last executing test programs: 2m11.833665384s ago: executing program 3 (id=3506): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x10}}], 0x28}, 0x8814) 2m11.606480637s ago: executing program 3 (id=3508): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x2}, 0x8) 2m11.339409321s ago: executing program 3 (id=3510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000100)}, 0x20) 2m11.204625013s ago: executing program 3 (id=3514): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x5, 0x6235, &(0x7f00000004c0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m9.814731305s ago: executing program 3 (id=3525): chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 2m8.709479052s ago: executing program 3 (id=3533): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 2m8.380313497s ago: executing program 32 (id=3533): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) 2m1.333462746s ago: executing program 1 (id=3592): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0xffffffffffffffe7, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m58.714049237s ago: executing program 1 (id=3601): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000300)={'tunl0\x00', 0x0, 0x700, 0x80, 0x8, 0x1, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x68, 0x0, 0x6, 0x2f, 0x0, @empty, @multicast1}}}}) 1m58.391811762s ago: executing program 1 (id=3604): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') getdents(r0, &(0x7f0000000000)=""/243, 0xf3) 1m58.064971217s ago: executing program 1 (id=3608): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{@nodecompose}, {@nobarrier}, {@nodecompose}, {@force}, {@nobarrier}, {@type={'type', 0x3d, "aff0aae8"}}, {@nls={'nls', 0x3d, 'iso8859-9'}}]}, 0x44, 0x6ff, &(0x7f0000000500)="$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") mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='tracefs\x00', 0x800, 0x0) 1m57.676465294s ago: executing program 1 (id=3610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 1m57.180412631s ago: executing program 1 (id=3613): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) 1m56.632828309s ago: executing program 33 (id=3613): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="180000003c000bab956cb26f8c7d94f90324fc602f000000", 0x18}], 0x1}, 0x40) 2.725597117s ago: executing program 4 (id=4776): r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2.525140421s ago: executing program 4 (id=4778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0xc01, 0x3, 0x2290, 0x1100, 0x5002004a, 0x0, 0x0, 0x0, 0x2200, 0x3c8, 0x3c8, 0x2200, 0x3c8, 0x3, 0x0, {[{{@uncond, 0x60, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x1, 0x7], 0x6, 0x2}, {0x2, [0x0, 0x6, 0x4, 0x9, 0x0, 0x89ce99baffcf6900], 0x1, 0x1}}}}, {{@uncond, 0x0, 0x10a0, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x1, './cgroup.net/syz1\x00', 0x2, {0x5}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback, [0xffffff00, 0xff000000, 0xff, 0xff0000ff], 0x4e22, 0x4c20, 0x4e24, 0x4e23, 0xc9, 0x0, 0x3b, 0x83, 0x25}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x22f8) 2.272392665s ago: executing program 4 (id=4782): setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000007504000000ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x55) 2.020663159s ago: executing program 4 (id=4785): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) nanosleep(&(0x7f0000000300)={0x0, 0x3938700}, 0x0) 1.93111288s ago: executing program 2 (id=4787): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r0) 1.725686154s ago: executing program 4 (id=4790): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00000000030000000300000000000ff90300000004000000030000000000000000000005000000000000005f"], &(0x7f0000000b80)=""/4090, 0x5e, 0x1050, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1.699335394s ago: executing program 2 (id=4791): syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC, @ANYRESHEX=0x0, @ANYRES32], 0x1, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") bpf$OBJ_GET_PROG(0x7, &(0x7f0000007600)=@generic={&(0x7f00000075c0)='./file1\x00'}, 0x18) 1.612300145s ago: executing program 0 (id=4792): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@updsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@dev}, {@in6=@private1, 0x0, 0x6c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x6008000}, 0x0) 1.544641006s ago: executing program 4 (id=4794): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) 1.439252268s ago: executing program 0 (id=4795): mkdir(&(0x7f0000000180)='./file0\x00', 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=f']) 1.417366958s ago: executing program 2 (id=4796): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)) 1.261861991s ago: executing program 2 (id=4797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.057847934s ago: executing program 2 (id=4799): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 972.314605ms ago: executing program 0 (id=4800): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e686964652c68696465006e6f726f636b2c73657373696f6e3d3078303030303030013030303030303030312c686964652c63007b6865636b3d7374726963f4416e6f636fd689c91ceb036442a5e8b65659212a2bbc4e30952aa22edafcc01c50d9545f6d70726573534d6e6f726f636b2c6368657f12106458668eb97fd25f742c696f636861727365743d69736f383835392d31332c63727566742c7065726d6928d7997c17d1c8704a54dc34229c72656374696f2c61756469742c004b32b19ac463afda9675ef356e50e2fb3d253ba1480f27afe645fded942f5957f2992896524e7731fa148037452b21c34c9918911ac37dff04099efbbf3c69c8fb9bdcda4683151bb24329a40b273da9bce1145213686d55a96caab752943c330423edc3876e0b859d57cd6d60dc5220aa1367c24de5e66343c128db17391d25b7aa35001e68df726f9ca1e0bfab6993329f0318602f3c51a28ed0858da3e3c47e95de50cbd34e68dd8517f1b4e1eeab0000000000e7b4ea43ef9e4d817aae8e0d2e71215bc0127620b046361adbde0b60bee63e91aa28d93cd8d79802966dbfacceffe6b1d302c5515d7323f7cca3f665a6964cba6cd16ae40bc68e94ac6b40bf96a55dcefd4024a5d7a848d08bdb5d8bb89b4c1968cf6ae0fd7858fa38b738c1ee6822f2cfdb30c3941199251d603d495ab6ce2ddb8e918e72b9171aaa287f2b19755bdc92109150850d5c14ec2ac32dee0122b28fcb3e88d5096d6352799c5f13f597695adfd21e644379e6a400000000000000000000000000fa41c3f14dca4ef03fed7e6466a4e2d4503979398731ee0fc7487e0b09466d841e2d8e64ed9e0d4333e6a79acee454fdb4fff932f123000000", @ANYRES16, @ANYRESOCT], 0x1, 0x67e, &(0x7f0000001600)="$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") mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0) 928.804756ms ago: executing program 5 (id=4801): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}}, 0x0) 754.348148ms ago: executing program 0 (id=4802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c0002"], 0xc0}}, 0x0) 636.47712ms ago: executing program 5 (id=4803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) 523.482132ms ago: executing program 2 (id=4804): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) 470.997953ms ago: executing program 5 (id=4805): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() 360.095085ms ago: executing program 0 (id=4806): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x60, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) 244.910317ms ago: executing program 5 (id=4807): r0 = socket(0x24, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x2400, './file0\x00'}, 0x40) 186.693407ms ago: executing program 5 (id=4808): syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80040) 64.282759ms ago: executing program 0 (id=4809): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x810) 0s ago: executing program 5 (id=4810): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x450302, 0x0, 0x10}, 0x18) kernel console output (not intermixed with test programs): 76094][T14424] [U] ÖØ›·Ü—(JÅЛ•§mÛüxz˜;œ½±ÓÿØ_¹»µÔ*3÷3…ß5¸\ƒxm³ÚU‰AK!aQ`ßË;Fð•I+ÖÐVU HåðÂmÑ j³´Æ·ÙÛZÄcøãz‹¼Â)_矡 ô‘¡&ÿö¡ÿáaÇxtoÈÝê_½ ú¼¦:¨â×%à²Pò×ÈCö²‚yö+_þü›ýû}Uïm˜ƒÆ«CÅ!KJò7Ðßg¯Ë=bè [ 499.327982][T14409] BTRFS info (device loop1): rebuilding free space tree [ 499.340661][T14424] [U] Ù½¥Fœ%ŽXAÙÂlŸ2r*gŒòVW¬Ñ$ƒüj ãA˜›F¶ß·+ø¾9Í„ViºÖ—¼kÙ¾Å1}_©âá¥%Ãr6„•( ]“¦/Ÿ¶øÅ™YܺÇÞh㤾üÑr gªÄrn/Ü«Î#!êdÙûÚ«%ÞÛËDªï-{ð$þvU‘ýT²¼ª$:mtrÔEŽC1V‰D~îÈ];[˜ËÚÐ÷sq¾¯œù(ìëe,X¦8â"ÙæðG¥dŸúµ2@T8ž¾´òƒàðÿàt8.R c+Ä@Ëꦇp‡uáp”‰¼¶C±‡Ë'å„yLÓ-Ss1E?Å7ÓO‡§ì^]¦†Âóc”â½H]§Jkr]Rkq܆øÝ£þ´OTcôÆx¶¨¾4™NË ³Ï&á­ðÚ‹ŠÓ@¶:m7ß~+”W*ÛÁ–xMüó>>—¡{q¢Ú×_²ÕLX8ÊU„ÇØî{ðZ³íø)ÿÒ7?ËrR;ÿcßr hײڣỨè1Å>)©Măâ‰Ït§²Ú(ìÇaÏ„}9·Ú¥ãJ*MÑœ¥Ä¡«'L¹£q ìDWŸòø¸=ؽ|q¬ ÏÆ™W;5æÙŽª!ñdB¸x`é§ö/÷ÂE`ƦM¢Xîâ"ä\ [ 499.414692][T14424] [U] {;Ž õ¥ÂÙ˜_ˆo2«Ñ)îo®›.2ÐW2겨ðyùÃãx_ HPϱœSªD­¦ø:]‚{Ë©ÔÝæè½ [ 499.414987][T14409] BTRFS info (device loop1): disabling free space tree [ 499.427627][T14424] [U] I,Ç>Çó¤ îÙ51ñ÷^1òN4¯oǶþ'0ý?Ö’iÙ9w.ï_.¶WŠa¼ŠVˆ±`)ÑZ¬ïæc6GiÓ¹²a»¬XL[¢›½¡Fü*ÀñO‰W)+‡Ç'\nÆ[K@ÑëÄü2çǬ–®¡p"^`Á‰í øß [ 499.450857][T14424] [U] 22½“Æ©Ðû©x?0;3u± [ 499.455225][T14424] [U] ÞœÕæósObx 8”Wˆ4á‘(ð~/§¿íKÇUžãÔ–oQËe+·G®-yµgY_•>v¢ÜÈë—3.hÁÓ™]Í„²2‘”)™DË, ‘Ä þD~×d©£¡+Ãw; A\˜FPÉþȘ|$ºø)KØI³éÐÉ¿kñYT^RÍüù癵“ËA=±#–Üœ ÝíßËae©tå1·Îݯ4K¯.e"RÚS|ðŸÀsÖ’Á:•ù>p ™…rÐ"z‰ú­ûúé#P!˜KY"›}ÃÆF¿N84ü³ƒÅhÞ±£o•Èsߙ̫%DlwÙmæ²Ç [ 499.481116][T14409] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 499.499769][T14409] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 499.517802][T14424] [U] [ª['xn€'²÷ á¿Ü,mr¦«/žšœâ1D=!DŽx91Bùwç»R—lf…ƒÆKì¤Zõê# `ì‘ lØ›§Ëœ»×b~åmÒÔÖ [ 499.534668][T14424] [U] ™LÖ>ñd+ˆd¯§—®Ì"5Žêh3<ª¨ÅiR=F^”fnõóÜÀ‰¿û­vÛ÷œDÁOIOÚ:Uö>ÖYâ [ 499.543481][T14424] [U] 'B—6vý20³ä·çž¥·×Œï"t8Ñ{9ÆFW]ôÊäì© [ 499.568307][T14424] [U] ù72þ‰ïÂÃuþC6™îüÔÏ„I]8cª£tÛ¨QSkYÞîIÒÀâ¹ ¿|V'ÛTV/ùÅg•$[â 9kh`ú"ü‘úõ}€ñ[^=ˆú0á]½ã%ÆÌ‚T“Šž¹ØFì_vö4C¸òÅ [ 499.600751][T14424] [U] ¹ ec [ 499.603947][T14424] [U] —”|‚Êì<äî:^ü3$7nK~Ø-™@÷¦?Ÿ–/mtl·Û¾©Iˆwè¬@g~tØ{êÜPß+Æ$ªjp|µ ŽçIÛRiópmð õ·YÓ ú”8ìtÉÐÞVžÙÿÆë,îlâ,Õ [ 499.727414][T14423] [U] ˆKÌúÛõ‰)0ÄÄÝ~ü³ÊªÁiP'ífóòœzÚÞr¬™ÿ @BÓ]Â5ÝÊ{­©Ê¼ô'à8åÆ¥F‡¹UTqUdÇ©¤K;7íª0c[„ãy–¼ÈYC¦¶»Ø°mª™Lò8’T…ÍšÎ5³ýýrx™¶ðWí x¤²óoQhVi'8œ¥Î…Lµ [ 499.888936][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 500.115519][T14463] netlink: 'syz.3.3472': attribute type 6 has an invalid length. [ 500.138663][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3472'. [ 500.277884][T14465] loop1: detected capacity change from 0 to 1024 [ 500.352915][T14461] loop2: detected capacity change from 0 to 4096 [ 500.359105][T14465] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 500.650275][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.266764][T14494] fuse: Bad value for 'fd' [ 501.429582][T14498] loop2: detected capacity change from 0 to 1764 [ 501.465381][T14500] (null): rxe_set_mtu: Set mtu to 4096 [ 501.482942][T14500] lo speed is unknown, defaulting to 1000 [ 501.505960][T14500] lo speed is unknown, defaulting to 1000 [ 501.527147][T14500] lo speed is unknown, defaulting to 1000 [ 501.645183][T14504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3490'. [ 501.802367][T14508] loop3: detected capacity change from 0 to 512 [ 501.829348][T14510] netlink: 'syz.1.3493': attribute type 4 has an invalid length. [ 501.851276][T14510] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3493'. [ 501.863760][T14508] EXT4-fs (loop3): orphan cleanup on readonly fs [ 501.884492][T14508] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.3492: bad orphan inode 13 [ 501.958675][T14508] ext4_test_bit(bit=12, block=18) = 1 [ 501.977343][ T5820] lo speed is unknown, defaulting to 1000 [ 501.984851][T14500] infiniband sz1: set active [ 501.990391][T14500] infiniband sz1: added lo [ 501.995091][T14508] is_bad_inode(inode)=0 [ 502.007679][T14508] NEXT_ORPHAN(inode)=2130706432 [ 502.012796][T14508] max_ino=32 [ 502.057790][T14508] i_nlink=1 [ 502.062815][T14508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 502.208620][T14500] RDS/IB: sz1: added [ 502.210893][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3495'. [ 502.214008][T14500] smc: adding ib device sz1 with port count 1 [ 502.256737][T14500] smc: ib device sz1 port 1 has pnetid [ 502.268824][ T786] lo speed is unknown, defaulting to 1000 [ 502.270220][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.286614][T14500] lo speed is unknown, defaulting to 1000 [ 502.791601][T14500] lo speed is unknown, defaulting to 1000 [ 502.964075][T14534] loop2: detected capacity change from 0 to 512 [ 503.016147][T14534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 503.070945][T14534] EXT4-fs (loop2): 1 truncate cleaned up [ 503.104279][T14534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 503.140475][T14500] lo speed is unknown, defaulting to 1000 [ 503.299537][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.361399][T14520] loop1: detected capacity change from 0 to 32768 [ 503.450196][T14520] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 503.517349][T14500] lo speed is unknown, defaulting to 1000 [ 503.605181][T14520] XFS (loop1): Ending clean mount [ 503.808151][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 504.123625][T14558] loop0: detected capacity change from 0 to 4096 [ 504.411925][T14566] loop1: detected capacity change from 0 to 256 [ 504.465442][T14566] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 505.120324][T14561] loop3: detected capacity change from 0 to 32768 [ 505.233764][ T5785] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 505.289189][ T5771] non-latin1 character 0x3ff found in JFS file name [ 505.308865][ T5771] mount with iocharset=utf8 to access [ 505.364733][ T5771] read_mapping_page failed! [ 505.369685][ T5771] ERROR: (device loop3): txCommit: [ 505.369685][ T5771] [ 505.400449][ T5771] ERROR: (device loop3): remounting filesystem as read-only [ 505.409669][T14583] loop1: detected capacity change from 0 to 4096 [ 505.447738][ T5785] usb 1-1: Using ep0 maxpacket: 16 [ 505.476886][ T5785] usb 1-1: config 254 has an invalid interface number: 63 but max is 0 [ 505.518860][ T5785] usb 1-1: config 254 has no interface number 0 [ 505.531206][ T5785] usb 1-1: config 254 interface 63 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 505.552409][ T5785] usb 1-1: config 254 interface 63 has no altsetting 0 [ 505.573936][ T5785] usb 1-1: New USB device found, idVendor=0408, idProduct=ea04, bcdDevice=96.79 [ 505.587550][ T5785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.628842][ T5785] usb 1-1: Product: syz [ 505.644256][ T5785] usb 1-1: Manufacturer: syz [ 505.648931][ T5785] usb 1-1: SerialNumber: syz [ 505.672234][T14577] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 505.924414][ T5785] option 1-1:254.63: GSM modem (1-port) converter detected [ 505.963808][ T5785] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 506.002952][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.004510][ T5785] usb 1-1: USB disconnect, device number 40 [ 506.033739][ T5785] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 506.088157][ T5785] option 1-1:254.63: device disconnected [ 506.263584][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.412745][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.856869][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.102836][T14593] loop1: detected capacity change from 0 to 32768 [ 507.295281][T14610] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3538'. [ 507.352033][T14611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3539'. [ 507.627625][T14618] (null): rxe_set_mtu: Set mtu to 1024 [ 507.835931][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.847867][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.859722][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.879215][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.890470][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 