush barriers [ 428.858850][T13989] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 428.913886][T13979] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 428.931355][T13989] hpfs: filesystem error: improperly stopped [ 428.943713][T13989] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 428.972765][T13989] hpfs: You really don't want any checks? You are crazy... [ 428.980152][T13989] hpfs: Code page index out of array [ 428.994736][T13979] REISERFS (device loop2): checking transaction log (loop2) [ 429.023622][T13989] hpfs: code page support is disabled [ 429.029408][T13989] hpfs: hpfs_map_4sectors(): unaligned read [ 429.055613][T13989] hpfs: hpfs_map_4sectors(): unaligned read [ 429.067361][T13979] REISERFS (device loop2): Using r5 hash to sort names [ 429.092415][T13989] hpfs: filesystem error: unable to find root dir [ 429.108934][T13979] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 429.153304][T13989] hpfs: bad mount options. [ 429.182636][T13979] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 429.640967][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.912858][T14006] loop0: detected capacity change from 0 to 1764 [ 430.413415][T14022] loop0: detected capacity change from 0 to 512 [ 430.439594][T14022] EXT4-fs: Ignoring removed bh option [ 430.458830][T14022] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.514284][T14022] EXT4-fs error (device loop0): ext4_iget_extra_inode:4739: inode #15: comm syz.0.3449: corrupted in-inode xattr: e_value size too large [ 430.547864][T14022] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.3449: couldn't read orphan inode 15 (err -117) [ 430.664883][T14022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.799942][T13832] veth0_vlan: entered promiscuous mode [ 430.855094][T13832] veth1_vlan: entered promiscuous mode [ 430.956966][T13832] veth0_macvtap: entered promiscuous mode [ 430.979563][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.989851][T13832] veth1_macvtap: entered promiscuous mode [ 431.040868][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.099981][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.110316][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.141931][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.163036][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.222404][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.254213][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.283440][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.312014][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.330743][T14013] loop3: detected capacity change from 0 to 40427 [ 431.337633][T14040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3453'. [ 431.346621][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.362295][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.386027][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.398693][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.411285][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.422604][T14040] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3453'. [ 431.442058][T14040] tipc: Started in network mode [ 431.447076][T14013] F2FS-fs (loop3): invalid crc value [ 431.461982][T14040] tipc: Node identity 7f, cluster identity 4711 [ 431.470519][T14013] F2FS-fs (loop3): Found nat_bits in checkpoint [ 431.478209][T14040] tipc: Node number set to 127 [ 431.500692][T13832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.540073][T13832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.569457][T13832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.612036][T13832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.763133][T14013] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 431.933615][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.976288][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.994917][T14013] syz.3.3447: attempt to access beyond end of device [ 431.994917][T14013] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 432.103121][ T3454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.132012][ T3454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.179677][ T5778] syz-executor: attempt to access beyond end of device [ 432.179677][ T5778] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 432.218555][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 432.460621][T14061] loop4: detected capacity change from 0 to 1024 [ 432.487844][T14061] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 432.545180][T14061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.633110][T14051] loop0: detected capacity change from 0 to 32768 [ 432.655835][T14051] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3454 (14051) [ 432.681209][T14051] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 432.681302][T14051] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 432.681356][T14051] BTRFS info (device loop0): force zlib compression, level 3 [ 432.681384][T14051] BTRFS info (device loop0): turning on flush-on-commit [ 432.681448][T14051] BTRFS info (device loop0): max_inline at 4096 [ 432.681469][T14051] BTRFS info (device loop0): using free space tree [ 432.840729][T14051] BTRFS info (device loop0): enabling ssd optimizations [ 432.840758][T14051] BTRFS info (device loop0): auto enabling async discard [ 433.014661][T13832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.134690][ T5780] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 433.595255][T14091] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3460'. [ 433.879976][T14096] loop0: detected capacity change from 0 to 256 [ 433.896152][T14096] exfat: Deprecated parameter 'namecase' [ 433.932202][T14096] exfat: Deprecated parameter 'namecase' [ 434.010657][T14096] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 434.139475][T14096] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 434.783169][T14115] loop3: detected capacity change from 0 to 8192 [ 434.808372][T14115] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 434.852773][T14115] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 434.911045][T14115] REISERFS (device loop3): using ordered data mode [ 434.955800][T14115] reiserfs: using flush barriers [ 435.032638][T14115] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 435.111203][T14115] REISERFS (device loop3): checking transaction log (loop3) [ 435.135263][T14129] loop0: detected capacity change from 0 to 256 [ 435.154341][T14115] REISERFS (device loop3): Using r5 hash to sort names [ 435.189381][T14115] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 435.248147][T14115] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 435.273874][T14129] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 435.945019][T14152] loop0: detected capacity change from 0 to 64 [ 435.991700][T14152] Trying to free block not in datazone [ 436.079361][T14152] syz.0.3481: attempt to access beyond end of device [ 436.079361][T14152] loop0: rw=2049, sector=412, nr_sectors = 2 limit=64 [ 436.142164][T14152] Buffer I/O error on dev loop0, logical block 206, lost async page write [ 436.152358][ T5820] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 436.402316][ T5820] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 436.418776][ T5820] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 436.443667][ T5820] usb 4-1: config 220 has no interface number 2 [ 436.458653][ T5820] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 436.460304][T14142] loop2: detected capacity change from 0 to 32768 [ 436.500800][ T5820] usb 4-1: config 220 interface 0 has no altsetting 0 [ 436.530989][ T5820] usb 4-1: config 220 interface 76 has no altsetting 0 [ 436.533248][T14142] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3476 (14142) [ 436.554999][ T5820] usb 4-1: config 220 interface 1 has no altsetting 0 [ 436.601533][T14142] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 436.612499][ T5820] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 436.621598][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.658624][ T5820] usb 4-1: Product: syz [ 436.661142][T14142] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 436.672051][ T5820] usb 4-1: Manufacturer: syz [ 436.672072][ T5820] usb 4-1: SerialNumber: syz [ 436.713194][T14142] BTRFS info (device loop2): use no compression [ 436.732854][T14142] BTRFS info (device loop2): max_inline at 4096 [ 436.743547][T14142] BTRFS info (device loop2): using free space tree [ 436.914801][T14142] BTRFS info (device loop2): enabling ssd optimizations [ 436.929926][ T5820] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 436.943837][T14142] BTRFS info (device loop2): auto enabling async discard [ 436.957620][T14185] loop4: detected capacity change from 0 to 256 [ 436.976848][ T5820] usb 4-1: No valid video chain found. [ 436.993692][ T5820] usb 4-1: selecting invalid altsetting 0 [ 437.069407][ T5820] usb 4-1: selecting invalid altsetting 0 [ 437.089858][ T5820] usbtest: probe of 4-1:220.1 failed with error -22 [ 437.115776][ T5820] usb 4-1: USB disconnect, device number 16 [ 437.122877][T14185] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d) [ 437.343474][ T5777] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 437.870108][T14203] netlink: 'syz.3.3489': attribute type 10 has an invalid length. [ 437.899847][T14201] loop2: detected capacity change from 0 to 2048 [ 437.902480][T14203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3489'. [ 437.964520][T14203] macvlan1: entered promiscuous mode [ 437.981020][T14201] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 437.992363][T14203] batman_adv: batadv0: Adding interface: macvlan1 [ 438.012259][T14203] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.048159][T14201] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 438.135812][T14161] loop0: detected capacity change from 0 to 40427 [ 438.143335][T14203] batman_adv: batadv0: Interface activated: macvlan1 [ 438.201981][T14161] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 438.248236][T14161] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 438.315949][T14161] F2FS-fs (loop0): invalid crc value [ 438.333319][T14161] F2FS-fs (loop0): Found nat_bits in checkpoint [ 438.652115][T14161] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 438.677426][T14161] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 438.974186][ T5780] syz-executor: attempt to access beyond end of device [ 438.974186][ T5780] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 439.036293][ T5780] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 439.622986][T14209] loop4: detected capacity change from 0 to 40427 [ 439.659084][T14209] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7 [ 439.699992][T14209] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 439.739909][T14209] F2FS-fs (loop4): Image doesn't support compression [ 439.788895][T14209] F2FS-fs (loop4): invalid crc value [ 439.816524][T14209] F2FS-fs (loop4): Found nat_bits in checkpoint [ 440.063016][T14209] F2FS-fs (loop4): Start checkpoint disabled! [ 440.087864][T14241] loop2: detected capacity change from 0 to 128 [ 440.125199][T14241] ext4: Unknown parameter 'euid>00000000000000000000' [ 440.137408][T14209] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 440.198419][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.205183][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.303903][T14244] team0: Device vxcan3 is of different type [ 440.631251][T14255] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3504'. [ 440.651476][T14256] [U]  [ 440.655094][T14256] [U] K{‘ [ 440.658166][T14256] [U] ät Ž1ÊàŠªFìÇÄfËŠî`GÊJç˜Ügö毹¬¡—þÈoÕñ/ümCç [ 440.665152][T14256] [U] tžØ–/,~ˆÄœ­‹jõÿÊ}8îÊþ'o1Ü"™7-î‚JQœK—¤Wºïqé5c%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚íè¼`+³û(·â¿!(éûéz'àtXln»I®gÅj– °üÝ­·på~÷7í!‘Õò"ø¨Î ¾ª(È5ˆObü¤‡ÍƒJÖ [ 440.680819][T14256] [U] ±k\&—}6£6œXîHX ¥ôµ„Ìþ.`¸a“$Û40|϶¿9°øÞ¨„¯À ÏU‚ò4ôä®VbzÃð}ÌwÔM”TºŽíQŸýΦr’ 4”ÿ [ 440.691290][T14256] [U] ".h6øÞ"Ökã‡[›‰¤ŒJá4çØIn¨™[Z(•„C|Të]z{â3Ÿc=»¨xîôžë…î4ßw‰)\T‘XJøSH{q;ì¹¢…ötÔÇ+‹¦÷gíèÿ®d„.Ë‚³>yž÷éwUh„fN—ŽÇhl]SÔ2ŠÇÙ\g%ŠO¼&z)µðš'¨pul‚_<㠢ذ‰ò®Ôå`Ò±TÔÁþœÐËþ;_ô"(‘u{7jœ¿2X ‘/€'ÝÙcÑÌõIº©ÀÏH¿cÕ³žV¦=‘AiÇ%w¼Esž RšŸjŠîœƒÚ”gÂ÷rÁ¹í¡hI˜¢œaïì6-úDúV¨á i"øånæ¨ þÚAsc~4Áª¹8cø*­OO5/ÿœJš~º§¡w—vK+¬®‰Œ3èÇY)Ž¹M°¸æv¶Ìyqæ½€DTr¯Otpem%f×ÊejÍA5æÔT_-X~ ^aaÛ‚ò˜½qÖå [ 440.726960][T14256] [U] +w‰G?]£Ó'a: »Ú)Õïó™“' B>t¢ ¡f/™÷<'èUÓ'–¼h§ié.+]eŸ.½-É¿ÿ¿Ò%÷è>2`¶^Uÿ8F.Š6¤Å3ÓØ+ËA¾Â««„°g3ÓpÂó6:^0Àtéèv÷'Eõt¼€ûâYC‰n¾þrÏ©ÞnèPj× ;æZ†êôñû‘8!¯È\ù…¸AØÊ–2Á£$ðµ™Â­wi.Íç#ŠÈ/Bai¼Ä`ðá4j’ôdîy@Óz„ügW÷5Ë¿BÄ µÙœ Nóy"vI2ûÌ [ 440.750709][T14256] [U] ôT¦_K5¸t¬YJÐþÎ9ðÕcÊ$brŸLúNul ¶ü9wÈýÍ|žGå"ʃÆ%Çú¶êCªØ°¶ºqîÙ ŸÇ3‹Æq¯ôN^HP*½Ü$ µ.Î7yÓ±œ2³ [ 440.761852][T14256] [U] ½?©ÿ hüä*ÙÁ”Î3í7Üé¾^#Q"0~‡ ‚ð(éoïX LŒb£,'vîÓ=‹ÝëCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷î¾™÷p#ò2DO*Ƀ [ 440.773431][T14256] [U] ©s¹“gžµ²¶“˜GuÐÔd-{¸™â|&“®ŸŸñ2µ›LÞc_©œ!`¨ÍozÖ¥¢B¶³%>êrñ¶öwï‡ýŽSsÂH"£yA4£O.