last executing test programs: 14m4.804521547s ago: executing program 32 (id=11113): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@block_validity}, {}, {@data_err_ignore}, {@norecovery}, {@errors_continue}, {@orlov}, {@usrquota}, {@noauto_da_alloc}, {@norecovery}]}, 0x1, 0x582, &(0x7f0000000ec0)="$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") open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) 12m54.831493099s ago: executing program 33 (id=11777): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x42042, 0x0) sendfile(r0, r0, 0x0, 0x100000000) lseek(r0, 0xbf, 0x1) 11m19.152888294s ago: executing program 34 (id=12726): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001600)='./file0\x00', 0x80c880, &(0x7f0000000180)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@fat=@nfs}, {@fat=@nfs}, {@shortname_winnt}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@fat=@umask={'umask', 0x3d, 0xe1}}, {@shortname_win95}, {@shortname_win95}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x2a, 0x35b, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 9m14.694989804s ago: executing program 35 (id=14132): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x0, 0x40}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'hsr0\x00'}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_bridge\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 7m51.274829344s ago: executing program 36 (id=14708): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000013fedbdf25020202000900030073797a32000000000900010073797a3100000000050004"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80) 5m28.616343905s ago: executing program 37 (id=16278): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 5m18.424778852s ago: executing program 38 (id=16349): r0 = socket$packet(0x11, 0x2, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$packet_int(r0, 0x107, 0x14, 0x0, &(0x7f0000000080)) 5m13.683519984s ago: executing program 39 (id=16380): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_mark(r0, 0x1, 0x2e, 0xffffffffffffffff, 0x0) 4m57.564260166s ago: executing program 40 (id=16442): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x140f43b8, @loopback, 0x8e9}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) 4m32.138369999s ago: executing program 8 (id=16602): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) getsockopt$inet_mreqn(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)) 4m31.882483837s ago: executing program 8 (id=16605): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) 4m31.667435023s ago: executing program 8 (id=16607): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000009c0)="b9ff03006037698cff9e14d186dd", 0x0, 0xa0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x28}, 0x50) 4m31.223482035s ago: executing program 8 (id=16610): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 4m29.822695675s ago: executing program 8 (id=16616): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m28.990322318s ago: executing program 8 (id=16619): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x2800200d}) 4m28.54549385s ago: executing program 41 (id=16619): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000480)={0x2800200d}) 4m28.126320252s ago: executing program 6 (id=16629): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x404, &(0x7f0000000280)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@barrier}, {@dioread_nolock}, {@quota}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x46) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000011c0)={0xfffffbff, 0x81, 0x4, 0x9, 0x4001, 0x1}) 4m27.243518397s ago: executing program 6 (id=16636): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x13f9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000680)=0x40) 4m26.719546242s ago: executing program 6 (id=16640): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800700, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@errors_remount}, {@grpquota}, {@usrjquota}, {@oldalloc}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1c0) open(&(0x7f0000000240)='./file1\x00', 0x1491c2, 0x0) 4m25.821340207s ago: executing program 6 (id=16646): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x800000, &(0x7f0000000000)={[{@type={'type', 0x3d, "de3fb575"}}, {}, {@gid}, {@nls={'nls', 0x3d, 'iso8859-6'}}]}, 0x1, 0x5d8, &(0x7f0000000cc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) 4m25.295150351s ago: executing program 6 (id=16649): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000500)="62042700ffff00000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844", 0x46}], 0x1}, 0x4008000) 4m24.513949684s ago: executing program 6 (id=16654): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r0}, 0x38) 4m24.118003804s ago: executing program 42 (id=16654): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r0}, 0x38) 2m39.050883582s ago: executing program 3 (id=17549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x40000) 2m38.780113929s ago: executing program 3 (id=17553): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x3, 0x609, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) 2m38.38689711s ago: executing program 3 (id=17556): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) 2m38.142717917s ago: executing program 3 (id=17558): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2m37.555565464s ago: executing program 3 (id=17564): mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)={[{@nr_inodes={'nr_inodes', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32]}}]}) 2m36.830963124s ago: executing program 3 (id=17571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m36.467390444s ago: executing program 43 (id=17571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 2m14.709127504s ago: executing program 2 (id=17766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 2m14.418955673s ago: executing program 2 (id=17769): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1380000}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x22}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m14.085381192s ago: executing program 2 (id=17772): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c084}, 0x4000080) 2m13.906104067s ago: executing program 2 (id=17776): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) 2m13.701214763s ago: executing program 2 (id=17777): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r0, &(0x7f0000000540), 0x0}, 0x20) 2m13.022482092s ago: executing program 2 (id=17784): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="4d01000000000000000100e50414090b00920000", 0x14, 0x4004085, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @multicast}, 0x14) 2m12.418432558s ago: executing program 44 (id=17784): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="4d01000000000000000100e50414090b00920000", 0x14, 0x4004085, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @multicast}, 0x14) 1m19.059745374s ago: executing program 5 (id=18315): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f00000001c0)={0x3000000, 0x10000002000003, 0x0, 0x1}) 1m18.534325589s ago: executing program 5 (id=18319): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x800, &(0x7f0000000680)={[{@debug}, {@nolazytime}, {@dax_inode}, {@jqfmt_vfsv0}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}]}, 0x3, 0x236, &(0x7f0000000300)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000400)='./file0/file0\x00', 0x8a, &(0x7f00000001c0)={[{@usrjquota}, {@commit={'commit', 0x3d, 0x3}}, {@stripe}, {@minixdf}, {@grpjquota}, {@noinit_itable}]}, 0x4, 0x46a, &(0x7f0000000640)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) 1m17.604132584s ago: executing program 5 (id=18324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c0005"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 1m17.130882347s ago: executing program 5 (id=18329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e65740000000005000500020000000500010006"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000a0601020000000000000000010000030900020073797a31000000000500010007000000280007800c00018008000140e79a01020c00148008000140ac1414100c000280"], 0x50}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 1m16.855187334s ago: executing program 5 (id=18334): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x103) 1m16.593502022s ago: executing program 5 (id=18338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000e9cc00000100000030000180060005004e210000140004000000000000000000000000000000000108000600bd770000060001000a"], 0x44}}, 0x0) 1m1.459246084s ago: executing program 45 (id=18338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110200000000e9cc00000100000030000180060005004e210000140004000000000000000000000000000000000108000600bd770000060001000a"], 0x44}}, 0x0) 6.157477102s ago: executing program 9 (id=18876): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1000649, &(0x7f00000003c0), 0x2, 0x60d, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xc2800, 0x18) ioctl$FS_IOC_SETFLAGS(r0, 0x41009432, &(0x7f00000001c0)=0x800) 4.628694053s ago: executing program 9 (id=18891): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 4.327010111s ago: executing program 4 (id=18894): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0xb, 0x4) sendmsg$netlink(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x24, 0x5e, 0x601, 0x0, 0x0, "", [@typed={0x14, 0x76, 0x0, 0x0, @ipv6=@private1}]}, 0x24}], 0x1}, 0x0) 4.079530648s ago: executing program 4 (id=18895): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.566936882s ago: executing program 4 (id=18897): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x2040400) bind$bt_l2cap(r0, 0x0, 0x0) 3.256850991s ago: executing program 4 (id=18898): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@fastboot}, {@noheap}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@background_gc_off}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') 2.787789883s ago: executing program 9 (id=18901): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfd, 0x2c7, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) 2.638059217s ago: executing program 1 (id=18903): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @private=0xa010101, @private=0xa010100}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}}) 2.386516544s ago: executing program 1 (id=18904): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)="4701", 0x5dc, 0x81, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0xe, 0x6, @multicast}, 0x14) 2.378087724s ago: executing program 7 (id=18905): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) poll(&(0x7f00000000c0)=[{r0, 0x207c}], 0x1, 0x1) 2.107460062s ago: executing program 7 (id=18906): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, "82"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x4048086) 2.091900983s ago: executing program 1 (id=18907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000840) 1.954953476s ago: executing program 0 (id=18908): getgroups(0x2, &(0x7f0000000300)=[0x0, 0x0]) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x22000c0e, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,umask=00000000000000000007777,dmask=00000000000000000000152,iocharset=default,gid=', @ANYRESHEX=r0, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYRES8=r0], 0x81, 0x1504, &(0x7f0000002a80)="$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") utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xd, 0x80000000000008}) 1.859290309s ago: executing program 7 (id=18909): r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) bind$inet(r0, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) 1.846540379s ago: executing program 9 (id=18910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) 1.840254319s ago: executing program 1 (id=18911): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) 1.601569265s ago: executing program 7 (id=18912): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x13, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @remote, 0x80000000}, 0x18) 1.44542387s ago: executing program 0 (id=18913): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x462, &(0x7f0000000d80)="$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") syz_mount_image$fuse(0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.05894318s ago: executing program 4 (id=18914): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000200), 0x4) 874.175626ms ago: executing program 9 (id=18915): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 866.536716ms ago: executing program 0 (id=18916): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getflags(r0, 0x40a) 675.015741ms ago: executing program 1 (id=18917): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000022000102000000000000000002"], 0x1c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) 658.351522ms ago: executing program 7 (id=18918): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) 597.939363ms ago: executing program 9 (id=18919): r0 = gettid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(r0, &(0x7f0000000100)='numa_maps\x00') 540.883714ms ago: executing program 0 (id=18920): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)='h', 0x1}], 0x1}}], 0x1, 0xc8844) 390.970069ms ago: executing program 7 (id=18921): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8e9}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000000)='./file2\x00', 0x149) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 318.064531ms ago: executing program 1 (id=18922): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000a000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 283.248672ms ago: executing program 0 (id=18923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0xff, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 213.212594ms ago: executing program 4 (id=18924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a90f0000080001"], 0x2ac}}, 0x0) 0s ago: executing program 0 (id=18925): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mlockall(0x7) kernel console output (not intermixed with test programs): netdevsim5 netdevsim3: renamed from eth3 [ 1476.454337][T15727] EXT4-fs: inline encryption not supported [ 1476.486338][T15729] loop4: detected capacity change from 0 to 64 [ 1476.533854][T15727] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1476.585044][T15727] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1476.621114][T15727] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.17892: inode #15: comm syz.1.17892: iget: illegal inode # [ 1476.643469][T15727] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.17892: couldn't read orphan inode 15 (err -117) [ 1476.663297][T15727] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1476.748289][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1476.805159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1477.111479][T15454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1477.137805][T15717] loop9: detected capacity change from 0 to 40427 [ 1477.167445][T15717] F2FS-fs (loop9): invalid crc value [ 1477.217730][T15454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1477.242896][T15717] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1477.245695][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1477.270470][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1477.285558][T15743] loop4: detected capacity change from 0 to 512 [ 1477.346928][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1477.362452][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1477.377032][T15743] FAT-fs (loop4): Directory bread(block 199916) failed [ 1477.394543][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1477.401691][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1477.417859][T15743] FAT-fs (loop4): Directory bread(block 199917) failed [ 1477.434029][T15743] FAT-fs (loop4): Directory bread(block 199918) failed [ 1477.444108][T15717] F2FS-fs (loop9): Start checkpoint disabled! [ 1477.457703][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1477.468791][T15743] FAT-fs (loop4): Directory bread(block 199919) failed [ 1477.492243][T15717] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1477.498764][T15743] FAT-fs (loop4): Directory bread(block 199920) failed [ 1477.524080][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1477.540213][T15743] FAT-fs (loop4): Directory bread(block 199921) failed [ 1477.547759][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1477.550745][T15743] FAT-fs (loop4): Directory bread(block 199922) failed [ 1477.554935][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1477.578934][T15743] FAT-fs (loop4): Directory bread(block 199923) failed [ 1477.602746][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1477.628800][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1477.651039][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1477.707370][T15743] FAT-fs (loop4): Directory