last executing test programs: 8m20.618946248s ago: executing program 3 (id=8110): iopl(0x3) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 8m20.49552366s ago: executing program 3 (id=8113): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_int(r0, 0x0, 0x7, 0x0, &(0x7f00000000c0)) 8m20.397317431s ago: executing program 3 (id=8114): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1, 0xfffa, 0x6}, 0x20) 8m20.231189594s ago: executing program 3 (id=8117): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6c733d63703836302c6465636f6d706f73652c747970653de7d1b73f2c666f7263652c6e6f626172726965722c6e6f6465636f6d706f73652c009b6040155c7209e54a134e5e27fc0b97987830ddc20ac1835cc4bf44129f88db"], 0x23, 0x6de, &(0x7f0000001f80)="$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") mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 8m20.022827817s ago: executing program 3 (id=8120): r0 = io_uring_setup(0x3efa, &(0x7f0000000b80)={0x0, 0x36a6, 0x0, 0x2, 0x10081}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, 0x0, 0x0) 8m19.639985113s ago: executing program 3 (id=8124): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000180)={[{@undelete}, {@umask={'umask', 0x3d, 0x6}}, {@adinicb}, {@uid_forget}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {}, {}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x1, 0xc76, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 8m19.297761239s ago: executing program 32 (id=8124): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000180)={[{@undelete}, {@umask={'umask', 0x3d, 0x6}}, {@adinicb}, {@uid_forget}, {}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {}, {}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x1, 0xc76, &(0x7f0000000f40)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 8m18.224063165s ago: executing program 1 (id=8139): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010400400019000000000000ffff", @ANYRES32=0x0, @ANYBLOB="989b0200000000002400128009000100766c616e00000000140002800400048004000380060005008100000014000300766c616e30"], 0x58}}, 0x0) 8m18.065571648s ago: executing program 1 (id=8140): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000000), 0x4) 8m17.90741694s ago: executing program 1 (id=8143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xebf}]}, 0x24}, 0x1, 0x0, 0x0, 0x404008c}, 0x4040040) 8m17.691255653s ago: executing program 1 (id=8146): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6c733d63703836302c6465636f6d706f73652c747970653de7d1b73f2c666f7263652c6e6f626172726965722c6e6f6465636f6d706f73652c009b6040155c7209e54a134e5e27fc0b97987830ddc20ac1835cc4bf44129f88db"], 0x23, 0x6de, &(0x7f0000001f80)="$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") mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 8m17.337680609s ago: executing program 1 (id=8150): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87ef", @ANYRES64=r0], 0x0) 8m16.803390867s ago: executing program 1 (id=8157): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x12}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 8m16.459130542s ago: executing program 33 (id=8157): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x12}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 1m5.293748056s ago: executing program 0 (id=14179): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 1m5.03537836s ago: executing program 0 (id=14183): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, r0) 1m4.941968412s ago: executing program 0 (id=14185): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x28002) writev(r0, &(0x7f0000000200)=[{&(0x7f0000003240)="137a2ad5b6c6c6431f449b5114422dbcf10d8667697164c805659ce43f5e7b2fca6295f4d2bfb2d63dccb845b6da73e7", 0x30}], 0x1) 1m4.783654644s ago: executing program 0 (id=14188): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x800800, &(0x7f0000000100)=ANY=[@ANYBLOB='errors=remount-ro,discard,dmask=00000000000000000000002,errors=continue,errors=remount-ro,keep_last_dots,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c0000640f51632569c476e867488d0cf29c7ce7dcece2", @ANYRESHEX=0xee01, @ANYBLOB=',errors=continue,fmask=00000000000000000000007,iocharset=iso8859-4,\x00'], 0x1, 0x152a, &(0x7f0000002900)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 1m4.466318109s ago: executing program 0 (id=14194): r0 = syz_open_dev$loop(&(0x7f0000003200), 0x5, 0x202) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000003240)) 1m3.866578419s ago: executing program 0 (id=14203): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000000000005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x21, 0x1, 0x0, "bb1e000200000080007f28accf0500063475b743cc5377a16c80b6db3400"}) 1m3.357039126s ago: executing program 34 (id=14203): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000000000005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x21, 0x1, 0x0, "bb1e000200000080007f28accf0500063475b743cc5377a16c80b6db3400"}) 3.998930168s ago: executing program 4 (id=14735): r0 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0) 3.632901974s ago: executing program 4 (id=14737): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x2e, 0x1, 0x0, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) 3.223237029s ago: executing program 4 (id=14741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000580)=@updsa={0xfc, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x4e24, 0x20, 0xfffd, 0x0, 0x0, 0x20, 0xa0, 0x32}, {@in=@multicast2, 0x0, 0x2b}, @in=@dev={0xac, 0x14, 0x14, 0x12}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xed81}, {0x0, 0x1}, {}, 0x0, 0x3503, 0xa, 0x4, 0xfd, 0x2c}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x7}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x50}, 0x4000) 2.754197137s ago: executing program 4 (id=14746): r0 = io_uring_setup(0x7c42, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x1, 0x309}) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000001780)=[{0xffffff55, 0x0, 0x0, 0x0, 0x0}], 0x1) 2.363362503s ago: executing program 5 (id=14751): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3fe}}) 2.323319154s ago: executing program 4 (id=14752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x4}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 2.163069596s ago: executing program 6 (id=14753): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffc, 0x0, 0x30, 0x0, @ib={0x1b, 0x7, 0x5, {}, 0xfffffffffffffffd, 0x1, 0xd}, @in6={0xa, 0x4e20, 0xfff, @mcast2, 0x3}}}, 0x118) 2.060143308s ago: executing program 2 (id=14754): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd2a, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 2.048700268s ago: executing program 5 (id=14755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x1, 0x10000, 0x1, 0x0, 0x1, 0x40000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1fffffff}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0xff4, &(0x7f0000002000)=""/4084}, 0x80) 2.011742408s ago: executing program 4 (id=14756): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000000c0)={0xfffffffffffffffd, 0x5, 0xfffffffffffffffe}) 1.827547121s ago: executing program 6 (id=14757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@printk={@i}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.746503473s ago: executing program 2 (id=14758): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0) 1.742500483s ago: executing program 5 (id=14759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001540)=@delsa={0x28, 0x11, 0x2a4d0fb3869bfd77, 0x5, 0x25dfdbfd, {@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d2, 0x2, 0xff}}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4004010) 1.440556737s ago: executing program 6 (id=14760): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 1.391374208s ago: executing program 5 (id=14761): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000003600)='.\x00', 0x0, 0x301200a, 0x0) 1.358338889s ago: executing program 2 (id=14762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x8080) 1.148028212s ago: executing program 5 (id=14763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a05000000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c00018008000100636d7000200002800c00038005000100ac00000008000140000008090800024000000001090001"], 0xcc}}, 0x0) 1.122694622s ago: executing program 2 (id=14764): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000240)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 1.009066554s ago: executing program 6 (id=14765): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) 825.919407ms ago: executing program 5 (id=14766): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4fa, &(0x7f0000003240)="$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") lchown(&(0x7f0000000000)='./file1\x00', 0xee01, 0x0) 613.66478ms ago: executing program 2 (id=14767): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 612.52045ms ago: executing program 6 (id=14768): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x17, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}]}, 0xb8}}, 0x0) 19.42068ms ago: executing program 6 (id=14769): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000180), 0x2, 0x557, &(0x7f0000000940)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x0, 0x100) 0s ago: executing program 2 (id=14770): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfc, 0x6110, &(0x7f000000da00)="$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") setxattr$trusted_overlay_upper(&(0x7f0000001ac0)='./file2\x00', &(0x7f00000001c0), &(0x7f0000001b00)=ANY=[], 0x835, 0x1) kernel console output (not intermixed with test programs): 4: detected capacity change from 0 to 64 [ 1203.687190][ T2969] autofs4:pid:2969:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 1203.880253][ T2979] loop5: detected capacity change from 0 to 64 [ 1204.021553][ T2983] loop2: detected capacity change from 0 to 512 [ 1204.031015][ T2983] EXT4-fs: Ignoring removed bh option [ 1204.060271][ T2985] cgroup: release_agent respecified [ 1204.082061][ T2983] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1204.097079][ T2983] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1204.139163][ T2983] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1204.155403][ T2990] xt_TCPMSS: Only works on TCP SYN packets [ 1204.189083][ T2983] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1204.227804][ T2983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.257857][ T2983] EXT4-fs error (device loop2): ext4_empty_dir:3177: inode #12: block 32: comm syz.2.12807: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 1204.339213][ T2997] loop0: detected capacity change from 0 to 256 [ 1204.399455][ T6178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.403219][ T2997] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1aabf3fb, utbl_chksum : 0xe619d30d) [ 1204.438994][ T2999] loop4: detected capacity change from 0 to 1024 [ 1204.498974][ T23] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1204.712571][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 1204.728285][ T23] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1204.748276][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.786804][ T23] usb 6-1: config 0 descriptor?? [ 1204.801480][ T23] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1205.230278][ T3024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12828'. [ 1205.248958][ T23] gspca_sq930x: ucbus_write failed -71 [ 1205.254541][ T23] sq930x: probe of 6-1:0.0 failed with error -71 [ 1205.279278][ T23] usb 6-1: USB disconnect, device number 18 [ 1205.695006][ T3047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12837'. [ 1205.938399][ T3053] loop2: detected capacity change from 0 to 4096 [ 1205.973348][ T3053] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1206.015394][ T3053] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1206.185400][ T3063] loop5: detected capacity change from 0 to 128 [ 1206.313255][ T3065] loop2: detected capacity change from 0 to 4096 [ 1206.753124][ T3078] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1207.007063][ T3073] loop2: detected capacity change from 0 to 32768 [ 1207.015901][ T3073] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.12850 (3073) [ 1207.044078][ T3073] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1207.054591][ T3073] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1207.063304][ T3073] BTRFS info (device loop2): force clearing of disk cache [ 1207.071088][ T3073] BTRFS info (device loop2): metadata ratio 0 [ 1207.077767][ T3073] BTRFS info (device loop2): enabling ssd optimizations [ 1207.085155][ T3073] BTRFS info (device loop2): using spread ssd allocation scheme [ 1207.101584][ T3073] BTRFS info (device loop2): using free space tree [ 1207.137843][ T3073] BTRFS info (device loop2): auto enabling async discard [ 1207.149157][ T3073] BTRFS info (device loop2): rebuilding free space tree [ 1207.232811][ T6178] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1207.754259][ T3113] Cannot find set identified by id 0 to match [ 1207.867672][ T3117] siw: device registration error -23 [ 1207.874550][ T3116] "syz.4.12861" (3116) uses obsolete ecb(arc4) skcipher [ 1208.004236][T24141] Bluetooth: hci1: unexpected event for opcode 0x041c [ 1208.120918][ T3123] loop2: detected capacity change from 0 to 64 [ 1208.296122][ T3127] Cannot find del_set index 3 as target [ 1208.350120][ T3107] loop5: detected capacity change from 0 to 40427 [ 1208.364069][ T3107] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 1208.374554][ T3107] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 1208.440549][ T3107] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1208.558430][ T3107] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 1208.570027][ T3107] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1208.720633][ T3144] loop2: detected capacity change from 0 to 164 [ 1208.781939][ T3144] rock: directory entry would overflow storage [ 1208.817818][ T3144] rock: sig=0x5245, size=8, remaining=3 [ 1209.007893][ T3153] QAT: Stopping all acceleration devices. [ 1209.184125][ T3159] netlink: 'syz.2.12881': attribute type 2 has an invalid length. [ 1209.205178][ T3159] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12881'. [ 1209.739931][ T3182] loop4: detected capacity change from 0 to 2048 [ 1209.780993][ T3182] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=4096, location=4096 [ 1209.845261][ T3182] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1209.873158][ T3182] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1209.919330][ T3182] UDF-fs: Scanning with blocksize 512 failed [ 1209.952107][ T3190] SET target dimension over the limit! [ 1209.958825][ T3188] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1209.964256][ T3182] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1209.983306][ T3182] UDF-fs: Scanning with blocksize 1024 failed [ 1210.002765][ T3182] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1210.034446][ T3182] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1210.053322][ T3182] UDF-fs: Scanning with blocksize 2048 failed [ 1210.074409][ T3182] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1210.098111][ T3194] netlink: 'syz.0.12897': attribute type 2 has an invalid length. [ 1210.100010][ T3182] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1210.113407][ T3194] netlink: 'syz.0.12897': attribute type 1 has an invalid length. [ 1210.125302][ T3182] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 1210.160276][ T3182] UDF-fs: Scanning with blocksize 4096 failed [ 1210.172612][ T3182] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 1210.393251][ T3182] loop4: detected capacity change from 0 to 64 [ 1210.623193][ T3210] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12905'. [ 1210.657275][ T3212] loop0: detected capacity change from 0 to 512 [ 1210.690043][ T3212] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1210.733044][ T3212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.748004][ T3212] ext4 filesystem being mounted at /3090/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.852341][ T3219] loop2: detected capacity change from 0 to 64 [ 1210.897567][ T6165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.951222][ T3221] loop4: detected capacity change from 0 to 