last executing test programs: 9m43.10772203s ago: executing program 2 (id=6888): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 9m42.578980982s ago: executing program 2 (id=6892): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="202c020000000000300012800b00010065727370616e00002000028008000400ffffff7f060071001f000000040012"], 0x50}}, 0x0) 9m42.307516907s ago: executing program 2 (id=6897): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x0, @generic}) 9m42.107380869s ago: executing program 2 (id=6900): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file2\x00', 0x1000000, &(0x7f0000000a40)={[{@force}, {@force}, {}, {@part={'part', 0x3d, 0x5}}, {@type={'type', 0x3d, "43935aa7"}}, {@creator={'creator', 0x3d, "0244ed5c"}}, {@nobarrier}, {@nls={'nls', 0x3d, 'iso8859-14'}}]}, 0x42, 0x70b, &(0x7f0000000300)="$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") mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 9m41.677872125s ago: executing program 2 (id=6906): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syslog(0x2, &(0x7f0000000140)=""/41, 0x29) 9m41.120930277s ago: executing program 2 (id=6913): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 9m40.616406177s ago: executing program 32 (id=6913): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2m41.362832639s ago: executing program 3 (id=12923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000140)={0x2c, 0x2e, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0xd, 0x0, 0x0, @fd}, @nested={0x14, 0x45, 0x0, 0x1, [@nested={0x10, 0x11b, 0x0, 0x1, [@nested={0x4, 0x61}, @typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}]}, 0x2c}], 0x1, 0x0, 0x0, 0x20004081}, 0xc000) 2m41.095857554s ago: executing program 3 (id=12925): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x8, 0x0, &(0x7f0000001600)) 2m40.886513986s ago: executing program 3 (id=12928): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x180c850, &(0x7f0000000100)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e6e742c6e6f636173652c696f636861727365743d6575632d6a70000000000000000174653d312c73686f72746e616d653d6c6f7765722c757466383d302c696f636861727365743d6d6163696e7569742c757365667265652c636f6465706167653d3835302c6e6f6e756d7461496c3d302c726f6469722c6e6f6e756d7461696c3d302c757466383d302c00c322b162cd61df25b895def9502bee9e95009810e8069b28a1a7742c279b79301dcd7b7d3dade17faa92b0e638d8c3dc7702220fa1b0bf063436e87dd73b4ad42b74442db1876e699c757a57781457cf16140ae4101b69cd03670cd0f1b9894365143b2305ed3dc0ad22ee05d0725dab07a69e81dcbee809d71a613dab596c7b53341759ed5a2cdab6d8661110d7a1d2e30704bdf3584a5a8be23d241651970f8dda74906ceae015c894f9caede8bb661b19"], 0x1, 0x363, &(0x7f0000000c80)="$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") openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x19) 2m39.936510102s ago: executing program 3 (id=12935): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000d000000850000002d000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 2m39.676686517s ago: executing program 3 (id=12941): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m38.511099026s ago: executing program 3 (id=12963): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffdfffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0xfff1, 0x5}, {0xe, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x1, 0xf6, 0x8, 0x2, 0x2, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 2m22.149843766s ago: executing program 33 (id=12963): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x68, 0x14, 0xf0b, 0xfffdfffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0xfff2, 0xb}, {0xfff1, 0x5}, {0xe, 0xffff}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x0, 0x4, 0x80000001, 0x0, 0x0, 0x8}}, {0x4}}, {{0x1c, 0x1, {0x1, 0xf6, 0x8, 0x2, 0x2, 0x7}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 1m52.567618102s ago: executing program 1 (id=13576): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc0205647, &(0x7f0000000040)={0xf010000}) 1m52.147520447s ago: executing program 1 (id=13580): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 1m50.417067258s ago: executing program 1 (id=13600): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="280000006a006bb20000000000000000000000000000010008000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x28}}, 0x0) 1m50.141568205s ago: executing program 1 (id=13604): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m49.425922327s ago: executing program 1 (id=13613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000000020605000000000000000000050000040c00078008000800000000b10d0003006c6973743a73657400000000050004000000000005000500010000000500010007000000090002"], 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x8880) 1m48.809695893s ago: executing program 1 (id=13622): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1m48.334393101s ago: executing program 34 (id=13622): setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1m25.804492294s ago: executing program 0 (id=13848): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x1000) 1m25.562164358s ago: executing program 0 (id=13853): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000004c0)={0x8, 0x0, 0x2, 0x8}, 0x8) 1m25.295742963s ago: executing program 0 (id=13856): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b0400000008000900", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) 1m24.912332366s ago: executing program 0 (id=13860): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f00000003c0)={[{@map_off}, {@check_strict}, {@overriderock}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x544, &(0x7f0000001000)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) 1m24.459380613s ago: executing program 0 (id=13864): semop(0x0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000000)=[0x8, 0x7ffd, 0x80]) 1m21.842096426s ago: executing program 0 (id=13898): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000c900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 1m21.255449941s ago: executing program 35 (id=13898): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000c900000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 3.632741487s ago: executing program 8 (id=14810): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.260590129s ago: executing program 7 (id=14814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a2c000000160a030000000000000000000d0000040900020073797aff000000000900020073797a320000000080020000030a01030000000000000000050000050900010073797a30000000000c000240000000000000000247000c00c3eb088a814c49b2bbbf9e3cf2b0552cf92e891f8b7b78ab8eacdc6229ef63083c49272f7563d703a0312c583c60c036194d77abf3874c3dfd21b36ae85a17de44d8ad000c0002400000000000000004f9008c00f96b3e890a566fd130629e588423eb7cb74fcbad96e5a1288baa59964006f1f4bde574226a3a25bea896f2fafad2a363833ed1b6c4dcde67ea4fa17dcbd523cf4f6b4f20d8f778680af60b92aebf5980edc37be1c4824fbe7b38c7b95efc77ee6662af16e204d3a4d714047a0e6f2fb36ba1df53ccbfad588111b67f06edc9841126eed6208ab05158c111534858f6e008ae4d4b31804d97d201f32cbc9c85ca5c4ef007fb95f5ae5c684b17ea75590ed4536e115bd54b7f273b14d4e9c1336cbb4b51b93cc3dcb646db71ff5b2ffe544cb87e13e8bc4d0b36781e4cd21cacf6d306868d5d2dc42547a99cb6f84caf04514447aee6000000f5000c008b6d776e456d7c86ec03e1429627acecf6214a79c8683829e9f47b4224e1822ba8a34d6c7dccc46d121bd81e11cd09163f6faca3c2ab527901f95c4828e49e669eefb0eca5786c26e2ea59f4275b8530b16d96041369ccf671eac7c87eaff918d70bec077c41bc3b7ac0a3c1556b3ad56a5eb70dd89b431cfa9583e3869342d6b6d72d58d686fbe5e6ebcf38a3a7fc9e1791074aefe1fbf43e3333bbad3fe537eb2809cbe0e092eff060524eff7bb551256d2375359787f3a0a7cd287ee78c938b81ba057348bf5212d1534e57f33609000000aff47ef57d7d74bf069297c8446b04200c9940f1cde3b4d4595d0eee0e650000000900010073797a3000000000400100000b0a010100000000000000000100000862000d40942ad8b62a29040cb8799c590d3cc4b1cb777299f5077445661e59afabf96c81b2a00b7a510daff81da973db0e385f44b409c7bbeaa0e45ebc615b103a8d00916311cd495539e67c48858b6eb7c6c59d303a169c906f51f2d74de1bbf72b00005800118008000100666962004c00028008000140000000040800034000000008080003400000001808000340000000050800024000000001080002400000000308000340000000340800024000000003080003400000000853000d408b234d304ca75a503aaaaaea7a7a892af3e28912bb72c069cf768c3f8cae62352a76a6e555c9e885496d555e4472757bbe487b55529fe9adc30dfa76c6e6ae86882e579fe48dfd9eb9dbce4d024e570008000540000000080c000b40000000000000000108000f40000000019c000000050a010100000000000000000200000408000a4000000000080007006e617400400008800c00024000000000000000060c00024000000000000000050c00014000000000000000000c00024000000000000084290c000240000000000000008108000540fffffffd08000540fffffffb0900030073797a310000000008000a400000000608000540fffffffc0c0002400000000000000005140000000e0a01030000000000000000000000022c0000000c0a05000000000000000000030000020900020073797a31000000000900020073797a320000000058000000060a01030000000000000000050000013c0005800800014000000002080001400000007308000140000088090800014000000088080001400000008708000240000000010800024000000003080009400000000340000000140a010400000000000000000500000008000340000000000c0006400000000000000003090001"], 0x6d8}, 0x1, 0x0, 0x0, 0x2000c044}, 0x8008050) 2.836524854s ago: executing program 7 (id=14818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x70, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0xfffffffffffffe3e, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, 0x70}}, 0x4c040) 2.502988964s ago: executing program 7 (id=14822): r0 = socket(0xa, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r0, 0x29, 0x24, 0x0, 0xfffffffffffffd1a) 2.410010119s ago: executing program 4 (id=14824): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) 2.265130527s ago: executing program 7 (id=14827): socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000319021508fd070100e56a010203010902240001080a40040904000702b95fc30309058803200006020409058302"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 2.210820601s ago: executing program 4 (id=14828): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001340)='./file2\x00', 0x2000082, &(0x7f0000000480)={[{@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '863'}}, {@utf8no}, {@rodir}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@uni_xlate}, {@numtail}, {@shortname_mixed}, {@shortname_win95}]}, 0x26, 0x35a, &(0x7f0000001380)="$eJzs3T9oXHUcAPDv9aW5JFhzg1B0Ot0EKU3EQaeEUqGYQSuH/xYPm/ondxZyeBCHXG5RipPiIujk1kHHzuIg4ubgagWpiovdCg0+ubt3/+/sBbxY8fMZwpfv7/d9v+97eeS9hOSXVxuxc+lkXL5162YsLeViYePcRtzORSFORBIdBzHRB4uT8wDAPe52msYfacfdZ3+00o08+wHgv6v9/H/9VD+RP0Lx1fvm0RIAMGczfv//7MTslbm1BQDM0djz/5Gh4ZEf8y/0fiegY3n+DQIA/7jnX3r5mc2tiIvF4lJE9f16qV6Kp/rjm5fjzajEdpyN1TiM6LwodN4WWh+fvrB1/myx5ZdClFoV9VJEtVEvdd4UNpN2fT7WYjUKWX3aq09a9Wvt+mJEHDTa60c1Vy+djJVs/R9XYjvWYzUeGKuPuLB1fr2YHaBU7dY3Ipqx1D2JVv9nYjW+fy2uRCUuRau23//+WrF4Lt0aqq9fy7fnAQAAAAAAAAAAAAAAAAAAAADAPJwp9hR6+9+k1Ub9vYujEwpD++OUOsPZ/kDNzv5Aab67O8/VZHR/oOH9eeqlhTjxr545AAAAAAAAAAAAAAAAAAAA3Dtqe4tRrlS2d2t77+4MBo2BzNvffvH1cnSHFrLSt5J+VWTJoeN0Jw4cOYneEmmvPE2G5mRBEtGdfFC+dr3X8eCcfO8sxspbQX5sKJf1VK5UTj3886eTqv5sBQftTBJjl2U4yGXrDwxV728lliLicFrV9GD9LnNupGk6rXz/k9FMthVD48htzBB8c/ONBx+vnX6infkqW+nRx1ZfuPHx57/tlCvR7FyZSmVxt3aYznDkyEX0MmmaBcnA/ZPLrnNuwp0wOWj2M83d2l45+eH3Fx/68LuRycnk+ycdzLwzfa0vRzOLnSAXUehehL9r9eSEm39y8Mqd3t179E/c6c82ytf3f/p11qqBLxI26gAAAAAAAAAAAAAAAAAAgGPR/6PfkYE0TRtTq558bu6NAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAx6v///4GgOZaZJbjTiPGh/PZuberiy8d6qgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/I/9FQAA///bNn5J") newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x0, 0x4000) 1.864760621s ago: executing program 6 (id=14832): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a) 1.762342287s ago: executing program 8 (id=14834): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x14, 0x119, 0x0, 0x0, {0x28}}, 0x14}}, 0x8) 1.635230065s ago: executing program 6 (id=14835): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200900) 1.634425485s ago: executing program 4 (id=14836): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000240)={0xb, [0xd7, 0x400, 0x3, 0xdff, 0xf144, 0x3a, 0x0, 0x85a, 0x80, 0x80, 0xa8b, 0x9, 0xb2de, 0x3, 0xeff, 0x9, 0x4, 0xf, 0xc4fc, 0x6e75, 0x2, 0x7, 0x2, 0x5, 0xf24f, 0x8, 0x9, 0x8, 0x4, 0x42b8, 0xfffa, 0x6, 0xe, 0x3, 0x92b, 0xc, 0xffff, 0x4, 0x7, 0x488, 0xfff9, 0x1, 0x1, 0x3, 0xec, 0x401, 0x9, 0x401], 0x7}) 1.578032588s ago: executing program 8 (id=14838): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f0000000000)={[{@nobarrier}, {@order_relaxed}, {}, {@order_relaxed}, {@nobarrier}, {@errors_continue}, {@nobarrier}, {@norecovery}], [], 0x2c}, 0x3, 0xf17, &(0x7f0000001e40)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x62902, 0x0) 1.325790863s ago: executing program 4 (id=14840): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 1.108841795s ago: executing program 5 (id=14841): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001200)={@host}) 1.077405607s ago: executing program 4 (id=14842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 819.877782ms ago: executing program 5 (id=14843): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x4d6, 0x7d, 0x0, {{0x500, 0x124, 0x0, 0x0, {}, 0x400c0000, 0x0, 0x0, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x39, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\" \x83~\x01\b\xe2\xe7HP\x1cQHK\xa0/\x10\x9c\xaa\xf9\x15\t\xa2', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x4d6) 685.32335ms ago: executing program 8 (id=14844): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pidfd_send_signal(r0, 0x0, &(0x7f0000000540)={0x7, 0xfffffffe, 0x1}, 0x0) 684.42592ms ago: executing program 4 (id=14845): futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x5000000) 683.35292ms ago: executing program 6 (id=14846): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x1, 0xff01}, 0x10) 587.879176ms ago: executing program 5 (id=14847): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 487.765292ms ago: executing program 6 (id=14848): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) 487.214132ms ago: executing program 8 (id=14849): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)={0x118, 0x27, 0x1, 0x70bd2a, 0x0, "", [@nested={0x106, 0x66, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b363f2a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6"]}]}, 0x118}], 0x1}, 0x0) 403.451207ms ago: executing program 5 (id=14850): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 300.432422ms ago: executing program 6 (id=14851): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x3, 0x0) 252.833135ms ago: executing program 5 (id=14852): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) 203.342938ms ago: executing program 7 (id=14853): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$TIOCCBRK(r0, 0x5428) 139.678562ms ago: executing program 8 (id=14854): r0 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000000)={0x200, [[0x7fff], [0x2, 0x0, 0x0, 0x0, 0x0, 0xecdc, 0x0, 0xda44], [0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4]], '\x00', [{0xfffffffe}, {}, {0x0, 0x1}, {0x7fb, 0x7fc}, {}, {0x0, 0x1004}, {}, {}, {}, {0x4}, {}, {0xe}], '\x00', 0x0, 0x0, 0x0, 0x2}) 139.359732ms ago: executing program 6 (id=14855): r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @ifru_settings={0x20001100, 0x0, @fr=0x0}}) 86.018965ms ago: executing program 5 (id=14856): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@remote, 0xfffe, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, {0x2000001, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x9}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@remote, 0x0, 0x32}, 0xfcf14b182d1a503d, @in6=@private1, 0x3503, 0x1, 0x3, 0x0, 0x0, 0x0, 0xfffffffc}]}]}, 0x17c}}, 0x0) 0s ago: executing program 7 (id=14857): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20) kernel console output (not intermixed with test programs): ting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1374.715664][ T8138] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1374.751308][ T8138] usb 5-1: config 179 interface 65 has no altsetting 0 [ 1374.772681][ T6755] netlink: 'syz.1.13428': attribute type 21 has an