bread(block 199916) failed [ 1477.721890][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1477.737818][T15743] FAT-fs (loop4): Directory bread(block 199917) failed [ 1477.759494][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1477.785181][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1477.808885][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1477.827578][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1477.838299][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1477.865426][T15454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1477.885175][T15454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1477.923465][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1477.936161][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1477.986720][ T4884] kworker/u4:9: attempt to access beyond end of device [ 1477.986720][ T4884] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1477.993939][T16075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1478.140262][T15751] loop1: detected capacity change from 0 to 64 [ 1478.993745][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1479.001331][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1479.093577][T15454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.294887][T15783] loop4: detected capacity change from 0 to 8 [ 1479.481746][T15783] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1479.523409][T15783] SQUASHFS error: Failed to read block 0x60: -5 [ 1479.585169][T15783] SQUASHFS error: zstd decompression failed, data probably corrupt [ 1479.644338][T15783] SQUASHFS error: Failed to read block 0x60: -5 [ 1479.691017][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17914'. [ 1479.898293][T15802] loop9: detected capacity change from 0 to 1024 [ 1479.939456][T15802] EXT4-fs: inline encryption not supported [ 1480.040255][T15802] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1480.076697][T15810] loop7: detected capacity change from 0 to 1024 [ 1480.154020][T15810] EXT4-fs: Ignoring removed nobh option [ 1480.179807][T15808] loop1: detected capacity change from 0 to 4096 [ 1480.206638][T15810] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1480.282648][T15810] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #12: block 7: comm syz.7.17918: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1480.370603][T15808] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 1480.410205][T11854] EXT4-fs (loop9): unmounting filesystem. [ 1480.519510][T15808] ntfs3: loop1: failed to convert "0080" to ascii [ 1480.544856][T15808] ntfs3: loop1: failed to convert name for inode 1e. [ 1480.556274][T15810] EXT4-fs (loop7): Remounting filesystem read-only [ 1480.556361][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1480.615146][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1480.698858][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1480.743178][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1480.826823][T15454] device veth0_vlan entered promiscuous mode [ 1480.855427][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1480.873596][T14790] EXT4-fs (loop7): unmounting filesystem. [ 1480.905174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1480.911643][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1480.965995][T15454] device veth1_vlan entered promiscuous mode [ 1481.077650][T15454] device veth0_macvtap entered promiscuous mode [ 1481.108085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1481.129993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1481.179825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1481.225095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1481.245089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1481.282756][T15454] device veth1_macvtap entered promiscuous mode [ 1481.380506][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1481.407051][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.440659][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1481.502814][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.539194][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1481.585871][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.613520][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1481.663589][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.693723][T15454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.738043][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1481.790035][T15855] loop4: detected capacity change from 0 to 4096 [ 1481.793689][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1481.845286][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1481.856054][T15860] netlink: 194188 bytes leftover after parsing attributes in process `syz.1.17934'. [ 1481.903925][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.928552][T15860] netlink: zone id is out of range [ 1481.935272][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.937146][T15855] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1481.947429][T15860] netlink: zone id is out of range [ 1481.962912][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.980427][T15860] netlink: zone id is out of range [ 1481.992497][T15860] netlink: zone id is out of range [ 1481.999890][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.016902][T15860] netlink: zone id is out of range [ 1482.023485][T15860] netlink: zone id is out of range [ 1482.029674][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.041713][T15860] netlink: zone id is out of range [ 1482.061652][T15860] netlink: zone id is out of range [ 1482.064745][T15855] ntfs3: loop4: failed to convert "0080" to ascii [ 1482.071743][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.084126][T15860] netlink: zone id is out of range [ 1482.094096][T15860] netlink: zone id is out of range [ 1482.104191][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.104895][T15855] ntfs3: loop4: failed to convert name for inode 1e. [ 1482.143128][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.153700][T15454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.183450][T15454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.211634][T15454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1482.249357][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1482.278117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1482.339823][T15454] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.355891][T15454] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.386347][T15454] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.395640][T15454] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1482.625684][ T4338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.657207][ T4338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.686888][T15880] loop4: detected capacity change from 0 to 256 [ 1482.702298][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1482.761445][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.803629][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.851784][T15880] FAT-fs (loop4): Directory bread(block 64) failed [ 1482.861850][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1482.925612][T15880] FAT-fs (loop4): Directory bread(block 65) failed [ 1482.932898][T15880] FAT-fs (loop4): Directory bread(block 66) failed [ 1482.958696][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17944'. [ 1483.017360][T15880] FAT-fs (loop4): Directory bread(block 67) failed [ 1483.048634][T15880] FAT-fs (loop4): Directory bread(block 68) failed [ 1483.069396][T15880] FAT-fs (loop4): Directory bread(block 69) failed [ 1483.097739][T15880] FAT-fs (loop4): Directory bread(block 70) failed [ 1483.186341][T15880] FAT-fs (loop4): Directory bread(block 71) failed [ 1483.208700][T15880] FAT-fs (loop4): Directory bread(block 72) failed [ 1483.253467][T15880] FAT-fs (loop4): Directory bread(block 73) failed [ 1483.629307][T15907] netlink: 612 bytes leftover after parsing attributes in process `syz.1.17952'. [ 1483.661612][T15907] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1483.830871][T15915] loop7: detected capacity change from 0 to 256 [ 1484.147967][T15921] loop5: detected capacity change from 0 to 4096 [ 1484.220317][T15921] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1484.282557][T15921] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1484.315659][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.322002][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.390850][T15921] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1484.443670][T15921] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1484.486488][T15933] mkiss: ax0: crc mode is auto. [ 1484.516028][T15921] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1484.581131][T15921] ntfs: volume version 3.1. [ 1484.614013][T15921] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1484.653496][T15921] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1484.749247][T15921] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1484.814718][T15943] loop9: detected capacity change from 0 to 1764 [ 1484.821181][T15921] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1484.919781][T15921] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1485.134747][T15958] loop1: detected capacity change from 0 to 256 [ 1485.174036][T15958] exfat: Deprecated parameter 'namecase' [ 1485.247709][T15958] exfat: Deprecated parameter 'utf8' [ 1485.322799][T15958] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d) [ 1485.559996][T15973] [U] ¦Þ„#=ÃÄØC [ 1485.630145][T15974] loop7: detected capacity change from 0 to 1764 [ 1485.706430][T15974] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 1486.322093][T16000] usb usb8: usbfs: process 16000 (syz.1.17989) did not claim interface 4 before use [ 1486.330209][T16003] netlink: 612 bytes leftover after parsing attributes in process `syz.7.17990'. [ 1486.352028][T16003] sch_tbf: burst 240 is lower than device lo mtu (65550) ! [ 1486.360961][T16004] Bluetooth: MGMT ver 1.22 [ 1486.399221][T16006] loop4: detected capacity change from 0 to 128 [ 1486.446739][ T4259] blk_print_req_error: 12 callbacks suppressed [ 1486.446757][ T4259] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1486.929482][T16024] loop7: detected capacity change from 0 to 2048 [ 1486.974488][T16024] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1487.080318][ T4259] udevd[4259]: incorrect nilfs2 checksum on /dev/loop7 [ 1487.093272][T16031] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1488.751094][T16089] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18023'. [ 1489.343202][ T1169] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1489.535048][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.580780][T16126] loop7: detected capacity change from 0 to 64 [ 1489.590363][ T1169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1489.652353][ T1169] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1489.701781][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.713896][T16128] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18038'. [ 1489.738604][ T1169] usb 5-1: config 0 descriptor?? [ 1489.969461][T16133] loop5: detected capacity change from 0 to 4096 [ 1489.995962][T16139] loop1: detected capacity change from 0 to 64 [ 1490.022595][T16133] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 1490.142994][T16141] loop9: detected capacity change from 0 to 2048 [ 1490.162895][ T1169] hid-led 0003:27B8:01ED.0039: unknown main item tag 0x5 [ 1490.187611][T16141] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 1490.209865][T16133] ntfs3: loop5: ntfs_sync_inode r=1e failed, -22. [ 1490.269388][T16141] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1490.310409][ T9] ntfs3: loop5: ntfs3_write_inode r=1e failed, -22. [ 1490.335017][T15454] ntfs3: loop5: ntfs_evict_inode r=1e failed, -22. [ 1490.361176][ T1169] hid-led: probe of 0003:27B8:01ED.0039 failed with error -71 [ 1490.371035][T15454] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1490.418634][ T1169] usb 5-1: USB disconnect, device number 71 [ 1491.781687][T16197] support for cryptoloop has been removed. Use dm-crypt instead. [ 1492.067433][T16209] loop7: detected capacity change from 0 to 256 [ 1492.174661][T16209] exfat: Deprecated parameter 'utf8' [ 1492.223530][T16209] exfat: Deprecated parameter 'namecase' [ 1492.229278][T16209] exfat: Deprecated parameter 'namecase' [ 1492.363596][T16215] loop5: detected capacity change from 0 to 4096 [ 1492.366794][T16209] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1492.494798][T16224] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1492.513851][T16215] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 1492.661349][T16226] loop1: detected capacity change from 0 to 8 [ 1492.731097][T16226] unable to read id index table [ 1493.294477][T16251] program syz.5.18086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.349122][ T9177] kernel write not supported for file /snd/seq (pid: 9177 comm: kworker/0:17) [ 1493.358579][T16257] program syz.5.18086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1493.650080][T16265] loop1: detected capacity change from 0 to 512 [ 1493.673677][T16265] EXT4-fs: Ignoring removed i_version option [ 1493.741928][T16266] loop4: detected capacity change from 0 to 4096 [ 1493.779037][T16265] EXT4-fs error (device loop1): __ext4_iget:5102: inode #11: block 1: comm syz.1.18091: invalid block [ 1493.869648][T16265] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.18091: couldn't read orphan inode 11 (err -117) [ 1493.923537][T16266] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1493.941025][T16281] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1493.969884][T16265] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1493.994690][T16266] Remounting filesystem read-only [ 1494.079537][T16282] loop9: detected capacity change from 0 to 4096 [ 1494.163606][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1494.274022][T16289] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1494.329489][T16291] CIFS mount error: No usable UNC path provided in device string! [ 1494.329489][T16291] [ 1494.397561][T16291] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1494.522500][T16298] netlink: 1047 bytes leftover after parsing attributes in process `syz.7.18104'. [ 1494.548765][T16298] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1495.474566][T16322] loop4: detected capacity change from 0 to 256 [ 1495.716742][T16302] loop1: detected capacity change from 0 to 32768 [ 1495.832613][T16302] JBD2: Ignoring recovery information on journal [ 1495.987486][T16300] loop9: detected capacity change from 0 to 32768 [ 1496.075747][T16302] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1496.138457][T16300] XFS (loop9): Mounting V5 Filesystem [ 1496.293799][T16300] XFS (loop9): Ending clean mount [ 1496.451977][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1496.451992][ T26] audit: type=1326 audit(1496.467:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16355 comm="syz.5.18122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4966d9cdd9 code=0x0 [ 1496.538078][T10851] ocfs2: Unmounting device (7,1) on (node local) [ 1496.588450][T11854] XFS (loop9): Unmounting Filesystem [ 1496.776544][T16333] loop4: detected capacity change from 0 to 32768 [ 1496.939058][T16333] JBD2: Ignoring recovery information on journal [ 1497.147778][T16333] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1497.397954][T16354] loop7: detected capacity change from 0 to 32768 [ 1497.405682][T11183] ocfs2: Unmounting device (7,4) on (node local) [ 1497.581867][T16354] XFS (loop7): Mounting V5 Filesystem [ 1497.849216][T16354] XFS (loop7): Ending clean mount [ 1497.978851][T16400] loop1: detected capacity change from 0 to 1024 [ 1498.076371][T16400] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1498.164059][T14790] XFS (loop7): Unmounting Filesystem [ 1498.223117][ C0] vkms_vblank_simulate: vblank timer overrun [ 1498.253937][ C0] vkms_vblank_simulate: vblank timer overrun [ 1498.344392][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1498.371995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1498.377919][T16374] loop5: detected capacity change from 0 to 32768 [ 1498.602635][T16374] XFS (loop5): Mounting V5 Filesystem [ 1498.634904][T16416] loop1: detected capacity change from 0 to 512 [ 1498.651847][T16415] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1498.725914][T16416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1498.739659][T16374] XFS (loop5): Ending clean mount [ 1498.747312][T16374] XFS (loop5): Quotacheck needed: Please wait. [ 1498.868269][T16416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8817e02c, mo2=0002] [ 1498.970172][T16416] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.18132: invalid indirect mapped block 2683928664 (level 1) [ 1499.031703][T16374] XFS (loop5): Quotacheck: Done. [ 1499.043369][T16416] EXT4-fs (loop1): Remounting filesystem read-only [ 1499.049973][T16416] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.18132: bg 0: block 361: padding at end of block bitmap is not set [ 1499.113531][T16416] EXT4-fs (loop1): Remounting filesystem read-only [ 1499.120153][T16416] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1499.212744][T16432] loop7: detected capacity change from 0 to 512 [ 1499.214365][T16416] EXT4-fs (loop1): Remounting filesystem read-only [ 1499.243577][T15454] XFS (loop5): Unmounting Filesystem [ 1499.260259][T16416] EXT4-fs (loop1): 1 truncate cleaned up [ 1499.267152][T16432] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 1499.277283][T16432] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 1499.293607][T16416] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1499.308792][T16432] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 1499.362614][T16416] EXT4-fs error (device loop1): ext4_empty_dir:3145: inode #2: block 5: comm syz.1.18132: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1499.446414][T16432] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1499.462872][T16416] EXT4-fs (loop1): Remounting filesystem read-only [ 1499.517734][T16416] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.18132: directory missing '.' [ 1499.535498][T16432] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 1499.595931][T16432] EXT4-fs (loop7): failed to initialize system zone (-117) [ 1499.625880][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1499.642801][T16432] EXT4-fs (loop7): mount failed [ 1500.782910][T16488] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18159'. [ 1501.086159][T16500] loop1: detected capacity change from 0 to 64 [ 1501.312403][T16510] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18166'. [ 1501.943185][T16498] loop7: detected capacity change from 0 to 32768 [ 1501.982471][T16530] netlink: 104 bytes leftover after parsing attributes in process `syz.4.18172'. [ 1502.116419][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.9.18174'. [ 1502.792548][T16556] loop5: detected capacity change from 0 to 256 [ 1502.841508][T16556] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x0afbdf60, utbl_chksum : 0xe619d30d) [ 1503.017734][T16534] loop1: detected capacity change from 0 to 32768 [ 1503.063817][T16534] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1503.422085][ T4718] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1503.457298][T16577] loop9: detected capacity change from 0 to 256 [ 1503.474391][T16577] exfat: Deprecated parameter 'utf8' [ 1503.479817][T16577] exfat: Deprecated parameter 'namecase' [ 1503.571336][T16577] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36a12e94, utbl_chksum : 0xe619d30d) [ 1504.159075][T16598] loop4: detected capacity change from 0 to 64 [ 1504.352933][T16573] loop5: detected capacity change from 0 to 32768 [ 1505.169883][ T26] audit: type=1326 audit(1505.187:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.18213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c8f9cdd9 code=0x7ffc0000 [ 1505.248580][ T26] audit: type=1326 audit(1505.227:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.18213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c8f9cdd9 code=0x7ffc0000 [ 1505.359301][ T26] audit: type=1326 audit(1505.227:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.18213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f57c8f9cdd9 code=0x7ffc0000 [ 1505.440444][ T26] audit: type=1326 audit(1505.227:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.18213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c8f9cdd9 code=0x7ffc0000 [ 1505.499840][ T1169] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1505.528235][ T26] audit: type=1326 audit(1505.227:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16628 comm="syz.4.18213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c8f9cdd9 code=0x7ffc0000 [ 1505.703119][ T1169] usb 2-1: Using ep0 maxpacket: 8 [ 1505.722134][ T1169] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1505.766968][ T1169] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1505.794195][ T1169] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.822684][ T1169] usb 2-1: Product: syz [ 1505.827312][ T1169] usb 2-1: Manufacturer: syz [ 1505.831954][ T1169] usb 2-1: SerialNumber: syz [ 1505.887005][ T1169] usb 2-1: config 0 descriptor?? [ 1505.904930][ T1169] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1505.933129][ T1169] usb 2-1: setting power ON [ 1505.943891][ T1169] dvb-usb: bulk message failed: -22 (2/0) [ 1505.971945][ T1169] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1505.991138][ T1169] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1506.020400][ T1169] usb 2-1: media controller created [ 1506.072579][ T1169] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1506.159094][ T1169] usb 2-1: selecting invalid altsetting 6 [ 1506.186526][ T1169] usb 2-1: digital interface selection failed (-22) [ 1506.209751][ T1169] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1506.239513][ T1169] usb 2-1: setting power OFF [ 1506.283441][ T1169] dvb-usb: bulk message failed: -22 (2/0) [ 1506.289573][ T1169] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1506.337896][ T1169] (NULL device *): no alternate interface [ 1506.405145][ T1169] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1506.512007][ T1169] usb 2-1: USB disconnect, device number 37 [ 1506.561033][T16678] loop9: detected capacity change from 0 to 512 [ 1506.625947][T16678] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1506.633181][ T9177] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1506.692343][T16678] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1506.764016][T16678] Quota error (device loop9): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 1506.813227][ T9177] usb 6-1: Using ep0 maxpacket: 16 [ 1506.820311][ T9177] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.832658][T16678] EXT4-fs warning (device loop9): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1506.871811][ T9177] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1506.924177][T16678] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1506.936479][ T9177] usb 6-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00 [ 1506.937069][T16678] EXT4-fs error (device loop9): ext4_validate_block_bitmap:429: comm syz.9.18229: bg 0: block 15: invalid block bitmap [ 1506.966227][ T9177] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.995821][ T9177] usb 6-1: config 0 descriptor?? [ 1507.000090][T16678] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1507.011499][ T4323] kernel write not supported for file /uhid (pid: 4323 comm: kworker/0:7) [ 1507.021347][T16678] EXT4-fs (loop9): 1 truncate cleaned up [ 1507.036052][T16678] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1507.214604][T11854] EXT4-fs (loop9): unmounting filesystem. [ 1507.303291][ T4323] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 1507.431485][ T9177] holtek_mouse 0003:04D9:A0C2.003A: ignoring exceeding usage max [ 1507.460442][ T9177] holtek_mouse 0003:04D9:A0C2.003A: item fetching failed at offset 39/41 [ 1507.497484][ T9177] holtek_mouse 0003:04D9:A0C2.003A: hid parse failed: -22 [ 1507.514091][ T9177] holtek_mouse: probe of 0003:04D9:A0C2.003A failed with error -22 [ 1507.525284][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.543157][ T4323] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1507.579701][ T4323] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1507.603771][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1507.625229][ T4323] usb 2-1: config 0 descriptor?? [ 1507.646564][ T4323] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1507.672206][ T4323] dvb-usb: bulk message failed: -22 (3/0) [ 1507.697980][ T4323] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1507.737302][ T5374] usb 6-1: USB disconnect, device number 24 [ 1507.746850][ T4323] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1507.766691][ T4323] usb 2-1: media controller created [ 1507.777942][ T4323] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1507.795096][T16712] loop4: detected capacity change from 0 to 4096 [ 1507.798301][ T4323] dvb-usb: bulk message failed: -22 (6/0) [ 1507.819640][ T4323] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1507.854859][ T4323] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input74 [ 1507.876799][ T4323] dvb-usb: schedule remote query interval to 150 msecs. [ 1507.888591][ T4323] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1507.900282][ T4323] usb 2-1: USB disconnect, device number 38 [ 1508.004137][ T4323] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1508.196105][T16704] loop9: detected capacity change from 0 to 40427 [ 1508.232442][T16704] F2FS-fs (loop9): Small segment_count (9 < 1 * 24) [ 1508.277940][T16704] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1508.385801][T16704] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1508.570369][T16704] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1508.602389][T16704] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1508.693579][ T26] audit: type=1800 audit(1508.717:1021): pid=16704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.18237" name="file1" dev="loop9" ino=10 res=0 errno=0 [ 1508.879537][T11854] syz-executor: attempt to access beyond end of device [ 1508.879537][T11854] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1510.329695][T16792] loop4: detected capacity change from 0 to 2048 [ 1510.379664][T16792] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1510.441126][T16792] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1510.471640][T16792] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1510.486480][T16798] loop1: detected capacity change from 0 to 2048 [ 1510.493125][ T4313] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1510.515362][T16792] UDF-fs: Scanning with blocksize 512 failed [ 1510.532280][T16792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1510.626147][T16798] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1510.693219][ T4313] usb 6-1: Using ep0 maxpacket: 16 [ 1510.705055][ T4313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.742693][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1510.805650][ T4313] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.853503][ T4313] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1510.923122][ T4313] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.984916][ T4313] usb 6-1: config 0 descriptor?? [ 1511.410835][ T4313] hid-multitouch 0003:1FD2:6007.003B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 1511.631325][ T4313] usb 6-1: USB disconnect, device number 25 [ 1511.812192][T16830] fido_id[16830]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1512.448450][T16821] loop1: detected capacity change from 0 to 40427 [ 1512.507496][T16821] F2FS-fs (loop1): build fault injection attr: rate: 684, type: 0x3ffff [ 1512.526600][T16821] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7 [ 1512.590069][T16821] F2FS-fs (loop1): invalid crc value [ 1512.644453][T16821] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1512.866553][T16821] F2FS-fs (loop1): Start checkpoint disabled! [ 1512.907615][T16821] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1512.950319][T16840] loop4: detected capacity change from 0 to 32768 [ 1513.287287][ T4293] kworker/u4:5: attempt to access beyond end of device [ 1513.287287][ T4293] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1513.471002][T16848] loop5: detected capacity change from 0 to 32768 [ 1513.542380][T16848] JBD2: Ignoring recovery information on journal [ 1513.667609][T16848] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1513.710392][T16874] loop4: detected capacity change from 0 to 4096 [ 1513.833626][T16876] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1513.921670][T16874] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 1513.957092][T15454] ocfs2: Unmounting device (7,5) on (node local) [ 1513.982910][T16857] loop7: detected capacity change from 0 to 32768 [ 1514.075667][T16857] (syz.7.18291,16857,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1514.184324][T16857] (syz.7.18291,16857,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1514.249651][T16857] JBD2: Ignoring recovery information on journal [ 1514.511307][T16857] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1514.638656][T16895] loop4: detected capacity change from 0 to 128 [ 1514.693962][T16895] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1514.760261][T16895] hpfs: filesystem error: improperly stopped [ 1514.793100][T16895] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1514.823638][T16895] hpfs: You really don't want any checks? You are crazy... [ 1514.863898][T14790] ocfs2: Unmounting device (7,7) on (node local) [ 1514.883445][T16895] hpfs: hpfs_map_sector(): read error [ 1514.888916][T16895] hpfs: code page support is disabled [ 1514.943527][T16895] hpfs: hpfs_map_4sectors(): unaligned read [ 1514.966742][T16895] hpfs: hpfs_map_4sectors(): unaligned read [ 1515.023687][T16895] hpfs: filesystem error: unable to find root dir [ 1515.269006][T16903] loop1: detected capacity change from 0 to 8192 [ 1515.306832][T16903] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1515.436211][T16921] loop7: detected capacity change from 0 to 128 [ 1515.644038][T16921] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1515.789408][T16931] loop5: detected capacity change from 0 to 1024 [ 1515.907011][T14790] EXT4-fs (loop7): unmounting filesystem. [ 1515.937305][ T26] audit: type=1800 audit(1515.957:1022): pid=16931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.18312" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 1515.985764][ C0] vkms_vblank_simulate: vblank timer overrun [ 1516.216013][T16938] loop1: detected capacity change from 0 to 128 [ 1516.311621][T16941] loop5: detected capacity change from 0 to 16 [ 1516.313902][T16938] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1516.342244][T16941] erofs: (device loop5): mounted with root inode @ nid 36. [ 1516.387996][T16938] hpfs: filesystem error: improperly stopped [ 1516.400690][T16938] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1516.453835][T16938] hpfs: You really don't want any checks? You are crazy... [ 1516.480478][T16943] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1516.503481][T16938] hpfs: hpfs_map_sector(): read error [ 1516.508923][T16938] hpfs: code page support is disabled [ 1516.535159][T16938] hpfs: hpfs_map_4sectors(): unaligned read [ 1516.559977][T16943] UDF-fs: error (device loop7): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1516.570856][T16938] hpfs: hpfs_map_4sectors(): unaligned read [ 1516.592782][T16943] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found [ 1516.602221][T16938] hpfs: filesystem error: unable to find root dir [ 1516.620447][T16943] UDF-fs: Scanning with blocksize 512 failed [ 1516.713990][T16943] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1516.843412][T16951] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1516.907276][T16951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 1516.973549][T16951] System zones: 1-3, 19-19, 35-36 [ 1517.084394][T16951] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1517.291299][T16955] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1517.299778][T16955] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1517.311664][T16955] syz.4.18320: attempt to access beyond end of device [ 1517.311664][T16955] loop4: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 1517.326514][T16955] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 1517.336882][T16951] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 1517.516871][T15454] EXT4-fs (loop5): unmounting filesystem. [ 1517.749303][T16972] netlink: 56 bytes leftover after parsing attributes in process `syz.5.18324'. [ 1518.155462][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18329'. [ 1518.256607][T16989] set_capacity_and_notify: 4 callbacks suppressed [ 1518.256624][T16989] loop1: detected capacity change from 0 to 1024 [ 1518.576319][ T4321] hfsplus: b-tree write err: -5, ino 25 [ 1518.582083][ T4321] hfsplus: b-tree write err: -5, ino 4 [ 1518.594938][ T4321] hfsplus: b-tree write err: -5, ino 2 [ 1519.263257][T17019] loop7: detected capacity change from 0 to 4096 [ 1519.270452][T17019] EXT4-fs: Ignoring removed bh option [ 1519.394601][T17019] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1519.408741][T17033] loop9: detected capacity change from 0 to 64 [ 1519.494629][ T26] audit: type=1800 audit(1519.517:1023): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.18346" name="bus" dev="loop7" ino=18 res=0 errno=0 [ 1519.516464][T17036] EXT4-fs error (device loop7): ext4_get_first_dir_block:3603: inode #12: block 80: comm syz.7.18346: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1519.563557][ T4313] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1519.587956][T17036] EXT4-fs (loop7): Remounting filesystem read-only [ 1519.613608][T17036] EXT4-fs error (device loop7): ext4_get_first_dir_block:3605: inode #12: comm syz.7.18346: directory missing '..' [ 1519.713672][T17036] EXT4-fs (loop7): Remounting filesystem read-only [ 1519.764788][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1519.813533][ T4313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1519.858542][ T4313] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1519.912349][T17044] program syz.4.18352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1519.932384][ T4313] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1519.972966][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1520.021905][ T4313] usb 2-1: config 0 descriptor?? [ 1520.029446][T14790] EXT4-fs (loop7): unmounting filesystem. [ 1520.451792][ T4313] steelseries_srws1 0003:1038:1410.003C: unknown main item tag 0x1 [ 1520.498849][ T4313] steelseries_srws1 0003:1038:1410.003C: not enough fields in HID_OUTPUT_REPORT 0 [ 1520.529881][T17059] option changes via remount are deprecated (pid=17057 comm=syz.9.18357) [ 1520.570326][T17061] device ipvlan2 entered promiscuous mode [ 1520.602085][T17061] bridge0: port 3(ipvlan2) entered blocking state [ 1520.631159][T17061] bridge0: port 3(ipvlan2) entered disabled state [ 1520.654509][ T8032] usb 2-1: USB disconnect, device number 39 [ 1520.892328][T17065] loop4: detected capacity change from 0 to 4096 [ 1520.965914][T17065] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1521.072109][T17065] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 1521.095837][T17065] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1521.139806][T17065] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1521.225301][T17065] ntfs: volume version 3.1. [ 1521.474451][T11183] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 1521.575241][T17085] loop9: detected capacity change from 0 to 256 [ 1521.718113][T17090] loop1: detected capacity change from 0 to 2048 [ 1521.772455][T17090] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1522.146870][T17097] loop9: detected capacity change from 0 to 8192 [ 1522.215812][T17097] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1522.284135][T17097] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal [ 1522.344889][T17097] REISERFS (device loop9): using ordered data mode [ 1522.393246][T17097] reiserfs: using flush barriers [ 1522.422900][T17097] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1522.594149][T17097] REISERFS (device loop9): checking transaction log (loop9) [ 1522.930654][T17097] REISERFS (device loop9): Using r5 hash to sort names [ 1522.960592][T17097] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1523.179107][T17126] netem: change failed [ 1523.726552][T17114] loop1: detected capacity change from 0 to 32768 [ 1523.770790][T17114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.18375 (17114) [ 1523.862675][T17114] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1523.901155][T17114] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1523.952617][T17114] BTRFS info (device loop1): using free space tree [ 1523.964520][T17140] loop4: detected capacity change from 0 to 256 [ 1524.081115][T17140] FAT-fs (loop4): Directory bread(block 64) failed [ 1524.103125][T17140] FAT-fs (loop4): Directory bread(block 65) failed [ 1524.109788][T17140] FAT-fs (loop4): Directory bread(block 66) failed [ 1524.213507][T17140] FAT-fs (loop4): Directory bread(block 67) failed [ 1524.220223][T17140] FAT-fs (loop4): Directory bread(block 68) failed [ 1524.227402][T17140] FAT-fs (loop4): Directory bread(block 69) failed [ 1524.234409][T17140] FAT-fs (loop4): Directory bread(block 70) failed [ 1524.241077][T17140] FAT-fs (loop4): Directory bread(block 71) failed [ 1524.257176][T17140] FAT-fs (loop4): Directory bread(block 72) failed [ 1524.279494][T17140] FAT-fs (loop4): Directory bread(block 73) failed [ 1524.328349][T17114] BTRFS info (device loop1): enabling ssd optimizations [ 1524.337854][T17125] loop7: detected capacity change from 0 to 32768 [ 1524.551846][T17125] XFS (loop7): Mounting V5 Filesystem [ 1524.780996][T17125] XFS (loop7): Ending clean mount [ 1524.844856][T17125] XFS (loop7): Quotacheck needed: Please wait. [ 1524.890294][T10851] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1525.110016][T17183] loop9: detected capacity change from 0 to 2048 [ 1525.134065][T17183] EXT4-fs: Ignoring removed oldalloc option [ 1525.239844][T17183] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 1525.283368][T17183] System zones: 0-7 [ 1525.299772][T17183] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1525.363597][T17183] EXT4-fs error (device loop9): ext4_find_extent:936: inode #2: comm syz.9.18391: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1525.417142][T17189] loop4: detected capacity change from 0 to 512 [ 1525.443639][T17183] EXT4-fs (loop9): Remounting filesystem read-only [ 1525.498888][T17189] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1525.518567][T17189] EXT4-fs: Ignoring removed mblk_io_submit option [ 1525.609074][T17189] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1525.623115][T17189] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1525.659291][T17189] EXT4-fs (loop4): 1 truncate cleaned up [ 1525.720704][T17189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1525.987986][T17125] XFS (loop7): Quotacheck: Done. [ 1526.030352][ T4259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4259) [ 1526.056164][T11183] EXT4-fs (loop4): unmounting filesystem. [ 1526.057767][T11854] EXT4-fs (loop9): unmounting filesystem. [ 1526.263325][T17204] netlink: 240 bytes leftover after parsing attributes in process `syz.4.18394'. [ 1526.313876][T17204] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18394'. [ 1526.378344][T17206] loop9: detected capacity change from 0 to 1024 [ 1526.423359][T17206] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1526.425394][T14790] XFS (loop7): Unmounting Filesystem [ 1526.663558][T17212] loop4: detected capacity change from 0 to 512 [ 1526.745314][T17212] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1526.903690][T17212] EXT4-fs warning (device loop4): verify_group_input:169: Last group not full [ 1527.081217][T11183] EXT4-fs (loop4): unmounting filesystem. [ 1527.333210][ T126] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1527.576103][ T126] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1527.615430][ T126] usb 10-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1527.643158][ T126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.651335][ T126] usb 10-1: Product: syz [ 1527.692787][ T126] usb 10-1: Manufacturer: syz [ 1527.698024][ T126] usb 10-1: SerialNumber: syz [ 1527.734931][ T126] usb 10-1: config 0 descriptor?? [ 1527.755449][ T126] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1528.361414][ T126] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 1528.381725][ T126] gspca_pac7302: probe of 10-1:0.0 failed with error -71 [ 1528.424683][ T126] usb 10-1: USB disconnect, device number 6 [ 1528.451139][T17237] loop1: detected capacity change from 0 to 32768 [ 1529.213405][ T7198] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1529.403691][ T7198] usb 5-1: Using ep0 maxpacket: 32 [ 1529.412179][ T7198] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.473214][ T7198] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1529.535672][ T7198] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1529.569013][ T26] audit: type=1326 audit(1529.587:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.18420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482a19cdd9 code=0x7ffc0000 [ 1529.576054][ T7198] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1529.650836][ T26] audit: type=1326 audit(1529.587:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.18420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f482a19cdd9 code=0x7ffc0000 [ 1529.683777][ T7198] usb 5-1: Product: syz [ 1529.688001][ T7198] usb 5-1: Manufacturer: syz [ 1529.703741][ T7198] usb 5-1: SerialNumber: syz [ 1529.730179][ T26] audit: type=1326 audit(1529.587:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.18420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482a19cdd9 code=0x7ffc0000 [ 1529.773613][ T7198] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input75 [ 1529.858725][ T26] audit: type=1326 audit(1529.587:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.18420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482a19cdd9 code=0x7ffc0000 [ 1529.933502][T17291] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18423'. [ 1529.993147][ T26] audit: type=1326 audit(1529.587:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.18420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f482a19cdd9 code=0x7ffc0000 [ 1530.083706][ T26] audit: type=1326 audit(1529.587:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.18420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482a19cdd9 code=0x7ffc0000 [ 1530.184408][ T7198] usb 5-1: USB disconnect, device number 72 [ 1530.204346][ T7198] appletouch 5-1:1.0: input: appletouch disconnected [ 1530.222808][ T26] audit: type=1326 audit(1529.587:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17281 comm="syz.9.18420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482a19cdd9 code=0x7ffc0000 [ 1530.315065][T17302] loop1: detected capacity change from 0 to 1024 [ 1530.380849][T17302] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm syz.1.18426: lblock 2 mapped to illegal pblock 2 (length 1) [ 1530.432558][T17302] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 1530.479963][T17302] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 48: comm syz.1.18426: lblock 0 mapped to illegal pblock 48 (length 1) [ 1530.484921][T17308] netlink: 'syz.9.18429': attribute type 1 has an invalid length. [ 1530.579305][T17302] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 1530.629556][T17302] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.18426: Failed to acquire dquot type 0 [ 1530.692132][T17302] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1530.749802][T17302] EXT4-fs error (device loop1): ext4_evict_inode:281: inode #11: comm syz.1.18426: mark_inode_dirty error [ 1530.785484][T17302] EXT4-fs warning (device loop1): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 1530.830453][T17302] EXT4-fs (loop1): 1 orphan inode deleted [ 1530.843384][ T4293] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 1530.846902][T17302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1530.902744][ T4293] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 1530.969268][ T7198] kernel write not supported for file /dsp1 (pid: 7198 comm: kworker/1:20) [ 1530.973118][ T4293] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:5: Failed to release dquot type 0 [ 1531.094042][ T4293] EXT4-fs error (device loop1): ext4_map_blocks:637: inode #3: block 2: comm kworker/u4:5: lblock 2 mapped to illegal pblock 2 (length 1) [ 1531.166052][ T4293] EXT4-fs error (device loop1): ext4_write_dquot:6821: comm kworker/u4:5: Failed to commit dquot type 0 [ 1531.234788][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1531.261891][T10851] EXT4-fs error (device loop1): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1531.301803][T17304] loop7: detected capacity change from 0 to 32768 [ 1531.348019][T10851] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1531.379557][T10851] EXT4-fs error (device loop1): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 1531.410480][T17304] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1531.738144][T14790] ocfs2: Unmounting device (7,7) on (node local) [ 1532.049510][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18438'. [ 1532.069109][T17342] mkiss: ax0: crc mode is auto. [ 1532.766809][ C0] vkms_vblank_simulate: vblank timer overrun [ 1532.890608][T17366] loop9: detected capacity change from 0 to 4096 [ 1533.469508][T17383] loop1: detected capacity change from 0 to 2048 [ 1533.575457][T17383] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1533.986294][T17399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.18461'. [ 1534.049001][T17399] netlink: 'syz.7.18461': attribute type 2 has an invalid length. [ 1534.074972][T17361] loop4: detected capacity change from 0 to 40427 [ 1534.105431][T17399] netlink: 'syz.7.18461': attribute type 1 has an invalid length. [ 1534.123485][T17361] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 1534.143375][T17399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.18461'. [ 1534.195730][T17361] F2FS-fs (loop4): invalid crc value [ 1534.251461][T17361] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1534.470633][T17361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1534.802796][T11183] syz-executor: attempt to access beyond end of device [ 1534.802796][T11183] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1534.833696][ T4275] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1534.870003][ T4275] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1534.882881][ T4275] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1534.913792][ T4275] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1534.924190][ T4275] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1534.934873][ T4275] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1535.330904][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.470469][T17412] loop7: detected capacity change from 0 to 32768 [ 1535.647861][T17412] XFS (loop7): Mounting V5 Filesystem [ 1535.691934][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.888019][T17412] XFS (loop7): Ending clean mount [ 1535.940975][T17412] XFS (loop7): Quotacheck needed: Please wait. [ 1536.137628][T17412] XFS (loop7): Quotacheck: Done. [ 1536.238170][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.337216][T14790] XFS (loop7): Unmounting Filesystem [ 1536.502497][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.583933][ C0] vkms_vblank_simulate: vblank timer overrun [ 1536.634957][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.640341][T17445] loop9: detected capacity change from 0 to 32768 [ 1536.753549][T17442] loop1: detected capacity change from 0 to 32768 [ 1536.861706][T17445] XFS (loop9): Mounting V5 Filesystem [ 1536.943438][T17442] XFS (loop1): Mounting V5 Filesystem [ 1537.023580][ T4275] Bluetooth: hci3: command 0x0409 tx timeout [ 1537.098279][T17445] XFS (loop9): Ending clean mount [ 1537.116142][T17445] XFS (loop9): Quotacheck needed: Please wait. [ 1537.200155][T17442] XFS (loop1): Ending clean mount [ 1537.384617][T17445] XFS (loop9): Quotacheck: Done. [ 1537.549702][T17418] chnl_net:caif_netlink_parms(): no params data found [ 1537.561175][T11854] XFS (loop9): Unmounting Filesystem [ 1537.616790][ C0] vkms_vblank_simulate: vblank timer overrun [ 1537.679849][T10851] XFS (loop1): Unmounting Filesystem [ 1537.826886][T17497] loop4: detected capacity change from 0 to 2048 [ 1537.925767][T17497] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1537.964343][T17497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1538.021586][T17503] loop7: detected capacity change from 0 to 1024 [ 1538.050960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.173827][T17503] hfsplus: bad catalog entry type [ 1538.180688][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.425526][ T11] hfsplus: b-tree write err: -5, ino 25 [ 1538.432123][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1538.439238][ T11] hfsplus: b-tree write err: -5, ino 2 [ 1538.548948][T17418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.593215][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.601435][T17418] device bridge_slave_0 entered promiscuous mode [ 1538.867030][T17418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.879533][T17524] loop1: detected capacity change from 0 to 512 [ 1538.883501][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.890400][T17524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1538.911244][T17524] EXT4-fs: Ignoring removed mblk_io_submit option [ 1538.924396][T17418] device bridge_slave_1 entered promiscuous mode [ 1538.942823][T17524] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1538.956021][T17524] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 1538.972479][T17524] EXT4-fs (loop1): 1 truncate cleaned up [ 1538.978992][T17524] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1538.993665][ T4323] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1539.103607][ T4275] Bluetooth: hci3: command 0x041b tx timeout [ 1539.148310][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1539.193855][T17418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.253276][ T4323] usb 10-1: Using ep0 maxpacket: 32 [ 1539.260735][ T4323] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1539.286715][ T4323] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1539.345615][ T4323] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1539.382406][ T4323] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1539.414378][ T4323] usb 10-1: Product: syz [ 1539.421287][T17418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.424096][ T4323] usb 10-1: Manufacturer: syz [ 1539.453254][ T4323] usb 10-1: SerialNumber: syz [ 1539.475496][ T4323] input: appletouch as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input76 [ 1539.723253][ T4323] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1539.753601][ T7198] usb 10-1: USB disconnect, device number 7 [ 1539.753604][ C0] appletouch 10-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 1539.808767][T17418] team0: Port device team_slave_0 added [ 1539.844277][ T7198] appletouch 10-1:1.0: input: appletouch disconnected [ 1539.916442][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.943417][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1539.963699][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1539.977347][T17418] team0: Port device team_slave_1 added [ 1539.996524][ T4323] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 1540.026345][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.060393][ T4323] usb 2-1: config 0 descriptor?? [ 1540.208698][T17534] loop4: detected capacity change from 0 to 40427 [ 1540.235010][T17534] F2FS-fs (loop4): invalid crc value [ 1540.265332][T17534] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 1540.338112][T17418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1540.390069][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.486457][ T4323] wacom 0003:056A:0010.003D: unknown main item tag 0x5 [ 1540.510588][ T4323] wacom 0003:056A:0010.003D: unknown main item tag 0x5 [ 1540.528115][ T4323] wacom 0003:056A:0010.003D: unknown main item tag 0x0 [ 1540.533394][T17418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.546212][T17534] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1540.555004][ T4323] wacom 0003:056A:0010.003D: unknown main item tag 0x0 [ 1540.562558][T17554] netlink: 'syz.9.18493': attribute type 16 has an invalid length. [ 1540.585664][T17541] loop7: detected capacity change from 0 to 40427 [ 1540.591995][ T4323] wacom 0003:056A:0010.003D: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 1540.614632][T17554] netlink: 'syz.9.18493': attribute type 3 has an invalid length. [ 1540.631784][T17418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.651157][ T4323] wacom 0003:056A:0010.003D: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.1-1/input0 [ 1540.684554][T17541] F2FS-fs (loop7): Small segment_count (9 < 1 * 24) [ 1540.686728][T17418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1540.694162][T17554] netlink: 64066 bytes leftover after parsing attributes in process `syz.9.18493'. [ 1540.717101][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.738232][ T4323] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0010.003D/input/input77 [ 1540.764026][T17418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.775167][T17541] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1540.796280][T17541] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1540.893314][ T4323] usb 2-1: USB disconnect, device number 40 [ 1540.918145][T17541] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1540.943713][T17541] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1541.183147][ T4275] Bluetooth: hci3: command 0x040f tx timeout [ 1541.189670][T14790] syz-executor: attempt to access beyond end of device [ 1541.189670][T14790] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1541.282125][T17560] fido_id[17560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1541.487630][T17418] device hsr_slave_0 entered promiscuous mode [ 1541.492578][T17567] loop9: detected capacity change from 0 to 4096 [ 1541.547798][T17567] EXT4-fs (loop9): #clusters per group too big: 32768 [ 1541.556617][T17418] device hsr_slave_1 entered promiscuous mode [ 1541.582870][T17418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1541.623110][T17418] Cannot create hsr debugfs directory [ 1541.785925][ T56] device hsr_slave_0 left promiscuous mode [ 1541.809828][ T56] device hsr_slave_1 left promiscuous mode [ 1541.841619][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.863482][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.901909][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.962233][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1542.000834][ T56] device bridge_slave_1 left promiscuous mode [ 1542.020493][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.084667][ T56] device bridge_slave_0 left promiscuous mode [ 1542.108271][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.126830][T17578] loop7: detected capacity change from 0 to 512 [ 1542.194843][T17578] EXT4-fs: Ignoring removed oldalloc option [ 1542.201806][T17578] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1542.267128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.284801][T17578] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1542.300617][ T56] device veth1_macvtap left promiscuous mode [ 1542.343438][T17578] EXT4-fs (loop7): 1 truncate cleaned up [ 1542.349180][T17578] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1542.367457][ T56] device veth0_macvtap left promiscuous mode [ 1542.388126][T14790] EXT4-fs (loop7): unmounting filesystem. [ 1542.413253][ T56] device veth1_vlan left promiscuous mode [ 1542.430262][ T56] device veth0_vlan left promiscuous mode [ 1542.544868][T17569] loop1: detected capacity change from 0 to 32768 [ 1542.608257][T17569] XFS (loop1): Mounting V5 Filesystem [ 1542.621786][T17582] loop4: detected capacity change from 0 to 4096 [ 1542.663321][T17569] XFS (loop1): Ending clean mount [ 1542.684370][T17569] XFS (loop1): Quotacheck needed: Please wait. [ 1542.773361][T17582] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1542.778649][T17567] loop9: detected capacity change from 0 to 32768 [ 1542.898692][T17567] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 11 [ 1542.918392][T17569] XFS (loop1): Quotacheck: Done. [ 1542.993924][T17593] loop7: detected capacity change from 0 to 4096 [ 1543.058136][T17582] ntfs3: Cannot use different iocharset when remounting! [ 1543.102925][T10851] XFS (loop1): Unmounting Filesystem [ 1543.104263][T17594] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1543.195527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.203443][T17593] syz.7.18501: attempt to access beyond end of device [ 1543.203443][T17593] loop7: rw=0, sector=88498, nr_sectors = 2 limit=4096 [ 1543.261886][T17593] NILFS (loop7): I/O error reading node block for GC (ino=129, vblocknr=32768) [ 1543.272603][ T4275] Bluetooth: hci3: command 0x0419 tx timeout [ 1543.298604][T17593] NILFS (loop7): error -5 preparing GC: cannot read source blocks [ 1543.349960][ T4258] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 11 [ 1543.501363][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.701752][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.785380][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18507'. [ 1543.862411][T17606] Bluetooth: MGMT ver 1.22 [ 1543.901234][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.933751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.146228][T17612] loop9: detected capacity change from 0 to 1024 [ 1544.207192][T17612] hfsplus: extend alloc file! (16384,256,150995124) [ 1544.230845][T17612] hfsplus: failed to extend attributes file [ 1544.278298][T17615] hfsplus: extend alloc file! (16384,256,150995124) [ 1544.293269][T17615] hfsplus: failed to extend attributes file [ 1544.661770][T17610] loop4: detected capacity change from 0 to 32768 [ 1544.769751][T17614] loop1: detected capacity change from 0 to 32768 [ 1544.786383][T17614] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1544.811055][T17610] XFS (loop4): Mounting V5 Filesystem [ 1544.906445][ T4718] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11 [ 1544.931052][T17610] XFS (loop4): Ending clean mount [ 1544.955716][T17610] XFS (loop4): Quotacheck needed: Please wait. [ 1545.051056][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.123132][T17610] XFS (loop4): Quotacheck: Done. [ 1545.305682][T11183] XFS (loop4): Unmounting Filesystem [ 1545.491426][T17622] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop9 scanned by syz.9.18513 (17622) [ 1545.535827][T17622] BTRFS info (device loop9): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1545.566703][T17622] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 1545.581330][T17622] BTRFS info (device loop9): enabling ssd optimizations [ 1545.603095][T17622] BTRFS info (device loop9): not using ssd optimizations [ 1545.610194][T17622] BTRFS info (device loop9): turning off barriers [ 1545.643141][T17622] BTRFS info (device loop9): use no compression [ 1545.649494][T17622] BTRFS info (device loop9): using free space tree [ 1545.746132][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.752487][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.760322][T17629] set_capacity_and_notify: 1 callbacks suppressed [ 1545.760337][T17629] loop1: detected capacity change from 0 to 32768 [ 1545.879757][T17629] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1546.050885][T10851] ocfs2: Unmounting device (7,1) on (node local) [ 1546.206898][T11854] BTRFS info (device loop9): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 1546.537463][T17656] loop1: detected capacity change from 0 to 512 [ 1546.626806][T17656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1546.856861][T17656] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.18519: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1546.896175][T17656] EXT4-fs (loop1): Remounting filesystem read-only [ 1546.984899][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.082248][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1547.121175][T17663] loop9: detected capacity change from 0 to 4096 [ 1547.128339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.263657][T17663] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1547.302694][ C0] vkms_vblank_simulate: vblank timer overrun [ 1547.391878][T17670] loop7: detected capacity change from 0 to 764 [ 1547.454336][T17670] rock: directory entry would overflow storage [ 1547.483349][T17670] rock: sig=0x4654, size=5, remaining=4 [ 1547.504349][T11854] EXT4-fs (loop9): unmounting filesystem. [ 1547.678942][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1547.979609][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1548.172217][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1548.357896][T17674] loop9: detected capacity change from 0 to 40427 [ 1548.370988][T17674] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x3ffff [ 1548.389363][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1548.409452][T17674] F2FS-fs (loop9): invalid crc value [ 1548.442684][T17674] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1548.574489][T17674] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1548.753411][T11854] syz-executor: attempt to access beyond end of device [ 1548.753411][T11854] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1549.049317][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.116297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.184655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.350803][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.463127][ T56] bond0 (unregistering): Released all slaves [ 1549.489848][T17691] loop9: detected capacity change from 0 to 40427 [ 1549.511868][T17691] F2FS-fs (loop9): invalid crc value [ 1549.539572][T17691] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1549.583873][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.586507][T17691] F2FS-fs (loop9): Start checkpoint disabled! [ 1549.609419][T17691] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 1549.712920][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18527'. [ 1549.743258][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18527'. [ 1549.763500][T17680] netlink: 'syz.4.18515': attribute type 3 has an invalid length. [ 1549.771402][T17680] netlink: 666 bytes leftover after parsing attributes in process `syz.4.18515'. [ 1549.799917][ T4338] kworker/u4:7: attempt to access beyond end of device [ 1549.799917][ T4338] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 1551.269161][T17418] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1551.328035][T17418] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1551.375717][T17418] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1551.415185][T17418] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1551.472645][T17713] loop1: detected capacity change from 0 to 32768 [ 1551.665167][T17713] XFS (loop1): Mounting V5 Filesystem [ 1551.696701][T17418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1551.705861][T17713] XFS (loop1): Ending clean mount [ 1551.711496][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1551.744393][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1551.787324][T17713] XFS (loop1): Quotacheck needed: Please wait. [ 1551.816090][T17418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1551.855207][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1551.901228][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1551.960912][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.968120][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1552.004990][T17713] XFS (loop1): Quotacheck: Done. [ 1552.051982][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1552.104816][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1552.137096][ T4884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.144273][ T4884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.202604][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1552.222185][T10851] XFS (loop1): Unmounting Filesystem [ 1552.252571][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1552.278178][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1552.316822][ C0] vkms_vblank_simulate: vblank timer overrun [ 1552.318775][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1552.410201][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1552.470680][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1552.479416][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1552.495520][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1552.570405][T17418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1552.583795][T17418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1552.621024][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1552.630498][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1552.645559][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1552.684255][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1552.697840][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1552.746931][T17733] loop7: detected capacity change from 0 to 40427 [ 1552.781751][T17733] F2FS-fs (loop7): Invalid segment/section count (31, 24 x 1) [ 1552.822604][T17733] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1552.879429][T17733] F2FS-fs (loop7): invalid crc value [ 1552.907901][T17733] F2FS-fs (loop7): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 1553.010059][T17733] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1553.203289][T17733] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 1553.230330][T17733] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 1553.250823][T17777] loop4: detected capacity change from 0 to 1024 [ 1553.305810][T17780] loop1: detected capacity change from 0 to 1024 [ 1553.310610][T17733] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1553.330408][T17733] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1553.397654][T17777] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1553.464057][T17777] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1553.491239][T17780] hfsplus: xattr searching failed [ 1553.516418][T17777] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.18553: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 2, max 15(4), depth 0(0) [ 1553.603785][T17777] EXT4-fs (loop4): no journal found [ 1553.620279][T17777] EXT4-fs (loop4): can't get journal size [ 1553.690349][T17777] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1553.712215][T17418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1553.727751][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1553.804553][T14790] syz-executor: attempt to access beyond end of device [ 