507.898471][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 507.915146][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 507.926848][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 507.934950][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 507.948667][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 507.961865][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 507.971593][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.430576][T14623] lo speed is unknown, defaulting to 1000 [ 508.834654][T14650] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3550' sets config #0 [ 508.903242][T14618] infiniband syz!: set active [ 508.908114][T14618] infiniband syz!: added team_slave_0 [ 508.929831][T14618] syz!: rxe_create_cq: returned err = -12 [ 508.936656][T14618] infiniband syz!: Couldn't create ib_mad CQ [ 508.943018][T14618] infiniband syz!: Couldn't open port 1 [ 508.973638][T14618] RDS/IB: syz!: added [ 508.978006][T14618] smc: adding ib device syz! with port count 1 [ 508.984231][T14618] smc: ib device syz! port 1 has pnetid [ 509.180791][T14658] loop1: detected capacity change from 0 to 128 [ 509.261621][T14658] FAT-fs (loop1): Directory bread(block 32) failed [ 509.283728][T14658] FAT-fs (loop1): Directory bread(block 33) failed [ 509.297761][T14658] FAT-fs (loop1): Directory bread(block 34) failed [ 509.318915][T14658] FAT-fs (loop1): Directory bread(block 35) failed [ 509.340927][T14658] FAT-fs (loop1): Directory bread(block 36) failed [ 509.347627][T14658] FAT-fs (loop1): Directory bread(block 37) failed [ 509.381769][T14658] FAT-fs (loop1): Directory bread(block 38) failed [ 509.391378][T14658] FAT-fs (loop1): Directory bread(block 39) failed [ 509.401503][T14660] loop2: detected capacity change from 0 to 1024 [ 509.428446][T14658] FAT-fs (loop1): Directory bread(block 40) failed [ 509.488220][T14658] FAT-fs (loop1): Directory bread(block 41) failed [ 509.652342][ T2947] hfsplus: b-tree write err: -5, ino 4 [ 509.861913][T14672] loop2: detected capacity change from 0 to 16 [ 509.941488][T14672] erofs: (device loop2): mounted with root inode @ nid 36. [ 510.153415][ T5774] Bluetooth: hci0: command tx timeout [ 510.403319][T14623] chnl_net:caif_netlink_parms(): no params data found [ 510.853553][T14623] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.870879][T14623] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.878246][T14623] bridge_slave_0: entered allmulticast mode [ 510.887186][T14623] bridge_slave_0: entered promiscuous mode [ 510.906737][T14623] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.924113][T14623] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.941091][T14623] bridge_slave_1: entered allmulticast mode [ 510.989132][T14623] bridge_slave_1: entered promiscuous mode [ 511.117373][T14623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.183553][T14623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.407555][T14623] team0: Port device team_slave_0 added [ 511.433664][T14623] team0: Port device team_slave_1 added [ 511.586896][T14623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.618972][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.639628][T14721] netlink: 'syz.2.3570': attribute type 1 has an invalid length. [ 511.683402][T14721] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3570'. [ 511.714306][T14623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.748377][T14623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.755394][T14623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.798689][T14623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.015156][T14623] hsr_slave_0: entered promiscuous mode [ 512.033185][T14623] hsr_slave_1: entered promiscuous mode [ 512.057119][T14623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 512.077287][T14623] Cannot create hsr debugfs directory [ 512.387943][ T5774] Bluetooth: hci0: command tx timeout [ 513.188078][T14623] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.291196][T14623] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.337030][T14623] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.365230][ T28] audit: type=1326 audit(1750248680.780:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.1.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4602f8e929 code=0x7ffc0000 [ 513.408100][T14623] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.422189][T14766] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 513.441628][ T28] audit: type=1326 audit(1750248680.808:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.1.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4602f8e929 code=0x7ffc0000 [ 513.544075][ T28] audit: type=1326 audit(1750248680.808:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.1.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f4602f8e929 code=0x7ffc0000 [ 513.650989][ T28] audit: type=1326 audit(1750248680.808:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.1.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4602f8e929 code=0x7ffc0000 [ 513.739012][ T28] audit: type=1326 audit(1750248680.808:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14765 comm="syz.1.3588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4602f8e929 code=0x7ffc0000 [ 513.777641][ T58] hsr_slave_0: left promiscuous mode [ 513.809723][ T28] audit: type=1326 audit(1750248681.117:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 513.835868][ T58] hsr_slave_1: left promiscuous mode [ 513.862147][ T28] audit: type=1326 audit(1750248681.117:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 513.891378][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.903710][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.929234][ T28] audit: type=1326 audit(1750248681.136:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 513.954264][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.968890][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.981796][ T58] bridge_slave_1: left allmulticast mode [ 513.987518][ T58] bridge_slave_1: left promiscuous mode [ 514.005372][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.026285][ T28] audit: type=1326 audit(1750248681.136:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 514.064050][ T58] bridge_slave_0: left allmulticast mode [ 514.071549][ T58] bridge_slave_0: left promiscuous mode [ 514.101284][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.117644][ T28] audit: type=1326 audit(1750248681.136:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14775 comm="syz.0.3591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 514.209524][ T58] veth1_macvtap: left promiscuous mode [ 514.218472][ T58] veth0_macvtap: left promiscuous mode [ 514.244548][ T58] veth1_vlan: left promiscuous mode [ 514.252869][ T58] veth0_vlan: left promiscuous mode [ 514.317629][T14789] loop0: detected capacity change from 0 to 256 [ 514.383350][T14789] FAT-fs (loop0): Directory bread(block 64) failed [ 514.397651][T14789] FAT-fs (loop0): Directory bread(block 65) failed [ 514.414162][T14789] FAT-fs (loop0): Directory bread(block 66) failed [ 514.443085][T14789] FAT-fs (loop0): Directory bread(block 67) failed [ 514.459967][T14789] FAT-fs (loop0): Directory bread(block 68) failed [ 514.483134][T14789] FAT-fs (loop0): Directory bread(block 69) failed [ 514.501317][T14789] FAT-fs (loop0): Directory bread(block 70) failed [ 514.517877][T14789] FAT-fs (loop0): Directory bread(block 71) failed [ 514.534991][T14789] FAT-fs (loop0): Directory bread(block 72) failed [ 514.542940][T14789] FAT-fs (loop0): Directory bread(block 73) failed [ 514.607352][ T5774] Bluetooth: hci0: command tx timeout [ 515.398461][ T58] team0 (unregistering): Port device team_slave_1 removed [ 515.450429][ T58] team0 (unregistering): Port device team_slave_0 removed [ 515.501860][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.557651][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.185426][ T58] bond0 (unregistering): Released all slaves [ 516.263985][T14780] netlink: 'syz.1.3592': attribute type 10 has an invalid length. [ 516.289048][T14780] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 516.551962][T14623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.662180][T14623] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.714168][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.721427][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.778302][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.786751][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.826243][ T5774] Bluetooth: hci0: command tx timeout [ 517.204424][T14824] loop1: detected capacity change from 0 to 1024 [ 517.381454][T14825] loop0: detected capacity change from 0 to 4096 [ 517.409432][T14825] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 517.418016][ T5773] hfsplus: bad catalog entry type [ 517.813195][T14623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.831938][ T58] hfsplus: b-tree write err: -5, ino 4 [ 517.969805][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3612'. [ 518.003924][T14841] veth1_macvtap: left promiscuous mode [ 518.243974][ T1079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.274675][ T1079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 518.468447][ T1079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.505784][ T1079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 518.783916][ T1079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.816718][ T1079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.042167][ T1079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.071771][ T1079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 519.118080][T14623] veth0_vlan: entered promiscuous mode [ 519.135601][T14865] netlink: 'syz.2.3620': attribute type 5 has an invalid length. [ 519.151399][T14865] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3620'. [ 519.279356][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 519.300066][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 519.321778][T14873] AppArmor: change_hat: Invalid input '0' [ 519.329219][T14623] veth1_vlan: entered promiscuous mode [ 519.342294][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 519.394325][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 519.414397][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 519.425583][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.542580][T14869] lo speed is unknown, defaulting to 1000 [ 519.771565][T14623] veth0_macvtap: entered promiscuous mode [ 519.814021][T14623] veth1_macvtap: entered promiscuous mode [ 519.917815][T14623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.947570][T14623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.976478][T14623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.034617][T14623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.068527][T14623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.322208][T14623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.343953][T14623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.363803][T14902] loop2: detected capacity change from 0 to 64 [ 520.383883][T14623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.398825][T14623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.428551][T14623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.594249][T14623] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.623146][T14623] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.632185][T14623] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.641629][T14623] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.424567][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.432542][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.701267][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.709583][ T5786] Bluetooth: hci2: command tx timeout [ 521.720107][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.211900][ T1079] bond0: (slave wlan1): Releasing backup interface [ 522.337925][T14953] loop2: detected capacity change from 0 to 512 [ 522.472315][T14953] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3648: invalid indirect mapped block 256 (level 2) [ 522.544288][T14953] EXT4-fs (loop2): 2 truncates cleaned up [ 522.557573][T14869] chnl_net:caif_netlink_parms(): no params data found [ 522.577754][T14950] loop4: detected capacity change from 0 to 8192 [ 522.610793][T14953] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.698771][T14950] loop4: p3 p4 < > [ 522.742351][T14950] loop4: p3 size 33554432 extends beyond EOD, truncated [ 523.071405][ T8] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 523.192413][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 523.208050][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 523.284108][ T8] usb 3-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x98, skipping [ 523.328949][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 47025, setting to 1024 [ 523.379468][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 523.412111][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 523.423515][T14869] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.454959][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.462769][T14869] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.492949][T14869] bridge_slave_0: entered allmulticast mode [ 523.505375][T14869] bridge_slave_0: entered promiscuous mode [ 523.516623][T14953] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.562012][T14869] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.570659][T14948] loop0: detected capacity change from 0 to 40427 [ 523.572251][T14869] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.580138][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 523.585625][T14869] bridge_slave_1: entered allmulticast mode [ 523.602526][T14869] bridge_slave_1: entered promiscuous mode [ 523.608889][ T8] usb 3-1: invalid MIDI in EP 0 [ 523.637173][T14948] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 523.687914][T14948] F2FS-fs (loop0): invalid crc value [ 523.736547][T14948] F2FS-fs (loop0): Found nat_bits in checkpoint [ 523.777890][ T1079] hsr_slave_0: left promiscuous mode [ 523.791441][ T8] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 523.811425][ T1079] hsr_slave_1: left promiscuous mode [ 523.856039][ T8] usb 3-1: USB disconnect, device number 37 [ 523.927021][ T5786] Bluetooth: hci2: command tx timeout [ 523.936157][T14948] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 523.999603][T14963] loop4: detected capacity change from 0 to 32768 [ 524.012654][ T1079] veth1_macvtap: left promiscuous mode [ 524.018456][ T1079] veth0_macvtap: left promiscuous mode [ 524.056313][ T1079] veth1_vlan: left promiscuous mode [ 524.061731][ T1079] veth0_vlan: left promiscuous mode [ 524.146288][T14963] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 524.187451][T14963] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 524.384195][T14963] XFS (loop4): Ending clean mount [ 524.407825][T14963] XFS (loop4): Quotacheck needed: Please wait. [ 524.440421][T14957] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 524.549304][T14963] XFS (loop4): Quotacheck: Done. [ 524.630156][T14623] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 