last executing test programs: 55.576328668s ago: executing program 2 (id=9420): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f00000002c0)=0x39) 55.389381151s ago: executing program 2 (id=9425): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000940)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '1255'}}, {@utf8no}, {@utf8}, {@uni_xlateno}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@uni_xlate}]}, 0x1, 0x29b, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 55.073225045s ago: executing program 2 (id=9430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000102010800000000000000000a0000083c0001800c00028005000100000000002c0001"], 0x50}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x40) 54.826858s ago: executing program 2 (id=9434): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000900)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) 54.432108685s ago: executing program 2 (id=9441): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000440)={[{@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1}}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@time_offset={'time_offset', 0x3d, 0x2d8}}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}, {@dots}, {@nodots}, {}, {@dots}, {@fat=@check_strict}, {@dots}, {@fat=@showexec}, {@nodots}, {@fat=@discard}, {@nodots}, {@dots}]}, 0xfd, 0x1f0, &(0x7f0000000240)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 53.897273023s ago: executing program 2 (id=9445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x7, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) 53.285957662s ago: executing program 32 (id=9445): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0xfffffffe, {0x2, 0x10, 0x14, 0x0, 0xfd, 0x0, 0x0, 0x7, 0x1}, [@FRA_SRC={0x8, 0x2, @remote}, @FRA_DST={0x8, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x1000) 53.213717813s ago: executing program 3 (id=9448): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 48.11495517s ago: executing program 3 (id=9460): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x883e}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40040000) 47.969211232s ago: executing program 3 (id=9450): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2a, 0x0, @empty=0x1000000}, 0xb, 0x0}, 0x0) 47.930970272s ago: executing program 3 (id=9451): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 47.572744308s ago: executing program 3 (id=9452): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 47.052329356s ago: executing program 3 (id=9463): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) 46.668102002s ago: executing program 33 (id=9463): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x1401, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x4044080) 4.71005037s ago: executing program 1 (id=9923): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x10, 0x1, 0x0, "ff3a55f32ec78900d10052d000200000f3018e54fa19000000ffc800001c00"}) 4.560445032s ago: executing program 1 (id=9924): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xd}]}}}]}, 0x3c}}, 0x4) 4.272722476s ago: executing program 1 (id=9927): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f0000000480)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffdb6}, 0x48) 4.02306692s ago: executing program 1 (id=9930): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x20, 0x67, 0x9e, 0x8, 0xc72, 0x14, 0xc776, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0x1, 0x28, 0xff}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0xe0, 0x3, 0xa, "3a8803e5c2103c5e8618"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.335980835s ago: executing program 5 (id=9947): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001480)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)='./file0/file0\x00') 2.074431889s ago: executing program 1 (id=9952): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x2, 0x18, 0xd9, 0x9, 0x6, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d5, 0x8, 0x3, 0x2e, 0x4, 0x80000000}, @sadb_sa={0x2, 0x1, 0x4d5, 0x4, 0x0, 0xef, 0x3, 0x20000000}]}, 0x30}}, 0x24000040) 1.912623382s ago: executing program 5 (id=9953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) 1.778560924s ago: executing program 1 (id=9956): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000b10b5103a09222689b701020301090245000100000000090400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.617116626s ago: executing program 5 (id=9958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0) 1.600385137s ago: executing program 0 (id=9959): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000001c0)="b9ff03076003008c9c18ed0f6fd2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.477812818s ago: executing program 5 (id=9961): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) sendfile(r0, r0, 0x0, 0xc3) 1.3629056s ago: executing program 0 (id=9962): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000002840)=[{{&(0x7f00000001c0)={0xa, 0x4e20, 0x5, @mcast2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x9}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x29}}}], 0x30}}], 0x1, 0x24040000) 1.312712471s ago: executing program 5 (id=9963): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000640)="348b0d151f8218e3c73697e48864", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.153733933s ago: executing program 0 (id=9964): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8917, &(0x7f0000000000)={'pimreg1\x00', @random="0200ff7fffff"}) 1.049624605s ago: executing program 5 (id=9965): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eca, &(0x7f0000005d80)="$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") chroot(&(0x7f0000000480)='./file0/../file0\x00') 821.148978ms ago: executing program 4 (id=9966): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3ac, 0x10c, 0x0, 0x1ec, 0x2cc, 0x2cc, 0x2cc, 0x7fffffe, 0x0, {[{{@arp={@empty, @local, 0xff000000, 0xff000000, 0xd, 0x6, {@mac=@broadcast, {[0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x2, 0x7ff, 0x2, 0xfffb, 0x7f6, 'wlan1\x00', 'veth0_vlan\x00', {0xff}, {}, 0x0, 0x28}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010111, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@uncond, 0xbc, 0xe0, 0x0, {0x0, 0x1e03}}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x10c}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) 664.73804ms ago: executing program 4 (id=9967): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 644.881131ms ago: executing program 0 (id=9968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32], 0x38}}, 0x0) 428.887324ms ago: executing program 0 (id=9969): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r0, 0x4bfa, &(0x7f0000000080)) 385.173654ms ago: executing program 4 (id=9970): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000400)={r0}, 0xc) 284.918866ms ago: executing program 0 (id=9971): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000000700)={[{@quota}, {@dioread_nolock}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4e1, &(0x7f0000000b00)="$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") lchown(&(0x7f0000000000)='./file0\x00', 0xee01, 0x0) 225.953437ms ago: executing program 4 (id=9972): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'bond0\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x3b, 0x2, [{0xfff, 0x4}, {0x400, 0x9}]}}) 60.428059ms ago: executing program 4 (id=9973): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 0s ago: executing program 4 (id=9974): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560f, &(0x7f00000002c0)={0xb, 0xfdfd, 0xfdfd}) kernel console output (not intermixed with test programs): o 32768 [ 1020.785535][T25239] loop3: detected capacity change from 0 to 65536 [ 1020.869019][T25239] XFS (loop3): Deprecated V4 format (crc=0) not supported by kernel. [ 1021.988696][T25206] REISERFS (device loop2): Using r5 hash to sort names [ 1022.006989][T25206] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1022.081793][T25262] loop3: detected capacity change from 0 to 32768 [ 1022.133973][T25262] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1022.370085][T25262] XFS (loop3): Ending clean mount [ 1022.532470][ T6576] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1023.000716][T25273] loop3: detected capacity change from 0 to 1024 [ 1023.032829][T25273] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1023.075127][T25273] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1023.133842][T25273] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1023.162167][T25273] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1023.168634][T25273] EXT4-fs error (device loop3): ext4_quota_enable:7129: inode #3: comm syz.3.8566: iget: bad i_size value: 1407374883559424 [ 1023.223230][T25273] EXT4-fs (loop3): Remounting filesystem read-only [ 1023.259041][T25273] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1023.316784][T25273] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1023.344996][T25273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1023.512424][ T6576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1023.887805][T25253] loop0: detected capacity change from 0 to 131072 [ 1023.927096][T25253] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 1024.401122][T25276] loop3: detected capacity change from 0 to 32768 [ 1024.521926][T25276] loop3: p1 p2 p3 [ 1025.228774][ T8273] udevd[8273]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 1025.242096][ T6438] udevd[6438]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 1025.263719][ T6437] udevd[6437]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1034.632991][ T6458] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1034.839131][ T6458] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.858405][ T6458] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1034.891112][ T6458] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1034.910748][ T6458] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.939101][ T6458] usb 2-1: config 0 descriptor?? [ 1035.230799][ T6458] usb 2-1: USB disconnect, device number 7 [ 1036.914300][T25320] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1037.049077][T25322] IPv6: NLM_F_CREATE should be specified when creating new route [ 1037.619012][T25339] loop2: detected capacity change from 0 to 4096 [ 1037.686047][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1037.711239][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1037.754555][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1037.762458][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffc0c00 [ 1037.808016][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffc1c00 [ 1037.838351][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffc2c00 [ 1037.873941][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffc4c00 [ 1037.881865][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffc8c00 [ 1037.925641][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffd0c00 [ 1037.946725][T25339] ntfs3: loop2: try to read out of volume at offset 0x3fffffe0c00 [ 1038.226455][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1038.332218][T25367] netlink: 'syz.2.8610': attribute type 6 has an invalid length. [ 1038.449649][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1038.461538][ T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.469576][ T23] usb 2-1: config 0 has no interface number 0 [ 1038.502990][ T23] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1038.526287][ T23] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1038.547349][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.555394][ T23] usb 2-1: Product: syz [ 1038.582184][ T23] usb 2-1: Manufacturer: syz [ 1038.586836][ T23] usb 2-1: SerialNumber: syz [ 1038.606159][ T23] usb 2-1: config 0 descriptor?? [ 1038.778647][T25384] loop0: detected capacity change from 0 to 2048 [ 1038.804276][T25384] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 1038.870219][ T23] i2c-cp2615: probe of 2-1:0.1 failed with error -22 [ 1038.884486][T25384] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1039.106006][ T23] usb 2-1: USB disconnect, device number 8 [ 1039.173843][T25398] netlink: 'syz.2.8625': attribute type 3 has an invalid length. [ 1039.184368][T25398] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8625'. [ 1039.557477][T25415] (unnamed net_device) (uninitialized): up delay (16) is not a multiple of miimon (6516), value rounded to 0 ms [ 1039.615000][ T5774] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1039.811252][ T5774] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1039.832548][ T5774] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 1039.859587][ T5774] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.886881][ T5774] usb 3-1: config 63 has no interface number 0 [ 1039.907792][ T5774] usb 3-1: config 63 interface 66 has no altsetting 0 [ 1039.931144][ T5774] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 1039.953139][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.978162][ T5774] usb 3-1: Product: syz [ 1039.982382][ T5774] usb 3-1: Manufacturer: syz [ 1039.987024][ T5774] usb 3-1: SerialNumber: syz [ 1040.089643][T25434] loop3: detected capacity change from 0 to 4096 [ 1040.119061][T25434] ntfs3: loop3: It is recommened to use chkdsk. [ 1040.174599][T25434] ntfs3: loop3: Failed to load $MFT. [ 1040.252961][ T5774] usb 3-1: Found UVC 0.07 device syz (174f:8a31) [ 1040.265907][ T5774] usb 3-1: No valid video chain found. [ 1040.301429][ T5774] usb 3-1: USB disconnect, device number 7 [ 1040.573015][T25450] netlink: 'syz.0.8647': attribute type 8 has an invalid length. [ 1040.588672][T25452] netlink: 'syz.1.8649': attribute type 9 has an invalid length. [ 1040.618436][T25452] netlink: 911 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1040.718315][T25456] loop0: detected capacity change from 0 to 8 [ 1041.040703][T25467] ieee802154 phy0 wpan0: encryption failed: -22 [ 1041.128868][T25472] loop3: detected capacity change from 0 to 1024 [ 1041.217021][T25476] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8661'. [ 1041.305126][ T1132] hfsplus: b-tree write err: -5, ino 4 [ 1041.835372][T25501] loop2: detected capacity change from 0 to 2048 [ 1041.857810][T25501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1042.023487][T25508] netlink: 648 bytes leftover after parsing attributes in process `syz.0.8677'. [ 1042.308487][ T27] audit: type=1326 audit(1752693252.445:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25519 comm="syz.2.8683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b9898e929 code=0x0 [ 1042.829612][T25535] loop0: detected capacity change from 0 to 4096 [ 1042.868662][T25535] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1042.972609][T25543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8694'. [ 1042.988504][T25535] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1043.022554][T25535] ntfs3: loop0: ino=1f, "file2" failed to open parent directory r=5 to update [ 1043.166244][ T249] ntfs3: loop0: ino=1f, failed to open parent directory r=5 to update [ 1043.324564][T25552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8698'. [ 1043.344791][T25527] loop1: detected capacity change from 0 to 32768 [ 1043.408500][T25527] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1043.413840][T25555] loop3: detected capacity change from 0 to 2048 [ 1043.439444][T25562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8701'. [ 1043.449255][T25562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8701'. [ 1043.482696][T25555] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1043.514819][T25567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8703'. [ 1043.635641][T25573] loop2: detected capacity change from 0 to 64 [ 1043.781000][T25527] XFS (loop1): Ending clean mount [ 1043.837324][T25527] XFS (loop1): Quotacheck needed: Please wait. [ 1043.895874][ T6537] XFS (loop1): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 1043.941225][ T6537] XFS (loop1): Unmount and run xfs_repair [ 1043.948030][ T6537] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1043.955817][ T6537] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 1043.965530][ T6537] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 1044.002812][ T6537] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 1044.021418][T25581] loop0: detected capacity change from 0 to 1024 [ 1044.034099][ T6537] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 1044.060991][ T6537] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1044.079359][ T6537] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1044.103449][ T6537] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1044.126122][ T6537] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 1044.165502][ T11] XFS (loop1): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 1044.221999][ T249] hfsplus: b-tree write err: -5, ino 4 [ 1044.229073][T25527] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 1044.533858][ T6575] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1044.599338][T25596] loop2: detected capacity change from 0 to 4096 [ 1044.663034][T25602] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1044.764240][T25596] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1044.829244][T25596] Remounting filesystem read-only [ 1044.955109][ T6578] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1044.971874][ T6578] NILFS (loop2): discard dirty block: blocknr=23, size=4096 [ 1044.979232][ T6578] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 1045.004232][ T6578] NILFS (loop2): discard dirty block: blocknr=24, size=4096 [ 1045.011577][ T6578] NILFS (loop2): discard dirty page: offset=8192, ino=6 [ 1045.045828][ T6578] NILFS (loop2): discard dirty block: blocknr=25, size=4096 [ 1045.241777][T25617] netlink: 'syz.3.8725': attribute type 2 has an invalid length. [ 1045.781583][T25643] loop0: detected capacity change from 0 to 764 [ 1045.817170][T25643] rock: directory entry would overflow storage [ 1045.837881][T25643] rock: sig=0x4654, size=5, remaining=4 [ 1046.713567][ T5774] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1046.945830][ T5774] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1046.967559][ T5774] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.992667][ T5774] usb 3-1: Product: syz [ 1047.011378][ T5774] usb 3-1: Manufacturer: syz [ 1047.018092][T25697] netlink: 'syz.3.8763': attribute type 5 has an invalid length. [ 1047.028711][ T5774] usb 3-1: SerialNumber: syz [ 1047.042271][ T27] audit: type=1400 audit(1752693256.878:38): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=25698 comm="syz.0.8762" [ 1047.105002][ T5774] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1047.137965][ T23] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1047.269289][T25707] syz.0.8767 uses obsolete (PF_INET,SOCK_PACKET) [ 1047.354370][T25709] loop3: detected capacity change from 0 to 1024 [ 1047.500646][T25713] loop0: detected capacity change from 0 to 720 [ 1047.612321][ T5774] usb 3-1: USB disconnect, device number 8 [ 1047.622180][ T6437] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1047.776445][T25722] loop0: detected capacity change from 0 to 256 [ 1047.795559][T25722] exfat: Deprecated parameter 'namecase' [ 1047.841046][T25725] loop1: detected capacity change from 0 to 256 [ 1047.847542][T25722] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 1048.222435][T25737] loop1: detected capacity change from 0 to 128 [ 1048.257176][T25737] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1048.303171][T25737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1048.318030][ T23] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1048.342484][ T23] ath9k_htc: Failed to initialize the device [ 1048.403441][ T5774] usb 3-1: ath9k_htc: USB layer deinitialized [ 1048.431050][T25745] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8787'. [ 1048.463963][T25745] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8787'. [ 1048.867708][T25761] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1048.925327][T25761] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1049.253521][T25747] loop3: detected capacity change from 0 to 32768 [ 1049.296050][T25747] XFS (loop3): stripe width (6) must be a multiple of the stripe unit (32769) [ 1049.787807][T25778] loop0: detected capacity change from 0 to 4096 [ 1049.807588][T25784] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8806'. [ 1049.817048][T25778] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1049.860024][T25784] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8806'. [ 1049.876566][T25772] loop2: detected capacity change from 0 to 32768 [ 1049.962580][T25772] JBD2: Unrecognised features on journal [ 1049.991413][T25772] (syz.2.8800,25772,1):ocfs2_journal_init:973 ERROR: Linux journal layer error [ 1050.058840][T25772] (syz.2.8800,25772,1):ocfs2_check_volume:2405 ERROR: Could not initialize journal! [ 1050.122513][T25772] (syz.2.8800,25772,1):ocfs2_check_volume:2490 ERROR: status = -22 [ 1050.149261][T25772] (syz.2.8800,25772,1):ocfs2_mount_volume:1822 ERROR: status = -22 [ 1050.198085][T25772] (syz.2.8800,25772,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 1050.375577][T25782] loop3: detected capacity change from 0 to 32768 [ 1050.403105][T25782] BTRFS: device fsid afd29e67-b8c6-49b0-b0d7-0efab618e2f3 devid 1 transid 8 /dev/loop3 scanned by syz.3.8805 (25782) [ 1050.442960][T25794] loop2: detected capacity change from 0 to 64 [ 1050.455447][T25782] BTRFS info (device loop3): first mount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 1050.487203][T25782] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1050.495953][T25782] BTRFS info (device loop3): using free space tree [ 1050.545213][T25796] loop1: detected capacity change from 0 to 512 [ 1050.553057][T25796] EXT4-fs: Ignoring removed i_version option [ 1050.575848][T25796] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1050.612091][T25796] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 1050.635467][T25796] System zones: 1-12 [ 1050.640328][T25796] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1050.650957][T25796] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.8811: invalid indirect mapped block 12 (level 1) [ 1050.670489][T25796] EXT4-fs (loop1): Remounting filesystem read-only [ 1050.677192][T25796] EXT4-fs (loop1): 1 truncate cleaned up [ 1050.730907][T25796] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1050.771344][T25782] BTRFS info (device loop3): enabling ssd optimizations [ 1050.811705][T25782] BTRFS info (device loop3): auto enabling async discard [ 1050.842343][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1051.094065][ T6576] BTRFS info (device loop3): last unmount of filesystem afd29e67-b8c6-49b0-b0d7-0efab618e2f3 [ 1051.257138][ T23] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1051.465025][T25833] loop2: detected capacity change from 0 to 512 [ 1051.492132][ T23] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1051.522908][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.531808][ T23] usb 1-1: Product: syz [ 1051.550436][T25833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.573913][T25839] loop1: detected capacity change from 0 to 16 [ 1051.581292][T25839] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1051.597642][ T23] usb 1-1: Manufacturer: syz [ 1051.639558][ T23] usb 1-1: SerialNumber: syz [ 1051.666547][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.684533][ T23] usb 1-1: config 0 descriptor?? [ 1051.930088][ T23] usb 1-1: ignoring: probably an ADSL modem [ 1051.961514][T25847] loop3: detected capacity change from 0 to 512 [ 1052.065379][T25854] ALSA: mixer_oss: invalid OSS volume '' [ 1052.087470][T25847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1052.165327][ T23] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1052.165710][T25847] ext4 filesystem being mounted at /2068/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1052.231916][ T23] usb 1-1: USB disconnect, device number 121 [ 1052.247918][T25859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8829'. [ 1052.278548][ T6576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.383623][T25864] loop3: detected capacity change from 0 to 2048 [ 1052.423670][T25864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1052.522084][ T6576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.930114][T25884] loop2: detected capacity change from 0 to 256 [ 1052.985631][T25884] FAT-fs (loop2): Directory bread(block 64) failed [ 1053.010100][T25884] FAT-fs (loop2): Directory bread(block 65) failed [ 1053.042142][T25884] FAT-fs (loop2): Directory bread(block 66) failed [ 1053.052122][T25884] FAT-fs (loop2): Directory bread(block 67) failed [ 1053.070515][T25884] FAT-fs (loop2): Directory bread(block 68) failed [ 1053.084807][T25884] FAT-fs (loop2): Directory bread(block 69) failed [ 1053.113181][T25884] FAT-fs (loop2): Directory bread(block 70) failed [ 1053.127575][T25884] FAT-fs (loop2): Directory bread(block 71) failed [ 1053.149180][T25884] FAT-fs (loop2): Directory bread(block 72) failed [ 1053.166560][T25884] FAT-fs (loop2): Directory bread(block 73) failed [ 1053.325742][T25866] loop1: detected capacity change from 0 to 32768 [ 1053.357793][T25866] BTRFS: device fsid c0ead524-1f1c-4ccc-9384-0f6d362fec31 devid 1 transid 8 /dev/loop1 scanned by syz.1.8833 (25866) [ 1053.412968][T25866] BTRFS info (device loop1): first mount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 1053.467771][T25866] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1053.489335][T25866] BTRFS info (device loop1): using free space tree [ 1053.654004][T25905] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1053.673669][T25886] loop3: detected capacity change from 0 to 32768 [ 1053.683620][T25866] BTRFS info (device loop1): enabling ssd optimizations [ 1053.691073][T25886] BTRFS: device fsid a830dcec-d20e-42dc-8160-bf13f3286f97 devid 1 transid 8 /dev/loop3 scanned by syz.3.8843 (25886) [ 1053.722066][T25866] BTRFS info (device loop1): auto enabling async discard [ 1053.723103][T25886] BTRFS info (device loop3): first mount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 1053.748238][T25886] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 1053.771000][T25886] BTRFS info (device loop3): using free space tree [ 1053.776422][T25888] loop0: detected capacity change from 0 to 32768 [ 1053.845679][T25888] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.8844 (25888) [ 1053.874532][T25888] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1053.930171][T25888] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1053.939449][T25888] BTRFS info (device loop0): using free space tree [ 1053.953081][T25886] BTRFS info (device loop3): enabling ssd optimizations [ 1053.960090][T25886] BTRFS info (device loop3): auto enabling async discard [ 1053.985128][ T6575] BTRFS info (device loop1): last unmount of filesystem c0ead524-1f1c-4ccc-9384-0f6d362fec31 [ 1054.154953][T25888] BTRFS info (device loop0): enabling ssd optimizations [ 1054.161977][T25888] BTRFS info (device loop0): auto enabling async discard [ 1054.186704][ T6576] BTRFS info (device loop3): last unmount of filesystem a830dcec-d20e-42dc-8160-bf13f3286f97 [ 1054.377803][ T27] audit: type=1326 audit(1752693263.735:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25943 comm="syz.1.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff566d8e929 code=0x7ffc0000 [ 1054.479770][ T27] audit: type=1326 audit(1752693263.791:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25943 comm="syz.1.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7ff566d8e929 code=0x7ffc0000 [ 1054.570821][ T27] audit: type=1326 audit(1752693263.791:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25943 comm="syz.1.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff566d8e929 code=0x7ffc0000 [ 1054.618391][ T6573] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1054.677755][ T27] audit: type=1326 audit(1752693263.791:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25943 comm="syz.1.8848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff566d8e929 code=0x7ffc0000 [ 1055.033080][ T6438] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (6438) [ 1055.065222][T25952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8851'. [ 1055.402962][T25920] loop2: detected capacity change from 0 to 32768 [ 1055.485173][T25920] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1055.506277][T25920] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1055.552819][T25920] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1055.610376][ T23] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1055.617235][ T23] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1055.798607][T25966] netlink: 'syz.0.8857': attribute type 10 has an invalid length. [ 1055.855999][T25966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8857'. [ 1055.919902][T25966] batman_adv: batadv0: Adding interface: vlan1 [ 1055.942018][ T23] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 303ms [ 1055.961810][T25966] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.974287][ T23] gfs2: fsid=syz:syz.0: jid=0: Done [ 1056.035733][T25920] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1056.044163][T25966] batman_adv: batadv0: Interface activated: vlan1 [ 1056.115702][T25948] loop1: detected capacity change from 0 to 32768 [ 1056.185805][T25948] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 1056.194057][T25948] CPU: 0 PID: 25948 Comm: syz.1.8849 Not tainted 6.6.97-syzkaller #0 [ 1056.202145][T25948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1056.212219][T25948] Call Trace: [ 1056.215513][T25948] [ 1056.218461][T25948] dump_stack_lvl+0x16c/0x230 [ 1056.223171][T25948] ? show_regs_print_info+0x20/0x20 [ 1056.228399][T25948] ? load_image+0x3b0/0x3b0 [ 1056.232939][T25948] sysfs_create_dir_ns+0x256/0x280 [ 1056.238076][T25948] ? sysfs_warn_dup+0xa0/0xa0 [ 1056.242777][T25948] ? do_raw_spin_unlock+0x121/0x230 [ 1056.248014][T25948] kobject_add_internal+0x6b8/0xc70 [ 1056.253244][T25948] kobject_init_and_add+0x126/0x190 [ 1056.258465][T25948] ? lockdep_softirqs_off+0x430/0x430 [ 1056.263866][T25948] ? kobject_add+0x220/0x220 [ 1056.268495][T25948] ? __init_swait_queue_head+0xa9/0x150 [ 1056.274072][T25948] gfs2_sys_fs_add+0x238/0x470 [ 1056.278863][T25948] ? gfs2_recover_set+0x250/0x250 [ 1056.283923][T25948] ? apply_workqueue_attrs+0x180/0x180 [ 1056.289416][T25948] gfs2_fill_super+0x1323/0x1f80 [ 1056.294396][T25948] ? gfs2_reconfigure+0xb10/0xb10 [ 1056.299458][T25948] ? setup_bdev_super+0x56b/0x660 [ 1056.304518][T25948] get_tree_bdev+0x3e4/0x510 [ 1056.309138][T25948] ? end_current_label_crit_section+0x170/0x170 [ 1056.315419][T25948] ? gfs2_reconfigure+0xb10/0xb10 [ 1056.320468][T25948] ? setup_bdev_super+0x660/0x660 [ 1056.325522][T25948] gfs2_get_tree+0x51/0x1e0 [ 1056.330059][T25948] vfs_get_tree+0x8c/0x280 [ 1056.334592][T25948] do_new_mount+0x24b/0xa40 [ 1056.339137][T25948] __se_sys_mount+0x2da/0x3c0 [ 1056.343850][T25948] ? __x64_sys_mount+0xc0/0xc0 [ 1056.348643][T25948] ? lockdep_hardirqs_on+0x98/0x150 [ 1056.353862][T25948] ? __x64_sys_mount+0x20/0xc0 [ 1056.358659][T25948] do_syscall_64+0x55/0xb0 [ 1056.363103][T25948] ? clear_bhb_loop+0x40/0x90 [ 1056.367808][T25948] ? clear_bhb_loop+0x40/0x90 [ 1056.372519][T25948] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1056.378603][T25948] RIP: 0033:0x7ff566d900ca [ 1056.383040][T25948] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.402681][T25948] RSP: 002b:00007ff567b8be68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1056.411143][T25948] RAX: ffffffffffffffda RBX: 00007ff567b8bef0 RCX: 00007ff566d900ca [ 1056.419147][T25948] RDX: 0000200000021140 RSI: 0000200000021180 RDI: 00007ff567b8beb0 [ 1056.427345][T25948] RBP: 0000200000021140 R08: 00007ff567b8bef0 R09: 0000000000000000 [ 1056.435352][T25948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000021180 [ 1056.443359][T25948] R13: 00007ff567b8beb0 R14: 0000000000021135 R15: 00002000000211c0 [ 1056.451377][T25948] [ 1056.470885][T25948] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 1056.486523][T25948] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 1056.743737][ T27] audit: type=1400 audit(1752693265.961:43): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=25979 comm="syz.3.8863" [ 1056.777774][ T55] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1056.845353][T25984] loop3: detected capacity change from 0 to 164 [ 1056.888501][ T27] audit: type=1400 audit(1752693266.092:44): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=25983 comm="syz.1.8873" [ 1056.980873][ T55] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1056.990920][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.025035][ T55] usb 1-1: Product: syz [ 1057.034984][ T55] usb 1-1: Manufacturer: syz [ 1057.044841][ T55] usb 1-1: SerialNumber: syz [ 1057.056289][ T55] r8152-cfgselector 1-1: config 0 descriptor?? [ 1057.089454][T25989] loop1: detected capacity change from 0 to 1024 [ 1057.391133][T25991] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8867'. [ 1057.520445][ T55] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1057.553681][ T55] r8152-cfgselector 1-1: USB disconnect, device number 122 [ 1057.561261][T25988] loop3: detected capacity change from 0 to 32768 [ 1057.591296][T25988] BTRFS: device fsid 100ef7e5-a5de-41f0-884c-a25b1c06c78a devid 1 transid 8 /dev/loop3 scanned by syz.3.8866 (25988) [ 1057.627780][T25988] BTRFS info (device loop3): first mount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 1057.656004][T25988] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1057.682243][T25988] BTRFS info (device loop3): using free space tree [ 1057.836159][T25988] BTRFS info (device loop3): enabling ssd optimizations [ 1057.864129][T25988] BTRFS info (device loop3): auto enabling async discard [ 1057.897844][T26015] loop1: detected capacity change from 0 to 256 [ 1057.987007][T26015] FAT-fs (loop1): Directory bread(block 64) failed [ 1058.010034][T26015] FAT-fs (loop1): Directory bread(block 65) failed [ 1058.040541][T26015] FAT-fs (loop1): Directory bread(block 66) failed [ 1058.068825][T26015] FAT-fs (loop1): Directory bread(block 67) failed [ 1058.099317][T26015] FAT-fs (loop1): Directory bread(block 68) failed [ 1058.108969][ T27] audit: type=1400 audit(1752693267.224:45): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=26018 comm="syz.2.8875" [ 1058.118614][ T6576] BTRFS info (device loop3): last unmount of filesystem 100ef7e5-a5de-41f0-884c-a25b1c06c78a [ 1058.141477][T26015] FAT-fs (loop1): Directory bread(block 69) failed [ 1058.148126][T26015] FAT-fs (loop1): Directory bread(block 70) failed [ 1058.177085][T26015] FAT-fs (loop1): Directory bread(block 71) failed [ 1058.183750][T26015] FAT-fs (loop1): Directory bread(block 72) failed [ 1058.225623][T26015] FAT-fs (loop1): Directory bread(block 73) failed [ 1058.757316][T26033] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1058.785024][T26033] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1058.793086][T26037] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8883'. [ 1058.821071][T26038] netlink: 'syz.0.8884': attribute type 29 has an invalid length. [ 1058.830086][T26037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8883'. [ 1058.868586][T26038] netlink: 'syz.0.8884': attribute type 29 has an invalid length. [ 1059.029684][T26040] loop3: detected capacity change from 0 to 512 [ 1059.187621][T26046] loop0: detected capacity change from 0 to 256 [ 1059.239357][T26050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8890'. [ 1059.293780][T26046] FAT-fs (loop0): Directory bread(block 64) failed [ 1059.309900][T26046] FAT-fs (loop0): Directory bread(block 65) failed [ 1059.324043][T26046] FAT-fs (loop0): Directory bread(block 66) failed [ 1059.333831][T26046] FAT-fs (loop0): Directory bread(block 67) failed [ 1059.344891][T26046] FAT-fs (loop0): Directory bread(block 68) failed [ 1059.356481][T26046] FAT-fs (loop0): Directory bread(block 69) failed [ 1059.367104][T26046] FAT-fs (loop0): Directory bread(block 70) failed [ 1059.384886][T26046] FAT-fs (loop0): Directory bread(block 71) failed [ 1059.398885][T26046] FAT-fs (loop0): Directory bread(block 72) failed [ 1059.407506][T26046] FAT-fs (loop0): Directory bread(block 73) failed [ 1059.453552][T26055] loop1: detected capacity change from 0 to 512 [ 1059.487672][T26055] EXT4-fs: Ignoring removed oldalloc option [ 1059.510065][T26055] EXT4-fs: inline encryption not supported [ 1059.537532][T26055] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 1059.674621][T26055] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.8892: bg 0: block 64: padding at end of block bitmap is not set [ 1059.692087][T26062] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1059.735130][T26062] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1059.748825][T26066] loop0: detected capacity change from 0 to 128 [ 1059.776668][T26055] Quota error (device loop1): write_blk: dquota write failed [ 1059.819743][T26055] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1059.847081][T26055] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.8892: Failed to acquire dquot type 0 [ 1059.861066][T26069] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8897'. [ 1059.876681][T26069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8897'. [ 1059.902187][T26055] EXT4-fs (loop1): 1 truncate cleaned up [ 1059.922677][T26055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.986685][T26055] Quota error (device loop1): write_blk: dquota write failed [ 1060.012465][T26055] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 1060.024697][T26055] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.8892: Failed to acquire dquot type 0 [ 1060.119716][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.172875][T26077] netlink: 'syz.2.8909': attribute type 10 has an invalid length. [ 1060.196716][T26077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8909'. [ 1060.219433][T26077] batman_adv: batadv0: Adding interface: vlan1 [ 1060.225644][T26077] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.243873][T26074] loop0: detected capacity change from 0 to 4096 [ 1060.268340][T26077] batman_adv: batadv0: Interface activated: vlan1 [ 1060.329174][T26074] ntfs3: loop0: Failed to initialize $Extend/$Reparse. [ 1060.377468][T26074] ntfs3: loop0: ino=9, ntfs_sync_fs failed, -22. [ 1060.384133][T26074] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1060.568136][T26082] loop1: detected capacity change from 0 to 8192 [ 1060.580707][T26084] loop3: detected capacity change from 0 to 4096 [ 1060.645912][T26085] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1060.929272][T26089] loop2: detected capacity change from 0 to 4096 [ 1060.998446][T26094] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1061.005322][T26095] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1061.015155][T26096] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1061.077383][T26095] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1061.127158][T26089] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1061.164807][T26089] Remounting filesystem read-only [ 1061.484723][T26106] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8912'. [ 1061.822101][T26102] loop1: detected capacity change from 0 to 32768 [ 1061.892028][T26117] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1062.733020][T26142] loop3: detected capacity change from 0 to 8192 [ 1062.872299][T26153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1063.005917][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8941'. [ 1063.051173][T26161] loop2: detected capacity change from 0 to 128 [ 1063.150369][T26165] loop1: detected capacity change from 0 to 128 [ 1063.187276][ T6437] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1063.211625][T26165] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1063.287206][T26165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1063.580363][T26169] loop3: detected capacity change from 0 to 8192 [ 1063.616776][T26169] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1063.648542][T26169] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1063.659203][T26169] REISERFS (device loop3): using ordered data mode [ 1063.665741][T26169] reiserfs: using flush barriers [ 1063.740931][T26169] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1063.808228][T26169] REISERFS (device loop3): checking transaction log (loop3) [ 1063.881714][T26190] loop2: detected capacity change from 0 to 1024 [ 1064.010375][T26194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8959'. [ 1064.019533][T26194] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8959'. [ 1064.029890][T26194] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8959'. [ 1064.221588][T26169] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[1 2 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2 [ 1064.255728][T26169] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 531. Fsck? [ 1064.277679][T26169] REISERFS (device loop3): Remounting filesystem read-only [ 1064.308535][T26169] REISERFS error (device loop3): vs-13070 reiserfs_read_locked_inode: i/o failure occurred trying to find stat data of [1 2 0x0 SD] [ 1064.330182][T26169] REISERFS warning (device loop3): reiserfs_fill_super: corrupt root inode, run fsck [ 1064.615155][T26212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8967'. [ 1064.777307][T26215] QAT: Device 127 not found [ 1065.003273][T26226] xt_SECMARK: invalid mode: 2 [ 1065.506062][T26208] loop2: detected capacity change from 0 to 32768 [ 1065.556714][T26208] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1065.611763][T26208] gfs2: fsid=syz:syz: Now mounting FS (format 1802)... [ 1065.638993][T26249] tmpfs: Bad value for 'nr_blocks' [ 1065.702830][ T27] audit: type=1400 audit(1752693274.342:46): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26251 comm="syz.3.8986" [ 1065.754831][T26208] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 1065.778206][T19665] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1065.801095][T19665] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1065.898770][T19665] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 91ms [ 1065.924497][T19665] gfs2: fsid=syz:syz.0: jid=0: Done [ 1065.943750][T26259] loop1: detected capacity change from 0 to 512 [ 1065.957049][T26208] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1066.061734][T26259] EXT4-fs (loop1): 1 orphan inode deleted [ 1066.091729][ T249] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1066.126257][T26259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1066.159984][ T249] EXT4-fs error (device loop1): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 1 [ 1066.213547][T26259] ext4 filesystem being mounted at /2019/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1066.354488][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.535186][T26278] loop3: detected capacity change from 0 to 16 [ 1066.579729][T26278] erofs: (device loop3): mounted with root inode @ nid 36. [ 1066.800001][T26286] comedi comedi3: pcl812: a I/O base address must be specified [ 1067.050895][T26268] loop0: detected capacity change from 0 to 32768 [ 1067.081480][T26294] loop3: detected capacity change from 0 to 512 [ 1067.105902][T26268] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1067.107427][T26294] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1067.145295][T26294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1067.239716][T26294] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.9006: bad orphan inode 131083 [ 1067.248686][T26268] XFS (loop0): Ending clean mount [ 1067.258474][T26294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1067.361476][ T6576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1067.413084][ T6573] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1067.865850][T26319] loop0: detected capacity change from 0 to 512 [ 1068.049941][T26304] loop1: detected capacity change from 0 to 32768 [ 1068.088846][T26326] netlink: 'syz.0.9018': attribute type 10 has an invalid length. [ 1068.100597][T26327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9017'. [ 1068.140878][T26304] read_mapping_page failed! [ 1068.157136][T26304] ERROR: (device loop1): txCommit: [ 1068.157136][T26304] [ 1068.166105][T26326] veth1_macvtap: left promiscuous mode [ 1068.489288][T26336] loop3: detected capacity change from 0 to 256 [ 1068.552095][T26336] FAT-fs (loop3): Directory bread(block 64) failed [ 1068.576651][T26336] FAT-fs (loop3): Directory bread(block 65) failed [ 1068.592109][T26336] FAT-fs (loop3): Directory bread(block 66) failed [ 1068.602539][T26341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9026'. [ 1068.612109][T26336] FAT-fs (loop3): Directory bread(block 67) failed [ 1068.622564][T26336] FAT-fs (loop3): Directory bread(block 68) failed [ 1068.643865][T26336] FAT-fs (loop3): Directory bread(block 69) failed [ 1068.656020][T26336] FAT-fs (loop3): Directory bread(block 70) failed [ 1068.696707][T26336] FAT-fs (loop3): Directory bread(block 71) failed [ 1068.705058][T26336] FAT-fs (loop3): Directory bread(block 72) failed [ 1068.722526][T26336] FAT-fs (loop3): Directory bread(block 73) failed [ 1069.222918][T26337] loop2: detected capacity change from 0 to 32768 [ 1069.243900][T26349] loop1: detected capacity change from 0 to 512 [ 1069.278036][T26337] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1069.300785][T26349] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1069.381270][T26349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1069.430132][T26343] loop0: detected capacity change from 0 to 32768 [ 1069.440781][T26337] XFS (loop2): Ending clean mount [ 1069.451810][T26349] ext4 filesystem being mounted at /2024/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.530877][T26349] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.9022: corrupted xattr block 19: overlapping e_value [ 1069.678987][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.705145][ T6578] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1069.816115][T26368] IPv6: NLM_F_CREATE should be specified when creating new route [ 1070.057170][T26374] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1070.218882][T26380] loop2: detected capacity change from 0 to 128 [ 1070.265432][T26380] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1070.340706][T26380] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1070.634616][T26396] netlink: 'syz.0.9045': attribute type 6 has an invalid length. [ 1071.024849][ T23] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1071.058716][T26417] loop0: detected capacity change from 0 to 512 [ 1071.065887][T26417] EXT4-fs: Ignoring removed oldalloc option [ 1071.098524][T26417] EXT4-fs: inline encryption not supported [ 1071.124005][T26417] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1071.200820][T26417] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.9057: bg 0: block 64: padding at end of block bitmap is not set [ 1071.225420][T26417] Quota error (device loop0): write_blk: dquota write failed [ 1071.233657][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1071.240403][T26417] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1071.251825][ T23] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1071.260681][ T23] usb 4-1: config 0 has no interface