last executing test programs: 5m15.182820925s ago: executing program 3 (id=2238): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) 5m14.987434861s ago: executing program 3 (id=2240): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load ecryptfs'], 0x32, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5m14.737880351s ago: executing program 3 (id=2244): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 5m14.486849941s ago: executing program 3 (id=2248): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) 5m14.162507207s ago: executing program 3 (id=2252): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xc5}]}}}]}, 0x48}}, 0x0) 5m13.591798523s ago: executing program 3 (id=2258): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@ipv6_newroute={0x28, 0x18, 0x730b077975544631, 0x70bd28, 0x25dfdbff, {0xa, 0x10, 0x14, 0xf9, 0xfe, 0x3, 0xfe, 0x2, 0x5472f84cefc77771}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5m13.196412805s ago: executing program 32 (id=2258): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=@ipv6_newroute={0x28, 0x18, 0x730b077975544631, 0x70bd28, 0x25dfdbff, {0xa, 0x10, 0x14, 0xf9, 0xfe, 0x3, 0xfe, 0x2, 0x5472f84cefc77771}, [@RTA_METRICS={0x4}, @RTA_PRIORITY={0x8, 0x6, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4m35.141915452s ago: executing program 5 (id=2697): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000002340)={[{@fat=@sys_immutable}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@shortname_mixed}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@numtail}]}, 0x3, 0x356, &(0x7f0000000200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) 4m34.089220267s ago: executing program 5 (id=2709): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{}, {}, {@gid}, {@force}, {@uid}, {@creator={'creator', 0x3d, "e3fa1e83"}}, {@nls={'nls', 0x3d, 'cp857'}}]}, 0x44, 0x6fd, &(0x7f0000000500)="$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") statx(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0xff00, 0x0) 4m33.575792359s ago: executing program 5 (id=2715): syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a27f2", 0x1c, 0x2c, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xe}], {{0x8000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 4m33.043549472s ago: executing program 5 (id=2723): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x30e, &(0x7f0000000900)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x101040, 0x0) 4m32.557954551s ago: executing program 5 (id=2729): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000200)={0x1}) 4m32.014297645s ago: executing program 5 (id=2734): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) shmget$private(0x0, 0x10000, 0x800, &(0x7f0000ff0000/0x10000)=nil) 4m31.516878625s ago: executing program 33 (id=2734): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) shmget$private(0x0, 0x10000, 0x800, &(0x7f0000ff0000/0x10000)=nil) 2m38.136214255s ago: executing program 4 (id=4246): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000000)="0000000000000004ff6943b800000008fed2f4f6174e98d5c850dc00000028f2000000008607000000ebcd1f", 0x2c, r0) 2m37.891640045s ago: executing program 4 (id=4250): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr={{0x18, 0x29, 0x5, {0x87, 0x0, 0x2, 0x1}}}], 0x18}}], 0x1, 0x20000850) 2m37.618622367s ago: executing program 4 (id=4255): r0 = openat$audio(0xffffff9c, &(0x7f0000000280), 0x2200, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000380)=0x101) 2m37.436201992s ago: executing program 4 (id=4257): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0xfffffffc, 0xfffffffd, 0x8, 0x2, 0x1, 0x9fd, 0x3}}) 2m37.198284541s ago: executing program 4 (id=4260): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m36.038772984s ago: executing program 4 (id=4272): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x46, 0xff, 0xfffffffffffffffa}}) 2m20.922238987s ago: executing program 34 (id=4272): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000300)=@ethtool_sset_info={0x46, 0xff, 0xfffffffffffffffa}}) 3.446247691s ago: executing program 7 (id=6613): syz_mount_image$ocfs2(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x88c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x8, 0x443d, &(0x7f0000008c00)="$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") symlinkat(&(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') 2.164522775s ago: executing program 2 (id=6626): r0 = openat$sequencer(0xffffff9c, &(0x7f0000003f00), 0xc9042, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0xffffffffffffffff) 1.886292547s ago: executing program 2 (id=6630): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) read$FUSE(r0, 0x0, 0x3) 1.688368574s ago: executing program 6 (id=6632): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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") unlink(&(0x7f00000001c0)='./file0\x00') 1.61055394s ago: executing program 7 (id=6633): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x6, 0x0, 0x5, 0x0}) 1.61010967s ago: executing program 2 (id=6634): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000b00)=[{&(0x7f0000000100)="010000005cc135121e58e6d23b58765bc592fd71b19c05d42faf337052402ce7f05b0cc598bdfa5c764d4fa7d4851146c45fa801224f584e25daa2c6e13e0e3002f50b275e280221a9972639c4820848a2c97e2ae425e574fcb6f40a392cd788af17c0e9b4a21e623aea4797da0593", 0x4}, {0x0, 0xffffff56}, {&(0x7f0000000000)="ba70de013ead54a64ba4716a32cd38f5f539bb66d45ddb4badcba263146f9e4ff7c8b44b1f3eed131a11f36af74202eb7d1b1314ae7c8ddaafb1199c8a", 0x11}, {&(0x7f00000003c0)="f57cac9ffd4700badc6f0a862276f904d7f173aff011bca7f204f01fc8d551a8c4912c52f8281998be20ede3b8cb4af86a03f07b55823d63e4be7c68c1a973402bd10f74659b91fdfceb4617364fa5ee3fc735f750b54c5a05ebf2e6419c880cbdccd64016ed0a2f21519135b6ad46a6a67f8cd5f8191f8bea6e0398be33491b45d8c8922e8829477fc32df1eef918d5876ff78b89a1"}, {&(0x7f0000000900)="46ddb7fd40427f94dc1189b126d3279ed02b384683089250450253381cd9f37192334acdb9f101c444626fd406180e0594677bfde9846ff6c3eead32a65a8efdca4d8f86a7858568b9b728714dcd307c27fa7b89fe3cf5dc4241d0679a06609e843c9b610d835f9cf1354538abfc5288fbf696fa6b8a1a23c87f1271c28172ef1e492d256d1d88a309da9bec024144a813b7d1e80eb03d4b6b349c81bd6b22e238586fb3a3902b69e4d83e2b253cfaff084aad228bff8a64b4", 0xfffffffffffffde8}, {&(0x7f00000009c0)="109b1e79f7a55e366b53aa93fc651d77f43258dc13f88b87d61f8b230fa0d0b370d1c48622c360f2c91e2576546df4a97f90b3dadead089e70212f8a94fdb29fb0b18c40474295843fd7d65f80e4d313db30fb2e1fbac29fb11856"}, {&(0x7f0000000a40)="40b991110b7c2b4e17b03ddde889d90ac678cb761cd90c77b88f02941e45672d33d215e3c2908c8e3ffcbfe0a53d950bbd72f5aa203a605fec8a5138ae1cbea0aaf340412f5d57f24df6bef999a9443e96d271eb501cfae463825ab9d62bbfc9728f715bbc3c65bbf258834a9ab31d86547142a5cf8eed870565959e1565e34df6cdc6107afd7138be9ee3f5d3b929a2aec38d"}], 0x3, 0x0, 0x0) 1.545589375s ago: executing program 0 (id=6635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x14, 0x4, 0x8, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f00000001c0), &(0x7f00000006c0)}, 0x20) 1.452159182s ago: executing program 1 (id=6636): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x68, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40002}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @erspan={{0x37}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x4}]}}}, @IFLA_LINK={0x8}]}, 0x68}, 0x1, 0xba01}, 0x8800) 1.222627071s ago: executing program 6 (id=6637): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af25, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xeeef0000}) 1.222211241s ago: executing program 2 (id=6638): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0}) 1.215619441s ago: executing program 7 (id=6639): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r0, &(0x7f0000004040)=@hci={0x1f, 0x0, 0x2}, 0x80) 1.167835415s ago: executing program 0 (id=6640): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x303500, 0x12f, 0x4}, 0x18) process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0) 1.066636244s ago: executing program 1 (id=6641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @call]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210}, 0x21) 972.525641ms ago: executing program 6 (id=6642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}, {@in=@empty, 0x0, 0x2b}, @in=@private, {}, {}, {0x0, 0x400000}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 959.664462ms ago: executing program 2 (id=6643): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) 854.717771ms ago: executing program 7 (id=6644): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="020e000014000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000010003200020100000011000000000000e0000002000000000000000000000000e000000200000000000000000000000005000500000000000a"], 0xa0}}, 0x0) 854.239891ms ago: executing program 0 (id=6645): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x800) ioctl$CEC_G_MODE(r0, 0x80046108, &(0x7f0000000080)) 766.187388ms ago: executing program 1 (id=6646): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000180)) 685.429294ms ago: executing program 6 (id=6647): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x31a39, 0x5962d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x2}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) 574.655653ms ago: executing program 7 (id=6648): set_mempolicy(0x4005, &(0x7f0000000080)=0x7, 0x2) kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x1000000}], 0x0) 574.340943ms ago: executing program 0 (id=6649): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) 431.231625ms ago: executing program 1 (id=6650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f000001bbc0)={0x0, 0x0, &(0x7f000001bb80)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_xt={0x50, 0x1, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 348.676181ms ago: executing program 6 (id=6651): r0 = socket(0x848000000015, 0x805, 0x0) readv(r0, &(0x7f0000002ac0)=[{&(0x7f0000000680)=""/208, 0xd0}], 0x1) 262.736849ms ago: executing program 0 (id=6652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001"], 0xd0}}, 0x0) 246.11047ms ago: executing program 1 (id=6653): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0xfffffffd}) 131.178199ms ago: executing program 7 (id=6654): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x8000000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 62.633444ms ago: executing program 2 (id=6655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a0500230000002400128009000100766c616e000000001400028006000100fa30ac900600050081"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 62.303544ms ago: executing program 6 (id=6656): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{0x3, 0x0, 0xe, 0x80000000, 'syz0\x00', 0x10001}, 0x3, 0x10000044, 0x3, 0x0, 0x3, 0x10000, 'syz1\x00', &(0x7f0000000100)=['cpuset.effective_mems\x00', 'cpuset.effective_mems\x00', 'GPL\x00'], 0x30}) 4.896509ms ago: executing program 1 (id=6657): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xcd}, {{@in6=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in=@dev, 0x1, 0x33}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x1fc}}, 0x0) 0s ago: executing program 0 (id=6658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setsig(r0, 0xa, 0x41) kernel console output (not intermixed with test programs): ommended to keep mac addresses unique to avoid problems! [ 413.291061][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.302313][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.314440][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.359009][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.369627][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.380724][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.394849][T14698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.404840][ T9714] f81534a_ctrl 1-1:0.0: failed to set register 0x116: -5 [ 413.409295][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.422891][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.436054][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.442369][ T9714] f81534a_ctrl 1-1:0.0: failed to enable ports: -5 [ 413.455700][ T9714] f81534a_ctrl: probe of 1-1:0.0 failed with error -5 [ 413.462301][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.477995][ T9714] usb 1-1: USB disconnect, device number 10 [ 413.482001][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.495215][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.505336][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.516231][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.526529][T14698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.537343][T14698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.549314][T14698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.564900][T14698] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.575043][T14698] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.585177][T14698] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.594343][T14698] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.605226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 413.619071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 413.636093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.663625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.712091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.731488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.752099][T14934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4635'. [ 413.767883][T14934] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4635'. [ 413.873042][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 414.047132][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.100463][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.128970][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 414.209984][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.231729][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.265088][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4643'. [ 414.292738][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4643'. [ 414.322768][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 414.585179][T14958] netlink: 'syz.7.4522': attribute type 3 has an invalid length. [ 415.062882][ T5609] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 415.189110][T14978] loop7: detected capacity change from 0 to 4096 [ 415.237651][T14978] ntfs3: loop7: ino=3, Correct links count -> 2. [ 415.282869][ T5609] usb 2-1: Using ep0 maxpacket: 32 [ 415.296633][ T5609] usb 2-1: config 3 has an invalid interface number: 227 but max is 0 [ 415.322166][ T5609] usb 2-1: config 3 has no interface number 0 [ 415.352206][ T5609] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 415.402751][ T5609] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.424846][ T5609] usb 2-1: Product: syz [ 415.429084][ T5609] usb 2-1: Manufacturer: syz [ 415.457752][ T5609] usb 2-1: SerialNumber: syz [ 415.495412][ T5609] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 415.513762][ T5609] cxusb: set interface failed [ 415.522855][ T5609] dvb-usb: bulk message failed: -22 (1/0) [ 415.550387][ T5609] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 415.580442][ T5609] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 415.622788][ T5609] usb 2-1: media controller created [ 415.671629][ T5609] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 416.074055][ T5609] DVB: Unable to find symbol lgdt330x_attach() [ 416.080360][ T5609] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 416.128694][ T5609] dvb-usb: bulk message failed: -22 (1/0) [ 416.147948][ T5609] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 416.212940][ T5609] usb 2-1: USB disconnect, device number 14 [ 416.316026][ T5609] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 416.453139][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4676'. [ 416.764962][T15031] loop1: detected capacity change from 0 to 512 [ 416.844439][T15031] EXT4-fs error (device loop1): ext4_orphan_get:1400: comm syz.1.4681: inode #15: comm syz.1.4681: iget: illegal inode # [ 416.851205][T15036] IPv6: sit1: Disabled Multicast RS [ 