invalid length. [ 1374.781710][ T8138] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1374.798866][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13428'. [ 1374.811590][ T8138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.867187][ T8138] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input73 [ 1374.921580][ T6765] netlink: 76 bytes leftover after parsing attributes in process `syz.5.13430'. [ 1375.152425][ T6778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13432'. [ 1375.164486][ T2919] usb 5-1: USB disconnect, device number 71 [ 1375.183497][ T2919] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1375.340839][ T6799] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13436'. [ 1375.719955][ T6820] [U] [ 1375.723633][ T6820] [U] [ 1375.726375][ T6820] [U] [ 1375.729114][ T6820] [U] [ 1375.809344][ T6820] [U] [ 1375.812128][ T6820] [U] [ 1375.814876][ T6820] [U] [ 1375.817618][ T6820] [U] [ 1375.855342][ T6820] [U] [ 1375.858121][ T6820] [U] [ 1375.860878][ T6820] [U] [ 1375.895797][ T6819] [U] [ 1375.977689][ T6834] netlink: 248 bytes leftover after parsing attributes in process `syz.5.13448'. [ 1376.155491][ T6842] loop4: detected capacity change from 0 to 128 [ 1376.873138][ T26] audit: type=1326 audit(46622698.170:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a359af79 code=0x7ffc0000 [ 1376.948814][ T26] audit: type=1326 audit(46622698.179:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a359af79 code=0x7ffc0000 [ 1377.065453][ T26] audit: type=1326 audit(46622698.197:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a359af79 code=0x7ffc0000 [ 1377.133957][ T26] audit: type=1326 audit(46622698.197:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f11a359af79 code=0x7ffc0000 [ 1377.228229][ T6837] loop1: detected capacity change from 0 to 32768 [ 1377.234835][ T26] audit: type=1326 audit(46622698.197:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.0.13460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11a359af79 code=0x7ffc0000 [ 1377.316422][ T6895] netlink: 'syz.5.13465': attribute type 10 has an invalid length. [ 1377.410514][ T6895] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1377.472863][ T6895] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1377.484777][ T6895] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1377.547138][ T6895] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1377.753160][ T6916] loop1: detected capacity change from 0 to 1024 [ 1377.866463][ T6916] hfsplus: request for non-existent node 33423360 in B*Tree [ 1377.897576][ T6916] hfsplus: request for non-existent node 33423360 in B*Tree [ 1377.968642][T18651] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1378.163611][T18651] usb 7-1: Using ep0 maxpacket: 32 [ 1378.185800][T18651] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1378.194919][T18651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.254431][T18651] usb 7-1: config 0 descriptor?? [ 1378.292981][T18651] as10x_usb: device has been detected [ 1378.311058][T18651] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1378.384970][T18651] usb 7-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 1378.441231][T18651] as10x_usb: error during firmware upload part1 [ 1378.473681][T18651] Registered device nBox DVB-T Dongle [ 1378.526039][ T6960] loop1: detected capacity change from 0 to 1024 [ 1378.566123][T18651] usb 7-1: USB disconnect, device number 3 [ 1378.604104][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13484'. [ 1378.624540][T18651] Unregistered device nBox DVB-T Dongle [ 1378.627268][T18651] as10x_usb: device has been disconnected [ 1378.708716][ T6960] hfsplus: Filesystem is marked locked, mounting read-only. [ 1378.806256][ T6960] hfsplus: filesystem is marked locked, leaving read-only. [ 1379.088438][ T7000] netlink: 168 bytes leftover after parsing attributes in process `syz.1.13489'. [ 1379.368735][ T7016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13495'. [ 1379.582583][ T7027] netlink: 'syz.6.13497': attribute type 1 has an invalid length. [ 1379.602358][ T7029] netlink: 'syz.5.13498': attribute type 21 has an invalid length. [ 1379.610733][ T7027] netlink: 'syz.6.13497': attribute type 2 has an invalid length. [ 1379.619482][ T7029] netlink: 128 bytes leftover after parsing attributes in process `syz.5.13498'. [ 1379.647602][ T7029] netlink: 3 bytes leftover after parsing attributes in process `syz.5.13498'. [ 1379.906844][ T6996] loop4: detected capacity change from 0 to 32768 [ 1379.971147][ T6996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.13488 (6996) [ 1380.040774][ T6996] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1380.082821][ T6996] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1380.125502][ T6996] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1380.134833][ T6996] BTRFS info (device loop4): enabling auto defrag [ 1380.160787][ T6996] BTRFS info (device loop4): max_inline at 4096 [ 1380.167140][ T6996] BTRFS info (device loop4): using free space tree [ 1380.494295][ T7087] netlink: 92 bytes leftover after parsing attributes in process `syz.6.13510'. [ 1380.557569][ T7087] netlink: 'syz.6.13510': attribute type 1 has an invalid length. [ 1380.736425][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1381.330093][ T7063] loop0: detected capacity change from 0 to 32768 [ 1381.373699][ T7121] vcan0 speed is unknown, defaulting to 1000 [ 1381.593997][ T7063] XFS (loop0): Mounting V5 Filesystem [ 1381.602846][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13525'. [ 1381.724401][ T7063] XFS (loop0): Ending clean mount [ 1381.881113][ T4275] XFS (loop0): Unmounting Filesystem [ 1381.988935][ T7163] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13529'. [ 1382.608164][ T7121] lo speed is unknown, defaulting to 1000 [ 1382.789097][ T7196] netlink: zone id is out of range [ 1383.351498][ T7238] loop1: detected capacity change from 0 to 1024 [ 1383.480408][ T7238] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 1383.513147][ T7238] hfsplus: xattr searching failed [ 1383.564329][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1383.564346][ T26] audit: type=1326 audit(46622704.346:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.6.13547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1383.639196][ T26] audit: type=1326 audit(46622704.346:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.6.13547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1383.742353][ T26] audit: type=1326 audit(46622704.382:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.6.13547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1383.870771][ T26] audit: type=1326 audit(46622704.382:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.6.13547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1383.931513][ T7198] loop4: detected capacity change from 0 to 32768 [ 1384.006116][ T26] audit: type=1326 audit(46622704.382:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7245 comm="syz.6.13547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1384.159593][ T26] audit: type=1400 audit(46622704.899:385): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=7265 comm="syz.0.13552" [ 1384.768725][ T7241] loop5: detected capacity change from 0 to 32768 [ 1384.824653][ T7241] (syz.5.13546,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1384.886671][ T7241] (syz.5.13546,7241,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1385.027411][ T7241] JBD2: Ignoring recovery information on journal [ 1385.209377][ T7241] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1385.296013][ T7309] loop0: detected capacity change from 0 to 128 [ 1385.328765][ T7309] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1385.384177][ T7309] EXT4-fs (loop0): resizing filesystem from 64 to 2 blocks [ 1385.397027][ T7309] EXT4-fs warning (device loop0): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 1385.619562][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 1385.653950][T20520] ocfs2: Unmounting device (7,5) on (node local) [ 1385.786173][ T7330] loop1: detected capacity change from 0 to 16 [ 1385.830176][ T7330] erofs: (device loop1): mounted with root inode @ nid 36. [ 1385.905486][ T7330] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 1385.920185][ T7341] loop5: detected capacity change from 0 to 1024 [ 1385.955929][ T7330] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 1386.003526][ T7330] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 1386.031304][ T7348] IPv6: sit2: Disabled Multicast RS [ 1386.092755][ T8138] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1386.293227][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13575'. [ 1386.299015][ T8138] usb 7-1: Using ep0 maxpacket: 32 [ 1386.322573][ T8138] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1386.335809][ T7366] netlink: 'syz.5.13575': attribute type 1 has an invalid length. [ 1386.350797][ T8138] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 1386.373467][ T8138] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1386.409519][ T8138] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1386.450965][ T8138] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1386.459039][ T8138] usb 7-1: SerialNumber: syz [ 1386.501206][ T7333] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1386.523401][ T8138] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 1386.606834][ T7376] netlink: 'syz.0.13578': attribute type 12 has an invalid length. [ 1386.739049][ T8138] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 1386.764116][ T8138] usb 7-1: USB disconnect, device number 4 [ 1386.939260][T18633] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1387.088130][ T7442] AppArmor: change_hat: Invalid input '' [ 1387.158535][T18633] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1387.203959][T18633] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1387.229198][T18633] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1387.241046][ T7127] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1387.254868][T18633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.266775][ T7451] loop0: detected capacity change from 0 to 128 [ 1387.286124][ T7382] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1387.330477][ T7451] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1387.358758][ T7451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1387.470085][ T7127] usb 6-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 1387.502316][ T7127] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.564535][ T7127] pwc: Logitech/Cisco VT Camera webcam detected. [ 1387.618086][ T7477] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.13589'. [ 1387.647645][T18633] usb 2-1: USB disconnect, device number 87 [ 1387.668584][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13591'. [ 1387.771112][ T7127] pwc: Failed to set LED on/off time (-71) [ 1387.781341][ T7127] pwc: send_video_command error -71 [ 1387.819329][ T7127] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1387.842704][ T7127] Philips webcam: probe of 6-1:127.0 failed with error -71 [ 1387.887235][ T7127] usb 6-1: USB disconnect, device number 27 [ 1387.950704][ T7543] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1388.126454][ T7553] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1388.637281][ T7579] loop5: detected capacity change from 0 to 1024 [ 1388.687815][ T7585] loop1: detected capacity change from 0 to 128 [ 1388.718335][ T7579] EXT4-fs warning (device loop5): read_mmp_block:115: Error -117 while reading MMP block 64 [ 1388.752333][ T7585] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1388.897843][ T7585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1388.978419][ T7585] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05 [ 1389.071927][ T7585] UDF-fs: error (device loop1): udf_count_free_bitmap: udf_count_free failed [ 1389.346811][ T4271] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 1389.384270][ T4271] UDF-fs: error (device loop1): udf_read_inode: (ino 104) failed !bh [ 1389.761345][ T7633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13618'. [ 1389.900402][ T7653] netlink: 180 bytes leftover after parsing attributes in process `syz.6.13621'. [ 1390.003269][ T7127] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1390.066643][T27038] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.227090][ T7127] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.293997][ T7127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1390.311367][ T7127] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1390.362999][ T7127] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1390.388983][ T7127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.406558][T27038] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.427492][ T7127] usb 6-1: Product: syz [ 1390.431721][ T7127] usb 6-1: Manufacturer: syz [ 1390.436378][ T7127] usb 6-1: SerialNumber: syz [ 1390.485205][ T7671] loop0: detected capacity change from 0 to 256 [ 1390.498576][ T7127] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1390.504424][ T7671] exfat: Deprecated parameter 'namecase' [ 1390.513001][ T7671] exfat: Deprecated parameter 'utf8' [ 1390.553691][ T7127] cdc_ncm 6-1:1.0: bind() failure [ 1390.578873][ T7671] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1390.673453][ T7671] overlayfs: filesystem on './file0' not supported [ 1390.722547][T27038] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1390.757122][ T7127] usb 6-1: USB disconnect, device number 28 [ 1390.949633][T27038] bond0: (slave netdevsim0): Releasing backup interface [ 1391.000426][T27038] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.661841][ T7731] netlink: 830 bytes leftover after parsing attributes in process `syz.5.13636'. [ 1391.948545][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13640'. [ 1391.961604][ T5682] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1391.975406][ T5682] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1391.984440][ T5682] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1391.992717][ T5682] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1392.002874][ T5682] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1392.010818][T15879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1392.055388][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1392.065972][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1392.074582][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1392.088207][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1392.096094][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1392.107095][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1392.584151][ T7702] loop6: detected capacity change from 0 to 32768 [ 1392.641599][ T7702] ea_get: extended attribute size too large: 2617245744 > INT_MAX [ 1392.915963][ T7737] vcan0 speed is unknown, defaulting to 1000 [ 1393.238379][ T7817] binder: 7816:7817 ioctl 400c620e 200000000280 returned -22 [ 1393.908095][ T7737] lo speed is unknown, defaulting to 1000 [ 1394.069414][ T7851] xt_TCPMSS: Only works on TCP SYN packets [ 1394.325561][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 1394.551752][ T7873] loop0: detected capacity change from 0 to 64 [ 1395.206582][T27038] team0: Port device wlan1 removed [ 1395.353313][ T7936] xt_connbytes: Forcing CT accounting to be enabled [ 1395.748136][ T7973] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13680'. [ 1396.050271][ T8001] IPVS: length: 132 != 8 [ 1396.166508][ T7737] chnl_net:caif_netlink_parms(): no params data found [ 1396.304510][ T26] audit: type=1326 audit(46622716.107:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.5.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1396.361490][ T26] audit: type=1326 audit(46622716.153:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.5.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1396.362554][ T4309] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1396.553093][ T26] audit: type=1326 audit(46622716.153:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.5.