2048 [ 1211.010663][ T3221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1211.079645][ T3221] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 100 with incorrect tag e01 [ 1211.268444][ T3227] loop2: detected capacity change from 0 to 256 [ 1211.354269][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.379764][ T3227] FAT-fs (loop2): Filesystem has been set read-only [ 1211.400810][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.437051][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.490594][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.494026][ T3231] loop0: detected capacity change from 0 to 1024 [ 1211.501337][ T3229] loop4: detected capacity change from 0 to 4096 [ 1211.522617][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.550376][ T3229] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1211.599158][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.651188][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.697047][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.728008][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.746179][ T3229] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1211.789738][ T3227] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1211.826627][ T27] audit: type=1800 audit(1751554863.988:259): pid=3227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.12920" name="file1" dev="loop2" ino=1048719 res=0 errno=0 [ 1211.859006][ T3227] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1211.885125][ T3237] netlink: 'syz.5.12916': attribute type 1 has an invalid length. [ 1212.023338][ T3241] loop5: detected capacity change from 0 to 256 [ 1212.079300][ T3241] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1212.079763][ T3246] Timeout policy `syz1' can only be used by L3 protocol number 25944 [ 1212.107185][ T3241] FAT-fs (loop5): Filesystem has been set read-only [ 1212.208722][T24230] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 1212.223813][ T3249] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12923'. [ 1212.297724][ T3251] IPv6: NLM_F_CREATE should be specified when creating new route [ 1212.345146][ T3251] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1212.353299][ T3251] IPv6: NLM_F_CREATE should be set when creating new route [ 1212.516044][ T3261] loop0: detected capacity change from 0 to 256 [ 1212.528833][ T3261] exfat: Deprecated parameter 'utf8' [ 1212.535596][ T3261] exfat: Deprecated parameter 'utf8' [ 1212.560032][ T3261] exfat: Deprecated parameter 'utf8' [ 1212.655089][ T3261] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d) [ 1213.023289][ T3282] netlink: 68 bytes leftover after parsing attributes in process `syz.5.12938'. [ 1213.135294][ T3284] loop2: detected capacity change from 0 to 1024 [ 1214.245793][ T3326] tc_dump_action: action bad kind [ 1214.273086][ T3328] xt_ecn: cannot match TCP bits for non-tcp packets [ 1215.511492][ T3391] loop2: detected capacity change from 0 to 1024 [ 1215.524425][ T3394] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12989'. [ 1215.607285][ T58] hfsplus: b-tree write err: -5, ino 8 [ 1215.908492][ T3409] loop5: detected capacity change from 0 to 1024 [ 1216.073216][ T1093] hfsplus: b-tree write err: -5, ino 4 [ 1216.571187][ T3437] loop0: detected capacity change from 0 to 64 [ 1216.621435][ T3439] netlink: 'syz.4.13012': attribute type 9 has an invalid length. [ 1216.772694][ T3446] netlink: 'syz.0.13015': attribute type 10 has an invalid length. [ 1216.824184][ T3446] bond0: (slave 70): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1216.870768][ T3446] bond0: (slave 70): The slave device specified does not support setting the MAC address [ 1216.883013][ T3446] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1216.896961][ T3446] bond0: (slave 70): Error -22 calling dev_set_mtu [ 1217.199778][ T3460] netlink: 'syz.4.13022': attribute type 8 has an invalid length. [ 1217.215769][ T3460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13022'. [ 1217.408044][ T3466] loop4: detected capacity change from 0 to 512 [ 1217.449148][ T3466] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1217.517899][ T3466] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 1217.573383][ T3466] System zones: 1-12 [ 1217.618959][ T3466] EXT4-fs (loop4): 1 truncate cleaned up [ 1217.625960][ T3466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.728048][T24139] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.875877][ T3479] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13030'. [ 1217.981429][ T3454] loop5: detected capacity change from 0 to 32768 [ 1218.011738][ T3454] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1218.029434][ T3454] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 1218.060533][ T3454] BTRFS info (device loop5): force clearing of disk cache [ 1218.095067][ T3454] BTRFS info (device loop5): setting nodatasum [ 1218.119405][ T3454] BTRFS info (device loop5): allowing degraded mounts [ 1218.126226][ T3454] BTRFS info (device loop5): use zlib compression, level 3 [ 1218.155356][ T3454] BTRFS info (device loop5): using free space tree [ 1218.365534][ T3454] BTRFS info (device loop5): enabling ssd optimizations [ 1218.372530][ T3454] BTRFS info (device loop5): auto enabling async discard [ 1218.533187][T24230] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1218.807938][ T3523] loop5: detected capacity change from 0 to 8 [ 1219.205892][ T3535] netlink: 'syz.5.13050': attribute type 10 has an invalid length. [ 1219.268743][ T3535] dummy0: entered promiscuous mode [ 1219.282498][ T3535] dummy0: entered allmulticast mode [ 1219.288833][ T3535] team0: Port device dummy0 added [ 1219.761822][ T3525] loop4: detected capacity change from 0 to 32768 [ 1219.790235][ T3528] loop0: detected capacity change from 0 to 32768 [ 1219.793594][ T3525] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 scanned by syz.4.13046 (3525) [ 1219.825734][ T3525] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1219.837452][ T3528] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.13045 (3528) [ 1219.857034][ T3525] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1219.870469][ T3528] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1219.886516][ T3525] BTRFS info (device loop4): force zlib compression, level 3 [ 1219.896732][ T3528] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1219.910345][ T3525] BTRFS info (device loop4): force clearing of disk cache [ 1219.917937][ T3528] BTRFS info (device loop0): force clearing of disk cache [ 1219.936034][ T3525] BTRFS info (device loop4): setting nodatasum [ 1219.942272][ T3525] BTRFS info (device loop4): use zlib compression, level 3 [ 1219.957637][ T3528] BTRFS info (device loop0): metadata ratio 0 [ 1219.978871][ T3528] BTRFS info (device loop0): enabling ssd optimizations [ 1219.985863][ T3528] BTRFS info (device loop0): using spread ssd allocation scheme [ 1220.003219][ T3525] BTRFS info (device loop4): allowing degraded mounts [ 1220.016561][ T3525] BTRFS info (device loop4): enabling disk space caching [ 1220.024228][ T3528] BTRFS info (device loop0): using free space tree [ 1220.042042][ T3525] BTRFS info (device loop4): disk space caching is enabled [ 1220.061057][ T3551] netlink: 'syz.2.13058': attribute type 1 has an invalid length. [ 1220.164476][ T3528] BTRFS info (device loop0): auto enabling async discard [ 1220.184465][ T3528] BTRFS info (device loop0): rebuilding free space tree [ 1220.201144][ T3525] BTRFS info (device loop4): enabling ssd optimizations [ 1220.225254][ T3525] BTRFS info (device loop4): auto enabling async discard [ 1220.256468][ T3525] BTRFS info (device loop4): rebuilding free space tree [ 1220.327865][ T3525] BTRFS info (device loop4): disabling free space tree [ 1220.348215][ T3525] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1220.391033][ T3525] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1220.450738][ T6165] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1220.478117][ T3589] loop5: detected capacity change from 0 to 4096 [ 1220.509971][ T3589] EXT4-fs (loop5): Test dummy encryption mode enabled [ 1220.579851][ T3589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1220.634194][ T3593] loop2: detected capacity change from 0 to 256 [ 1220.652557][ T3525] BTRFS info (device loop4): balance: start -f -svrange=5..9,limit=46533..0 [ 1220.684709][ T3525] BTRFS info (device loop4): balance: ended with status: 0 [ 1220.789373][T24139] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1220.846199][ T3593] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xff48ad06, utbl_chksum : 0xe619d30d) [ 1220.894148][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1221.187634][ T3602] ieee802154 phy0 wpan0: encryption failed: -22 [ 1221.661932][ T3620] Cannot find add_set index 2 as target [ 1221.677608][ T3617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13073'. [ 1222.224311][ T3639] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1222.828494][ T3653] loop4: detected capacity change from 0 to 4096 [ 1222.836137][ T3636] loop0: detected capacity change from 0 to 32768 [ 1222.936836][ T3636] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1223.080560][ T3645] loop2: detected capacity change from 0 to 40427 [ 1223.087764][ T3636] XFS (loop0): Ending clean mount [ 1223.123848][ T3645] F2FS-fs (loop2): invalid crc value [ 1223.170237][ T3645] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1223.392513][ T6165] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1223.394114][ T3645] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1224.332987][ T3695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13104'. [ 1224.404792][ T3677] loop4: detected capacity change from 0 to 32768 [ 1224.444880][ T3677] JBD2: Ignoring recovery information on journal [ 1224.628029][ T3677] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1224.754693][ T3713] netlink: 'syz.2.13112': attribute type 2 has an invalid length. [ 1224.775387][ T3713] netlink: 'syz.2.13112': attribute type 1 has an invalid length. [ 1224.968522][ T3716] loop0: detected capacity change from 0 to 4096 [ 1224.984543][ T3716] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1225.001399][T24139] ocfs2: Unmounting device (7,4) on (node local) [ 1225.040333][ T3716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1225.050767][ T3720] loop5: detected capacity change from 0 to 2048 [ 1225.063316][ T3723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13117'. [ 1225.120108][ T3720] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.186153][ T3728] loop4: detected capacity change from 0 to 16 [ 1225.202925][ T3728] erofs: (device loop4): mounted with root inode @ nid 36. [ 1225.374929][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.416255][ T6165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1225.612227][ T3737] netlink: 'syz.4.13123': attribute type 10 has an invalid length. [ 1225.632610][ T3736] loop5: detected capacity change from 0 to 256 [ 1225.662809][ T3737] dummy0: entered promiscuous mode [ 1225.699897][ T3737] dummy0: entered allmulticast mode [ 1225.710014][ T3737] team0: Port device dummy0 added [ 1226.705989][ T3786] loop5: detected capacity change from 0 to 64 [ 1226.858647][ T3791] loop4: detected capacity change from 0 to 256 [ 1226.892706][ T3791] exFAT-fs (loop4): bogus fat length [ 1226.928217][ T3791] exFAT-fs (loop4): failed to read boot sector [ 1226.934488][ T3791] exFAT-fs (loop4): failed to recognize exfat type [ 1227.201698][ T3805] netlink: 1180 bytes leftover after parsing attributes in process `syz.5.13155'. [ 1227.529437][ T3821] loop2: detected capacity change from 0 to 64 [ 1227.606635][ T27] audit: type=1800 audit(1751554878.755:260): pid=3821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13161" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 1227.859398][ T3834] netlink: 'syz.0.13168': attribute type 1 has an invalid length. [ 1227.885625][ T3834] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.13168'. [ 1228.153139][ T3848] bridge4: entered promiscuous mode [ 1228.167823][ T3848] bridge4: entered allmulticast mode [ 1228.673773][ T3869] loop4: detected capacity change from 0 to 256 [ 1228.739116][ T3869] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x09066d1f, utbl_chksum : 0xe619d30d) [ 1229.173286][ T3858] loop5: detected capacity change from 0 to 32768 [ 1229.191157][ T3881] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1229.236255][ T3858] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1229.376505][ T3858] XFS (loop5): Ending clean mount [ 1229.586707][T24230] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1230.125939][ T3911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13202'. [ 1230.614906][ T3906] loop0: detected capacity change from 0 to 32768 [ 1230.735362][ T3906] JBD2: Ignoring recovery information on journal [ 1230.846799][ T3906] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1231.005867][ T3941] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13216'. [ 1231.056022][ T3945] overlayfs: failed to resolve './file1': -2 [ 1231.061560][ T3941] netlink: 'syz.5.13216': attribute type 2 has an invalid length. [ 1231.085787][ T6165] ocfs2: Unmounting device (7,0) on (node local) [ 1231.490755][ T3957] loop2: detected capacity change from 0 to 8 [ 1231.495940][ T3955] loop0: detected capacity change from 0 to 512 [ 1231.704581][ T3950] syz.4.13222 (3950): drop_caches: 2 [ 1231.728943][ T3957] SQUASHFS error: Failed to read block 0x2d7: -5 [ 1231.753179][ T3957] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 1231.780225][ T3955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1231.840954][ T3955] ext4 filesystem being mounted at /3170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1231.931980][ T3970] loop2: detected capacity change from 0 to 512 [ 1231.959986][ T3970] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1232.005246][ T3970] EXT4-fs (loop2): 1 truncate cleaned up [ 1232.013520][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1232.034824][ T6165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.123745][ T6206] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1232.149455][ T6178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1232.374874][ T6206] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1232.388382][ T6206] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.403095][ T6206] usb 6-1: Product: syz [ 1232.408644][ T6206] usb 6-1: Manufacturer: syz [ 1232.429963][ T6206] usb 6-1: SerialNumber: syz [ 1232.446229][ T6206] usb 6-1: config 0 descriptor?? [ 1232.692308][ T6206] hso 6-1:0.0: Failed to find INT IN ep [ 1232.707437][ T6206] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1232.857446][ T4005] loop2: detected capacity change from 0 to 64 [ 1232.891046][ T4005] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1232.964781][ T6206] usb 6-1: USB disconnect, device number 19 [ 1233.323933][ T4022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13252'. [ 1233.367474][ T27] audit: type=1326 audit(1751554884.142:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4023 comm="syz.4.13254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1233.417006][ T27] audit: type=1326 audit(1751554884.171:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4023 comm="syz.4.13254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1233.481071][ T27] audit: type=1326 audit(1751554884.171:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4023 comm="syz.4.13254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1233.534424][ T27] audit: type=1326 audit(1751554884.171:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4023 comm="syz.4.13254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1233.610663][ T4028] loop2: detected capacity change from 0 to 2048 [ 1233.617132][ T27] audit: type=1326 audit(1751554884.171:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4023 comm="syz.4.13254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1233.672703][ T4028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1233.987930][ T4046] loop2: detected capacity change from 0 to 64 [ 1234.308282][ T4059] netlink: 'syz.4.13271': attribute type 21 has an invalid length. [ 1234.325559][ T4059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13271'. [ 1234.829376][ T4079] loop0: detected capacity change from 0 to 1024 [ 1234.892582][ T4085] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13284'. [ 1234.902094][ T4085] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 1235.670214][ T4118] xt_NFQUEUE: number of total queues is 0 [ 1235.981596][ T4130] netlink: 'syz.5.13306': attribute type 32 has an invalid length. [ 1235.997357][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13308'. [ 1236.007006][ T4136] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13308'. [ 1236.514098][ T4156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13319'. [ 1236.537093][ T4156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13319'. [ 1236.641093][ T4158] loop2: detected capacity change from 0 to 1024 [ 1237.028049][ T4173] loop5: detected capacity change from 0 to 764 [ 1237.057481][ T4173] rock: directory entry would overflow storage [ 1237.078539][ T4173] rock: sig=0x4654, size=5, remaining=4 [ 1237.197519][ T4177] loop2: detected capacity change from 0 to 64 [ 1237.509955][ T4187] loop5: detected capacity change from 0 to 512 [ 1237.603253][ T4187] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1237.623874][ T4194] netlink: 40 bytes leftover after parsing attributes in process `syz.2.13338'. [ 1237.634395][ T4194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1237.641705][ T4194] IPv6: NLM_F_CREATE should be set when creating new route [ 1237.658679][ T4187] Quota error (device loop5): v2_read_file_info: Block with free entry 2 out of range (1, 0). [ 1237.691174][ T4195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13336'. [ 1237.703988][ T4187] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1237.721548][ T4195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13336'. [ 1237.733434][ T4195] syz_tun: left promiscuous mode [ 1237.744657][ T4195] dummy0: left promiscuous mode [ 1237.761740][ T4195] macsec0: left promiscuous mode [ 1237.767577][ T4195] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1237.769485][ T4187] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 1237.777768][ T4195] ipip0: left promiscuous mode [ 1237.844165][ T4187] EXT4-fs error (device loop5): ext4_ext_check_inode:520: inode #13: comm syz.5.13335: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1237.872794][ T4187] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.13335: couldn't read orphan inode 13 (err -117) [ 1237.888748][ T4187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0b00-0000-000000000000 ro without journal. Quota mode: writeback. [ 1238.018525][ T4187] EXT4-fs error (device loop5): ext4_lookup:1858: comm syz.5.13335: inode #15: comm syz.5.13335: iget: illegal inode # [ 1238.172324][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0b00-0000-000000000000. [ 1238.367048][ T4218] hsr_slave_0: left promiscuous mode [ 1238.395371][ T4218] hsr_slave_1: left promiscuous mode [ 1238.487975][ T4223] SET target dimension over the limit! [ 1239.252025][ T4256] loop5: detected capacity change from 0 to 1024 [ 1239.293032][ T4258] __nla_validate_parse: 177 callbacks suppressed [ 1239.293049][ T4258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13368'. [ 1239.336126][ T4258] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13368'. [ 1239.346560][ T4258] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13368'. [ 1239.358124][ T4256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1239.552019][ T4270] netlink: 'syz.4.13371': attribute type 5 has an invalid length. [ 1239.652575][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.781094][ T4278] netlink: 'syz.5.13374': attribute type 1 has an invalid length. [ 1239.795117][ T4278] netlink: 'syz.5.13374': attribute type 2 has an invalid length. [ 1239.935722][ T4283] netlink: 92 bytes leftover after parsing attributes in process `syz.2.13378'. [ 1239.965304][ T4285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13379'. [ 1239.978414][ T4285] netlink: 44 bytes leftover after parsing attributes in process `syz.5.13379'. [ 1240.142133][ T4293] x_tables: duplicate underflow at hook 2 [ 1240.289268][ T27] audit: type=1326 audit(1751554890.615:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.13386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1240.365968][ T27] audit: type=1326 audit(1751554890.615:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.13386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1240.427308][ T27] audit: type=1326 audit(1751554890.662:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.13386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1240.483330][ T27] audit: type=1326 audit(1751554890.662:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.13386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1240.532704][ T27] audit: type=1326 audit(1751554890.662:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.13386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1240.555051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1240.740758][ T4308] loop4: detected capacity change from 0 to 16 [ 1240.870615][ T4308] erofs: (device loop4): mounted with root inode @ nid 36. [ 1241.292007][ T4306] syz.5.13389 (4306): drop_caches: 2 [ 1241.932352][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.939015][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.009596][ T4330] loop5: detected capacity change from 0 to 512 [ 1242.050385][ T4330] EXT4-fs: Ignoring removed nobh option [ 1242.078751][ T4330] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 1242.087312][ T4330] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -61 [ 1242.099839][ T4330] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.13398: casefold flag without casefold feature [ 1242.125900][ T4330] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.13398: couldn't read orphan inode 13 (err -117) [ 1242.194919][ T4330] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1242.330382][ T4330] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 1242.430853][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.835099][ T4364] loop5: detected capacity change from 0 to 64 [ 1243.459886][ T4386] loop2: detected capacity change from 0 to 1024 [ 1243.533795][ T4386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1243.762829][ T6178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1243.967153][ T4404] netlink: 'syz.2.13432': attribute type 1 has an invalid length. [ 1244.000532][ T4404] netlink: 236 bytes leftover after parsing attributes in process `syz.2.13432'. [ 1244.047005][ T4382] loop0: detected capacity change from 0 to 40427 [ 1244.099788][ T4382] F2FS-fs (loop0): invalid crc value [ 1244.126164][ T4382] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1244.129178][ T4410] netlink: 'syz.5.13435': attribute type 9 has an invalid length. [ 1244.184220][ T4410] netlink: 'syz.5.13435': attribute type 6 has an invalid length. [ 1244.343300][ T4382] F2FS-fs (loop0): Start checkpoint disabled! [ 1244.403026][ T4382] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1244.611846][ T4418] loop5: detected capacity change from 0 to 4096 [ 1244.629799][ T4418] ntfs3: loop5: It is recommened to use chkdsk. [ 1244.630705][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 1244.630754][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 1244.630799][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 1244.630856][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffc0c00 [ 1244.630907][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffc1c00 [ 1244.630950][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffc2c00 [ 1244.630988][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffc4c00 [ 1244.631030][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffc8c00 [ 1244.631069][ T4418] ntfs3: loop5: try to read out of volume at offset 0x3fffffd0c00 [ 1245.141945][ T4436] netlink: 'syz.0.13443': attribute type 2 has an invalid length. [ 1245.151637][ T4436] netlink: 'syz.0.13443': attribute type 8 has an invalid length. [ 1245.160393][ T4436] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13443'. [ 1245.525360][ T4454] netlink: 'syz.5.13457': attribute type 10 has an invalid length. [ 1245.536760][ T4454] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13457'. [ 1245.549083][ T4454] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1245.556489][ T4454] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1245.605959][ T4454] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1246.259846][ T4475] loop0: detected capacity change from 0 to 2048 [ 1246.309227][ T4475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1246.406599][ T4475] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.13468: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1246.510398][ T4475] EXT4-fs (loop0): Remounting filesystem read-only [ 1246.653608][ T6165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1246.826066][ T4501] netlink: 'syz.0.13477': attribute type 3 has an invalid length. [ 1246.840275][ T4501] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13477'. [ 1247.178370][ T4507] loop2: detected capacity change from 0 to 8192 [ 1247.218226][ T4507] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1247.250514][ T4507] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 1247.259755][ T4507] REISERFS (device loop2): using ordered data mode [ 1247.272006][ T4507] reiserfs: using flush barriers [ 1247.316181][ T4507] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1247.391148][ T4507] REISERFS (device loop2): checking transaction log (loop2) [ 1247.410081][ T4507] REISERFS (device loop2): Using rupasov hash to sort names [ 1247.428387][ T4507] REISERFS (device loop2): using 3.5.x disk format [ 1247.441994][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1247.474434][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1247.503185][ T4507] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 1247.566085][ T4507] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 1247.716178][ T4497] loop5: detected capacity change from 0 to 32768 [ 1247.814852][ T4497] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1247.904820][ T4531] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.051286][ T4497] XFS (loop5): Ending clean mount [ 1248.085486][ T4497] XFS (loop5): Quotacheck needed: Please wait. [ 1248.303902][ T4544] loop0: detected capacity change from 0 to 256 [ 1248.311364][ T4497] XFS (loop5): Quotacheck: Done. [ 1248.373879][ T4544] exfat: Deprecated parameter 'namecase' [ 1248.379738][ T4544] exfat: Deprecated parameter 'namecase' [ 1248.441892][ T4544] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1248.574501][T24230] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1248.660755][ T4550] netlink: 'syz.0.13499': attribute type 1 has an invalid length. [ 1248.692305][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13499'. [ 1248.924312][ T4558] loop2: detected capacity change from 0 to 2048 [ 1248.982948][ T4561] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1249.137952][ T4561] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1249.150780][ T4561] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1249.161437][ T4561] Remounting filesystem read-only [ 1249.167940][ T1093] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 1249.176801][ T1093] NILFS (loop2): discard dirty block: blocknr=35, size=1024 [ 1249.184590][ T1093] NILFS (loop2): discard dirty block: blocknr=36, size=1024 [ 1249.192327][ T1093] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 1249.200815][ T1093] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 1249.208224][ T1093] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 1249.221893][ T1093] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 1249.229940][ T1093] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 1249.237256][ T1093] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 1249.249105][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.251987][ T4567] loop0: detected capacity change from 0 to 512 [ 1249.262530][ T1093] NILFS (loop2): discard dirty page: offset=131072, ino=3 [ 1249.277029][ T4567] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1249.284890][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.301237][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.312398][ T1093] NILFS (loop2): discard dirty block: blocknr=46, size=1024 [ 1249.321767][ T4567] EXT4-fs (loop0): 1 truncate cleaned up [ 1249.328994][ T4567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1249.336712][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.357178][ T4567] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.357760][ T1093] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 1249.373868][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.383266][ T6127] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1249.394389][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.404977][ T1093] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 1249.412480][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.421585][ T1093] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 1249.428277][ T1093] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 1249.435685][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.444780][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.461392][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.470667][ T1093] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 1249.477711][ T1093] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 1249.486780][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.496097][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.505270][ T1093] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.526682][ T6178] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 1249.537682][ T6178] NILFS (loop2): discard dirty page: offset=0, ino=12 [ 1249.549016][ T6178] NILFS (loop2): discard dirty block: blocknr=17, size=1024 [ 1249.565767][ T6178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.580533][ T6178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.591032][ T6178] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 1249.602418][ T6127] usb 6-1: Using ep0 maxpacket: 32 [ 1249.609635][ T6127] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1249.635360][ T6127] usb 6-1: too many endpoints for config 0 interface 0 altsetting 5: 69, using maximum allowed: 30 [ 1249.672061][ T6127] usb 6-1: config 0 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 69 [ 1249.679557][ T4573] loop2: detected capacity change from 0 to 128 [ 1249.694911][ T4573] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1249.726850][ T6127] usb 6-1: config 0 interface 0 has no altsetting 1 [ 1249.735477][ T4573] FAT-fs (loop2): FAT read failed (blocknr 234) [ 1249.756604][ T6127] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 1249.784125][ T6127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1249.792435][ T6127] usb 6-1: SerialNumber: syz [ 1249.813112][ T6127] usb 6-1: config 0 descriptor?? [ 1249.831308][ T6127] usb-storage 6-1:0.0: USB Mass Storage device detected [ 1249.870848][ T6127] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 1250.027339][ T4585] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13514'. [ 1250.101540][ T6206] usb 6-1: USB disconnect, device number 20 [ 1250.205352][ T4591] loop0: detected capacity change from 0 to 764 [ 1250.606968][ T4605] netlink: 'syz.2.13524': attribute type 2 has an invalid length. [ 1250.708767][ T4609] netlink: 'syz.2.13526': attribute type 3 has an invalid length. [ 1250.809714][ T4611] loop5: detected capacity change from 0 to 512 [ 1250.892068][ T27] audit: type=1326 audit(1751554900.531:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.13531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1250.920013][ T4611] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1250.966622][ T4611] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.13527: bad orphan inode 13 [ 1250.996122][ T27] audit: type=1326 audit(1751554900.559:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.13531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1251.062091][ T4611] ext4_test_bit(bit=12, block=18) = 1 [ 1251.072879][ T27] audit: type=1326 audit(1751554900.596:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.13531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1251.095021][ T4611] is_bad_inode(inode)=0 [ 1251.109993][ T4611] NEXT_ORPHAN(inode)=2130706432 [ 1251.122259][ T4611] max_ino=32 [ 1251.128570][ T4611] i_nlink=1 [ 1251.129463][ T27] audit: type=1326 audit(1751554900.596:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.13531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1251.143405][ T4611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1251.156089][ T27] audit: type=1326 audit(1751554900.596:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.2.13531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1251.282037][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.773028][ T27] audit: type=1326 audit(1751554901.344:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.5.