number 0 [ 1071.267480][T26417] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.9057: Failed to acquire dquot type 0 [ 1071.279220][ T23] usb 4-1: config 0 interface 1 has no altsetting 0 [ 1071.288136][T26417] EXT4-fs (loop0): 1 truncate cleaned up [ 1071.295576][ T23] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 1071.306648][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.315712][ T23] usb 4-1: Product: syz [ 1071.319902][ T23] usb 4-1: Manufacturer: syz [ 1071.324977][ T23] usb 4-1: SerialNumber: syz [ 1071.332081][T26417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1071.357732][ T23] usb 4-1: config 0 descriptor?? [ 1071.486175][T26417] Quota error (device loop0): write_blk: dquota write failed [ 1071.515572][T26417] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 1071.531380][T26417] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.9057: Failed to acquire dquot type 0 [ 1071.627949][T26436] (unnamed net_device) (uninitialized): up delay (16) is not a multiple of miimon (6516), value rounded to 0 ms [ 1071.634835][ T23] i2c-cp2615: probe of 4-1:0.1 failed with error -22 [ 1071.699498][ T6573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.912699][ T23] usb 4-1: USB disconnect, device number 123 [ 1072.440722][T26469] netlink: 'syz.1.9078': attribute type 8 has an invalid length. [ 1072.538791][T26473] netlink: 'syz.2.9080': attribute type 9 has an invalid length. [ 1072.590370][T26473] netlink: 911 bytes leftover after parsing attributes in process `syz.2.9080'. [ 1072.671653][T26479] loop3: detected capacity change from 0 to 8 [ 1072.777586][ T27] audit: type=1326 audit(1752693280.946:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26482 comm="syz.0.9094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2da1b8e929 code=0x0 [ 1072.959748][T26491] loop0: detected capacity change from 0 to 1024 [ 1073.137200][ T42] hfsplus: b-tree write err: -5, ino 4 [ 1073.455041][T26507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9106'. [ 1073.916828][T26523] loop3: detected capacity change from 0 to 4096 [ 1073.930768][T26523] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1073.994045][T26529] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9110'. [ 1074.016227][T26523] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1074.053292][T26523] ntfs3: loop3: ino=1f, "file2" failed to open parent directory r=5 to update [ 1074.140588][ T249] ntfs3: loop3: ino=1f, failed to open parent directory r=5 to update [ 1074.191216][T26535] loop2: detected capacity change from 0 to 2048 [ 1074.208545][T26535] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1074.583948][T19665] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1074.790417][T19665] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1074.799635][T19665] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.808596][T19665] usb 4-1: Product: syz [ 1074.812781][T19665] usb 4-1: Manufacturer: syz [ 1074.817357][T19665] usb 4-1: SerialNumber: syz [ 1074.823443][T19665] r8152-cfgselector 4-1: config 0 descriptor?? [ 1075.269768][T19665] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1075.277804][T19665] r8152-cfgselector 4-1: USB disconnect, device number 124 [ 1075.892482][T26552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9127'. [ 1075.927624][T26556] loop1: detected capacity change from 0 to 1024 [ 1076.059241][ T11] hfsplus: b-tree write err: -5, ino 4 [ 1076.106240][T26560] overlay: Bad value for 'verity' [ 1077.175543][T26578] loop2: detected capacity change from 0 to 32768 [ 1077.247092][T26578] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1077.363373][ T27] audit: type=1326 audit(1752693285.240:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26607 comm="syz.3.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1077.413901][T26578] XFS (loop2): Ending clean mount [ 1077.467208][T26611] netlink: 'syz.1.9144': attribute type 21 has an invalid length. [ 1077.470106][ T27] audit: type=1326 audit(1752693285.240:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26607 comm="syz.3.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1077.558915][ T27] audit: type=1326 audit(1752693285.240:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26607 comm="syz.3.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1077.638122][ T6578] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1077.682226][ T27] audit: type=1326 audit(1752693285.240:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26607 comm="syz.3.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1077.704567][ C1] vkms_vblank_simulate: vblank timer overrun [ 1077.758877][ T27] audit: type=1326 audit(1752693285.240:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26607 comm="syz.3.9145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1078.318059][T26638] loop1: detected capacity change from 0 to 64 [ 1078.795895][T26648] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9161'. [ 1078.805239][T26648] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9161'. [ 1078.878628][T26636] loop3: detected capacity change from 0 to 32768 [ 1079.092673][T26660] loop1: detected capacity change from 0 to 256 [ 1079.144330][T26660] FAT-fs (loop1): Directory bread(block 64) failed [ 1079.160346][T26660] FAT-fs (loop1): Directory bread(block 65) failed [ 1079.177763][T26660] FAT-fs (loop1): Directory bread(block 66) failed [ 1079.194309][T26660] FAT-fs (loop1): Directory bread(block 67) failed [ 1079.206599][T26660] FAT-fs (loop1): Directory bread(block 68) failed [ 1079.214569][T26660] FAT-fs (loop1): Directory bread(block 69) failed [ 1079.222082][T26660] FAT-fs (loop1): Directory bread(block 70) failed [ 1079.241405][T26660] FAT-fs (loop1): Directory bread(block 71) failed [ 1079.252296][T26660] FAT-fs (loop1): Directory bread(block 72) failed [ 1079.259389][T26660] FAT-fs (loop1): Directory bread(block 73) failed [ 1079.536901][T26669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9173'. [ 1079.565938][T26669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1079.733343][T26675] netlink: 112 bytes leftover after parsing attributes in process `syz.2.9175'. [ 1079.773291][T26675] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9175'. [ 1079.934140][T26684] netlink: 'syz.3.9186': attribute type 10 has an invalid length. [ 1079.953866][T26684] veth1_macvtap: left promiscuous mode [ 1079.960540][T26685] loop2: detected capacity change from 0 to 8 [ 1080.613510][T26705] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9187'. [ 1080.623208][T26704] --map-set only usable from mangle table [ 1080.656189][T26705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9187'. [ 1080.697727][T26687] loop1: detected capacity change from 0 to 32768 [ 1081.242597][T26723] loop0: detected capacity change from 0 to 4096 [ 1081.303516][T26723] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 1081.396290][ T55] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1081.471721][T26729] netlink: 'syz.1.9193': attribute type 10 has an invalid length. [ 1081.510425][T26729] veth1_macvtap: left promiscuous mode [ 1081.632998][ T55] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1081.644404][T26733] loop2: detected capacity change from 0 to 4096 [ 1081.651290][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.661116][ T55] usb 4-1: Product: syz [ 1081.665387][T26733] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 1081.686849][ T55] usb 4-1: Manufacturer: syz [ 1081.691488][ T55] usb 4-1: SerialNumber: syz [ 1081.716748][ T55] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1081.737046][ T6458] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1081.948120][T26733] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1081.995634][T26733] ntfs3: loop2: ino=1f, "file2" failed to open parent directory r=5 to update [ 1082.109151][ T42] ntfs3: loop2: ino=1f, failed to open parent directory r=5 to update [ 1082.297936][ T55] usb 4-1: USB disconnect, device number 125 [ 1082.330860][T26747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9211'. [ 1082.600915][T26762] netlink: 'syz.2.9217': attribute type 29 has an invalid length. [ 1082.609319][T26762] netlink: 'syz.2.9217': attribute type 29 has an invalid length. [ 1082.630179][T26763] loop0: detected capacity change from 0 to 512 [ 1082.643320][T26763] EXT4-fs: Ignoring removed i_version option [ 1082.657273][T26763] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1082.695394][T26763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 1082.714936][T26763] System zones: 1-12 [ 1082.719628][T26763] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1082.727990][T26763] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.9218: invalid indirect mapped block 12 (level 1) [ 1082.749270][T26768] netlink: 'syz.1.9220': attribute type 10 has an invalid length. [ 1082.757917][T26763] EXT4-fs (loop0): Remounting filesystem read-only [ 1082.769290][T26768] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9220'. [ 1082.779155][T26763] EXT4-fs (loop0): 1 truncate cleaned up [ 1082.791307][T26768] batman_adv: batadv0: Adding interface: vlan1 [ 1082.802144][T26763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1082.821815][T26768] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1082.861984][T26768] batman_adv: batadv0: Interface activated: vlan1 [ 1082.879452][ T6458] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1082.886605][ T6458] ath9k_htc: Failed to initialize the device [ 1082.940586][ T55] usb 4-1: ath9k_htc: USB layer deinitialized [ 1083.010392][ T6573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1083.245741][T26774] loop3: detected capacity change from 0 to 8192 [ 1083.270202][T26773] loop1: detected capacity change from 0 to 8192 [ 1083.286109][T26777] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1083.334712][T26766] loop2: detected capacity change from 0 to 32768 [ 1083.478376][ T55] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1083.510113][T26778] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1083.722925][ T55] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1083.749610][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.768400][ T55] usb 1-1: Product: syz [ 1083.778826][ T55] usb 1-1: Manufacturer: syz [ 1083.788468][ T55] usb 1-1: SerialNumber: syz [ 1083.817550][ T55] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1083.864827][T19665] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1084.383422][T26794] loop3: detected capacity change from 0 to 4096 [ 1084.431294][ T55] usb 1-1: USB disconnect, device number 123 [ 1084.444577][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.451107][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.631328][T26794] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 1084.650448][T26794] ntfs3: loop3: ino=9, ntfs_sync_fs failed, -22. [ 1084.655633][T26800] loop2: detected capacity change from 0 to 2048 [ 1084.670274][T26794] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 1084.686931][T26800] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1084.698060][T26800] UDF-fs: Scanning with blocksize 512 failed [ 1084.711230][T26800] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1085.007174][T19665] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1085.025168][T19665] ath9k_htc: Failed to initialize the device [ 1085.036455][ T55] usb 1-1: ath9k_htc: USB layer deinitialized [ 1085.155890][T26786] loop1: detected capacity change from 0 to 32768 [ 1085.165136][T26804] loop3: detected capacity change from 0 to 8192 [ 1085.179595][T26786] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 1085.193609][T26786] dlm: no local IP address has been set [ 1085.199754][T26786] dlm: cannot start dlm midcomms -107 [ 1085.202134][T26804] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1085.205935][T26786] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 1085.242317][T26804] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 1085.251598][T26804] REISERFS (device loop3): using ordered data mode [ 1085.286020][T26804] reiserfs: using flush barriers [ 1085.315863][T26804] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1085.348051][T26804] REISERFS (device loop3): checking transaction log (loop3) [ 1085.496478][T26818] loop0: detected capacity change from 0 to 2048 [ 1085.608370][T26804] REISERFS (device loop3): Using r5 hash to sort names [ 1085.633909][T26804] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1086.065223][ T27] audit: type=1400 audit(1752693293.378:53): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=26829 comm="syz.1.9249" [ 1086.258176][T26839] Cannot find set identified by id 0 to match [ 1086.348643][T26842] tmpfs: Bad value for 'nr_blocks' [ 1086.613259][T26854] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9260'. [ 1086.910050][T26840] loop2: detected capacity change from 0 to 32768 [ 1086.915302][T26859] bond2: entered promiscuous mode [ 1086.921858][T26840] XFS: attr2 mount option is deprecated. [ 1086.954201][T26869] QAT: Device 127 not found [ 1086.985663][T26840] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1087.005513][T26859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1087.185827][T26840] XFS (loop2): Ending clean mount [ 1087.218380][T26840] XFS (loop2): Quotacheck needed: Please wait. [ 1087.325457][T26883] ip6gre1: entered allmulticast mode [ 1087.341671][T26840] XFS (loop2): Quotacheck: Done. [ 1087.419383][ T6578] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1088.148263][T26887] loop0: detected capacity change from 0 to 32768 [ 1088.316695][T26907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1088.378517][T26907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1088.414164][T26909] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1089.183030][T26943] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1089.322086][ T27] audit: type=1326 audit(1752693296.427:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1089.345124][T26948] loop2: detected capacity change from 0 to 4096 [ 1089.362396][ T27] audit: type=1326 audit(1752693296.427:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1089.447230][ T27] audit: type=1326 audit(1752693296.464:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1089.496617][ T27] audit: type=1326 audit(1752693296.464:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1089.577685][ T27] audit: type=1326 audit(1752693296.464:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26950 comm="syz.3.9302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c7e98e929 code=0x7ffc0000 [ 1089.757417][T26964] loop3: detected capacity change from 0 to 1024 [ 1089.789012][T26967] loop1: detected capacity change from 0 to 512 [ 1089.805194][T26967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1089.896136][T26967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.972255][T26967] ext4 filesystem being mounted at /2095/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.988870][T19665] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1090.091929][T26972] bond3: entered promiscuous mode [ 1090.116791][T26967] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 1090.136907][T26972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1090.160712][T26967] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1090.190048][T26967] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.9310: Failed to acquire dquot type 1 [ 1090.205562][T19665] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1090.238937][T19665] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1090.269261][T19665] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1090.285797][T19665] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.304761][T19665] usb 1-1: Product: syz [ 1090.315780][T19665] usb 1-1: Manufacturer: syz [ 1090.325695][ T6575] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.326337][T19665] usb 1-1: SerialNumber: syz [ 1090.352710][T26977] netlink: 'syz.2.9313': attribute type 1 has an invalid length. [ 1090.360461][T26977] netlink: 236 bytes leftover after parsing attributes in process `syz.2.9313'. [ 1090.363547][T19665] usb 1-1: config 0 descriptor?? [ 1090.391051][T19665] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1090.426114][T19665] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 1090.746416][T26989] loop2: detected capacity change from 0 to 512 [ 1090.792954][ T8] usb 1-1: USB disconnect, device number 124 [ 1090.809793][T26989] EXT4-fs (loop2): 1 orphan inode deleted [ 1090.825327][T26989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1090.872570][T26989] ext4 filesystem being mounted at /2193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1090.927265][T26999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1090.942823][ T249] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1090.942919][ T249] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:5: Failed to release dquot type 1 [ 1091.004305][T26989] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1091.106594][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.468597][T27016] Zero length message leads to an empty skb [ 1091.685733][T27027] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1091.945004][T27039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9341'. [ 1091.970099][T27039] netlink: 112 bytes leftover after parsing attributes in process `syz.3.9341'. [ 1092.249734][T27047] loop0: detected capacity change from 0 to 256 [ 1092.559352][T27033] loop2: detected capacity change from 0 to 32768 [ 1092.594297][ T27] audit: type=1800 audit(1752693299.486:59): pid=27033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9338" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 1092.711225][T27064] warning: `syz.3.9351' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1092.976192][T27073] loop2: detected capacity change from 0 to 256 [ 1093.029240][T27077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9360'. [ 1093.042349][T27076] loop1: detected capacity change from 0 to 1024 [ 1093.170468][T12899] hfsplus: b-tree write err: -5, ino 4 [ 1093.353943][T27082] loop3: detected capacity change from 0 to 1024 [ 1093.523692][T27092] loop0: detected capacity change from 0 to 64 [ 1093.605874][T27092] syz.0.9367: attempt to access beyond end of device [ 1093.605874][T27092] loop0: rw=0, sector=128, nr_sectors = 2 limit=64 [ 1093.656140][T27092] Trying to free block not in datazone [ 1093.662359][T27092] Trying to free block not in datazone [ 1093.698554][T27092] Trying to free block not in datazone [ 1093.708111][T27095] bond1: entered promiscuous mode [ 1093.709345][T27098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9370'. [ 1093.715731][T27095] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1093.731579][T27092] Trying to free block not in datazone [ 1093.737223][T27092] Trying to free block not in datazone [ 1093.756343][T27092] Trying to free block not in datazone [ 1093.765446][T27092] minix_free_block (loop0:6): bit already cleared [ 1093.982186][T27105] netlink: 'syz.1.9373': attribute type 10 has an invalid length. [ 1094.096711][T27105] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1094.392069][T27122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9382'. [ 1094.408007][T27120] loop1: detected capacity change from 0 to 4096 [ 1094.484477][T27124] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1094.541428][T27120] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1094.553931][T27120] Remounting filesystem read-only [ 1095.281435][T27155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9395'. [ 1095.421494][T27160] Cannot find del_set index 4 as target [ 1096.047028][T27158] loop1: detected capacity change from 0 to 32768 [ 1096.069589][T27158] XFS: ikeep mount option is deprecated. [ 1096.089985][T27176] loop0: detected capacity change from 0 to 4096 [ 1096.106767][T27158] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1096.272017][T27158] XFS (loop1): Ending clean mount [ 1096.313202][T27158] XFS (loop1): Quotacheck needed: Please wait. [ 1096.444171][T27158] XFS (loop1): Quotacheck: Done. [ 1096.545955][T27193] netlink: 'syz.3.9411': attribute type 29 has an invalid length. [ 1096.589905][T27193] netlink: 'syz.3.9411': attribute type 29 has an invalid length. [ 1096.593471][ T6575] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1097.402333][T27221] loop2: detected capacity change from 0 to 256 [ 1097.496884][T27226] loop3: detected capacity change from 0 to 256 [ 1097.598497][T27229] netlink: 'syz.0.9429': attribute type 1 has an invalid length. [ 1097.746870][T27233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9430'. [ 1097.968022][T27241] loop2: detected capacity change from 0 to 128 [ 1098.007939][T27241] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1098.044717][T27241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1098.098726][T27241] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1098.110816][T27241] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 1098.308758][ T6578] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 1098.320405][ T6578] UDF-fs: error (device loop2): udf_read_inode: (ino 104) failed !bh [ 1098.527277][T27255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9443'. [ 1098.552227][T27255] netlink: 'syz.3.9443': attribute type 1 has an invalid length. [ 1098.655554][T27257] loop1: detected capacity change from 0 to 4096 [ 1098.710061][T27245] loop0: detected capacity change from 0 to 32768 [ 1098.719935][T27245] XFS: attr2 mount option is deprecated. [ 1098.794268][T27245] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1098.795873][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.814119][T27264] loop3: detected capacity change from 0 to 512 [ 1098.898612][T27264] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1098.937439][T27264] Quota error (device loop3): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 1098.969243][T27264] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1098.988182][T27245] XFS (loop0): Ending clean mount [ 1099.032556][T27264] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 1099.045493][T27245] XFS (loop0): Quotacheck needed: Please wait. [ 1099.061850][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.084615][T27264] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.9446: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1099.168229][T27264] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.9446: couldn't read orphan inode 13 (err -117) [ 1099.170551][T27245] XFS (loop0): Quotacheck: Done. [ 1099.228120][T27264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback. [ 1099.355989][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.375775][T27264] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 1099.394821][T27264] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 1099.422030][ T6573] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1099.465289][ T6576] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0b00-0000-000000000000. [ 1099.471120][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.854547][T27275] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9455'. [ 1100.103000][T27279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1100.115410][T27279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1100.124216][T27279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1100.132862][T27279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1100.141636][T27279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1100.149423][T27279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1100.539914][T27277] chnl_net:caif_netlink_parms(): no params data found [ 1100.687377][T27277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.694703][T27277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1100.710876][T27277] bridge_slave_0: entered allmulticast mode [ 1100.718145][T27277] bridge_slave_0: entered promiscuous mode [ 1100.755830][T27277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.763046][T27277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1100.772326][T27277] bridge_slave_1: entered allmulticast mode [ 1100.783957][T27277] bridge_slave_1: entered promiscuous mode [ 1100.846872][T27277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.860995][T27277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.922250][T27277] team0: Port device team_slave_0 added [ 1100.931590][T27277] team0: Port device team_slave_1 added [ 1100.988058][T27277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1100.998315][T27277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.025068][T27277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.056738][T27277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.063755][T27277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1101.110948][T27277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.248191][ T42] hsr_slave_0: left promiscuous mode [ 1101.254496][ T42] hsr_slave_1: left promiscuous mode [ 1101.269121][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1101.276600][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1101.287456][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1101.297778][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1101.306148][ T42] batman_adv: batadv0: Interface deactivated: vlan1 [ 1101.315294][ T42] batman_adv: batadv0: Removing interface: vlan1 [ 1101.326006][ T42] bridge_slave_1: left allmulticast mode [ 1101.334760][ T42] bridge_slave_1: left promiscuous mode [ 1101.342128][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.351886][ T42] bridge_slave_0: left allmulticast mode [ 1101.358088][ T42] bridge_slave_0: left promiscuous mode [ 1101.364525][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.409498][ T42] veth1_macvtap: left promiscuous mode [ 1101.415135][ T42] veth0_macvtap: left promiscuous mode [ 1101.421406][ T42] veth1_vlan: left promiscuous mode [ 1101.426746][ T42] veth0_vlan: left promiscuous mode [ 1101.679064][ T42] bond3 (unregistering): Released all slaves [ 1101.691192][ T42] bond2 (unregistering): Released all slaves [ 1101.706454][ T42] bond1 (unregistering): Released all slaves [ 1102.106812][ T42] team0 (unregistering): Port device team_slave_1 removed [ 1102.160160][ T42] team0 (unregistering): Port device team_slave_0 removed [ 1102.202481][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.247100][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.381565][T27279] Bluetooth: hci3: command tx timeout [ 1102.740193][ T42] bond0 (unregistering): Released all slaves [ 1102.834465][T27277] hsr_slave_0: entered promiscuous mode [ 1102.840922][T27277] hsr_slave_1: entered promiscuous mode [ 1103.151802][T27277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1103.186426][T27277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1103.197118][T27277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1103.209765][T27277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1103.353292][T27277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1103.375148][T27277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.391104][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.398312][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.420039][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.427238][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.691084][T27277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1104.003535][T27277] veth0_vlan: entered promiscuous mode [ 1104.020340][T27277] veth1_vlan: entered promiscuous mode [ 1104.056861][T27277] veth0_macvtap: entered promiscuous mode [ 1104.068737][T27277] veth1_macvtap: entered promiscuous mode [ 1104.096554][T27277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.107220][T27277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.126231][T27277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.139324][T27277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.152409][T27277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1104.164314][T27277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.180286][T27277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1104.202569][T27277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.214829][T27277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.229860][T27277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.243904][T27277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.254560][T27277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.265312][T27277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.276505][T27277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.304008][T27277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.312736][T27277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.322570][T27277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.332019][T27277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.424878][ T249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.433755][ T249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.481180][ T249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.489278][ T249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1104.579033][T27361] ieee802154 phy0 wpan0: encryption failed: -90 [ 1104.613702][T27279] Bluetooth: hci3: command tx timeout [ 1104.845662][T27376] loop3: detected capacity change from 0 to 256 [ 1104.938866][T27376] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 1105.403311][T27387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9453'. [ 1105.517551][T27368] loop0: detected capacity change from 0 to 32768 [ 1105.549055][T27368] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.9458 (27368) [ 1105.669605][T27368] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1105.700234][T27397] qrtr: Invalid version 195 [ 1105.733151][T27368] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1105.754068][T27368] BTRFS info (device loop0): force clearing of disk cache [ 1105.784192][ T249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.800606][T27368] BTRFS info (device loop0): enabling auto defrag [ 1105.807116][T27368] BTRFS info (device loop0): max_inline at 0 [ 1105.837301][T27368] BTRFS info (device loop0): enabling disk space caching [ 1105.850292][T27368] BTRFS info (device loop0): disk space caching is enabled [ 1105.990849][ T249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.011100][T27368] BTRFS info (device loop0): enabling ssd optimizations [ 1106.094248][T27368] BTRFS info (device loop0): rebuilding free space tree [ 1106.157510][T27368] BTRFS info (device loop0): disabling free space tree [ 1106.167191][ T249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.186139][T27368] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1106.229104][T27368] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1106.413398][T27422] loop4: detected capacity change from 0 to 512 [ 1106.470186][ T249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.503158][T27368] overlayfs: missing 'lowerdir' [ 1106.520500][T27422] EXT4-fs (loop4): 1 orphan inode deleted [ 1106.554646][ T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1106.582574][T27422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.655549][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6974: comm kworker/u4:0: Failed to release dquot type 1 [ 1106.692349][T27422] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.728366][ T6573] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1106.826779][T27279] Bluetooth: hci3: command tx timeout [ 1106.958115][T27277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.021443][ T6583] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1107.051215][ T6583] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1107.071740][ T6583] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1107.102369][ T6583] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1107.115770][ T6583] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1107.125082][ T6583] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1107.946186][T27466] loop0: detected capacity change from 0 to 512 [ 1108.076497][T27466] EXT4-fs (loop0): 1 orphan inode deleted [ 1108.100651][T27466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1108.120289][T12899] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1108.172597][T27466] ext4 filesystem being mounted at /2212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1108.177182][T27472] loop4: detected capacity change from 0 to 8192 [ 1108.183510][T12899] EXT4-fs error (device loop0): ext4_release_dquot:6974: comm kworker/u4:3: Failed to release dquot type 1 [ 1108.209988][T27472] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1108.369830][ T6573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1108.983453][T27438] chnl_net:caif_netlink_parms(): no params data found [ 1109.040684][T27279] Bluetooth: hci3: command tx timeout [ 1109.147041][T27438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.154221][T27438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.162172][T27438] bridge_slave_0: entered allmulticast mode [ 1109.169898][T27438] bridge_slave_0: entered promiscuous mode [ 1109.184460][T27438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.192058][T27438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.199262][T27438] bridge_slave_1: entered allmulticast mode [ 1109.206374][T27438] bridge_slave_1: entered promiscuous mode [ 1109.272491][T27438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1109.286960][T27438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.327798][T27438] team0: Port device team_slave_0 added [ 1109.353742][T27438] team0: Port device team_slave_1 added [ 1109.363779][ T249] hsr_slave_0: left promiscuous mode [ 1109.369568][ T249] hsr_slave_1: left promiscuous mode [ 1109.376106][ T249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.381738][T27279] Bluetooth: hci2: command tx timeout [ 1109.390297][ T249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.399567][ T249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.407265][ T249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.415170][ T249] bridge_slave_1: left allmulticast mode [ 1109.420810][ T249] bridge_slave_1: left promiscuous mode [ 1109.426739][ T249] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.435464][ T249] bridge_slave_0: left allmulticast mode [ 1109.441117][ T249] bridge_slave_0: left promiscuous mode [ 1109.446937][ T249] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.474419][ T249] veth0_macvtap: left promiscuous mode [ 1109.480331][ T249] veth1_vlan: left promiscuous mode [ 1109.485677][ T249] veth0_vlan: left promiscuous mode [ 1109.712157][ T249] bond1 (unregistering): Released all slaves [ 1110.115546][ T249] team0 (unregistering): Port device team_slave_1 removed [ 1110.168270][ T249] team0 (unregistering): Port device team_slave_0 removed [ 1110.214112][ T249] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.263205][ T249] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.762657][ T249] bond0 (unregistering): Released all slaves [ 1110.872616][T27438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.882875][T27438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.909844][T27438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.924810][T27438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.932213][T27438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1110.958095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.964526][T27438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1111.034713][T27438] hsr_slave_0: entered promiscuous mode [ 1111.043332][T27438] hsr_slave_1: entered promiscuous mode [ 1111.055553][T27438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1111.063756][T27438] Cannot create hsr debugfs directory [ 1111.441507][T27438] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1111.453714][T27438] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1111.471979][T27438] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1111.484263][T27438] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1111.583570][T27438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.605401][T27279] Bluetooth: hci2: command tx timeout [ 1111.617031][T27438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.634951][ T249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.642153][ T249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.670808][ T249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.677977][ T249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.950225][T27438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.333300][T27438] veth0_vlan: entered promiscuous mode [ 1112.356465][T27438] veth1_vlan: entered promiscuous mode [ 1112.408306][T27438] veth0_macvtap: entered promiscuous mode [ 1112.424963][T27438] veth1_macvtap: entered promiscuous mode [ 1112.455989][T27438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.474219][T27438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.485689][T27438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.501724][T27438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.511984][T27438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.527770][T27438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.540850][T27438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.564465][T27438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.579850][T27438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.594588][T27438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.605452][T27438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.624073][T27438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.639659][T27438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.654188][T27438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.675257][T27438] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.684557][T27438] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.694133][T27438] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.705155][T27438] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.821744][ T249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.842711][ T249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.879741][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.887610][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.046398][T27571] binder: 27568:27571 ioctl c018620c 2000000001c0 returned -22 [ 1113.065127][T27574] loop0: detected capacity change from 0 to 128 [ 1113.109653][T27574] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1113.352420][ T6573] sysv_free_block: flc_count > flc_size [ 1113.369050][ T6573] sysv_free_block: flc_count > flc_size [ 1113.396167][ T6573] sysv_free_block: flc_count > flc_size [ 1113.422718][ T6573] sysv_free_block: flc_count > flc_size [ 1113.428322][ T6573] sysv_free_block: flc_count > flc_size [ 1113.450921][ T6573] sysv_free_block: flc_count > flc_size [ 1113.476193][ T6573] sysv_free_block: flc_count > flc_size [ 1113.481784][ T6573] sysv_free_block: flc_count > flc_size [ 1113.489901][ T6573] sysv_free_block: flc_count > flc_size [ 1113.495478][ T6573] sysv_free_block: flc_count > flc_size [ 1113.517768][ T6573] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1113.668574][ T6744] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1113.777363][T27595] loop1: detected capacity change from 0 to 8192 [ 1113.829358][T27279] Bluetooth: hci2: command tx timeout [ 1113.843277][T27595] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1113.893102][ T6744] usb 5-1: Using ep0 maxpacket: 8 [ 1113.919179][ T6744] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1113.952341][ T6744] usb 5-1: config 9 has an invalid interface number: 5 but max is 1 [ 1114.000351][ T6744] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.038056][ T6744] usb 5-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1114.064350][ T6744] usb 5-1: config 9 has no interface number 0 [ 1114.081431][ T6744] usb 5-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x81, skipping [ 1114.128239][ T6744] usb 5-1: config 9 interface 5 has no altsetting 0 [ 1114.155399][ T6744] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 1114.177108][ T6744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.211835][ T6744] usb 5-1: Product: syz [ 1114.229686][ T6744] usb 5-1: Manufacturer: syz [ 1114.234335][ T6744] usb 5-1: SerialNumber: syz [ 1114.547410][ T6744] usb 5-1: USB disconnect, device number 2 [ 1115.272157][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1115.485957][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1115.520245][ T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1115.566852][ T23] usb 2-1: config 179 has no interface number 0 [ 1115.574882][ T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1115.592939][ T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1115.623755][ T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1115.639801][ T23] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1115.656983][ T23] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1115.676947][ T23] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1115.676992][ T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1115.677016][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.729572][ T23] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input71 [ 1115.778040][T27666] loop5: detected capacity change from 0 to 4096 [ 1115.812877][T27666] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512). [ 1116.052592][T27279] Bluetooth: hci2: command tx timeout [ 1116.088630][ T5774] usb 2-1: USB disconnect, device number 9 [ 1116.122869][ T5774] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1116.291109][T27686] netlink: 'syz.4.9524': attribute type 10 has an invalid length. [ 1116.313042][T27686] veth1_macvtap: left promiscuous mode [ 1116.374799][T27683] loop0: detected capacity change from 0 to 4096 [ 1116.400589][T27683] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1116.770283][T27699] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9529'. [ 1116.800931][T27699] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9529'. [ 1116.995479][T27705] syz.5.9531: attempt to access beyond end of device [ 1116.995479][T27705] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1117.081481][T27705] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32 [ 1117.352149][T27722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9546'. [ 1117.361805][T27723] netlink: 'syz.5.9538': attribute type 10 has an invalid length. [ 1117.388156][T27723] veth1_macvtap: left promiscuous mode [ 1117.799668][T27743] loop4: detected capacity change from 0 to 1024 [ 1117.881339][T27743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1118.000663][T27743] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.9544: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 1118.030327][T27743] EXT4-fs (loop4): Remounting filesystem read-only [ 1118.116686][T27277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.337458][T27757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1118.488317][T27736] loop1: detected capacity change from 0 to 32768 [ 1118.538100][T27736] read_mapping_page failed! [ 1118.571026][T27736] ialloc: diAlloc returned -5! [ 1118.571420][T27761] syz.4.9551 uses old SIOCAX25GETINFO [ 1119.010985][T27744] loop0: detected capacity change from 0 to 40427 [ 1119.092069][T27744] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 1119.110982][T27744] F2FS-fs (loop0): Image doesn't support compression [ 1119.164245][T27744] F2FS-fs (loop0): Image doesn't support compression [ 1119.199759][T27744] F2FS-fs (loop0): invalid crc value [ 1119.238232][T27744] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1119.477223][T27744] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1119.542640][T27744] syz.0.9545: attempt to access beyond end of device [ 1119.542640][T27744] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 1119.625007][T27796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9563'. [ 1119.734518][ T6573] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x516/0x19c0 [ 1119.785127][ T6573] F2FS-fs (loop0): invalid blkaddr: 1028, type: 10, run fsck to fix. [ 1120.127611][T27815] netlink: zone id is out of range [ 1120.160671][T27818] netlink: 'syz.1.9572': attribute type 10 has an invalid length. [ 1120.510599][ T5774] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1120.530436][ T27] audit: type=1326 audit(1752693325.621:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.1.9577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff566d8e929 code=0x7ffc0000 [ 1120.606075][ T27] audit: type=1326 audit(1752693325.621:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.1.9577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff566d8e929 code=0x7ffc0000 [ 1120.628405][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.699888][ T27] audit: type=1326 audit(1752693325.630:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.1.9577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ff566d8e929 code=0x7ffc0000 [ 1120.727153][ T27] audit: type=1326 audit(1752693325.630:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27830 comm="syz.1.9577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff566d8e929 code=0x7ffc0000 [ 1120.735057][ T5774] usb 6-1: Using ep0 maxpacket: 8 [ 1120.829381][ T5774] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1120.863613][ T5774] usb 6-1: config 179 has no interface number 0 [ 1120.869943][ T5774] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1120.913137][ T5774] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1120.938842][ T5774] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1120.970237][ T5774] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1121.004419][ T5774] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1121.053348][ T5774] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1121.069037][ T5774] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1121.093134][T27852] Driver unsupported XDP return value 0 on prog (id 606) dev N/A, expect packet loss! [ 1121.110368][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.129864][ T5774] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input72 [ 1121.502818][T19665] usb 6-1: USB disconnect, device number 2 [ 1121.529405][T19665] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1121.618074][T27870] loop4: detected capacity change from 0 to 512 [ 1121.687218][T27870] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1121.780967][T27870] Quota error (device loop4): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 1121.786342][T27876] netlink: 'syz.0.9592': attribute type 1 has an invalid length. [ 1121.800739][T27876] netlink: 'syz.0.9592': attribute type 1 has an invalid length. [ 1121.828511][T27870] EXT4-fs warning (device loop4): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1121.900455][T27870] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 1121.925370][T27870] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.9591: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1121.967814][T27870] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.9591: couldn't read orphan inode 13 (err -117) [ 1121.988794][T27870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback. [ 1122.079909][T27870] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 