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1396.578613][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 1396.697662][ T4309] usb 5-1: Using ep0 maxpacket: 16 [ 1396.704725][ T4309] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 1396.719834][ T26] audit: type=1326 audit(46622716.153:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.5.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1396.757580][ T4309] usb 5-1: config 0 has no interface number 0 [ 1396.772322][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.795209][ T4309] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1396.797144][ T8083] netlink: 56 bytes leftover after parsing attributes in process `syz.5.13690'. [ 1396.814986][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.840417][ T7737] device bridge_slave_0 entered promiscuous mode [ 1396.850121][ T4309] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1396.860580][ T26] audit: type=1326 audit(46622716.153:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8023 comm="syz.5.13687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1396.901775][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.927092][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.934601][ T4309] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1396.955235][ T4309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.963574][ T4309] usb 5-1: Product: syz [ 1396.967802][ T4309] usb 5-1: Manufacturer: syz [ 1396.982802][ T4309] usb 5-1: SerialNumber: syz [ 1397.015532][ T7737] device bridge_slave_1 entered promiscuous mode [ 1397.037498][ T4309] usb 5-1: config 0 descriptor?? [ 1397.043227][ T8005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1397.061750][ T8005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1397.150143][ T7737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.245184][T27038] device hsr_slave_0 left promiscuous mode [ 1397.308601][T27038] device hsr_slave_1 left promiscuous mode [ 1397.320922][T27038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.335181][ T8005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1397.353962][ T8005] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1397.391090][T27038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.429398][T27038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.455118][T27038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.475409][T27038] device dummy0 left promiscuous mode [ 1397.498873][T27038] bridge0: port 3(dummy0) entered disabled state [ 1397.529195][T27038] device bridge_slave_1 left promiscuous mode [ 1397.553740][T27038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.569972][ T7998] loop6: detected capacity change from 0 to 32768 [ 1397.594094][T27038] device bridge_slave_0 left promiscuous mode [ 1397.615159][ T4309] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1397.639654][T27038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.641075][ T4309] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 1397.686410][ T4309] asix: probe of 5-1:0.251 failed with error -5 [ 1397.721892][ T4309] usb 5-1: USB disconnect, device number 72 [ 1397.792991][ T7998] XFS (loop6): Mounting V5 Filesystem [ 1397.847894][ T7998] XFS (loop6): Ending clean mount [ 1397.860272][T27038] device veth1_macvtap left promiscuous mode [ 1397.866525][T27038] device veth1_vlan left promiscuous mode [ 1397.893347][ T7998] XFS (loop6): Quotacheck needed: Please wait. [ 1398.007352][ T7998] XFS (loop6): Quotacheck: Done. [ 1398.101636][ T5675] XFS (loop6): Unmounting Filesystem [ 1398.458167][T27038] bond3 (unregistering): Released all slaves [ 1398.564500][T27038] bond2 (unregistering): Released all slaves [ 1398.781903][T27038] bond1 (unregistering): Released all slaves [ 1398.832092][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 1399.246552][T27038] team0 (unregistering): Port device macvlan0 removed [ 1399.723960][T27038] team0 (unregistering): Port device team_slave_1 removed [ 1399.791978][T27038] team0 (unregistering): Port device team_slave_0 removed [ 1399.864067][T27038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1399.931029][T27038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.410144][T27038] bond0 (unregistering): Released all slaves [ 1400.519581][ T7737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.535584][ T8151] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 1400.776655][ T7737] team0: Port device team_slave_0 added [ 1400.816682][ T7737] team0: Port device team_slave_1 added [ 1400.946582][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.953598][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.075773][ T7737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.086975][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 1401.164433][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.215545][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1401.342076][ T7737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1401.690732][ T7737] device hsr_slave_0 entered promiscuous mode [ 1401.756760][ T7737] device hsr_slave_1 entered promiscuous mode [ 1401.797156][ T7737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1401.854443][ T7737] Cannot create hsr debugfs directory [ 1401.912893][ T8289] netlink: 'syz.5.13720': attribute type 2 has an invalid length. [ 1402.466092][ T8379] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1402.491004][ T8379] [U] J"—e:ÀÆ" [ 1402.648022][ T7737] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1402.706398][ T7737] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1402.746998][ T8399] netlink: 'syz.0.13730': attribute type 30 has an invalid length. [ 1402.888999][ T8445] netlink: 'syz.4.13734': attribute type 1 has an invalid length. [ 1402.899464][ T7737] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1402.954530][ T7737] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1403.171865][ T8469] loop6: detected capacity change from 0 to 64 [ 1403.241193][ T8469] Trying to free block not in datazone [ 1403.246865][ T8469] Trying to free block not in datazone [ 1403.291499][ T8469] Trying to free block not in datazone [ 1403.316491][ T8469] Trying to free block not in datazone [ 1403.327147][ T8469] minix_free_block (loop6:6): bit already cleared [ 1403.369417][ T8469] Trying to free block not in datazone [ 1403.413835][ T8469] Trying to free block not in datazone [ 1403.490436][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1403.616023][ T7737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1403.676572][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1403.728448][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1403.773882][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1403.814109][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1403.858949][T27063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1403.866208][T27063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.934143][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1403.984151][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1404.021471][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1404.052091][T27063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.059308][T27063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.131293][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1404.169229][T27038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1404.205685][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1404.246081][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1404.271823][ T2919] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1404.282097][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1404.293493][ T8518] loop6: detected capacity change from 0 to 64 [ 1404.312063][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1404.390198][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1404.421335][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1404.443781][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1404.473633][ T7737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1404.504857][ T2919] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.519639][ T7737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1404.542015][ T2919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1404.573048][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1404.583977][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1404.594158][ T2919] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1404.624720][ T2919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1404.651395][ T2919] usb 1-1: SerialNumber: syz [ 1404.902177][ T2919] usb 1-1: 0:2 : does not exist [ 1404.971066][ T2919] usb 1-1: USB disconnect, device number 68 [ 1405.213246][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1405.688899][ T8593] netlink: 'syz.0.13766': attribute type 21 has an invalid length. [ 1405.713505][ T26] audit: type=1326 audit(46622724.803:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.6.13765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1405.732138][ T8593] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13766'. [ 1405.783215][ T26] audit: type=1326 audit(46622724.821:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.6.13765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1405.823249][ T8593] netlink: 'syz.0.13766': attribute type 4 has an invalid length. [ 1405.856054][ T8593] netlink: 'syz.0.13766': attribute type 5 has an invalid length. [ 1405.872661][ T26] audit: type=1326 audit(46622724.830:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.6.13765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1405.916922][ T8593] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13766'. [ 1405.966490][ T26] audit: type=1326 audit(46622724.830:394): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.6.13765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1406.044006][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1406.054056][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1406.078183][ T26] audit: type=1326 audit(46622724.830:395): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=8594 comm="syz.6.13765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1406.122743][ T7737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.097129][ T8660] netlink: 'syz.6.13783': attribute type 1 has an invalid length. [ 1407.105049][ T8660] netlink: 'syz.6.13783': attribute type 2 has an invalid length. [ 1407.113296][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13782'. [ 1407.127854][ T2918] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1407.183440][ T8662] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13782'. [ 1407.345965][ T2918] usb 6-1: Using ep0 maxpacket: 8 [ 1407.359614][ T2918] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1407.409851][ T2918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1407.459975][ T8678] loop6: detected capacity change from 0 to 256 [ 1407.465290][ T2918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1407.497849][ T2918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1407.508890][ T2918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 1407.558429][ T2918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 1407.587556][ T2918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1407.630961][ T2918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1407.674497][ T2918] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1407.692661][ T2918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.700727][ T2918] usb 6-1: Product: syz [ 1407.735723][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1407.766258][ T2918] usb 6-1: Manufacturer: syz [ 1407.767635][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1407.790966][ T2918] usb 6-1: SerialNumber: syz [ 1407.812469][ T2918] usb 6-1: config 0 descriptor?? [ 1407.818626][ T8646] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1407.872744][ T7737] device veth0_vlan entered promiscuous mode [ 1407.910515][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1407.921993][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1407.938683][ T7737] device veth1_vlan entered promiscuous mode [ 1407.990621][T14118] udevd[14118]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1408.008410][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1408.027510][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1408.045106][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1408.123734][ T2918] usb 6-1: USB disconnect, device number 29 [ 1408.165318][ T7737] device veth0_macvtap entered promiscuous mode [ 1408.201501][ T8722] loop4: detected capacity change from 0 to 64 [ 1408.214165][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1408.242824][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1408.267669][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1408.311167][ T7737] device veth1_macvtap entered promiscuous mode [ 1408.332922][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1408.350996][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1408.403614][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.426348][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.448017][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.479825][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.508455][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.552349][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.580723][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1408.597401][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.631757][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.666318][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1408.708286][T27051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1408.767680][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.814484][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.831974][ T8757] netlink: 'syz.0.13796': attribute type 1 has an invalid length. [ 1408.841053][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.865354][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.885991][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.921620][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1408.948255][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1408.997549][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1409.027278][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1409.047657][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1409.067532][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1409.099775][ T7737] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.108811][ T7140] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 1409.148708][ T7737] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.190918][ T7737] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.205220][ T7737] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1409.348509][ T7140] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 1409.367596][ T7140] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1409.397797][ T7140] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1409.427575][ T7140] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1409.462354][T27063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.481096][T27063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.498443][ T7140] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1409.534537][T27038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1409.554248][ T7140] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1409.636957][ T7140] usb 7-1: string descriptor 0 read error: -22 [ 1409.648884][T27031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.649367][ T7140] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1409.690972][ T7140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.708031][T27031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.715773][T27063] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1409.755150][ T7140] usb 7-1: config 0 descriptor?? [ 1409.772195][ T8748] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1409.798834][ T7140] hub 7-1:0.0: bad descriptor, ignoring hub [ 1409.806294][ T7140] hub: probe of 7-1:0.0 failed with error -5 [ 1409.850244][ T7140] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input74 [ 1409.928088][ C0] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 1410.157568][ T7140] usb 7-1: USB disconnect, device number 5 [ 1410.157789][ C0] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -19 [ 1410.441200][ T8845] netlink: 'syz.4.13813': attribute type 10 has an invalid length. [ 1410.450451][ T8840] mkiss: ax0: crc mode is auto. [ 1410.515810][ T8845] team0: Device veth1_vlan is already a lower device of the team interface [ 1410.848803][ T8864] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1411.000816][ T8875] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13819'. [ 1411.281558][ T8892] netlink: 'syz.6.13824': attribute type 10 has an invalid length. [ 1411.314054][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1411.320460][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1411.349383][ T8892] netlink: 55 bytes leftover after parsing attributes in process `syz.6.13824'. [ 1411.615268][ T8905] loop0: detected capacity change from 0 to 1024 [ 1411.682264][ T8905] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1411.700138][ T8905] EXT4-fs (loop0): 1 truncate cleaned up [ 1411.779323][ T8905] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1412.005841][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 1412.464413][ T8958] overlayfs: unrecognized mount option "obj_role=(‹&À!