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ce58e929 code=0x7ffc0000 [ 1251.806550][ T27] audit: type=1326 audit(1751554901.354:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.5.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ce58e929 code=0x7ffc0000 [ 1251.829503][ T27] audit: type=1326 audit(1751554901.354:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.5.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f82ce58e929 code=0x7ffc0000 [ 1251.879582][ T27] audit: type=1326 audit(1751554901.354:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4645 comm="syz.5.13544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ce58e929 code=0x7ffc0000 [ 1252.028380][ T4656] netlink: 76 bytes leftover after parsing attributes in process `syz.2.13549'. [ 1252.105215][ T4662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13552'. [ 1252.126305][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13551'. [ 1253.192956][ T4672] loop2: detected capacity change from 0 to 32768 [ 1253.227814][ T4672] XFS: ikeep mount option is deprecated. [ 1253.268647][ T4672] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1253.474682][ T4672] XFS (loop2): Ending clean mount [ 1253.517891][ T4672] XFS (loop2): Quotacheck needed: Please wait. [ 1253.640442][ T4672] XFS (loop2): Quotacheck: Done. [ 1253.803454][ T6178] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1253.948627][ T4702] loop5: detected capacity change from 0 to 32768 [ 1253.977454][ T4702] XFS: ikeep mount option is deprecated. [ 1254.001840][ T4702] XFS: ikeep mount option is deprecated. [ 1254.106974][ T4702] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1254.218604][ T4744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13586'. [ 1254.267752][ T4702] XFS (loop5): Ending clean mount [ 1254.311321][ T4702] XFS (loop5): Quotacheck needed: Please wait. [ 1254.468305][ T4751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13589'. [ 1254.470725][ T4702] XFS (loop5): Quotacheck: Done. [ 1254.506518][ T4702] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1254.656678][ T4755] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13590'. [ 1255.049661][ T4737] loop0: detected capacity change from 0 to 32768 [ 1255.067857][ T4765] i2c i2c-0: Invalid block write size 34 [ 1255.110176][ T4737] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.13585 (4737) [ 1255.144348][ T4737] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1255.158593][ T4737] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1255.177596][ T4737] BTRFS info (device loop0): using free space tree [ 1255.325403][ T4737] BTRFS info (device loop0): enabling ssd optimizations [ 1255.333677][ T4737] BTRFS info (device loop0): auto enabling async discard [ 1255.603880][ T6165] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1256.296359][ T4820] SET target dimension over the limit! [ 1256.918294][ T4844] loop2: detected capacity change from 0 to 1764 [ 1257.006676][ T4847] SET target dimension over the limit! [ 1257.154324][ T4850] loop5: detected capacity change from 0 to 1024 [ 1257.178513][ T4828] loop0: detected capacity change from 0 to 40427 [ 1257.188206][ T4828] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 1257.211296][ T4850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1257.223711][ T4828] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1257.300553][ T4828] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1257.484795][ T4828] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1257.491883][ T4828] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1257.502302][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.654754][ T4868] netlink: 'syz.2.13636': attribute type 3 has an invalid length. [ 1257.676502][ T4868] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13636'. [ 1258.683064][ T4900] loop5: detected capacity change from 0 to 256 [ 1258.931319][ T4906] loop5: detected capacity change from 0 to 1024 [ 1258.997384][ T4906] syz.5.13652: attempt to access beyond end of device [ 1258.997384][ T4906] loop5: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1259.015538][ T4906] Buffer I/O error on dev loop5, logical block 100663296, async page read [ 1259.026560][ T4906] hfsplus: unable to mark blocks free: error -5 [ 1259.033159][ T4906] hfsplus: can't free extent [ 1259.160274][ T4912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13656'. [ 1259.280317][ T4914] loop2: detected capacity change from 0 to 256 [ 1259.290973][ T4914] exfat: Deprecated parameter 'utf8' [ 1259.296358][ T4914] exfat: Deprecated parameter 'namecase' [ 1259.319411][ T4914] exfat: Deprecated parameter 'namecase' [ 1259.328701][ T4914] exfat: Deprecated parameter 'utf8' [ 1259.352553][ T4914] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1259.468218][ T4904] loop0: detected capacity change from 0 to 32768 [ 1259.486479][ T4919] loop5: detected capacity change from 0 to 512 [ 1259.510727][ T4919] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1259.578138][ T4919] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1259.598630][ T4919] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:512: comm syz.5.13659: Block bitmap for bg 0 marked uninitialized [ 1259.646789][ T4919] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1259.716760][ T4919] EXT4-fs (loop5): 1 orphan inode deleted [ 1259.756252][ T4919] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1259.882025][ T4919] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 1259.910937][ T4919] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1260.026871][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1260.182425][ T4933] lo: entered promiscuous mode [ 1260.199163][ T4933] lo: entered allmulticast mode [ 1260.217034][ T4933] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.442164][ T4946] loop4: detected capacity change from 0 to 8 [ 1260.449585][ T4946] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1260.526561][ T6181] udevd[6181]: incorrect cramfs checksum on /dev/loop4 [ 1260.543901][ T4946] cramfs: bad data blocksize 4294966936 [ 1260.568006][ T4946] cramfs: bad data blocksize 4294966936 [ 1260.590817][ T6181] udevd[6181]: incorrect cramfs checksum on /dev/loop4 [ 1260.598127][ T27] audit: type=1800 audit(1751554909.613:280): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13670" name="file3" dev="loop4" ino=348 res=0 errno=0 [ 1260.840654][ T4958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13676'. [ 1260.888595][ T4928] loop2: detected capacity change from 0 to 40427 [ 1260.910384][ T4928] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 1260.940372][ T4928] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1260.975115][ T4928] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1260.991390][ T27] audit: type=1400 audit(1751554909.978:281): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620E7 pid=4961 comm="syz.0.13679" [ 1261.131489][ T4928] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1261.147577][ T4928] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1261.209120][ T27] audit: type=1800 audit(1751554910.184:282): pid=4928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.13663" name="file2" dev="loop2" ino=10 res=0 errno=0 [ 1261.254544][ T6178] syz-executor: attempt to access beyond end of device [ 1261.254544][ T6178] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1261.291403][ T6178] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1261.566433][ T4978] loop0: detected capacity change from 0 to 64 [ 1261.924702][ T4966] loop4: detected capacity change from 0 to 32768 [ 1261.956742][ T4966] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1262.040465][ T4966] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1262.068725][ T4992] netlink: 'syz.2.13682': attribute type 1 has an invalid length. [ 1262.145537][ T4966] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 1262.203306][ T4966] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1262.248234][ T4966] OCFS2: File system is now read-only. [ 1262.283313][ T4966] (syz.4.13677,4966,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 1262.311793][ T4966] (syz.4.13677,4966,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 1262.323322][ T4966] (syz.4.13677,4966,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 1262.334748][ T4966] (syz.4.13677,4966,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 1262.343677][ T4966] (syz.4.13677,4966,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 1262.418171][ T4966] (syz.4.13677,4966,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 1262.437882][ T4966] (syz.4.13677,4966,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 1262.458405][ T4966] (syz.4.13677,4966,1):ocfs2_mknod:385 ERROR: status = -30 [ 1262.483732][ T4966] (syz.4.13677,4966,1):ocfs2_mknod:502 ERROR: status = -30 [ 1262.499337][ T4966] (syz.4.13677,4966,1):ocfs2_create:676 ERROR: status = -30 [ 1262.545784][T24139] ocfs2: Unmounting device (7,4) on (node local) [ 1262.946353][ T5020] loop0: detected capacity change from 0 to 4096 [ 1262.985198][ T5022] loop2: detected capacity change from 0 to 128 [ 1263.004653][ T5022] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1263.021747][ T5022] ext4 filesystem being mounted at /3491/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1263.052110][ T5022] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.13706: No space for directory leaf checksum. Please run e2fsck -D. [ 1263.071200][ T5028] netlink: 'syz.5.13707': attribute type 7 has an invalid length. [ 1263.101804][ T5028] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13707'. [ 1263.107409][ T5022] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.13706: checksumming directory block 0 [ 1263.112402][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13707'. [ 1263.151853][ T5029] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1263.381927][ T6178] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1263.512954][ T27] audit: type=1326 audit(1751554912.345:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.5.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ce58e929 code=0x7ffc0000 [ 1263.570099][ T27] audit: type=1326 audit(1751554912.345:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.5.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ce58e929 code=0x7ffc0000 [ 1263.593819][ T27] audit: type=1326 audit(1751554912.354:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.5.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f82ce58e929 code=0x7ffc0000 [ 1263.703354][ T27] audit: type=1326 audit(1751554912.354:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5036 comm="syz.5.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82ce58e929 code=0x7ffc0000 [ 1264.222066][ T5069] netlink: 'syz.0.13725': attribute type 3 has an invalid length. [ 1264.246013][ T5069] netlink: 'syz.0.13725': attribute type 1 has an invalid length. [ 1264.270724][ T5069] netlink: 216 bytes leftover after parsing attributes in process `syz.0.13725'. [ 1264.279969][ T5069] NCSI netlink: No device for ifindex 33022 [ 1264.342236][ T5073] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13727'. [ 1264.865626][ T5063] loop5: detected capacity change from 0 to 32768 [ 1264.925039][ T5063] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1265.077011][ T5063] XFS (loop5): Ending clean mount [ 1265.178859][ T6251] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1265.209428][ T5117] loop0: detected capacity change from 0 to 1024 [ 1265.245240][T24230] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1265.341292][ T58] hfsplus: b-tree write err: -5, ino 4 [ 1265.375680][ T6251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1265.402896][ T6251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1265.438687][ T6251] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1265.467300][ T6251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.492369][ T6251] usb 3-1: config 0 descriptor?? [ 1265.517877][ T6251] hub 3-1:0.0: USB hub found [ 1265.631668][ T5128] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1265.639188][ T5128] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1265.647015][ T5128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1265.727055][ T6251] hub 3-1:0.0: 1 port detected [ 1265.934947][ T5140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13751'. [ 1265.945600][ T5140] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13751'. [ 1265.952670][ T6251] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 1265.972699][ T6251] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 1266.003247][ T6251] usbhid 3-1:0.0: can't add hid device: -71 [ 1266.017364][ T6251] usbhid: probe of 3-1:0.0 failed with error -71 [ 1266.069327][ T6251] usb 3-1: USB disconnect, device number 63 [ 1266.079556][ T5147] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1266.202712][ T5151] loop5: detected capacity change from 0 to 1024 [ 1266.233036][ T5151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1266.269765][ T5151] EXT4-fs error (device loop5): __ext4_remount:6741: comm syz.5.13755: Abort forced by user [ 1266.290446][ T5151] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1266.363192][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.600970][ T5167] loop2: detected capacity change from 0 to 512 [ 1266.609395][ T5167] ext4: Unknown parameter 'permit_directio' [ 1266.698915][ T5169] netlink: 'syz.5.13763': attribute type 1 has an invalid length. [ 1267.258431][ T5194] loop2: detected capacity change from 0 to 512 [ 1267.278537][ T5194] EXT4-fs: Ignoring removed bh option [ 1267.296722][ T5194] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1267.312455][ T5194] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1267.332462][ T5194] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 1267.344085][ T5194] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 1267.375364][ T5194] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1267.459804][ T5194] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.13776: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 1267.602337][ T6178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1267.817851][ T5214] loop0: detected capacity change from 0 to 4096 [ 1267.841996][ T5214] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1267.921521][ T5214] ntfs: volume version 3.1. [ 1269.443369][ T5276] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13815'. [ 1269.570578][ T5279] IPv6: Can't replace route, no match found [ 1269.865077][ T27] audit: type=1326 audit(1751554918.285:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1269.919977][ T27] audit: type=1326 audit(1751554918.313:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1269.930012][ T5263] loop4: detected capacity change from 0 to 32768 [ 1269.949837][ T27] audit: type=1326 audit(1751554918.313:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1270.011034][ T5263] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 1270.032311][ T27] audit: type=1326 audit(1751554918.313:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1270.055153][ T27] audit: type=1326 audit(1751554918.313:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1270.077686][ T27] audit: type=1326 audit(1751554918.313:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1270.090169][ T5263] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1270.100295][ T27] audit: type=1326 audit(1751554918.313:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1270.100332][ T27] audit: type=1326 audit(1751554918.313:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1270.264877][ T27] audit: type=1326 audit(1751554918.313:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.2.13821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x50000 [ 1270.306754][ T5301] loop0: detected capacity change from 0 to 256 [ 1270.321391][ T5263] XFS (loop4): Ending clean mount [ 1270.347053][ T5263] XFS (loop4): Quotacheck needed: Please wait. [ 1270.457782][ T5263] XFS (loop4): Quotacheck: Done. [ 1270.485993][ T5303] loop5: detected capacity change from 0 to 1024 [ 1270.493896][ T5303] hfsplus: unable to parse mount options [ 1270.804600][T24139] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1270.880033][ T5307] Cannot find map_set index 0 as target [ 1272.448352][ T5325] loop5: detected capacity change from 0 to 32768 [ 1272.476311][ T5325] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt [ 1272.476311][ T5325] [ 1272.517802][ T5325] ERROR: (device loop5): remounting filesystem as read-only [ 1272.532924][ T5325] jfs_lookup: dtSearch returned -5 [ 1272.770029][ T5345] loop5: detected capacity change from 0 to 512 [ 1272.876393][ T5345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1272.933995][ T5352] loop4: detected capacity change from 0 to 4096 [ 1272.947418][ T5345] ext4 filesystem being mounted at /1415/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1272.947547][ T5352] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1273.087727][ T5345] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.13845: Failed to acquire dquot type 0 [ 1273.260342][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1273.506258][ T5363] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13851'. [ 1273.966857][ T5381] loop4: detected capacity change from 0 to 2048 [ 1274.022851][ T5381] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1274.340179][ T5393] loop5: detected capacity change from 0 to 4096 [ 1274.382573][ T5399] loop0: detected capacity change from 0 to 1764 [ 1274.408772][ T5404] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1274.475908][ T5393] NILFS error (device loop5): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 1274.998900][ T5425] loop0: detected capacity change from 0 to 256 [ 1275.033154][ T5425] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d) [ 1275.343008][ T5433] bond5: entered promiscuous mode [ 1275.348900][ T5433] bond5: entered allmulticast mode [ 1275.354476][ T5433] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1275.476696][ T5449] vcan1: entered allmulticast mode [ 1275.893371][ T5454] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1276.088181][ T5468] netlink: 'syz.2.13899': attribute type 3 has an invalid length. [ 1276.244150][ T5441] loop4: detected capacity change from 0 to 32768 [ 1277.131782][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13910'. [ 1277.390570][ T5512] netlink: 10 bytes leftover after parsing attributes in process `syz.5.13915'. [ 1277.567119][ T5486] loop2: detected capacity change from 0 to 32768 [ 1277.678913][ T5486] ERROR: (device loop2): diAllocAG: numfree > numinos [ 1277.678913][ T5486] [ 1277.733895][ T5486] ERROR: (device loop2): remounting filesystem as read-only [ 1277.776899][ T5486] ialloc: diAlloc returned -5! [ 1277.810153][ T5528] loop5: detected capacity change from 0 to 256 [ 1278.293991][ T6127] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1278.493175][ T6127] usb 3-1: Using ep0 maxpacket: 16 [ 1278.493465][ T5554] kAFS: unable to lookup cell '/,' [ 1278.502309][ T6127] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1278.522333][ T6127] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1278.542311][ T6127] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1278.562243][ T6127] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1278.591958][ T6127] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1278.612156][ T6127] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1278.643062][ T6127] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1278.683810][ T6127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.712162][ T6127] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 1278.784651][ T5569] netlink: 60 bytes leftover after parsing attributes in process `syz.4.13931'. [ 1278.939359][ T6127] scsi host1: usb-storage 3-1:1.0 [ 1279.148462][ T5588] loop5: detected capacity change from 0 to 2048 [ 1279.179791][ T5588] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1279.195221][ T6127] usb 3-1: USB disconnect, device number 64 [ 1279.238642][ T5590] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1279.317050][ T5588] syz.5.13936: attempt to access beyond end of device [ 1279.317050][ T5588] loop5: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 1279.334781][ T5588] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1) [ 1279.988565][ T5620] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1280.447027][ T5638] loop5: detected capacity change from 0 to 4096 [ 1280.466731][ T5644] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1280.858692][ T5658] veth0_to_bond: entered allmulticast mode [ 1280.889262][ T5658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13956'. [ 1280.945719][ T5658] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 1281.342559][ T5679] Timeout policy `syz0' can only be used by L3 protocol number 22 [ 1281.863286][ T5705] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1281.931358][ T5708] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1281.942711][ T5708] bridge0: port 5(veth0_to_bridge) entered disabled state [ 1281.951983][ T5708] veth0_to_bridge: entered allmulticast mode [ 1282.026304][ T5708] veth0_to_bridge: entered promiscuous mode [ 1282.032846][ T5708] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1282.040162][ T5708] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 1282.137271][ T5713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13975'. [ 1282.638410][ T5737] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 1282.926145][ T5749] kernel read not supported for file /7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 5749 comm: syz.4.13988) [ 1282.982339][ T27] kauditd_printk_skb: 3817 callbacks suppressed [ 1282.982354][ T27] audit: type=1800 audit(1751554930.927:4111): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13988" name=A0F29C1437B3CFF8C3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=99501 res=0 errno=0 [ 1283.309789][ T23] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1283.377057][ T5726] loop0: detected capacity change from 0 to 32768 [ 1283.476306][ T5774] x_tables: duplicate underflow at hook 2 [ 1283.489319][ T5726] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1283.506621][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 1283.544255][ T23] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1283.593426][ T23] usb 6-1: config 0 has no interface number 0 [ 1283.631880][ T23] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1283.666874][ T23] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1283.692789][ T23] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1283.707845][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.735169][ T23] usb 6-1: Product: syz [ 1283.750075][ T23] usb 6-1: Manufacturer: syz [ 1283.754728][ T23] usb 6-1: SerialNumber: syz [ 1283.795696][ T23] usb 6-1: config 0 descriptor?? [ 1283.850673][ T6165] ocfs2: Unmounting device (7,0) on (node local) [ 1284.271219][ T23] appletouch 6-1:0.85: Failed to request geyser raw mode [ 1284.294131][ T23] appletouch: probe of 6-1:0.85 failed with error -5 [ 1284.339693][ T23] usb 6-1: USB disconnect, device number 21 [ 1284.903615][ T5826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14015'. [ 1285.374624][ T5845] netlink: 84 bytes leftover after parsing attributes in process `syz.0.14022'. [ 1285.853342][ T5865] loop5: detected capacity change from 0 to 1024 [ 1285.986251][ T6181] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1286.651833][ T5902] loop5: detected capacity change from 0 to 256 [ 1286.661591][ T5902] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1286.680319][ T5902] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 1286.706887][ T5902] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1286.835258][ T23] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1286.930809][ T5912] netlink: 72 bytes leftover after parsing attributes in process `syz.0.14053'. [ 1287.036279][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1287.043316][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.060588][ T23] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.081871][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1287.092715][ T23] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1287.111741][ T23] usb 3-1: Product: syz [ 1287.115937][ T23] usb 3-1: Manufacturer: syz [ 1287.142090][ T23] hub 3-1:4.0: USB hub found [ 1287.252508][ T5923] loop0: detected capacity change from 0 to 64 [ 1287.357035][ T23] hub 3-1:4.0: 9 ports detected [ 1287.372445][ T23] hub 3-1:4.0: insufficient power available to use all downstream ports [ 1287.570078][ T23] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 1287.586844][ T23] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 1287.649561][ T23] usb 3-1: USB disconnect, device number 65 [ 1287.731542][ T5935] loop5: detected capacity change from 0 to 8 [ 1287.782919][ T5935] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1287.794629][ T5935] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1287.803200][ T5935] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1287.814463][ T5935] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 1287.822678][ T5935] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.830176][ T5935] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.836688][ T5935] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.843743][ T5935] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.850551][ T5935] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.857130][ T5935] SQUASHFS error: Failed to read block 0x4de: -5 [ 1287.864084][ T5935] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1287.881457][ T27] audit: type=1800 audit(1751554935.604:4112): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.14064" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 1288.141870][ T5929] loop4: detected capacity change from 0 to 32768 [ 1288.169897][ T5929] [ 1288.169897][ T5929] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1288.169897][ T5929] [ 1288.243746][ T5929] ERROR: (device loop4): dtSearch: stack overrun! [ 1288.243746][ T5929] [ 1288.252144][ T5945] macvlan0: entered promiscuous mode [ 1288.260601][ T5945] macvlan0: entered allmulticast mode [ 1288.271959][ T5929] ERROR: (device loop4): remounting filesystem as read-only [ 1288.303272][ T5949] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1288.320853][ T5929] btstack dump: [ 1288.324341][ T5929] bn = 0, index = 0 [ 1288.367782][ T5929] bn = 0, index = 0 [ 1288.381189][ T5929] bn = 0, index = 0 [ 1288.385100][ T5929] bn = 0, index = 0 [ 1288.388943][ T5929] bn = 0, index = 0 [ 1288.417193][ T5929] bn = 0, index = 0 [ 1288.445810][ T5929] bn = 0, index = 0 [ 1288.449671][ T5929] bn = 0, index = 0 [ 1288.466682][ T5929] jfs_lookup: dtSearch returned -5 [ 1288.571669][ T5957] loop2: detected capacity change from 0 to 8 [ 1288.666170][ T5953] loop0: detected capacity change from 0 to 8192 [ 1288.701749][ T5953] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1288.808849][ T5953] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 1288.863898][ T5962] loop4: detected capacity change from 0 to 2048 [ 1288.879212][ T5953] REISERFS (device loop0): using ordered data mode [ 1288.903210][ T5953] reiserfs: using flush barriers [ 1288.928683][ T5962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1288.960487][ T5953] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1289.013185][ T5953] REISERFS (device loop0): checking transaction log (loop0) [ 1289.261278][ T5953] REISERFS (device loop0): Using tea hash to sort names [ 1289.277703][ T5953] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 1289.906509][ T5987] loop2: detected capacity change from 0 to 4096 [ 1290.035924][ T5997] loop4: detected capacity change from 0 to 8 [ 1290.447610][ T6009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14099'. [ 1290.476145][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14099'. [ 1290.533272][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14100'. [ 1290.816158][ T6021] loop2: detected capacity change from 0 to 2048 [ 1290.865505][ T6024] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1290.937654][ T6021] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=0, inode=35184372097012, rec_len=8192, name_len=0 [ 1291.026745][ T6021] Remounting filesystem read-only [ 1291.160020][ T6007] loop5: detected capacity change from 0 to 40427 [ 1291.176236][ T6007] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 1291.197987][ T6007] F2FS-fs (loop5): invalid crc value [ 1291.206554][ T6007] F2FS-fs (loop5): Found nat_bits in checkpoint [ 1291.276293][ T6007] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 1291.690562][ T6028] loop0: detected capacity change from 0 to 32768 [ 1291.707595][ T6028] (syz.0.14108,6028,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1291.740472][ T6028] (syz.0.14108,6028,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1291.803300][ T6028] (syz.0.14108,6028,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1291.836443][ T6028] JBD2: Ignoring recovery information on journal [ 1291.876902][ T6028] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1292.069199][ T6053] tmpfs: Bad value for 'mpol' [ 1292.127850][ T6028] (syz.0.14108,6028,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc9ee627, computed 0x1fb6df54. Applying ECC. [ 1292.152358][ T6028] (syz.0.14108,6028,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xc9ee627, computed 0xfc4047c [ 1292.190040][ T6028] (syz.0.14108,6028,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1292.205508][ T6028] (syz.0.14108,6028,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1292.220897][ T6028] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 3 [ 1292.234105][ T6028] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 1292.251031][ T27] audit: type=1326 audit(1751554939.716:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.2.14119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1292.283313][ T6028] (syz.0.14108,6028,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1292.313657][ T6028] (syz.0.14108,6028,1):ocfs2_mknod:314 ERROR: status = -5 [ 1292.321128][ T27] audit: type=1326 audit(1751554939.716:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.2.14119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1292.344068][ T6028] (syz.0.14108,6028,1):ocfs2_mknod:502 ERROR: status = -5 [ 1292.352681][ T6028] (syz.0.14108,6028,1):ocfs2_create:676 ERROR: status = -5 [ 1292.372481][ T27] audit: type=1326 audit(1751554939.716:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.2.14119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1292.404878][ T27] audit: type=1326 audit(1751554939.716:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.2.14119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1292.430576][ T27] audit: type=1326 audit(1751554939.716:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6056 comm="syz.2.14119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1292.438599][ T6165] ocfs2: Unmounting device (7,0) on (node local) [ 1292.453049][ C0] vkms_vblank_simulate: vblank timer overrun [ 1292.469328][ T6063] loop5: detected capacity change from 0 to 256 [ 1292.513845][ T6061] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 1292.537247][ T6061] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 1292.707040][ T6067] ieee802154 phy0 wpan0: encryption failed: -22 [ 1293.410210][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14137'. [ 