1122.122399][T27870] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 1122.316284][T27277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0b00-0000-000000000000. [ 1122.636753][T27900] loop1: detected capacity change from 0 to 256 [ 1122.684430][T27900] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1123.415610][T27934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9615'. [ 1124.329363][T27972] loop1: detected capacity change from 0 to 64 [ 1124.769469][T27949] loop4: detected capacity change from 0 to 32768 [ 1124.864563][T27949] jfs_strtoUCS: char2uni returned -22. [ 1124.897090][T27949] charset = cp950, char = 0xd4 [ 1125.067233][T27989] loop5: detected capacity change from 0 to 4096 [ 1125.095996][T27989] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1125.563760][T27986] loop0: detected capacity change from 0 to 32768 [ 1125.620377][T27986] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 1125.682999][T27986] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1125.713204][T27986] (syz.0.9641,27986,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=64 [ 1125.738305][T27986] (syz.0.9641,27986,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 1125.759382][T28008] loop4: detected capacity change from 0 to 16 [ 1125.792603][T27986] (syz.0.9641,27986,0):ocfs2_symlink:1867 ERROR: status = -2 [ 1125.813489][T27986] (syz.0.9641,27986,0):ocfs2_symlink:2068 ERROR: status = -2 [ 1125.839365][T28008] erofs: (device loop4): mounted with root inode @ nid 36. [ 1125.907878][T28008] syz.4.9637: attempt to access beyond end of device [ 1125.907878][T28008] loop4: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1125.978193][ T6573] ocfs2: Unmounting device (7,0) on (node local) [ 1126.618107][T28039] netlink: 'syz.0.9650': attribute type 21 has an invalid length. [ 1126.640474][T28039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9650'. [ 1126.719195][T28042] netlink: 128 bytes leftover after parsing attributes in process `syz.1.9652'. [ 1126.772391][T28042] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9652'. [ 1127.565412][T28084] netlink: 'syz.4.9668': attribute type 1 has an invalid length. [ 1127.587775][T28084] netlink: 80 bytes leftover after parsing attributes in process `syz.4.9668'. [ 1127.815749][T28095] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9673'. [ 1127.881125][T28098] loop5: detected capacity change from 0 to 1024 [ 1128.260505][T28116] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9680'. [ 1128.314969][T28116] netlink: 245 bytes leftover after parsing attributes in process `syz.4.9680'. [ 1128.383752][T28122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9681'. [ 1128.679945][T28137] loop4: detected capacity change from 0 to 8 [ 1128.868218][T28137] SQUASHFS error: Failed to read block 0x2fc: -5 [ 1128.902785][T28137] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 1128.910124][T28137] SQUASHFS error: Unable to read directory block [247:26] [ 1129.432348][T28129] loop5: detected capacity change from 0 to 32768 [ 1129.593682][T28167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9697'. [ 1129.840408][ T23] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1130.116478][ T23] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1130.140872][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.178598][ T23] usb 1-1: config 0 has no interface number 0 [ 1130.185386][ T23] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1130.206888][T28190] JFS: discard option not supported on device [ 1130.214898][ T23] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1130.236555][T28190] Mount JFS Failure: -22 [ 1130.246001][T28190] jfs_mount failed w/return code = -22 [ 1130.320183][ T23] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1130.335142][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.343182][ T23] usb 1-1: Product: syz [ 1130.377965][ T23] usb 1-1: Manufacturer: syz [ 1130.382620][ T23] usb 1-1: SerialNumber: syz [ 1130.395423][T28196] loop5: detected capacity change from 0 to 128 [ 1130.411583][ T23] usb 1-1: config 0 descriptor?? [ 1130.444319][T28196] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1130.572782][ T11] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 1130.666916][ T23] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 1130.690881][T28204] usb usb8: usbfs: process 28204 (syz.1.9710) did not claim interface 0 before use [ 1130.733080][ T23] usb 1-1: USB disconnect, device number 125 [ 1131.835155][T28210] loop5: detected capacity change from 0 to 32768 [ 1131.890826][T28210] XFS: ikeep mount option is deprecated. [ 1131.960405][T28266] loop1: detected capacity change from 0 to 8 [ 1131.967654][T28266] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1132.005999][T28210] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1132.022755][ T6438] udevd[6438]: incorrect cramfs checksum on /dev/loop1 [ 1132.343257][T28210] XFS (loop5): Ending clean mount [ 1132.361823][T28210] XFS (loop5): Quotacheck needed: Please wait. [ 1132.433017][T28210] XFS (loop5): Quotacheck: Done. [ 1132.637126][T28289] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1132.661808][T27438] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1133.223063][T28262] loop0: detected capacity change from 0 to 32768 [ 1133.248144][T28303] netlink: 6 bytes leftover after parsing attributes in process `syz.5.9731'. [ 1133.288212][T28303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1133.312795][ T6436] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1133.606923][T28314] loop5: detected capacity change from 0 to 16 [ 1133.654588][T28314] erofs: (device loop5): mounted with root inode @ nid 36. [ 1133.929295][T28326] syz.0.9741 (28326): /proc/28325/oom_adj is deprecated, please use /proc/28325/oom_score_adj instead. [ 1134.200475][T28334] loop1: detected capacity change from 0 to 16 [ 1134.232204][T28339] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9746'. [ 1134.269814][T28339] unsupported nlmsg_type 40 [ 1134.282542][T28334] erofs: (device loop1): mounted with root inode @ nid 36. [ 1134.341494][T28343] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9748'. [ 1134.363707][T28334] syz.1.9744: attempt to access beyond end of device [ 1134.363707][T28334] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1134.530215][T28348] netlink: 'syz.5.9750': attribute type 3 has an invalid length. [ 1134.561382][T28348] netlink: 'syz.5.9750': attribute type 1 has an invalid length. [ 1134.588813][T28348] netlink: 216 bytes leftover after parsing attributes in process `syz.5.9750'. [ 1134.619542][T28348] NCSI netlink: No device for ifindex 33022 [ 1135.588958][T28397] xt_policy: output policy not valid in PREROUTING and INPUT [ 1135.783791][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9773'. [ 1135.941463][T28417] loop0: detected capacity change from 0 to 512 [ 1135.972434][T28417] EXT4-fs: Ignoring removed bh option [ 1136.030065][T28417] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1136.059423][T28417] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1136.117250][T28417] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 1136.145200][T28417] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1136.174766][T28417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1136.214690][T28428] loop1: detected capacity change from 0 to 128 [ 1136.220548][T28417] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #2: block 3: comm syz.0.9783: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 1136.295005][T28428] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1136.380754][T28428] ext4 filesystem being mounted at /2222/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.424539][ T6573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1136.528764][ T6575] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1136.619390][T28439] loop0: detected capacity change from 0 to 512 [ 1136.641687][T28439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 1136.652520][T28439] System zones: 1-12 [ 1136.657072][T28439] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.9784: Directory hole found for htree index block 0 [ 1136.670830][T28439] EXT4-fs (loop0): Remounting filesystem read-only [ 1136.685555][T28439] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 1136.704324][T28444] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.9788'. [ 1136.727178][T28439] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 1136.804073][T28439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1137.013414][ T6573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.111294][T28460] loop5: detected capacity change from 0 to 64 [ 1137.386309][T28470] Cannot find add_set index 2 as target [ 1137.794750][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9808'. [ 1137.828518][T28488] netlink: 312 bytes leftover after parsing attributes in process `syz.0.9808'. [ 1137.855149][T28488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9808'. [ 1137.979370][T28494] loop0: detected capacity change from 0 to 1024 [ 1138.193284][T28474] loop1: detected capacity change from 0 to 32768 [ 1138.238565][T28474] (syz.1.9802,28474,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1138.260771][T28498] cgroup: noprefix used incorrectly [ 1138.279011][T28474] (syz.1.9802,28474,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1138.395668][T28474] JBD2: Ignoring recovery information on journal [ 1138.438214][T28506] loop5: detected capacity change from 0 to 256 [ 1138.558570][T28474] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1138.620560][T28513] loop0: detected capacity change from 0 to 256 [ 1138.978630][T28490] loop4: detected capacity change from 0 to 32768 [ 1139.003214][ T6575] ocfs2: Unmounting device (7,1) on (node local) [ 1139.074076][T28490] find_entry called with index >= next_index [ 1139.092771][T28490] find_entry called with index >= next_index [ 1139.105130][T28490] find_entry called with index >= next_index [ 1139.240066][T28526] loop0: detected capacity change from 0 to 256 [ 1139.319604][T28526] FAT-fs (loop0): Directory bread(block 64) failed [ 1139.366815][T28526] FAT-fs (loop0): Directory bread(block 65) failed [ 1139.384314][T28526] FAT-fs (loop0): Directory bread(block 66) failed [ 1139.432961][T28526] FAT-fs (loop0): Directory bread(block 67) failed [ 1139.439709][T28526] FAT-fs (loop0): Directory bread(block 68) failed [ 1139.477264][T28526] FAT-fs (loop0): Directory bread(block 69) failed [ 1139.483957][T28526] FAT-fs (loop0): Directory bread(block 70) failed [ 1139.502753][T28526] FAT-fs (loop0): Directory bread(block 71) failed [ 1139.514522][T28526] FAT-fs (loop0): Directory bread(block 72) failed [ 1139.523601][T28526] FAT-fs (loop0): Directory bread(block 73) failed [ 1139.598856][T28526] cifs: Unknown parameter 'h}# [ 1139.598856][T28526] [bIT&:"1:ӭ'4,Zz-#F<]%gC [ 1139.598856][T28526] SȘȞZ6' [ 1140.264285][T28539] loop4: detected capacity change from 0 to 32768 [ 1140.285438][T28539] XFS: ikeep mount option is deprecated. [ 1140.314753][T28539] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1140.399433][T28539] XFS (loop4): Ending clean mount [ 1140.412788][T28539] XFS (loop4): Quotacheck needed: Please wait. [ 1140.463307][T28539] XFS (loop4): Quotacheck: Done. [ 1140.674381][T27277] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1140.722376][T28544] loop1: detected capacity change from 0 to 40427 [ 1140.775188][T28544] F2FS-fs (loop1): build fault injection attr: rate: 691, type: 0x7ffff [ 1140.799308][T28544] F2FS-fs (loop1): Image doesn't support compression [ 1140.872563][T28544] F2FS-fs (loop1): invalid crc value [ 1140.893464][T28544] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1141.085510][T28544] F2FS-fs (loop1): Start checkpoint disabled! [ 1141.097669][T28544] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1141.539052][T28597] netlink: 144 bytes leftover after parsing attributes in process `syz.5.9844'. [ 1142.547716][T28643] netlink: 'syz.1.9857': attribute type 3 has an invalid length. [ 1142.961921][T28664] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1143.392479][T28687] kAFS: unable to lookup cell '' [ 1143.570350][ T6458] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1143.585980][T28648] loop4: detected capacity change from 0 to 32768 [ 1143.603510][T28699] vlan0: entered promiscuous mode [ 1143.676349][T28648] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1143.776816][T28648] XFS (loop4): Ending clean mount [ 1143.817166][T28648] XFS (loop4): Quotacheck needed: Please wait. [ 1143.827995][ T6458] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=26.50 [ 1143.867964][ T6458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.916665][ T6458] usb 2-1: Product: syz [ 1143.932190][ T6458] usb 2-1: Manufacturer: syz [ 1143.966230][ T6458] usb 2-1: SerialNumber: syz [ 1143.977428][T28724] loop5: detected capacity change from 0 to 512 [ 1143.989046][T28724] EXT4-fs: Ignoring removed bh option [ 1143.989424][T28648] XFS (loop4): Quotacheck: Done. [ 1144.020238][ T6458] usb 2-1: config 0 descriptor?? [ 1144.030559][T28724] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1144.034128][ T6458] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 1144.039617][T28724] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 1144.091003][T28724] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 1144.094006][ T6458] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 1144.118709][ T6458] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 1144.157096][T28724] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1144.177506][T28724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1144.281338][ T6458] usb 2-1: USB disconnect, device number 10 [ 1144.281641][T28724] EXT4-fs error (device loop5): ext4_find_dest_de:2115: inode #2: block 3: comm syz.5.9874: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 1144.327586][T27277] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1144.480880][T27438] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1144.939938][T28777] loop5: detected capacity change from 0 to 164 [ 1144.952799][T28778] loop4: detected capacity change from 0 to 512 [ 1144.989317][T28778] EXT4-fs: Ignoring removed mblk_io_submit option [ 1144.996936][T28773] loop0: detected capacity change from 0 to 4096 [ 1145.058295][T28777] syz.5.9884: attempt to access beyond end of device [ 1145.058295][T28777] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 1145.072682][T28773] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1145.072709][T28773] NILFS (loop0): trying rollback from an earlier position [ 1145.091098][T28777] syz.5.9884: attempt to access beyond end of device [ 1145.091098][T28777] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 1145.108334][T28778] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 1145.133265][ T27] audit: type=1800 audit(1752693348.641:64): pid=28777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9884" name="file0" dev="loop5" ino=1862 res=0 errno=0 [ 1145.210131][T28778] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.9878: attempt to clear invalid blocks 2 len 1 [ 1145.235136][T28773] NILFS (loop0): recovery complete [ 1145.250870][T28778] EXT4-fs (loop4): Remounting filesystem read-only [ 1145.257932][T28778] EXT4-fs (loop4): 1 truncate cleaned up [ 1145.289225][T28795] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1145.327729][T28778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1145.405567][T28778] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work [ 1145.537958][T27277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.258730][T28845] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 1146.534760][T28856] loop1: detected capacity change from 0 to 2048 [ 