+/$:\(" or missing value [ 1412.501946][ T8968] netlink: 'syz.6.13844': attribute type 10 has an invalid length. [ 1412.622688][ T8968] team0: Device veth1_vlan failed to register rx_handler [ 1412.787170][ T8981] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1413.055627][ T7127] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1413.285530][ T7127] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1413.314822][ T7127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.341611][ T7127] usb 5-1: config 0 descriptor?? [ 1413.563625][ T9018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13856'. [ 1413.694568][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13857'. [ 1413.720953][ T9024] netlink: 16 bytes leftover after parsing attributes in process `syz.7.13858'. [ 1413.833728][ T7127] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 1413.857208][ T7127] hackrf 5-1:0.0: Could not detect board [ 1413.862960][ T7127] hackrf: probe of 5-1:0.0 failed with error -71 [ 1413.930506][ T7127] usb 5-1: USB disconnect, device number 73 [ 1413.952120][ T9040] loop0: detected capacity change from 0 to 164 [ 1414.012778][ T9046] netlink: 'syz.7.13861': attribute type 10 has an invalid length. [ 1414.098203][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13862'. [ 1414.119427][ T9046] team0: Device veth1_vlan failed to register rx_handler [ 1414.121498][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13862'. [ 1414.152554][ T9051] loop5: detected capacity change from 0 to 512 [ 1414.179935][ T9051] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 1414.203653][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13862'. [ 1414.244645][ T4275] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1414.343911][ T4275] ISOFS: unable to read i-node block [ 1414.360911][ T4275] ISOFS: unable to read i-node block [ 1414.646801][ T9066] IPVS: length: 218 != 24 [ 1414.738576][ T9071] loop6: detected capacity change from 0 to 1024 [ 1414.769533][ T9071] EXT4-fs: Ignoring removed nobh option [ 1414.791732][ T9051] EXT4-fs (loop5): failed to open journal device unknown-block(11,127) -6 [ 1414.828593][ T9071] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz.6.13868: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1414.892649][ T4275] team0: Port device syz_tun removed [ 1414.949830][ T9071] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.13868: couldn't read orphan inode 11 (err -117) [ 1414.990619][ T9071] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1415.220566][ T5675] EXT4-fs (loop6): unmounting filesystem. [ 1415.722776][ T9124] syz.6.13878 (9124): /proc/9123/oom_adj is deprecated, please use /proc/9123/oom_score_adj instead. [ 1416.148457][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13886'. [ 1416.294130][ T9153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13889'. [ 1416.717369][ T7127] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1416.955611][ T7127] usb 7-1: Using ep0 maxpacket: 32 [ 1416.963044][ T7127] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1416.988631][ T7127] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.041876][T27031] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.043860][ T7127] usb 7-1: config 0 has no interface number 0 [ 1417.103263][ T7127] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1417.171402][ T7127] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1417.204775][ T7127] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.212857][ T7127] usb 7-1: Product: syz [ 1417.228167][ T7127] usb 7-1: Manufacturer: syz [ 1417.232839][ T7127] usb 7-1: SerialNumber: syz [ 1417.261798][ T7127] usb 7-1: config 0 descriptor?? [ 1417.314840][ T7127] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 1417.325768][T27031] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.333725][ T7127] radio-si470x: probe of 7-1:0.35 failed with error -5 [ 1417.477619][T27031] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.508444][ T7127] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1417.706482][ T9209] loop5: detected capacity change from 0 to 4096 [ 1417.752209][ T7127] radio-raremono 7-1:0.35: raremono_cmd_main failed (-71) [ 1417.781335][T27031] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.810345][ T7127] radio-raremono 7-1:0.35: V4L2 device registered as radio48 [ 1417.862584][ T7127] usb 7-1: USB disconnect, device number 6 [ 1417.916435][ T7127] radio-raremono 7-1:0.35: Thanko's Raremono disconnected [ 1418.179313][ T9209] ntfs3: loop5: no free space to extend mft [ 1418.496492][ T9236] loop7: detected capacity change from 0 to 8192 [ 1418.573357][ T9236] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1418.710528][ T9236] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 1418.741803][ T9236] REISERFS (device loop7): using ordered data mode [ 1418.769400][ T9236] reiserfs: using flush barriers [ 1418.816197][ T9236] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1418.862846][ T9236] REISERFS (device loop7): checking transaction log (loop7) [ 1418.906002][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1418.921149][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1418.930528][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1418.971080][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1418.980827][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1418.991243][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1419.091183][ T4556] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1419.286553][ T4556] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 1419.294732][ T4556] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.318479][ T9236] REISERFS (device loop7): Using tea hash to sort names [ 1419.358691][ T9236] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 1419.359783][ T4556] usb 7-1: config 0 has no interface number 0 [ 1419.445554][ T4556] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1419.475489][ T4556] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.504442][ T4556] usb 7-1: Product: syz [ 1419.508685][ T4556] usb 7-1: Manufacturer: syz [ 1419.532854][ T4556] usb 7-1: SerialNumber: syz [ 1419.564926][ T4556] usb 7-1: config 0 descriptor?? [ 1419.593373][ T4556] hub 7-1:0.31: bad descriptor, ignoring hub [ 1419.618516][ T4556] hub: probe of 7-1:0.31 failed with error -5 [ 1419.661668][ T4556] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 1419.707935][ T4556] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 1419.716562][ T4556] usb 7-1: Failed to create links for entity 6 [ 1419.758174][ T4556] usb 7-1: Failed to register entities (-22). [ 1419.835549][ T4556] usb 7-1: USB disconnect, device number 7 [ 1419.907407][ T9272] vcan0 speed is unknown, defaulting to 1000 [ 1419.981622][ T9320] loop4: detected capacity change from 0 to 8 [ 1420.729348][ T9272] lo speed is unknown, defaulting to 1000 [ 1420.844786][ T4556] usb 5-1: new low-speed USB device number 74 using dummy_hcd [ 1421.053439][ T4556] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1421.077497][ T4556] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1421.114054][ T4556] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1421.134103][ T4556] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1421.181204][ T4556] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1421.191662][T15879] Bluetooth: hci4: command 0x0409 tx timeout [ 1421.191885][ T4556] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1421.336019][ T4556] usb 5-1: string descriptor 0 read error: -22 [ 1421.360744][ T4556] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1421.380905][ T4556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.418710][ T4556] usb 5-1: config 0 descriptor?? [ 1421.441243][ T9345] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1421.455016][ T4556] hub 5-1:0.0: bad descriptor, ignoring hub [ 1421.507453][ T4556] hub: probe of 5-1:0.0 failed with error -5 [ 1421.555048][ T4556] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input75 [ 1421.770555][ T9431] netlink: 'syz.6.13938': attribute type 2 has an invalid length. [ 1421.812950][ T7140] usb 5-1: USB disconnect, device number 74 [ 1421.812955][ C0] usb_acecad 5-1:0.0: can't resubmit intr, dummy_hcd.4-1/input0, status -19 [ 1422.552627][ T9493] nftables ruleset with unbound chain [ 1422.563963][ T9272] chnl_net:caif_netlink_parms(): no params data found [ 1422.870715][ T7140] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1422.946033][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.954292][ T9272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.962989][ T9272] device bridge_slave_0 entered promiscuous mode [ 1422.972757][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.980255][ T9272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.988717][ T9272] device bridge_slave_1 entered promiscuous mode [ 1423.046090][ T9272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.087452][ T7140] usb 5-1: Using ep0 maxpacket: 32 [ 1423.096818][ T7140] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 1423.119837][ T7140] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.154100][ T7140] usb 5-1: config 0 has no interface number 0 [ 1423.172557][ T7140] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1423.210136][ T7140] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1423.230978][ T7140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.244558][ T9601] netlink: 'syz.7.13953': attribute type 2 has an invalid length. [ 1423.257311][ T7140] usb 5-1: Product: syz [ 1423.262019][ T7140] usb 5-1: Manufacturer: syz [ 1423.298393][ T7140] usb 5-1: SerialNumber: syz [ 1423.360033][ T9272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.378975][ T7140] usb 5-1: config 0 descriptor?? [ 1423.408704][ T7140] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 1423.444835][T15879] Bluetooth: hci4: command 0x041b tx timeout [ 1423.456263][ T7140] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 1423.614081][ T7140] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1423.624024][ T9272] team0: Port device team_slave_0 added [ 1423.682808][ T9272] team0: Port device team_slave_1 added [ 1423.767826][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.814092][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.849696][ T7140] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 1423.880033][ T7140] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 1423.908629][ T9272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.959867][ T7140] usb 5-1: USB disconnect, device number 75 [ 1423.967365][ T7127] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 1424.008795][ T9272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.015808][ T9272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.043158][ T7140] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 1424.084140][ T9272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.179625][ T7127] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 1424.212372][ T7127] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 1424.229928][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13962'. [ 1424.252080][T27031] device hsr_slave_0 left promiscuous mode [ 1424.263517][ T7127] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1424.272918][ T9683] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13962'. [ 1424.282800][ T7127] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1424.297914][T27031] device hsr_slave_1 left promiscuous mode [ 1424.319529][T27031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1424.332002][ T7127] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1424.351379][T27031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1424.366470][T27031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1424.376031][ T7127] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1424.411792][T27031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1424.423540][ T7127] usb 8-1: string descriptor 0 read error: -22 [ 1424.429925][ T7127] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1424.461422][T27031] device bridge_slave_1 left promiscuous mode [ 1424.487921][T27031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.502704][ T7127] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.540357][ T7127] usb 8-1: config 0 descriptor?? [ 1424.546557][ T9635] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1424.560247][T27031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1424.591929][ T7127] hub 8-1:0.0: bad descriptor, ignoring hub [ 1424.615491][ T7127] hub: probe of 8-1:0.0 failed with error -5 [ 1424.657840][ T7127] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input76 [ 1424.772986][T27031] device veth1_macvtap left promiscuous mode [ 1424.809821][T27031] device veth0_macvtap left promiscuous mode [ 1424.823884][T27031] device veth1_vlan left promiscuous mode [ 1424.836989][T27031] device veth0_vlan left promiscuous mode [ 1424.902843][ T4309] usb 8-1: USB disconnect, device number 2 [ 1425.102337][T18633] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1425.292390][T27031] infiniband syz1: set down [ 1425.301433][T27031] bond4 (unregistering): Released all slaves [ 1425.310062][T18633] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1425.330353][T18633] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1425.367437][T27031] bond3 (unregistering): Released all slaves [ 1425.397577][T18633] usb 7-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 1425.445303][ T9695] loop5: detected capacity change from 0 to 32768 [ 1425.452034][T18633] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.477366][T27031] bond2 (unregistering): Released all slaves [ 1425.502667][ T9695] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1425.523798][T18633] usb 7-1: Product: syz [ 1425.552000][T18633] usb 7-1: Manufacturer: syz [ 1425.556684][T18633] usb 7-1: SerialNumber: syz [ 1425.584818][ T9695] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1425.619432][ T9695] (syz.5.13963,9695,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 1425.636078][ T9695] (syz.5.13963,9695,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 1425.650524][ T9695] (syz.5.13963,9695,1):ocfs2_mknod:298 ERROR: status = -2 [ 1425.659797][ T9695] (syz.5.13963,9695,1):ocfs2_mknod:502 ERROR: status = -2 [ 1425.668239][T18633] usb 7-1: config 0 descriptor?? [ 1425.676158][ T9695] (syz.5.13963,9695,1):ocfs2_create:676 ERROR: status = -2 [ 1425.709249][T15879] Bluetooth: hci4: command 0x040f tx timeout [ 1425.850411][T20520] ocfs2: Unmounting device (7,5) on (node local) [ 1425.860878][T27031] bond1 (unregistering): Released all slaves [ 1426.212404][ T14] usb 7-1: USB disconnect, device number 8 [ 1426.320633][ T9795] loop7: detected capacity change from 0 to 256 [ 1426.835073][T27031] team0 (unregistering): Port device macvlan0 removed [ 1427.654229][T27031] team0 (unregistering): Port device team_slave_1 removed [ 1427.719982][T27031] team0 (unregistering): Port device team_slave_0 removed [ 1427.788346][T27031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1427.852175][T27031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1427.929938][ T7140] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1427.952085][T15879] Bluetooth: hci4: command 0x0419 tx timeout [ 1428.146527][ T7140] usb 7-1: Using ep0 maxpacket: 8 [ 1428.155546][ T7140] usb 7-1: config 6 has an invalid interface number: 2 but max is 0 [ 1428.164352][ T7140] usb 7-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.174808][ T7140] usb 7-1: config 6 has no interface number 0 [ 1428.181890][ T7140] usb 7-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1428.208643][ T7140] usb 7-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1428.222368][ T7140] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.230731][ T7140] usb 7-1: Product: syz [ 1428.235334][ T7140] usb 7-1: Manufacturer: syz [ 1428.240409][ T7140] usb 7-1: SerialNumber: syz [ 1428.270024][ T7140] hso 7-1:6.2: Failed to find INT IN ep [ 1428.528367][ T7140] usb 7-1: USB disconnect, device number 9 [ 1428.654313][T27031] bond0 (unregistering): Released all slaves [ 1428.686044][T27051] smc: removing ib device syz1 [ 1428.924866][ T4309] vcan0 speed is unknown, defaulting to 1000 [ 1428.987301][ T9272] device hsr_slave_0 entered promiscuous mode [ 1429.057270][ T9272] device hsr_slave_1 entered promiscuous mode [ 1429.068464][ T9272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1429.076128][ T9272] Cannot create hsr debugfs directory [ 1429.793287][ T7140] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1429.907378][ T9962] loop6: detected capacity change from 0 to 256 [ 1429.971329][ T9962] FAT-fs (loop6): Directory bread(block 64) failed [ 1430.046912][ T7140] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1430.064857][ T9962] FAT-fs (loop6): Directory bread(block 65) failed [ 1430.088586][ T7140] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.104374][ T9962] FAT-fs (loop6): Directory bread(block 66) failed [ 1430.115677][ T7140] usb 8-1: Product: syz [ 1430.126588][ T7140] usb 8-1: Manufacturer: syz [ 1430.139689][ T7140] usb 8-1: SerialNumber: syz [ 1430.144324][ T9962] FAT-fs (loop6): Directory bread(block 67) failed [ 1430.144450][ T9962] FAT-fs (loop6): Directory bread(block 68) failed [ 1430.197249][ T9962] FAT-fs (loop6): Directory bread(block 69) failed [ 1430.254363][ T9962] FAT-fs (loop6): Directory bread(block 70) failed [ 1430.275591][ T7140] usb 8-1: config 0 descriptor?? [ 1430.337130][ T9962] FAT-fs (loop6): Directory bread(block 71) failed [ 1430.376814][ T9962] FAT-fs (loop6): Directory bread(block 72) failed [ 1430.409541][ T9962] FAT-fs (loop6): Directory bread(block 73) failed [ 1430.512466][ T7140] hso 8-1:0.0: Can't find BULK IN endpoint [ 1430.524313][ T7140] usb-storage 8-1:0.0: USB Mass Storage device detected [ 1430.581058][ T9272] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1430.648655][ T9272] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1430.749542][ T9272] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1430.760364][ T2918] usb 8-1: USB disconnect, device number 3 [ 1430.808514][ T9272] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1431.188422][ T9272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1431.263184][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1431.295467][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1431.317538][ T9272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1431.326802][T10048] netlink: 'syz.6.14011': attribute type 1 has an invalid length. [ 1431.372871][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1431.397234][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1431.441735][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1431.448945][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1431.478343][T10055] netlink: 'syz.4.14013': attribute type 1 has an invalid length. [ 1431.530299][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1431.586053][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1431.615693][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1431.635260][ T26] audit: type=1326 audit(46622748.728:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.5.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1431.666838][T10064] fuse: Bad value for 'fd' [ 1431.668511][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1431.678481][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.738567][ T26] audit: type=1326 audit(46622748.746:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.5.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1431.761730][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1431.793448][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1431.819855][ T26] audit: type=1326 audit(46622748.746:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.5.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1431.888001][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1431.918891][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1431.920407][ T26] audit: type=1326 audit(46622748.746:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.5.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1431.945724][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1432.002513][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1432.022172][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1432.049609][ T52] block nbd0: Attempted send on invalid socket [ 1432.055889][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1432.096688][T27053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1432.098406][ T26] audit: type=1326 audit(46622748.746:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.5.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1432.120118][T27053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1432.127003][ C0] vkms_vblank_simulate: vblank timer overrun [ 1432.130636][ T8138] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1432.149757][ T26] audit: type=1326 audit(46622748.746:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.5.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1432.172795][ T26] audit: type=1326 audit(46622748.746:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.5.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1432.242511][T27053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1432.251181][T27053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1432.259754][ T26] audit: type=1326 audit(46622748.746:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.5.14016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1432.291946][ T9272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1432.360853][ T8138] usb 5-1: Using ep0 maxpacket: 16 [ 1432.368064][ T8138] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1432.382560][ T8138] usb 5-1: config 0 has no interface number 0 [ 1432.404948][ T8138] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1432.449325][ T8138] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1432.494362][ T8138] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1432.527156][ T8138] usb 5-1: Product: syz [ 1432.531387][ T8138] usb 5-1: SerialNumber: syz [ 1432.578786][ T8138] usb 5-1: config 0 descriptor?? [ 1432.608795][ T8138] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input77 [ 1432.896292][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1432.908618][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1432.916165][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1432.923489][ T8138] usb 5-1: USB disconnect, device number 76 [ 1432.956833][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1432.963862][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1432.975808][ T8138] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1433.364291][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1433.372435][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1433.391976][ T9272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1434.021765][T10175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14038'. [ 1434.296618][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14042'. [ 1434.825662][T27053] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1434.868451][T27053] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1434.945813][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1434.968037][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1434.990956][ T9272] device veth0_vlan entered promiscuous mode [ 1435.013657][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1435.037782][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1435.081685][ T9272] device veth1_vlan entered promiscuous mode [ 1435.152564][T10219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.14050'. [ 1435.239340][T27038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1435.265215][T27038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1435.281110][T27038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1435.365302][T27038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1435.411624][ T9272] device veth0_macvtap entered promiscuous mode [ 1435.468621][ T9272] device veth1_macvtap entered promiscuous mode [ 1435.617259][ T9272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.684533][ T9272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.733180][ T9272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.770867][T10251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14059'. [ 1435.774185][ T9272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.802752][ T9272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.846079][ T9272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.881768][ T9272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.915340][ T9272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.937594][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.947285][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1435.982327][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1436.007364][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1436.024337][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1436.057129][ T9272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.068478][ T9272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.109369][ T9272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.145297][T10267] netlink: 56 bytes leftover after parsing attributes in process `syz.7.14063'. [ 1436.151276][ T9272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.217125][ T9272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.255087][ T9272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.265771][ T9272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.292552][ T9272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.341499][ T9272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.369077][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1436.378737][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1436.409477][T10277] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1436.461169][ T9272] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.499390][ T9272] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.508194][ T9272] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.559663][ T9272] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.858249][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1436.866126][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.930899][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1437.011161][T27063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.035903][T27063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.060988][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1437.068533][ T26] audit: type=1326 audit(46622753.731:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1437.169751][ T26] audit: type=1326 audit(46622753.749:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1437.286282][ T26] audit: type=1326 audit(46622753.749:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1437.416340][ T26] audit: type=1326 audit(46622753.749:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1437.451497][ T26] audit: type=1326 audit(46622753.749:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10325 comm="syz.5.14077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1437.513838][T10336] device bond3 entered promiscuous mode [ 1437.532378][T10336] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1437.728299][T10382] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 1438.141569][ T26] audit: type=1326 audit(46622754.728:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.4.14089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29eff9af79 code=0x7ffc0000 [ 1438.255692][ T26] audit: type=1326 audit(46622754.792:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.4.14089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f29eff9af79 code=0x7ffc0000 [ 1438.373830][ T26] audit: type=1326 audit(46622754.792:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.4.14089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29eff9af79 code=0x7ffc0000 [ 1438.481438][ T26] audit: type=1326 audit(46622754.792:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10402 comm="syz.4.14089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29eff9af79 code=0x7ffc0000 [ 1439.004693][T10443] netdevsim netdevsim8: Firmware load for '..' refused, path contains '..' component [ 1439.278487][T10445] loop4: detected capacity change from 0 to 8192 [ 1439.705020][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14109'. [ 1440.071414][T10499] netlink: 212 bytes leftover after parsing attributes in process `syz.4.14115'. [ 1440.357111][T10510] loop6: detected capacity change from 0 to 512 [ 1440.437734][T10510] EXT4-fs: Ignoring removed orlov option [ 1440.508740][T10510] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1440.515224][T10510] EXT4-fs error (device loop6): ext4_find_extent:900: inode #4: comm syz.6.14119: inode has invalid extent depth: 7 [ 1440.581660][T10510] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=-117 [ 1440.633057][T10510] EXT4-fs warning (device loop6): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1440.706196][T10510] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 1440.712900][T10510] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1440.846161][T10510] EXT4-fs error (device loop6): ext4_lookup:1855: inode #2: comm syz.6.14119: 'file0' linked to parent dir [ 1440.867827][T10479] loop8: detected capacity change from 0 to 32768 [ 1440.921856][T10539] loop7: detected capacity change from 0 to 16 [ 1440.968620][T10539] erofs: (device loop7): mounted with root inode @ nid 36. [ 1440.994003][T10539] erofs: (device loop7): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 1441.058975][T10539] erofs: (device loop7): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 89 [ 1441.088849][T10539] erofs: (device loop7): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 1441.105008][ T5675] EXT4-fs (loop6): unmounting filesystem. [ 1441.118683][ T4556] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1441.153113][T10539] erofs: (device loop7): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 