524.824668][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.218669][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.228111][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.152866][ T5786] Bluetooth: hci2: command tx timeout [ 526.294163][T15020] netlink: 192 bytes leftover after parsing attributes in process `syz.4.3670'. [ 527.272258][ T1079] bond0 (unregistering): Released all slaves [ 527.377513][T15001] batadv1: entered promiscuous mode [ 527.384437][T15001] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 527.556113][T15025] loop2: detected capacity change from 0 to 256 [ 527.624560][T15025] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 527.778673][T15025] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 527.821666][T15025] exFAT-fs (loop2): Filesystem has been set read-only [ 527.995234][T15022] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.004510][T15022] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.109317][T15036] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3677'. [ 528.219992][T15038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3678'. [ 528.375875][ T5786] Bluetooth: hci2: command tx timeout [ 528.807555][T15022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.898362][T15022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.213381][T15022] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.222898][T15022] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.231979][T15022] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.240881][T15022] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.339618][T14869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.374535][T14869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.464004][T15055] loop4: detected capacity change from 0 to 512 [ 529.493083][T15053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.576118][T15055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.599703][T15055] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 529.632857][T14869] team0: Port device team_slave_0 added [ 529.642920][T14869] team0: Port device team_slave_1 added [ 529.806175][T14869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.827428][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.931148][T14869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.939150][T15065] loop2: detected capacity change from 0 to 256 [ 529.984396][T14869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.024000][T14869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.054144][T14623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.107961][T14869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.265140][T15071] loop0: detected capacity change from 0 to 128 [ 530.362939][T14869] hsr_slave_0: entered promiscuous mode [ 530.374668][ T1079] IPVS: stop unused estimator thread 0... [ 530.450977][T14869] hsr_slave_1: entered promiscuous mode [ 530.474950][T14869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.525114][T14869] Cannot create hsr debugfs directory [ 530.825052][T15087] loop4: detected capacity change from 0 to 1024 [ 530.910122][T14881] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 530.936393][T15087] hfsplus: xattr searching failed [ 531.118768][T15090] loop2: detected capacity change from 0 to 1764 [ 531.125928][T14881] usb 1-1: Using ep0 maxpacket: 16 [ 531.155568][T14881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 531.205748][T14881] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 531.236552][T14881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.273633][T14881] usb 1-1: Product: syz [ 531.296587][T14881] usb 1-1: Manufacturer: syz [ 531.316733][T14881] usb 1-1: SerialNumber: syz [ 531.349470][T14881] usb 1-1: config 0 descriptor?? [ 531.403847][T15094] sp0: Synchronizing with TNC [ 531.647056][T14869] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 531.650255][ T5757] usb 1-1: USB disconnect, device number 41 [ 531.698240][T14869] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 531.761537][T14869] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 531.824290][T14869] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 531.856589][T15106] kAFS: unable to lookup cell '.,' [ 532.051123][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3704'. [ 532.134896][T14869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.188163][T14869] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.242887][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.250148][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.290883][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.298121][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.637837][T15123] loop4: detected capacity change from 0 to 256 [ 532.690929][T15123] exfat: Deprecated parameter 'namecase' [ 532.747825][T15123] exfat: Deprecated parameter 'utf8' [ 532.758674][T15127] netlink: 'syz.0.3711': attribute type 10 has an invalid length. [ 532.793862][T15123] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 532.809378][T15127] veth0_macvtap: left promiscuous mode [ 532.854543][T15127] veth0_macvtap: entered promiscuous mode [ 532.889356][T15127] team0: Device macvtap0 failed to register rx_handler [ 532.959676][T15127] veth0_macvtap: left promiscuous mode [ 533.065946][T15136] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 533.331618][T15141] loop4: detected capacity change from 0 to 2048 [ 533.355470][T14869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.405648][T15141] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 533.518055][T15151] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 534.408675][T14869] veth0_vlan: entered promiscuous mode [ 534.474399][T14869] veth1_vlan: entered promiscuous mode [ 534.587898][T14869] veth0_macvtap: entered promiscuous mode [ 534.629599][T14869] veth1_macvtap: entered promiscuous mode [ 534.702043][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.738746][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.748645][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.781324][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.805754][T14869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.844006][T15189] program syz.0.3728 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 534.885926][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.911043][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.928728][T14869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.952120][T14869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.974371][ T28] audit: type=1107 audit(1750248700.960:70): pid=15191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 534.983702][T14869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.192600][T14869] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.262596][T14869] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.301068][T14869] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.330575][T14869] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.465504][T15210] loop2: detected capacity change from 0 to 256 [ 535.550395][T15212] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 535.591975][T15210] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 535.615438][T15210] FAT-fs (loop2): Filesystem has been set read-only [ 535.698253][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.772185][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.896870][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.934981][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.370180][T15231] loop5: detected capacity change from 0 to 512 [ 536.375948][T15235] libceph: resolve '. [ 536.375948][T15235] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 536.375948][T15235] ' (ret=-3): failed [ 536.451075][T15231] EXT4-fs (loop5): orphan cleanup on readonly fs [ 536.470947][T15231] Quota error (device loop5): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 536.483094][T15230] loop0: detected capacity change from 0 to 4096 [ 536.491233][T15231] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 536.509242][T15231] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 536.518710][T15231] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.3615: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 536.557898][T15231] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3615: couldn't read orphan inode 13 (err -117) [ 536.644475][T15231] EXT4-fs (loop5): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback. [ 536.837199][T15244] binder: 15243:15244 ioctl c018620c 2000000001c0 returned -22 [ 536.858816][T15231] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.3615: inode #15: comm syz.5.3615: iget: illegal inode # [ 537.083749][T14869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0b00-0000-000000000000. [ 537.116684][T15250] loop2: detected capacity change from 0 to 128 [ 537.723325][T15237] loop4: detected capacity change from 0 to 32768 [ 537.730562][T15268] loop0: detected capacity change from 0 to 256 [ 537.776028][T15237] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 537.826762][T15237] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 537.845493][ T28] audit: type=1800 audit(1750248703.672:71): pid=15268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3755" name="file1" dev="loop0" ino=1048620 res=0 errno=0 [ 538.226362][T15276] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3757'. [ 538.261983][T14623] ocfs2: Unmounting device (7,4) on (node local) [ 538.267420][T15276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3757'. [ 538.321795][T15276] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3757'. [ 538.352900][T15276] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3757'. [ 538.414939][T15279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3758'. [ 538.460087][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3758'. [ 538.618075][T15283] loop0: detected capacity change from 0 to 64 [ 538.657040][T15262] loop2: detected capacity change from 0 to 32768 [ 538.776894][T15262] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 538.831523][T15283] Trying to free block not in datazone [ 539.037868][T15262] XFS (loop2): Ending clean mount [ 539.419360][ T5772] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 540.242823][T15334] QAT: Invalid ioctl -805268418 [ 541.014774][T15316] loop0: detected capacity change from 0 to 40427 [ 541.046953][T15316] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 541.086601][T15316] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 541.166700][T15316] F2FS-fs (loop0): invalid crc value [ 541.282640][T15316] F2FS-fs (loop0): Found nat_bits in checkpoint [ 541.497674][T15316] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 541.518190][T15316] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 542.487363][T15401] tmpfs: Bad value for 'mpol' [ 543.120728][T15419] xt_hashlimit: size too large, truncated to 1048576 [ 543.155057][T15419] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 544.325225][T15464] loop0: detected capacity change from 0 to 256 [ 544.431366][T15469] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3823'. [ 544.488818][T15464] FAT-fs (loop0): Directory bread(block 64) failed [ 544.523956][T15464] FAT-fs (loop0): Directory bread(block 65) failed [ 544.530682][T15464] FAT-fs (loop0): Directory bread(block 66) failed [ 544.575236][T15464] FAT-fs (loop0): Directory bread(block 67) failed [ 544.620248][T15464] FAT-fs (loop0): Directory bread(block 68) failed [ 544.626941][T15464] FAT-fs (loop0): Directory bread(block 69) failed [ 544.721582][T15464] FAT-fs (loop0): Directory bread(block 70) failed [ 544.733848][T15475] netlink: 'syz.4.3825': attribute type 10 has an invalid length. [ 544.748284][T15464] FAT-fs (loop0): Directory bread(block 71) failed [ 544.755013][T15464] FAT-fs (loop0): Directory bread(block 72) failed [ 544.772409][T15475] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 544.792906][T15464] FAT-fs (loop0): Directory bread(block 73) failed [ 545.236577][T15483] loop5: detected capacity change from 0 to 2048 [ 545.328679][T15483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.357829][T15491] netlink: 'syz.4.3831': attribute type 3 has an invalid length. [ 546.528432][T15533] loop4: detected capacity change from 0 to 256 [ 547.130699][T15556] netlink: 'syz.5.3856': attribute type 10 has an invalid length. [ 547.148223][T15556] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3856'. [ 547.173430][T15556] batman_adv: batadv0: Adding interface: vlan1 [ 547.197101][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 547.200461][T15556] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.240060][T15556] batman_adv: batadv0: Interface activated: vlan1 [ 547.274242][T15560] infiniband sz1: set active [ 547.314832][T15560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.373285][ T5822] lo speed is unknown, defaulting to 1000 [ 547.400787][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 547.411418][ T23] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 547.429094][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.456044][ T23] usb 5-1: config 0 has no interface number 0 [ 547.490176][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 547.509925][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.529182][ T23] usb 5-1: Product: syz [ 547.533458][ T23] usb 5-1: Manufacturer: syz [ 547.538135][ T23] usb 5-1: SerialNumber: syz [ 547.572794][ T23] usb 5-1: config 0 descriptor?? [ 547.589978][ T23] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 547.608851][ T23] usb 5-1: No valid video chain found. [ 547.783024][T15568] lo speed is unknown, defaulting to 1000 [ 547.787674][T15571] loop5: detected capacity change from 0 to 256 [ 547.871497][ T5822] usb 5-1: USB disconnect, device number 2 [ 547.924019][T15571] FAT-fs (loop5): Directory bread(block 64) failed [ 547.948091][T15571] FAT-fs (loop5): Directory bread(block 65) failed [ 547.955506][T15571] FAT-fs (loop5): Directory bread(block 66) failed [ 547.987344][T15571] FAT-fs (loop5): Directory bread(block 67) failed [ 548.010000][T15571] FAT-fs (loop5): Directory bread(block 68) failed [ 548.027645][T15571] FAT-fs (loop5): Directory bread(block 69) failed [ 548.045894][T15571] FAT-fs (loop5): Directory bread(block 70) failed [ 548.074156][T15571] FAT-fs (loop5): Directory bread(block 71) failed [ 548.086935][T15571] FAT-fs (loop5): Directory bread(block 72) failed [ 548.093559][T15571] FAT-fs (loop5): Directory bread(block 73) failed [ 548.235535][T15559] loop2: detected capacity change from 0 to 32768 [ 548.342079][T15559] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 548.730069][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 549.393753][T15600] ÿÿÿÿÿÿ: renamed from vlan1 [ 549.417400][T15603] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3871'. [ 549.429848][T15603] 0ªX¹¦D: renamed from gretap0 (while UP) [ 549.465070][T15603] 0ªX¹¦D: entered allmulticast mode [ 549.475804][T15603] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 549.830964][T15607] loop4: detected capacity change from 0 to 4096 [ 549.850864][T15607] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 550.459022][ T5820] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 550.625296][T15636] loop5: detected capacity change from 0 to 