šYÙÛä„RTÔ¶ŒBÚ[+/<>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 440.887609][T14256] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 440.896167][T14256] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 440.909761][T14256] [U] 22½“Æ©Ðû©x?0;3u± [ 440.913989][T14256] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 440.938967][T14256] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 440.948295][T14256] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 440.956932][T14256] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 440.963129][T14256] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 440.975492][T14256] [U] ¹ ec [ 440.978643][T14256] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 441.061491][T14253] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 441.298366][T14265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3509'. [ 441.352269][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3509'. [ 441.372351][T14265] netlink: 'syz.3.3509': attribute type 7 has an invalid length. [ 442.066775][T14260] loop0: detected capacity change from 0 to 32768 [ 442.091409][T14260] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.3507 (14260) [ 442.136622][T14260] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 442.164429][T14260] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 442.203946][T14260] BTRFS info (device loop0): setting nodatasum [ 442.230961][T14260] BTRFS info (device loop0): using free space tree [ 442.372000][T14260] BTRFS info (device loop0): enabling ssd optimizations [ 442.379172][T14260] BTRFS info (device loop0): auto enabling async discard [ 442.525835][ T28] audit: type=1800 audit(442.473:242): pid=14260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3507" name="file0" dev="loop0" ino=258 res=0 errno=0 [ 442.594976][T14272] loop2: detected capacity change from 0 to 32768 [ 442.702610][ T5780] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 442.768648][T14272] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 442.768648][T14272] [ 442.793276][T14272] ERROR: (device loop2): remounting filesystem as read-only [ 442.801438][T14272] ERROR: (device loop2): dbDiscardAG: -EIO [ 442.801438][T14272] [ 442.956496][T14274] loop3: detected capacity change from 0 to 32768 [ 443.064291][T14274] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 443.222920][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 444.568764][ T5783] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 444.767126][ T5783] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 444.787138][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.805284][ T5783] usb 4-1: Product: syz [ 444.809535][ T5783] usb 4-1: Manufacturer: syz [ 444.822178][ T5783] usb 4-1: SerialNumber: syz [ 444.847006][T14366] loop2: detected capacity change from 0 to 128 [ 444.858679][ T5783] usb 4-1: config 0 descriptor?? [ 444.886692][ T5783] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 444.922005][T14366] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 444.957120][T14366] hpfs: filesystem error: improperly stopped [ 444.963844][T14366] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 444.971651][T14366] hpfs: You really don't want any checks? You are crazy... [ 444.980709][ T5783] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 445.011466][T14366] hpfs: hpfs_map_sector(): read error [ 445.030839][T14366] hpfs: code page support is disabled [ 445.043021][ T5783] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 445.062760][ T5783] usb 4-1: media controller created [ 445.067789][T14366] hpfs: hpfs_map_4sectors(): unaligned read [ 445.087401][T14366] hpfs: hpfs_map_4sectors(): unaligned read [ 445.132984][T14366] hpfs: filesystem error: unable to find root dir [ 445.158517][ T5783] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.281295][T14378] loop0: detected capacity change from 0 to 64 [ 445.363072][ T5783] DVB: Unable to find symbol mt352_attach() [ 445.440271][T14384] loop2: detected capacity change from 0 to 64 [ 445.557401][ T5783] DVB: Unable to find symbol nxt6000_attach() [ 445.607643][ T5783] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 445.691606][ T5783] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input30 [ 445.725244][ T5783] dvb-usb: schedule remote query interval to 1000 msecs. [ 445.762260][ T5783] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 445.808011][ T5783] dvb-usb: bulk message failed: -22 (7/0) [ 445.816182][ T5783] dvb-usb: bulk message failed: -22 (7/0) [ 445.851521][T14386] loop4: detected capacity change from 0 to 4096 [ 445.864927][ T5783] usb 4-1: USB disconnect, device number 17 [ 445.931529][T14386] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 446.036802][ T5783] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 446.202969][T14386] ntfs3: loop4: failed to convert "c46c" to cp775 [ 446.916251][T14417] netlink: 'syz.3.3561': attribute type 1 has an invalid length. [ 447.257639][T14407] loop4: detected capacity change from 0 to 40427 [ 447.279640][T14407] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 447.309155][T14407] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 447.344582][T14407] F2FS-fs (loop4): invalid crc value [ 447.357948][T14407] F2FS-fs (loop4): Found nat_bits in checkpoint [ 447.507670][T14407] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 447.515031][T14407] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 448.437805][T14454] macsec2: entered promiscuous mode [ 448.458122][T14454] macsec2: entered allmulticast mode [ 448.845720][T14444] loop0: detected capacity change from 0 to 32768 [ 448.922356][T14444] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 449.057904][T14444] XFS (loop0): Ending clean mount [ 449.104755][T14444] XFS (loop0): Quotacheck needed: Please wait. [ 449.300969][T14458] loop3: detected capacity change from 0 to 32768 [ 449.309881][T14444] XFS (loop0): Quotacheck: Done. [ 449.401798][T14458] JBD2: Ignoring recovery information on journal [ 449.495090][T14458] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 449.678269][ T5780] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 449.812492][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 449.888194][T14487] loop4: detected capacity change from 0 to 256 [ 449.966792][T14487] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 450.071787][ T28] audit: type=1800 audit(450.013:243): pid=14487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3586" name="file1" dev="loop4" ino=1048760 res=0 errno=0 [ 450.134327][T14487] exFAT-fs (loop4): error, invalid access to FAT free cluster (entry 0x00000008) [ 450.659830][T14482] loop2: detected capacity change from 0 to 32768 [ 451.218451][T14517] loop4: detected capacity change from 0 to 1024 [ 451.364017][T14517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.588245][T14517] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 451.648646][T14517] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 451.816299][T13832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.076101][T14543] loop3: detected capacity change from 0 to 1024 [ 452.212293][T14543] hfsplus: catalog record size mismatch (type 1, got 20, expected 88) [ 452.365693][ T3502] hfsplus: b-tree write err: -5, ino 25 [ 452.371574][ T3502] hfsplus: b-tree write err: -5, ino 4 [ 452.407870][ T3502] hfsplus: b-tree write err: -5, ino 2 [ 452.874647][T14530] loop0: detected capacity change from 0 to 40427 [ 452.910559][T14536] loop2: detected capacity change from 0 to 32768 [ 452.921954][T14530] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 452.942314][T14530] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 453.033571][T14536] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 453.053556][T14530] F2FS-fs (loop0): Found nat_bits in checkpoint [ 453.068619][T14541] loop4: detected capacity change from 0 to 32768 [ 453.140044][T14541] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 453.206714][T14536] XFS (loop2): Ending clean mount [ 453.254013][ T27] XFS (loop2): Corruption warning: Metadata has LSN (1:256) ahead of current LSN (1:80). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 453.321956][ T27] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x10 [ 453.344048][T14530] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 453.351202][T14530] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 453.394089][ T27] XFS (loop2): Unmount and run xfs_repair [ 453.420205][ T27] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 453.440141][ T27] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 453.504037][ T27] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 01 00 ................ [ 453.543270][T14541] XFS (loop4): Ending clean mount [ 453.552089][ T27] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 453.603061][ T27] 00000030: 00 00 00 00 66 dd 03 89 00 00 18 00 00 00 40 37 ....f.........@7 [ 453.629412][T14582] program syz.3.3604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.643317][T14541] XFS (loop4): Quotacheck needed: Please wait. [ 453.669917][ T27] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 453.693414][ T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 453.711955][ T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 453.720887][ T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 453.770911][T14536] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 4 error 74 [ 453.809098][T14536] XFS (loop2): Failed to initialize disk quotas. [ 453.851263][T14541] XFS (loop4): Quotacheck: Done. [ 454.044462][ T5777] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 454.190909][T13832] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 454.683302][T14598] netlink: 288 bytes leftover after parsing attributes in process `syz.2.3607'. [ 454.897617][T14605] loop2: detected capacity change from 0 to 128 [ 454.965194][T14605] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 454.977176][T14602] loop3: detected capacity change from 0 to 4096 [ 455.005434][T14605] hpfs: filesystem error: improperly stopped [ 455.027087][T14605] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 455.040647][T14605] hpfs: You really don't want any checks? You are crazy... [ 455.062962][T14607] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 455.074190][T14605] hpfs: hpfs_map_sector(): read error [ 455.079643][T14605] hpfs: code page support is disabled [ 455.114103][T14605] hpfs: hpfs_map_4sectors(): unaligned read [ 455.120206][T14605] hpfs: hpfs_map_4sectors(): unaligned read [ 455.127163][T14605] hpfs: filesystem error: unable to find root dir [ 455.853363][T14624] netlink: 'syz.2.3615': attribute type 2 has an invalid length. [ 455.864217][T14618] loop0: detected capacity change from 0 to 4096 [ 456.143166][T14628] loop4: detected capacity change from 0 to 2048 [ 456.263179][T14635] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 456.813625][T14646] tipc: Enabling not permitted [ 456.845936][T14646] tipc: Enabling of bearer rejected, failed to enable media [ 457.131300][T14655] loop2: detected capacity change from 0 to 256 [ 457.472543][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.537887][T14665] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3629'. [ 458.272856][T14630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 458.746739][T14687] loop2: detected capacity change from 0 to 32768 [ 458.836160][T14687] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 458.853464][T14706] loop0: detected capacity change from 0 to 512 [ 458.894113][T14687] JBD2: Ignoring recovery information on journal [ 458.914041][T14706] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3641: invalid indirect mapped block 10 (level 1) [ 458.955361][T14706] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.3641: invalid indirect mapped block 8 (level 1) [ 458.995469][T14706] EXT4-fs (loop0): 1 truncate cleaned up [ 459.011003][T14706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.032970][T14687] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 459.125644][T14714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3642'. [ 459.281745][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.408707][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 459.530877][T14692] loop4: detected capacity change from 0 to 40427 [ 459.659076][T14692] F2FS-fs (loop4): invalid crc value [ 459.742796][T14692] F2FS-fs (loop4): Found nat_bits in checkpoint [ 459.817691][ T28] audit: type=1326 audit(459.763:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14729 comm="syz.3.3647" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x0 [ 459.939767][T14728] loop0: detected capacity change from 0 to 4096 [ 460.021482][T14692] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 460.038325][T14728] NILFS (loop0): invalid segment: Checksum error in segment payload [ 460.065326][T14728] NILFS (loop0): trying rollback from an earlier position [ 460.165438][T14728] NILFS (loop0): recovery complete [ 460.209145][T14738] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 460.350275][T13832] syz-executor: attempt to access beyond end of device [ 460.350275][T13832] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 460.382928][T14728] NILFS (loop0): the device already has a read-only mount. [ 460.405680][T13832] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 460.522297][ T1191] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 460.712158][ T1191] usb 3-1: Using ep0 maxpacket: 8 [ 460.732642][ T1191] usb 3-1: unable to get BOS descriptor or descriptor too short [ 460.765283][ T1191] usb 3-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 460.792579][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.819561][ T1191] usb 3-1: Product: syz [ 460.835006][ T1191] usb 3-1: Manufacturer: syz [ 460.840145][ T1191] usb 3-1: SerialNumber: syz [ 461.102795][ T1191] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 461.237437][ T1191] usb 3-1: USB disconnect, device number 28 [ 461.374208][ T9521] udevd[9521]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.561939][ T28] audit: type=1326 audit(461.493:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 461.608654][ T28] audit: type=1326 audit(461.493:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 461.691927][ T28] audit: type=1326 audit(461.493:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.3.3656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 461.806756][ T28] audit: type=1326 audit(461.503:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.3.3656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 461.876108][ T28] audit: type=1326 audit(461.503:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="syz.3.3656" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 461.915760][T14769] loop3: detected capacity change from 0 to 512 [ 461.966836][T14769] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 462.002367][ T28] audit: type=1326 audit(461.503:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f931f19e6c7 code=0x7ffc0000 [ 462.069366][ T28] audit: type=1326 audit(461.503:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f931f15d68e code=0x7ffc0000 [ 462.155876][T14769] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 462.222304][ T28] audit: type=1326 audit(461.503:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f931f15d68e