1441.179681][T10539] erofs: (device loop7): z_erofs_read_folio: failed to read, err [-117] [ 1441.343497][ T4556] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.385354][ T4556] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1441.437923][ T4556] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice=fd.00 [ 1441.475902][ T4556] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=2 [ 1441.547789][ T4556] usb 5-1: Product: syz [ 1441.552488][ T4556] usb 5-1: Manufacturer: syz [ 1441.601911][ T4556] usb 5-1: SerialNumber: syz [ 1441.877883][ T4556] usb 5-1: 0:2 : does not exist [ 1441.882889][ T4556] usb 5-1: unit 5 not found! [ 1441.894518][ T2918] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1441.924250][T10579] loop6: detected capacity change from 0 to 1024 [ 1441.970484][ T4556] usb 5-1: USB disconnect, device number 77 [ 1442.133083][ T2918] usb 8-1: Using ep0 maxpacket: 8 [ 1442.140830][ T2918] usb 8-1: unable to get BOS descriptor set [ 1442.161810][ T2918] usb 8-1: config 0 has an invalid interface number: 125 but max is 0 [ 1442.193700][ T2918] usb 8-1: config 0 has no interface number 0 [ 1442.211930][ T2918] usb 8-1: config 0 interface 125 has no altsetting 0 [ 1442.224163][T10608] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1442.243673][ T2918] usb 8-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 1442.257357][T10608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1442.279058][ T2918] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.288941][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1442.315174][T10608] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1442.323491][ T2918] usb 8-1: Product: syz [ 1442.333879][ T2918] usb 8-1: Manufacturer: syz [ 1442.348212][ T2918] usb 8-1: SerialNumber: syz [ 1442.366845][ T2918] usb 8-1: config 0 descriptor?? [ 1442.391090][ T2918] hub 8-1:0.125: bad descriptor, ignoring hub [ 1442.428347][ T2918] hub: probe of 8-1:0.125 failed with error -5 [ 1442.470620][ T2918] usb 8-1: Found UVC 0.00 device syz (17dc:0202) [ 1442.477071][ T2918] usb 8-1: No valid video chain found. [ 1442.773191][ T2918] usb 8-1: USB disconnect, device number 4 [ 1443.150844][T10651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1443.457499][T10668] netlink: 'syz.5.14151': attribute type 11 has an invalid length. [ 1443.503415][T10668] netlink: 140 bytes leftover after parsing attributes in process `syz.5.14151'. [ 1443.765769][T10624] loop4: detected capacity change from 0 to 32768 [ 1443.838419][T10624] XFS (loop4): Mounting V5 Filesystem [ 1443.886667][T10682] loop6: detected capacity change from 0 to 4096 [ 1443.986897][T10624] XFS (loop4): Ending clean mount [ 1443.995079][T10624] XFS (loop4): Quotacheck needed: Please wait. [ 1444.017937][T10682] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1444.142154][T10624] XFS (loop4): Quotacheck: Done. [ 1444.189829][T10682] ntfs3: loop6: failed to convert "c46c" to iso8859-9 [ 1444.301357][ T4273] XFS (loop4): Unmounting Filesystem [ 1445.223246][T10743] loop8: detected capacity change from 0 to 4096 [ 1445.263866][ T2918] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1445.441589][T10766] loop4: detected capacity change from 0 to 1764 [ 1445.487481][ T2918] usb 6-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 1445.540880][ T2918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.573745][ T2918] usb 6-1: Product: syz [ 1445.589474][ T2918] usb 6-1: Manufacturer: syz [ 1445.594145][ T2918] usb 6-1: SerialNumber: syz [ 1445.644364][ T2918] usb 6-1: config 0 descriptor?? [ 1445.653381][ T2918] usbsevseg 6-1:0.0: USB 7 Segment device now attached [ 1445.814491][T10772] loop7: detected capacity change from 0 to 4096 [ 1445.890878][ T7127] usb 6-1: USB disconnect, device number 30 [ 1445.899766][T10772] __ntfs_error: 1 callbacks suppressed [ 1445.899783][T10772] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1445.907128][ T7127] usbsevseg 6-1:0.0: USB 7 Segment now disconnected [ 1445.957150][T10772] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1446.007698][T10772] ntfs: (device loop7): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1446.072647][T10772] ntfs: (device loop7): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1446.148233][T10772] ntfs: (device loop7): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1446.193922][T10772] ntfs: volume version 3.1. [ 1446.202501][T10772] ntfs: (device loop7): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1446.236930][T10772] ntfs: (device loop7): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1446.241234][T10816] loop8: detected capacity change from 0 to 8 [ 1446.285627][T10816] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1446.312454][T10772] ntfs: (device loop7): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1446.345986][T10772] ntfs: (device loop7): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1446.353257][T10816] cramfs: Error -3 while decompressing! [ 1446.382257][T10772] ntfs: (device loop7): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1446.401596][T10816] cramfs: ffffffff96d881e8(26)->ffff888032429000(4096) [ 1446.415101][ T2910] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1446.444530][T10816] cramfs: Error -5 while decompressing! [ 1446.455697][T10816] cramfs: ffffffff96d88202(26)->ffff888032fea000(4096) [ 1446.513608][T10816] cramfs: Error -3 while decompressing! [ 1446.578914][T10816] cramfs: ffffffff96d8821c(16)->ffff8880523ae000(4096) [ 1446.607204][T10816] cramfs: Error -3 while decompressing! [ 1446.620091][ T2910] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1446.650859][T10816] cramfs: ffffffff96d881e8(26)->ffff888032429000(4096) [ 1446.658187][ T2910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.700551][ T2910] usb 7-1: config 0 descriptor?? [ 1447.137445][T10854] loop4: detected capacity change from 0 to 64 [ 1447.184256][ T2910] ath6kl: Failed to submit usb control message: -71 [ 1447.212885][ T2910] ath6kl: unable to send the bmi data to the device: -71 [ 1447.239006][ T2910] ath6kl: Unable to send get target info: -71 [ 1447.264176][ T2910] ath6kl: Failed to init ath6kl core: -71 [ 1447.295478][T10862] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.400418][ T2910] ath6kl_usb: probe of 7-1:0.0 failed with error -71 [ 1447.418347][ T2910] usb 7-1: USB disconnect, device number 10 [ 1447.565777][T10877] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.14193'. [ 1447.607014][T10877] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1448.020974][T10896] overlayfs: failed to resolve './file0': -2 [ 1448.104617][T10888] loop8: detected capacity change from 0 to 4096 [ 1448.195095][T10888] NILFS (loop8): invalid segment: Checksum error in segment payload [ 1448.229034][T10888] NILFS (loop8): trying rollback from an earlier position [ 1448.270289][T10852] loop5: detected capacity change from 0 to 32768 [ 1448.328797][T10888] NILFS (loop8): recovery complete [ 1448.372144][T10909] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1448.512036][T10917] loop4: detected capacity change from 0 to 512 [ 1448.702443][T10917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1448.852866][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 1449.111958][T10941] loop4: detected capacity change from 0 to 64 [ 1450.359420][T11010] loop7: detected capacity change from 0 to 1024 [ 1450.394122][T11010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1450.425641][T11010] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1450.486809][T11010] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1450.572705][T11010] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1450.639536][T11010] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1450.734413][T11032] netlink: 60 bytes leftover after parsing attributes in process `syz.4.14236'. [ 1450.750305][T11036] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1450.789379][T11032] unsupported nlmsg_type 40 [ 1450.829355][ T7737] EXT4-fs (loop7): unmounting filesystem. [ 1451.330598][ T2910] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1451.536296][ T2910] usb 8-1: Using ep0 maxpacket: 32 [ 1451.547671][ T2910] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1451.600512][ T2910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1451.621112][T11083] loop5: detected capacity change from 0 to 164 [ 1451.638477][ T2910] usb 8-1: Product: syz [ 1451.642733][ T2910] usb 8-1: Manufacturer: syz [ 1451.677981][ T2910] usb 8-1: SerialNumber: syz [ 1451.700085][ T2910] usb 8-1: config 0 descriptor?? [ 1452.170000][ T2910] peak_usb 8-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1452.195825][ T2910] peak_usb 8-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1452.285508][ T2910] peak_usb: probe of 8-1:0.0 failed with error -71 [ 1452.302509][ T2910] usb 8-1: USB disconnect, device number 5 [ 1452.432284][T11140] loop8: detected capacity change from 0 to 256 [ 1453.075026][ T2919] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1453.282777][ T2919] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1453.313292][ T2919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1453.342481][ T2919] usb 6-1: config 0 descriptor?? [ 1453.369270][ T2919] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1453.582734][ T2919] gspca_spca508: reg_read err -71 [ 1453.589917][ T2919] gspca_spca508: reg_read err -71 [ 1453.620903][ T2919] gspca_spca508: reg_read err -71 [ 1453.642816][ T2919] gspca_spca508: reg_read err -71 [ 1453.649160][ T7140] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1453.674063][ T2919] gspca_spca508: reg_read err -71 [ 1453.690657][ T2919] gspca_spca508: reg write: error -71 [ 1453.701307][ T2919] spca508: probe of 6-1:0.0 failed with error -71 [ 1453.745073][ T2919] usb 6-1: USB disconnect, device number 31 [ 1453.856756][ T7140] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1453.893783][ T7140] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1453.928258][ T7140] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice=fd.00 [ 1453.977831][ T7140] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=2 [ 1453.997576][ T7140] usb 9-1: Product: syz [ 1454.012827][ T7140] usb 9-1: Manufacturer: syz [ 1454.028050][ T7140] usb 9-1: SerialNumber: syz [ 1454.286623][ T7140] usb 9-1: 0:2 : does not exist [ 1454.304902][ T7140] usb 9-1: unit 5 not found! [ 1454.376246][ T7140] usb 9-1: USB disconnect, device number 2 [ 1454.613435][T11279] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1454.623472][T11281] loop4: detected capacity change from 0 to 64 [ 1454.658661][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1454.816140][T11288] loop6: detected capacity change from 0 to 2048 [ 1454.930249][T11288] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1455.555427][T11331] loop4: detected capacity change from 0 to 8 [ 1455.564139][T11333] loop5: detected capacity change from 0 to 64 [ 1456.291501][T11376] loop8: detected capacity change from 0 to 512 [ 1456.320766][ T7140] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1456.337462][T11376] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1456.473835][T11376] EXT4-fs error (device loop8): xattr_find_entry:297: inode #15: comm syz.8.14313: corrupted xattr entries [ 1456.565539][ T7140] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1456.573793][ T7140] usb 5-1: config 0 has no interface number 0 [ 1456.591052][ T7140] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1456.595911][T11376] EXT4-fs (loop8): Remounting filesystem read-only [ 1456.613069][ T7140] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1456.626889][ T7140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.661700][T11376] EXT4-fs (loop8): 1 truncate cleaned up [ 1456.683559][T11376] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1456.693606][ T7140] usb 5-1: config 0 descriptor?? [ 1456.711653][ T7140] cp210x 5-1:0.255: cp210x converter detected [ 1456.882991][ T9272] EXT4-fs (loop8): unmounting filesystem. [ 1457.066618][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14321'. [ 1457.151073][ T7140] cp210x 5-1:0.255: failed to get vendor val 0x000e size 3: -71 [ 1457.176663][ T7140] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1457.226157][ T7140] usb 5-1: USB disconnect, device number 78 [ 1457.275276][ T7140] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1457.292343][T11429] loop7: detected capacity change from 0 to 256 [ 1457.311029][ T7140] cp210x 5-1:0.255: device disconnected [ 1457.381960][T11429] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1457.731731][T11449] loop5: detected capacity change from 0 to 4096 [ 1457.767902][T11449] NILFS: invalid option "cp=0x00aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa": too large checkpoint number [ 1457.800527][T11462] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14329'. [ 1457.859722][ T4375] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1458.166961][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 1458.166977][ T26] audit: type=1326 audit(46622773.216:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11482 comm="syz.5.14346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1458.261641][ T26] audit: type=1326 audit(46622773.244:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11482 comm="syz.5.14346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1458.406808][T11487] loop8: detected capacity change from 0 to 4096 [ 1458.414253][ T26] audit: type=1326 audit(46622773.253:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11482 comm="syz.5.14346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1458.520204][ T26] audit: type=1326 audit(46622773.253:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11482 comm="syz.5.14346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1458.643871][ T26] audit: type=1326 audit(46622773.253:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11482 comm="syz.5.14346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1459.149456][T11539] netlink: 'syz.8.14351': attribute type 21 has an invalid length. [ 1459.179870][T11539] netlink: 144 bytes leftover after parsing attributes in process `syz.8.14351'. [ 1459.328632][ T7140] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1459.542579][ T7140] usb 5-1: Using ep0 maxpacket: 32 [ 1459.550829][ T7140] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1459.582347][ T7140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.611637][ T7140] usb 5-1: config 0 descriptor?? [ 1459.657037][ T7140] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1459.788445][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14361'. [ 1459.878914][ T7140] gspca_sq930x: reg_r 001f failed -71 [ 1459.884441][ T7140] sq930x: probe of 5-1:0.0 failed with error -71 [ 1459.932484][ T7140] usb 5-1: USB disconnect, device number 79 [ 1460.696871][T11635] device sit0 entered promiscuous mode [ 1460.719190][T11635] netlink: 'syz.4.14378': attribute type 1 has an invalid length. [ 1460.786062][T11635] netlink: 'syz.4.14378': attribute type 3 has an invalid length. [ 1461.774959][T11700] ieee802154 phy0 wpan0: encryption failed: -22 [ 1461.997977][T11701] loop4: detected capacity change from 0 to 4096 [ 1462.063717][T11701] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1462.192767][T11701] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1462.354801][T11729] kAFS: unparsable volume name [ 1462.371885][T27063] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 1462.389572][ T4273] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1462.407907][ T4273] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1462.421635][ T4273] ntfs3: loop4: ntfs_set_state r=3 failed, -22. [ 1462.469439][T27063] ntfs3: loop4: ntfs3_write_inode r=3 failed, -22. [ 1462.491792][ T4273] ntfs3: loop4: ntfs_evict_inode r=3 failed, -22. [ 1462.641205][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14409'. [ 1462.864023][T11754] loop8: detected capacity change from 0 to 1024 [ 1462.955533][T11754] hfsplus: xattr searching