416.989063][T15031] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.4681: couldn't read orphan inode 15 (err -117) [ 417.087386][T15031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 417.119965][T15031] EXT4-fs error (device loop1): ext4_lookup:1858: comm syz.1.4681: inode #15: comm syz.1.4681: iget: illegal inode # [ 417.255217][ T26] audit: type=1326 audit(1754564147.421:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a4d8ebe9 code=0x7ffc0000 [ 417.305936][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 417.382720][ T26] audit: type=1326 audit(1754564147.491:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd1a4d8ebe9 code=0x7ffc0000 [ 417.508337][ T26] audit: type=1326 audit(1754564147.491:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a4d8ebe9 code=0x7ffc0000 [ 417.591548][T15058] loop7: detected capacity change from 0 to 128 [ 417.600467][ T26] audit: type=1326 audit(1754564147.491:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a4d8ebe9 code=0x7ffc0000 [ 417.677245][T15058] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 417.743194][T15058] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 417.882249][T15066] loop2: detected capacity change from 0 to 512 [ 417.938630][T15066] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 418.078964][T15066] EXT4-fs (loop2): 1 truncate cleaned up [ 418.103339][T15066] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 418.251230][T15080] binder: 15078:15080 ioctl c00c6211 0 returned -14 [ 418.316022][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 418.499187][T15084] loop2: detected capacity change from 0 to 128 [ 418.611682][T15084] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 418.631518][T15084] ext4 filesystem being mounted at /956/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 418.642107][T15093] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 418.844597][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 419.159193][ T26] audit: type=1326 audit(1754564149.321:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 419.246978][ T26] audit: type=1326 audit(1754564149.351:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 419.291374][ T26] audit: type=1326 audit(1754564149.351:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 419.413064][ T26] audit: type=1326 audit(1754564149.351:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.4717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 419.813039][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4727'. [ 419.880112][T15133] cgroup2: Unexpected value for 'nsdelegate' [ 420.370375][T15113] loop1: detected capacity change from 0 to 32768 [ 420.538195][T15113] XFS (loop1): Mounting V5 Filesystem [ 420.730109][T15113] XFS (loop1): Ending clean mount [ 420.750900][T15113] XFS (loop1): Quotacheck needed: Please wait. [ 420.865911][T15113] XFS (loop1): Quotacheck: Done. [ 421.022276][ T4272] XFS (loop1): Unmounting Filesystem [ 421.185271][T15172] device netdevsim0 entered promiscuous mode [ 421.230332][T15172] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 421.458013][ T26] audit: type=1326 audit(1754564151.621:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.6.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 421.570511][ T26] audit: type=1326 audit(1754564151.621:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15178 comm="syz.6.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 421.612141][T15181] netlink: 'syz.2.4751': attribute type 1 has an invalid length. [ 422.180882][T15165] loop7: detected capacity change from 0 to 40427 [ 422.227296][T15165] F2FS-fs (loop7): invalid crc value [ 422.237305][T15165] F2FS-fs (loop7): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 422.265609][T15165] F2FS-fs (loop7): Found nat_bits in checkpoint [ 422.461309][T15165] F2FS-fs (loop7): recover fsync data on readonly fs [ 422.493577][T15165] F2FS-fs (loop7): Cannot turn on quotas: -2 on 0 [ 422.550942][T15165] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 423.176961][T15230] loop1: detected capacity change from 0 to 128 [ 423.251413][T15230] EXT4-fs (loop1): Test dummy encryption mode enabled [ 423.330189][T15230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 423.388232][T15230] ext4 filesystem being mounted at /963/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 423.585720][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 423.741790][T15252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 424.135107][T15267] netlink: 'syz.7.4790': attribute type 21 has an invalid length. [ 424.162778][T15267] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4790'. [ 424.442177][T15276] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4795'. [ 424.510412][T15278] loop1: detected capacity change from 0 to 1024 [ 424.542397][T15278] EXT4-fs: Ignoring removed nomblk_io_submit option [ 424.557909][T15278] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.617949][T15278] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 424.711997][T15278] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 424.896219][T15259] loop2: detected capacity change from 0 to 32768 [ 424.940312][T15259] (syz.2.4786,15259,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 424.955780][T15259] (syz.2.4786,15259,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 424.974283][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 425.067716][T15259] JBD2: Ignoring recovery information on journal [ 425.145371][T15299] netlink: 'syz.6.4806': attribute type 21 has an invalid length. [ 425.153672][T15299] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4806'. [ 425.163271][T15299] netlink: 'syz.6.4806': attribute type 5 has an invalid length. [ 425.171119][T15299] netlink: 'syz.6.4806': attribute type 6 has an invalid length. [ 425.179004][T15299] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4806'. [ 425.290530][T15259] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 425.535487][T15308] netlink: 'syz.7.4809': attribute type 2 has an invalid length. [ 425.588522][T15308] netlink: 'syz.7.4809': attribute type 2 has an invalid length. [ 425.684194][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 425.854101][T15314] loop2: detected capacity change from 0 to 512 [ 425.926758][T15314] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 426.035956][T15314] ext4 filesystem being mounted at /978/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.115987][ T5611] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 426.208515][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 426.329061][ T5611] usb 1-1: Using ep0 maxpacket: 32 [ 426.336214][ T5611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.377402][ T5611] usb 1-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 426.402742][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.459962][ T5611] usb 1-1: config 0 descriptor?? [ 426.493394][ T5611] usb 1-1: bad CDC descriptors [ 426.709534][ T5611] usb 1-1: USB disconnect, device number 11 [ 426.973598][T15352] loop7: detected capacity change from 0 to 8 [ 427.309020][T15338] loop1: detected capacity change from 0 to 32768 [ 427.333189][T15338] (syz.1.4823,15338,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 427.347513][T15340] loop2: detected capacity change from 0 to 32768 [ 427.391015][T15338] (syz.1.4823,15338,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 427.433192][T15340] ea_get: invalid extended attribute [ 427.563450][T15338] JBD2: Ignoring recovery information on journal [ 427.645513][T15364] netlink: 'syz.7.4835': attribute type 74 has an invalid length. [ 427.784688][T15338] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 428.093624][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 429.095542][T15417] loop1: detected capacity change from 0 to 256 [ 429.211807][T15417] FAT-fs (loop1): Directory bread(block 64) failed [ 429.241718][T15417] FAT-fs (loop1): Directory bread(block 65) failed [ 429.281592][T15417] FAT-fs (loop1): Directory bread(block 66) failed [ 429.337945][T15417] FAT-fs (loop1): Directory bread(block 67) failed [ 429.358439][T15417] FAT-fs (loop1): Directory bread(block 68) failed [ 429.399694][T15417] FAT-fs (loop1): Directory bread(block 69) failed [ 429.420865][T15417] FAT-fs (loop1): Directory bread(block 70) failed [ 429.451073][T15417] FAT-fs (loop1): Directory bread(block 71) failed [ 429.482794][T15417] FAT-fs (loop1): Directory bread(block 72) failed [ 429.489415][T15417] FAT-fs (loop1): Directory bread(block 73) failed [ 429.650695][T15417] syz.1.4862: attempt to access beyond end of device [ 429.650695][T15417] loop1: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 429.696669][T15417] syz.1.4862: attempt to access beyond end of device [ 429.696669][T15417] loop1: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 429.769794][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 429.769810][ T26] audit: type=1800 audit(1754564159.931:167): pid=15417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4862" name="file1" dev="loop1" ino=1048644 res=0 errno=0 [ 429.983242][T15410] loop2: detected capacity change from 0 to 32768 [ 430.023911][T15410] ERROR: (device loop2): diAllocAG: ipimap->i_size is wrong [ 430.023911][T15410] [ 430.085872][T15410] ERROR: (device loop2): remounting filesystem as read-only [ 430.129353][T15410] ialloc: diAlloc returned -5! [ 430.322968][T15422] loop6: detected capacity change from 0 to 40427 [ 430.370210][T15422] F2FS-fs (loop6): invalid crc value [ 430.392951][T15422] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 430.430404][T15422] F2FS-fs (loop6): Found nat_bits in checkpoint [ 430.599230][T15422] F2FS-fs (loop6): recover fsync data on readonly fs [ 430.633402][T15422] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 430.680795][T15422] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 431.824396][T15490] netlink: 'syz.1.4896': attribute type 16 has an invalid length. [ 431.832291][T15490] netlink: 'syz.1.4896': attribute type 17 has an invalid length. [ 431.897557][T15490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 431.943322][T15490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 431.975349][T15490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.003218][T15490] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.086829][T15490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 432.123882][T15490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 432.158190][T15498] netlink: 176 bytes leftover after parsing attributes in process `syz.7.4901'. [ 432.442310][T15504] loop2: detected capacity change from 0 to 128 [ 432.533923][T15504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 432.553107][T15504] ext4 filesystem being mounted at /993/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 432.577548][T15480] loop6: detected capacity change from 0 to 32768 [ 432.704321][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 432.727656][T15480] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 432.764364][T15480] XFS (loop6): Mounting V5 Filesystem [ 432.954096][T15480] XFS (loop6): Ending clean mount [ 432.976462][T15480] XFS (loop6): Quotacheck needed: Please wait. [ 432.986542][T15528] loop2: detected capacity change from 0 to 164 [ 433.087853][T15528] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 433.115462][T15480] XFS (loop6): Quotacheck: Done. [ 433.298409][T10541] XFS (loop6): Unmounting Filesystem [ 433.583569][ T26] audit: type=1326 audit(1754564163.751:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.7.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 433.682957][ T26] audit: type=1326 audit(1754564163.751:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.7.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 433.817749][ T26] audit: type=1326 audit(1754564163.781:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.7.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 433.892318][ T26] audit: type=1326 audit(1754564163.781:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.7.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 434.002780][ T26] audit: type=1326 audit(1754564163.781:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15541 comm="syz.7.4919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 434.191699][T15554] loop1: detected capacity change from 0 to 4096 [ 434.265959][T15554] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 434.599737][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4931'. [ 434.716997][T15569] netlink: set zone limit has 4 unknown bytes [ 434.955233][T15580] netlink: 'syz.6.4935': attribute type 16 has an invalid length. [ 434.997022][T15580] netlink: 'syz.6.4935': attribute type 17 has an invalid length. [ 435.071704][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.085025][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 435.134517][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.149498][T15580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.328294][T15586] loop7: detected capacity change from 0 to 4096 [ 435.392805][T15586] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 435.430985][T15589] netlink: 'syz.2.4942': attribute type 4 has an invalid length. [ 435.557517][T15586] ntfs3: loop7: failed to convert "c46c" to cp737 [ 435.779205][T15594] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 435.811486][T15600] QAT: Device 192 not found [ 436.506740][T15624] loop2: detected capacity change from 0 to 64 [ 437.404614][T15657] netlink: 212168 bytes leftover after parsing attributes in process `syz.6.4975'. [ 437.621749][T15657] syz.6.4975 (15657) used greatest stack depth: 18176 bytes left [ 437.807381][T15629] loop7: detected capacity change from 0 to 32768 [ 437.841951][T15671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4980'. [ 437.921030][T15671] netlink: set zone limit has 4 unknown bytes [ 437.976148][T15629] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 438.030071][T15629] XFS (loop7): Mounting V5 Filesystem [ 438.115039][T15629] XFS (loop7): Ending clean mount [ 438.158371][T15629] XFS (loop7): Quotacheck needed: Please wait. [ 438.262759][T15629] XFS (loop7): Quotacheck: Done. [ 438.330995][T15696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4989'. [ 438.456613][T14698] XFS (loop7): Unmounting Filesystem [ 439.295784][T15724] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5004'. [ 439.332798][T15724] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5004'. [ 439.524677][T15733] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.5007'. [ 440.035892][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.042270][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.067037][T15757] device macsec0 entered promiscuous mode [ 440.179279][T15761] loop1: detected capacity change from 0 to 256 [ 440.399635][T15767] loop7: detected capacity change from 0 to 1024 [ 440.783005][T15779] netlink: 'syz.6.5032': attribute type 2 has an invalid length. [ 440.829621][T15779] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5032'. [ 440.984030][T15788] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5035'. [ 441.222295][T15799] loop1: detected capacity change from 0 to 8 [ 441.380914][T15805] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.5042'. [ 441.687652][T15815] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5048'. [ 442.210110][T15801] loop7: detected capacity change from 0 to 32768 [ 442.282320][T15801] (syz.7.5040,15801,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 442.331979][T15801] (syz.7.5040,15801,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 442.358915][T15835] loop2: detected capacity change from 0 to 1024 [ 442.387833][T15833] loop1: detected capacity change from 0 to 4096 [ 442.451011][T15801] JBD2: Ignoring recovery information on journal [ 442.494720][T15841] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 442.540350][T15835] syz.2.5058: attempt to access beyond end of device [ 442.540350][T15835] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 442.557460][T15843] netlink: 'syz.0.5061': attribute type 2 has an invalid length. [ 442.642787][T15835] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 