code=0x7ffc0000 [ 462.277537][T14769] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.3657: bg 0: block 248: padding at end of block bitmap is not set [ 462.345290][ T28] audit: type=1326 audit(461.513:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14764 comm="" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f931f15d68e code=0x7ffc0000 [ 462.403418][T14769] EXT4-fs error (device loop3): ext4_acquire_dquot:6953: comm syz.3.3657: Failed to acquire dquot type 1 [ 462.426620][T14769] EXT4-fs (loop3): 1 truncate cleaned up [ 462.434368][T14769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 462.673796][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 462.745703][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3664'. [ 462.972522][ T5929] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 463.139446][T14811] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 463.192159][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 463.199380][ T5929] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 463.212553][ T5929] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 463.228240][ T5929] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.245497][ T5929] usb 1-1: Product: syz [ 463.252176][T14815] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3671'. [ 463.270899][ T5929] usb 1-1: Manufacturer: syz [ 463.281923][ T5929] usb 1-1: SerialNumber: syz [ 463.306252][ T5929] usb 1-1: config 0 descriptor?? [ 463.342564][ T5929] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 463.350682][ T5929] usb 1-1: setting power ON [ 463.378647][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 463.428355][ T5929] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.470831][ T5929] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 463.509391][ T5929] usb 1-1: media controller created [ 463.573264][T14794] dvb-usb: bulk message failed: -22 (3/0) [ 463.590692][ T5929] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.653233][T14824] loop3: detected capacity change from 0 to 512 [ 463.702598][ T5929] usb 1-1: selecting invalid altsetting 6 [ 463.726239][T14824] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.3674: dx entry: limit 0 != root limit 125 [ 463.735698][ T5929] usb 1-1: digital interface selection failed (-22) [ 463.748403][T14824] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3674: Corrupt directory, running e2fsck is recommended [ 463.794153][ T5929] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 463.825462][ T5929] usb 1-1: setting power OFF [ 463.841501][T14824] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 463.842383][ T5929] dvb-usb: bulk message failed: -22 (2/0) [ 463.864786][T14828] loop4: detected capacity change from 0 to 1024 [ 463.865939][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 463.882653][T14824] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.3674: corrupted in-inode xattr: invalid ea_ino [ 463.909487][T14828] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 463.933414][T14824] EXT4-fs (loop3): Remounting filesystem read-only [ 463.941456][T14824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.943228][ T5929] (NULL device *): no alternate interface [ 463.972794][T14828] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c801e018, mo2=0000] [ 464.068610][T14828] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 2: comm syz.4.3675: lblock 2 mapped to illegal pblock 2 (length 1) [ 464.076618][ T5929] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 464.106887][ T5929] usb 1-1: USB disconnect, device number 29 [ 464.151953][T14828] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 48: comm syz.4.3675: lblock 0 mapped to illegal pblock 48 (length 1) [ 464.184150][T14828] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.3675: Failed to acquire dquot type 0 [ 464.219798][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.261381][T14828] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 464.320866][T14828] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3675: mark_inode_dirty error [ 464.350601][T14828] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 464.403583][T14828] EXT4-fs (loop4): 1 orphan inode deleted [ 464.410763][T14828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.436397][ T3454] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 464.546962][ T3454] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:10: Failed to release dquot type 0 [ 464.660951][T14836] loop3: detected capacity change from 0 to 256 [ 464.680220][T13832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.693288][ T2908] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 464.741464][ T2908] EXT4-fs error (device loop4): ext4_release_dquot:6989: comm kworker/u4:7: Failed to release dquot type 0 [ 464.760455][T14836] FAT-fs (loop3): Directory bread(block 64) failed [ 464.779306][T13832] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 464.782159][T14836] FAT-fs (loop3): Directory bread(block 65) failed [ 464.805783][T14813] loop2: detected capacity change from 0 to 40427 [ 464.829739][T13832] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5939: Corrupt filesystem [ 464.836690][T14836] FAT-fs (loop3): Directory bread(block 66) failed [ 464.854245][T14836] FAT-fs (loop3): Directory bread(block 67) failed [ 464.860995][T14836] FAT-fs (loop3): Directory bread(block 68) failed [ 464.871939][T14813] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 464.879742][T14813] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 464.888865][T13832] EXT4-fs error (device loop4): ext4_quota_off:7237: inode #3: comm syz-executor: mark_inode_dirty error [ 464.915453][T14836] FAT-fs (loop3): Directory bread(block 69) failed [ 464.932352][T14836] FAT-fs (loop3): Directory bread(block 70) failed [ 464.938982][T14836] FAT-fs (loop3): Directory bread(block 71) failed [ 464.952921][T14813] F2FS-fs (loop2): invalid crc value [ 464.967752][T14813] F2FS-fs (loop2): Found nat_bits in checkpoint [ 464.975069][T14836] FAT-fs (loop3): Directory bread(block 72) failed [ 464.982002][T14836] FAT-fs (loop3): Directory bread(block 73) failed [ 465.219241][T14813] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 465.251723][T14813] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 466.198696][T14845] loop4: detected capacity change from 0 to 32768 [ 466.290947][T14845] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 466.290947][T14845] [ 466.367680][T14845] ERROR: (device loop4): remounting filesystem as read-only [ 466.378329][T14848] loop0: detected capacity change from 0 to 32768 [ 466.403741][T14845] ERROR: (device loop4): diWrite: ixpxd invalid [ 466.403741][T14845] [ 466.433372][T14845] ERROR: (device loop4): txCommit: [ 466.433372][T14845] [ 466.476638][T14848] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 466.588202][T14872] netlink: 'syz.3.3692': attribute type 15 has an invalid length. [ 466.749288][T14848] XFS (loop0): Ending clean mount [ 466.975769][ T5780] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 467.508091][T14876] loop2: detected capacity change from 0 to 40427 [ 467.525253][T14876] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 467.549423][T14876] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 467.578261][T14876] F2FS-fs (loop2): invalid crc value [ 467.606925][T14876] F2FS-fs (loop2): Found nat_bits in checkpoint [ 467.746960][T14876] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 467.754822][T14876] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 468.053439][T14900] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3704'. [ 468.403167][T14906] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 468.917853][T14922] vivid-000: disconnect [ 468.938591][T14921] vivid-000: reconnect [ 469.375718][T14932] netem: change failed [ 469.390763][T14916] loop3: detected capacity change from 0 to 32768 [ 469.402033][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 469.446642][T14916] JBD2: Ignoring recovery information on journal [ 469.602446][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 469.616381][ T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 469.632928][T14916] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 469.662488][ T9] usb 3-1: config 179 has no interface number 0 [ 469.669178][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 469.710305][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 469.736905][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 469.787818][ T9] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 469.814351][ T9] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 469.843029][ T9] usb 3-1: config 179 interface 65 has no altsetting 0 [ 469.853184][ T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 469.880040][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.976070][ T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input31 [ 469.978864][T14926] loop0: detected capacity change from 0 to 32768 [ 470.257281][ T5820] usb 3-1: USB disconnect, device number 29 [ 470.263496][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 470.286705][ T5778] ocfs2: Unmounting device (7,3) on (node local) [ 470.295703][ T5820] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 470.421698][T14935] loop4: detected capacity change from 0 to 32768 [ 470.522209][T14935] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 470.667738][T14948] loop3: detected capacity change from 0 to 128 [ 470.876776][T14935] XFS (loop4): Ending clean mount [ 471.010272][T14950] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.122470][T13832] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 471.433792][T14938] loop0: detected capacity change from 0 to 32768 [ 471.463563][T14938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.3721 (14938) [ 471.566437][T14938] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 471.609414][T14938] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 471.643208][T14938] BTRFS info (device loop0): setting nodatasum [ 471.650361][T14938] BTRFS info (device loop0): force zlib compression, level 3 [ 471.678913][T14938] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 471.721970][T14938] BTRFS info (device loop0): use lzo compression, level 0 [ 471.751995][T14938] BTRFS info (device loop0): turning on flush-on-commit [ 471.760003][T14938] BTRFS info (device loop0): enabling auto defrag [ 471.791534][T14938] BTRFS info (device loop0): max_inline at 4096 [ 471.832016][T14938] BTRFS info (device loop0): using free space tree [ 471.851613][T14962] ip6tnl1: entered allmulticast mode [ 471.979462][T14938] BTRFS info (device loop0): enabling ssd optimizations [ 472.148509][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 472.148526][ T28] audit: type=1800 audit(472.093:259): pid=14938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3721" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 472.211518][T14979] loop2: detected capacity change from 0 to 4096 [ 472.281917][T14988] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4) [ 472.289767][T14988] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 472.322307][T14988] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 472.333632][T14979] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 472.352809][ T5780] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 472.415144][T14979] ntfs3: loop2: Failed to load $Extend (-22). [ 472.421300][T14979] ntfs3: loop2: Failed to initialize $Extend. [ 472.575947][ T5794] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5794) [ 473.027933][T15003] tmpfs: Cannot change global quota limit on remount [ 473.083083][T15004] loop2: detected capacity change from 0 to 1024 [ 473.213858][T15004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.514692][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.588054][T15015] mkiss: ax0: crc mode is auto. [ 473.732075][ T28] audit: type=1326 audit(473.673:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.2.3746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 473.810894][ T28] audit: type=1326 audit(473.673:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.2.3746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 473.916055][ T28] audit: type=1326 audit(473.743:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.2.3746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 473.999464][ T28] audit: type=1326 audit(473.763:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.2.3746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 474.057643][ T28] audit: type=1326 audit(473.763:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.2.3746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 474.099025][ T28] audit: type=1326 audit(473.793:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.2.3746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 474.182248][ T28] audit: type=1326 audit(473.793:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.2.3746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 474.253874][ T28] audit: type=1326 audit(473.793:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15019 comm="syz.2.3746" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 474.418413][T15038] bridge0: port 3(syz_tun) entered blocking state [ 474.460204][T15038] bridge0: port 3(syz_tun) entered disabled state [ 474.472649][T15038] syz_tun: entered allmulticast mode [ 474.497097][T15038] syz_tun: entered promiscuous mode [ 474.799207][T15048] loop3: detected capacity change from 0 to 64 [ 475.111041][T15055] loop2: detected capacity change from 0 to 1024 [ 475.168052][T15058] loop0: detected capacity change from 0 to 512 [ 475.183239][T15058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.215272][T15058] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 475.230809][T15058] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 475.252770][T15058] EXT4-fs (loop0): orphan cleanup on readonly fs [ 475.259272][T15058] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 475.337571][T15058] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 