1146.577631][T28856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1146.675859][T28820] loop4: detected capacity change from 0 to 32768 [ 1146.725003][T28868] vlan0: entered promiscuous mode [ 1146.740088][T28820] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.9890 (28820) [ 1146.853642][T28820] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1146.894807][T28820] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1146.950129][T28820] BTRFS info (device loop4): using free space tree [ 1147.045204][T28888] netlink: 'syz.5.9906': attribute type 21 has an invalid length. [ 1147.073486][T28888] netlink: 164 bytes leftover after parsing attributes in process `syz.5.9906'. [ 1147.167248][T28905] netlink: 248 bytes leftover after parsing attributes in process `syz.0.9909'. [ 1147.229590][T28820] BTRFS info (device loop4): enabling ssd optimizations [ 1147.236602][T28820] BTRFS info (device loop4): auto enabling async discard [ 1147.325168][T28915] xfrm0: entered promiscuous mode [ 1147.330249][T28915] xfrm0: entered allmulticast mode [ 1147.548446][T27277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1147.894426][T28950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9921'. [ 1148.002693][T28950] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1148.136757][T28958] loop0: detected capacity change from 0 to 256 [ 1148.227229][T28964] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1148.240581][T28966] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 1148.271513][T28964] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1148.994068][T28971] loop5: detected capacity change from 0 to 32768 [ 1149.002132][ T5774] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1149.037394][T28971] (syz.5.9925,28971,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1149.092324][T28971] (syz.5.9925,28971,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1149.209910][T28971] JBD2: Ignoring recovery information on journal [ 1149.228388][ T5774] usb 2-1: Using ep0 maxpacket: 8 [ 1149.235740][ T5774] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 1149.241586][T29017] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1149.252379][ T5774] usb 2-1: config 0 has no interface number 0 [ 1149.271015][ T5774] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 1149.281630][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.289893][ T5774] usb 2-1: Product: syz [ 1149.294218][ T5774] usb 2-1: Manufacturer: syz [ 1149.298833][ T5774] usb 2-1: SerialNumber: syz [ 1149.306111][ T5774] usb 2-1: config 0 descriptor?? [ 1149.335651][T28971] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1149.567724][ T5774] peak_usb 2-1:0.56: PEAK-System PCAN-USB X6 v134 fw v24.0.0 (2 channels) [ 1149.715833][T27438] ocfs2: Unmounting device (7,5) on (node local) [ 1149.789626][ T5774] peak_usb 2-1:0.56 can0: unable to request usb[type=2 value=5] err=-71 [ 1149.822412][ T5774] peak_usb 2-1:0.56: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 1149.967269][ T5774] peak_usb: probe of 2-1:0.56 failed with error -71 [ 1150.028411][ T5774] usb 2-1: USB disconnect, device number 11 [ 1150.100541][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1150.114167][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1150.476799][T29089] loop5: detected capacity change from 0 to 512 [ 1150.503189][T29089] EXT4-fs: Ignoring removed mblk_io_submit option [ 1150.624469][T29089] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 1150.653458][T29089] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.9947: attempt to clear invalid blocks 2 len 1 [ 1150.671085][T29089] EXT4-fs (loop5): Remounting filesystem read-only [ 1150.678305][T29089] EXT4-fs (loop5): 1 truncate cleaned up [ 1150.685680][T29089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1150.711769][T29089] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 1150.763762][T27438] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1151.129636][T29134] binder: 29132:29134 ioctl c018620c 0 returned -14 [ 1151.257020][ T6458] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 1151.296328][T29144] loop4: detected capacity change from 0 to 256 [ 1151.400999][T29144] FAT-fs (loop4): Directory bread(block 64) failed [ 1151.427595][T29144] FAT-fs (loop4): Directory bread(block 65) failed [ 1151.453187][T29144] FAT-fs (loop4): Directory bread(block 66) failed [ 1151.472911][T29144] FAT-fs (loop4): Directory bread(block 67) failed [ 1151.479767][T29144] FAT-fs (loop4): Directory bread(block 68) failed [ 1151.502798][ T6458] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 1151.510019][T29144] FAT-fs (loop4): Directory bread(block 69) failed [ 1151.526972][T29144] FAT-fs (loop4): Directory bread(block 70) failed [ 1151.528306][ T6458] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.566826][T29144] FAT-fs (loop4): Directory bread(block 71) failed [ 1151.583637][ T6458] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1151.588264][T29144] FAT-fs (loop4): Directory bread(block 72) failed [ 1151.605848][ T6458] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.623035][ T6458] usb 2-1: Product: syz [ 1151.625263][T29144] FAT-fs (loop4): Directory bread(block 73) failed [ 1151.633950][ T6458] usb 2-1: Manufacturer: syz [ 1151.633971][ T6458] usb 2-1: SerialNumber: syz [ 1151.646979][ T6458] usb 2-1: config 0 descriptor?? [ 1151.670752][ T6458] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1152.095931][ T6458] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 1152.130060][T29184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9968'. [ 1152.133380][ T6458] gspca_pac7302: probe of 2-1:0.0 failed with error -71 [ 1152.170068][ T6458] usb 2-1: USB disconnect, device number 12 [ 1152.482091][T29204] loop0: detected capacity change from 0 to 512 [ 1152.509862][T29204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1152.548499][T29204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1152.574895][T29168] loop5: detected capacity change from 0 to 32768 [ 1152.597636][T29204] ext4 filesystem being mounted at /2344/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1152.687258][T29204] [ 1152.689634][T29204] ====================================================== [ 1152.696660][T29204] WARNING: possible circular locking dependency detected [ 1152.703698][T29204] 6.6.97-syzkaller #0 Not tainted [ 1152.708826][T29204] ------------------------------------------------------ [ 1152.715853][T29204] syz.0.9971/29204 is trying to acquire lock: [ 1152.721945][T29204] ffff888069f19ae8 (&dquot->dq_lock){+.+.}-{3:3}, at: dqget+0x6fc/0xeb0 [ 1152.730318][T29204] [ 1152.730318][T29204] but task is already holding lock: [ 1152.737672][T29204] ffff88805c73c6c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1152.746635][T29204] [ 1152.746635][T29204] which lock already depends on the new lock. [ 1152.746635][T29204] [ 1152.757108][T29204] [ 1152.757108][T29204] the existing dependency chain (in reverse order) is: [ 1152.766102][T29204] [ 1152.766102][T29204] -> #5 (&ei->xattr_sem){++++}-{3:3}: [ 1152.773653][T29204] down_read+0x46/0x2e0 [ 1152.778321][T29204] ext4_setattr+0x86b/0x1c90 [ 1152.783418][T29204] notify_change+0xb0d/0xe10 [ 1152.788521][T29204] chown_common+0x3f9/0x5a0 [ 1152.793535][T29204] do_fchownat+0x168/0x270 [ 1152.798464][T29204] __x64_sys_chown+0x82/0x90 [ 1152.803564][T29204] do_syscall_64+0x55/0xb0 [ 1152.808489][T29204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1152.815065][T29204] [ 1152.815065][T29204] -> #4 (jbd2_handle){++++}-{0:0}: [ 1152.822349][T29204] start_this_handle+0x1e9d/0x20c0 [ 1152.827972][T29204] jbd2__journal_start+0x2bb/0x5b0 [ 1152.833592][T29204] jbd2_journal_start+0x2a/0x40 [ 1152.838962][T29204] ocfs2_start_trans+0x376/0x6c0 [ 1152.844406][T29204] ocfs2_modify_bh+0xe9/0x470 [ 1152.849591][T29204] ocfs2_local_read_info+0x13fd/0x1770 [ 1152.855561][T29204] dquot_load_quota_sb+0x757/0xb80 [ 1152.861179][T29204] dquot_load_quota_inode+0x2dc/0x5d0 [ 1152.867056][T29204] ocfs2_enable_quotas+0x1c7/0x440 [ 1152.872676][T29204] ocfs2_fill_super+0x3f6d/0x4d90 [ 1152.878213][T29204] mount_bdev+0x22b/0x2d0 [ 1152.883053][T29204] legacy_get_tree+0xea/0x180 [ 1152.888242][T29204] vfs_get_tree+0x8c/0x280 [ 1152.893165][T29204] do_new_mount+0x24b/0xa40 [ 1152.898175][T29204] __se_sys_mount+0x2da/0x3c0 [ 1152.903359][T29204] do_syscall_64+0x55/0xb0 [ 1152.908296][T29204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1152.914702][T29204] [ 1152.914702][T29204] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1152.923201][T29204] down_read+0x46/0x2e0 [ 1152.927863][T29204] ocfs2_start_trans+0x36a/0x6c0 [ 1152.933311][T29204] ocfs2_modify_bh+0xe9/0x470 [ 1152.938498][T29204] ocfs2_local_read_info+0x13fd/0x1770 [ 1152.944466][T29204] dquot_load_quota_sb+0x757/0xb80 [ 1152.950083][T29204] dquot_load_quota_inode+0x2dc/0x5d0 [ 1152.955961][T29204] ocfs2_enable_quotas+0x1c7/0x440 [ 1152.961584][T29204] ocfs2_fill_super+0x3f6d/0x4d90 [ 1152.967120][T29204] mount_bdev+0x22b/0x2d0 [ 1152.971981][T29204] legacy_get_tree+0xea/0x180 [ 1152.977182][T29204] vfs_get_tree+0x8c/0x280 [ 1152.982116][T29204] do_new_mount+0x24b/0xa40 [ 1152.987134][T29204] __se_sys_mount+0x2da/0x3c0 [ 1152.992324][T29204] do_syscall_64+0x55/0xb0 [ 1152.997256][T29204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.003672][T29204] [ 1153.003672][T29204] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 1153.011146][T29204] ocfs2_start_trans+0x26b/0x6c0 [ 1153.016590][T29204] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1153.022215][T29204] dqget+0x77c/0xeb0 [ 1153.026622][T29204] dquot_set_dqblk+0x2b/0xf90 [ 1153.031811][T29204] quota_setquota+0x4b0/0x530 [ 1153.036994][T29204] __se_sys_quotactl+0x27b/0x950 [ 1153.042438][T29204] do_syscall_64+0x55/0xb0 [ 1153.047369][T29204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.053771][T29204] [ 1153.053771][T29204] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1153.062619][T29204] down_write+0x97/0x1f0 [ 1153.067373][T29204] ocfs2_create_local_dquot+0x1a4/0x1790 [ 1153.073516][T29204] ocfs2_acquire_dquot+0x7cf/0xaf0 [ 1153.079138][T29204] dqget+0x77c/0xeb0 [ 1153.083543][T29204] dquot_set_dqblk+0x2b/0xf90 [ 1153.088728][T29204] quota_setquota+0x4b0/0x530 [ 1153.093917][T29204] __se_sys_quotactl+0x27b/0x950 [ 1153.099365][T29204] do_syscall_64+0x55/0xb0 [ 1153.104293][T29204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.110708][T29204] [ 1153.110708][T29204] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1153.118342][T29204] __lock_acquire+0x2ddb/0x7c80 [ 1153.123704][T29204] lock_acquire+0x197/0x410 [ 1153.128728][T29204] __mutex_lock+0x129/0xcc0 [ 1153.133742][T29204] dqget+0x6fc/0xeb0 [ 1153.138153][T29204] dquot_transfer+0x2f9/0x6d0 [ 1153.143334][T29204] ext4_setattr+0x87d/0x1c90 [ 1153.148430][T29204] notify_change+0xb0d/0xe10 [ 1153.153560][T29204] chown_common+0x3f9/0x5a0 [ 1153.158578][T29204] do_fchownat+0x168/0x270 [ 1153.163508][T29204] __x64_sys_lchown+0x85/0x90 [ 1153.168710][T29204] do_syscall_64+0x55/0xb0 [ 1153.173639][T29204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.180044][T29204] [ 1153.180044][T29204] other info that might help us debug this: [ 1153.180044][T29204] [ 1153.190253][T29204] Chain exists of: [ 1153.190253][T29204] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 1153.190253][T29204] [ 1153.202844][T29204] Possible unsafe locking scenario: [ 1153.202844][T29204] [ 1153.210274][T29204] CPU0 CPU1 [ 1153.215624][T29204] ---- ---- [ 1153.220975][T29204] rlock(&ei->xattr_sem); [ 1153.225379][T29204] lock(jbd2_handle); [ 1153.231950][T29204] lock(&ei->xattr_sem); [ 1153.238784][T29204] lock(&dquot->dq_lock); [ 1153.243184][T29204] [ 1153.243184][T29204] *** DEADLOCK *** [ 1153.243184][T29204] [ 1153.251308][T29204] 3 locks held by syz.0.9971/29204: [ 1153.256491][T29204] #0: ffff88805b14c418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1153.265621][T29204] #1: ffff88805c73ca10 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: chown_common+0x313/0x5a0 [ 1153.275971][T29204] #2: ffff88805c73c6c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1153.285357][T29204] [ 1153.285357][T29204] stack backtrace: [ 1153.291227][T29204] CPU: 0 PID: 29204 Comm: syz.0.9971 Not tainted 6.6.97-syzkaller #0 [ 1153.299275][T29204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1153.309317][T29204] Call Trace: [ 1153.312587][T29204] [ 1153.315509][T29204] dump_stack_lvl+0x16c/0x230 [ 1153.320178][T29204] ? load_image+0x3b0/0x3b0 [ 1153.324672][T29204] ? show_regs_print_info+0x20/0x20 [ 1153.329859][T29204] ? print_circular_bug+0x12b/0x1a0 [ 1153.335047][T29204] check_noncircular+0x2bd/0x3c0 [ 1153.339974][T29204] ? look_up_lock_class+0x75/0x140 [ 1153.345070][T29204] ? print_deadlock_bug+0x5d0/0x5d0 [ 1153.350271][T29204] ? lockdep_lock+0xe0/0x220 [ 1153.354869][T29204] ? _find_first_zero_bit+0xd3/0x100 [ 1153.360154][T29204] __lock_acquire+0x2ddb/0x7c80 [ 1153.365010][T29204] ? mark_lock+0x94/0x320 [ 1153.369424][T29204] ? verify_lock_unused+0x140/0x140 [ 1153.374616][T29204] ? __lock_acquire+0x1334/0x7c80 [ 1153.379646][T29204] lock_acquire+0x197/0x410 [ 1153.384138][T29204] ? dqget+0x6fc/0xeb0 [ 1153.388198][T29204] ? __might_sleep+0xe0/0xe0 [ 1153.392777][T29204] ? read_lock_is_recursive+0x20/0x20 [ 1153.398136][T29204] ? mark_lock+0x94/0x320 [ 1153.402460][T29204] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1153.408429][T29204] __mutex_lock+0x129/0xcc0 [ 1153.412926][T29204] ? dqget+0x6fc/0xeb0 [ 1153.416988][T29204] ? percpu_counter_add_batch+0x1d9/0x280 [ 1153.422702][T29204] ? lockdep_hardirqs_on+0x98/0x150 [ 1153.427889][T29204] ? percpu_counter_add_batch+0x22b/0x280 [ 1153.433602][T29204] ? dqget+0x6fc/0xeb0 [ 1153.437664][T29204] ? mutex_lock_nested+0x20/0x20 [ 1153.442595][T29204] ? percpu_counter_set+0x1a0/0x1a0 [ 1153.447790][T29204] ? make_kuid+0x640/0x640 [ 1153.452209][T29204] ? do_raw_spin_unlock+0x121/0x230 [ 1153.457398][T29204] dqget+0x6fc/0xeb0 [ 1153.461288][T29204] dquot_transfer+0x2f9/0x6d0 [ 1153.465953][T29204] ? __dquot_transfer+0x22f0/0x22f0 [ 1153.471138][T29204] ? down_read+0x1ac/0x2e0 [ 1153.475543][T29204] ext4_setattr+0x87d/0x1c90 [ 1153.480123][T29204] ? evm_inode_setattr+0x94/0x6a0 [ 1153.485133][T29204] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1153.490325][T29204] ? try_break_deleg+0x79/0x120 [ 1153.495164][T29204] ? ext4_write_inode+0x550/0x550 [ 1153.500175][T29204] notify_change+0xb0d/0xe10 [ 1153.504760][T29204] chown_common+0x3f9/0x5a0 [ 1153.509256][T29204] ? __ia32_sys_chmod+0x70/0x70 [ 1153.514099][T29204] ? rcu_read_lock_any_held+0xb4/0x120 [ 1153.519544][T29204] ? __mnt_want_write+0x223/0x2a0 [ 1153.524555][T29204] do_fchownat+0x168/0x270 [ 1153.528962][T29204] ? chown_common+0x5a0/0x5a0 [ 1153.533637][T29204] __x64_sys_lchown+0x85/0x90 [ 1153.538306][T29204] do_syscall_64+0x55/0xb0 [ 1153.542714][T29204] ? clear_bhb_loop+0x40/0x90 [ 1153.547380][T29204] ? clear_bhb_loop+0x40/0x90 [ 1153.552046][T29204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1153.557930][T29204] RIP: 0033:0x7f2da1b8e929 [ 1153.562338][T29204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.581931][T29204] RSP: 002b:00007f2da2a00038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1153.590332][T29204] RAX: ffffffffffffffda RBX: 00007f2da1db5fa0 RCX: 00007f2da1b8e929 [ 1153.598291][T29204] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000200000000000 [ 1153.606250][T29204] RBP: 00007f2da1c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1153.614205][T29204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.622160][T29204] R13: 0000000000000000 R14: 00007f2da1db5fa0 R15: 00007fff28772408 [ 1153.630124][T29204] [ 1153.740546][ T6573] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1161.039196][ T6414] kworker/dying (6414) used greatest stack depth: 19344 bytes left