442.676305][T15835] syz.2.5058: attempt to access beyond end of device [ 442.676305][T15835] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 442.737376][T15835] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 442.770472][T15801] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 443.082332][T14698] ocfs2: Unmounting device (7,7) on (node local) [ 443.344068][T15860] loop6: detected capacity change from 0 to 1024 [ 443.382157][T15862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 443.423773][T15862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 443.473296][T15862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 443.574651][T15862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge2: link becomes ready [ 443.914491][T15880] loop6: detected capacity change from 0 to 1024 [ 444.085958][T15886] netlink: 'syz.7.5082': attribute type 10 has an invalid length. [ 444.152946][T15886] __nla_validate_parse: 2 callbacks suppressed [ 444.152963][T15886] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5082'. [ 444.203481][T15885] loop1: detected capacity change from 0 to 4096 [ 444.224983][T15885] EXT4-fs: Ignoring removed mblk_io_submit option [ 444.239825][T15886] netlink: 'syz.7.5082': attribute type 10 has an invalid length. [ 444.259763][T15885] EXT4-fs (loop1): Test dummy encryption mode enabled [ 444.271804][T15886] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5082'. [ 444.325543][T15885] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 444.643299][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 444.745630][T15904] loop2: detected capacity change from 0 to 1024 [ 444.746485][T15904] EXT4-fs: Ignoring removed oldalloc option [ 444.764515][T15904] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 444.822254][T15904] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 444.827813][T15904] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 445.011108][T15904] fscrypt (loop2, inode 15): Error -61 getting encryption context [ 445.188081][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 445.313039][T15924] xt_cgroup: path and classid specified [ 445.453297][T15932] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 446.110801][T15960] overlayfs: conflicting options: nfs_export=on,index=off [ 446.832965][ T5689] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 446.913044][ T2170] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 447.022858][ T5689] usb 3-1: Using ep0 maxpacket: 16 [ 447.032189][ T5689] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 447.072439][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.109853][ T5689] usb 3-1: Product: syz [ 447.116276][ T2170] usb 2-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=d5.51 [ 447.138866][ T5689] usb 3-1: Manufacturer: syz [ 447.143949][ T2170] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.154087][ T5689] usb 3-1: SerialNumber: syz [ 447.184367][ T2170] usb 2-1: config 0 descriptor?? [ 447.199726][ T5689] r8152-cfgselector 3-1: config 0 descriptor?? [ 447.208381][ T2170] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4 [ 447.598932][ T2170] gspca_sn9c20x: Write register 1001 failed -71 [ 447.622764][ T2170] gspca_sn9c20x: Device initialization failed [ 447.629061][ T2170] gspca_sn9c20x: probe of 2-1:0.0 failed with error -71 [ 447.638850][ T5689] r8152-cfgselector 3-1: Unknown version 0x0000 [ 447.649788][ T5689] r8152-cfgselector 3-1: bad CDC descriptors [ 447.664821][ T5689] r8152-cfgselector 3-1: Unknown version 0x0000 [ 447.707796][ T2170] usb 2-1: USB disconnect, device number 15 [ 447.714362][ T5689] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 447.920649][T16004] loop6: detected capacity change from 0 to 32768 [ 447.973230][T16004] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 448.019219][T16004] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2048 but claims that 39166 are free [ 448.039244][T16004] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 448.049693][T16004] OCFS2: File system is now read-only. [ 448.055570][T16004] (syz.6.5138,16004,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 448.067469][T16004] (syz.6.5138,16004,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 448.075816][T16004] (syz.6.5138,16004,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 448.084873][T16004] (syz.6.5138,16004,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 448.093758][T16004] (syz.6.5138,16004,0):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 448.102144][T16004] (syz.6.5138,16004,0):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 448.110689][T16004] (syz.6.5138,16004,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 448.119198][T16004] (syz.6.5138,16004,0):ocfs2_mknod:385 ERROR: status = -30 [ 448.131393][T16004] (syz.6.5138,16004,0):ocfs2_mknod:502 ERROR: status = -30 [ 448.157386][T16004] (syz.6.5138,16004,0):ocfs2_create:676 ERROR: status = -30 [ 448.297780][T10541] ocfs2: Unmounting device (7,6) on (node local) [ 448.636986][T16037] NILFS (nullb0): couldn't find nilfs on the device [ 448.727725][T16040] tmpfs: Bad value for 'mpol' [ 448.965556][T16048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5158'. [ 449.142770][T16052] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5160'. [ 449.196431][T16052] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5160'. [ 449.253606][T16058] SET target dimension over the limit! [ 449.497584][T16064] netlink: 'syz.2.5166': attribute type 28 has an invalid length. [ 449.538403][T16066] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5167'. [ 449.655205][T16034] loop1: detected capacity change from 0 to 32768 [ 449.663066][T16068] xt_socket: unknown flags 0x50 [ 449.790820][T16034] XFS (loop1): Mounting V5 Filesystem [ 450.001166][T16034] XFS (loop1): Ending clean mount [ 450.098268][T16034] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x2a9/0x1060, inode 0x2443 dinode [ 450.168808][T16034] XFS (loop1): Unmount and run xfs_repair [ 450.212775][T16034] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 450.220236][T16034] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00 INA............. [ 450.249964][T16095] loop2: detected capacity change from 0 to 4096 [ 450.250082][T16034] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 450.282247][T16095] EXT4-fs: Ignoring removed mblk_io_submit option [ 450.301342][T16034] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d 4.Xh...=4.Xh...= [ 450.326552][T16034] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20 4.Xh...=....... [ 450.350752][T16095] EXT4-fs (loop2): Test dummy encryption mode enabled [ 450.370824][T16034] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 450.390852][T16034] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 54 01 7a fc ............T.z. [ 450.410562][T16034] 00000060: ff ff ff ff 4c 7b c2 21 00 00 00 00 00 00 00 04 ....L{.!........ [ 450.431875][T16095] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 450.441068][T16034] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08 ................ [ 450.622431][T16109] loop6: detected capacity change from 0 to 256 [ 450.643853][T16109] exfat: Deprecated parameter 'utf8' [ 450.649313][T16109] exfat: Deprecated parameter 'namecase' [ 450.707759][ T4272] XFS (loop1): Unmounting Filesystem [ 450.769538][T16109] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 450.841899][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 451.517127][T16133] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5197'. [ 451.577563][T16133] netlink: 'syz.7.5197': attribute type 1 has an invalid length. [ 451.901146][T16148] Invalid option length (1048180) for dns_resolver key [ 451.932385][T16140] nvme_fabrics: missing parameter 'transport=%s' [ 451.959186][T16140] nvme_fabrics: missing parameter 'nqn=%s' [ 452.391822][T16169] loop1: detected capacity change from 0 to 256 [ 452.495404][T16173] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.5213' sets config #-3 [ 452.735858][T16179] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 452.970515][T16187] autofs4:pid:16187:autofs_fill_super: called with bogus options [ 453.077155][T16194] netlink: 'syz.0.5224': attribute type 13 has an invalid length. [ 453.212167][T16201] loop1: detected capacity change from 0 to 128 [ 453.263867][T16201] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 453.374067][T16206] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5230'. [ 453.388697][T16201] FAT-fs (loop1): FAT read failed (blocknr 32) [ 453.442775][ T5616] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 453.575015][T16211] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5232'. [ 453.634653][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 453.662864][ T5616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 453.689433][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 453.720428][ T5616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 453.744472][ T5616] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 453.759161][ T5616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.770740][ T5616] usb 3-1: config 0 descriptor?? [ 453.868093][T16221] comedi comedi0: ni_at_a2150: I/O port conflict (0x2,28) [ 453.998293][ T5616] hdpvr 3-1:0.0: firmware version 0x12 dated [ 454.109666][T16228] loop6: detected capacity change from 0 to 1024 [ 454.254609][T16228] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 454.263400][ T5616] hdpvr 3-1:0.0: device init failed [ 454.268718][ T5616] hdpvr: probe of 3-1:0.0 failed with error -12 [ 454.290633][ T5616] usb 3-1: USB disconnect, device number 13 [ 454.392556][T10541] EXT4-fs (loop6): unmounting filesystem. [ 454.927810][T16252] loop6: detected capacity change from 0 to 8192 [ 454.969556][T16252] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 455.068984][T16252] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 455.121429][T16267] netlink: 'syz.0.5257': attribute type 2 has an invalid length. [ 455.133542][T16252] REISERFS (device loop6): using ordered data mode [ 455.140116][T16252] reiserfs: using flush barriers [ 455.235409][T16252] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 455.243483][T16267] device .*! entered promiscuous mode [ 455.257726][ T26] audit: type=1326 audit(1754564185.411:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 455.314217][T16252] REISERFS (device loop6): checking transaction log (loop6) [ 455.342744][ T26] audit: type=1326 audit(1754564185.411:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 455.368632][T16252] REISERFS (device loop6): Using r5 hash to sort names [ 455.419287][T16252] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 455.461574][ T26] audit: type=1326 audit(1754564185.461:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 455.511527][T16252] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 455.611922][ T26] audit: type=1326 audit(1754564185.461:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 455.754370][ T26] audit: type=1326 audit(1754564185.461:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16271 comm="syz.1.5259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 456.166138][T16296] usb usb8: usbfs: process 16296 (syz.6.5267) did not claim interface 0 before use [ 456.335800][T16302] netlink: 'syz.7.5274': attribute type 16 has an invalid length. [ 456.377938][T16302] netlink: 'syz.7.5274': attribute type 3 has an invalid length. [ 456.397945][T16302] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5274'. [ 456.669637][ T26] audit: type=1326 audit(1754564186.831:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.7.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 456.682865][ T2170] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 456.747272][ T26] audit: type=1326 audit(1754564186.841:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.7.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 456.838659][ T26] audit: type=1326 audit(1754564186.841:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.7.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 456.898398][T16318] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5282'. [ 456.935758][T16318] unsupported nla_type 65024 [ 456.942948][ T2170] usb 2-1: Using ep0 maxpacket: 16 [ 456.950896][ T2170] usb 2-1: config 0 has no interfaces? [ 456.964382][ T26] audit: type=1326 audit(1754564186.841:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16312 comm="syz.7.5279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 456.986757][ C1] vkms_vblank_simulate: vblank timer overrun [ 456.997456][ T2170] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 457.012804][ T2170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.020901][ T2170] usb 2-1: Product: syz [ 457.037683][ T2170] usb 2-1: Manufacturer: syz [ 457.042498][ T2170] usb 2-1: SerialNumber: syz [ 457.086451][ T2170] r8152-cfgselector 2-1: config 0 descriptor?? [ 457.111713][T16324] netlink: 'syz.0.5285': attribute type 1 has an invalid length. [ 457.152129][T16324] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5285'. [ 457.321561][ T2170] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 457.392187][T16334] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 457.528070][ T4342] usb 2-1: USB disconnect, device number 16 [ 457.653520][ T26] audit: type=1326 audit(1754564187.821:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16343 comm="syz.0.5295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1a4d8ebe9 code=0x7ffc0000 [ 458.002692][ T5611] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 458.053612][T16361] mmap: syz.2.5303 (16361): VmData 175878144 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 458.203971][ T5611] usb 8-1: Using ep0 maxpacket: 8 [ 458.209223][ T5616] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 458.225735][ T5611] usb 8-1: config 0 has an invalid interface number: 31 but max is 0 [ 458.238308][ T5611] usb 8-1: config 0 has no interface number 0 [ 458.271214][ T5611] usb 8-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 458.306946][ T5611] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.315461][ T5611] usb 8-1: Product: syz [ 458.319666][ T5611] usb 8-1: Manufacturer: syz [ 458.330327][ T5611] usb 8-1: SerialNumber: syz [ 458.361224][T16371] xt_TCPMSS: Only works on TCP SYN packets [ 458.378605][ T5611] usb 8-1: config 0 descriptor?? [ 458.438685][ T5616] usb 7-1: Using ep0 maxpacket: 16 [ 458.446005][ T5616] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 458.468900][ T5616] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.515107][ T5616] usb 7-1: config 0 has no interface number 0 [ 458.528025][ T5616] usb 7-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 458.578048][ T5616] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.603252][ T5611] usb 8-1: Found UVC 0.04 device syz (046d:08c3) [ 458.630877][ T5611] usb 8-1: No valid video chain found. [ 458.639133][ T5616] usb 7-1: config 0 descriptor?? [ 458.671571][ T5611] usb 8-1: USB disconnect, device number 2 [ 458.681468][ T5616] usb 7-1: Found UVC 0.00 device (0bd3:0555) [ 458.719754][ T5616] usb 7-1: No valid video chain found. [ 458.919930][T16389] loop1: detected capacity change from 0 to 512 [ 458.932012][ T5611] usb 7-1: USB disconnect, device number 9 [ 459.029456][T16389] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 459.063925][T16398] nftables ruleset with unbound set [ 459.069492][T16389] ext4 filesystem being mounted at /1057/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.088557][T16396] PKCS8: Unsupported PKCS#8 version [ 459.249990][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 459.390985][T16406] loop1: detected capacity change from 0 to 256 [ 459.429170][T16406] FAT-fs (loop1): Directory bread(block 64) failed [ 459.442059][T16406] FAT-fs (loop1): Directory bread(block 65) failed [ 459.484374][T16406] FAT-fs (loop1): Directory bread(block 66) failed [ 459.512163][T16406] FAT-fs (loop1): Directory bread(block 67) failed [ 459.540774][T16406] FAT-fs (loop1): Directory bread(block 68) failed [ 459.571288][T16406] FAT-fs (loop1): Directory bread(block 69) failed [ 459.601038][T16406] FAT-fs (loop1): Directory bread(block 70) failed [ 459.622371][T16406] FAT-fs (loop1): Directory bread(block 71) failed [ 459.646786][T16406] FAT-fs (loop1): Directory bread(block 72) failed [ 459.665298][T16417] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 459.672681][T16406] FAT-fs (loop1): Directory bread(block 73) failed [ 459.845576][T16419] nfs: Deprecated parameter 'nointr' [ 460.123878][T16431] loop2: detected capacity change from 0 to 16 [ 460.153299][T16431] erofs: (device loop2): mounted with root inode @ nid 36. [ 460.609768][T16449] loop7: detected capacity change from 0 to 256 [ 460.643984][ T5611] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 460.663708][T16449] exfat: Deprecated parameter 'utf8' [ 460.669163][T16449] exfat: Deprecated parameter 'utf8' [ 460.696000][T16452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5347'. [ 460.724714][T16449] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 460.862830][ T5611] usb 1-1: Using ep0 maxpacket: 16 [ 460.869958][ T5611] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 460.903038][ T5611] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.942928][ T5611] usb 1-1: config 0 has no interface number 0 [ 460.956979][ T5611] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 460.977198][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.997341][ T5611] usb 1-1: config 0 descriptor?? [ 461.015721][ T5611] usb 1-1: Found UVC 0.00 device (0bd3:0555) [ 461.050576][ T5611] usb 1-1: No valid video chain found. [ 461.261374][ T5611] usb 1-1: USB disconnect, device number 12 [ 461.680764][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 461.680780][ T26] audit: type=1326 audit(1754564191.841:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.1.