475.360198][T15058] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 475.368894][T15058] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.3764: bg 0: block 40: padding at end of block bitmap is not set [ 475.393848][T15058] EXT4-fs (loop0): Remounting filesystem read-only [ 475.406314][T15058] EXT4-fs (loop0): 1 truncate cleaned up [ 475.419248][T15058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 475.544926][T15065] loop2: detected capacity change from 0 to 256 [ 475.650089][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.902528][ T1191] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 476.105988][T15080] batadv0: entered promiscuous mode [ 476.113702][ T1191] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.124189][T15080] macsec2: entered allmulticast mode [ 476.124210][T15080] batadv0: entered allmulticast mode [ 476.153005][T15080] batadv0: left allmulticast mode [ 476.156527][ T1191] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 476.171586][T15080] batadv0: left promiscuous mode [ 476.183527][ T1191] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.199552][ T1191] usb 4-1: config 0 interface 0 has no altsetting 0 [ 476.208992][ T1191] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 476.231534][ T1191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.272517][ T1191] usb 4-1: config 0 descriptor?? [ 476.297713][ T1191] usbhid 4-1:0.0: fixing wrong optional hid class descriptors count [ 476.720565][ T1191] sony 0003:054C:0268.0019: unknown main item tag 0x0 [ 476.745975][ T1191] sony 0003:054C:0268.0019: unknown global tag 0xd [ 476.772244][ T1191] sony 0003:054C:0268.0019: item 0 4 1 13 parsing failed [ 476.801676][ T1191] sony 0003:054C:0268.0019: parse failed [ 476.822582][ T1191] sony: probe of 0003:054C:0268.0019 failed with error -22 [ 476.832297][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3783'. [ 476.976972][ T1191] usb 4-1: USB disconnect, device number 18 [ 477.064654][T15104] netlink: 'syz.4.3786': attribute type 2 has an invalid length. [ 477.573993][T15123] loop0: detected capacity change from 0 to 512 [ 477.659941][T15123] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 477.692143][T15123] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 477.710679][T15123] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 477.725020][T15128] loop4: detected capacity change from 0 to 256 [ 477.743844][T15123] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 477.766289][T15123] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 477.817668][T15123] EXT4-fs (loop0): failed to initialize system zone (-117) [ 477.832329][T15131] loop3: detected capacity change from 0 to 256 [ 477.864161][T15123] EXT4-fs (loop0): mount failed [ 477.886210][T15131] exfat: Deprecated parameter 'utf8' [ 477.891576][T15131] exfat: Deprecated parameter 'utf8' [ 477.926211][T15131] exfat: Deprecated parameter 'namecase' [ 477.963078][T15133] loop4: detected capacity change from 0 to 1024 [ 478.046573][T15131] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 478.245731][T15138] loop2: detected capacity change from 0 to 1024 [ 478.474994][T15144] netlink: 'syz.2.3805': attribute type 2 has an invalid length. [ 478.508300][T15144] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3805'. [ 478.519551][T15146] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 478.549800][T15146] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 478.770072][T15152] loop4: detected capacity change from 0 to 512 [ 478.791560][T15152] EXT4-fs: Ignoring removed oldalloc option [ 478.830626][T15152] EXT4-fs: Ignoring removed bh option [ 478.853865][T15152] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 478.956705][T15152] EXT4-fs (loop4): 1 truncate cleaned up [ 479.007909][T15152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.259987][T15141] loop0: detected capacity change from 0 to 40427 [ 479.297863][T15141] F2FS-fs (loop0): invalid crc value [ 479.341251][T13832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.409194][T15141] F2FS-fs (loop0): Found nat_bits in checkpoint [ 479.472053][ T5820] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 479.560089][T15171] loop4: detected capacity change from 0 to 256 [ 479.586774][T15141] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 479.600442][T15171] exfat: Deprecated parameter 'utf8' [ 479.633015][T15171] exfat: Deprecated parameter 'utf8' [ 479.638530][T15171] exfat: Deprecated parameter 'namecase' [ 479.671971][ T5820] usb 3-1: Using ep0 maxpacket: 16 [ 479.685050][ T5820] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.719080][ T5820] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 479.742660][ T5820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 479.749469][ T5820] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 479.763692][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.804721][ T5820] usb 3-1: config 0 descriptor?? [ 479.815776][T15171] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 480.210609][T15178] loop4: detected capacity change from 0 to 2048 [ 480.236245][ T5820] logitech 0003:046D:C298.001A: unknown main item tag 0x3 [ 480.251921][ T5820] logitech 0003:046D:C298.001A: unknown main item tag 0x0 [ 480.268385][ T5820] logitech 0003:046D:C298.001A: item 0 1 0 11 parsing failed [ 480.287536][ T5820] logitech 0003:046D:C298.001A: parse failed [ 480.301437][T15178] NILFS (loop4): invalid segment: Magic number mismatch [ 480.309769][ T5820] logitech: probe of 0003:046D:C298.001A failed with error -22 [ 480.322246][T15178] NILFS (loop4): trying rollback from an earlier position [ 480.369239][T15178] NILFS (loop4): recovery complete [ 480.416999][T15183] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 480.478405][ T5820] usb 3-1: USB disconnect, device number 30 [ 480.578244][T15178] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 480.612756][T15186] netlink: 'syz.0.3815': attribute type 7 has an invalid length. [ 480.627949][T15186] netlink: 'syz.0.3815': attribute type 8 has an invalid length. [ 480.639141][T15185] netlink: 'syz.0.3815': attribute type 7 has an invalid length. [ 480.649334][T15185] netlink: 'syz.0.3815': attribute type 8 has an invalid length. [ 480.745474][T15188] loop3: detected capacity change from 0 to 4096 [ 480.846548][T15193] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.493683][T15210] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 481.966623][T15224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 481.991937][T15224] EXT4-fs: Ignoring removed mblk_io_submit option [ 482.034796][T15224] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 482.066084][T15224] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 482.112104][T15224] EXT4-fs (loop2): 1 truncate cleaned up [ 482.119170][T15224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.287735][T15224] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 4: comm syz.2.3837: lblock 0 mapped to illegal pblock 4 (length 1) [ 482.314177][T15235] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 482.347735][T15224] EXT4-fs (loop2): Remounting filesystem read-only [ 482.397488][ T28] audit: type=1800 audit(482.343:268): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3842" name="file2" dev="loop0" ino=1048769 res=0 errno=0 [ 482.503580][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.863224][T15247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3849'. [ 483.077737][T15255] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3853'. [ 483.147276][T15259] netlink: 'syz.3.3854': attribute type 66 has an invalid length. [ 483.486479][T15269] set_capacity_and_notify: 4 callbacks suppressed [ 483.486496][T15269] loop3: detected capacity change from 0 to 2048 [ 483.500577][ T9] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 483.525253][T15269] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 483.548796][T15270] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 483.694183][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 483.710754][ T9] usb 1-1: config 0 has no interface number 0 [ 483.734295][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 483.749892][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.758371][ T9] usb 1-1: Product: syz [ 483.762938][ T9] usb 1-1: Manufacturer: syz [ 483.768467][ T9] usb 1-1: SerialNumber: syz [ 483.781139][ T9] usb 1-1: config 0 descriptor?? [ 483.799605][ T9] usb 1-1: selecting invalid altsetting 1 [ 483.810793][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 483.817413][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 483.958936][ T9] DVB: Unable to find symbol stv0299_attach() [ 484.007919][T15267] loop2: detected capacity change from 0 to 32768 [ 484.088237][T15267] [ 484.088237][T15267] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 484.088237][T15267] [ 484.088531][ T9] DVB: Unable to find symbol tda8083_attach() [ 484.142672][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 484.159263][ T9] usb 1-1: USB disconnect, device number 30 [ 484.258592][ T2928] ERROR: (device loop2): diWrite: ixpxd invalid [ 484.258592][ T2928] [ 484.279442][ T2928] ERROR: (device loop2): txCommit: [ 484.279442][ T2928] [ 484.298351][ T2928] jfs_write_inode: jfs_commit_inode failed! [ 484.313182][ T5777] [ 484.313182][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 484.313182][ T5777] [ 484.365469][ T5777] [ 484.365469][ T5777] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 484.365469][ T5777] [ 484.950992][ T27] IPVS: starting estimator thread 0... [ 484.986347][T15295] loop3: detected capacity change from 0 to 4096 [ 485.042920][T15298] IPVS: using max 19 ests per chain, 45600 per kthread [ 485.072470][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 485.081536][T15300] netlink: 'syz.2.3873': attribute type 3 has an invalid length. [ 485.088791][T15295] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 485.099192][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3873'. [ 485.272083][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 485.284278][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 485.306256][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.360708][ T9] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 485.376598][T15306] loop2: detected capacity change from 0 to 512 [ 485.385692][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.415734][ T9] usb 1-1: config 0 descriptor?? [ 485.437221][T15306] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -13 [ 485.482187][T15306] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #13: comm syz.2.3876: iget: bad i_size value: 12154757448730 [ 485.518385][T15306] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.3876: couldn't read orphan inode 13 (err -117) [ 485.577629][T15306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.731540][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.880942][ T9] konepure 0003:1E7D:2DBE.001B: unknown main item tag 0x2 [ 485.889436][T15314] loop2: detected capacity change from 0 to 256 [ 485.905644][ T9] konepure 0003:1E7D:2DBE.001B: bogus close delimiter [ 485.914856][ T9] konepure 0003:1E7D:2DBE.001B: item 0 0 2 10 parsing failed [ 485.923742][ T9] konepure 0003:1E7D:2DBE.001B: parse failed [ 485.938518][ T9] konepure: probe of 0003:1E7D:2DBE.001B failed with error -22 [ 485.980472][T15314] FAT-fs (loop2): Directory bread(block 64) failed [ 485.989719][T15314] FAT-fs (loop2): Directory bread(block 65) failed [ 486.010074][T15314] FAT-fs (loop2): Directory bread(block 66) failed [ 486.022093][T15314] FAT-fs (loop2): Directory bread(block 67) failed [ 486.028786][T15314] FAT-fs (loop2): Directory bread(block 68) failed [ 486.040024][T15314] FAT-fs (loop2): Directory bread(block 69) failed [ 486.048984][T15314] FAT-fs (loop2): Directory bread(block 70) failed [ 486.057577][T15314] FAT-fs (loop2): Directory bread(block 71) failed [ 486.064360][T15314] FAT-fs (loop2): Directory bread(block 72) failed [ 486.091356][T15314] FAT-fs (loop2): Directory bread(block 73) failed [ 486.136129][ T9] usb 1-1: USB disconnect, device number 31 [ 486.151754][T15318] ip6gretap2: entered promiscuous mode [ 486.381226][T15322] loop2: detected capacity change from 0 to 1024 [ 486.453351][ T28] audit: type=1800 audit(486.403:269): pid=15322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3883" name="file2" dev="loop2" ino=21 res=0 errno=0 [ 486.481111][T15324] loop3: detected capacity change from 0 to 2048 [ 486.512893][T15324] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 487.046509][T15341] loop3: detected capacity change from 0 to 256 [ 487.079569][T15341] FAT-fs (loop3): Directory bread(block 64) failed [ 487.092305][T15341] FAT-fs (loop3): Directory bread(block 65) failed [ 487.099000][T15341] FAT-fs (loop3): Directory bread(block 66) failed [ 487.132368][T15341] FAT-fs (loop3): Directory bread(block 67) failed [ 487.139587][T15341] FAT-fs (loop3): Directory bread(block 68) failed [ 487.162144][T15341] FAT-fs (loop3): Directory bread(block 69) failed [ 487.203047][T15341] FAT-fs (loop3): Directory bread(block 70) failed [ 487.209647][T15341] FAT-fs (loop3): Directory bread(block 71) failed [ 487.228917][T15341] FAT-fs (loop3): Directory bread(block 72) failed [ 487.244763][T15341] FAT-fs (loop3): Directory bread(block 73) failed [ 487.451127][T15345] loop4: detected capacity change from 0 to 1024 [ 487.956068][T15339] loop0: detected capacity change from 0 to 40427 [ 488.007733][T15339] F2FS-fs (loop0): invalid crc value [ 488.050133][T15339] F2FS-fs (loop0): Found nat_bits in checkpoint [ 488.188231][T15359] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 488.222971][T15339] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 488.277527][T15353] syz.3.3897: attempt to access beyond end of device [ 488.277527][T15353] loop3: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096 [ 488.360238][T15353] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 488.489330][ T5780] syz-executor: attempt to access beyond end of device [ 488.489330][ T5780] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 488.536094][ T5780] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 