16 [ 550.649360][T15636] erofs: (device loop5): mounted with root inode @ nid 36. [ 550.672783][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 550.690309][T15636] syz.5.3884: attempt to access beyond end of device [ 550.690309][T15636] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 550.710686][ T5820] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 550.742466][ T5820] usb 3-1: config 2 has no interface number 0 [ 550.768908][ T5820] usb 3-1: config 2 interface 31 has no altsetting 0 [ 550.814443][ T5820] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 550.838578][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.871200][ T5820] usb 3-1: Product: syz [ 550.875461][ T5820] usb 3-1: Manufacturer: syz [ 550.891427][ T5820] usb 3-1: SerialNumber: syz [ 551.442429][ T5820] ch9200: probe of 3-1:2.31 failed with error -22 [ 551.484734][ T5820] usb 3-1: USB disconnect, device number 38 [ 552.477419][T15688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.497725][T15688] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.579761][T15688] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.838228][T15691] loop2: detected capacity change from 0 to 8192 [ 552.844697][T15688] syz.4.3900 (15688) used greatest stack depth: 19720 bytes left [ 552.997357][T15702] loop0: detected capacity change from 0 to 2048 [ 553.060386][T15702] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 553.151967][T15702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 553.589509][T15721] loop2: detected capacity change from 0 to 1024 [ 553.669794][T15726] loop5: detected capacity change from 0 to 64 [ 553.702848][T15726] hfs: unable to locate alternate MDB [ 553.708313][T15726] hfs: continuing without an alternate MDB [ 553.797345][T15726] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 553.870775][ T1079] hfsplus: b-tree write err: -5, ino 4 [ 554.488446][T15751] loop4: detected capacity change from 0 to 1024 [ 554.597516][T15755] xt_connbytes: Forcing CT accounting to be enabled [ 554.688263][ T1079] hfsplus: b-tree write err: -5, ino 4 [ 554.845592][T15758] veth1_macvtap: left promiscuous mode [ 554.851303][T15758] macsec0: entered promiscuous mode [ 554.871991][T15758] macsec0: entered allmulticast mode [ 555.120188][T15762] loop0: detected capacity change from 0 to 8192 [ 555.346801][ T28] audit: type=1326 audit(1750248720.036:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b8b8e929 code=0x7ffc0000 [ 555.421063][ T28] audit: type=1326 audit(1750248720.055:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b8b8e929 code=0x7ffc0000 [ 555.477398][T15773] 0ªX¹¦D: left allmulticast mode [ 555.514279][ T28] audit: type=1326 audit(1750248720.064:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f15b8b8e929 code=0x7ffc0000 [ 555.615080][ T28] audit: type=1326 audit(1750248720.064:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b8b8e929 code=0x7ffc0000 [ 555.650385][T15773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.709586][ T28] audit: type=1326 audit(1750248720.064:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15769 comm="syz.4.3933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b8b8e929 code=0x7ffc0000 [ 556.436192][ T28] audit: type=1326 audit(1750248721.046:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15803 comm="syz.0.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 556.500952][ T5822] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 556.520026][ T28] audit: type=1326 audit(1750248721.074:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15803 comm="syz.0.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 556.607006][ T28] audit: type=1326 audit(1750248721.102:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15803 comm="syz.0.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 556.672101][ T28] audit: type=1326 audit(1750248721.102:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15803 comm="syz.0.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 556.750221][ T5822] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 32 [ 556.760543][ T5822] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 32 [ 556.787178][ T28] audit: type=1326 audit(1750248721.102:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15803 comm="syz.0.3948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 556.822166][ T5822] usb 5-1: config 1 interface 0 has no altsetting 0 [ 556.854751][ T5822] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 556.854787][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.854809][ T5822] usb 5-1: Product: syz [ 556.854825][ T5822] usb 5-1: Manufacturer: syz [ 556.854840][ T5822] usb 5-1: SerialNumber: syz [ 556.897094][T15786] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 556.950641][T15786] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 557.032810][T15824] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 3, id = 0 [ 557.268134][ T5822] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 557.342968][ T5822] usb 5-1: USB disconnect, device number 3 [ 557.846705][T15851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3964'. [ 558.110496][T15862] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3968'. [ 558.159040][T15862] caif0: entered promiscuous mode [ 558.164173][T15862] caif0: entered allmulticast mode [ 558.691826][T15875] loop4: detected capacity change from 0 to 4096 [ 559.139178][T15900] netlink: 400 bytes leftover after parsing attributes in process `syz.0.3980'. [ 559.281080][T15905] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 559.341997][T15905] xt_TPROXY: Can be used only with -p tcp or -p udp [ 559.730667][T15924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3989'. [ 559.932286][T15931] QAT: Device 127 not found [ 560.243136][T15943] loop0: detected capacity change from 0 to 8 [ 560.584247][T15958] netlink: zone id is out of range [ 560.968322][T15977] loop5: detected capacity change from 0 to 64 [ 561.765640][T16007] loop4: detected capacity change from 0 to 16 [ 561.805612][T16007] erofs: (device loop4): mounted with root inode @ nid 36. [ 561.846693][T16007] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 561.877101][T16007] erofs: (device loop4): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 561.901030][T16007] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 561.933960][T16007] erofs: (device loop4): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 561.972153][T16007] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 562.026529][T16007] erofs: (device loop4): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 562.045821][T16007] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 562.069327][T16007] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 562.104626][T16007] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 562.130773][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 562.130790][ T28] audit: type=1800 audit(1750248726.376:87): pid=16007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4021" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 562.515646][T16031] netlink: 'syz.4.4033': attribute type 11 has an invalid length. [ 562.633434][ T23] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 562.829368][T16044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4037'. [ 562.862841][ T23] usb 1-1: config 0 has no interfaces? [ 562.920385][ T23] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 562.949619][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.957685][ T23] usb 1-1: Product: syz [ 562.971345][ T23] usb 1-1: Manufacturer: syz [ 562.976115][ T23] usb 1-1: SerialNumber: syz [ 563.019829][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 563.114114][T16054] loop4: detected capacity change from 0 to 128 [ 563.145139][ T28] audit: type=1326 audit(1750248727.330:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 563.184369][T16054] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 563.233839][T16054] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 563.263661][ T28] audit: type=1326 audit(1750248727.330:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 563.317352][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 563.365746][ T23] r8152-cfgselector 1-1: USB disconnect, device number 42 [ 563.368509][ T28] audit: type=1326 audit(1750248727.395:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 563.505060][T16062] netlink: 'syz.5.4044': attribute type 25 has an invalid length. [ 563.512218][ T28] audit: type=1326 audit(1750248727.395:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 563.564084][ T28] audit: type=1326 audit(1750248727.395:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16055 comm="syz.5.4042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 563.994876][T16077] loop5: detected capacity change from 0 to 2048 [ 564.071309][T16077] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 564.800289][ T28] audit: type=1326 audit(1750248728.863:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16103 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 564.849296][T16107] loop0: detected capacity change from 0 to 2048 [ 564.883486][ T28] audit: type=1326 audit(1750248728.863:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16103 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 564.968533][ T28] audit: type=1326 audit(1750248728.910:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16103 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 565.014094][ T28] audit: type=1326 audit(1750248728.910:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16103 comm="syz.2.4060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 565.023180][T16107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.301662][T16107] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.4061: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 565.396447][T16107] EXT4-fs (loop0): Remounting filesystem read-only [ 565.459169][T16130] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 565.490639][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.048007][T16141] loop5: detected capacity change from 0 to 4096 [ 566.145279][T16141] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 566.467463][T16161] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 566.523017][T16161] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 566.654351][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.712700][T16156] loop0: detected capacity change from 0 to 8192 [ 566.724738][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.734249][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.743989][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.753356][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.762702][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.772227][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.786410][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.795851][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 566.805464][ C0] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 567.495764][T16188] loop0: detected capacity change from 0 to 128 [ 567.578255][T16188] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 567.591283][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 567.591304][ T28] audit: type=1326 audit(1750248731.472:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.2.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 567.665734][T16188] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 567.686295][ T28] audit: type=1326 audit(1750248731.472:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.2.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 567.730216][ T28] audit: type=1326 audit(1750248731.519:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.2.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 567.857979][ T28] audit: type=1326 audit(1750248731.519:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.2.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 567.955532][ T28] audit: type=1326 audit(1750248731.519:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16189 comm="syz.2.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 568.096359][ T28] audit: type=1326 audit(1750248731.958:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 568.178803][ T28] audit: type=1326 audit(1750248731.958:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 568.251700][ T28] audit: type=1326 audit(1750248731.996:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 568.361911][ T28] audit: type=1326 audit(1750248731.996:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 568.456597][ T28] audit: type=1326 audit(1750248731.996:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16204 comm="syz.2.4097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc30f8e929 code=0x7ffc0000 [ 569.076441][T16240] loop0: detected capacity change from 0 to 2048 [ 569.311694][T16252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4113'. [ 569.334454][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4114'. [ 569.389015][T16254] lo speed is unknown, defaulting to 1000 [ 570.205502][T16284] loop5: detected capacity change from 0 to 256 [ 570.464940][T16285] loop0: detected capacity change from 0 to 4096 [ 571.009690][T16310] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4137'. [ 571.050468][T16304] loop5: detected capacity change from 0 to 4096 [ 571.087656][T16304] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 571.253898][T16304] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 571.750922][T16330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4144'. [ 572.252664][T16347] loop4: detected capacity change from 0 to 256 [ 572.895131][T13464] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 573.093576][T16374] loop2: detected capacity change from 0 to 64 [ 573.130182][T13464] usb 1-1: Using ep0 maxpacket: 8 [ 573.148214][T13464] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 573.171147][T16379] loop5: detected capacity change from 0 to 1024 [ 573.186269][T13464] usb 1-1: config 0 has no interface number 0 [ 573.217606][T16379] EXT4-fs: inline encryption not supported [ 573.237273][T13464] usb 1-1: New USB device found, idVendor=1c04, idProduct=0015, bcdDevice=f7.bd [ 573.246497][T13464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.301616][T13464] usb 1-1: Product: syz [ 573.306057][T13464] usb 1-1: Manufacturer: syz [ 573.313403][T13464] usb 1-1: SerialNumber: syz [ 573.334442][T13464] usb 1-1: config 0 descriptor?? [ 573.358040][T16379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.604838][T13464] usb 1-1: USB disconnect, device number 43 [ 573.679615][T14869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.341361][T16414] loop4: detected capacity change from 0 to 64 [ 575.000945][T16440] syz.0.4185 uses obsolete (PF_INET,SOCK_PACKET) [ 576.507808][T16495] loop5: detected capacity change from 0 to 4096 [ 576.580297][T16495] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 576.643911][T16504] loop0: detected capacity change from 0 to 256 [ 576.716478][T16495] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 576.744911][T16495] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 576.823375][T16503] loop4: detected capacity change from 0 to 4096 [ 577.741512][T16526] loop5: detected capacity change from 0 to 256 [ 577.812605][T16492] loop2: detected capacity change from 0 to 32768 [ 577.856929][T16492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.4204 (16492) [ 577.954147][T16492] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 578.010535][T16492] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 578.050469][T16492] BTRFS info (device loop2): force clearing of disk cache [ 578.070931][T16492] BTRFS info (device loop2): metadata ratio 0 [ 578.077558][T16492] BTRFS info (device loop2): enabling ssd optimizations [ 578.077582][T16492] BTRFS info (device loop2): using spread ssd allocation scheme [ 578.077601][T16492] BTRFS info (device loop2): using free space tree [ 578.357574][T16492] BTRFS info (device loop2): auto enabling async discard [ 578.401395][T16492] BTRFS info (device loop2): rebuilding free space tree [ 578.513433][T16548] loop0: detected capacity change from 0 to 4096 [ 578.543917][T16548] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 578.637607][T16548] ntfs3: loop0: It is recommened to use chkdsk. [ 578.671177][T16563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4222'. [ 578.684469][T16558] loop5: detected capacity change from 0 to 4096 [ 578.752901][T16558] ntfs3: loop5: It is recommened to use chkdsk. [ 578.779236][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 578.796435][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 578.835591][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 578.862888][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 578.862884][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 578.925567][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 578.973981][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 579.033389][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 579.041447][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 579.114112][T16558] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 579.301080][T16569] wireguard0: entered promiscuous mode [ 579.365024][T16569] wireguard0: entered allmulticast mode [ 579.401336][T16575] loop0: detected capacity change from 0 to 256 [ 579.750046][T16579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4226'. [ 580.144020][T16594] loop2: detected capacity change from 0 to 764 [ 580.478630][T16606] netlink: 'syz.2.4237': attribute type 10 has an invalid length. [ 580.559197][T16606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.587673][T16606] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 580.693067][T16613] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4238'. [ 581.653663][T16646] netlink: 'syz.0.4250': attribute type 10 has an invalid length. [ 581.722032][T16646] team0: Port device wlan1 added [ 581.921468][T16612] loop5: detected capacity change from 0 to 32768 [ 581.939095][T16653] loop4: detected capacity change from 0 to 256 [ 581.968704][T16612] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4239 (16612) [ 581.983502][T16655] netlink: 'syz.2.4253': attribute type 7 has an invalid length. [ 582.038957][T16612] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 582.078250][T16612] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 582.087654][T16612] BTRFS info (device loop5): using free space tree [ 582.088714][T16653] FAT-fs (loop4): Directory bread(block 64) failed [ 582.124087][T16653] FAT-fs (loop4): Directory bread(block 65) failed [ 582.130991][T16653] FAT-fs (loop4): Directory bread(block 66) failed [ 582.137857][T16653] FAT-fs (loop4): Directory bread(block 67) failed [ 582.144807][T16653] FAT-fs (loop4): Directory bread(block 68) failed [ 582.152047][T16653] FAT-fs (loop4): Directory bread(block 69) failed [ 582.171094][T16653] FAT-fs (loop4): Directory bread(block 70) failed [ 582.188041][T16653] FAT-fs (loop4): Directory bread(block 71) failed [ 582.199448][T16653] FAT-fs (loop4): Directory bread(block 72) failed [ 582.210236][T16653] FAT-fs (loop4): Directory bread(block 73) failed [ 582.348631][T16612] BTRFS info (device loop5): enabling ssd optimizations [ 582.371161][T16612] BTRFS info (device loop5): auto enabling async discard [ 582.603169][T16682] loop0: detected capacity change from 0 to 2048 [ 582.616681][T14869] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 582.638779][T16682] EXT4-fs: Ignoring removed mblk_io_submit option [ 582.670400][T16682] EXT4-fs: Ignoring removed nobh option [ 582.778148][T16682] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.111379][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.192862][T16701] loop4: detected capacity change from 0 to 1764 [ 583.506808][T16705] veth3: entered promiscuous mode [ 583.536412][T16705] veth3: entered allmulticast mode [ 584.372131][T16699] loop2: detected capacity change from 0 to 32768 [ 584.434915][T16699] (syz.2.4261,16699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 584.472561][T16699] (syz.2.4261,16699,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 584.517758][T16732] xt_TCPMSS: Only works on TCP SYN packets [ 584.573051][T16699] JBD2: Ignoring recovery information on journal [ 584.702766][T16699] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 584.731077][T16739] net_ratelimit: 250 callbacks suppressed [ 584.731098][T16739] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 585.019531][T16712] loop0: detected capacity change from 0 to 32768 [ 585.059888][T16712] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.4266 (16712) [ 585.182592][T16712] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 585.225409][T16712] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 585.260062][T16712] BTRFS info (device loop0): using free space tree [ 585.379801][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 585.521861][T16712] BTRFS info (device loop0): enabling ssd optimizations [ 585.578345][T16712] BTRFS info (device loop0): auto enabling async discard [ 585.966073][ T5782] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 587.249812][T16821] netlink: 'syz.0.4297': attribute type 21 has an invalid length. [ 587.271441][T16821] netlink: 'syz.0.4297': attribute type 1 has an invalid length. [ 587.594159][T16815] loop4: detected capacity change from 0 to 8192 [ 587.694905][T16815] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 587.798546][T16815] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 587.808124][T16837] loop5: detected capacity change from 0 to 8 [ 587.850178][T16815] FAT-fs (loop4): Filesystem has been set read-only [ 587.957307][T14623] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 588.261691][T16841] loop2: detected capacity change from 0 to 8192 [ 588.317791][T16841] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 588.345586][T16841] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 588.361854][T16841] REISERFS (device loop2): using ordered data mode [ 588.368695][T16841] reiserfs: using flush barriers [ 588.392525][T16841] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 588.498683][T16841] REISERFS (device loop2): checking transaction log (loop2) [ 588.543509][T16841] REISERFS (device loop2): Using r5 hash to sort names [ 588.574982][T16841] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 588.621632][T16841] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 588.911094][T16833] loop0: detected capacity change from 0 to 32768 [ 588.991242][T16846] loop4: detected capacity change from 0 to 32768 [ 589.019533][T16846] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4306 (16846) [ 589.046625][T16833] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 589.135989][T16846] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 589.190847][T16846] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 589.208293][T16833] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #419009 [ 589.236765][T16846] BTRFS info (device loop4): using free space tree [ 589.258565][T16833] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 589.299529][T16833] OCFS2: Returning error to the calling process. [ 589.325369][T16833] (syz.0.4302,16833,1):ocfs2_search_chain:1761 ERROR: status = -5 [ 589.403985][T16833] (syz.0.4302,16833,0):ocfs2_search_chain:1871 ERROR: status = -5 [ 589.436625][T16833] (syz.0.4302,16833,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -5 [ 589.446187][T16833] (syz.0.4302,16833,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -5 [ 589.455614][T16833] (syz.0.4302,16833,1):ocfs2_claim_new_inode:2216 ERROR: status = -5 [ 589.464928][T16833] (syz.0.4302,16833,1):ocfs2_claim_new_inode:2231 ERROR: status = -5 [ 589.473503][T16833] (syz.0.4302,16833,1):ocfs2_mknod_locked:639 ERROR: status = -5 [ 589.482016][T16833] (syz.0.4302,16833,1):ocfs2_mknod:385 ERROR: status = -5 [ 589.489830][T16833] (syz.0.4302,16833,1):ocfs2_mknod:502 ERROR: status = -5 [ 589.499386][T16833] (syz.0.4302,16833,1):ocfs2_create:676 ERROR: status = -5 [ 589.511088][T16846] BTRFS info (device loop4): enabling ssd optimizations [ 589.532514][T16846] BTRFS info (device loop4): auto enabling async discard [ 589.563524][ T5782] ocfs2: Unmounting device (7,0) on (node local) [ 589.726034][T14623] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 589.742558][T16882] loop2: detected capacity change from 0 to 256 [ 589.918047][T16882] FAT-fs (loop2): Directory bread(block 64) failed [ 589.941475][T16882] FAT-fs (loop2): Directory bread(block 65) failed [ 589.948382][T16882] FAT-fs (loop2): Directory bread(block 66) failed [ 590.016100][T16882] FAT-fs (loop2): Directory bread(block 67) failed [ 590.022833][T16882] FAT-fs (loop2): Directory bread(block 68) failed [ 590.037450][T16882] FAT-fs (loop2): Directory bread(block 69) failed [ 590.044524][T16882] FAT-fs (loop2): Directory bread(block 70) failed [ 590.132348][T16882] FAT-fs (loop2): Directory bread(block 71) failed [ 590.164477][T16882] FAT-fs (loop2): Directory bread(block 72) failed [ 590.199970][T16882] FAT-fs (loop2): Directory bread(block 73) failed [ 590.217229][T16888] loop0: detected capacity change from 0 to 512 [ 590.266669][T16888] EXT4-fs: Ignoring removed mblk_io_submit option [ 590.288077][T16890] netlink: 'syz.4.4319': attribute type 30 has an invalid length. [ 590.333195][T16888] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 590.440189][T16888] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.515432][T16888] ext4 filesystem being mounted at /1052/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.558635][T16894] loop5: detected capacity change from 0 to 4096 [ 590.627065][T16898] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 590.766777][ T5782] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.919978][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 590.926852][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 590.960559][T16902] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4323'. [ 591.326516][T16911] loop0: detected capacity change from 0 to 2048 [ 591.381680][T16911] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.059816][T16939] loop0: detected capacity change from 0 to 256 [ 592.153250][T16939] FAT-fs (loop0): Directory bread(block 64) failed [ 592.172737][T16939] FAT-fs (loop0): Directory bread(block 65) failed [ 592.180700][T16939] FAT-fs (loop0): Directory bread(block 66) failed [ 592.190589][T16939] FAT-fs (loop0): Directory bread(block 67) failed [ 592.199243][T16939] FAT-fs (loop0): Directory bread(block 68) failed [ 592.206082][T16939] FAT-fs (loop0): Directory bread(block 69) failed [ 592.214748][T16939] FAT-fs (loop0): Directory bread(block 70) failed [ 592.232857][T16939] FAT-fs (loop0): Directory bread(block 71) failed [ 592.239580][T16939] FAT-fs (loop0): Directory bread(block 72) failed [ 592.276749][T16939] FAT-fs (loop0): Directory bread(block 73) failed [ 592.932708][T16962] netlink: 'syz.2.4352': attribute type 32 has an invalid length. [ 593.427029][T16979] loop2: detected capacity change from 0 to 512 [ 593.477606][T16980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.492853][T16979] EXT4-fs: Ignoring removed mblk_io_submit option [ 593.522149][T16979] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 593.533715][T16980] bond0: (slave rose0): Enslaving as an active interface with an up link [ 593.614139][T16979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.637256][T16979] ext4 filesystem being mounted at /1152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.799282][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.219412][T13464] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 594.456302][T13464] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 594.468699][T13464] usb 6-1: config 0 has no interface number 0 [ 594.485780][T13464] usb 6-1: config 0 interface 41 has no altsetting 0 [ 594.517215][T13464] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 594.549160][T13464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.581653][T13464] usb 6-1: Product: syz [ 594.586374][T13464] usb 6-1: Manufacturer: syz [ 594.591025][T13464] usb 6-1: SerialNumber: syz [ 594.629753][T13464] usb 6-1: config 0 descriptor?? [ 594.706021][T17024] netlink: 'syz.4.4373': attribute type 4 has an invalid length. [ 595.094207][T13464] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 595.139187][T13464] CoreChips: probe of 6-1:0.41 failed with error -71 [ 595.198789][T13464] usb 6-1: USB disconnect, device number 2 [ 595.315254][T17039] sz1: rxe_set_mtu: Set mtu to 4096 [ 595.331414][T17039] infiniband sz1: set active [ 595.349348][ T5757] lo speed is unknown, defaulting to 1000 [ 595.579007][T17046] loop4: detected capacity change from 0 to 256 [ 595.762958][T17046] FAT-fs (loop4): Directory bread(block 64) failed [ 595.787829][T17046] FAT-fs (loop4): Directory bread(block 65) failed [ 595.823019][T17046] FAT-fs (loop4): Directory bread(block 66) failed [ 595.829629][T17046] FAT-fs (loop4): Directory bread(block 67) failed [ 595.860797][T17046] FAT-fs (loop4): Directory bread(block 68) failed [ 595.865345][T17014] loop2: detected capacity change from 0 to 40427 [ 595.874179][T17046] FAT-fs (loop4): Directory bread(block 69) failed [ 595.889964][T17046] FAT-fs (loop4): Directory bread(block 70) failed [ 595.907972][T17046] FAT-fs (loop4): Directory bread(block 71) failed [ 595.922559][T17014] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 595.936707][T17046] FAT-fs (loop4): Directory bread(block 72) failed [ 595.947438][T17046] FAT-fs (loop4): Directory bread(block 73) failed [ 595.955597][T17014] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 596.000559][ T28] audit: type=1326 audit(2000000020.216:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 596.058335][T17014] F2FS-fs (loop2): invalid crc value [ 596.091505][ T28] audit: type=1326 audit(2000000020.244:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 596.207943][ T28] audit: type=1326 audit(2000000020.254:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 596.247057][ T28] audit: type=1326 audit(2000000020.254:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 596.313678][ T28] audit: type=1326 audit(2000000020.254:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17057 comm="syz.0.