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 461.793455][ T26] audit: type=1326 audit(1754564191.891:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.1.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 461.913315][ T26] audit: type=1326 audit(1754564191.891:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.1.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 461.935696][ C1] vkms_vblank_simulate: vblank timer overrun [ 461.981387][T16487] ip6t_srh: unknown srh invflags 7863 [ 461.996088][ T26] audit: type=1326 audit(1754564191.891:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16479 comm="syz.1.5361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 462.018551][ C1] vkms_vblank_simulate: vblank timer overrun [ 462.138119][T16462] loop2: detected capacity change from 0 to 32768 [ 462.196853][T16462] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 462.256948][T16462] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 462.304250][T16462] BTRFS info (device loop2): metadata ratio 1025 [ 462.334068][T16462] BTRFS info (device loop2): enabling ssd optimizations [ 462.358923][T16462] BTRFS info (device loop2): force clearing of disk cache [ 462.384834][T16462] BTRFS info (device loop2): turning off barriers [ 462.391471][T16462] BTRFS info (device loop2): setting nodatacow, compression disabled [ 462.458133][T16462] BTRFS info (device loop2): using spread ssd allocation scheme [ 462.489362][T16462] BTRFS info (device loop2): using free space tree [ 462.805235][T16462] BTRFS info (device loop2): rebuilding free space tree [ 462.926604][T16533] loop6: detected capacity change from 0 to 256 [ 462.993800][T16533] FAT-fs (loop6): Directory bread(block 64) failed [ 463.013023][T16533] FAT-fs (loop6): Directory bread(block 65) failed [ 463.034357][T16533] FAT-fs (loop6): Directory bread(block 66) failed [ 463.041011][T16533] FAT-fs (loop6): Directory bread(block 67) failed [ 463.073079][T16533] FAT-fs (loop6): Directory bread(block 68) failed [ 463.102833][T16533] FAT-fs (loop6): Directory bread(block 69) failed [ 463.142920][T16533] FAT-fs (loop6): Directory bread(block 70) failed [ 463.169400][T16533] FAT-fs (loop6): Directory bread(block 71) failed [ 463.198338][ T4271] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 463.203168][T16533] FAT-fs (loop6): Directory bread(block 72) failed [ 463.248256][T16533] FAT-fs (loop6): Directory bread(block 73) failed [ 464.226913][T16573] xt_hashlimit: size too large, truncated to 1048576 [ 464.257146][T16577] loop7: detected capacity change from 0 to 256 [ 464.264899][T16578] netlink: 'syz.0.5400': attribute type 21 has an invalid length. [ 464.297459][T16573] xt_hashlimit: max too large, truncated to 1048576 [ 464.300341][T16577] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 464.643438][T16584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5402'. [ 465.082815][T16571] loop6: detected capacity change from 0 to 32768 [ 465.174834][T16571] ea_get: invalid extended attribute [ 465.612105][T16610] netlink: 'syz.6.5415': attribute type 2 has an invalid length. [ 466.188001][ T5609] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 466.394414][ T5609] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 466.418828][ T5609] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.446712][ T5609] usb 7-1: config 0 descriptor?? [ 466.467673][ T5609] cp210x 7-1:0.0: cp210x converter detected [ 466.770055][T16642] loop2: detected capacity change from 0 to 4096 [ 466.824373][T16651] netlink: 'syz.0.5436': attribute type 1 has an invalid length. [ 466.850530][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5436'. [ 466.878266][ T5609] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 466.900196][ T5609] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 466.931629][T16642] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 466.939992][ T5609] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 466.991995][ T5609] usb 7-1: cp210x converter now attached to ttyUSB0 [ 467.018853][ T5609] usb 7-1: USB disconnect, device number 10 [ 467.059172][ T5609] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 467.111607][ T5609] cp210x 7-1:0.0: device disconnected [ 467.313267][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5442'. [ 467.446521][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5445'. [ 467.712524][T16671] loop1: detected capacity change from 0 to 4096 [ 467.774971][T16671] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 467.827006][T16671] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 467.886260][T16671] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 467.951246][T16671] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 468.031092][T16671] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 468.113205][T16671] ntfs: volume version 3.1. [ 468.134401][T16671] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 468.190867][T16671] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 468.238001][T16671] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 468.273669][T16671] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 468.285293][T16692] printk: syz.0.5456 (16692): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 468.329354][T16671] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 468.668217][T16672] loop7: detected capacity change from 0 to 32768 [ 468.811084][T16672] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 468.830231][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5464'. [ 468.852284][T16672] XFS (loop7): Mounting V5 Filesystem [ 468.995914][T16672] XFS (loop7): Ending clean mount [ 469.056815][T16672] XFS (loop7): Quotacheck needed: Please wait. [ 469.175328][T16672] XFS (loop7): Quotacheck: Done. [ 469.340211][T16736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5474'. [ 469.413709][T16736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5474'. [ 469.451854][T14698] XFS (loop7): Unmounting Filesystem [ 469.705563][T16745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5479'. [ 470.087414][T16754] loop6: detected capacity change from 0 to 4096 [ 471.082683][ T5611] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 471.091852][T16795] loop1: detected capacity change from 0 to 1024 [ 471.153978][T16795] EXT4-fs: Ignoring removed bh option [ 471.159488][T16795] EXT4-fs: inline encryption not supported [ 471.190018][T16795] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000] [ 471.267153][T16795] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm syz.1.5503: lblock 2 mapped to illegal pblock 2 (length 1) [ 471.291539][ T5611] usb 7-1: Using ep0 maxpacket: 8 [ 471.301181][ T5611] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 471.303587][T16795] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 48: comm syz.1.5503: lblock 0 mapped to illegal pblock 48 (length 1) [ 471.314843][ T5611] usb 7-1: config 0 interface 0 has no altsetting 0 [ 471.356736][ T5611] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 471.367903][T16795] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.5503: Failed to acquire dquot type 0 [ 471.383538][ T5611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.402022][ T5611] usb 7-1: Product: syz [ 471.412278][T16795] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 471.424843][ T5611] usb 7-1: Manufacturer: syz [ 471.429512][ T5611] usb 7-1: SerialNumber: syz [ 471.454605][ T5611] usb 7-1: config 0 descriptor?? [ 471.459810][T16795] EXT4-fs error (device loop1): ext4_evict_inode:279: inode #11: comm syz.1.5503: mark_inode_dirty error [ 471.499076][ T5611] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 471.514655][T16795] EXT4-fs warning (device loop1): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 471.547083][T16795] EXT4-fs (loop1): 1 orphan inode deleted [ 471.563136][ T11] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 471.570432][T16795] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 471.642905][ T11] EXT4-fs error (device loop1): ext4_release_dquot:6850: comm kworker/u4:1: Failed to release dquot type 0 [ 471.697050][ T5611] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 471.717619][ T5611] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 471.767229][ T5611] snd_usb_toneport: probe of 7-1:0.0 failed with error -22 [ 471.804977][ T11] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #3: block 2: comm kworker/u4:1: lblock 2 mapped to illegal pblock 2 (length 1) [ 471.848782][ T11] EXT4-fs error (device loop1): ext4_write_dquot:6794: comm kworker/u4:1: Failed to commit dquot type 0 [ 471.902828][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 471.933112][ T4272] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 471.960124][ T5611] usb 7-1: USB disconnect, device number 11 [ 472.002702][ T4272] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 472.042769][ T4272] EXT4-fs error (device loop1): ext4_quota_off:7120: inode #3: comm syz-executor: mark_inode_dirty error [ 472.219252][T16802] loop7: detected capacity change from 0 to 32768 [ 472.261819][T16802] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 scanned by syz.7.5506 (16802) [ 472.314938][T16802] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 472.328408][T16802] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 472.377231][T16802] BTRFS info (device loop7): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 472.408082][T16802] BTRFS info (device loop7): use zstd compression, level 3 [ 472.433336][T16802] BTRFS info (device loop7): using free space tree [ 472.713361][T16802] BTRFS info (device loop7): enabling ssd optimizations [ 472.742429][T16849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5520'. [ 472.757438][T16849] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5520'. [ 472.866645][T16855] netlink: 448 bytes leftover after parsing attributes in process `syz.0.5523'. [ 472.960004][T14698] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 473.380680][ T5584] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop7 scanned by udevd (5584) [ 473.500804][T16827] loop1: detected capacity change from 0 to 32768 [ 473.601943][T16827] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 473.675513][T16827] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 473.915856][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 474.149148][T16895] loop6: detected capacity change from 0 to 1024 [ 474.203268][T16895] hfsplus: Filesystem is marked locked, mounting read-only. [ 474.258948][T16895] hfsplus: filesystem is marked locked, leaving read-only. [ 474.290576][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5541'. [ 474.519967][T16903] loop7: detected capacity change from 0 to 256 [ 475.056346][T16921] xt_hashlimit: max too large, truncated to 1048576 [ 475.175112][T16925] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5554'. [ 475.441308][T16935] loop6: detected capacity change from 0 to 64 [ 475.596539][T16941] loop1: detected capacity change from 0 to 2048 [ 475.657894][T16941] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 475.727002][T16941] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 476.067620][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 476.067640][ T26] audit: type=1107 audit(1754564206.231:192): pid=16955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 476.277458][T16957] xt_CT: No such helper "pptp" [ 476.519490][T16974] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5578'. [ 476.812899][ T9714] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 476.951437][T16985] loop6: detected capacity change from 0 to 4096 [ 476.960534][T16985] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 476.997000][T16992] binfmt_misc: register: failed to install interpreter file ./file2 [ 477.005901][ T9714] usb 8-1: Using ep0 maxpacket: 16 [ 477.014327][ T9714] usb 8-1: config 0 has an invalid interface number: 174 but max is 0 [ 477.030050][ T9714] usb 8-1: config 0 has no interface number 0 [ 477.039141][T16985] ntfs3: loop6: failed to convert "c46c" to cp850 [ 477.060678][ T9714] usb 8-1: New USB device found, idVendor=106c, idProduct=b770, bcdDevice=7b.dd [ 477.086757][ T9714] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.104521][ T9714] usb 8-1: Product: syz [ 477.112226][ T9714] usb 8-1: Manufacturer: syz [ 477.121157][T16995] x_tables: duplicate underflow at hook 2 [ 477.124215][ T9714] usb 8-1: SerialNumber: syz [ 477.178195][ T9714] usb 8-1: config 0 descriptor?? [ 477.209752][ T9714] qmi_wwan: probe of 8-1:0.174 failed with error -22 [ 477.417810][ T9714] usb 8-1: USB disconnect, device number 3 [ 478.015915][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5600'. [ 478.058127][T17026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.732761][T17053] loop6: detected capacity change from 0 to 256 [ 478.761024][T17053] FAT-fs (loop6): Directory bread(block 64) failed [ 478.798936][T17053] FAT-fs (loop6): Directory bread(block 65) failed [ 478.823256][T17053] FAT-fs (loop6): Directory bread(block 66) failed [ 478.829880][T17053] FAT-fs (loop6): Directory bread(block 67) failed [ 478.882035][T17053] FAT-fs (loop6): Directory bread(block 68) failed [ 478.890650][T17059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5617'. [ 478.905671][T17053] FAT-fs (loop6): Directory bread(block 69) failed [ 478.912413][T17053] FAT-fs (loop6): Directory bread(block 70) failed [ 478.946887][T17059] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.979775][T17053] FAT-fs (loop6): Directory bread(block 71) failed [ 478.979902][T17053] FAT-fs (loop6): Directory bread(block 72) failed [ 478.979933][T17053] FAT-fs (loop6): Directory bread(block 73) failed [ 479.399355][T17071] netlink: 'syz.7.5624': attribute type 8 has an invalid length. [ 479.709078][T17083] loop7: detected capacity change from 0 to 512 [ 479.871715][T17083] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 479.902050][T17083] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.122717][ T5611] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 480.172509][T14698] EXT4-fs (loop7): unmounting filesystem. [ 480.284537][T17108] IPv6: sit1: Disabled Multicast RS [ 480.312839][ T5611] usb 7-1: Using ep0 maxpacket: 32 [ 480.330537][ T5611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.361469][T17110] loop7: detected capacity change from 0 to 512 [ 480.376886][ T5611] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.410580][ T5611] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 