488.692260][ T1191] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 488.797751][T15366] set_capacity_and_notify: 2 callbacks suppressed [ 488.797768][T15366] loop4: detected capacity change from 0 to 256 [ 488.833447][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 488.875487][T15366] FAT-fs (loop4): Directory bread(block 64) failed [ 488.898290][T15368] loop3: detected capacity change from 0 to 2048 [ 488.898789][ T1191] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 488.905357][T15366] FAT-fs (loop4): Directory bread(block 65) failed [ 488.929106][ T1191] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 488.956118][T15366] FAT-fs (loop4): Directory bread(block 66) failed [ 488.956277][ T1191] usb 3-1: Product: syz [ 488.979071][ T1191] usb 3-1: Manufacturer: syz [ 488.984097][ T1191] usb 3-1: SerialNumber: syz [ 488.992366][ T1191] usb 3-1: config 0 descriptor?? [ 489.014119][T15368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.014618][T15366] FAT-fs (loop4): Directory bread(block 67) failed [ 489.085316][T15366] FAT-fs (loop4): Directory bread(block 68) failed [ 489.103201][T15366] FAT-fs (loop4): Directory bread(block 69) failed [ 489.109937][T15366] FAT-fs (loop4): Directory bread(block 70) failed [ 489.154802][T15366] FAT-fs (loop4): Directory bread(block 71) failed [ 489.161542][T15366] FAT-fs (loop4): Directory bread(block 72) failed [ 489.205785][T15366] FAT-fs (loop4): Directory bread(block 73) failed [ 489.263718][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.435561][ T27] usb 3-1: USB disconnect, device number 31 [ 489.889982][T15385] openvswitch: netlink: Actions may not be safe on all matching packets [ 490.542262][T15407] loop0: detected capacity change from 0 to 1024 [ 490.568813][T15407] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 491.020747][T15415] loop0: detected capacity change from 0 to 16 [ 491.069813][T15415] erofs: (device loop0): mounted with root inode @ nid 36. [ 491.284174][T15399] loop2: detected capacity change from 0 to 40427 [ 491.332259][T15399] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 491.338954][T15399] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 491.399016][T15399] F2FS-fs (loop2): Found nat_bits in checkpoint [ 491.427212][T15425] usb usb8: usbfs: process 15425 (syz.0.3927) did not claim interface 0 before use [ 491.591151][T15399] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 491.622057][T15399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 491.636868][T15428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3929'. [ 491.765784][ T5777] syz-executor: attempt to access beyond end of device [ 491.765784][ T5777] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 491.818505][ T5777] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 492.096193][T15436] loop0: detected capacity change from 0 to 256 [ 492.225488][T15436] FAT-fs (loop0): Directory bread(block 64) failed [ 492.233380][T15436] FAT-fs (loop0): Directory bread(block 65) failed [ 492.242344][T15436] FAT-fs (loop0): Directory bread(block 66) failed [ 492.248932][T15436] FAT-fs (loop0): Directory bread(block 67) failed [ 492.312121][T15436] FAT-fs (loop0): Directory bread(block 68) failed [ 492.318819][T15436] FAT-fs (loop0): Directory bread(block 69) failed [ 492.343119][T15436] FAT-fs (loop0): Directory bread(block 70) failed [ 492.349728][T15436] FAT-fs (loop0): Directory bread(block 71) failed [ 492.394072][T15436] FAT-fs (loop0): Directory bread(block 72) failed [ 492.400995][T15436] FAT-fs (loop0): Directory bread(block 73) failed [ 492.612904][T15443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3937'. [ 492.948336][T15453] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3941'. [ 492.967195][T15455] loop2: detected capacity change from 0 to 8 [ 493.022328][T15457] loop3: detected capacity change from 0 to 256 [ 493.080757][T15455] SQUASHFS error: Unable to read directory block [1d0:62] [ 493.107878][T15457] FAT-fs (loop3): Directory bread(block 64) failed [ 493.142513][T15457] FAT-fs (loop3): Directory bread(block 65) failed [ 493.149241][T15457] FAT-fs (loop3): Directory bread(block 66) failed [ 493.215618][T15457] FAT-fs (loop3): Directory bread(block 67) failed [ 493.239513][T15457] FAT-fs (loop3): Directory bread(block 68) failed [ 493.288006][T15457] FAT-fs (loop3): Directory bread(block 69) failed [ 493.305632][T15463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3946'. [ 493.316301][T15457] FAT-fs (loop3): Directory bread(block 70) failed [ 493.341963][T15457] FAT-fs (loop3): Directory bread(block 71) failed [ 493.352381][T15457] FAT-fs (loop3): Directory bread(block 72) failed [ 493.363189][T15457] FAT-fs (loop3): Directory bread(block 73) failed [ 493.821712][T15472] loop0: detected capacity change from 0 to 8192 [ 493.911736][T15472] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 493.953375][T15472] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 494.003978][T15472] REISERFS (device loop0): using ordered data mode [ 494.010566][T15472] reiserfs: using flush barriers [ 494.052588][T15472] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 494.099199][T15472] REISERFS (device loop0): checking transaction log (loop0) [ 494.159598][T15484] loop3: detected capacity change from 0 to 4096 [ 494.256162][T15490] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 494.313585][T15488] loop2: detected capacity change from 0 to 1764 [ 494.361983][T15484] NILFS (loop3): bad btree node (ino=288230376151711747, blocknr=3): level = 0, flags = 0x0, nchildren = 0 [ 494.425432][T15484] NILFS (loop3): error -5 preparing GC: cannot read source blocks [ 494.535942][T15472] REISERFS (device loop0): Using tea hash to sort names [ 494.564669][T15472] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 494.702576][ T1191] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 494.710511][T15494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3960'. [ 494.915469][ T1191] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 494.915500][ T1191] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.915523][ T1191] usb 3-1: config 0 has no interface number 0 [ 494.915565][ T1191] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 494.915610][ T1191] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 494.915635][ T1191] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.923654][ T1191] usb 3-1: config 0 descriptor?? [ 494.958695][ T1191] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 495.213421][T13985] usb 3-1: Failed to submit usb control message: -71 [ 495.213597][T13985] usb 3-1: unable to send the bmi data to the device: -71 [ 495.213618][T13985] usb 3-1: unable to get target info from device [ 495.213649][T13985] usb 3-1: could not get target info (-71) [ 495.213744][T13985] usb 3-1: could not probe fw (-71) [ 495.216140][ T27] usb 3-1: USB disconnect, device number 32 [ 495.322243][T15504] loop0: detected capacity change from 0 to 2048 [ 495.409738][T15504] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c118, mo2=0003] [ 495.409880][T15504] System zones: 0-7 [ 495.417999][T15504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.497562][T15504] EXT4-fs error (device loop0): ext4_ext_precache:637: inode #2: comm syz.0.3962: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 495.634665][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.751031][T15516] loop0: detected capacity change from 0 to 512 [ 495.755817][T15516] EXT4-fs: inline encryption not supported [ 495.761357][T15516] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.3967: bad orphan inode 15 [ 495.763110][T15516] ext4_test_bit(bit=14, block=5) = 0 [ 495.764517][T15516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.984092][ T5780] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.063644][T15521] loop3: detected capacity change from 0 to 1024 [ 496.163210][T15523] loop2: detected capacity change from 0 to 512 [ 496.201632][T15523] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 496.211183][T15523] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 1024: comm syz.2.3970: invalid block [ 496.222741][T15523] EXT4-fs (loop2): 1 truncate cleaned up [ 496.224079][T15523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.383698][T15523] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 496.421227][T15523] EXT4-fs (loop2): can't enable nombcache during remount [ 496.601694][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.802307][ T27] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 497.002962][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 497.021083][ T27] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 497.038779][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 497.070397][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 497.122706][ T27] usb 1-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 497.169018][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.202763][ T27] usb 1-1: config 0 descriptor?? [ 497.208610][T15530] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 497.465427][T15553] loop3: detected capacity change from 0 to 8192 [ 497.538258][T15560] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 497.557334][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3988'. [ 497.575189][T15559] gretap0: entered promiscuous mode [ 497.664279][ T27] wacom 0003:056A:0300.001C: ignoring exceeding usage max [ 497.700404][ T27] wacom 0003:056A:0300.001C: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 497.725984][ T27] wacom 0003:056A:0300.001C: hidraw0: USB HID v0.01 Device [HID 056a:0300] on usb-dummy_hcd.0-1/input0 [ 497.766629][ T27] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0300.001C/input/input32 [ 497.780822][T15562] loop4: detected capacity change from 0 to 256 [ 497.872704][T15562] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 497.934388][T15562] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 497.973627][ T27] usb 1-1: USB disconnect, device number 32 [ 498.514581][T15557] loop2: detected capacity change from 0 to 32768 [ 498.588961][T15557] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 498.976499][T15557] XFS (loop2): Ending clean mount [ 499.031626][T15557] XFS (loop2): Quotacheck needed: Please wait. [ 499.129869][T15557] XFS (loop2): Quotacheck: Done. [ 499.402500][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 499.477281][T15595] raw_sendmsg: syz.4.4000 forgot to set AF_INET. Fix it! [ 500.217709][ T2928] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.318247][ T2928] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.410912][ T2928] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.569710][ T2928] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.322085][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.342538][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.366818][T15638] loop3: detected capacity change from 0 to 512 [ 501.373866][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.404213][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.415947][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 501.423580][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.460685][T15638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.638205][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.645821][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.723525][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.295347][T15662] loop3: detected capacity change from 0 to 128 [ 502.305451][T15663] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4027'. [ 502.351512][T15658] loop2: detected capacity change from 0 to 4096 [ 502.373352][T15662] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 502.420144][T15658] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 502.487027][T15662] syz.3.4028: attempt to access beyond end of device [ 502.487027][T15662] loop3: rw=2051, sector=112, nr_sectors = 940 limit=128 [ 502.644702][T15658] ntfs: volume version 3.1. [ 502.666548][T15658] ntfs: (device loop2): ntfs_mark_quotas_out_of_date(): Quota defaults entry version 0x5 is not supported. [ 502.702392][T15658] ntfs: (device loop2): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 502.990399][T15675] loop3: detected capacity change from 0 to 64 [ 503.004431][T15675] hfs: unable to read volume bitmap [ 503.010914][T15675] hfs: can't find a HFS filesystem on dev loop3 [ 503.126590][T15675] netlink: 'syz.3.4031': attribute type 1 has an invalid length. [ 503.553011][ T5090] Bluetooth: hci2: command tx timeout [ 503.710079][T15633] chnl_net:caif_netlink_parms(): no params data found [ 503.756908][T15692] loop2: detected capacity change from 0 to 128 [ 503.784044][T15692] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 503.912139][T15692] syz.2.4037: attempt to access beyond end of device [ 503.912139][T15692] loop2: rw=2051, sector=112, nr_sectors = 940 limit=128 [ 504.131713][T15698] loop2: detected capacity change from 0 to 16 [ 504.236635][T15698] erofs: (device loop2): mounted with root inode @ nid 36. [ 504.340484][T15698] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46 [ 504.694931][T15633] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.721123][T15633] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.749986][T15633] bridge_slave_0: entered allmulticast mode [ 504.781727][T15633] bridge_slave_0: entered promiscuous mode [ 504.804842][T15633] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.828200][T15633] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.843067][T15633] bridge_slave_1: entered allmulticast mode [ 504.855616][T15694] loop3: detected capacity change from 0 to 32768 [ 504.867739][T15633] bridge_slave_1: entered promiscuous mode [ 504.911689][ T2928] hsr_slave_0: left promiscuous mode [ 504.928972][ T2928] hsr_slave_1: left promiscuous mode [ 504.945610][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.954361][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.964710][T15694] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 504.977083][ T2928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.990910][ T2928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.011689][ T2928] bridge_slave_1: left allmulticast mode [ 505.020862][ T2928] bridge_slave_1: left promiscuous mode [ 505.030038][ T2928] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.059255][ T2928] bridge_slave_0: left allmulticast mode [ 505.070878][ T2928] bridge_slave_0: left promiscuous mode [ 505.077653][ T2928] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.127529][T15694] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 505.164150][ T2928] veth1_macvtap: left promiscuous mode [ 505.173422][ T2928] veth0_macvtap: left promiscuous mode [ 505.186508][ T2928] veth1_vlan: left promiscuous mode [ 505.198470][ T2928] veth0_vlan: left promiscuous mode [ 505.217692][T15694] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 505.269418][T15694] XFS (loop3): Ending clean mount [ 505.437822][ T5778] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 505.642731][ T5090] Bluetooth: hci2: command tx timeout [ 505.812885][ T28] audit: type=1400 audit(505.753:270): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D03 pid=15733 comm="syz.0.4048" [ 506.195904][T15743] loop3: detected capacity change from 0 to 1024 [ 506.219675][T15743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.284509][T15743] EXT4-fs (loop3): resizing filesystem from 512 to 0 blocks [ 506.292215][T15743] EXT4-fs warning (device loop3): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 506.322183][ T5783] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 506.381624][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 506.533627][ T5783] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 506.542094][ T5783] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 506.587751][ T5783] usb 1-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 506.598665][ T5783] usb 1-1: config 220 has no interface number 2 [ 506.621388][ T5783] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 506.641449][ T5783] usb 1-1: config 220 interface 0 has no altsetting 0 [ 506.666457][ T5783] usb 1-1: config 220 interface 76 has no altsetting 0 [ 506.674188][ T5783] usb 1-1: config 220 interface 1 has no altsetting 0 [ 506.697951][ T5783] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 506.711962][ T5783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.720445][ T5783] usb 1-1: Product: syz [ 506.750151][ T5783] usb 1-1: Manufacturer: syz [ 506.756614][ T5783] usb 1-1: SerialNumber: syz [ 507.010814][ T5783] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 507.019379][ T5783] usb 1-1: No valid video chain found. [ 507.035312][ T5783] usb 1-1: selecting invalid altsetting 0 [ 507.103855][ T5783] usb 1-1: selecting invalid altsetting 0 [ 507.109666][ T5783] usbtest: probe of 1-1:220.1 failed with error -22 [ 507.149722][ T5783] usb 1-1: USB disconnect, device number 33 [ 507.316410][ T2928] team0 (unregistering): Port device team_slave_1 removed [ 507.399259][ T2928] team0 (unregistering): Port device team_slave_0 removed [ 507.399468][T15753] loop3: detected capacity change from 0 to 32768 [ 507.485886][ T2928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.531260][T15753] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 507.579836][ T2928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.679627][T15763] loop0: detected capacity change from 0 to 2048 [ 507.694335][T15763] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 507.705244][T15763] NILFS (loop0): mounting unchecked fs [ 507.713957][ T5090] Bluetooth: hci2: command tx timeout [ 507.801454][T15763] NILFS (loop0): recovery complete [ 507.814308][T15753] XFS (loop3): Ending clean mount [ 507.843549][T15764] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 508.167868][ T5778] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 508.573167][T15773] loop3: detected capacity change from 0 to 256 [ 508.634306][T15773] FAT-fs (loop3): Directory bread(block 64) failed [ 508.641000][T15773] FAT-fs (loop3): Directory bread(block 65) failed [ 508.656019][T15773] FAT-fs (loop3): Directory bread(block 66) failed [ 508.666931][T15773] FAT-fs (loop3): Directory bread(block 67) failed [ 508.678005][T15773] FAT-fs (loop3): Directory bread(block 68) failed [ 508.688524][T15773] FAT-fs (loop3): Directory bread(block 69) failed [ 508.695239][T15773] FAT-fs (loop3): Directory bread(block 70) failed [ 508.701794][T15773] FAT-fs (loop3): Directory bread(block 71) failed [ 508.708482][T15773] FAT-fs (loop3): Directory bread(block 72) failed [ 508.716115][T15773] FAT-fs (loop3): Directory bread(block 73) failed [ 508.947980][ T2928] bond0 (unregistering): Released all slaves [ 509.169969][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4058'. [ 509.180200][T15771] tipc: New replicast peer: 172.30.1.0 [ 509.210466][T15771] tipc: Enabled bearer , priority 10 [ 509.364002][T15633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.414322][T15633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.541046][T15633] team0: Port device team_slave_0 added [ 509.576843][T15633] team0: Port device team_slave_1 added [ 509.641070][T15633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.656888][T15633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.696595][T15633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.730360][T15633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.741322][T15633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.775269][T15633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.778850][T15775] loop3: detected capacity change from 0 to 32768 [ 509.786719][ T27] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 509.792654][ T5090] Bluetooth: hci2: command tx timeout [ 509.887898][T15775] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.030732][T15633] hsr_slave_0: entered promiscuous mode [ 510.036751][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 510.045398][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 510.063758][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 510.085579][T15633] hsr_slave_1: entered promiscuous mode [ 510.095837][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 510.112053][T15633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.125234][T15633] Cannot create hsr debugfs directory [ 510.135387][ T27] usb 3-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 510.168856][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.181257][T15775] XFS (loop3): Ending clean mount [ 510.204008][ T27] usb 3-1: config 0 descriptor?? [ 510.215336][T15775] XFS (loop3): Quotacheck needed: Please wait. [ 510.223816][T15784] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 510.298010][T15775] XFS (loop3): Quotacheck: Done. [ 510.601662][ T5778] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 510.617319][T15808] Bluetooth: MGMT ver 1.22 [ 510.716165][ T27] wacom 0003:056A:0300.001D: ignoring exceeding usage max [ 510.765217][ T27] wacom 0003:056A:0300.001D: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 510.838043][ T27] wacom 0003:056A:0300.001D: hidraw0: USB HID v0.01 Device [HID 056a:0300] on usb-dummy_hcd.2-1/input0 [ 510.904195][ T27] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0300.001D/input/input35 [ 511.083879][T15633] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.107218][ T27] usb 3-1: USB disconnect, device number 33 [ 511.114344][T15817] loop0: detected capacity change from 0 to 256 [ 511.168418][T15633] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 511.181779][T15814] fido_id[15814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 511.253926][T15633] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 511.281637][T15817] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 511.326306][T15633] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 511.632305][T15633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.681594][T15633] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.739428][ T2928] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.746676][ T2928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.798192][T13985] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.805430][T13985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.949545][T15633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.672122][ T5792] Bluetooth: hci2: command 0x0401 tx timeout [ 512.672128][ T5090] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 512.696656][T15633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.100449][T15828] loop3: detected capacity change from 0 to 40427 [ 513.206878][T15828] F2FS-fs (loop3): Found nat_bits in checkpoint [ 513.471930][T15828] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 513.530461][T15633] veth0_vlan: entered promiscuous mode [ 513.598958][T15633] veth1_vlan: entered promiscuous mode [ 513.742216][T15633] veth0_macvtap: entered promiscuous mode [ 513.784800][T15633] veth1_macvtap: entered promiscuous mode [ 513.805014][ T5778] syz-executor: attempt to access beyond end of device [ 513.805014][ T5778] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 513.869561][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 513.882746][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.931938][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.958432][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.981882][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.002539][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.024519][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.063046][T15633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.115859][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.162098][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.195039][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.222102][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.251958][T15633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 514.277907][T15633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.303802][T15633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.344889][T15633] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.380925][T15633] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.401915][T15633] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.432176][T15633] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.877905][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.899381][T15904] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 514.922509][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.026191][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.051925][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.257579][T15911] loop2: detected capacity change from 0 to 256 [ 515.422368][T15911] FAT-fs (loop2): Directory bread(block 64) failed [ 515.429043][T15911] FAT-fs (loop2): Directory bread(block 65) failed [ 515.465690][T15911] FAT-fs (loop2): Directory bread(block 66) failed [ 515.493482][T15911] FAT-fs (loop2): Directory bread(block 67) failed [ 515.500927][T15911] FAT-fs (loop2): Directory bread(block 68) failed [ 515.544076][T15911] FAT-fs (loop2): Directory bread(block 69) failed [ 515.550780][T15911] FAT-fs (loop2): Directory bread(block 70) failed [ 515.591575][T15920] netlink: 'syz.3.4090': attribute type 8 has an invalid length. [ 515.600040][T15911] FAT-fs (loop2): Directory bread(block 71) failed [ 515.630713][T15911] FAT-fs (loop2): Directory bread(block 72) failed [ 515.662552][T15911] FAT-fs (loop2): Directory bread(block 73) failed [ 515.830895][T15926] loop3: detected capacity change from 0 to 128 [ 516.217928][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'. [ 516.363364][T15943] netlink: 'syz.0.4099': attribute type 3 has an invalid length. [ 516.531717][T15946] loop2: detected capacity change from 0 to 2048 [ 516.608125][T15946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.644321][T15947] loop3: detected capacity change from 0 to 4096 [ 516.770704][T15958] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 516.806308][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.168155][T15966] loop2: detected capacity change from 0 to 1024 [ 517.232072][T15972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4107'. [ 517.266579][T15966] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 518.122339][T15997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4119'. [ 519.205363][T16031] ipvlan2: entered promiscuous mode [ 519.236936][T16031] bridge0: port 3(ipvlan2) entered blocking state [ 519.252476][T16031] bridge0: port 3(ipvlan2) entered disabled state [ 519.272705][T16031] ipvlan2: entered allmulticast mode [ 519.290924][T16031] bridge0: entered allmulticast mode [ 519.314353][T16031] ipvlan2: left allmulticast mode [ 519.335953][T16031] bridge0: left allmulticast mode [ 519.406321][T16000] loop0: detected capacity change from 0 to 32768 [ 519.433269][T16000] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.4120 (16000) [ 519.472315][T16000] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 519.519380][T16000] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 519.555779][T16000] BTRFS info (device loop0): using free space tree [ 519.831220][T16000] BTRFS info (device loop0): enabling ssd optimizations [ 519.882758][T16000] BTRFS info (device loop0): auto enabling async discard [ 520.015856][T16000] BTRFS info (device loop0): device stats zeroed by syz.0.4120 (16000) [ 520.144771][ T5780] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 520.659355][T16086] vivid-000: disconnect [ 520.682253][T16084] vivid-000: reconnect [ 522.620314][T16143] loop2: detected capacity change from 0 to 128 [ 522.664529][T16143] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 522.718136][T16115] loop0: detected capacity change from 0 to 32768 [ 522.769306][T16143] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.829169][T16115] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.030001][T16115] XFS (loop0): Ending clean mount [ 523.068930][T16115] XFS (loop0): Quotacheck needed: Please wait. [ 523.130536][ T28] audit: type=1326 audit(523.073:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.2.4167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 