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 596.477774][T17014] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 596.485058][T17014] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 596.812200][T17080] loop4: detected capacity change from 0 to 256 [ 596.846590][T17014] fscrypt (loop2, inode 3): Error -61 getting encryption context [ 596.891193][T17080] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 597.701457][T17093] loop5: detected capacity change from 0 to 4096 [ 597.912428][T17107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4401'. [ 598.693890][T17128] loop4: detected capacity change from 0 to 256 [ 598.858779][T17128] FAT-fs (loop4): Directory bread(block 64) failed [ 598.881622][T17128] FAT-fs (loop4): Directory bread(block 65) failed [ 598.888382][T17128] FAT-fs (loop4): Directory bread(block 66) failed [ 598.935424][T17128] FAT-fs (loop4): Directory bread(block 67) failed [ 598.951566][T17128] FAT-fs (loop4): Directory bread(block 68) failed [ 598.966468][T17128] FAT-fs (loop4): Directory bread(block 69) failed [ 598.984644][T17128] FAT-fs (loop4): Directory bread(block 70) failed [ 599.042591][T17128] FAT-fs (loop4): Directory bread(block 71) failed [ 599.049396][T17128] FAT-fs (loop4): Directory bread(block 72) failed [ 599.087294][T17128] FAT-fs (loop4): Directory bread(block 73) failed [ 599.437168][T17153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4416'. [ 599.454962][T17153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4416'. [ 599.753799][T17164] loop5: detected capacity change from 0 to 256 [ 600.059863][T17176] loop5: detected capacity change from 0 to 64 [ 600.143703][T17176] hfs: keylen 94 too large [ 600.270344][ T5823] kernel write not supported for file /2334/net/ip6_tables_matches (pid: 5823 comm: kworker/0:5) [ 600.397915][ T28] audit: type=1326 audit(2000000024.331:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 600.485764][ T28] audit: type=1326 audit(2000000024.331:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 600.536474][T17191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4429'. [ 600.560008][T17193] loop4: detected capacity change from 0 to 128 [ 600.579696][ T28] audit: type=1326 audit(2000000024.331:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 600.692079][ T28] audit: type=1326 audit(2000000024.331:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 600.784173][ T28] audit: type=1326 audit(2000000024.331:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.5.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 601.223598][T13464] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 601.418938][T17216] sp0: Synchronizing with TNC [ 601.430969][T13464] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 601.453841][T13464] usb 1-1: config 0 interface 0 has no altsetting 0 [ 601.470313][T13464] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 601.501383][T13464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.519791][T13464] usb 1-1: Product: syz [ 601.531225][T13464] usb 1-1: Manufacturer: syz [ 601.548368][T13464] usb 1-1: SerialNumber: syz [ 601.570820][T13464] usb 1-1: config 0 descriptor?? [ 601.589011][T13464] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 601.602899][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 601.635144][T17206] loop4: detected capacity change from 0 to 32768 [ 601.641076][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 601.654848][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 601.678296][T17206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4436 (17206) [ 601.693538][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 601.766311][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 601.784839][T17206] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 601.795876][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 601.830048][T13464] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 601.830065][T17206] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 601.830162][T17206] BTRFS info (device loop4): force clearing of disk cache [ 601.856097][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 601.909044][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 601.916791][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 601.918512][T17206] BTRFS info (device loop4): turning on flush-on-commit [ 601.951380][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 601.990518][T13464] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 602.030765][T17206] BTRFS info (device loop4): enabling ssd optimizations [ 602.038122][T13464] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 602.049996][T13464] usb 1-1: USB disconnect, device number 44 [ 602.060635][T17206] BTRFS info (device loop4): using spread ssd allocation scheme [ 602.070668][T17206] BTRFS info (device loop4): using free space tree [ 602.105088][T13464] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 602.162337][T13464] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 602.183150][T13464] keyspan 1-1:0.0: device disconnected [ 602.218573][T17206] BTRFS info (device loop4): auto enabling async discard [ 602.270640][T17206] BTRFS info (device loop4): rebuilding free space tree [ 602.497202][T17248] binder: 17246:17248 ioctl c0306201 200000000a00 returned -14 [ 602.573893][T14623] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 602.903521][ T5820] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 603.008568][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 603.008588][ T28] audit: type=1326 audit(2000000026.771:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 603.082127][ T28] audit: type=1326 audit(2000000026.771:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 603.105655][ T5820] usb 3-1: Using ep0 maxpacket: 8 [ 603.113452][ T5820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 603.134596][ T5820] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 603.144129][ T28] audit: type=1326 audit(2000000026.799:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 603.144177][ T28] audit: type=1326 audit(2000000026.799:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 603.255246][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.264170][ T5820] usb 3-1: Product: syz [ 603.269173][ T5820] usb 3-1: Manufacturer: syz [ 603.273944][ T5820] usb 3-1: SerialNumber: syz [ 603.283445][ T5820] usb 3-1: config 0 descriptor?? [ 603.289375][ T28] audit: type=1326 audit(2000000026.799:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17257 comm="syz.0.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa36c18e929 code=0x7ffc0000 [ 603.295189][ T5820] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 603.523987][ T5820] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 603.554356][T17266] loop0: detected capacity change from 0 to 16 [ 603.556661][ T5820] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 603.606934][T17266] erofs: (device loop0): mounted with root inode @ nid 36. [ 603.742821][ T5820] usb 3-1: USB disconnect, device number 39 [ 603.882658][T17256] loop5: detected capacity change from 0 to 32768 [ 603.956971][T17256] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 604.061060][T17256] XFS (loop5): Ending clean mount [ 604.154829][ T5822] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 604.238071][T14869] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 604.365127][ T5822] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 604.365432][T17290] dummy0: entered promiscuous mode [ 604.379757][T17290] dummy0: entered allmulticast mode [ 604.397779][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.422608][ T5822] usb 1-1: Product: syz [ 604.438374][ T5822] usb 1-1: Manufacturer: syz [ 604.449528][ T5822] usb 1-1: SerialNumber: syz [ 604.484305][ T5822] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 604.516032][T13464] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 604.748551][T17300] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 604.790277][T17300] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 605.074892][T14898] usb 1-1: USB disconnect, device number 45 [ 605.799489][T17308] loop2: detected capacity change from 0 to 40427 [ 605.825886][T17308] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 605.856427][T17308] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 605.939186][T17308] F2FS-fs (loop2): Found nat_bits in checkpoint [ 605.974876][T13464] usb 1-1: Service connection timeout for: 256 [ 605.981219][T13464] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 606.026644][T13464] ath9k_htc: Failed to initialize the device [ 606.033139][T14898] usb 1-1: ath9k_htc: USB layer deinitialized [ 606.184696][T17308] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 606.218145][T17308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 606.709221][T17341] ieee802154 phy0 wpan0: encryption failed: -22 [ 606.778858][T17322] loop4: detected capacity change from 0 to 32768 [ 606.814645][T17322] JBD2: Ignoring recovery information on journal [ 606.868463][T17322] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 606.887678][T17347] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 606.917031][T17347] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 607.123462][T17353] loop2: detected capacity change from 0 to 1024 [ 607.245021][T17353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.288091][T17353] ext4 filesystem being mounted at /1175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.315524][T17353] EXT4-fs error (device loop2): ext4_free_blocks:6681: comm syz.2.4488: Freeing blocks not in datazone - block = 0, count = 16 [ 607.338710][T17353] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 607.342274][T14623] ocfs2: Unmounting device (7,4) on (node local) [ 607.431796][ T28] audit: type=1326 audit(2000000030.905:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17363 comm="syz.4.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b8b8e929 code=0x7ffc0000 [ 607.476485][ T28] audit: type=1326 audit(2000000030.951:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17363 comm="syz.4.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15b8b8e929 code=0x7ffc0000 [ 607.535508][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.539464][ T28] audit: type=1326 audit(2000000030.961:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17363 comm="syz.4.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f15b8b90847 code=0x7ffc0000 [ 607.587433][ T28] audit: type=1326 audit(2000000030.961:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17363 comm="syz.4.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f15b8b907bc code=0x7ffc0000 [ 607.613098][ T28] audit: type=1326 audit(2000000030.970:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17363 comm="syz.4.4498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f15b8b906f4 code=0x7ffc0000 [ 607.698173][T17368] loop4: detected capacity change from 0 to 256 [ 608.254948][T17388] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4510'. [ 608.581073][ T5823] usb 3-1: new low-speed USB device number 40 using dummy_hcd [ 608.776728][ T5823] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 608.785982][ T5823] usb 3-1: config 0 has no interface number 0 [ 608.794960][ T5823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 608.806497][ T5823] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 608.817550][ T5823] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 608.827475][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.851004][ T5823] usb 3-1: config 0 descriptor?? [ 608.856798][T17390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 608.873457][ T5823] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 609.041064][ T5820] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 609.114665][ T5757] usb 3-1: USB disconnect, device number 40 [ 609.241943][ T5820] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 609.258550][ T5820] usb 1-1: config 0 has no interface number 0 [ 609.266944][ T5820] usb 1-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 609.287295][ T5820] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 609.296409][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.308299][ T5820] usb 1-1: Product: syz [ 609.312529][ T5820] usb 1-1: Manufacturer: syz [ 609.317172][ T5820] usb 1-1: SerialNumber: syz [ 609.336448][ T5820] usb 1-1: config 0 descriptor?? [ 609.349396][T17404] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 609.497011][T17426] loop5: detected capacity change from 0 to 128 [ 609.533236][T17426] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 609.546876][T17426] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 609.591360][ T5820] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 609.603010][ T5820] usb 1-1: MIDIStreaming interface descriptor not found [ 609.635912][T14869] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 609.661305][ T5820] usb 1-1: USB disconnect, device number 46 [ 609.755937][ T5879] udevd[5879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 610.428573][T17451] loop2: detected capacity change from 0 to 256 [ 610.440389][T17453] loop5: detected capacity change from 0 to 512 [ 610.490350][T17453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.496306][T17451] FAT-fs (loop2): Directory bread(block 64) failed [ 610.510161][T17451] FAT-fs (loop2): Directory bread(block 65) failed [ 610.517847][T17451] FAT-fs (loop2): Directory bread(block 66) failed [ 610.524525][T17451] FAT-fs (loop2): Directory bread(block 67) failed [ 610.531445][T17451] FAT-fs (loop2): Directory bread(block 68) failed [ 610.538217][T17451] FAT-fs (loop2): Directory bread(block 69) failed [ 610.544993][T17451] FAT-fs (loop2): Directory bread(block 70) failed [ 610.551853][T17451] FAT-fs (loop2): Directory bread(block 71) failed [ 610.558855][T17453] ext4 filesystem being mounted at /222/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 610.559489][T17451] FAT-fs (loop2): Directory bread(block 72) failed [ 610.598385][T17451] FAT-fs (loop2): Directory bread(block 73) failed [ 610.693139][T14869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.719619][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 610.719636][ T28] audit: type=1800 audit(2000000033.972:147): pid=17451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4541" name="file1" dev="loop2" ino=1048643 res=0 errno=0 [ 611.213261][T17473] loop2: detected capacity change from 0 to 256 [ 611.294030][T17473] FAT-fs (loop2): Directory bread(block 64) failed [ 611.318351][T17473] FAT-fs (loop2): Directory bread(block 65) failed [ 611.346983][T17473] FAT-fs (loop2): Directory bread(block 66) failed [ 611.368015][T17473] FAT-fs (loop2): Directory bread(block 67) failed [ 611.396563][T17473] FAT-fs (loop2): Directory bread(block 68) failed [ 611.414195][T17473] FAT-fs (loop2): Directory bread(block 69) failed [ 611.427014][T17480] netlink: 'syz.0.4552': attribute type 10 has an invalid length. [ 611.428830][T17473] FAT-fs (loop2): Directory bread(block 70) failed [ 611.450068][T17473] FAT-fs (loop2): Directory bread(block 71) failed [ 611.450800][T17480] bridge0: port 3(team0) entered blocking state [ 611.456853][T17473] FAT-fs (loop2): Directory bread(block 72) failed [ 611.471749][T17473] FAT-fs (loop2): Directory bread(block 73) failed [ 611.479994][T17480] bridge0: port 3(team0) entered disabled state [ 611.490225][T17480] team0: entered allmulticast mode [ 611.495503][T17480] team_slave_0: entered allmulticast mode [ 611.502013][T17480] team_slave_1: entered allmulticast mode [ 611.508678][T17480] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 