480.429450][T17110] EXT4-fs error (device loop7): ext4_orphan_get:1400: inode #15: comm syz.7.5640: iget: bad i_size value: 38620345925642 [ 480.498401][ T5611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.526043][T17110] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5640: couldn't read orphan inode 15 (err -117) [ 480.557852][T17110] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 480.564869][ T5611] usb 7-1: config 0 descriptor?? [ 480.615167][ T5611] hub 7-1:0.0: USB hub found [ 480.728550][T14698] EXT4-fs (loop7): unmounting filesystem. [ 480.821398][ T5611] hub 7-1:0.0: 31 ports detected [ 480.833063][ T5611] hub 7-1:0.0: insufficient power available to use all downstream ports [ 480.924239][T17126] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 481.028791][ T5611] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 481.040668][ T5611] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 481.070400][ T5611] usbhid 7-1:0.0: can't add hid device: -71 [ 481.089639][ T5611] usbhid: probe of 7-1:0.0 failed with error -71 [ 481.144468][T17135] loop1: detected capacity change from 0 to 8 [ 481.153865][ T5611] usb 7-1: USB disconnect, device number 12 [ 481.193110][T17135] SQUASHFS error: lzo decompression failed, data probably corrupt [ 481.242828][T17135] SQUASHFS error: Failed to read block 0x91: -5 [ 481.249148][T17135] SQUASHFS error: Unable to read metadata cache entry [8f] [ 481.282933][T17135] SQUASHFS error: Unable to read inode 0x11f [ 481.325802][ T5584] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 481.420611][T17143] loop2: detected capacity change from 0 to 1764 [ 481.449599][T17143] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 481.465101][T17145] loop7: detected capacity change from 0 to 256 [ 481.472781][ T4342] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 481.503403][T17145] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 481.632852][ T5692] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 481.662732][ T4342] usb 1-1: Using ep0 maxpacket: 8 [ 481.669638][ T4342] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 481.699621][ T4342] usb 1-1: config 2 has no interface number 0 [ 481.730245][ T4342] usb 1-1: config 2 interface 31 has no altsetting 0 [ 481.751550][ T4342] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 481.791849][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.832894][ T5692] usb 2-1: Using ep0 maxpacket: 16 [ 481.839259][ T4342] usb 1-1: Product: syz [ 481.849705][ T5692] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 481.850588][ T4342] usb 1-1: Manufacturer: syz [ 481.875338][ T4342] usb 1-1: SerialNumber: syz [ 481.889089][ T5692] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 481.919450][ T5692] usb 2-1: config 0 has no interface number 0 [ 481.954067][ T5692] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 481.991549][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.998081][T17155] cgroup: Unknown subsys name 'pcr' [ 482.009982][ T5692] usb 2-1: Product: syz [ 482.020109][ T5692] usb 2-1: Manufacturer: syz [ 482.037809][ T5692] usb 2-1: SerialNumber: syz [ 482.070953][ T5692] usb 2-1: config 0 descriptor?? [ 482.089589][ T5692] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 482.116945][ T5692] usb 2-1: No valid video chain found. [ 482.334750][ T5616] usb 2-1: USB disconnect, device number 17 [ 482.351923][ T4342] ch9200: probe of 1-1:2.31 failed with error -22 [ 482.379284][ T4342] usb 1-1: USB disconnect, device number 13 [ 482.399338][T17165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5668'. [ 482.416519][T17161] loop6: detected capacity change from 0 to 8192 [ 482.458452][T17161] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 482.473133][T17161] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 482.482400][T17161] REISERFS (device loop6): using ordered data mode [ 482.489078][T17161] reiserfs: using flush barriers [ 482.502977][T17161] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 482.527918][T17161] REISERFS (device loop6): checking transaction log (loop6) [ 482.631654][T17161] REISERFS (device loop6): Using tea hash to sort names [ 482.639391][T17161] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 483.094049][T17179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5675'. [ 483.394518][T17189] comedi comedi0: aio_iiro_16: I/O port conflict (0xc,8) [ 484.399475][T17220] loop7: detected capacity change from 0 to 4096 [ 484.452884][T17220] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 484.501192][T17222] loop2: detected capacity change from 0 to 4096 [ 484.545795][T17220] ntfs3: loop7: failed to convert "c46c" to iso8859-2 [ 484.581588][T17222] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 484.799307][T17200] loop1: detected capacity change from 0 to 32768 [ 484.903498][T17236] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 484.947843][T17200] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 484.998193][T17200] XFS (loop1): Mounting V5 Filesystem [ 485.125026][T17200] XFS (loop1): Ending clean mount [ 485.148164][T17200] XFS (loop1): Quotacheck needed: Please wait. [ 485.284117][T17200] XFS (loop1): Quotacheck: Done. [ 485.543387][ T4272] XFS (loop1): Unmounting Filesystem [ 485.812443][T17264] loop7: detected capacity change from 0 to 8192 [ 485.821988][T17272] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 486.149494][T17282] loop2: detected capacity change from 0 to 256 [ 486.182161][T17282] exfat: Deprecated parameter 'utf8' [ 486.211834][T17282] exfat: Deprecated parameter 'utf8' [ 486.249506][T17282] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 486.349627][T17282] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 487.462901][ T4342] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 487.652733][ T4342] usb 7-1: Using ep0 maxpacket: 8 [ 487.660325][ T4342] usb 7-1: unable to get BOS descriptor or descriptor too short [ 487.694742][ T4342] usb 7-1: string descriptor 0 read error: -22 [ 487.701070][ T4342] usb 7-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 487.745747][ T4342] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.985204][ T4342] asix 7-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 488.198103][ T4342] asix 7-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 488.229263][ T4342] asix 7-1:7.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 488.260074][ T4342] asix: probe of 7-1:7.0 failed with error -71 [ 488.307394][ T4342] usb 7-1: USB disconnect, device number 13 [ 488.442810][ T5693] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 488.633070][ T5693] usb 8-1: Using ep0 maxpacket: 16 [ 488.645389][ T5693] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 488.685540][ T5693] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.702707][ T5693] usb 8-1: Product: syz [ 488.707095][ T5693] usb 8-1: Manufacturer: syz [ 488.712046][ T5693] usb 8-1: SerialNumber: syz [ 488.731784][ T5693] r8152-cfgselector 8-1: config 0 descriptor?? [ 489.065253][T17370] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 489.159010][ T5693] r8152-cfgselector 8-1: Unknown version 0x0000 [ 489.181091][ T5693] r8152-cfgselector 8-1: bad CDC descriptors [ 489.212204][ T5693] r8152-cfgselector 8-1: Unknown version 0x0000 [ 489.253599][ T5693] r8152-cfgselector 8-1: USB disconnect, device number 4 [ 489.402405][T17380] loop2: detected capacity change from 0 to 64 [ 489.885452][T17387] loop1: detected capacity change from 0 to 8192 [ 489.923381][T17387] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 489.952844][T17387] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 489.962237][T17387] REISERFS (device loop1): using ordered data mode [ 490.026134][T17404] loop6: detected capacity change from 0 to 4096 [ 490.027415][T17387] reiserfs: using flush barriers [ 490.029524][T17387] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 490.029956][T17387] REISERFS (device loop1): checking transaction log (loop1) [ 490.281072][T17409] loop7: detected capacity change from 0 to 256 [ 490.380964][T17387] REISERFS (device loop1): Using tea hash to sort names [ 490.403468][T17387] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 490.523042][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5786'. [ 490.655805][T17418] autofs4:pid:17418:autofs_fill_super: called with bogus options [ 490.777774][T17420] kcapi: manufacturer command 18446744073709551608 unknown. [ 490.980937][T17430] loop6: detected capacity change from 0 to 64 [ 491.236540][ T4342] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 491.434142][ T4342] usb 3-1: not running at top speed; connect to a high speed hub [ 491.492736][ T4342] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 491.500888][ T4342] usb 3-1: config 95 has no interface number 0 [ 491.530755][ T4342] usb 3-1: config 95 interface 1 has no altsetting 0 [ 491.555609][ T4342] usb 3-1: string descriptor 0 read error: -22 [ 491.582874][ T4342] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 491.591985][ T4342] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.105187][ T5692] usb 3-1: USB disconnect, device number 14 [ 492.486966][T17478] loop1: detected capacity change from 0 to 2048 [ 492.526338][T17478] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 492.651565][T17484] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.654258][T17478] syz.1.5819: attempt to access beyond end of device [ 492.654258][T17478] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 492.797938][T17489] binfmt_misc: register: failed to install interpreter file ./file0 [ 492.850891][T17478] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 492.889454][T17492] loop2: detected capacity change from 0 to 512 [ 492.952286][T17478] Remounting filesystem read-only [ 493.123984][T17492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 493.192178][T17492] ext4 filesystem being mounted at /1190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.303250][T17492] EXT4-fs error (device loop2): ext4_empty_dir:3139: inode #12: comm syz.2.5825: Directory hole found for htree leaf block 0 [ 493.495893][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 493.538979][T17510] kAFS: unable to lookup cell ' [ 493.538979][T17510] $)-.ÌײfÍY¹Ç²a×ïÅ2sˆ [ 493.538979][T17510] ' [ 494.019363][T17526] loop6: detected capacity change from 0 to 128 [ 494.166028][T17530] xt_TCPMSS: Only works on TCP SYN packets [ 494.234221][T17532] loop7: detected capacity change from 0 to 256 [ 494.265445][T17532] exfat: Deprecated parameter 'utf8' [ 494.270894][T17532] exfat: Deprecated parameter 'utf8' [ 494.366753][T17532] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 494.864908][T17550] loop1: detected capacity change from 0 to 64 [ 494.891232][T17549] netlink: 'syz.0.5853': attribute type 2 has an invalid length. [ 494.950273][T17550] hfs: request for non-existent node 16777216 in B*Tree [ 494.978994][ T26] audit: type=1326 audit(1754564225.141:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.7.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 495.001750][T17550] hfs: request for non-existent node 16777216 in B*Tree [ 495.049533][T17550] hfs: request for non-existent node 16777216 in B*Tree [ 495.069075][ T26] audit: type=1326 audit(1754564225.181:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.7.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 495.102794][T17550] hfs: request for non-existent node 16777216 in B*Tree [ 495.140991][T17550] hfs: request for non-existent node 16777216 in B*Tree [ 495.151037][ T26] audit: type=1326 audit(1754564225.181:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.7.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 495.179755][T17550] hfs: request for non-existent node 16777216 in B*Tree [ 495.221483][ T26] audit: type=1326 audit(1754564225.181:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17551 comm="syz.7.5854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74ab8ebe9 code=0x7ffc0000 [ 495.261727][T17556] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 495.421785][T17534] loop6: detected capacity change from 0 to 32768 [ 495.482001][T17560] loop2: detected capacity change from 0 to 4096 [ 495.510514][T17534] syz.6.5845: attempt to access beyond end of device [ 495.510514][T17534] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 495.554429][T17534] metapage_write_end_io: I/O error [ 495.586341][T17534] blkno = 8ed2c, nblocks = 1 [ 495.591032][T17534] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 495.591032][T17534] [ 495.603651][T17560] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 495.662813][T17560] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 495.680884][T17534] ERROR: (device loop6): remounting filesystem as read-only [ 495.716214][T17534] UFO tlock:0xffffc9000288a048 [ 495.729472][T17560] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 495.784889][T17560] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 495.852896][T17560] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 495.933545][T17560] ntfs: volume version 3.1. [ 495.948288][ T107] blkno = 8ed2c, nblocks = 4 [ 495.949147][T17560] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 495.953412][ T107] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 495.953412][ T107] [ 496.043129][T10541] syz-executor: attempt to access beyond end of device [ 496.043129][T10541] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 496.084101][T10541] metapage_write_end_io: I/O error [ 496.089633][T10541] JFS: metapage_get_blocks failed [ 496.123432][T10541] JFS: metapage_get_blocks failed [ 496.147349][T10541] JFS: metapage_get_blocks failed [ 496.152474][T10541] JFS: metapage_get_blocks failed [ 496.183439][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5867'. [ 496.408578][T17584] netlink: 92 bytes leftover after parsing attributes in process `syz.7.5871'. [ 497.280166][T17614] loop6: detected capacity change from 0 to 512 [ 497.346550][T17614] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 497.837299][T17633] netlink: zone id is out of range [ 497.872960][T17633] netlink: zone id is out of range [ 498.125856][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5899'. [ 498.156980][T17647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5899'. [ 498.204104][T17647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5899'. [ 498.245194][T17647] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5899'. [ 498.287213][T17647] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5899'. [ 498.586404][T17664] sctp: [Deprecated]: syz.1.5905 (pid 17664) Use of int in maxseg socket option. [ 498.586404][T17664] Use struct sctp_assoc_value instead [ 499.377073][T17691] loop6: detected capacity change from 0 to 1024 [ 499.423074][T17691] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 499.479196][T17691] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 499.549092][T17691] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 2: comm syz.6.5920: lblock 2 mapped to illegal pblock 2 (length 1) [ 499.653564][T17691] EXT4-fs (loop6): Remounting filesystem read-only [ 499.660216][T17691] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 48: comm syz.6.5920: lblock 0 mapped to illegal pblock 48 (length 1) [ 499.711507][T17691] EXT4-fs (loop6): Remounting filesystem read-only [ 499.740912][T17691] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.5920: Failed to acquire dquot type 0 [ 499.787987][T17691] EXT4-fs (loop6): Remounting filesystem read-only [ 499.815956][T17710] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5927'. [ 499.862311][T17691] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 499.909292][T17691] EXT4-fs (loop6): Remounting filesystem read-only [ 499.929718][T17691] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #11: comm syz.6.5920: mark_inode_dirty error [ 499.968958][T17715] Unsupported ieee802154 address type: 0 [ 499.973407][T17691] EXT4-fs (loop6): Remounting filesystem read-only [ 499.987186][T17691] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 500.021146][T17691] EXT4-fs (loop6): 1 orphan inode deleted [ 500.052700][T17691] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 500.113528][ T9] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 500.183473][ T9] EXT4-fs (loop6): Remounting filesystem read-only [ 500.190136][ T9] __quota_error: 16 callbacks suppressed [ 500.190164][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 500.242676][ T9] EXT4-fs error (device loop6): ext4_release_dquot:6850: comm kworker/u4:0: Failed to release dquot type 0 [ 500.277722][ T9] EXT4-fs (loop6): Remounting filesystem read-only [ 500.304808][T17691] EXT4-fs (loop6): unmounting filesystem. [ 500.314091][T17691] EXT4-fs error (device loop6): __ext4_get_inode_loc:4507: comm syz.6.5920: Invalid inode table block 1 in block_group 0 [ 500.362915][T17691] EXT4-fs (loop6): Remounting filesystem read-only [ 500.374379][T17729] loop2: detected capacity change from 0 to 8 [ 500.381376][T17729] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 500.396415][T17691] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 500.436667][T17691] EXT4-fs (loop6): Remounting filesystem read-only [ 500.453089][T17691] EXT4-fs error (device loop6): ext4_quota_off:7120: inode #3: comm syz.6.5920: mark_inode_dirty error [ 500.468386][T17730] loop1: detected capacity change from 0 to 1024 [ 500.496579][T17691] EXT4-fs (loop6): Remounting filesystem read-only [ 500.567821][T17732] netlink: 'syz.0.5940': attribute type 4 has an invalid length. [ 500.614195][T17730] fuse: Invalid rootmode [ 500.741398][ T9] hfsplus: b-tree write err: -5, ino 4 [ 500.823108][ T5690] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 501.017054][ T5690] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.058850][ T5690] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 501.092764][ T5690] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.133087][ T5690] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.181924][T17734] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 501.477876][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.484324][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.575909][ T5690] usb 8-1: USB disconnect, device number 5 [ 501.883392][ T26] audit: type=1326 audit(1754564232.051:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.1.