1293.421202][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14137'. [ 1293.462321][ T6093] bond2: entered promiscuous mode [ 1293.467576][ T6093] bond2: entered allmulticast mode [ 1293.473025][ T6093] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1293.780083][ T6089] loop0: detected capacity change from 0 to 32768 [ 1293.838777][ T6089] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 1293.838777][ T6089] [ 1293.880094][ T6089] ERROR: (device loop0): remounting filesystem as read-only [ 1293.890675][ T6089] xtLookup: xtSearch returned -5 [ 1294.224295][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14148'. [ 1294.438738][ T6122] loop0: detected capacity change from 0 to 1024 [ 1294.504359][ T6122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1294.590935][ T6122] EXT4-fs error (device loop0): __ext4_remount:6741: comm syz.0.14150: Abort forced by user [ 1294.616882][ T6122] EXT4-fs (loop0): Remounting filesystem read-only [ 1294.634463][ T6122] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1294.721315][ T6165] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1294.882084][ T6140] loop0: detected capacity change from 0 to 8 [ 1294.939649][ T6140] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1294.980499][ T6140] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1295.006506][ T6140] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1295.040189][ T6140] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 1295.062729][ T6140] SQUASHFS error: Failed to read block 0x4de: -5 [ 1295.085987][ T6140] SQUASHFS error: Failed to read block 0x4de: -5 [ 1295.104279][ T6140] SQUASHFS error: Failed to read block 0x4de: -5 [ 1295.140751][ T6140] SQUASHFS error: Failed to read block 0x4de: -5 [ 1295.151565][ T6140] SQUASHFS error: Failed to read block 0x4de: -5 [ 1295.160103][ T6140] SQUASHFS error: Failed to read block 0x4de: -5 [ 1295.179738][ T6140] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1295.183370][ T6149] netlink: 'syz.2.14161': attribute type 1 has an invalid length. [ 1295.201376][ T27] audit: type=1800 audit(1751554942.462:4118): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.14154" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 1295.222290][ T6149] netlink: 'syz.2.14161': attribute type 2 has an invalid length. [ 1295.409800][ T6159] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 1295.942969][ T6190] xt_cgroup: invalid path, errno=-2 [ 1295.972741][ T6192] loop4: detected capacity change from 0 to 256 [ 1296.045007][ T6192] FAT-fs (loop4): Directory bread(block 64) failed [ 1296.067529][ T6192] FAT-fs (loop4): Directory bread(block 65) failed [ 1296.089650][ T6192] FAT-fs (loop4): Directory bread(block 66) failed [ 1296.117134][ T6192] FAT-fs (loop4): Directory bread(block 67) failed [ 1296.138833][ T6192] FAT-fs (loop4): Directory bread(block 68) failed [ 1296.164598][ T6192] FAT-fs (loop4): Directory bread(block 69) failed [ 1296.184424][ T6192] FAT-fs (loop4): Directory bread(block 70) failed [ 1296.229225][ T6192] FAT-fs (loop4): Directory bread(block 71) failed [ 1296.229347][ T6192] FAT-fs (loop4): Directory bread(block 72) failed [ 1296.229373][ T6192] FAT-fs (loop4): Directory bread(block 73) failed [ 1296.419876][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14184'. [ 1296.617632][ T6236] loop0: detected capacity change from 0 to 256 [ 1296.700807][ T6236] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1296.846891][ T6243] loop2: detected capacity change from 0 to 8 [ 1296.915835][ T6243] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1296.937109][ T6243] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1296.978356][ T6243] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1296.985405][ T6243] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 1296.995371][ T6243] SQUASHFS error: Failed to read block 0x4de: -5 [ 1297.006490][ T6243] SQUASHFS error: Failed to read block 0x4de: -5 [ 1297.016549][ T6243] SQUASHFS error: Failed to read block 0x4de: -5 [ 1297.023185][ T6243] SQUASHFS error: Failed to read block 0x4de: -5 [ 1297.029729][ T6243] SQUASHFS error: Failed to read block 0x4de: -5 [ 1297.036637][ T6243] SQUASHFS error: Failed to read block 0x4de: -5 [ 1297.065873][ T6243] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1297.077168][ T27] audit: type=1800 audit(1751554944.232:4119): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14192" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1297.155209][ T6165] bond0: (slave syz_tun): Releasing backup interface [ 1297.200036][ T9] infiniband syz1: ib_query_port failed (-19) [ 1297.536018][ T6264] netlink: 288 bytes leftover after parsing attributes in process `syz.2.14202'. [ 1297.670140][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.714446][ T6266] loop5: detected capacity change from 0 to 4096 [ 1297.747189][ T6266] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 1297.897262][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.901963][ T6266] ntfs3: loop5: failed to convert "c46c" to cp866 [ 1298.057135][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.260725][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.653879][ T6282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1298.666789][ T6282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1298.680361][ T6282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1298.690881][ T6279] libceph: resolve '. [ 1298.690881][ T6279] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1298.690881][ T6279] ' (ret=-3): failed [ 1298.705494][ T6287] loop4: detected capacity change from 0 to 8 [ 1298.778448][ T6282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1298.809652][ T6282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1298.818564][ T6282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1298.869103][T24141] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1298.876850][T24141] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1298.886449][T24141] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1298.926137][T24141] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1298.939507][T24141] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1298.939823][ T6287] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1298.966004][T24141] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1299.008061][ T6287] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1299.015779][ T6287] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1299.022611][ T6287] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1299.029447][ T27] audit: type=1800 audit(1751554946.057:4120): pid=6287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.14209" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 1299.523998][ T6307] netlink: 5 bytes leftover after parsing attributes in process `syz.5.14219'. [ 1299.548485][ T6307] 0XD: renamed from gretap0 (while UP) [ 1299.568202][ T6307] 0XD: entered allmulticast mode [ 1299.585544][ T6307] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 1300.292905][ T6334] netlink: 'syz.5.14229': attribute type 1 has an invalid length. [ 1300.322486][ T6334] netlink: 'syz.5.14229': attribute type 2 has an invalid length. [ 1300.343808][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14229'. [ 1300.370153][ T6336] IPv6: Can't replace route, no match found [ 1301.177393][ T6282] Bluetooth: hci0: command tx timeout [ 1301.643755][ T6277] chnl_net:caif_netlink_parms(): no params data found [ 1301.803041][ T11] bond0: (slave wlan1): Releasing backup interface [ 1302.148562][ T6338] loop4: detected capacity change from 0 to 40427 [ 1302.227465][ T6338] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1302.235250][ T6338] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1302.341733][ T6338] F2FS-fs (loop4): invalid crc value [ 1302.488032][ T6338] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1302.505998][ T6382] loop5: detected capacity change from 0 to 32768 [ 1302.703526][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.755889][ T6277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.778939][ T6277] bridge_slave_0: entered allmulticast mode [ 1302.796049][ T6277] bridge_slave_0: entered promiscuous mode [ 1302.835412][ T6277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.859364][ T6338] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1302.867259][ T6277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.874541][ T6277] bridge_slave_1: entered allmulticast mode [ 1302.949948][ T6338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1302.991635][ T6277] bridge_slave_1: entered promiscuous mode [ 1303.139473][ T6408] loop2: detected capacity change from 0 to 64 [ 1303.315075][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.322603][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.411205][ T6282] Bluetooth: hci0: command tx timeout [ 1303.456769][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.464244][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.594819][ T11] team0: left allmulticast mode [ 1303.599725][ T11] team_slave_0: left allmulticast mode [ 1303.640963][ T11] team_slave_1: left allmulticast mode [ 1303.677397][ T11] team0: left promiscuous mode [ 1303.704300][ T11] team_slave_0: left promiscuous mode [ 1303.710085][ T11] team_slave_1: left promiscuous mode [ 1303.743727][ T11] bridge0: port 3(team0) entered disabled state [ 1303.822233][ T11] bridge_slave_1: left allmulticast mode [ 1303.839788][ T11] bridge_slave_1: left promiscuous mode [ 1303.856861][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.949597][ T11] bridge_slave_0: left allmulticast mode [ 1303.957941][ T11] bridge_slave_0: left promiscuous mode [ 1303.967766][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.039524][ T11] veth1_vlan: left promiscuous mode [ 1304.722015][ T11] bond5 (unregistering): Released all slaves [ 1304.820645][ T6436] loop4: detected capacity change from 0 to 32768 [ 1304.840440][ T6436] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1304.874715][ T6436] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1304.949233][ T11] bond4 (unregistering): Released all slaves [ 1304.980363][T24139] ocfs2: Unmounting device (7,4) on (node local) [ 1305.063957][ T11] bond3 (unregistering): Released all slaves [ 1305.315725][ T11] bond2 (unregistering): Released all slaves [ 1305.327863][ T11] bond1 (unregistering): Released all slaves [ 1305.634893][ T6282] Bluetooth: hci0: command tx timeout [ 1305.820990][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1305.884178][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1305.941237][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.999610][ T11] bond0 (unregistering): (slave 0@): Releasing backup interface [ 1306.248940][ T11] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1306.628703][ T11] bond0 (unregistering): Released all slaves [ 1306.740112][ T6277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1306.752564][ T6277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.762022][ T6425] netdevsim netdevsim2 : renamed from netdevsim0 [ 1307.005247][ T6277] team0: Port device team_slave_0 added [ 1307.026898][ T6277] team0: Port device team_slave_1 added [ 1307.084318][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.097691][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.240221][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1307.247210][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.329703][ T6457] cgroup: none used incorrectly [ 1307.338772][ T6277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1307.400426][ T6277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1307.407443][ T6277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.463719][ T6277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.590136][ T6467] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14270'. [ 1307.613740][ T6467] netlink: 76 bytes leftover after parsing attributes in process `syz.4.14270'. [ 1307.800858][ T6277] hsr_slave_0: entered promiscuous mode [ 1307.836074][ T6277] hsr_slave_1: entered promiscuous mode [ 1307.847445][ T6282] Bluetooth: hci0: command tx timeout [ 1308.317336][ T6465] loop5: detected capacity change from 0 to 32768 [ 1308.376705][ T6465] syz.5.14269: attempt to access beyond end of device [ 1308.376705][ T6465] loop5: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 1308.413208][ T6465] metapage_write_end_io: I/O error [ 1308.423188][ T6465] ERROR: (device loop5): diWrite: ixpxd invalid [ 1308.423188][ T6465] [ 1308.451662][ T6465] ERROR: (device loop5): remounting filesystem as read-only [ 1308.467899][ T6465] ERROR: (device loop5): txCommit: [ 1308.467899][ T6465] [ 1308.484661][ T6465] blkno = 8f7c0, nblocks = 1 [ 1308.489865][ T6465] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 1308.489865][ T6465] [ 1308.519164][ T6465] ERROR: (device loop5): dbAllocNext: Corrupt dmap page [ 1308.519164][ T6465] [ 1308.562618][ T6465] ialloc: diAlloc returned -5! [ 1308.607923][T24230] syz-executor: attempt to access beyond end of device [ 1308.607923][T24230] loop5: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 1308.628314][T24230] metapage_write_end_io: I/O error [ 1308.679267][ T6277] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1308.693075][ T6277] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1308.719563][ T6277] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1308.736535][ T6277] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1308.858431][ T6277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.900868][ T6277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.947364][T19267] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.954564][T19267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.985369][T19267] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.992566][T19267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1309.394254][ T6277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.747969][ T6277] veth0_vlan: entered promiscuous mode [ 1309.768551][ T6277] veth1_vlan: entered promiscuous mode [ 1309.826746][ T6277] veth0_macvtap: entered promiscuous mode [ 1309.838017][ T6277] veth1_macvtap: entered promiscuous mode [ 1309.860035][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.873015][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.883763][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.894745][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.906253][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.917773][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.930591][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.952122][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.963092][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.980224][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.995662][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.006374][ T6277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1310.017178][ T6277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.031509][ T6277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1310.046739][ T6277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.056368][ T6277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.065725][ T6277] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.076389][ T6277] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.188838][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.196704][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.237316][T19267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.245888][T19267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.628307][ T6553] loop2: detected capacity change from 0 to 256 [ 1310.722089][ T27] audit: type=1800 audit(1751554956.984:4121): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14277" name="file1" dev="loop2" ino=1048741 res=0 errno=0 [ 1311.257762][ T6578] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.14290'. [ 1311.353638][ T6583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14293'. [ 1312.130607][ T6613] loop5: detected capacity change from 0 to 256 [ 1312.155052][ T6613] exfat: Deprecated parameter 'utf8' [ 1312.215805][ T6613] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 1312.594156][ T6630] tmpfs: Bad value for 'nr_blocks' [ 