611.556729][T17480] team0: entered promiscuous mode [ 611.588513][T17480] team_slave_0: entered promiscuous mode [ 611.594520][T17480] team_slave_1: entered promiscuous mode [ 611.624488][T17480] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 611.661592][T17480] bridge0: port 3(team0) entered blocking state [ 611.668050][T17480] bridge0: port 3(team0) entered forwarding state [ 611.998555][ T5757] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 612.221651][ T5757] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 612.260466][ T5757] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 612.302849][ T5757] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 612.331456][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.370448][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4563'. [ 612.402237][ T5757] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 612.429170][T17510] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.439089][ T5757] usb 3-1: invalid MIDI out EP 0 [ 612.460847][T17510] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.482592][T17510] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.525014][T17510] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.537997][T17510] geneve2: entered promiscuous mode [ 612.561626][T17510] geneve2: entered allmulticast mode [ 612.622056][ T5757] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 612.682113][ T5757] usb 3-1: USB disconnect, device number 41 [ 613.293693][T17530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4570'. [ 613.318345][T17530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4570'. [ 613.347176][T17530] netlink: 'syz.5.4570': attribute type 3 has an invalid length. [ 613.607188][T17518] loop0: detected capacity change from 0 to 32768 [ 613.724056][T17523] loop4: detected capacity change from 0 to 40427 [ 613.763793][T17523] F2FS-fs (loop4): Invalid log blocks per segment (83886089) [ 613.776390][T17523] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 613.821057][T14898] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 613.826562][T17523] F2FS-fs (loop4): Unrecognized mount option "checkÿoint=disable" or missing value [ 614.066959][T14898] usb 3-1: Using ep0 maxpacket: 32 [ 614.075426][T14898] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 614.110054][T14898] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 614.134033][T17543] loop4: detected capacity change from 0 to 256 [ 614.152485][T14898] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 614.161543][T14898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 614.204286][T14898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 614.216612][T17543] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 614.265541][T14898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 614.291987][T14898] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 614.336781][T14898] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 614.377720][ T2947] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 614.398474][T14898] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 614.419093][T14898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.460605][T14898] usb 3-1: config 0 descriptor?? [ 614.747501][T14898] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 614.780640][T14898] usb 3-1: USB disconnect, device number 42 [ 614.802632][T14898] usblp0: removed [ 614.955465][T17549] loop4: detected capacity change from 0 to 16 [ 614.975170][T17539] loop5: detected capacity change from 0 to 32768 [ 614.993344][T17549] erofs: (device loop4): mounted with root inode @ nid 36. [ 615.026499][T17539] JBD2: Ignoring recovery information on journal [ 615.083200][T17541] loop0: detected capacity change from 0 to 32768 [ 615.149864][T17541] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 615.184117][T17539] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 615.364421][T17541] XFS (loop0): Ending clean mount [ 615.513498][T14869] ocfs2: Unmounting device (7,5) on (node local) [ 615.674262][ T5782] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 616.837915][T17571] loop5: detected capacity change from 0 to 32768 [ 616.869283][T17571] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.4585 (17571) [ 616.927793][T17571] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.980168][T17571] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 617.009411][T17571] BTRFS info (device loop5): force clearing of disk cache [ 617.027534][T17571] BTRFS info (device loop5): turning on flush-on-commit [ 617.036580][T17591] IPv6: Can't replace route, no match found [ 617.050062][T17571] BTRFS info (device loop5): enabling ssd optimizations [ 617.086307][T17571] BTRFS info (device loop5): using spread ssd allocation scheme [ 617.115798][T17571] BTRFS info (device loop5): using free space tree [ 617.258245][T17581] loop2: detected capacity change from 0 to 32768 [ 617.298890][T17581] XFS: attr2 mount option is deprecated. [ 617.346753][T17571] BTRFS info (device loop5): auto enabling async discard [ 617.397182][T17571] BTRFS info (device loop5): rebuilding free space tree [ 617.448725][T17581] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 617.513527][T17587] loop4: detected capacity change from 0 to 32768 [ 617.623010][T17587] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 617.781244][T17581] XFS (loop2): Ending clean mount [ 617.796590][T14869] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 617.822313][T17587] XFS (loop4): Ending clean mount [ 617.824320][T17581] XFS (loop2): Quotacheck needed: Please wait. [ 618.005519][ T5780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop5 scanned by udevd (5780) [ 618.086184][T17581] XFS (loop2): Quotacheck: Done. [ 618.158577][T14623] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 618.538445][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 618.634444][T17638] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4602'. [ 618.645752][T17638] 0·: renamed from hsr0 (while UP) [ 618.670370][T17638] 0·: entered allmulticast mode [ 618.686815][T17638] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 619.140772][T17646] netlink: 'syz.0.4606': attribute type 21 has an invalid length. [ 619.867374][T17670] loop4: detected capacity change from 0 to 16 [ 619.877615][T17669] loop5: detected capacity change from 0 to 256 [ 619.896508][T17670] erofs: (device loop4): mounted with root inode @ nid 36. [ 619.937001][ T28] audit: type=1800 audit(2000000042.584:148): pid=17670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4598" name="file1" dev="loop4" ino=86 res=0 errno=0 [ 620.199583][T17680] loop5: detected capacity change from 0 to 512 [ 620.221461][T17680] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 620.293588][T17680] EXT4-fs (loop5): 1 truncate cleaned up [ 620.300857][T17680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 620.787285][T17691] loop2: detected capacity change from 0 to 4096 [ 620.805415][T17691] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 620.918236][T14869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.927490][T17697] loop4: detected capacity change from 0 to 512 [ 620.982107][T17691] ntfs: volume version 3.1. [ 621.008104][T17697] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.4630: casefold flag without casefold feature [ 621.102546][T17697] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4630: couldn't read orphan inode 15 (err -117) [ 621.190520][T17697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.238816][T17691] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 621.293570][T17691] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 621.338187][T17691] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 621.347723][T17691] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 621.421839][T17691] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to map page. [ 621.437825][T17691] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5). [ 621.454392][T14623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.470668][T17691] ntfs: (device loop2): ntfs_truncate(): Cannot truncate inode 0x43, attribute type 0x80, because the conversion from resident to non-resident attribute failed with error code -5. [ 621.666487][ T5772] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 622.040102][T17717] loop2: detected capacity change from 0 to 2048 [ 622.067376][T17717] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 622.106852][T17717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 622.114586][T17703] loop0: detected capacity change from 0 to 32768 [ 622.159065][T17703] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 622.361420][ T5780] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 11 [ 622.558855][T17725] bridge0: port 3(30ªX¹¦D) entered blocking state [ 622.568833][T17725] bridge0: port 3(30ªX¹¦D) entered disabled state [ 622.577928][T17725] 0ªX¹¦D: entered allmulticast mode [ 622.610464][T17725] 0ªX¹¦D: entered promiscuous mode [ 622.630208][T17725] bridge0: port 3(30ªX¹¦D) entered blocking state [ 622.637022][T17725] bridge0: port 3(30ªX¹¦D) entered forwarding state [ 622.854824][T17711] loop4: detected capacity change from 0 to 32768 [ 622.947549][T17711] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.216877][T17711] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 623.267971][T17711] XFS (loop4): Starting recovery (logdev: internal) [ 623.354690][T17711] XFS (loop4): Ending recovery (logdev: internal) [ 623.577893][T14898] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 623.597337][T14623] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.630665][T17763] No such timeout policy "syz1" [ 623.801128][T14898] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 623.826352][T14898] usb 1-1: config 0 has no interface number 0 [ 623.837197][T14898] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 623.870541][T14898] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 623.907277][T14898] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 623.948339][T14898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.983525][T14898] usb 1-1: config 0 descriptor?? [ 623.989473][T17753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 624.030881][T14898] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 624.359912][T14898] usb 1-1: USB disconnect, device number 47 [ 624.400087][T17781] loop4: detected capacity change from 0 to 22 [ 624.419902][T17781] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 624.449028][T17781] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 624.809071][T17792] loop4: detected capacity change from 0 to 256 [ 625.027271][T17800] netlink: 'syz.2.4670': attribute type 1 has an invalid length. [ 625.458934][T17815] loop5: detected capacity change from 0 to 1024 [ 625.466935][T17815] EXT4-fs: Ignoring removed orlov option [ 625.501479][T17815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.722484][T14869] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.013395][ T28] audit: type=1326 audit(2000000048.288:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17835 comm="syz.5.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 626.041689][ T28] audit: type=1326 audit(2000000048.288:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17835 comm="syz.5.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 626.117087][ T28] audit: type=1326 audit(2000000048.307:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17835 comm="syz.5.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 626.161551][ T28] audit: type=1326 audit(2000000048.307:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17835 comm="syz.5.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 626.210829][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4688'. [ 626.242394][ T28] audit: type=1326 audit(2000000048.307:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17835 comm="syz.5.4684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff99718e929 code=0x7ffc0000 [ 626.745199][T17857] loop2: detected capacity change from 0 to 4096 [ 626.942654][T14898] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 627.027440][T17871] netlink: 'syz.5.4701': attribute type 21 has an invalid length. [ 627.145968][T14898] usb 5-1: Using ep0 maxpacket: 16 [ 627.159479][T14898] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 627.188149][T14898] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 627.205618][T14898] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 627.218716][T14898] usb 5-1: config 0 interface 0 has no altsetting 0 [ 627.230369][T14898] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 627.241979][T14898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.274116][T14898] usb 5-1: Product: syz [ 627.278547][T14898] usb 5-1: Manufacturer: syz [ 627.283186][T14898] usb 5-1: SerialNumber: syz [ 627.308654][T14898] usb 5-1: config 0 descriptor?? [ 627.314629][T17861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 627.534786][T17887] loop0: detected capacity change from 0 to 128 [ 627.579749][T17861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 627.592633][T14898] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 627.636652][T17887] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 627.687707][T17887] ext4 filesystem being mounted at /1155/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 627.778741][T17895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 627.897836][ T5782] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 627.987889][ T23] usb 5-1: USB disconnect, device number 4 [ 628.007300][ T5127] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 628.178411][T17903] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 628.207420][T17903] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 628.214798][T17903] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 628.431325][T17911] loop5: detected capacity change from 0 to 128 [ 628.460739][T17911] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 629.377155][T17939] loop0: detected capacity change from 0 to 4096 [ 629.387743][T17939] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 629.448585][T17939] ntfs: volume version 3.1. [ 629.577467][T17939] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 629.603487][T17939] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 629.655129][T17939] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 629.670126][T17939] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 629.694105][T17952] loop4: detected capacity change from 0 to 512 [ 629.738914][T17952] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 629.764321][T17952] System zones: 1-12 [ 629.789533][T17952] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.4740: Directory hole found for htree index block 0 [ 629.809844][T17952] EXT4-fs (loop4): Remounting filesystem read-only [ 629.816650][T17952] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 629.831986][T17952] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 629.913760][T17952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.133350][T14623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.726451][T17976] loop0: detected capacity change from 0 to 8 [ 631.023322][T17986] loop2: detected capacity change from 0 to 2048 [ 631.110044][T17986] Alternate GPT is