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 501.957520][ T26] audit: type=1326 audit(1754564232.071:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.1.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 502.096583][ T26] audit: type=1326 audit(1754564232.081:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.1.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 502.210548][ T26] audit: type=1326 audit(1754564232.081:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.1.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 502.311275][ T26] audit: type=1326 audit(1754564232.081:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.1.5960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 502.419059][T17797] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 502.800079][T17813] netlink: 'syz.7.5977': attribute type 10 has an invalid length. [ 502.818341][T17813] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5977'. [ 502.859892][T17813] batman_adv: batadv0: Adding interface: vlan1 [ 502.883269][T17813] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.922748][ T5690] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 502.968880][T17813] batman_adv: batadv0: Interface activated: vlan1 [ 503.077856][T17821] netlink: 'syz.6.5981': attribute type 30 has an invalid length. [ 503.115336][ T5690] usb 1-1: config 0 has no interfaces? [ 503.123668][T17823] loop2: detected capacity change from 0 to 512 [ 503.137555][ T5690] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 503.152823][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.161372][ T5690] usb 1-1: Product: syz [ 503.167806][T17823] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 503.194547][ T5690] usb 1-1: Manufacturer: syz [ 503.199535][ T5690] usb 1-1: SerialNumber: syz [ 503.224171][ T5690] r8152-cfgselector 1-1: config 0 descriptor?? [ 503.239859][T17823] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 503.299949][T17823] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.5982: invalid indirect mapped block 2683928664 (level 1) [ 503.369038][T17830] loop7: detected capacity change from 0 to 64 [ 503.408677][T17823] EXT4-fs (loop2): Remounting filesystem read-only [ 503.423364][T17823] EXT4-fs (loop2): 1 truncate cleaned up [ 503.440280][T17823] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 503.495631][ T5690] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 503.512300][T10606] usb 1-1: config 0 descriptor?? [ 503.683231][ T5611] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 503.710213][T10606] usb 1-1: can't set config #0, error -71 [ 503.716473][ T5690] usb 1-1: USB disconnect, device number 14 [ 503.725399][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 503.887462][ T5611] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 503.923406][ T5611] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.931482][ T5611] usb 7-1: Product: syz [ 503.939353][ T5611] usb 7-1: Manufacturer: syz [ 503.939403][T17845] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5993'. [ 503.944373][ T5611] usb 7-1: SerialNumber: syz [ 503.979646][ T5611] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 504.025535][ T5611] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 504.205067][T17853] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 504.485572][ T4342] usb 7-1: USB disconnect, device number 14 [ 504.993592][ T5690] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 505.152813][ T5611] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 505.168447][ T5611] ath9k_htc: Failed to initialize the device [ 505.202804][ T5690] usb 2-1: Using ep0 maxpacket: 32 [ 505.210197][ T4342] usb 7-1: ath9k_htc: USB layer deinitialized [ 505.220530][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.264200][ T26] audit: type=1326 audit(1754564235.431:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.2.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 505.289685][ T5690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.331760][ T5690] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 505.359996][ T26] audit: type=1326 audit(1754564235.431:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.2.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 505.361614][ T5690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.464696][ T5690] usb 2-1: config 0 descriptor?? [ 505.480945][ T26] audit: type=1326 audit(1754564235.471:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.2.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 505.485854][ T5690] hub 2-1:0.0: USB hub found [ 505.603066][ T26] audit: type=1326 audit(1754564235.471:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.2.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 505.625496][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.683329][ T26] audit: type=1326 audit(1754564235.471:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17885 comm="syz.2.6013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 505.692431][ T5690] hub 2-1:0.0: 31 ports detected [ 505.752026][ T5690] hub 2-1:0.0: insufficient power available to use all downstream ports [ 505.808496][T17900] loop2: detected capacity change from 0 to 164 [ 505.845985][T17900] rock: directory entry would overflow storage [ 505.852376][T17900] rock: sig=0x66, size=4, remaining=3 [ 505.912961][ T5690] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 505.922861][ T5690] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 505.984357][ T5690] usbhid 2-1:0.0: can't add hid device: -71 [ 505.990485][ T5690] usbhid: probe of 2-1:0.0 failed with error -71 [ 506.068966][ T5690] usb 2-1: USB disconnect, device number 18 [ 506.172715][ T5692] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 506.309063][T17914] loop6: detected capacity change from 0 to 256 [ 506.329185][T17918] netlink: 'syz.7.6029': attribute type 1 has an invalid length. [ 506.369642][ T5692] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 506.391272][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.421893][ T5692] usb 3-1: config 0 descriptor?? [ 506.448577][ T5692] usb 3-1: selecting invalid altsetting 1 [ 506.509204][ T5692] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 506.591289][ T5584] udevd[5584]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.619399][T17924] netlink: 'syz.6.6032': attribute type 10 has an invalid length. [ 506.637016][T17924] bridge0: port 3(macsec0) entered blocking state [ 506.650229][ T5692] usb 3-1: USB disconnect, device number 15 [ 506.670538][T17924] bridge0: port 3(macsec0) entered disabled state [ 506.698232][T17924] device macsec0 entered promiscuous mode [ 506.720210][T17924] bridge0: port 3(macsec0) entered blocking state [ 506.726896][T17924] bridge0: port 3(macsec0) entered forwarding state [ 507.212788][ T5692] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 507.414556][ T5692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.452711][ T5692] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 507.483734][ T5692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 507.510644][ T5692] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 507.544370][ T5692] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 507.562714][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.577009][ T5692] usb 1-1: Product: syz [ 507.591519][ T5692] usb 1-1: Manufacturer: syz [ 507.615494][ T5692] usb 1-1: SerialNumber: syz [ 507.647026][ T5692] usb 1-1: config 0 descriptor?? [ 507.657376][ T5692] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 507.682763][ T5693] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 507.719805][ T5692] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 507.764388][ T5692] garmin_gps: probe of ttyUSB0 failed with error -8 [ 507.861256][ T5692] usb 1-1: USB disconnect, device number 15 [ 507.872908][ T5693] usb 3-1: Using ep0 maxpacket: 32 [ 507.880150][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.893052][ T5692] garmin_gps 1-1:0.0: device disconnected [ 507.922191][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.962902][ T5693] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 507.990081][ T5693] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.010482][ T5693] usb 3-1: config 0 descriptor?? [ 508.014567][T17968] loop7: detected capacity change from 0 to 2048 [ 508.023915][ T5693] hub 3-1:0.0: USB hub found [ 508.226861][ T5693] hub 3-1:0.0: 31 ports detected [ 508.232241][ T5693] hub 3-1:0.0: insufficient power available to use all downstream ports [ 508.373042][ T5616] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 508.433773][ T5693] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 508.440279][ T5693] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 508.483406][ T5693] usbhid 3-1:0.0: can't add hid device: -71 [ 508.489528][ T5693] usbhid: probe of 3-1:0.0 failed with error -71 [ 508.553577][ T5693] usb 3-1: USB disconnect, device number 16 [ 508.570153][ T5616] usb 8-1: Using ep0 maxpacket: 16 [ 508.588382][ T5616] usb 8-1: config 0 has an invalid interface number: 2 but max is 0 [ 508.629508][ T5616] usb 8-1: config 0 has no interface number 0 [ 508.650984][ T5616] usb 8-1: config 0 interface 2 altsetting 0 endpoint 0xC has invalid maxpacket 37835, setting to 1024 [ 508.682154][ T5616] usb 8-1: config 0 interface 2 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 508.718246][ T5616] usb 8-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 508.741207][ T5616] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 508.761474][ T5616] usb 8-1: Product: syz [ 508.782737][ T5616] usb 8-1: SerialNumber: syz [ 508.797496][ T5616] usb 8-1: config 0 descriptor?? [ 508.823652][T17968] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 508.829918][T17994] QAT: failed to copy from user. [ 509.045615][ T5616] usb 8-1: invalid MIDI in EP 0 [ 509.129101][ T5616] snd-usb-audio: probe of 8-1:0.2 failed with error -22 [ 509.164697][ T5616] usb 8-1: USB disconnect, device number 6 [ 509.413322][ T4460] udevd[4460]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 509.618501][T18020] loop2: detected capacity change from 0 to 256 [ 509.693357][T18020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 509.710788][T18022] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6081'. [ 509.750873][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6081'. [ 510.032895][ T4342] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 510.232776][ T4342] usb 8-1: Using ep0 maxpacket: 32 [ 510.239925][ T4342] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.289291][ T4342] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.322711][ T4342] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 510.346020][T18043] netlink: 'syz.2.6091': attribute type 9 has an invalid length. [ 510.358667][ T4342] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.372744][T18043] netlink: 'syz.2.6091': attribute type 9 has an invalid length. [ 510.387320][ T4342] usb 8-1: config 0 descriptor?? [ 510.413993][ T4342] hub 8-1:0.0: USB hub found [ 510.612917][ T4342] hub 8-1:0.0: 31 ports detected [ 510.623025][ T4342] hub 8-1:0.0: insufficient power available to use all downstream ports [ 510.819637][ T4342] hub 8-1:0.0: hub_hub_status failed (err = -71) [ 510.827578][ T4342] hub 8-1:0.0: config failed, can't get hub status (err -71) [ 510.875248][ T4342] usbhid 8-1:0.0: can't add hid device: -71 [ 510.891551][ T4342] usbhid: probe of 8-1:0.0 failed with error -71 [ 510.957152][ T4342] usb 8-1: USB disconnect, device number 7 [ 511.244022][T18076] loop1: detected capacity change from 0 to 1024 [ 511.307231][T18076] syz.1.6107: attempt to access beyond end of device [ 511.307231][T18076] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 511.382916][T18076] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 511.422888][T18076] hfsplus: unable to mark blocks free: error -5 [ 511.462552][T18076] hfsplus: can't free extent [ 511.858219][T18086] loop1: detected capacity change from 0 to 4096 [ 511.882904][T18091] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6115'. [ 511.893498][T18086] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 511.922984][T18091] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6115'. [ 511.941887][T18091] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6115'. [ 512.061379][T18086] ntfs3: loop1: no free space to extend mft [ 512.182684][ T4342] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 512.202238][T18072] loop2: detected capacity change from 0 to 32768 [ 512.289675][T18072] ERROR: (device loop2): diAllocAG: error reading iag [ 512.289675][T18072] [ 512.337289][T18072] ialloc: diAlloc returned -5! [ 512.381645][ T4342] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 512.423850][ T4342] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.461559][ T4342] usb 7-1: Product: syz [ 512.489508][ T4342] usb 7-1: Manufacturer: syz [ 512.513314][ T4342] usb 7-1: SerialNumber: syz [ 512.530519][ T4342] r8152-cfgselector 7-1: config 0 descriptor?? [ 512.755532][T18113] netlink: 'syz.7.6126': attribute type 32 has an invalid length. [ 512.959504][T18119] loop7: detected capacity change from 0 to 256 [ 512.960168][ T4342] r8152-cfgselector 7-1: Unknown version 0x0000 [ 513.019192][ T4342] r8152-cfgselector 7-1: USB disconnect, device number 15 [ 513.095019][T18119] FAT-fs (loop7): Directory bread(block 64) failed [ 513.101661][T18119] FAT-fs (loop7): Directory bread(block 65) failed [ 513.143031][T18119] FAT-fs (loop7): Directory bread(block 66) failed [ 513.159920][T18119] FAT-fs (loop7): Directory bread(block 67) failed [ 513.185130][T18119] FAT-fs (loop7): Directory bread(block 68) failed [ 513.209122][T18121] loop1: detected capacity change from 0 to 16 [ 513.215776][T18119] FAT-fs (loop7): Directory bread(block 69) failed [ 513.235963][T18119] FAT-fs (loop7): Directory bread(block 70) failed [ 513.248116][T18121] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 