1553.804553][T14790] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1553.841836][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1553.870264][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1553.893833][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1553.966236][T17763] loop9: detected capacity change from 0 to 32768 [ 1553.976421][T11183] EXT4-fs (loop4): unmounting filesystem. [ 1554.021247][T17418] device veth0_vlan entered promiscuous mode [ 1554.043890][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1554.097221][ T4884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1554.109904][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1554.154470][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1554.191593][T17418] device veth1_vlan entered promiscuous mode [ 1554.264176][T17418] device veth0_macvtap entered promiscuous mode [ 1554.271549][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1554.290919][T17763] XFS (loop9): Mounting V5 Filesystem [ 1554.331820][T17803] loop1: detected capacity change from 0 to 256 [ 1554.347743][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1554.359482][T17803] exfat: Deprecated parameter 'utf8' [ 1554.398131][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1554.408725][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1554.420804][T17418] device veth1_macvtap entered promiscuous mode [ 1554.426313][T17763] XFS (loop9): Ending clean mount [ 1554.454594][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1554.490780][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1554.561971][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.613196][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.633172][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.670539][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.680810][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.691741][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.732734][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.763335][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.791210][T17418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.798836][T11854] XFS (loop9): Unmounting Filesystem [ 1554.902555][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1554.919329][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1554.937366][T17813] sch_tbf: burst 4 is lower than device wg0 mtu (1420) ! [ 1554.968154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.114259][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.153074][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.162945][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.216348][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.256303][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.293169][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.333704][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.388489][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.412290][T17418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.434606][T17418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.476231][T17418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.542881][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1555.573936][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1555.609693][T17418] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.636905][T17418] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.663570][T17418] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.685081][T17418] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.700276][T17837] loop4: detected capacity change from 0 to 512 [ 1555.867422][T17837] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 1555.929399][T17841] loop1: detected capacity change from 0 to 512 [ 1555.944095][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1555.951953][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1555.964952][T17837] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1555.972961][T17841] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1556.011603][T17837] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 1556.029184][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1556.076285][T17841] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 1556.114004][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.140214][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.163173][T17837] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1556.165272][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1556.188087][T17837] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.18569: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1556.255074][T17841] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 1556.313803][T17837] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.18569: couldn't read orphan inode 13 (err -117) [ 1556.354967][T17837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1556.429321][T17826] loop7: detected capacity change from 0 to 32768 [ 1556.436584][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1556.489543][T17826] [ 1556.489543][T17826] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1556.489543][T17826] [ 1556.546920][T17826] ERROR: (device loop7): diWrite: ixpxd invalid [ 1556.546920][T17826] [ 1556.604252][T11183] EXT4-fs (loop4): unmounting filesystem. [ 1556.634587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1556.651694][T17826] ERROR: (device loop7): txCommit: [ 1556.651694][T17826] [ 1556.840915][T14790] [ 1556.840915][T14790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1556.840915][T14790] [ 1556.878653][T14790] [ 1556.878653][T14790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1556.878653][T14790] [ 1557.023685][T17864] netlink: 8 bytes leftover after parsing attributes in process `syz.9.18575'. [ 1557.077391][T17866] netlink: 'syz.9.18575': attribute type 13 has an invalid length. [ 1557.165474][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.9.18575'. [ 1557.969346][T17892] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18584'. [ 1558.334862][T17875] loop9: detected capacity change from 0 to 32768 [ 1558.502540][T17875] XFS (loop9): Mounting V5 Filesystem [ 1558.591382][T17875] XFS (loop9): Ending clean mount [ 1558.611949][T17875] XFS (loop9): Quotacheck needed: Please wait. [ 1558.734746][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.785054][T17875] XFS (loop9): Quotacheck: Done. [ 1558.959808][T11854] XFS (loop9): Unmounting Filesystem [ 1558.973877][T17900] loop1: detected capacity change from 0 to 32768 [ 1559.004524][T17900] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.18586 (17900) [ 1559.030362][T17901] loop4: detected capacity change from 0 to 32768 [ 1559.065937][T17901] (syz.4.18587,17901,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1559.103128][T17901] (syz.4.18587,17901,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1559.130080][T17900] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1559.148180][ C0] vkms_vblank_simulate: vblank timer overrun [ 1559.169201][T17901] JBD2: Ignoring recovery information on journal [ 1559.173330][T17900] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1559.195082][T17900] BTRFS info (device loop1): using free space tree [ 1559.268060][T17901] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1559.541948][T17901] (syz.4.18587,17901,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 1559.634154][T17900] BTRFS info (device loop1): enabling ssd optimizations [ 1559.681795][T17901] (syz.4.18587,17901,0):update_backups:188 ERROR: status = -12 [ 1559.747365][T17901] ocfs2: Failed to update super blocks on 7,4 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 1559.869487][T17946] loop9: detected capacity change from 0 to 8192 [ 1559.877541][T10851] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1559.911976][T17946] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1559.925726][T17946] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 1559.936098][T17946] REISERFS (device loop9): using ordered data mode [ 1559.942634][T17946] reiserfs: using flush barriers [ 1559.952748][T17946] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1559.970602][T17946] REISERFS (device loop9): checking transaction log (loop9) [ 1560.024524][T11183] ocfs2: Unmounting device (7,4) on (node local) [ 1560.189654][T17957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.235624][T17946] REISERFS (device loop9): Using tea hash to sort names [ 1560.255423][T17957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.266129][T17946] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 1560.304552][T17957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.378262][T17957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.462899][T17957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.521780][T17957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.573133][T17957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.610916][T17957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.661419][T17957] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.693793][T17957] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.729371][T17966] overlayfs: unrecognized mount option "\" or missing value [ 1560.851869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.235828][T17975] loop4: detected capacity change from 0 to 1024 [ 1561.282537][T17977] loop7: detected capacity change from 0 to 64 [ 1561.307158][T17975] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 1561.340920][T17975] hfsplus: xattr search failed [ 1561.383803][T17975] syz.4.18601: attempt to access beyond end of device [ 1561.383803][T17975] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 1561.411312][T17977] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1561.464123][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 1561.464137][ T26] audit: type=1800 audit(1561.487:1031): pid=17977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.18603" name="file1" dev="loop7" ino=5 res=0 errno=0 [ 1561.501941][T17975] buffer_io_error: 12 callbacks suppressed [ 1561.501961][T17975] Buffer I/O error on dev loop4, logical block 458752, async page read [ 1561.530299][T17979] loop0: detected capacity change from 0 to 4096 [ 1561.548194][T17975] hfsplus: unable to mark blocks free: error -5 [ 1561.571707][T17979] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 1561.613330][T17975] hfsplus: can't free extent [ 1561.680896][T17979] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1561.817037][T17989] net_ratelimit: 12 callbacks suppressed [ 1561.817053][T17989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1562.041789][T16075] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 1562.242099][T17997] loop4: detected capacity change from 0 to 4096 [ 1562.321707][T17997] NILFS (loop4): invalid segment: Checksum error in segment payload [ 1562.353232][T17997] NILFS (loop4): trying rollback from an earlier position [ 1562.410991][T17997] NILFS (loop4): recovery complete [ 1562.463521][T18006] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1562.794774][T18016] tipc: Failed to obtain node identity [ 1562.811550][T18016] tipc: Enabling of bearer rejected, failed to enable media [ 1562.858087][T18018] tipc: Started in network mode [ 1562.923876][T18018] tipc: Node identity bbbbbb, cluster identity 4711 [ 1562.951245][T18018] tipc: Enabled bearer , priority 10 [ 1563.077950][T17995] loop1: detected capacity change from 0 to 32768 [ 1563.119845][T17995] (syz.1.18607,17995,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1563.149765][T17995] (syz.1.18607,17995,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1563.245986][T17995] JBD2: Ignoring recovery information on journal [ 1563.277138][T18031] netlink: 20 bytes leftover after parsing attributes in process `syz.7.18620'. [ 1563.403274][T17995] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1563.554708][T17995] (syz.1.18607,17995,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 1563.593245][T17995] (syz.1.18607,17995,1):update_backups:188 ERROR: status = -12 [ 1563.623276][T17995] ocfs2: Failed to update super blocks on 7,1 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 1563.853371][T10851] ocfs2: Unmounting device (7,1) on (node local) [ 1564.083646][ T6457] tipc: Node number set to 3149642496 [ 1564.153401][ T5374] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1564.280627][T18039] loop4: detected capacity change from 0 to 32768 [ 1564.353486][ T5374] usb 10-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1564.379364][ T5374] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.402474][T18039] XFS (loop4): Mounting V5 Filesystem [ 1564.430332][ T5374] usb 10-1: config 0 descriptor?? [ 1564.463881][ T5374] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1564.492865][T18039] XFS (loop4): Ending clean mount [ 1564.502970][T18039] XFS (loop4): Quotacheck needed: Please wait. [ 1564.623461][T18039] XFS (loop4): Quotacheck: Done. [ 1564.810082][T11183] XFS (loop4): Unmounting Filesystem [ 1564.865428][ T5374] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1564.893178][ T5374] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1565.089805][ T5374] usb 10-1: USB disconnect, device number 8 [ 1565.139728][T18081] loop7: detected capacity change from 0 to 128 [ 1565.854524][T18104] netlink: 'syz.1.18639': attribute type 1 has an invalid length. [ 1566.771339][T18108] loop9: detected capacity change from 0 to 32768 [ 1566.844742][T18108] (syz.9.18638,18108,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1566.901582][T18108] (syz.9.18638,18108,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1567.036272][T18108] JBD2: Ignoring recovery information on journal [ 1567.146125][T18146] loop1: detected capacity change from 0 to 256 [ 1567.167560][T18108] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 1567.240378][T18146] FAT-fs (loop1): Directory bread(block 64) failed [ 1567.293319][T18146] FAT-fs (loop1): Directory bread(block 65) failed [ 1567.300018][T18146] FAT-fs (loop1): Directory bread(block 66) failed [ 1567.364410][T18108] (syz.9.18638,18108,1):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 1567.382052][T18151] loop4: detected capacity change from 0 to 16 [ 1567.405539][T18146] FAT-fs (loop1): Directory bread(block 67) failed [ 1567.429154][T18146] FAT-fs (loop1): Directory bread(block 68) failed [ 1567.443735][T18151] erofs: (device loop4): mounted with root inode @ nid 36. [ 1567.452533][T18108] (syz.9.18638,18108,1):update_backups:188 ERROR: status = -12 [ 1567.488650][T18151] syz.4.18654: attempt to access beyond end of device [ 1567.488650][T18151] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 1567.513968][T18108] ocfs2: Failed to update super blocks on 7,9 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 1567.528069][T18146] FAT-fs (loop1): Directory bread(block 69) failed [ 1567.543181][T18146] FAT-fs (loop1): Directory bread(block 70) failed [ 1567.580151][T18146] FAT-fs (loop1): Directory bread(block 71) failed [ 1567.590151][T18151] syz.4.18654: attempt to access beyond end of device [ 1567.590151][T18151] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 1567.624394][T18146] FAT-fs (loop1): Directory bread(block 72) failed [ 1567.630976][T18146] FAT-fs (loop1): Directory bread(block 73) failed [ 1567.698860][T11854] ocfs2: Unmounting device (7,9) on (node local) [ 1567.922794][T18160] loop4: detected capacity change from 0 to 256 [ 1567.983140][T24557] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1568.239850][T18142] loop0: detected capacity change from 0 to 32768 [ 1568.278478][T18142] [ 1568.278478][T18142] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1568.278478][T18142] [ 1568.303278][T24557] Bluetooth: hci4: command 0x0406 tx timeout [ 1568.409922][T18142] ERROR: (device loop0): diWrite: ixpxd invalid [ 1568.409922][T18142] [ 1568.488426][T18142] ERROR: (device loop0): txCommit: [ 1568.488426][T18142] [ 1568.667237][T17418] [ 1568.667237][T17418] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1568.667237][T17418] [ 1568.688963][T17418] [ 1568.688963][T17418] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1568.688963][T17418] [ 1568.712045][T18181] mkiss: ax0: crc mode is auto. [ 1568.787644][ T5374] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1568.993135][ T5374] usb 2-1: Using ep0 maxpacket: 16 [ 1569.002264][ T5374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1569.078240][ T5374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1569.148282][ T5374] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1569.179798][T18171] loop4: detected capacity change from 0 to 32768 [ 1569.186859][ T5374] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1569.215114][ T5374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.265213][ T5374] usb 2-1: config 0 descriptor?? [ 1569.290523][T18171] MetaData crosses page boundary!! [ 1569.306148][T18171] lblock = 