invalid, using primary GPT. [ 631.118712][T17986] loop2: p2 p3 p7 [ 631.252214][ T5823] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 631.499145][ T5823] usb 6-1: Using ep0 maxpacket: 8 [ 631.538522][ T5823] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 631.557894][ T5823] usb 6-1: config 0 has no interface number 0 [ 631.579762][ T5823] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 631.610996][ T5948] udevd[5948]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 631.634405][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 631.647513][T18002] IPVS: set_ctl: invalid protocol: 286 172.20.20.170:20004 [ 631.654155][ T8217] udevd[8217]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 631.665007][ T5823] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 631.675004][ T5823] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 631.697250][ T5823] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.724928][ T5823] usb 6-1: config 0 descriptor?? [ 631.740756][ T5823] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 631.839477][T18006] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 632.001148][ T5822] usb 6-1: USB disconnect, device number 3 [ 632.053029][T18014] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4771'. [ 632.064595][T18013] loop2: detected capacity change from 0 to 16 [ 632.082399][T18013] erofs: (device loop2): mounted with root inode @ nid 36. [ 632.430754][T18019] loop2: detected capacity change from 0 to 4096 [ 632.453969][T18019] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 632.509553][T18019] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 632.754680][T18031] loop0: detected capacity change from 0 to 512 [ 632.778165][ T5772] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 632.787686][T18031] ext4: Unknown parameter 'permit_directio' [ 633.024915][T18037] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 633.508036][T18056] loop2: detected capacity change from 0 to 16 [ 633.531743][T18056] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 633.706263][T18061] ipip0: entered promiscuous mode [ 633.742362][T18061] ipip0: entered allmulticast mode [ 633.802699][T18067] binder: 18064:18067 ioctl c018620c 200000000100 returned -1 [ 633.978177][T18068] 9pnet: Could not find request transport: f [ 634.174227][T18078] loop0: detected capacity change from 0 to 164 [ 634.503833][T18082] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4802'. [ 634.534698][T18082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4802'. [ 634.544386][T18082] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4802'. [ 634.565164][T18082] netlink: 'syz.0.4802': attribute type 3 has an invalid length. [ 634.598583][T18082] netlink: 'syz.0.4802': attribute type 2 has an invalid length. [ 634.598602][T18063] loop4: detected capacity change from 0 to 32768 [ 634.608557][T18082] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4802'. [ 634.703218][T18063] (syz.4.4794,18063,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 634.743742][T18063] (syz.4.4794,18063,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 634.842536][T18063] JBD2: Ignoring recovery information on journal [ 634.993551][T18063] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 635.127825][T18063] [ 635.130260][T18063] ====================================================== [ 635.137330][T18063] WARNING: possible circular locking dependency detected [ 635.144378][T18063] 6.6.93-syzkaller #0 Not tainted [ 635.149429][T18063] ------------------------------------------------------ [ 635.156469][T18063] syz.4.4794/18063 is trying to acquire lock: [ 635.162554][T18063] ffff88805acfed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 635.176195][T18063] [ 635.176195][T18063] but task is already holding lock: [ 635.183580][T18063] ffff88805adcb1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 635.193131][T18063] [ 635.193131][T18063] which lock already depends on the new lock. [ 635.193131][T18063] [ 635.203724][T18063] [ 635.203724][T18063] the existing dependency chain (in reverse order) is: [ 635.213019][T18063] [ 635.213019][T18063] -> #5 (&oi->ip_xattr_sem){++++}-{3:3}: [ 635.220895][T18063] down_read+0x46/0x2e0 [ 635.225711][T18063] ocfs2_init_acl+0x2fa/0x720 [ 635.231004][T18063] ocfs2_mknod+0x12e5/0x20f0 [ 635.236162][T18063] ocfs2_create+0x196/0x410 [ 635.241316][T18063] path_openat+0x1277/0x3190 [ 635.246478][T18063] do_filp_open+0x1c5/0x3d0 [ 635.251548][T18063] do_sys_openat2+0x12c/0x1c0 [ 635.256796][T18063] __x64_sys_openat+0x139/0x160 [ 635.262214][T18063] do_syscall_64+0x55/0xb0 [ 635.267293][T18063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.273771][T18063] [ 635.273771][T18063] -> #4 (jbd2_handle){++++}-{0:0}: [ 635.281388][T18063] start_this_handle+0x1e9d/0x20c0 [ 635.287074][T18063] jbd2__journal_start+0x2bb/0x5b0 [ 635.292840][T18063] jbd2_journal_start+0x2a/0x40 [ 635.298267][T18063] ocfs2_start_trans+0x376/0x6c0 [ 635.304031][T18063] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 635.310328][T18063] ocfs2_dismount_volume+0x1e2/0x890 [ 635.316188][T18063] generic_shutdown_super+0x134/0x2b0 [ 635.322219][T18063] kill_block_super+0x44/0x90 [ 635.327460][T18063] deactivate_locked_super+0x97/0x100 [ 635.333578][T18063] cleanup_mnt+0x429/0x4c0 [ 635.338595][T18063] task_work_run+0x1ce/0x250 [ 635.343842][T18063] exit_to_user_mode_loop+0xe6/0x110 [ 635.349712][T18063] exit_to_user_mode_prepare+0xb1/0x140 [ 635.355841][T18063] syscall_exit_to_user_mode+0x1a/0x50 [ 635.361869][T18063] do_syscall_64+0x61/0xb0 [ 635.366860][T18063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.373365][T18063] [ 635.373365][T18063] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 635.382035][T18063] down_read+0x46/0x2e0 [ 635.386937][T18063] ocfs2_start_trans+0x36a/0x6c0 [ 635.392446][T18063] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 635.398747][T18063] ocfs2_dismount_volume+0x1e2/0x890 [ 635.404607][T18063] generic_shutdown_super+0x134/0x2b0 [ 635.410634][T18063] kill_block_super+0x44/0x90 [ 635.415883][T18063] deactivate_locked_super+0x97/0x100 [ 635.421840][T18063] cleanup_mnt+0x429/0x4c0 [ 635.426811][T18063] task_work_run+0x1ce/0x250 [ 635.432373][T18063] exit_to_user_mode_loop+0xe6/0x110 [ 635.438197][T18063] exit_to_user_mode_prepare+0xb1/0x140 [ 635.444289][T18063] syscall_exit_to_user_mode+0x1a/0x50 [ 635.450304][T18063] do_syscall_64+0x61/0xb0 [ 635.455292][T18063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.461754][T18063] [ 635.461754][T18063] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 635.469231][T18063] ocfs2_start_trans+0x26b/0x6c0 [ 635.474721][T18063] ocfs2_mknod+0xe47/0x20f0 [ 635.480087][T18063] vfs_mknod+0x32b/0x360 [ 635.484847][T18063] do_mknodat+0x37e/0x4f0 [ 635.489714][T18063] __x64_sys_mknod+0x8e/0xa0 [ 635.495531][T18063] do_syscall_64+0x55/0xb0 [ 635.500480][T18063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.506901][T18063] [ 635.506901][T18063] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 635.517617][T18063] down_write+0x97/0x1f0 [ 635.522578][T18063] ocfs2_reserve_local_alloc_bits+0x126/0x24b0 [ 635.529246][T18063] ocfs2_reserve_clusters_with_limit+0x1bf/0xba0 [ 635.536257][T18063] ocfs2_mknod+0xdee/0x20f0 [ 635.541331][T18063] vfs_mknod+0x32b/0x360 [ 635.546134][T18063] do_mknodat+0x37e/0x4f0 [ 635.551024][T18063] __x64_sys_mknod+0x8e/0xa0 [ 635.556164][T18063] do_syscall_64+0x55/0xb0 [ 635.561130][T18063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.567558][T18063] [ 635.567558][T18063] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 635.578440][T18063] __lock_acquire+0x2ddb/0x7c80 [ 635.583812][T18063] lock_acquire+0x197/0x410 [ 635.588840][T18063] down_write+0x97/0x1f0 [ 635.593596][T18063] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 635.600014][T18063] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 635.606857][T18063] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 635.613000][T18063] ocfs2_xattr_set+0xb6d/0x11f0 [ 635.618364][T18063] __vfs_setxattr+0x431/0x470 [ 635.623631][T18063] __vfs_setxattr_noperm+0x12d/0x5e0 [ 635.629512][T18063] vfs_setxattr+0x16c/0x2f0 [ 635.634533][T18063] path_setxattr+0x362/0x550 [ 635.639764][T18063] __x64_sys_setxattr+0xbb/0xd0 [ 635.645138][T18063] do_syscall_64+0x55/0xb0 [ 635.650247][T18063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 635.656665][T18063] [ 635.656665][T18063] other info that might help us debug this: [ 635.656665][T18063] [ 635.667236][T18063] Chain exists of: [ 635.667236][T18063] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem [ 635.667236][T18063] [ 635.683042][T18063] Possible unsafe locking scenario: [ 635.683042][T18063] [ 635.690857][T18063] CPU0 CPU1 [ 635.696325][T18063] ---- ---- [ 635.701707][T18063] lock(&oi->ip_xattr_sem); [ 635.706325][T18063] lock(jbd2_handle); [ 635.713018][T18063] lock(&oi->ip_xattr_sem); [ 635.720249][T18063] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 635.727541][T18063] [ 635.727541][T18063] *** DEADLOCK *** [ 635.727541][T18063] [ 635.736022][T18063] 3 locks held by syz.4.4794/18063: [ 635.741204][T18063] #0: ffff88807bf8a418 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 635.750422][T18063] #1: ffff88805adcb498 (&type->i_mutex_dir_key#24){+.+.}-{3:3}, at: vfs_setxattr+0x145/0x2f0 [ 635.760708][T18063] #2: ffff88805adcb1b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0 [ 635.770692][T18063] [ 635.770692][T18063] stack backtrace: [ 635.776601][T18063] CPU: 1 PID: 18063 Comm: syz.4.4794 Not tainted 6.6.93-syzkaller #0 [ 635.784698][T18063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.794926][T18063] Call Trace: [ 635.798334][T18063] [ 635.801287][T18063] dump_stack_lvl+0x16c/0x230 [ 635.806041][T18063] ? load_image+0x3b0/0x3b0 [ 635.810538][T18063] ? show_regs_print_info+0x20/0x20 [ 635.815818][T18063] ? print_circular_bug+0x12b/0x1a0 [ 635.821022][T18063] check_noncircular+0x2bd/0x3c0 [ 635.826042][T18063] ? look_up_lock_class+0x75/0x140 [ 635.831158][T18063] ? print_deadlock_bug+0x5d0/0x5d0 [ 635.836372][T18063] ? lockdep_lock+0xe0/0x220 [ 635.841069][T18063] ? _find_first_zero_bit+0xd3/0x100 [ 635.846356][T18063] __lock_acquire+0x2ddb/0x7c80 [ 635.851202][T18063] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 635.857192][T18063] ? __lock_acquire+0x7c80/0x7c80 [ 635.862232][T18063] ? verify_lock_unused+0x140/0x140 [ 635.867461][T18063] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 635.873114][T18063] ? do_raw_spin_lock+0x121/0x2c0 [ 635.878242][T18063] ? mutex_unlock+0x10/0x10 [ 635.882748][T18063] lock_acquire+0x197/0x410 [ 635.887271][T18063] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 635.893362][T18063] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 635.899368][T18063] ? __might_sleep+0xe0/0xe0 [ 635.904099][T18063] ? read_lock_is_recursive+0x20/0x20 [ 635.909504][T18063] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 635.915857][T18063] ? verify_lock_unused+0x140/0x140 [ 635.921380][T18063] ? check_noncircular+0x175/0x3c0 [ 635.926701][T18063] down_write+0x97/0x1f0 [ 635.930946][T18063] ? ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 635.937013][T18063] ? down_read_killable+0x340/0x340 [ 635.942238][T18063] ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 635.948162][T18063] ? mark_lock+0x94/0x320 [ 635.952610][T18063] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 635.958592][T18063] ? lock_chain_count+0x20/0x20 [ 635.963543][T18063] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 635.969560][T18063] ? ocfs2_block_group_search+0x470/0x470 [ 635.975309][T18063] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 635.981225][T18063] ? _raw_spin_unlock+0x40/0x40 [ 635.986071][T18063] ? stack_trace_save+0x9c/0xe0 [ 635.990930][T18063] ? stack_trace_snprint+0xf0/0xf0 [ 635.996050][T18063] ? __stack_depot_save+0x560/0x630 [ 636.001255][T18063] ? kasan_set_track+0x5f/0x70 [ 636.006213][T18063] ? kasan_set_track+0x4e/0x70 [ 636.011093][T18063] ? __kasan_kmalloc+0x8f/0xa0 [ 636.015902][T18063] ? ocfs2_reserve_new_metadata_blocks+0x114/0x940 [ 636.022429][T18063] ? ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 636.028253][T18063] ? ocfs2_xattr_set+0xb6d/0x11f0 [ 636.033373][T18063] ? __vfs_setxattr+0x431/0x470 [ 636.038348][T18063] ? __vfs_setxattr_noperm+0x12d/0x5e0 [ 636.043850][T18063] ? vfs_setxattr+0x16c/0x2f0 [ 636.048554][T18063] ? path_setxattr+0x362/0x550 [ 636.053351][T18063] ? __x64_sys_setxattr+0xbb/0xd0 [ 636.058400][T18063] ? do_syscall_64+0x55/0xb0 [ 636.063089][T18063] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.069192][T18063] ocfs2_reserve_new_metadata_blocks+0x404/0x940 [ 636.075626][T18063] ? ocfs2_init_steal_slots+0x160/0x160 [ 636.081178][T18063] ? ocfs2_xattr_block_set+0x2b40/0x2b40 [ 636.086846][T18063] ocfs2_init_xattr_set_ctxt+0x2f8/0x6e0 [ 636.092522][T18063] ? ocfs2_xattr_set+0xb33/0x11f0 [ 636.097576][T18063] ? ocfs2_prepare_refcount_xattr+0xf20/0xf20 [ 636.103660][T18063] ? ocfs2_truncate_log_needs_flush+0x135/0x2e0 [ 636.109915][T18063] ? ocfs2_remove_btree_range+0x1480/0x1480 [ 636.115814][T18063] ? down_write+0x162/0x1f0 [ 636.120416][T18063] ? down_read_killable+0x340/0x340 [ 636.125711][T18063] ? up_write+0x1c3/0x410 [ 636.130049][T18063] ocfs2_xattr_set+0xb6d/0x11f0 [ 636.134941][T18063] ? __ocfs2_xattr_set_handle+0xf10/0xf10 [ 636.140688][T18063] ? __lock_acquire+0x1334/0x7c80 [ 636.145723][T18063] ? verify_lock_unused+0x140/0x140 [ 636.151015][T18063] ? aa_get_newest_label+0xf8/0x5c0 [ 636.156334][T18063] ? end_current_label_crit_section+0x170/0x170 [ 636.162782][T18063] ? posix_xattr_acl+0x93/0xb0 [ 636.167585][T18063] ? evm_protect_xattr+0x36d/0x7a0 [ 636.172721][T18063] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 636.178220][T18063] __vfs_setxattr+0x431/0x470 [ 636.182928][T18063] __vfs_setxattr_noperm+0x12d/0x5e0 [ 636.188231][T18063] vfs_setxattr+0x16c/0x2f0 [ 636.192762][T18063] ? xattr_permission+0x470/0x470 [ 636.197882][T18063] ? __mnt_want_write+0x223/0x2a0 [ 636.202999][T18063] ? path_setxattr+0x314/0x550 [ 636.207971][T18063] path_setxattr+0x362/0x550 [ 636.212586][T18063] ? simple_xattrs_free+0x150/0x150 [ 636.217906][T18063] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 636.224001][T18063] ? lock_chain_count+0x20/0x20 [ 636.228883][T18063] __x64_sys_setxattr+0xbb/0xd0 [ 636.233758][T18063] do_syscall_64+0x55/0xb0 [ 636.238189][T18063] ? clear_bhb_loop+0x40/0x90 [ 636.242872][T18063] ? clear_bhb_loop+0x40/0x90 [ 636.247556][T18063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 636.253813][T18063] RIP: 0033:0x7f15b8b8e929 [ 636.258234][T18063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.278222][T18063] RSP: 002b:00007f15b99cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 636.287640][T18063] RAX: ffffffffffffffda RBX: 00007f15b8db5fa0 RCX: 00007f15b8b8e929 [ 636.295634][T18063] RDX: 0000200000002700 RSI: 00002000000000c0 RDI: 0000200000000080 [ 636.303644][T18063] RBP: 00007f15b8c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 636.311649][T18063] R10: 0000000000001015 R11: 0000000000000246 R12: 0000000000000000 [ 636.319737][T18063] R13: 0000000000000000 R14: 00007f15b8db5fa0 R15: 00007ffed8fe8bf8 [ 636.327835][T18063] [ 636.331072][ C1] vkms_vblank_simulate: vblank timer overrun [ 636.371190][T14623] ocfs2: Unmounting device (7,4) on (node local)