1313.523690][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14322'. [ 1313.809400][ T6670] xt_cluster: node mask cannot exceed total number of nodes [ 1313.985003][ T6674] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14327'. [ 1314.018632][ T6677] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1314.319099][ T6687] netlink: 'syz.2.14333': attribute type 10 has an invalid length. [ 1314.407447][ T6691] netlink: 260 bytes leftover after parsing attributes in process `syz.6.14334'. [ 1314.432459][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1314.442911][ T6687] bond0: entered promiscuous mode [ 1314.450399][ T6687] bond_slave_1: entered promiscuous mode [ 1314.473187][ T6687] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1314.480946][ T6687] bond0: entered allmulticast mode [ 1314.486413][ T6687] bond_slave_1: entered allmulticast mode [ 1314.492243][ T6687] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1314.506048][ T6693] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14335'. [ 1314.507209][ T6687] team0: Port device bond0 added [ 1315.152091][ T6699] loop6: detected capacity change from 0 to 32768 [ 1315.241670][ T6689] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1315.242990][ T6699] ERROR: (device loop6): diNewExt: no free extents [ 1315.242990][ T6699] [ 1315.280534][ T6699] ERROR: (device loop6): remounting filesystem as read-only [ 1315.298642][ T6699] ialloc: diAlloc returned -5! [ 1315.830459][ T6723] QAT: Device 127 not found [ 1316.339863][ T6745] loop2: detected capacity change from 0 to 2048 [ 1316.380097][ T6745] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1316.437811][ T6745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1316.478450][ T6754] MTD: Attempt to mount non-MTD device "/dev/nbd6" [ 1316.496984][ T6754] syz.6.14360: attempt to access beyond end of device [ 1316.496984][ T6754] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1316.571831][ T6282] Bluetooth: hci0: command 0x080f tx timeout [ 1317.854089][ T6251] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 1318.040328][ T6821] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14392'. [ 1318.080027][ T6251] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.100337][ T6251] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1318.129416][ T6251] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1318.192131][ T6251] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1318.208296][ T6251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.226799][ T6251] usb 3-1: Product: syz [ 1318.238456][ T6251] usb 3-1: Manufacturer: syz [ 1318.249666][ T6251] usb 3-1: SerialNumber: syz [ 1318.266193][ T6251] usb 3-1: config 0 descriptor?? [ 1318.795746][ T6251] usb 3-1: USB disconnect, device number 66 [ 1318.995060][ T6856] ALSA: mixer_oss: invalid OSS volume '' [ 1319.556180][ T6881] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 1319.570913][ T6881] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 1319.842116][ T28] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1320.057475][ T28] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.070459][ T28] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1320.080605][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.088823][ T28] usb 3-1: Product: syz [ 1320.093115][ T28] usb 3-1: Manufacturer: syz [ 1320.097708][ T28] usb 3-1: SerialNumber: syz [ 1320.548924][ T28] usb 3-1: probing VID:PID(0424:012C) ẜ垛䤾ꆟἉ苊꜁᭖迎涯ὠ聑裼督ꪔ [ 1320.572144][ T28] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 1320.594290][ T28] vub300: probe of 3-1:2.0 failed with error -22 [ 1320.602931][ T28] usb 3-1: USB disconnect, device number 67 [ 1320.620487][ T6892] x_tables: unsorted underflow at hook 2 [ 1320.927221][ T6904] loop6: detected capacity change from 0 to 256 [ 1320.968818][ T6904] FAT-fs (loop6): Directory bread(block 64) failed [ 1320.983452][ T6904] FAT-fs (loop6): Directory bread(block 65) failed [ 1320.991350][ T6904] FAT-fs (loop6): Directory bread(block 66) failed [ 1320.999792][ T6904] FAT-fs (loop6): Directory bread(block 67) failed [ 1321.006545][ T6904] FAT-fs (loop6): Directory bread(block 68) failed [ 1321.015683][ T6904] FAT-fs (loop6): Directory bread(block 69) failed [ 1321.023308][ T6904] FAT-fs (loop6): Directory bread(block 70) failed [ 1321.030165][ T6904] FAT-fs (loop6): Directory bread(block 71) failed [ 1321.036847][ T6904] FAT-fs (loop6): Directory bread(block 72) failed [ 1321.043797][ T6904] FAT-fs (loop6): Directory bread(block 73) failed [ 1321.468343][ T6920] loop2: detected capacity change from 0 to 512 [ 1321.485582][ T6920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1321.573636][ T6920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1321.627990][ T6920] ext4 filesystem being mounted at /3689/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1321.695926][ T27] audit: type=1400 audit(1751554967.245:4122): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A0C7E pid=6932 comm="syz.6.14441" [ 1321.764840][ T27] audit: type=1800 audit(1751554967.320:4123): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14435" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 1321.885377][ T6178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1321.903769][ T6939] loop4: detected capacity change from 0 to 256 [ 1321.930113][ T6939] exfat: Deprecated parameter 'namecase' [ 1321.935847][ T6939] exfat: Deprecated parameter 'namecase' [ 1321.951823][ T6939] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 1322.622226][ T6961] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1322.700548][ T6965] netlink: 248 bytes leftover after parsing attributes in process `syz.5.14456'. [ 1323.310730][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14469'. [ 1323.341551][ T6993] netlink: 'syz.4.14469': attribute type 5 has an invalid length. [ 1323.497358][ T7001] netlink: 'syz.6.14474': attribute type 7 has an invalid length. [ 1323.685831][ T7009] loop6: detected capacity change from 0 to 16 [ 1323.725909][ T7009] erofs: (device loop6): mounted with root inode @ nid 36. [ 1323.798400][ T7009] syz.6.14478: attempt to access beyond end of device [ 1323.798400][ T7009] loop6: rw=0, sector=8, nr_sectors = 16 limit=16 [ 1323.908276][ T7017] cgroup: Name too long [ 1324.381998][ T7040] netlink: 44 bytes leftover after parsing attributes in process `syz.4.14494'. [ 1324.391345][ T7040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14494'. [ 1324.734806][ T7056] netlink: 11 bytes leftover after parsing attributes in process `syz.6.14502'. [ 1325.343768][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14515'. [ 1325.840768][ T7105] loop5: detected capacity change from 0 to 64 [ 1326.404705][ T7082] loop4: detected capacity change from 0 to 32768 [ 1326.491172][ T7082] [ 1326.491172][ T7082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1326.491172][ T7082] [ 1326.696760][ T7082] [ 1326.696760][ T7082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1326.696760][ T7082] [ 1326.758983][ T7082] [ 1326.758983][ T7082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1326.758983][ T7082] [ 1326.789142][ T7124] loop2: detected capacity change from 0 to 1024 [ 1326.826402][ T7082] [ 1326.826402][ T7082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1326.826402][ T7082] [ 1326.837038][ T7124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1326.872087][ T7124] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1326.953924][ T7082] [ 1326.953924][ T7082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1326.953924][ T7082] [ 1326.979090][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1327.165593][ T7082] [ 1327.165593][ T7082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1327.165593][ T7082] [ 1327.195441][ T7124] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2797: inode #2: comm syz.2.14528: corrupted in-inode xattr: bad e_name length [ 1327.237762][ T7082] [ 1327.237762][ T7082] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1327.237762][ T7082] [ 1327.321058][ T111] [ 1327.321058][ T111] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1327.321058][ T111] [ 1327.332278][ T7124] EXT4-fs (loop2): Remounting filesystem read-only [ 1327.567569][ T6178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1327.647616][T24139] [ 1327.647616][T24139] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1327.647616][T24139] [ 1327.849492][T24139] [ 1327.849492][T24139] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1327.849492][T24139] [ 1328.697670][ T7149] loop2: detected capacity change from 0 to 2048 [ 1328.835951][ T7149] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1328.958462][ T7159] x_tables: duplicate underflow at hook 4 [ 1329.352837][ T7166] loop4: detected capacity change from 0 to 1024 [ 1330.257561][ T7183] bridge0: port 5(netdevsim0) entered blocking state [ 1330.285323][ T7183] bridge0: port 5(netdevsim0) entered disabled state [ 1330.329919][ T7185] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1330.893533][ T7199] netlink: 48 bytes leftover after parsing attributes in process `syz.4.14556'. [ 1331.932870][ T7224] loop6: detected capacity change from 0 to 512 [ 1331.995434][ T7224] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1332.076171][ T7224] EXT4-fs (loop6): 1 truncate cleaned up [ 1332.119388][ T7224] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1332.350431][ T7224] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.14565: corrupted in-inode xattr: overlapping e_value [ 1332.444466][ T7241] x_tables: unsorted entry at hook 3 [ 1332.472594][ T7224] EXT4-fs (loop6): Remounting filesystem read-only [ 1332.537506][ T7224] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1781: inode #15: comm syz.6.14565: unable to update i_inline_off [ 1332.832566][ T6277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1333.130138][ T27] audit: type=1326 audit(1751554977.956:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.2.14576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1333.278186][ T27] audit: type=1326 audit(1751554977.956:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.2.14576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1333.409532][ T27] audit: type=1326 audit(1751554978.003:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.2.14576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1333.440578][ T7259] ieee802154 phy0 wpan0: encryption failed: -90 [ 1333.541269][ T27] audit: type=1326 audit(1751554978.003:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.2.14576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1333.706397][ T27] audit: type=1326 audit(1751554978.003:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7254 comm="syz.2.14576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc80238e929 code=0x7ffc0000 [ 1333.787096][ T7265] loop4: detected capacity change from 0 to 512 [ 1333.826583][ T7265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1333.887447][ T7265] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1333.978341][ T7265] EXT4-fs (loop4): 1 truncate cleaned up [ 1333.985245][ T7265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1334.332136][ T7271] loop2: detected capacity change from 0 to 4096 [ 1334.399790][ T7271] ntfs3: loop2: ino=3, Correct links count -> 2. [ 1334.601325][ T7265] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 1334.639728][ T7265] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.14579: bg 0: block 7: invalid block bitmap [ 1334.812042][T24139] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1335.567623][ T7271] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1335.780809][ T27] audit: type=1800 audit(1751554980.435:4129): pid=7271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14580" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 1336.083530][ T27] audit: type=1326 audit(1751554980.725:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.6.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376a78e929 code=0x7ffc0000 [ 1336.250149][ T27] audit: type=1326 audit(1751554980.725:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.6.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376a78e929 code=0x7ffc0000 [ 1336.463878][ T27] audit: type=1326 audit(1751554980.771:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.6.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f376a78e929 code=0x7ffc0000 [ 1336.642017][ T27] audit: type=1326 audit(1751554980.771:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7297 comm="syz.6.14582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f376a78e929 code=0x7ffc0000 [ 1336.816247][ T7312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14587'. [ 1336.894646][ T7312] netlink: 10 bytes leftover after parsing attributes in process `syz.2.14587'. [ 1337.328094][ T7324] netlink: 44 bytes leftover after parsing attributes in process `syz.6.14591'. [ 1337.533508][ T7323] loop2: detected capacity change from 0 to 4096 [ 1337.620180][ T7325] loop4: detected capacity change from 0 to 4096 [ 1337.656927][ T7323] ntfs3: loop2: ino=3, Correct links count -> 2. [ 1338.680861][ T7339] (null): rxe_set_mtu: Set mtu to 4096 [ 1338.686536][ T7339] lo speed is unknown, defaulting to 1000 [ 1338.854746][ T7339] lo speed is unknown, defaulting to 1000 [ 1338.968791][ T7339] lo speed is unknown, defaulting to 1000 [ 1340.317494][ T7339] infiniband sz1: set active [ 1340.322259][ T23] lo speed is unknown, defaulting to 1000 [ 1340.353013][ T7339] infiniband sz1: added lo [ 1340.393229][ T7339] sz1: rxe_create_cq: returned err = -12 [ 1340.399055][ T7339] infiniband sz1: Couldn't create ib_mad CQ [ 1340.491212][ T7339] infiniband sz1: Couldn't open port 1 [ 1340.686510][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14606'. [ 1340.749546][ T7339] RDS/IB: sz1: added [ 1340.785392][ T7339] smc: adding ib device sz1 with port count 1 [ 1340.823020][ T7339] smc: ib device sz1 port 1 has pnetid [ 1340.882469][ T7339] lo speed is unknown, defaulting to 1000 [ 1340.891928][ T23] lo speed is unknown, defaulting to 1000 [ 1341.788282][ T7387] netlink: 136 bytes leftover after parsing attributes in process `syz.6.14614'. [ 1342.096498][ T7339] lo speed is unknown, defaulting to 1000 [ 1343.099146][ T7339] lo speed is unknown, defaulting to 1000 [ 1344.118823][ T7339] lo speed is unknown, defaulting to 1000 [ 1344.917014][ T7382] siw: device registration error -23 [ 1344.922610][ T7423] lo speed is unknown, defaulting to 1000 [ 1344.928401][ T7423] lo speed is unknown, defaulting to 1000 [ 1344.990348][ T7423] lo speed is unknown, defaulting to 1000 [ 1345.134774][ T7423] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1345.325144][ T7446] loop4: detected capacity change from 0 to 256 [ 1345.348200][ T7423] lo speed is unknown, defaulting to 1000 [ 1345.363319][ T7447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14632'. [ 1345.427471][ T7423] lo speed is unknown, defaulting to 1000 [ 1345.488238][ T7423] lo speed is unknown, defaulting to 1000 [ 1345.587935][ T7423] lo speed is unknown, defaulting to 1000 [ 1346.436456][ T7466] kernel profiling enabled (shift: 62) [ 1346.490153][ T7466] profiling shift: 62 too large [ 1348.395131][ T7513] loop4: detected capacity change from 0 to 512 [ 1348.547987][ T7513] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1348.556294][ T7513] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1348.644967][ T7513] __quota_error: 5 callbacks suppressed [ 1348.644982][ T7513] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 1348.756345][ T7513] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 1348.834698][ T7513] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.14658: Failed to acquire dquot type 1 [ 1348.894477][ T7513] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.14658: bg 0: block 40: padding at end of block bitmap is not set [ 1348.965650][ T7513] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1349.006800][ T7513] EXT4-fs (loop4): 1 truncate cleaned up [ 1349.441371][ T7513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1349.670484][ T7530] netlink: 22 bytes leftover after parsing attributes in process `syz.2.14667'. [ 1349.886949][T24139] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1350.396505][ T6206] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1350.438367][ T7542] loop5: detected capacity change from 0 to 2048 [ 1350.498385][ T7546] loop6: detected capacity change from 0 to 256 [ 1350.571750][ T7547] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1350.648828][ T6206] usb 3-1: config 0 has no interfaces? [ 1350.680979][ T6206] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1350.746498][ T6206] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.806026][ T6206] usb 3-1: Product: syz [ 1350.810257][ T6206] usb 3-1: Manufacturer: syz [ 1350.868414][ T6206] usb 3-1: SerialNumber: syz [ 1350.898332][ T27] audit: type=1326 audit(1751554994.568:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.4.14675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1350.935270][ T6206] usb 3-1: config 0 descriptor?? [ 1351.053017][ T27] audit: type=1326 audit(1751554994.568:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.4.14675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1351.199474][ T27] audit: type=1326 audit(1751554994.615:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.4.14675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1351.211381][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14676'. [ 1351.294018][ T27] audit: type=1326 audit(1751554994.615:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.4.14675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1351.316826][ T27] audit: type=1326 audit(1751554994.615:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7548 comm="syz.4.14675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1351.348857][ T7536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1351.398509][ T7536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.447686][ T6206] usb 3-1: USB disconnect, device number 68 [ 1351.956533][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14681'. [ 1352.309183][ T7566] infiniband syz0: set active [ 1353.614866][ T27] audit: type=1326 audit(1751554997.122:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.4.