6161616161, size = 370544640 [ 1569.311870][T18171] CPU: 0 PID: 18171 Comm: syz.4.18662 Not tainted syzkaller #0 [ 1569.319428][T18171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1569.329510][T18171] Call Trace: [ 1569.332819][T18171] [ 1569.335782][T18171] dump_stack_lvl+0x188/0x24e [ 1569.340506][T18171] ? __wake_up_bit+0x210/0x210 [ 1569.345312][T18171] ? show_regs_print_info+0x12/0x12 [ 1569.350560][T18171] ? load_image+0x400/0x400 [ 1569.355112][T18171] __get_metapage+0xaa8/0xfa0 [ 1569.359835][T18171] dtSearch+0x5d5/0x2050 [ 1569.364167][T18171] jfs_symlink+0x851/0xfb0 [ 1569.368610][T18171] ? jfs_unlink+0xa00/0xa00 [ 1569.373143][T18171] ? make_kgid+0x660/0x660 [ 1569.377562][T18171] ? apparmor_path_symlink+0x1ac/0x230 [ 1569.383029][T18171] ? lookup_one_qstr_excl+0x11c/0x240 [ 1569.388401][T18171] ? generic_permission+0x230/0x510 [ 1569.393599][T18171] ? inode_permission+0xef/0x480 [ 1569.398528][T18171] ? bpf_lsm_inode_symlink+0x5/0x10 [ 1569.403727][T18171] ? security_inode_symlink+0xb2/0x100 [ 1569.409191][T18171] vfs_symlink+0x247/0x3d0 [ 1569.413620][T18171] do_symlinkat+0x1b6/0x400 [ 1569.418131][T18171] ? vfs_symlink+0x3d0/0x3d0 [ 1569.422723][T18171] ? getname_flags+0x206/0x500 [ 1569.427486][T18171] __x64_sys_symlink+0x7a/0x90 [ 1569.432264][T18171] do_syscall_64+0x4c/0xa0 [ 1569.436686][T18171] ? clear_bhb_loop+0x60/0xb0 [ 1569.441374][T18171] ? clear_bhb_loop+0x60/0xb0 [ 1569.446058][T18171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1569.451951][T18171] RIP: 0033:0x7f57c8f9cdd9 [ 1569.456373][T18171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.476082][T18171] RSP: 002b:00007f57c9e01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1569.484505][T18171] RAX: ffffffffffffffda RBX: 00007f57c9215fa0 RCX: 00007f57c8f9cdd9 [ 1569.492476][T18171] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 1569.500444][T18171] RBP: 00007f57c9032d69 R08: 0000000000000000 R09: 0000000000000000 [ 1569.508409][T18171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.516373][T18171] R13: 00007f57c9216038 R14: 00007f57c9215fa0 R15: 00007fff9bde0e48 [ 1569.524355][T18171] [ 1569.527435][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.683471][T18171] bread failed! [ 1569.762956][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.797977][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.815144][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.822527][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.850303][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.873178][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.923599][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.930919][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.969095][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1569.996454][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1570.013981][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1570.021416][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1570.035505][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1570.042950][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1570.057271][ T5374] microsoft 0003:045E:07DA.003E: unknown main item tag 0x0 [ 1570.070846][ T5374] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.003E/input/input80 [ 1570.089066][ T5374] microsoft 0003:045E:07DA.003E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1570.112016][ T5374] usb 2-1: USB disconnect, device number 41 [ 1570.362258][T18215] fido_id[18215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1570.549740][T18207] loop0: detected capacity change from 0 to 32768 [ 1570.689860][T18207] XFS (loop0): Mounting V5 Filesystem [ 1570.754947][T18231] loop1: detected capacity change from 0 to 256 [ 1570.779651][T18207] XFS (loop0): Ending clean mount [ 1570.794761][T18231] exfat: Deprecated parameter 'utf8' [ 1570.799790][T18207] XFS (loop0): Quotacheck needed: Please wait. [ 1570.803884][T18231] exfat: Deprecated parameter 'utf8' [ 1570.901354][T18231] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 1571.013464][T18207] XFS (loop0): Quotacheck: Done. [ 1571.242638][T17418] XFS (loop0): Unmounting Filesystem [ 1571.285125][T18236] can0: slcan on ptm0. [ 1571.381110][ C0] vkms_vblank_simulate: vblank timer overrun [ 1571.436048][T18235] can0 (unregistered): slcan off ptm0. [ 1571.597085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1571.633742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1571.650424][T18248] loop7: detected capacity change from 0 to 8 [ 1571.683905][T18250] loop1: detected capacity change from 0 to 1024 [ 1571.706656][T18248] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1571.753165][T18248] SQUASHFS error: Failed to read block 0x9b: -5 [ 1571.776634][T18255] loop9: detected capacity change from 0 to 512 [ 1571.802333][T18248] SQUASHFS error: Unable to read metadata cache entry [99] [ 1571.847430][T18248] SQUASHFS error: Unable to read inode 0x127 [ 1571.956992][ T4338] hfsplus: b-tree write err: -5, ino 25 [ 1571.963935][ T4338] hfsplus: b-tree write err: -5, ino 4 [ 1571.968150][T18255] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1571.969499][ T4338] hfsplus: b-tree write err: -5, ino 2 [ 1572.115588][ T4338] hfsplus: b-tree write err: -5, ino 17 [ 1572.242908][T18265] loop1: detected capacity change from 0 to 256 [ 1572.286365][T11854] EXT4-fs (loop9): unmounting filesystem. [ 1572.294429][T18265] exfat: Deprecated parameter 'utf8' [ 1572.299770][T18265] exfat: Deprecated parameter 'utf8' [ 1572.397953][T18265] exfat: Deprecated parameter 'namecase' [ 1572.474026][T18265] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1572.722949][T18277] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 1573.083854][ T126] kernel write not supported for file /input/event2 (pid: 126 comm: kworker/0:2) [ 1573.233993][T18263] loop7: detected capacity change from 0 to 32768 [ 1573.358308][T18299] loop0: detected capacity change from 0 to 164 [ 1573.384406][T18297] MetaData crosses page boundary!! [ 1573.400280][T18297] lblock = 6161616161, size = 370544640 [ 1573.446903][T18297] CPU: 1 PID: 18297 Comm: syz.7.18687 Not tainted syzkaller #0 [ 1573.454616][T18297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1573.464704][T18297] Call Trace: [ 1573.468007][T18297] [ 1573.470950][T18297] dump_stack_lvl+0x188/0x24e [ 1573.475678][T18297] ? __wake_up_bit+0x210/0x210 [ 1573.480476][T18297] ? show_regs_print_info+0x12/0x12 [ 1573.485719][T18297] ? load_image+0x400/0x400 [ 1573.490272][T18297] __get_metapage+0xaa8/0xfa0 [ 1573.494990][T18297] dtSearch+0x5d5/0x2050 [ 1573.499294][T18297] jfs_symlink+0x851/0xfb0 [ 1573.503757][T18297] ? jfs_unlink+0xa00/0xa00 [ 1573.508335][T18297] ? make_kgid+0x660/0x660 [ 1573.512782][T18297] ? apparmor_path_symlink+0x1ac/0x230 [ 1573.518281][T18297] ? lookup_one_qstr_excl+0x11c/0x240 [ 1573.523682][T18297] ? generic_permission+0x230/0x510 [ 1573.528923][T18297] ? inode_permission+0xef/0x480 [ 1573.533890][T18297] ? bpf_lsm_inode_symlink+0x5/0x10 [ 1573.539130][T18297] ? security_inode_symlink+0xb2/0x100 [ 1573.544634][T18297] vfs_symlink+0x247/0x3d0 [ 1573.549108][T18297] do_symlinkat+0x1b6/0x400 [ 1573.553656][T18297] ? vfs_symlink+0x3d0/0x3d0 [ 1573.558277][T18297] ? getname_flags+0x206/0x500 [ 1573.563070][T18297] __x64_sys_symlink+0x7a/0x90 [ 1573.567867][T18297] do_syscall_64+0x4c/0xa0 [ 1573.572322][T18297] ? clear_bhb_loop+0x60/0xb0 [ 1573.577029][T18297] ? clear_bhb_loop+0x60/0xb0 [ 1573.581733][T18297] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1573.587653][T18297] RIP: 0033:0x7fa62999cdd9 [ 1573.592095][T18297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.611727][T18297] RSP: 002b:00007fa62a838028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 1573.620175][T18297] RAX: ffffffffffffffda RBX: 00007fa629c16090 RCX: 00007fa62999cdd9 [ 1573.628185][T18297] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 000020000000a900 [ 1573.636190][T18297] RBP: 00007fa629a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1573.644188][T18297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.652190][T18297] R13: 00007fa629c16128 R14: 00007fa629c16090 R15: 00007fff661f2828 [ 1573.660211][T18297] [ 1573.843207][T18297] bread failed! [ 1573.850729][T18308] loop0: detected capacity change from 0 to 1024 [ 1573.871849][T18275] loop4: detected capacity change from 0 to 32768 [ 1573.942494][T18308] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1574.032906][T18275] XFS (loop4): Mounting V5 Filesystem [ 1574.051311][T18320] IPVS: stopping backup sync thread 15523 ... [ 1574.180425][T18275] XFS (loop4): Ending clean mount [ 1574.250815][T18275] XFS (loop4): Quotacheck needed: Please wait. [ 1574.271017][T17418] EXT4-fs (loop0): unmounting filesystem. [ 1574.544387][T18275] XFS (loop4): Quotacheck: Done. [ 1574.706355][T11183] XFS (loop4): Unmounting Filesystem [ 1575.366542][T18351] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1575.430789][T18351] netlink: 'syz.1.18715': attribute type 1 has an invalid length. [ 1575.442976][T18351] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18715'. [ 1575.458083][ T6451] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1575.647249][ T6451] usb 10-1: Using ep0 maxpacket: 16 [ 1575.670454][ T6451] usb 10-1: config index 0 descriptor too short (expected 51443, got 18) [ 1575.721525][ T6451] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1575.756734][ T6451] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.780884][T18364] set_capacity_and_notify: 2 callbacks suppressed [ 1575.780941][T18364] loop7: detected capacity change from 0 to 2048 [ 1575.795296][ T6451] usb 10-1: Product: syz [ 1575.799592][ T6451] usb 10-1: Manufacturer: syz [ 1575.815585][ T6451] usb 10-1: SerialNumber: syz [ 1575.835034][T18364] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1575.849168][ T6451] r8152-cfgselector 10-1: config 0 descriptor?? [ 1575.909141][T18369] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1576.092465][ T6451] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1576.101815][ T6451] usbip-host 10-1: 10-1 is not in match_busid table... skip! [ 1576.311989][ T6451] usb 10-1: USB disconnect, device number 9 [ 1576.451131][T18391] loop0: detected capacity change from 0 to 256 [ 1576.577873][T18392] loop1: detected capacity change from 0 to 2048 [ 1576.754029][T18392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1576.777825][T18402] sctp: [Deprecated]: syz.0.18731 (pid 18402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1576.777825][T18402] Use struct sctp_sack_info instead [ 1576.910068][T18402] sctp: [Deprecated]: syz.0.18731 (pid 18402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1576.910068][T18402] Use struct sctp_sack_info instead [ 1576.955233][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1577.047713][T18409] netlink: 'syz.7.18733': attribute type 29 has an invalid length. [ 1577.112596][T18409] netlink: 'syz.7.18733': attribute type 29 has an invalid length. [ 1577.163517][T18413] netlink: 'syz.7.18733': attribute type 29 has an invalid length. [ 1577.250703][ T126] kernel write not supported for file /input/event0 (pid: 126 comm: kworker/0:2) [ 1577.420477][T18424] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18740'. [ 1577.989524][T18453] loop1: detected capacity change from 0 to 512 [ 1578.151497][T18453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1578.353220][T10851] EXT4-fs (loop1): unmounting filesystem. [ 1578.381909][ C0] vkms_vblank_simulate: vblank timer overrun [ 1578.538220][T18477] loop4: detected capacity change from 0 to 64 [ 1579.027768][T18489] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18764'. [ 1579.167233][T18497] loop7: detected capacity change from 0 to 164 [ 1579.237654][T18497] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1579.697008][T18473] loop9: detected capacity change from 0 to 40427 [ 1579.717740][T18473] F2FS-fs (loop9): invalid crc value [ 1579.764393][T18473] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1579.869161][T18517] loop1: detected capacity change from 0 to 2048 [ 1579.929036][T18473] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1579.948045][T18517] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1580.057248][ T26] audit: type=1800 audit(1580.077:1032): pid=18517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.18773" name="file2" dev="loop1" ino=1416 res=0 errno=0 [ 1580.777243][T18546] netlink: 'syz.4.18785': attribute type 4 has an invalid length. [ 1581.498543][T18537] loop0: detected capacity change from 0 to 32768 [ 1581.799802][T18576] loop9: detected capacity change from 0 to 4096 [ 1581.832273][T18582] netlink: 452 bytes leftover after parsing attributes in process `syz.4.18798'. [ 1581.863737][T18576] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 1581.895049][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18798'. [ 1582.019513][ T26] audit: type=1800 audit(1582.037:1033): pid=18576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.18794" name="file1" dev="loop9" ino=24 res=0 errno=0 [ 1582.183554][T11854] ntfs3: loop9: ntfs_sync_fs r=1a failed, -22. [ 1582.229921][T11854] ntfs3: loop9: ntfs_evict_inode r=1a failed, -22. [ 1582.263315][T11854] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 1582.454473][T18596] loop7: detected capacity change from 0 to 2048 [ 1582.534087][T18596] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1582.580645][T18563] loop1: detected capacity change from 0 to 40427 [ 1582.632247][T18601] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1582.703412][ T126] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1582.713944][T18563] F2FS-fs (loop1): invalid crc value [ 1582.762217][T18563] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1582.904901][ T126] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1582.930851][ T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.945112][T18563] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 1582.951776][T18563] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 1582.990027][ T126] usb 10-1: config 0 descriptor?? [ 1583.012399][ T126] cp210x 10-1:0.0: cp210x converter detected [ 1583.069754][T18563] F2FS-fs (loop1): Start checkpoint disabled! [ 1583.133884][T18563] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1583.419849][ T126] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1583.619757][ T126] usb 10-1: USB disconnect, device number 10 [ 1583.651708][ T126] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1583.721834][ T126] cp210x 10-1:0.0: device disconnected [ 1585.069989][T18642] loop0: detected capacity change from 0 to 32768 [ 1585.142177][T18642] add_index: next_index = 0. Resetting! [ 1585.189767][T18642] non-latin1 character 0x3ff found in JFS file name [ 1585.217452][T18642] mount with iocharset=utf8 to access [ 1585.271897][T18687] netlink: 'syz.4.18838': attribute type 29 has an invalid length. [ 1585.324417][T18687] netlink: 'syz.4.18838': attribute type 29 has an invalid length. [ 1585.372408][T18690] netlink: 'syz.4.18838': attribute type 29 has an invalid length. [ 1585.916361][T18673] loop7: detected capacity change from 0 to 32768 [ 1586.032867][T18673] jfs_lookup: dtSearch returned -5 [ 1586.420758][T18723] loop0: detected capacity change from 0 to 2048 [ 1586.475384][T18723] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1586.518624][T18723] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 1586.599457][T18723] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 1586.628298][T18727] loop4: detected capacity change from 0 to 1024 [ 1586.643437][T18723] UDF-fs: Scanning with blocksize 512 failed [ 1586.686128][T18730] loop9: detected capacity change from 0 to 1024 [ 1586.695793][T18723] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1586.835855][ T56] hfsplus: b-tree write err: -5, ino 25 [ 1586.841640][ T56] hfsplus: b-tree write err: -5, ino 4 [ 1586.897400][ T56] hfsplus: b-tree write err: -5, ino 2 [ 1586.902984][ T56] hfsplus: b-tree write err: -5, ino 26 [ 1587.157460][T18737] loop4: detected capacity change from 0 to 1024 [ 1587.225132][T18737] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1587.525069][T18746] mkiss: ax0: crc mode is auto. [ 1587.839912][T18760] loop0: detected capacity change from 0 to 256 [ 1587.882134][T18760] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 1587.953984][T18760] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 1588.005492][T18765] loop7: detected capacity change from 0 to 64 [ 1588.033247][T18760] exFAT-fs (loop0): Filesystem has been set read-only [ 1588.068276][T18760] exFAT-fs (loop0): failed to initialize root inode [ 1588.616582][T18786] loop9: detected capacity change from 0 to 1024 [ 1588.715370][ T4338] hfsplus: b-tree write err: -5, ino 25 [ 1588.725846][ T4338] hfsplus: b-tree write err: -5, ino 4 [ 1588.760876][ T4338] hfsplus: b-tree write err: -5, ino 2 [ 1588.802233][T18793] loop7: detected capacity change from 0 to 8 [ 1588.815378][T18793] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1588.871036][T18793] SQUASHFS error: Failed to read block 0x28d: -5 [ 1588.871061][T18793] SQUASHFS error: Unable to read metadata cache entry [28b] [ 1588.871077][T18793] SQUASHFS error: Unable to read inode 0x11f [ 1588.924056][ T4718] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1589.161675][T18802] loop9: detected capacity change from 0 to 1024 [ 1589.237354][T18802] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1589.324207][T18802] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1589.418385][T18802] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.18876: Invalid inode table block 0 in block_group 0 [ 1589.510538][T18802] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1589.544036][T18802] EXT4-fs error (device loop9): ext4_quota_write:7253: inode #3: comm syz.9.18876: mark_inode_dirty error [ 1589.613460][T18802] Quota error (device loop9): write_blk: dquota write failed [ 1589.635445][T18820] loop0: detected capacity change from 0 to 2048 [ 1589.642053][T18802] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1589.692126][T18802] EXT4-fs error (device loop9): ext4_acquire_dquot:6841: comm syz.9.18876: Failed to acquire dquot type 0 [ 1589.735642][T18820] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1589.753844][T18802] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.18876: Invalid inode table block 0 in block_group 0 [ 1589.801106][ T26] audit: type=1800 audit(1589.817:1034): pid=18820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18883" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1589.838226][T18802] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1589.900008][T18802] EXT4-fs error (device loop9): ext4_ext_truncate:4460: inode #15: comm syz.9.18876: mark_inode_dirty error [ 1589.951134][T18802] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.18876: Invalid inode table block 0 in block_group 0 [ 1589.988126][T17418] EXT4-fs (loop0): unmounting filesystem. [ 1589.988979][T18802] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1590.036089][T18802] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 1590.062826][T18802] EXT4-fs error (device loop9): __ext4_get_inode_loc:4520: comm syz.9.18876: Invalid inode table block 0 in block_group 0 [ 1590.135658][T18802] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 1590.169076][T18802] EXT4-fs error (device loop9): ext4_truncate:4325: inode #15: comm syz.9.18876: mark_inode_dirty error [ 1590.211183][T18802] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 1590.263428][T18802] EXT4-fs (loop9): 1 truncate cleaned up [ 1590.269558][T18802] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1590.359222][T18808] loop1: detected capacity change from 0 to 32768 [ 1590.508533][T11854] EXT4-fs (loop9): unmounting filesystem. [ 1590.515913][T18808] XFS (loop1): Mounting V5 Filesystem [ 1590.660204][T18808] XFS (loop1): Ending clean mount [ 1590.798085][T10851] XFS (loop1): Unmounting Filesystem [ 1590.932364][T18855] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1590.993083][T18855] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1591.041332][T18855] REISERFS (device loop7): using ordered data mode [ 1591.098817][ C0] vkms_vblank_simulate: vblank timer overrun [ 1591.105027][T18855] reiserfs: using flush barriers [ 1591.140008][T18855] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 7, max trans age 7 [ 1591.223733][T18855] REISERFS (device loop7): checking transaction log (loop7) [ 1591.294004][T18855] REISERFS (device loop7): Using r5 hash to sort names [ 1591.301308][T18855] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 1591.381378][T18855] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1591.511226][T18839] F2FS-fs (loop0): invalid crc value [ 1591.586518][T18839] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1591.773829][T18839] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1592.096294][T18857] set_capacity_and_notify: 2 callbacks suppressed [ 1592.096310][T18857] loop9: detected capacity change from 0 to 32768 [ 1592.110436][T17418] syz-executor: attempt to access beyond end of device [ 1592.110436][T17418] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1592.128420][T18882] loop7: detected capacity change from 0 to 1024 [ 1592.202830][T18882] hfsplus: bad catalog entry type [ 1592.384933][ T56] hfsplus: b-tree write err: -5, ino 25 [ 1592.390709][ T56] hfsplus: b-tree write err: -5, ino 4 [ 1592.433191][ T56] hfsplus: b-tree write err: -5, ino 2 [ 1593.104536][T18902] loop9: detected capacity change from 0 to 256 [ 1593.311334][T18909] loop0: detected capacity change from 0 to 256 [ 1593.406999][T18909] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1593.434380][T18879] loop4: detected capacity change from 0 to 40427 [ 1593.484191][ T4281] Bluetooth: hci3: link tx timeout [ 1593.493803][ T4281] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1593.622785][T18879] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1593.740446][T18879] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 1593.765233][T18879] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1593.819024][T18929] loop0: detected capacity change from 0 to 512 [ 1593.857486][T18929] EXT4-fs: Ignoring removed bh option [ 1593.876923][T18879] syz.4.18898: attempt to access beyond end of device [ 1593.876923][T18879] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1593.906422][T18929] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1593.995089][T18929] EXT4-fs (loop0): 1 truncate cleaned up [ 1594.016015][T18929] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1594.291195][T17418] EXT4-fs (loop0): unmounting filesystem. [ 1594.634106][ T26] audit: type=1326 audit(1594.657:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18945 comm="syz.9.18919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f482a19cdd9 code=0x0 [ 1594.812324][T18954] loop7: detected capacity change from 0 to 512 [ 1594.860073][T18954] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1594.921927][T18954] EXT4-fs (loop7): 1 truncate cleaned up [ 1595.018275][T18954] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1595.125987][T18967] netlink: 536 bytes leftover after parsing attributes in process `syz.4.18924'. [ 1595.136829][T18954] EXT4-fs error (device loop7): mb_free_blocks:1839: group 0, inode 16: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 1595.201612][T18970] EXT4-fs error (device loop7): ext4_mb_complex_scan_group:2384: group 0, 216 free clusters as per group info. But got 218 blocks [ 1595.228133][T18954] EXT4-fs (loop7): Remounting filesystem read-only [ 1595.248451][T18970] EXT4-fs (loop7): Remounting filesystem read-only [ 1595.277437][T18971] [ 1595.279819][T18971] ====================================================== [ 1595.286857][T18971] WARNING: possible circular locking dependency detected [ 1595.293908][T18971] syzkaller #0 Not tainted [ 1595.298382][T18971] ------------------------------------------------------ [ 1595.305428][T18971] syz.0.18925/18971 is trying to acquire lock: [ 1595.311596][T18971] ffff8880579a53d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 1595.321263][T18971] [ 1595.321263][T18971] but task is already holding lock: [ 1595.328646][T18971] ffff888078c52870 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 1595.339571][T18971] [ 1595.339571][T18971] which lock already depends on the new lock. [ 1595.339571][T18971] [ 1595.349989][T18971] [ 1595.349989][T18971] the existing dependency chain (in reverse order) is: [ 1595.359021][T18971] [ 1595.359021][T18971] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1595.367753][T18971] down_write+0x36/0x60 [ 1595.372455][T18971] process_measurement+0x3a2/0x1c30 [ 1595.378194][T18971] ima_file_mmap+0x102/0x150 [ 1595.383318][T18971] __se_sys_remap_file_pages+0x559/0x7b0 [ 1595.389493][T18971] do_syscall_64+0x4c/0xa0 [ 1595.394455][T18971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.400979][T18971] [ 1595.400979][T18971] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1595.408559][T18971] __lock_acquire+0x2d07/0x7d10 [ 1595.413978][T18971] lock_acquire+0x1bb/0x4a0 [ 1595.419033][T18971] down_read_killable+0x4c/0x340 [ 1595.424533][T18971] mmap_read_lock_killable+0x1d/0x60 [ 1595.430359][T18971] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1595.436107][T18971] do_user_addr_fault+0x2db/0xb10 [ 1595.441682][T18971] exc_page_fault+0x60/0x100 [ 1595.446822][T18971] asm_exc_page_fault+0x22/0x30 [ 1595.452220][T18971] fault_in_readable+0x13e/0x1f0 [ 1595.457785][T18971] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1595.463961][T18971] generic_perform_write+0x1f1/0x5c0 [ 1595.469790][T18971] __generic_file_write_iter+0x148/0x2a0 [ 1595.475969][T18971] generic_file_write_iter+0xab/0x2e0 [ 1595.482143][T18971] vfs_write+0x4b1/0xa30 [ 1595.486931][T18971] ksys_write+0x14c/0x250 [ 1595.491804][T18971] do_syscall_64+0x4c/0xa0 [ 1595.496767][T18971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.503200][T18971] [ 1595.503200][T18971] other info that might help us debug this: [ 1595.503200][T18971] [ 1595.513444][T18971] Possible unsafe locking scenario: [ 1595.513444][T18971] [ 1595.521246][T18971] CPU0 CPU1 [ 1595.526619][T18971] ---- ---- [ 1595.531983][T18971] lock(&sb->s_type->i_mutex_key#13); [ 1595.537464][T18971] lock(&mm->mmap_lock); [ 1595.544333][T18971] lock(&sb->s_type->i_mutex_key#13); [ 1595.552332][T18971] lock(&mm->mmap_lock); [ 1595.556690][T18971] [ 1595.556690][T18971] *** DEADLOCK *** [ 1595.556690][T18971] [ 1595.564850][T18971] 3 locks held by syz.0.18925/18971: [ 1595.570246][T18971] #0: ffff88807cc8d4e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 1595.579529][T18971] #1: ffff88802fbce460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 1595.588467][T18971] #2: ffff888078c52870 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 1595.599835][T18971] [ 1595.599835][T18971] stack backtrace: [ 1595.605728][T18971] CPU: 1 PID: 18971 Comm: syz.0.18925 Not tainted syzkaller #0 [ 1595.613283][T18971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1595.623348][T18971] Call Trace: [ 1595.626633][T18971] [ 1595.629569][T18971] dump_stack_lvl+0x188/0x24e [ 1595.634266][T18971] ? load_image+0x400/0x400 [ 1595.638785][T18971] ? show_regs_print_info+0x12/0x12 [ 1595.644005][T18971] ? print_circular_bug+0x12b/0x1a0 [ 1595.649225][T18971] check_noncircular+0x296/0x330 [ 1595.654186][T18971] ? add_chain_block+0x940/0x940 [ 1595.659147][T18971] ? lockdep_lock+0xf1/0x1f0 [ 1595.663764][T18971] ? _find_first_zero_bit+0xcf/0x100 [ 1595.669077][T18971] __lock_acquire+0x2d07/0x7d10 [ 1595.673971][T18971] ? verify_lock_unused+0x140/0x140 [ 1595.679381][T18971] ? cgroup_rstat_updated+0xd7/0x350 [ 1595.684699][T18971] ? verify_lock_unused+0x140/0x140 [ 1595.689925][T18971] ? verify_lock_unused+0x140/0x140 [ 1595.695141][T18971] ? mark_lock+0x94/0x320 [ 1595.699498][T18971] lock_acquire+0x1bb/0x4a0 [ 1595.704019][T18971] ? mmap_read_lock_killable+0x1d/0x60 [ 1595.709501][T18971] ? read_lock_is_recursive+0x10/0x10 [ 1595.714893][T18971] ? cmp_ex_search+0x1a/0x70 [ 1595.719498][T18971] ? bsearch+0x8a/0xb0 [ 1595.723584][T18971] ? fault_in_readable+0x13e/0x1f0 [ 1595.728714][T18971] ? search_extable+0x8c/0xd0 [ 1595.733415][T18971] ? trim_init_extable+0x3b0/0x3b0 [ 1595.738578][T18971] ? mmap_read_lock_killable+0x1d/0x60 [ 1595.744142][T18971] down_read_killable+0x4c/0x340 [ 1595.749106][T18971] ? mmap_read_lock_killable+0x1d/0x60 [ 1595.754596][T18971] mmap_read_lock_killable+0x1d/0x60 [ 1595.759910][T18971] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1595.765132][T18971] do_user_addr_fault+0x2db/0xb10 [ 1595.770190][T18971] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1595.775425][T18971] exc_page_fault+0x60/0x100 [ 1595.780049][T18971] asm_exc_page_fault+0x22/0x30 [ 1595.784938][T18971] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 1595.790693][T18971] Code: d8 57 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 b7 57 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 9a 57 [ 1595.810326][T18971] RSP: 0018:ffffc9000c34fab0 EFLAGS: 00050287 [ 1595.816413][T18971] RAX: ffffffff81be1d99 RBX: 0000000000001000 RCX: 0000000000080000 [ 1595.824414][T18971] RDX: ffffc90012908000 RSI: 0000000000014e44 RDI: 0000000000014e45 [ 1595.832419][T18971] RBP: 0000000000000000 R08: ffff8880789c8000 R09: 0000000000000002 [ 1595.840423][T18971] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000097000 [ 1595.848424][T18971] R13: 0000000000000000 R14: 0000200000096000 R15: 0000200000096000 [ 1595.856431][T18971] ? fault_in_readable+0x139/0x1f0 [ 1595.861606][T18971] fault_in_iov_iter_readable+0xbb/0x2e0 [ 1595.867282][T18971] generic_perform_write+0x1f1/0x5c0 [ 1595.872612][T18971] ? generic_file_direct_write+0x330/0x330 [ 1595.878468][T18971] ? __file_remove_privs+0x5f0/0x5f0 [ 1595.883788][T18971] ? rwsem_write_trylock+0x135/0x1c0 [ 1595.889102][T18971] ? clear_nonspinnable+0x60/0x60 [ 1595.894158][T18971] ? generic_write_checks_count+0x3d9/0x4c0 [ 1595.900084][T18971] __generic_file_write_iter+0x148/0x2a0 [ 1595.905763][T18971] generic_file_write_iter+0xab/0x2e0 [ 1595.911186][T18971] vfs_write+0x4b1/0xa30 [ 1595.915468][T18971] ? file_end_write+0x250/0x250 [ 1595.920357][T18971] ? __fget_files+0x43d/0x4b0 [ 1595.925073][T18971] ? __fdget_pos+0x2ae/0x360 [ 1595.929697][T18971] ? ksys_write+0x71/0x250 [ 1595.934147][T18971] ksys_write+0x14c/0x250 [ 1595.938523][T18971] ? __ia32_sys_read+0x80/0x80 [ 1595.943326][T18971] ? lockdep_hardirqs_on+0x94/0x140 [ 1595.948553][T18971] do_syscall_64+0x4c/0xa0 [ 1595.953002][T18971] ? clear_bhb_loop+0x60/0xb0 [ 1595.957700][T18971] ? clear_bhb_loop+0x60/0xb0 [ 1595.962409][T18971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1595.968421][T18971] RIP: 0033:0x7f8df739cdd9 [ 1595.972856][T18971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1595.992486][T18971] RSP: 002b:00007f8df8338028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1596.000922][T18971] RAX: ffffffffffffffda RBX: 00007f8df7615fa0 RCX: 00007f8df739cdd9 [ 1596.008916][T18971] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000003 [ 1596.016910][T18971] RBP: 00007f8df7432d69 R08: 0000000000000000 R09: 0000000000000000 [ 1596.024902][T18971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1596.032891][T18971] R13: 00007f8df7616038 R14: 00007f8df7615fa0 R15: 00007fff3d7f7ce8 [ 1596.040895][T18971] [ 1596.047772][ T4281] Bluetooth: hci3: command 0x0406 tx timeout [ 1596.054556][T14790] EXT4-fs (loop7): unmounting filesystem. [ 1596.279245][T18979] loop1: detected capacity change from 0 to 32768 [ 1596.310532][T18979] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 1596.322604][T18977] loop4: detected capacity change from 0 to 32768 [ 1596.351860][T18977] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1596.359950][T18979] JBD2: Ignoring recovery information on journal [ 1596.364478][T18977] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1596.406469][T18977] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 1596.425750][ T9177] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1596.432585][ T9177] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1596.498200][T18979] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1596.571601][ T9177] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 139ms [ 1596.581196][ T9177] gfs2: fsid=syz:syz.0: jid=0: Done [ 1596.595003][T18977] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1596.607125][T18979] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #65 has bad signature INODE01 [ 1596.646212][T18979] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1596.670317][T18979] OCFS2: File system is now read-only. [ 1596.676284][T18979] (syz.1.18928,18979,1):ocfs2_search_one_group:1684 ERROR: status = -30 [ 1596.691792][T18979] (syz.1.18928,18979,1):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 1596.722145][T18979] (syz.1.18928,18979,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 1596.743123][T18979] (syz.1.18928,18979,1):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 1596.751425][T18979] (syz.1.18928,18979,1):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 1596.783461][T18979] (syz.1.18928,18979,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1596.791425][T18979] (syz.1.18928,18979,1):ocfs2_mknod:385 ERROR: status = -30 [ 1596.803345][T18979] (syz.1.18928,18979,0):ocfs2_mknod:502 ERROR: status = -30 [ 1596.810693][T18979] (syz.1.18928,18979,0):ocfs2_mkdir:659 ERROR: status = -30 [ 1596.826544][T18979] (syz.1.18928,18979,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 1596.854058][T10851] ocfs2: Unmounting device (7,1) on (node local) [ 1604.143452][T24557] Bluetooth: hci1: command 0x0406 tx timeout