513.262891][T18119] FAT-fs (loop7): Directory bread(block 71) failed [ 513.306149][T18119] FAT-fs (loop7): Directory bread(block 72) failed [ 513.323642][T18119] FAT-fs (loop7): Directory bread(block 73) failed [ 513.624134][T18129] loop7: detected capacity change from 0 to 512 [ 513.646755][T18109] loop2: detected capacity change from 0 to 32768 [ 513.730946][T18129] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 513.732511][T18109] JBD2: Ignoring recovery information on journal [ 513.792247][T18129] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.815888][T18139] loop6: detected capacity change from 0 to 16 [ 513.825125][T18139] erofs: (device loop6): mounted with root inode @ nid 36. [ 513.825721][T18109] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 513.895699][T18140] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6136'. [ 513.953094][T18109] (syz.2.6123,18109,1):ocfs2_parse_options:1458 ERROR: Invalid heartbeat mount options [ 514.157026][T14698] EXT4-fs (loop7): unmounting filesystem. [ 514.185196][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 514.239646][T18146] netlink: 'syz.1.6140': attribute type 21 has an invalid length. [ 514.303368][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6140'. [ 514.564448][T18148] loop6: detected capacity change from 0 to 4096 [ 514.612233][T18148] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 514.970231][T18163] loop7: detected capacity change from 0 to 4096 [ 515.121017][T18164] loop1: detected capacity change from 0 to 4096 [ 515.181398][T18164] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 515.811970][T18176] IPVS: length: 110 != 8 [ 515.813897][T18160] loop2: detected capacity change from 0 to 32768 [ 515.885545][T18160] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 515.933894][T18160] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 516.129889][T18184] loop7: detected capacity change from 0 to 512 [ 516.304261][T18184] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 516.341555][ T4271] ocfs2: Unmounting device (7,2) on (node local) [ 516.377370][T18184] ext4 filesystem being mounted at /284/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 516.463796][T14698] EXT4-fs (loop7): unmounting filesystem. [ 516.559212][T18168] loop6: detected capacity change from 0 to 32768 [ 516.623042][T18168] read_mapping_page failed! [ 516.667999][T18168] ialloc: diAlloc returned -5! [ 517.832982][ T5616] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 518.032722][ T5616] usb 1-1: Using ep0 maxpacket: 16 [ 518.056865][ T5616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 7 [ 518.113440][ T5616] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 518.160045][ T5616] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 518.201540][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.241215][ T5616] usb 1-1: Product: syz [ 518.262384][ T5616] usb 1-1: Manufacturer: syz [ 518.292739][ T5616] usb 1-1: SerialNumber: syz [ 518.311628][ T5616] usb 1-1: config 0 descriptor?? [ 518.438460][ T5616] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 518.557015][ T56] usb 1-1: Failed to submit usb control message: -71 [ 518.565238][ T5616] usb 1-1: USB disconnect, device number 16 [ 518.591641][ T56] usb 1-1: unable to send the bmi data to the device: -71 [ 518.622015][ T56] usb 1-1: unable to get target info from device [ 518.657614][ T56] usb 1-1: could not get target info (-71) [ 518.679597][ T56] usb 1-1: could not probe fw (-71) [ 519.672754][ T5693] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 519.876844][ T5693] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 519.895004][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.940297][ T5693] usb 3-1: Product: syz [ 519.956404][ T5693] usb 3-1: Manufacturer: syz [ 519.978684][ T5693] usb 3-1: SerialNumber: syz [ 519.999938][ T5693] usb 3-1: config 0 descriptor?? [ 520.195681][T18317] loop1: detected capacity change from 0 to 64 [ 520.236370][ T5693] usb-storage 3-1:0.0: USB Mass Storage device detected [ 520.446937][ T5690] usb 3-1: USB disconnect, device number 17 [ 520.552420][T18332] CIFS: iocharset name too long [ 520.680082][T18336] program syz.6.6224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 521.286845][T18363] netlink: 180 bytes leftover after parsing attributes in process `syz.6.6237'. [ 522.891942][T18424] netlink: 'syz.2.6267': attribute type 4 has an invalid length. [ 522.942716][T18424] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6267'. [ 523.119838][ T26] audit: type=1326 audit(1754564253.281:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18432 comm="syz.6.6271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 523.200795][ T26] audit: type=1326 audit(1754564253.331:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18432 comm="syz.6.6271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 523.336867][ T26] audit: type=1326 audit(1754564253.331:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18432 comm="syz.6.6271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 523.359237][ C1] vkms_vblank_simulate: vblank timer overrun [ 523.463663][ T26] audit: type=1326 audit(1754564253.331:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18432 comm="syz.6.6271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e978ebe9 code=0x7ffc0000 [ 523.862853][ T5609] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 524.070090][T18473] netlink: 'syz.7.6292': attribute type 1 has an invalid length. [ 524.096484][ T5609] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 524.112301][ T5609] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.128920][T18473] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6292'. [ 524.148428][ T5609] usb 7-1: Product: syz [ 524.156745][ T5609] usb 7-1: Manufacturer: syz [ 524.166746][ T5609] usb 7-1: SerialNumber: syz [ 524.181062][ T5609] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 524.267276][ T5609] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 524.378060][ T26] audit: type=1326 audit(1754564254.541:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.2.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 524.433749][T18482] xt_hashlimit: overflow, rate too high: 0 [ 524.477321][ C0] usb 7-1: ath: unknown panic pattern! [ 524.485473][ T26] audit: type=1326 audit(1754564254.581:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.2.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 524.549325][ T26] audit: type=1326 audit(1754564254.581:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.2.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 524.652552][ T26] audit: type=1326 audit(1754564254.581:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.2.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 524.732703][ T5616] usb 7-1: USB disconnect, device number 16 [ 524.762876][ T26] audit: type=1326 audit(1754564254.581:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.2.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 524.808504][ T26] audit: type=1326 audit(1754564254.581:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18480 comm="syz.2.6297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f10c498ebe9 code=0x7ffc0000 [ 525.129548][T18507] device veth1 entered promiscuous mode [ 525.154612][T18507] netlink: 'syz.2.6309': attribute type 8 has an invalid length. [ 525.197205][T18507] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 525.312918][ T5609] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 525.319987][ T5609] ath9k_htc: Failed to initialize the device [ 525.356232][T18516] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.6312'. [ 525.373167][ T5616] usb 7-1: ath9k_htc: USB layer deinitialized [ 525.920854][T18538] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 525.981068][T18541] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 526.169895][T18545] netlink: 17 bytes leftover after parsing attributes in process `syz.7.6327'. [ 526.685966][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6338'. [ 526.988967][T18579] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6343'. [ 527.036325][T18579] netlink: 'syz.7.6343': attribute type 1 has an invalid length. [ 527.081822][T18584] x_tables: ip_tables: osf match: only valid for protocol 6 [ 527.621359][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6355'. [ 527.660706][T18608] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6357'. [ 527.672762][ T5609] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 527.831944][T18613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6361'. [ 527.894586][ T5609] usb 7-1: config 0 has no interfaces? [ 527.902460][ T5609] usb 7-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 527.931588][ T5609] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.940382][ T5609] usb 7-1: Product: syz [ 527.945178][ T5609] usb 7-1: Manufacturer: syz [ 527.949810][ T5609] usb 7-1: SerialNumber: syz [ 527.973334][ T5609] r8152-cfgselector 7-1: config 0 descriptor?? [ 528.142920][ T5611] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 528.175743][T18626] netlink: 'syz.0.6367': attribute type 10 has an invalid length. [ 528.205684][ T5609] r8152-cfgselector 7-1: Unknown version 0x00d0 [ 528.239849][T18626] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 528.342840][ T5611] usb 8-1: Using ep0 maxpacket: 16 [ 528.350162][ T5611] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 528.368783][ T5611] usb 8-1: config 0 has no interface number 0 [ 528.406102][T18632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6370'. [ 528.416395][ T5609] r8152-cfgselector 7-1: USB disconnect, device number 17 [ 528.423906][ T5611] usb 8-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 528.443745][ T5611] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.451896][ T5611] usb 8-1: Product: syz [ 528.479169][ T5611] usb 8-1: Manufacturer: syz [ 528.484046][ T5611] usb 8-1: SerialNumber: syz [ 528.510438][ T5611] usb 8-1: config 0 descriptor?? [ 528.734111][ T5611] usb 8-1: selecting invalid altsetting 1 [ 528.740032][ T5611] speedtch 8-1:0.1: speedtch_bind: setting interface to 1 failed (-22)! [ 528.770158][ T5611] speedtch 8-1:0.1: usbatm_usb_probe: bind failed: -22! [ 528.790291][ T5611] speedtch: probe of 8-1:0.1 failed with error -22 [ 528.821355][ T5611] usb 8-1: USB disconnect, device number 8 [ 529.152828][ T4281] Bluetooth: hci5: command 0x0406 tx timeout [ 529.814296][T18681] loop1: detected capacity change from 0 to 256 [ 529.821441][T18681] exfat: Deprecated parameter 'utf8' [ 529.920670][T18687] loop2: detected capacity change from 0 to 256 [ 529.949111][T18687] exfat: Deprecated parameter 'namecase' [ 529.965661][T18681] exfat: Deprecated parameter 'namecase' [ 530.012916][T18681] exfat: Deprecated parameter 'namecase' [ 530.018698][T18681] exfat: Deprecated parameter 'utf8' [ 530.034842][T18687] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 530.073250][T18681] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 530.141585][T18692] loop7: detected capacity change from 0 to 256 [ 530.698554][T18711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6409'. [ 530.979574][T18723] loop7: detected capacity change from 0 to 128 [ 531.195493][T18731] loop1: detected capacity change from 0 to 64 [ 531.246876][T18735] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6420'. [ 531.756783][T18753] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6430'. [ 531.992921][ T5609] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 532.128287][T18765] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 532.194834][ T5609] usb 1-1: Using ep0 maxpacket: 16 [ 532.206241][ T5609] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 532.241250][ T5609] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.286237][ T5609] usb 1-1: Product: syz [ 532.290474][ T5609] usb 1-1: Manufacturer: syz [ 532.305607][ T5609] usb 1-1: SerialNumber: syz [ 532.324734][ T5609] r8152-cfgselector 1-1: config 0 descriptor?? [ 532.456922][T18775] loop7: detected capacity change from 0 to 1024 [ 532.484212][T18775] EXT4-fs: Ignoring removed i_version option [ 532.528396][T18779] loop2: detected capacity change from 0 to 1024 [ 532.536070][T18775] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:477: comm syz.7.6441: Invalid block bitmap block 0 in block_group 0 [ 532.556934][T18775] __quota_error: 3 callbacks suppressed [ 532.556949][T18775] Quota error (device loop7): write_blk: dquota write failed [ 532.570705][T18775] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 532.581428][T18775] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.6441: Failed to acquire dquot type 0 [ 532.596704][T18775] EXT4-fs error (device loop7): ext4_free_blocks:6210: comm syz.7.6441: Freeing blocks not in datazone - block = 0, count = 4096 [ 532.625830][T18775] EXT4-fs error (device loop7): ext4_read_inode_bitmap:140: comm syz.7.6441: Invalid inode bitmap blk 0 in block_group 0 [ 532.639081][T18775] EXT4-fs error (device loop7) in ext4_free_inode:362: Corrupt filesystem [ 532.652351][ T4354] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-8 [ 532.665633][T18775] EXT4-fs (loop7): 1 orphan inode deleted [ 532.677431][T18775] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 532.692051][T18779] hfsplus: extend alloc file! (8192,63991,0) [ 532.710603][ T4354] EXT4-fs error (device loop7): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 0 [ 532.734770][T18775] EXT4-fs error (device loop7): ext4_lookup:1858: inode #15: comm syz.7.6441: iget: bad extra_isize 65535 (inode size 256) [ 532.759037][ T5609] r8152-cfgselector 1-1: Unknown version 0x0000 [ 532.773654][ T5609] r8152-cfgselector 1-1: bad CDC descriptors [ 532.817422][ T5609] r8152-cfgselector 1-1: Unknown version 0x0000 [ 532.852980][ T5609] r8152-cfgselector 1-1: USB disconnect, device number 17 [ 532.961812][T14698] EXT4-fs (loop7): unmounting filesystem. [ 533.103049][T18791] netlink: 'syz.7.6448': attribute type 10 has an invalid length. [ 533.192520][T18791] team0: Port device syz_tun added [ 533.261157][T18797] bond0: Error: Cannot enslave bond to itself. [ 533.705085][ T26] audit: type=1326 audit(1754564263.871:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.1.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 533.767274][ T26] audit: type=1326 audit(1754564263.891:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.1.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 533.838260][ T26] audit: type=1326 audit(1754564263.891:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.1.