523.245656][T16115] XFS (loop0): Quotacheck: Done. [ 523.262187][ T28] audit: type=1326 audit(523.073:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.2.4167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 523.355324][ T28] audit: type=1326 audit(523.083:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.2.4167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 523.455627][ T28] audit: type=1326 audit(523.083:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16157 comm="syz.2.4167" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21699ce59 code=0x7ffc0000 [ 523.526073][ T5780] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 523.785703][T16137] loop5: detected capacity change from 0 to 32768 [ 523.877898][T16137] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 524.013548][T16137] XFS (loop5): Ending clean mount [ 524.336988][T15633] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 524.493579][T16196] comedi comedi3: pcmda12: I/O port conflict (0x100,16) [ 525.085738][T16188] loop3: detected capacity change from 0 to 32768 [ 525.122113][T16188] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.4174 (16188) [ 525.195227][T16188] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 525.232145][T16188] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 525.240874][T16188] BTRFS info (device loop3): enabling auto defrag [ 525.286987][T16206] loop2: detected capacity change from 0 to 4096 [ 525.292831][T16188] BTRFS info (device loop3): use no compression [ 525.299720][T16188] BTRFS info (device loop3): max_inline at 4096 [ 525.342429][T16188] BTRFS info (device loop3): using free space tree [ 525.382020][T16211] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.528419][T16200] loop0: detected capacity change from 0 to 32768 [ 525.532406][T16188] BTRFS info (device loop3): enabling ssd optimizations [ 525.557634][T16206] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 525.568305][T16224] loop5: detected capacity change from 0 to 1024 [ 525.586304][T16188] BTRFS info (device loop3): auto enabling async discard [ 525.613588][T16224] EXT4-fs: Ignoring removed nomblk_io_submit option [ 525.638409][T16200] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 525.691420][T16224] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 525.719702][T16224] EXT4-fs (loop5): Test dummy encryption mode enabled [ 525.858465][T16224] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.933897][ T5778] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 526.084024][T16200] XFS (loop0): Ending clean mount [ 526.140342][T16200] XFS (loop0): Quotacheck needed: Please wait. [ 526.173720][T15633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.433427][ T5794] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (5794) [ 526.445630][T16200] XFS (loop0): Quotacheck: Done. [ 526.566993][T16247] batadv0: entered promiscuous mode [ 526.610424][T16247] macvtap1: entered promiscuous mode [ 526.643479][T16247] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 526.714502][T16247] batadv0: left promiscuous mode [ 526.872171][ T5780] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 526.901663][T16250] loop5: detected capacity change from 0 to 4096 [ 526.981940][T16253] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 527.058158][T16250] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 527.555887][T16257] loop5: detected capacity change from 0 to 4096 [ 527.581737][T16257] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 527.633924][T16262] netlink: 39 bytes leftover after parsing attributes in process `syz.2.4196'. [ 527.651787][T16262] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4196'. [ 527.718699][T16257] ntfs3: loop5: Failed to initialize $Extend/$Reparse. [ 527.856320][T15633] ntfs3: loop5: ino=1a, ntfs_sync_fs failed, -22. [ 529.033642][T16292] loop2: detected capacity change from 0 to 256 [ 529.070853][T16292] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 529.266712][T16300] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4209'. [ 529.433961][T16302] tipc: Failed to obtain node identity [ 529.441962][T16302] tipc: Enabling of bearer rejected, failed to enable media [ 529.472136][ T5820] usb 1-1: new low-speed USB device number 34 using dummy_hcd [ 529.549689][T16306] loop3: detected capacity change from 0 to 4096 [ 529.578878][T16306] EXT4-fs (loop3): Test dummy encryption mode enabled [ 529.623147][T16306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.676777][ T5820] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 251, using maximum allowed: 30 [ 529.693859][ T5820] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 529.707799][ T5820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 529.714992][ T5820] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 529.725776][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.736884][ T5820] usb 1-1: config 0 descriptor?? [ 529.874281][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.188393][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.220017][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.238848][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.247362][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.261878][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.270610][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.285929][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.298505][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x6 [ 530.309601][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0xd [ 530.320810][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.349290][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.363535][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.377043][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.390492][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.403365][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.411598][ T5820] dragonrise 0003:0079:0006.001E: unknown main item tag 0x0 [ 530.426970][ T5820] dragonrise 0003:0079:0006.001E: hidraw0: USB HID v0.01 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 530.501864][ T5820] dragonrise 0003:0079:0006.001E: no inputs found [ 530.528948][ T5820] dragonrise 0003:0079:0006.001E: force feedback init failed [ 530.569964][ T5820] usb 1-1: USB disconnect, device number 34 [ 530.687637][T16324] fido_id[16324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 530.815886][T16309] loop2: detected capacity change from 0 to 32768 [ 530.897014][T16309] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 531.022345][T16309] XFS (loop2): Ending clean mount [ 531.207139][T16345] loop5: detected capacity change from 0 to 16 [ 531.299922][T16345] erofs: (device loop5): mounted with root inode @ nid 36. [ 531.333348][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 531.649555][T16354] loop3: detected capacity change from 0 to 512 [ 531.670692][T16354] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 531.744407][T16354] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.4231: invalid indirect mapped block 4294967295 (level 0) [ 531.792865][T16357] loop0: detected capacity change from 0 to 1764 [ 531.838388][T16354] EXT4-fs (loop3): Remounting filesystem read-only [ 531.878456][T16354] EXT4-fs (loop3): 1 orphan inode deleted [ 531.924994][T16354] EXT4-fs (loop3): 1 truncate cleaned up [ 531.966386][T16354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.151210][T16366] netlink: 240 bytes leftover after parsing attributes in process `syz.5.4235'. [ 532.172992][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.526388][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4241'. [ 532.728896][ T28] audit: type=1326 audit(532.673:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 532.763594][ T5820] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 532.802177][ T28] audit: type=1326 audit(532.673:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 532.888957][ T28] audit: type=1326 audit(532.673:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f931f15d68e code=0x7ffc0000 [ 532.974542][ T5820] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 532.993050][ T28] audit: type=1326 audit(532.673:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f931f15d68e code=0x7ffc0000 [ 533.014672][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.061428][ T5820] usb 6-1: config 0 descriptor?? [ 533.080097][ T28] audit: type=1326 audit(532.673:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 533.107615][ T5820] cp210x 6-1:0.0: cp210x converter detected [ 533.138411][ T28] audit: type=1326 audit(532.673:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 533.228448][ T28] audit: type=1326 audit(532.703:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 533.348787][ T28] audit: type=1326 audit(532.723:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 533.468268][T16403] loop2: detected capacity change from 0 to 1024 [ 533.475557][ T28] audit: type=1326 audit(532.723:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16385 comm="syz.3.4242" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f931f19ce59 code=0x7ffc0000 [ 533.504338][T16403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.535190][ T5820] usb 6-1: cp210x converter now attached to ttyUSB0 [ 533.573959][T16403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 533.633941][T16410] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.825926][T15898] usb 6-1: USB disconnect, device number 2 [ 533.877572][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.887502][T15898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 533.924329][T15898] cp210x 6-1:0.0: device disconnected [ 534.952863][ T1191] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 535.142352][ T1191] usb 6-1: Using ep0 maxpacket: 32 [ 535.149575][ T1191] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 535.168372][ T1191] usb 6-1: config 0 has no interface number 0 [ 535.185604][ T9552] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 535.202549][ T1191] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 535.227142][ T1191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.251957][ T1191] usb 6-1: Product: syz [ 535.266428][ T1191] usb 6-1: Manufacturer: syz [ 535.271093][ T1191] usb 6-1: SerialNumber: syz [ 535.293473][ T1191] usb 6-1: config 0 descriptor?? [ 535.318738][ T1191] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 535.412977][ T9552] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 535.438768][ T9552] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 535.483033][ T9552] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 535.508964][ T9552] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.533413][ T1191] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 535.553360][ T9552] usb 4-1: config 0 descriptor?? [ 535.563498][T16449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 535.606566][ T1191] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 535.690609][T16446] loop0: detected capacity change from 0 to 32768 [ 535.715788][T16446] XFS (loop0): Cannot mount filesystem with identical rtdev and ddev/logdev. [ 535.947683][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 535.956136][ T1191] usb 6-1: USB disconnect, device number 3 [ 535.970513][ T1191] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 536.024215][ T9552] pantherlord 0003:0F30:0111.001F: unknown main item tag 0x2 [ 536.031693][ T9552] pantherlord 0003:0F30:0111.001F: bogus close delimiter [ 536.059702][ T1191] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 536.079568][ T9552] pantherlord 0003:0F30:0111.001F: item 0 0 2 10 parsing failed [ 536.102691][ T9552] pantherlord 0003:0F30:0111.001F: parse failed [ 536.113061][ T1191] quatech2 6-1:0.51: device disconnected [ 536.122004][ T9552] pantherlord: probe of 0003:0F30:0111.001F failed with error -22 [ 536.213678][T15068] usb 4-1: USB disconnect, device number 19 [ 536.542797][T16479] tipc: Enabled bearer , priority 12 [ 536.684505][T16484] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4273'. [ 536.722383][T16484] xt_time: unknown flags 0xf4 [ 536.982244][T16496] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4278'. [ 537.407216][T16510] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by " [ 537.598896][T16513] loop2: detected capacity change from 0 to 4096 [ 537.779073][T16513] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 537.840563][T16521] loop5: detected capacity change from 0 to 4096 [ 537.889856][T16521] EXT4-fs: Ignoring removed orlov option [ 537.988185][T16521] EXT4-fs (loop5): Test dummy encryption mode enabled [ 538.063303][T16521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.097686][T16513] ntfs3: loop2: ino=9, attr_set_size [ 538.119832][T16513] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 538.208696][T16521] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 538.477014][T15633] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.566952][T16542] loop3: detected capacity change from 0 to 512 [ 538.634159][T16542] EXT4-fs: Ignoring removed oldalloc option [ 538.644634][T16542] EXT4-fs (loop3): 1 truncate cleaned up [ 538.686030][T16542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.733132][T16548] loop2: detected capacity change from 0 to 764 [ 538.787051][T16548] rock: directory entry would overflow storage [ 538.802238][ T28] audit: type=1800 audit(538.733:284): pid=16542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4294" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 538.842030][T16548] rock: sig=0x4654, size=5, remaining=4 [ 538.997896][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.217103][T16559] loop3: detected capacity change from 0 to 256 [ 539.241923][ T9552] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 539.452074][ T9552] usb 6-1: Using ep0 maxpacket: 8 [ 539.463688][ T9552] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.512239][ T9552] usb 6-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.572026][ T9552] usb 6-1: config 0 interface 