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1353.820311][ T27] audit: type=1326 audit(1751554997.141:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.4.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1353.888711][ T27] audit: type=1326 audit(1751554997.160:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7595 comm="syz.4.14698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f899678e929 code=0x7ffc0000 [ 1355.501809][ T7638] loop5: detected capacity change from 0 to 8 [ 1355.523113][ T7638] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1355.545555][ T6181] udevd[6181]: incorrect cramfs checksum on /dev/loop5 [ 1356.421630][ T7656] tmpfs: Bad value for 'nr_inodes' [ 1356.938501][ T7669] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 1357.180286][ T7654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1357.234840][ T7671] loop2: detected capacity change from 0 to 256 [ 1357.273974][ T7671] exfat: Deprecated parameter 'utf8' [ 1357.279323][ T7671] exfat: Deprecated parameter 'namecase' [ 1357.451016][ T7671] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1358.527046][ T7692] netlink: 'syz.2.14743': attribute type 5 has an invalid length. [ 1358.574132][ T6282] Bluetooth: hci0: command 0x080f tx timeout [ 1358.745705][ T7695] netlink: 4268 bytes leftover after parsing attributes in process `syz.6.14744'. [ 1360.743587][ T7737] loop5: detected capacity change from 0 to 512 [ 1360.806991][ T7737] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1360.897390][ T7717] loop4: detected capacity change from 0 to 32768 [ 1360.907855][ T7717] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.14756 (7717) [ 1360.923981][ T7717] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1360.934746][ T7717] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1360.944284][ T7717] BTRFS info (device loop4): using free space tree [ 1360.955327][ T7737] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1360.980500][ T7739] netlink: 'syz.2.14767': attribute type 10 has an invalid length. [ 1360.988437][ T7739] netlink: 40 bytes leftover after parsing attributes in process `syz.2.14767'. [ 1361.023344][ T7737] ext4 filesystem being mounted at /1674/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1361.148362][ T7717] BTRFS info (device loop4): enabling ssd optimizations [ 1361.194413][ T7737] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.14766: corrupted xattr block 19: overlapping e_value [ 1361.218594][ T7717] BTRFS info (device loop4): auto enabling async discard [ 1361.343743][ T7737] [ 1361.346113][ T7737] ====================================================== [ 1361.353129][ T7737] WARNING: possible circular locking dependency detected [ 1361.360160][ T7737] 6.6.95-syzkaller #0 Not tainted [ 1361.365183][ T7737] ------------------------------------------------------ [ 1361.372198][ T7737] syz.5.14766/7737 is trying to acquire lock: [ 1361.378258][ T7737] ffff888059d2f228 (&dquot->dq_lock){+.+.}-{3:3}, at: dqget+0x6fc/0xeb0 [ 1361.386629][ T7737] [ 1361.386629][ T7737] but task is already holding lock: [ 1361.393989][ T7737] ffff88802c6046c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1361.402962][ T7737] [ 1361.402962][ T7737] which lock already depends on the new lock. [ 1361.402962][ T7737] [ 1361.413362][ T7737] [ 1361.413362][ T7737] the existing dependency chain (in reverse order) is: [ 1361.422373][ T7737] [ 1361.422373][ T7737] -> #5 (&ei->xattr_sem){++++}-{3:3}: [ 1361.429952][ T7737] down_read+0x46/0x2e0 [ 1361.434644][ T7737] ext4_setattr+0x86b/0x1c90 [ 1361.439763][ T7737] notify_change+0xb0d/0xe10 [ 1361.444886][ T7737] chown_common+0x3f9/0x5a0 [ 1361.449922][ T7737] do_fchownat+0x168/0x270 [ 1361.454873][ T7737] __x64_sys_chown+0x82/0x90 [ 1361.459993][ T7737] do_syscall_64+0x55/0xb0 [ 1361.464942][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.471460][ T7737] [ 1361.471460][ T7737] -> #4 (jbd2_handle){++++}-{0:0}: [ 1361.478773][ T7737] start_this_handle+0x1e9d/0x20c0 [ 1361.484420][ T7737] jbd2__journal_start+0x2bb/0x5b0 [ 1361.490068][ T7737] jbd2_journal_start+0x2a/0x40 [ 1361.495446][ T7737] ocfs2_start_trans+0x376/0x6c0 [ 1361.500910][ T7737] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1361.507160][ T7737] ocfs2_dismount_volume+0x1e2/0x890 [ 1361.512975][ T7737] generic_shutdown_super+0x134/0x2b0 [ 1361.518876][ T7737] kill_block_super+0x44/0x90 [ 1361.524090][ T7737] deactivate_locked_super+0x97/0x100 [ 1361.529997][ T7737] cleanup_mnt+0x429/0x4c0 [ 1361.534952][ T7737] task_work_run+0x1ce/0x250 [ 1361.540085][ T7737] exit_to_user_mode_loop+0xe6/0x110 [ 1361.545907][ T7737] exit_to_user_mode_prepare+0xb1/0x140 [ 1361.551999][ T7737] syscall_exit_to_user_mode+0x1a/0x50 [ 1361.557984][ T7737] do_syscall_64+0x61/0xb0 [ 1361.562931][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.569359][ T7737] [ 1361.569359][ T7737] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 1361.577886][ T7737] down_read+0x46/0x2e0 [ 1361.582574][ T7737] ocfs2_start_trans+0x36a/0x6c0 [ 1361.588039][ T7737] ocfs2_shutdown_local_alloc+0x201/0xa10 [ 1361.594299][ T7737] ocfs2_dismount_volume+0x1e2/0x890 [ 1361.600115][ T7737] generic_shutdown_super+0x134/0x2b0 [ 1361.606017][ T7737] kill_block_super+0x44/0x90 [ 1361.611224][ T7737] deactivate_locked_super+0x97/0x100 [ 1361.617123][ T7737] cleanup_mnt+0x429/0x4c0 [ 1361.622066][ T7737] task_work_run+0x1ce/0x250 [ 1361.627185][ T7737] exit_to_user_mode_loop+0xe6/0x110 [ 1361.633011][ T7737] exit_to_user_mode_prepare+0xb1/0x140 [ 1361.639083][ T7737] syscall_exit_to_user_mode+0x1a/0x50 [ 1361.645070][ T7737] do_syscall_64+0x61/0xb0 [ 1361.650025][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.656466][ T7737] [ 1361.656466][ T7737] -> #2 (sb_internal#3){.+.+}-{0:0}: [ 1361.663966][ T7737] ocfs2_start_trans+0x26b/0x6c0 [ 1361.669435][ T7737] ocfs2_acquire_dquot+0x67b/0xaf0 [ 1361.675092][ T7737] dqget+0x77c/0xeb0 [ 1361.679516][ T7737] dquot_set_dqblk+0x2b/0xf90 [ 1361.684731][ T7737] quota_setquota+0x4b0/0x530 [ 1361.689932][ T7737] __se_sys_quotactl+0x27b/0x950 [ 1361.695401][ T7737] do_syscall_64+0x55/0xb0 [ 1361.700370][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.706802][ T7737] [ 1361.706802][ T7737] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 1361.715692][ T7737] down_write+0x97/0x1f0 [ 1361.720477][ T7737] ocfs2_create_local_dquot+0x1a4/0x1790 [ 1361.726647][ T7737] ocfs2_acquire_dquot+0x7cf/0xaf0 [ 1361.732290][ T7737] dqget+0x77c/0xeb0 [ 1361.736717][ T7737] dquot_set_dqblk+0x2b/0xf90 [ 1361.741918][ T7737] quota_setquota+0x4b0/0x530 [ 1361.747124][ T7737] __se_sys_quotactl+0x27b/0x950 [ 1361.752588][ T7737] do_syscall_64+0x55/0xb0 [ 1361.757541][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.763977][ T7737] [ 1361.763977][ T7737] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 1361.771652][ T7737] __lock_acquire+0x2ddb/0x7c80 [ 1361.777043][ T7737] lock_acquire+0x197/0x410 [ 1361.782076][ T7737] __mutex_lock+0x129/0xcc0 [ 1361.787115][ T7737] dqget+0x6fc/0xeb0 [ 1361.791546][ T7737] dquot_transfer+0x2f9/0x6d0 [ 1361.796771][ T7737] ext4_setattr+0x87d/0x1c90 [ 1361.801901][ T7737] notify_change+0xb0d/0xe10 [ 1361.807032][ T7737] chown_common+0x3f9/0x5a0 [ 1361.812071][ T7737] do_fchownat+0x168/0x270 [ 1361.817031][ T7737] __x64_sys_lchown+0x85/0x90 [ 1361.822239][ T7737] do_syscall_64+0x55/0xb0 [ 1361.827188][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1361.833621][ T7737] [ 1361.833621][ T7737] other info that might help us debug this: [ 1361.833621][ T7737] [ 1361.843852][ T7737] Chain exists of: [ 1361.843852][ T7737] &dquot->dq_lock --> jbd2_handle --> &ei->xattr_sem [ 1361.843852][ T7737] [ 1361.856469][ T7737] Possible unsafe locking scenario: [ 1361.856469][ T7737] [ 1361.863919][ T7737] CPU0 CPU1 [ 1361.869283][ T7737] ---- ---- [ 1361.874649][ T7737] rlock(&ei->xattr_sem); [ 1361.879078][ T7737] lock(jbd2_handle); [ 1361.885671][ T7737] lock(&ei->xattr_sem); [ 1361.892532][ T7737] lock(&dquot->dq_lock); [ 1361.896958][ T7737] [ 1361.896958][ T7737] *** DEADLOCK *** [ 1361.896958][ T7737] [ 1361.905099][ T7737] 3 locks held by syz.5.14766/7737: [ 1361.910295][ T7737] #0: ffff88807d362418 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1361.919463][ T7737] #1: ffff88802c604a10 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: chown_common+0x313/0x5a0 [ 1361.929849][ T7737] #2: ffff88802c6046c8 (&ei->xattr_sem){++++}-{3:3}, at: ext4_setattr+0x86b/0x1c90 [ 1361.939270][ T7737] [ 1361.939270][ T7737] stack backtrace: [ 1361.945156][ T7737] CPU: 1 PID: 7737 Comm: syz.5.14766 Not tainted 6.6.95-syzkaller #0 [ 1361.953228][ T7737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1361.963289][ T7737] Call Trace: [ 1361.966576][ T7737] [ 1361.969526][ T7737] dump_stack_lvl+0x16c/0x230 [ 1361.974238][ T7737] ? load_image+0x3b0/0x3b0 [ 1361.978746][ T7737] ? show_regs_print_info+0x20/0x20 [ 1361.983959][ T7737] ? print_circular_bug+0x12b/0x1a0 [ 1361.989165][ T7737] check_noncircular+0x2bd/0x3c0 [ 1361.994111][ T7737] ? look_up_lock_class+0x75/0x140 [ 1361.999231][ T7737] ? print_deadlock_bug+0x5d0/0x5d0 [ 1362.004434][ T7737] ? lockdep_lock+0xe0/0x220 [ 1362.009036][ T7737] ? _find_first_zero_bit+0xd3/0x100 [ 1362.014329][ T7737] __lock_acquire+0x2ddb/0x7c80 [ 1362.019198][ T7737] ? mark_lock+0x94/0x320 [ 1362.023538][ T7737] ? verify_lock_unused+0x140/0x140 [ 1362.028740][ T7737] ? __lock_acquire+0x1334/0x7c80 [ 1362.033783][ T7737] lock_acquire+0x197/0x410 [ 1362.038293][ T7737] ? dqget+0x6fc/0xeb0 [ 1362.042372][ T7737] ? __might_sleep+0xe0/0xe0 [ 1362.046973][ T7737] ? read_lock_is_recursive+0x20/0x20 [ 1362.052347][ T7737] ? mark_lock+0x94/0x320 [ 1362.056694][ T7737] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1362.062682][ T7737] __mutex_lock+0x129/0xcc0 [ 1362.067197][ T7737] ? dqget+0x6fc/0xeb0 [ 1362.071285][ T7737] ? percpu_counter_add_batch+0x1d9/0x280 [ 1362.077015][ T7737] ? lockdep_hardirqs_on+0x98/0x150 [ 1362.082219][ T7737] ? percpu_counter_add_batch+0x22b/0x280 [ 1362.087951][ T7737] ? dqget+0x6fc/0xeb0 [ 1362.092030][ T7737] ? mutex_lock_nested+0x20/0x20 [ 1362.096973][ T7737] ? percpu_counter_set+0x1a0/0x1a0 [ 1362.102182][ T7737] ? make_kuid+0x640/0x640 [ 1362.106608][ T7737] ? do_raw_spin_unlock+0x121/0x230 [ 1362.111815][ T7737] dqget+0x6fc/0xeb0 [ 1362.115727][ T7737] dquot_transfer+0x2f9/0x6d0 [ 1362.120414][ T7737] ? __dquot_transfer+0x22f0/0x22f0 [ 1362.125628][ T7737] ? down_read+0x1ac/0x2e0 [ 1362.130054][ T7737] ext4_setattr+0x87d/0x1c90 [ 1362.134653][ T7737] ? evm_inode_setattr+0x94/0x6a0 [ 1362.139689][ T7737] ? bpf_lsm_inode_setattr+0x9/0x10 [ 1362.144896][ T7737] ? try_break_deleg+0x79/0x120 [ 1362.149755][ T7737] ? ext4_write_inode+0x550/0x550 [ 1362.154783][ T7737] notify_change+0xb0d/0xe10 [ 1362.159386][ T7737] chown_common+0x3f9/0x5a0 [ 1362.163903][ T7737] ? __ia32_sys_chmod+0x70/0x70 [ 1362.168771][ T7737] ? rcu_read_lock_any_held+0xb4/0x120 [ 1362.174236][ T7737] ? __mnt_want_write+0x223/0x2a0 [ 1362.179269][ T7737] do_fchownat+0x168/0x270 [ 1362.183694][ T7737] ? chown_common+0x5a0/0x5a0 [ 1362.188392][ T7737] __x64_sys_lchown+0x85/0x90 [ 1362.193082][ T7737] do_syscall_64+0x55/0xb0 [ 1362.197511][ T7737] ? clear_bhb_loop+0x40/0x90 [ 1362.202188][ T7737] ? clear_bhb_loop+0x40/0x90 [ 1362.206874][ T7737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1362.212782][ T7737] RIP: 0033:0x7f82ce58e929 [ 1362.217203][ T7737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1362.236815][ T7737] RSP: 002b:00007f82cf3e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1362.245235][ T7737] RAX: ffffffffffffffda RBX: 00007f82ce7b5fa0 RCX: 00007f82ce58e929 [ 1362.253212][ T7737] RDX: 0000000000000000 RSI: 000000000000ee01 RDI: 0000200000000000 [ 1362.261187][ T7737] RBP: 00007f82ce610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1362.269163][ T7737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1362.277137][ T7737] R13: 0000000000000000 R14: 00007f82ce7b5fa0 R15: 00007ffc1f8e8ac8 [ 1362.285123][ T7737] [ 1362.306574][ T7761] loop6: detected capacity change from 0 to 512 [ 1362.348465][ T7743] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1362.558468][ T7763] loop2: detected capacity change from 0 to 32768 [ 1362.613365][T24139] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1362.654998][ T7761] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1362.672890][ T7763] JFS: metapage_get_blocks failed [ 1362.690371][ T7761] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1362.720354][ T7763] ERROR: (device loop2): release_metapage: metapage_write_one() failed [ 1362.720354][ T7763] [ 1362.739689][ T7761] System zones: 0-1, 15-15, 18-18, 34-34 [ 1362.759208][ T7737] EXT4-fs error (device loop5): ext4_get_inode_usage:901: inode #15: comm syz.5.14766: corrupted xattr block 19: overlapping e_value [ 1362.784159][ T7761] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1362.793613][ T7763] ERROR: (device loop2): remounting filesystem as read-only [ 1362.815292][ T7761] __quota_error: 1 callbacks suppressed [ 1362.815306][ T7761] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 1362.895206][ T7761] EXT4-fs warning (device loop6): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1362.942525][ T110] blkno = 8ed2c, nblocks = 1 [ 1362.948321][ T110] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 1362.948321][ T110] [ 1362.965066][ T7761] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1362.985809][ T7761] EXT4-fs (loop6): ext4_process_orphan: truncating inode 16 to 9000 bytes [ 1363.018834][ T7761] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.14769: bg 0: block 40: padding at end of block bitmap is not set [ 1363.048942][ T7761] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1363.067481][ T7761] EXT4-fs (loop6): 1 truncate cleaned up [ 1363.085451][ T7761] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1363.183339][ T7761] EXT4-fs error (device loop6): ext4_encrypted_get_link:46: inode #16: comm syz.6.14769: bad symlink. [ 1363.233955][ T6277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1363.343629][ T6181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (6181) [ 1363.359626][T24230] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.