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 533.862002][ T26] audit: type=1326 audit(1754564263.891:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.1.6458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17ed78ebe9 code=0x7ffc0000 [ 533.982852][ T5609] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 534.174575][ T5609] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 534.203334][ T5609] usb 3-1: config 220 has an invalid interface descriptor of length 5, skipping [ 534.238070][ T5609] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 534.262670][ T5609] usb 3-1: config 220 has no interface number 2 [ 534.279307][ T5609] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 534.326454][ T5609] usb 3-1: config 220 interface 0 has no altsetting 0 [ 534.346703][ T5609] usb 3-1: config 220 interface 76 has no altsetting 0 [ 534.366939][ T5609] usb 3-1: config 220 interface 1 has no altsetting 0 [ 534.404934][ T5609] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 534.435508][ T5609] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.463334][ T5609] usb 3-1: Product: syz [ 534.476230][T18845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6475'. [ 534.482981][ T5609] usb 3-1: Manufacturer: syz [ 534.513731][ T5609] usb 3-1: SerialNumber: syz [ 534.527171][T18845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6475'. [ 534.566955][T18848] loop1: detected capacity change from 0 to 512 [ 534.577914][T18851] loop7: detected capacity change from 0 to 256 [ 534.599409][T18848] journal_path: Lookup failure for './file1' [ 534.623493][T18848] EXT4-fs: error: could not find journal device path [ 534.681179][T18848] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 534.745088][ T5609] usb 3-1: selecting invalid altsetting 0 [ 534.764276][ T5609] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 534.770706][ T5609] usb 3-1: No valid video chain found. [ 534.799103][T18854] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6480'. [ 534.827313][ T5609] usb 3-1: selecting invalid altsetting 0 [ 534.846253][T18848] CIFS mount error: No usable UNC path provided in device string! [ 534.846253][T18848] [ 534.846333][T18855] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6479'. [ 534.882799][ T5609] usbtest: probe of 3-1:220.1 failed with error -22 [ 534.897927][T18848] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 534.922720][ T5609] usb 3-1: USB disconnect, device number 18 [ 534.984416][T18855] netlink: 6 bytes leftover after parsing attributes in process `syz.0.6479'. [ 535.436558][T18874] loop6: detected capacity change from 0 to 1024 [ 535.516286][T18871] loop1: detected capacity change from 0 to 4096 [ 535.559217][ T4354] hfsplus: b-tree write err: -5, ino 4 [ 535.566285][T18871] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 535.674566][T18871] ntfs3: loop1: Failed to load $Extend. [ 535.730115][T18871] ntfs3: loop1: ino=5, "/" directory corrupted [ 536.031573][T18895] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6499'. [ 536.068112][T18895] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6499'. [ 536.113249][T18895] netlink: 19 bytes leftover after parsing attributes in process `syz.2.6499'. [ 536.212200][T18901] No such timeout policy "syz1" [ 536.845728][T18928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.039809][T18935] netlink: 'syz.2.6519': attribute type 32 has an invalid length. [ 537.292766][T18948] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 538.322055][T18990] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 539.544104][T19031] SET target dimension over the limit! [ 539.851889][T19045] loop2: detected capacity change from 0 to 2048 [ 539.906438][T19045] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.999354][T19051] netlink: 156 bytes leftover after parsing attributes in process `syz.7.6576'. [ 540.052862][T19051] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6576'. [ 540.088957][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6576'. [ 540.120286][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6576'. [ 540.411273][T19066] netlink: 'syz.6.6583': attribute type 1 has an invalid length. [ 540.426432][T19066] netlink: 224 bytes leftover after parsing attributes in process `syz.6.6583'. [ 540.596970][T19072] loop6: detected capacity change from 0 to 2048 [ 540.602913][ T5694] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 540.656149][T19072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 540.813998][ T5694] usb 8-1: config 0 has an invalid interface number: 152 but max is 0 [ 540.822243][ T5694] usb 8-1: config 0 has no interface number 0 [ 540.838228][ T5694] usb 8-1: config 0 interface 152 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 540.857969][ T5694] usb 8-1: config 0 interface 152 has no altsetting 0 [ 540.871864][ T5694] usb 8-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice=a3.17 [ 540.897836][ T5694] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.911684][ T5694] usb 8-1: Product: syz [ 540.953113][ T5694] usb 8-1: Manufacturer: syz [ 540.963080][ T5694] usb 8-1: SerialNumber: syz [ 540.983691][ T5694] usb 8-1: config 0 descriptor?? [ 541.004642][T19062] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 541.229543][T19062] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 541.292864][ T5694] cdc_subset 8-1:0.152 usb0: register 'cdc_subset' at usb-dummy_hcd.7-1, Yopy, 26:73:c5:13:f2:1a [ 541.467980][ T5616] usb 8-1: USB disconnect, device number 9 [ 541.485723][ T5616] cdc_subset 8-1:0.152 usb0: unregister 'cdc_subset' usb-dummy_hcd.7-1, Yopy [ 541.600010][T19109] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6603'. [ 541.643077][T19109] netlink: 43 bytes leftover after parsing attributes in process `syz.1.6603'. [ 541.701313][T19111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6604'. [ 541.932803][T19118] netlink: 'syz.1.6607': attribute type 1 has an invalid length. [ 542.228194][T19137] loop2: detected capacity change from 0 to 512 [ 542.263646][T19137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 542.371568][T19142] loop1: detected capacity change from 0 to 8 [ 542.385219][T19137] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 542.412784][T19137] ext4 filesystem being mounted at /1335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.482877][ T5609] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 542.517527][T19142] SQUASHFS error: xz decompression failed, data probably corrupt [ 542.563978][T19142] SQUASHFS error: Failed to read block 0x60: -5 [ 542.627110][T19142] SQUASHFS error: xz decompression failed, data probably corrupt [ 542.642183][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 542.653321][T19142] SQUASHFS error: Failed to read block 0x60: -5 [ 542.676500][ T26] audit: type=1800 audit(1754564272.841:228): pid=19142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6616" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 542.696201][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.702871][ T5609] usb 7-1: Using ep0 maxpacket: 16 [ 542.734133][ T5609] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 542.762454][ T5609] usb 7-1: config 0 descriptor has 1 excess byte, ignoring [ 542.787336][ T5609] usb 7-1: config 0 has no interface number 0 [ 542.805939][ T5609] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 542.870503][ T5609] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.918313][ T5609] usb 7-1: Product: syz [ 542.933441][ T5609] usb 7-1: Manufacturer: syz [ 542.938111][ T5609] usb 7-1: SerialNumber: syz [ 542.982048][ T5609] usb 7-1: config 0 descriptor?? [ 543.212314][ T5609] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 543.222828][ T5609] usb 7-1: No valid video chain found. [ 543.262862][ T5609] usb 7-1: USB disconnect, device number 18 [ 543.329915][T19132] loop7: detected capacity change from 0 to 32768 [ 543.469577][T19171] loop1: detected capacity change from 0 to 164 [ 543.505924][T19132] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 543.575799][T19132] (syz.7.6613,19132,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 543.665007][T19132] (syz.7.6613,19132,1):ocfs2_find_entry:1086 ERROR: status = -117 [ 543.704097][T19132] (syz.7.6613,19132,1):ocfs2_symlink:2065 ERROR: status = -117 [ 543.760353][T19178] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 543.784832][T19178] [U] J"—e:ÀÆ" [ 543.870446][T14698] (syz-executor,14698,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 76 [ 543.929632][T14698] ocfs2: Unmounting device (7,7) on (node local) [ 544.029413][T19185] loop6: detected capacity change from 0 to 64 [ 545.588076][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6655'. [ 545.632934][ T27] INFO: task syz-executor:4279 blocked for more than 143 seconds. [ 545.651112][ T27] Not tainted 6.1.147-syzkaller #0 [ 545.686403][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 545.722815][ T27] task:syz-executor state:D stack:22080 pid:4279 ppid:1 flags:0x00004004 [ 545.732129][ T27] Call Trace: [ 545.779052][ T27] [ 545.782077][ T27] __schedule+0x10ec/0x40b0 [ 545.816754][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 545.829348][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 545.846553][ T27] ? lock_chain_count+0x20/0x20 [ 545.856372][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 545.880888][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 545.891357][ T27] schedule+0xb9/0x180 [ 545.906096][ T27] io_schedule+0x7c/0xd0 [ 545.910589][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 545.916468][ T27] ? folio_wait_bit+0x30/0x30 [ 545.921310][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 545.928083][ T27] ? folio_mapping+0x1ba/0x4d0 [ 545.933270][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 545.939154][ T27] ? mapping_evict_folio+0x520/0x520 [ 545.948086][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 545.961015][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 545.966748][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 545.972083][ T27] evict+0x498/0x870 [ 545.976508][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 545.981539][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 545.987218][ T27] ? _raw_spin_unlock+0x24/0x40 [ 545.992229][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 545.998605][ T27] evict_inodes+0x604/0x690 [ 546.004697][ T27] ? clear_inode+0x150/0x150 [ 546.009437][ T27] ? dput+0x1c9/0x1d0 [ 546.013898][ T27] ? sync_filesystem+0x103/0x220 [ 546.018978][ T27] generic_shutdown_super+0x93/0x340 [ 546.024744][ T27] kill_block_super+0x7c/0xe0 [ 546.029807][ T27] deactivate_locked_super+0x93/0xf0 [ 546.035621][ T27] cleanup_mnt+0x463/0x4f0 [ 546.040191][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 546.045959][ T27] task_work_run+0x1ca/0x250 [ 546.050700][ T27] ? task_work_cancel+0x230/0x230 [ 546.056550][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 546.062339][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 546.072088][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 546.081204][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 546.091326][ T27] do_syscall_64+0x58/0xa0 [ 546.099435][ T27] ? clear_bhb_loop+0x60/0xb0 [ 546.108878][ T27] ? clear_bhb_loop+0x60/0xb0 [ 546.120071][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.126427][ T27] RIP: 0033:0x7f357718ff17 [ 546.130913][ T27] RSP: 002b:00007ffc357c3348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 546.139544][ T27] RAX: 0000000000000000 RBX: 00007f3577211c05 RCX: 00007f357718ff17 [ 546.147789][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc357c3400 [ 546.155950][ T27] RBP: 00007ffc357c3400 R08: 0000000000000000 R09: 0000000000000000 [ 546.164985][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc357c4490 [ 546.173245][ T27] R13: 00007f3577211c05 R14: 000000000005f0ed R15: 00007ffc357c44d0 [ 546.181273][ T27] [ 546.184545][ T27] [ 546.184545][ T27] Showing all locks held in the system: [ 546.192337][ T27] 1 lock held by rcu_tasks_kthre/12: [ 546.197844][ T27] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 546.208418][ T27] 1 lock held by rcu_tasks_trace/13: [ 546.213864][ T27] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 546.225064][ T27] 1 lock held by khungtaskd/27: [ 546.229950][ T27] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 546.239947][ T27] 2 locks held by getty/4029: [ 546.244853][ T27] #0: ffff88814d5c9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 546.254805][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 546.266011][ T27] 1 lock held by syz-executor/4279: [ 546.271253][ T27] #0: ffff88807379a0e0 (&type->s_umount_key#62){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 546.281726][ T27] [ 546.284135][ T27] ============================================= [ 546.284135][ T27] [ 546.292910][ T27] NMI backtrace for cpu 0 [ 546.297292][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.147-syzkaller #0 [ 546.305218][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.315303][ T27] Call Trace: [ 546.318590][ T27] [ 546.321530][ T27] dump_stack_lvl+0x168/0x22e [ 546.326235][ T27] ? irq_work_queue+0xb8/0x140 [ 546.331058][ T27] ? show_regs_print_info+0x12/0x12 [ 546.336289][ T27] ? load_image+0x3b0/0x3b0 [ 546.340852][ T27] ? vprintk_emit+0x571/0x680 [ 546.345563][ T27] ? printk_sprint+0x460/0x460 [ 546.350364][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 546.355323][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 546.361488][ T27] ? _printk+0xcc/0x110 [ 546.365679][ T27] ? load_image+0x3b0/0x3b0 [ 546.370260][ T27] ? load_image+0x3b0/0x3b0 [ 546.374800][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 546.380905][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 546.386918][ T27] watchdog+0xeee/0xf30 [ 546.391109][ T27] ? watchdog+0x1ed/0xf30 [ 546.395465][ T27] kthread+0x29d/0x330 [ 546.399568][ T27] ? hungtask_pm_notify+0x40/0x40 [ 546.404613][ T27] ? kthread_blkcg+0xd0/0xd0 [ 546.409251][ T27] ret_from_fork+0x1f/0x30 [ 546.413727][ T27] [ 546.417491][ T27] Sending NMI from CPU 0 to CPUs 1: [ 546.422960][ C1] NMI backtrace for cpu 1 [ 546.422970][ C1] CPU: 1 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.147-syzkaller #0 [ 546.422987][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.422997][ C1] Workqueue: bat_events batadv_nc_worker [ 546.423026][ C1] RIP: 0010:mark_lock+0x3/0x320 [ 546.423050][ C1] Code: 90 48 c7 c7 68 80 1f 8e e8 4a 41 6d 00 4c 89 f7 41 89 d9 e9 79 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 41 57 <41> 56 41 55 41 54 53 50 89 d5 49 89 f6 48 89 fb 49 bd 00 00 00 00 [ 546.423065][ C1] RSP: 0018:ffffc90000107828 EFLAGS: 00000046 [ 546.423078][ C1] RAX: 0000000000000002 RBX: 0000000000000002 RCX: ffffffff8162f82b [ 546.423089][ C1] RDX: 0000000000000008 RSI: ffff88813fec46b0 RDI: ffff88813fec3b80 [ 546.423102][ C1] RBP: ffffc90000107a90 R08: dffffc0000000000 R09: fffffbfff215ba64 [ 546.423114][ C1] R10: fffffbfff215ba64 R11: 1ffffffff215ba63 R12: ffff88813fec3b80 [ 546.423126][ C1] R13: ffff88813fec4604 R14: ffff88813fec46b0 R15: ffff88813fec46d0 [ 546.423139][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 546.423153][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.423165][ C1] CR2: 000055ab8d364950 CR3: 000000002ef62000 CR4: 00000000003506e0 [ 546.423179][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.423189][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.423204][ C1] Call Trace: [ 546.423209][ C1] [ 546.423215][ C1] __lock_acquire+0xd6f/0x7c50 [ 546.423241][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 546.423270][ C1] ? verify_lock_unused+0x140/0x140 [ 546.423294][ C1] ? verify_lock_unused+0x140/0x140 [ 546.423319][ C1] ? try_to_wake_up+0x54d/0x1080 [ 546.423342][ C1] lock_acquire+0x1b4/0x490 [ 546.423362][ C1] ? batadv_nc_worker+0xce/0x600 [ 546.423389][ C1] ? read_lock_is_recursive+0x10/0x10 [ 546.423412][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 546.423443][ C1] ? batadv_nc_worker+0xce/0x600 [ 546.423466][ C1] batadv_nc_worker+0xeb/0x600 [ 546.423489][ C1] ? batadv_nc_worker+0xce/0x600 [ 546.423514][ C1] ? process_one_work+0x7a1/0x1160 [ 546.423530][ C1] process_one_work+0x898/0x1160 [ 546.423554][ C1] ? worker_detach_from_pool+0x240/0x240 [ 546.423573][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 546.423596][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 546.423618][ C1] ? kthread_data+0x4b/0xc0 [ 546.423642][ C1] worker_thread+0xaa2/0x1250 [ 546.423670][ C1] kthread+0x29d/0x330 [ 546.423693][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 546.423710][ C1] ? kthread_blkcg+0xd0/0xd0 [ 546.423734][ C1] ret_from_fork+0x1f/0x30 [ 546.423761][ C1] [ 546.690197][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 546.697104][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.147-syzkaller #0 [ 546.705026][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.715095][ T27] Call Trace: [ 546.718393][ T27] [ 546.721338][ T27] dump_stack_lvl+0x168/0x22e [ 546.726060][ T27] ? memcpy+0x3c/0x60 [ 546.730086][ T27] ? show_regs_print_info+0x12/0x12 [ 546.735308][ T27] ? load_image+0x3b0/0x3b0 [ 546.739852][ T27] panic+0x2c9/0x710 [ 546.743771][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 546.749424][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 546.753959][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 546.760134][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 546.766392][ T27] watchdog+0xf2d/0xf30 [ 546.770571][ T27] ? watchdog+0x1ed/0xf30 [ 546.774918][ T27] kthread+0x29d/0x330 [ 546.779007][ T27] ? hungtask_pm_notify+0x40/0x40 [ 546.784042][ T27] ? kthread_blkcg+0xd0/0xd0 [ 546.788658][ T27] ret_from_fork+0x1f/0x30 [ 546.793110][ T27] [ 546.796453][ T27] Kernel Offset: disabled [ 546.800789][ T27] Rebooting in 86400 seconds..