0 has no altsetting 0 [ 539.582497][ T9552] usb 6-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 539.611511][ T9552] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.635889][ T9552] usb 6-1: config 0 descriptor?? [ 539.876019][T16550] loop0: detected capacity change from 0 to 32768 [ 539.909667][T16550] ERROR: (device loop0): dtSearch: DT_GETPAGE: dtree page corrupt [ 539.909667][T16550] [ 539.933809][T16573] loop2: detected capacity change from 0 to 8 [ 539.950631][T16550] ERROR: (device loop0): remounting filesystem as read-only [ 539.967588][T16550] jfs_lookup: dtSearch returned -5 [ 540.097759][ T9552] smartjoyplus 0003:6666:8804.0020: unknown main item tag 0x0 [ 540.142090][ T9552] smartjoyplus 0003:6666:8804.0020: unknown main item tag 0x0 [ 540.149674][ T9552] smartjoyplus 0003:6666:8804.0020: unknown main item tag 0x0 [ 540.195579][ T9552] smartjoyplus 0003:6666:8804.0020: unknown main item tag 0x0 [ 540.215002][ T9552] smartjoyplus 0003:6666:8804.0020: unknown main item tag 0x0 [ 540.270241][ T9552] smartjoyplus 0003:6666:8804.0020: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.5-1/input0 [ 540.303759][ T9552] smartjoyplus 0003:6666:8804.0020: no output reports found [ 540.362868][ T9552] usb 6-1: USB disconnect, device number 4 [ 540.536717][T16578] fido_id[16578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 540.809934][T16565] loop3: detected capacity change from 0 to 32768 [ 540.863313][T15068] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 540.896844][T16565] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 540.933858][T16565] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 541.030498][T16565] XFS (loop3): Ending clean mount [ 541.082520][T15068] usb 3-1: config 160 has an invalid interface number: 200 but max is 0 [ 541.122091][T16604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.143120][T15068] usb 3-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 541.198346][T16565] XFS (loop3): Quotacheck needed: Please wait. [ 541.208140][T15068] usb 3-1: config 160 has no interface number 0 [ 541.249125][T15068] usb 3-1: config 160 interface 200 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.292922][T15068] usb 3-1: config 160 interface 200 has no altsetting 0 [ 541.312663][T15068] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 541.358144][T15068] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.384807][T15068] usb 3-1: Product: syz [ 541.389067][T15068] usb 3-1: Manufacturer: syz [ 541.403358][T15068] usb 3-1: SerialNumber: syz [ 541.422637][T16565] XFS (loop3): Quotacheck: Done. [ 541.462980][T16609] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4312'. [ 541.647715][T16585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4307'. [ 541.730902][T15068] usb 3-1: USB disconnect, device number 34 [ 541.750717][ T5778] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 542.468206][T16636] [U] ø [ 542.482386][T16638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4320'. [ 542.543518][T16641] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by ""[16641] [ 542.711387][T16648] loop5: detected capacity change from 0 to 256 [ 542.952074][T16656] [ 542.954475][T16656] ====================================================== [ 542.961517][T16656] WARNING: possible circular locking dependency detected [ 542.968566][T16656] syzkaller #0 Not tainted [ 542.972995][T16656] ------------------------------------------------------ [ 542.980024][T16656] syz.2.4328/16656 is trying to acquire lock: [ 542.986102][T16656] ffff88802fddfcb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_dumpreset_obj+0x72/0xa0 [ 542.996590][T16656] [ 542.996590][T16656] but task is already holding lock: [ 543.003975][T16656] ffff88801aade690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 543.014250][T16656] [ 543.014250][T16656] which lock already depends on the new lock. [ 543.014250][T16656] [ 543.024679][T16656] [ 543.024679][T16656] the existing dependency chain (in reverse order) is: [ 543.033714][T16656] [ 543.033714][T16656] -> #2 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 543.042019][T16656] __mutex_lock+0x136/0xcc0 [ 543.047167][T16656] __netlink_dump_start+0xf4/0x810 [ 543.052839][T16656] ip_set_dump+0x15c/0x1f0 [ 543.057881][T16656] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 543.063500][T16656] netlink_rcv_skb+0x241/0x4d0 [ 543.068813][T16656] nfnetlink_rcv+0x2c9/0x24a0 [ 543.074041][T16656] netlink_unicast+0x751/0x8d0 [ 543.079375][T16656] netlink_sendmsg+0x8d0/0xbf0 [ 543.084684][T16656] ____sys_sendmsg+0x5ba/0x960 [ 543.090079][T16656] ___sys_sendmsg+0x2a6/0x360 [ 543.095311][T16656] __se_sys_sendmsg+0x1c2/0x2b0 [ 543.100709][T16656] do_syscall_64+0x55/0xb0 [ 543.105700][T16656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.112225][T16656] [ 543.112225][T16656] -> #1 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 543.120065][T16656] __mutex_lock+0x136/0xcc0 [ 543.125118][T16656] ip_set_nfnl_get_byindex+0x67/0x230 [ 543.131036][T16656] set_match_v1_checkentry+0x71/0x230 [ 543.137040][T16656] xt_check_match+0x4ea/0xc50 [ 543.142342][T16656] __nft_match_init+0x67a/0x8d0 [ 543.147805][T16656] nf_tables_newrule+0x176c/0x2880 [ 543.153467][T16656] nfnetlink_rcv+0x113e/0x24a0 [ 543.158786][T16656] netlink_unicast+0x751/0x8d0 [ 543.164098][T16656] netlink_sendmsg+0x8d0/0xbf0 [ 543.169406][T16656] ____sys_sendmsg+0x5ba/0x960 [ 543.174727][T16656] ___sys_sendmsg+0x2a6/0x360 [ 543.179953][T16656] __se_sys_sendmsg+0x1c2/0x2b0 [ 543.185354][T16656] do_syscall_64+0x55/0xb0 [ 543.190319][T16656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.196787][T16656] [ 543.196787][T16656] -> #0 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 543.205071][T16656] __lock_acquire+0x2df1/0x7d40 [ 543.210514][T16656] lock_acquire+0x19e/0x420 [ 543.215559][T16656] __mutex_lock+0x136/0xcc0 [ 543.220603][T16656] nf_tables_dumpreset_obj+0x72/0xa0 [ 543.226430][T16656] netlink_dump+0x747/0xe50 [ 543.231484][T16656] __netlink_dump_start+0x5f1/0x810 [ 543.237240][T16656] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 543.243441][T16656] nf_tables_getobj_reset+0x1e1/0x630 [ 543.249363][T16656] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 543.254934][T16656] netlink_rcv_skb+0x241/0x4d0 [ 543.260365][T16656] nfnetlink_rcv+0x2c9/0x24a0 [ 543.265598][T16656] netlink_unicast+0x751/0x8d0 [ 543.270905][T16656] netlink_sendmsg+0x8d0/0xbf0 [ 543.276218][T16656] ____sys_sendmsg+0x5ba/0x960 [ 543.281530][T16656] ___sys_sendmsg+0x2a6/0x360 [ 543.286751][T16656] __se_sys_sendmsg+0x1c2/0x2b0 [ 543.292149][T16656] do_syscall_64+0x55/0xb0 [ 543.297112][T16656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.303556][T16656] [ 543.303556][T16656] other info that might help us debug this: [ 543.303556][T16656] [ 543.313798][T16656] Chain exists of: [ 543.313798][T16656] &nft_net->commit_mutex --> nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER [ 543.313798][T16656] [ 543.328246][T16656] Possible unsafe locking scenario: [ 543.328246][T16656] [ 543.335708][T16656] CPU0 CPU1 [ 543.341089][T16656] ---- ---- [ 543.346461][T16656] lock(nlk_cb_mutex-NETFILTER); [ 543.351498][T16656] lock(nfnl_subsys_ipset); [ 543.358622][T16656] lock(nlk_cb_mutex-NETFILTER); [ 543.366200][T16656] lock(&nft_net->commit_mutex); [ 543.371245][T16656] [ 543.371245][T16656] *** DEADLOCK *** [ 543.371245][T16656] [ 543.379409][T16656] 1 lock held by syz.2.4328/16656: [ 543.384529][T16656] #0: ffff88801aade690 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}, at: __netlink_dump_start+0xf4/0x810 [ 543.395175][T16656] [ 543.395175][T16656] stack backtrace: [ 543.401098][T16656] CPU: 1 PID: 16656 Comm: syz.2.4328 Not tainted syzkaller #0 [ 543.408574][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.418666][T16656] Call Trace: [ 543.421987][T16656] [ 543.424952][T16656] dump_stack_lvl+0x18c/0x250 [ 543.429666][T16656] ? load_image+0x420/0x420 [ 543.434234][T16656] ? show_regs_print_info+0x20/0x20 [ 543.439480][T16656] ? print_circular_bug+0x12b/0x1a0 [ 543.444740][T16656] check_noncircular+0x2fc/0x400 [ 543.449725][T16656] ? print_deadlock_bug+0x5d0/0x5d0 [ 543.454959][T16656] ? lockdep_lock+0xf5/0x230 [ 543.459577][T16656] ? _find_first_zero_bit+0xd3/0x100 [ 543.464941][T16656] __lock_acquire+0x2df1/0x7d40 [ 543.469839][T16656] ? mark_lock+0x94/0x320 [ 543.474198][T16656] ? __lock_acquire+0x1273/0x7d40 [ 543.479254][T16656] ? verify_lock_unused+0x140/0x140 [ 543.484504][T16656] ? stack_trace_snprint+0xf0/0xf0 [ 543.489661][T16656] ? kasan_set_track+0x4e/0x70 [ 543.494509][T16656] lock_acquire+0x19e/0x420 [ 543.499073][T16656] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 543.504585][T16656] ? __might_sleep+0xe0/0xe0 [ 543.509242][T16656] ? read_lock_is_recursive+0x20/0x20 [ 543.514681][T16656] __mutex_lock+0x136/0xcc0 [ 543.519227][T16656] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 543.524729][T16656] ? __kmem_cache_alloc_node+0x13a/0x250 [ 543.530415][T16656] ? nft_pernet+0x23/0x230 [ 543.534934][T16656] ? nf_tables_dumpreset_obj+0x72/0xa0 [ 543.540469][T16656] ? __lock_acquire+0x7d40/0x7d40 [ 543.545529][T16656] ? mutex_lock_nested+0x20/0x20 [ 543.550506][T16656] ? nft_pernet+0x23/0x230 [ 543.554991][T16656] ? nft_pernet+0x23/0x230 [ 543.559458][T16656] nf_tables_dumpreset_obj+0x72/0xa0 [ 543.564783][T16656] netlink_dump+0x747/0xe50 [ 543.569327][T16656] ? netlink_lookup+0x200/0x200 [ 543.574219][T16656] ? netlink_lookup+0x30/0x200 [ 543.579008][T16656] ? netlink_lookup+0x30/0x200 [ 543.583815][T16656] ? nf_tables_dumpreset_obj_start+0x114/0x180 [ 543.590019][T16656] __netlink_dump_start+0x5f1/0x810 [ 543.595248][T16656] ? nft_netlink_dump_start_rcu+0xbb/0x1a0 [ 543.601088][T16656] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 543.606750][T16656] nf_tables_getobj_reset+0x1e1/0x630 [ 543.612156][T16656] ? nfnl_pernet+0x23/0x230 [ 543.616696][T16656] ? nf_tables_delobj+0x1090/0x1090 [ 543.621932][T16656] ? nf_tables_getobj_single+0x610/0x610 [ 543.627594][T16656] ? nf_tables_dumpreset_obj_start+0x180/0x180 [ 543.633956][T16656] ? nf_tables_dump_obj+0xdf0/0xdf0 [ 543.639190][T16656] ? __nla_parse+0x40/0x50 [ 543.643681][T16656] ? nf_tables_delobj+0x1090/0x1090 [ 543.648905][T16656] nfnetlink_rcv_msg+0x8a4/0x12b0 [ 543.653960][T16656] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.660072][T16656] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 543.665308][T16656] ? nfnetlink_unbind+0x160/0x160 [ 543.670386][T16656] ? __dev_queue_xmit+0x19a3/0x3660 [ 543.675690][T16656] ? __netlink_deliver_tap+0x5ab/0x830 [ 543.681188][T16656] ? netlink_deliver_tap+0x19c/0x1b0 [ 543.686679][T16656] ? netlink_unicast+0x72c/0x8d0 [ 543.691651][T16656] ? netlink_sendmsg+0x8d0/0xbf0 [ 543.696619][T16656] ? ____sys_sendmsg+0x5ba/0x960 [ 543.701587][T16656] ? ___sys_sendmsg+0x2a6/0x360 [ 543.706487][T16656] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 543.711547][T16656] ? do_syscall_64+0x55/0xb0 [ 543.716197][T16656] netlink_rcv_skb+0x241/0x4d0 [ 543.720993][T16656] ? nfnetlink_unbind+0x160/0x160 [ 543.726051][T16656] ? netlink_ack+0x1180/0x1180 [ 543.730865][T16656] ? apparmor_capable+0x137/0x1a0 [ 543.735969][T16656] ? bpf_lsm_capable+0x9/0x10 [ 543.740722][T16656] ? security_capable+0x89/0xb0 [ 543.745612][T16656] nfnetlink_rcv+0x2c9/0x24a0 [ 543.750323][T16656] ? __local_bh_enable_ip+0x13a/0x1c0 [ 543.755733][T16656] ? lockdep_hardirqs_on+0x98/0x150 [ 543.760970][T16656] ? __local_bh_enable_ip+0x13a/0x1c0 [ 543.766369][T16656] ? _local_bh_enable+0xa0/0xa0 [ 543.771253][T16656] ? __dev_queue_xmit+0x265/0x3660 [ 543.776400][T16656] ? __dev_queue_xmit+0x265/0x3660 [ 543.781550][T16656] ? __dev_queue_xmit+0x1b2c/0x3660 [ 543.786786][T16656] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 543.792378][T16656] ? __dev_queue_xmit+0x265/0x3660 [ 543.797532][T16656] ? ref_tracker_free+0x690/0x840 [ 543.802777][T16656] ? refcount_inc+0x70/0x70 [ 543.807324][T16656] ? __asan_memcpy+0x40/0x70 [ 543.811961][T16656] ? __skb_clone+0x63/0x790 [ 543.816510][T16656] ? __skb_clone+0x480/0x790 [ 543.821163][T16656] ? __netlink_deliver_tap+0x7e8/0x830 [ 543.826675][T16656] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.831908][T16656] ? __lock_acquire+0x7d40/0x7d40 [ 543.836992][T16656] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.842251][T16656] netlink_unicast+0x751/0x8d0 [ 543.847056][T16656] netlink_sendmsg+0x8d0/0xbf0 [ 543.851865][T16656] ? netlink_getsockopt+0x590/0x590 [ 543.857089][T16656] ? aa_sock_msg_perm+0x94/0x150 [ 543.862056][T16656] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 543.867370][T16656] ? security_socket_sendmsg+0x80/0xa0 [ 543.872851][T16656] ? netlink_getsockopt+0x590/0x590 [ 543.878070][T16656] ____sys_sendmsg+0x5ba/0x960 [ 543.882894][T16656] ? __asan_memset+0x22/0x40 [ 543.887542][T16656] ? __sys_sendmsg_sock+0x30/0x30 [ 543.892619][T16656] ? __import_iovec+0x5f2/0x850 [ 543.897501][T16656] ? import_iovec+0x73/0xa0 [ 543.902035][T16656] ___sys_sendmsg+0x2a6/0x360 [ 543.906761][T16656] ? __sys_sendmsg+0x2a0/0x2a0 [ 543.911572][T16656] __se_sys_sendmsg+0x1c2/0x2b0 [ 543.916464][T16656] ? __x64_sys_sendmsg+0x80/0x80 [ 543.921431][T16656] ? lockdep_hardirqs_on+0x98/0x150 [ 543.926665][T16656] do_syscall_64+0x55/0xb0 [ 543.931105][T16656] ? clear_bhb_loop+0x40/0x90 [ 543.935830][T16656] ? clear_bhb_loop+0x40/0x90 [ 543.940526][T16656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 543.946448][T16656] RIP: 0033:0x7fb21699ce59 [ 543.950924][T16656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.970597][T16656] RSP: 002b:00007fb21792b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.979042][T16656] RAX: ffffffffffffffda RBX: 00007fb216c15fa0 RCX: 00007fb21699ce59 [ 543.987040][T16656] RDX: 0000000024044808 RSI: 0000200000000180 RDI: 0000000000000003 [ 543.995035][T16656] RBP: 00007fb216a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 544.003025][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.011017][T16656] R13: 00007fb216c16038 R14: 00007fb216c15fa0 R15: 00007fff19429328 [ 544.019026][T16656] [ 544.022095][ C1] vkms_vblank_simulate: vblank timer overrun