failed [ 1463.492348][T11799] netlink: 'syz.4.14425': attribute type 2 has an invalid length. [ 1463.826852][T11818] overlayfs: unrecognized mount option "\" or missing value [ 1463.970749][T11825] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14432'. [ 1464.158921][T11838] netlink: 'syz.4.14435': attribute type 2 has an invalid length. [ 1464.195724][T11838] netlink: 'syz.4.14435': attribute type 11 has an invalid length. [ 1464.243781][T11838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14435'. [ 1465.727376][T11928] loop8: detected capacity change from 0 to 256 [ 1465.747048][ T26] audit: type=1326 audit(46622780.213:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1465.769436][ C1] vkms_vblank_simulate: vblank timer overrun [ 1465.828330][ T26] audit: type=1326 audit(46622780.213:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1465.915530][ T26] audit: type=1326 audit(46622780.259:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1466.023506][ T26] audit: type=1326 audit(46622780.268:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1466.096733][ T7140] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1466.161860][ T26] audit: type=1326 audit(46622780.268:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1466.184142][ C1] vkms_vblank_simulate: vblank timer overrun [ 1466.256908][ T26] audit: type=1326 audit(46622780.268:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1466.294255][T11960] loop6: detected capacity change from 0 to 164 [ 1466.313558][ T7140] usb 9-1: Using ep0 maxpacket: 32 [ 1466.322680][ T7140] usb 9-1: config 4 has an invalid interface number: 228 but max is 0 [ 1466.346925][ T7140] usb 9-1: config 4 has no interface number 0 [ 1466.364833][T11960] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1466.380813][ T26] audit: type=1326 audit(46622780.259:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1466.403175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1466.415637][ T7140] usb 9-1: config 4 interface 228 altsetting 68 endpoint 0x7 has an invalid bInterval 147, changing to 11 [ 1466.460326][ T7140] usb 9-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid maxpacket 41529, setting to 1024 [ 1466.478548][T11964] loop5: detected capacity change from 0 to 1024 [ 1466.510125][ T26] audit: type=1326 audit(46622780.268:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1466.545570][ T7140] usb 9-1: config 4 interface 228 has no altsetting 0 [ 1466.566857][T11964] hfsplus: xattr searching failed [ 1466.578642][ T7140] usb 9-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 1466.588918][ T7140] usb 9-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 1466.616561][ T26] audit: type=1326 audit(46622780.268:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.5.14464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f89bbb9af79 code=0x7ffc0000 [ 1466.638882][ C1] vkms_vblank_simulate: vblank timer overrun [ 1466.650702][ T7140] usb 9-1: Product: syz [ 1466.654961][ T7140] usb 9-1: Manufacturer: syz [ 1466.688085][ T7140] usb 9-1: SerialNumber: syz [ 1466.904313][T11985] loop4: detected capacity change from 0 to 736 [ 1466.969007][ T7140] usb 9-1: invalid MIDI in EP 0 [ 1467.077094][ T7140] snd-usb-audio: probe of 9-1:4.228 failed with error -22 [ 1467.121110][ T7140] usb 9-1: USB disconnect, device number 3 [ 1467.142084][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1467.408826][T12031] loop4: detected capacity change from 0 to 256 [ 1467.459480][T12031] FAT-fs (loop4): Directory bread(block 64) failed [ 1467.481253][T12031] FAT-fs (loop4): Directory bread(block 65) failed [ 1467.499469][T12031] FAT-fs (loop4): Directory bread(block 66) failed [ 1467.508106][T12031] FAT-fs (loop4): Directory bread(block 67) failed [ 1467.515476][T12031] FAT-fs (loop4): Directory bread(block 68) failed [ 1467.525829][T12031] FAT-fs (loop4): Directory bread(block 69) failed [ 1467.539508][T12031] FAT-fs (loop4): Directory bread(block 70) failed [ 1467.546507][T12031] FAT-fs (loop4): Directory bread(block 71) failed [ 1467.573472][T12031] FAT-fs (loop4): Directory bread(block 72) failed [ 1467.620489][T12031] FAT-fs (loop4): Directory bread(block 73) failed [ 1467.651472][T12044] loop7: detected capacity change from 0 to 128 [ 1467.728323][T12044] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1467.754407][ T7140] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1467.788547][T12052] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14486'. [ 1467.973555][ T7140] usb 6-1: config 4 has an invalid interface number: 28 but max is 0 [ 1467.991204][ T7140] usb 6-1: config 4 has no interface number 0 [ 1468.000710][ T7737] EXT4-fs (loop7): unmounting filesystem. [ 1468.013156][ T7140] usb 6-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1468.073667][ T7140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.093223][ T7140] usb 6-1: Product: syz [ 1468.097901][ T7140] usb 6-1: Manufacturer: syz [ 1468.126850][ T7140] usb 6-1: SerialNumber: syz [ 1468.183435][ T7140] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:4.28/input/input79 [ 1468.399191][ T3622] bcm5974 6-1:4.28: could not read from device [ 1468.448507][ T3622] bcm5974 6-1:4.28: could not read from device [ 1468.462630][ T7140] bcm5974 6-1:4.28: could not read from device [ 1468.542459][ T7140] input: failed to attach handler mousedev to device input79, error: -5 [ 1468.588008][ T7140] usb 6-1: USB disconnect, device number 32 [ 1468.601639][ T3622] bcm5974 6-1:4.28: could not read from device [ 1468.868654][ T14] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1469.110771][ T14] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1469.118727][ T14] usb 7-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 1469.159237][ T14] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.183630][T12131] loop7: detected capacity change from 0 to 4096 [ 1469.205783][ T14] usb 7-1: config 0 descriptor?? [ 1469.248553][ T14] usb 7-1: selecting invalid altsetting 0 [ 1469.264987][T12131] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1469.287274][ T14] usb 7-1: can't set first interface for hiFace device. [ 1469.298235][T12131] ntfs3: loop7: Failed to load $Extend. [ 1469.304609][ T14] snd-usb-hiface: probe of 7-1:0.0 failed with error -5 [ 1469.430542][T12143] loop4: detected capacity change from 0 to 4096 [ 1469.467518][T12143] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1469.489322][ T7140] usb 7-1: USB disconnect, device number 11 [ 1469.810978][T12170] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1469.825866][T12170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1469.833408][T12170] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1470.709331][T12216] loop7: detected capacity change from 0 to 64 [ 1471.405477][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14532'. [ 1471.762723][ T7140] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1472.006045][ T7140] usb 6-1: config index 0 descriptor too short (expected 65183, got 72) [ 1472.027789][ T7140] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1472.082641][ T7140] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.120230][ T7140] usb 6-1: Product: syz [ 1472.124468][ T7140] usb 6-1: Manufacturer: syz [ 1472.174320][ T7140] usb 6-1: SerialNumber: syz [ 1472.183426][T12305] loop7: detected capacity change from 0 to 256 [ 1472.204384][ T7140] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1472.244715][T12305] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1472.288582][ T7140] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1472.405978][T12305] exFAT-fs (loop7): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1472.406248][T12305] exFAT-fs (loop7): Filesystem has been set read-only [ 1472.521425][T12316] loop8: detected capacity change from 0 to 4096 [ 1472.602040][T12258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.606258][T12258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.616482][T12323] tmpfs: Unknown parameter 'no' [ 1472.715036][ T4309] usb 6-1: USB disconnect, device number 33 [ 1472.777998][T12332] SET target dimension over the limit! [ 1473.226256][T12348] loop7: detected capacity change from 0 to 4096 [ 1473.318277][T12348] ntfs: volume version 3.1. [ 1473.323040][ T14] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1473.463791][ T7140] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1473.470866][ T7140] ath9k_htc: Failed to initialize the device [ 1473.499458][ T4309] usb 6-1: ath9k_htc: USB layer deinitialized [ 1473.532363][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1473.567373][ T14] usb 7-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1473.624331][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.647036][ T14] usb 7-1: Product: syz [ 1473.687432][ T14] usb 7-1: Manufacturer: syz [ 1473.720966][ T14] usb 7-1: SerialNumber: syz [ 1473.786714][ T14] usb 7-1: config 0 descriptor?? [ 1473.815255][ T14] hub 7-1:0.0: bad descriptor, ignoring hub [ 1473.851776][ T14] hub: probe of 7-1:0.0 failed with error -5 [ 1473.902862][ T14] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input80 [ 1474.138534][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14565'. [ 1474.978256][T12452] loop8: detected capacity change from 0 to 256 [ 1475.390182][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14584'. [ 1475.453033][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14585'. [ 1475.570632][ T7140] usb 7-1: USB disconnect, device number 12 [ 1475.625529][T12478] loop6: detected capacity change from 0 to 2048 [ 1475.765035][T12478] NILFS error (device loop6): nilfs_check_page: bad entry in directory #2: unaligned directory entry - offset=0, inode=18446736377128157191, rec_len=65535, name_len=255 [ 1475.897904][T12508] loop7: detected capacity change from 0 to 16 [ 1475.923682][T12506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1475.963183][T12508] erofs: (device loop7): mounted with root inode @ nid 36. [ 1476.040968][T12508] erofs: (device loop7): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet [ 1476.277451][T12519] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1476.336857][T12519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1476.370407][T12519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1476.783885][T12552] tmpfs: Bad value for 'mpol' [ 1476.843695][ T2919] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1477.060466][ T2919] usb 6-1: Using ep0 maxpacket: 16 [ 1477.071684][ T2919] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1477.092881][ T2919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.101003][ T2919] usb 6-1: Product: syz [ 1477.113053][ T2919] usb 6-1: Manufacturer: syz [ 1477.125278][ T2919] usb 6-1: SerialNumber: syz [ 1477.136332][ T7140] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 1477.145876][ T2919] r8152-cfgselector 6-1: config 0 descriptor?? [ 1477.356563][ T7140] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1477.397697][ T7140] usb 5-1: config 7 has an invalid interface number: 29 but max is 0 [ 1477.432731][ T7140] usb 5-1: config 7 has no interface number 0 [ 1477.439024][ T7140] usb 5-1: config 7 interface 29 altsetting 1 endpoint 0x1 has invalid maxpacket 112, setting to 8 [ 1477.493923][ T7140] usb 5-1: config 7 interface 29 has no altsetting 0 [ 1477.523846][ T7140] usb 5-1: string descriptor 0 read error: -22 [ 1477.541507][ T7140] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=a2.36 [ 1477.562052][ T7140] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.588039][ T7140] i2c-tiny-usb 5-1:7.29: version a2.36 found at bus 005 address 080 [ 1477.617184][ T2919] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1477.646997][ T2919] r8152-cfgselector 6-1: bad CDC descriptors [ 1477.702395][ T2919] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1477.740994][ T2919] r8152-cfgselector 6-1: USB disconnect, device number 34 [ 1477.876812][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1477.883275][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.029900][ T7140] (null): failure reading functionality [ 1478.044585][ T7140] i2c i2c-2: failure reading functionality [ 1478.091711][ T7140] i2c i2c-2: connected i2c-tiny-usb device [ 1478.129219][ T7140] usb 5-1: USB disconnect, device number 80 [ 1478.851079][ T14] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1479.061893][ T14] usb 7-1: config 0 has an invalid interface number: 207 but max is 0 [ 1479.071834][ T14] usb 7-1: config 0 has no interface number 0 [ 1479.105421][ T14] usb 7-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 1479.128070][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.183990][ T14] usb 7-1: Product: syz [ 1479.188229][ T14] usb 7-1: Manufacturer: syz [ 1479.227845][ T14] usb 7-1: SerialNumber: syz [ 1479.257172][ T14] usb 7-1: config 0 descriptor?? [ 1479.326302][ T14] qmi_wwan 7-1:0.207: bogus CDC Union: master=0, slave=1 [ 1479.515383][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz.7.14635'. [ 1479.550770][ T14] qmi_wwan: probe of 7-1:0.207 failed with error -22 [ 1479.777398][ T2919] usb 7-1: USB disconnect, device number 13 [ 1480.401719][ T4309] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1480.624729][ T4309] usb 5-1: Using ep0 maxpacket: 16 [ 1480.632674][ T4309] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1480.671554][ T4309] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 1480.686513][T12765] loop8: detected capacity change from 0 to 4096 [ 1480.702899][ T4309] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 1480.735741][ T4309] usb 5-1: Product: syz [ 1480.739990][ T4309] usb 5-1: Manufacturer: syz [ 1480.773673][ T4309] usb 5-1: SerialNumber: syz [ 1480.797599][ T4309] usb 5-1: config 0 descriptor?? [ 1480.875603][T12777] netlink: 122896 bytes leftover after parsing attributes in process `syz.6.14653'. [ 1481.089190][ T4309] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 1481.160108][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1481.183017][ T4309] usb 5-1: USB disconnect, device number 81 [ 1481.451250][T12821] netlink: 48 bytes leftover after parsing attributes in process `syz.8.14659'. [ 1481.469844][T12821] tc_dump_action: action bad kind [ 1481.895312][T12841] netlink: 'syz.4.14663': attribute type 1 has an invalid length. [ 1481.932532][T12841] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14663'. [ 1482.699764][T12884] loop6: detected capacity change from 0 to 512 [ 1482.778619][T12884] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1482.785462][ T14] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1482.802550][T12884] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #15: comm syz.6.14677: corrupted inode contents [ 1482.934389][T12884] EXT4-fs (loop6): Remounting filesystem read-only [ 1482.940980][T12884] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1482.999770][T12884] EXT4-fs (loop6): Remounting filesystem read-only [ 1483.006396][T12884] EXT4-fs error (device loop6): ext4_do_update_inode:5272: inode #15: comm syz.6.14677: corrupted inode contents [ 1483.031500][ T14] usb 9-1: config 4 has an invalid interface number: 28 but max is 0 [ 1483.050916][ T14] usb 9-1: config 4 has no interface number 0 [ 1483.064982][T12884] EXT4-fs (loop6): Remounting filesystem read-only [ 1483.071568][T12884] EXT4-fs error (device loop6): ext4_evict_inode:327: inode #15: comm syz.6.14677: mark_inode_dirty error [ 1483.106614][ T14] usb 9-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= a.3a [ 1483.116690][T12884] EXT4-fs (loop6): Remounting filesystem read-only [ 1483.123407][T12884] EXT4-fs (loop6): 1 orphan inode deleted [ 1483.160352][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1483.168442][ T14] usb 9-1: Product: syz [ 1483.177359][T12884] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1483.209938][ T14] usb 9-1: Manufacturer: syz [ 1483.223374][ T14] usb 9-1: SerialNumber: syz [ 1483.254852][ T14] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:4.28/input/input81 [ 1483.388961][ T5675] EXT4-fs (loop6): unmounting filesystem. [ 1483.472985][ T3622] bcm5974 9-1:4.28: could not read from device [ 1483.524859][ T14] bcm5974 9-1:4.28: could not read from device [ 1483.577473][ T3622] bcm5974 9-1:4.28: could not read from device [ 1483.635393][ T14] input: failed to attach handler mousedev to device input81, error: -5 [ 1483.662952][T12921] loop6: detected capacity change from 0 to 1024 [ 1483.679385][T12923] loop5: detected capacity change from 0 to 16 [ 1483.687333][T12921] EXT4-fs: Ignoring removed oldalloc option [ 1483.699305][ T3622] bcm5974 9-1:4.28: could not read from device [ 1483.713074][ T14] usb 9-1: USB disconnect, device number 4 [ 1483.732123][T12921] EXT4-fs: Ignoring removed bh option [ 1483.741303][T12923] erofs: (device loop5): mounted with root inode @ nid 36. [ 1483.755126][ T3622] bcm5974 9-1:4.28: could not read from device [ 1483.806239][T12921] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1483.864032][T12923] syz.5.14682: attempt to access beyond end of device [ 1483.864032][T12923] loop5: rw=0, sector=1936876908, nr_sectors = 1 limit=16 [ 1483.901026][T12921] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1483.952377][T12923] syz.5.14682: attempt to access beyond end of device [ 1483.952377][T12923] loop5: rw=0, sector=3955228672, nr_sectors = 1 limit=16 [ 1484.107413][ T5675] EXT4-fs (loop6): unmounting filesystem. [ 1485.115061][ T2919] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1485.154937][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.179465][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.222489][T13002] loop8: detected capacity change from 0 to 1024 [ 1485.257261][T13002] EXT4-fs: Ignoring removed oldalloc option [ 1485.282422][T13002] EXT4-fs: Ignoring removed bh option [ 1485.323712][T13002] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1485.359064][ T2919] usb 6-1: Using ep0 maxpacket: 32 [ 1485.382968][ T2919] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1485.407256][ T2919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.424714][ T2919] usb 6-1: Product: syz [ 1485.428951][ T2919] usb 6-1: Manufacturer: syz [ 1485.433673][ T2919] usb 6-1: SerialNumber: syz [ 1485.446362][T13002] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1485.520415][ T2919] usb 6-1: config 0 descriptor?? [ 1485.790615][ T2919] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 1485.811316][ T2919] eb 2a 3b 80 9b e4 7a f0 [ 1485.822894][ T2919] snd-usb-6fire: probe of 6-1:0.0 failed with error -5 [ 1485.860319][ T9272] EXT4-fs (loop8): unmounting filesystem. [ 1486.034950][ T2919] usb 6-1: USB disconnect, device number 35 [ 1486.298393][T13042] netlink: 'syz.6.14702': attribute type 2 has an invalid length. [ 1486.482447][T13042] device .*! entered promiscuous mode [ 1487.401176][T13098] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14716'. [ 1487.425985][T13098] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14716'. [ 1488.478321][T13143] x_tables: duplicate entry at hook 3 [ 1488.501372][ T26] audit: type=1326 audit(46622801.222:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.14731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1488.599168][ T26] audit: type=1326 audit(46622801.240:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.14731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1488.739685][ T26] audit: type=1326 audit(46622801.240:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.14731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1488.818641][T13160] netlink: 'syz.6.14734': attribute type 27 has an invalid length. [ 1488.826823][ T26] audit: type=1326 audit(46622801.240:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.14731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1488.826868][ T26] audit: type=1326 audit(46622801.240:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13145 comm="syz.6.14731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1488.907727][T13163] netlink: 'syz.5.14733': attribute type 4 has an invalid length. [ 1489.075272][T13173] xt_policy: neither incoming nor outgoing policy selected [ 1489.179311][T13160] netlink: 164 bytes leftover after parsing attributes in process `syz.6.14734'. [ 1489.844992][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.875902][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.962037][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14746'. [ 1489.988865][T13205] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14746'. [ 1490.134987][T13171] loop5: detected capacity change from 0 to 32768 [ 1490.191032][T13171] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 1490.225583][T13171] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1490.273370][T13215] loop7: detected capacity change from 0 to 1024 [ 1490.361709][T13171] (syz.5.14737,13171,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 1490.469534][T13171] (syz.5.14737,13171,0):ocfs2_xattr_block_find:2835 ERROR: status = -12 [ 1490.524168][T27038] hfsplus: b-tree write err: -5, ino 4 [ 1490.771494][T20520] ocfs2: Unmounting device (7,5) on (node local) [ 1491.107800][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14755'. [ 1491.145678][T13248] loop7: detected capacity change from 0 to 1024 [ 1491.242182][T13248] EXT4-fs: Ignoring removed nobh option [ 1491.338822][T13248] EXT4-fs error (device loop7): ext4_ext_check_inode:520: inode #11: comm syz.7.14756: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 1491.431116][T13248] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.14756: couldn't read orphan inode 11 (err -117) [ 1491.523656][T13248] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1491.739174][ T7737] EXT4-fs (loop7): unmounting filesystem. [ 1491.787232][T13275] loop6: detected capacity change from 0 to 4096 [ 1491.836295][T13275] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1491.935594][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14767'. [ 1491.973385][T13294] netlink: 'syz.7.14766': attribute type 1 has an invalid length. [ 1492.008869][T13275] ntfs3: loop6: failed to convert "c46c" to cp857 [ 1492.020823][T13294] netlink: 220 bytes leftover after parsing attributes in process `syz.7.14766'. [ 1492.037189][T13282] loop8: detected capacity change from 0 to 4096 [ 1492.115101][T13282] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 1492.236213][T13282] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1492.363803][ T26] audit: type=1326 audit(46622804.775:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1492.501329][ T26] audit: type=1326 audit(46622804.822:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1492.641263][ T26] audit: type=1326 audit(46622804.822:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1492.797870][ T26] audit: type=1326 audit(46622804.822:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1492.964220][ T26] audit: type=1326 audit(46622804.822:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13305 comm="syz.6.14770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17da59af79 code=0x7ffc0000 [ 1493.504390][T13367] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1494.056659][T13399] loop5: detected capacity change from 0 to 256 [ 1494.115403][T13399] exfat: Deprecated parameter 'namecase' [ 1494.151698][T13399] exfat: Deprecated parameter 'namecase' [ 1494.278615][T13399] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1494.411744][T13416] program syz.7.14797 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1494.735859][T13432] delete_channel: no stack [ 1494.813695][T13440] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14805'. [ 1495.055180][T13448] netlink: 'syz.4.14806': attribute type 13 has an invalid length. [ 1495.217757][T15879] Bluetooth: hci4: command 0x0407 tx timeout [ 1495.402305][T13471] netlink: 'syz.5.14813': attribute type 74 has an invalid length. [ 1495.423292][ T2919] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1495.535049][T13474] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14814'. [ 1495.634243][ T2919] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1495.660077][ T2919] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.679516][ T2919] usb 9-1: Product: syz [ 1495.684053][ T2919] usb 9-1: Manufacturer: syz [ 1495.715906][ T2919] usb 9-1: SerialNumber: syz [ 1495.788754][ T2919] usb 9-1: config 0 descriptor?? [ 1495.805161][ T2919] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1495.944176][T13490] netlink: 'syz.7.14818': attribute type 2 has an invalid length. [ 1495.974185][T13490] netlink: 44 bytes leftover after parsing attributes in process `syz.7.14818'. [ 1496.259338][ T7140] usb 9-1: USB disconnect, device number 5 [ 1496.547750][T13529] loop4: detected capacity change from 0 to 256 [ 1496.658922][T13529] FAT-fs (loop4): Directory bread(block 64) failed [ 1496.665687][T13529] FAT-fs (loop4): Directory bread(block 65) failed [ 1496.687435][T13529] FAT-fs (loop4): Directory bread(block 66) failed [ 1496.705312][T13529] FAT-fs (loop4): Directory bread(block 67) failed [ 1496.721096][T13529] FAT-fs (loop4): Directory bread(block 68) failed [ 1496.733511][T13529] FAT-fs (loop4): Directory bread(block 69) failed [ 1496.751238][T13529] FAT-fs (loop4): Directory bread(block 70) failed [ 1496.766948][T13529] FAT-fs (loop4): Directory bread(block 71) failed [ 1496.784988][T13529] FAT-fs (loop4): Directory bread(block 72) failed [ 1496.795859][T13529] FAT-fs (loop4): Directory bread(block 73) failed [ 1496.896887][ T14] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1497.124269][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 1497.134738][ T14] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1497.159895][ T14] usb 8-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1497.200299][ T14] usb 8-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 0 [ 1497.210239][ T14] usb 8-1: config 8 interface 0 has no altsetting 0 [ 1497.234422][ T14] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1497.253731][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.278596][ T14] usb 8-1: Product: syz [ 1497.282828][ T14] usb 8-1: Manufacturer: syz [ 1497.289797][ T14] usb 8-1: SerialNumber: syz [ 1497.405382][T13566] loop8: detected capacity change from 0 to 4096 [ 1497.469224][T13575] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1497.504721][T13566] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1497.532986][ T14] usb 8-1: selecting invalid altsetting 0 [ 1497.629342][T13566] NILFS (loop8): mounting fs with errors [ 1497.690354][ T14] snd-usb-audio: probe of 8-1:8.0 failed with error -12 [ 1497.740148][ T4390] udevd[4390]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1497.748570][T13566] NILFS error (device loop8): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=32, inode=9, rec_len=24, name_len=6 [ 1497.772817][ T14] usb 8-1: USB disconnect, device number 6 [ 1498.319738][T13628] netlink: 'syz.8.14849': attribute type 1 has an invalid length. [ 1498.348282][T13628] netlink: 220 bytes leftover after parsing attributes in process `syz.8.14849'. [ 1498.394437][T13628] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14849'. [ 1498.674154][ T28] INFO: task syz-executor:4267 blocked for more than 143 seconds. [ 1498.682099][ T28] Not tainted syzkaller #0 [ 1498.722187][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1498.740182][ T28] task:syz-executor state:D stack:22064 pid:4267 ppid:1 flags:0x00004004 [ 1498.772840][ T28] Call Trace: [ 1498.784743][ T28] [ 1498.787782][ T28] __schedule+0x11d1/0x40e0 [ 1498.792379][ T28] ? mark_lock+0x94/0x320 [ 1498.805953][ T28] ? __sched_text_start+0x8/0x8 [ 1498.810900][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1498.821600][ T28] ? lock_chain_count+0x20/0x20 [ 1498.842868][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1498.853162][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1498.862286][ T28] schedule+0xb9/0x180 [ 1498.866523][ T28] io_schedule+0x7c/0xd0 [ 1498.882638][ T28] folio_wait_bit_common+0x70a/0xfa0 [ 1498.888223][ T28] ? folio_wait_bit+0x30/0x30 [ 1498.893283][ T28] ? migration_entry_wait_on_locked+0xe90/0xe90 [ 1498.899751][ T28] ? folio_mapping+0x1ba/0x4d0 [ 1498.904973][ T28] truncate_inode_pages_range+0x9fe/0x1090 [ 1498.911166][ T28] ? mapping_evict_folio+0x520/0x520 [ 1498.916897][ T28] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1498.923235][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1498.928597][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1498.934328][ T28] evict+0x4dc/0x8d0 [ 1498.938407][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 1498.943422][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1498.949030][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1498.955667][ T28] evict_inodes+0x60c/0x6a0 [ 1498.960410][ T28] ? clear_inode+0x150/0x150 [ 1498.965178][ T28] generic_shutdown_super+0x93/0x340 [ 1498.970849][ T28] kill_block_super+0x7c/0xe0 [ 1498.975754][ T28] deactivate_locked_super+0x93/0xf0 [ 1498.981499][ T28] cleanup_mnt+0x42c/0x4b0 [ 1498.986083][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1498.992132][ T28] task_work_run+0x1d0/0x260 [ 1498.996783][ T28] ? task_work_cancel+0x220/0x220 [ 1499.002468][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1499.008007][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1499.013752][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 1499.020579][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1499.026099][ T28] do_syscall_64+0x58/0xa0 [ 1499.030581][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1499.035443][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1499.040179][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.046193][ T28] RIP: 0033:0x7f803f39c1d7 [ 1499.050651][ T28] RSP: 002b:00007ffc42acfca8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1499.059238][ T28] RAX: 0000000000000000 RBX: 00007f803f430b3b RCX: 00007f803f39c1d7 [ 1499.067367][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc42acfd60 [ 1499.075463][ T28] RBP: 00007ffc42acfd60 R08: 00007ffc42ad0d60 R09: 00000000ffffffff [ 1499.083483][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc42ad0df0 [ 1499.091596][ T28] R13: 00007f803f430b3b R14: 000000000013c5ad R15: 00007ffc42ad0e30 [ 1499.099767][ T28] [ 1499.102924][ T28] [ 1499.102924][ T28] Showing all locks held in the system: [ 1499.114675][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1499.123689][ T28] #0: ffffffff8cb2dfb0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1499.138993][ T28] 1 lock held by rcu_tasks_trace/13: [ 1499.145133][ T28] #0: ffffffff8cb2e7d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1499.156429][ T28] 1 lock held by khungtaskd/28: [ 1499.161393][ T28] #0: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1499.171356][ T28] 2 locks held by getty/4022: [ 1499.176129][ T28] #0: ffff88814ca27098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1499.200630][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x429/0x1390 [ 1499.210879][ T28] 1 lock held by syz-executor/4267: [ 1499.216231][ T28] #0: ffff888052d2e0e0 (&type->s_umount_key#134){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1499.227223][ T28] 2 locks held by kworker/u4:10/27031: [ 1499.232772][ T28] 3 locks held by kworker/u4:16/27047: [ 1499.238973][ T28] #0: ffff8880b8f3ab18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 1499.249583][ T28] #1: ffff8880b8f27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 1499.261298][ T28] #2: ffff88804a9707c8 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x31/0x260 [ 1499.272725][ T28] 3 locks held by kworker/u4:17/27049: [ 1499.278400][ T28] [ 1499.282093][ T28] ============================================= [ 1499.282093][ T28] [ 1499.290577][ T28] NMI backtrace for cpu 1 [ 1499.294940][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1499.302169][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1499.312241][ T28] Call Trace: [ 1499.315535][ T28] [ 1499.318489][ T28] dump_stack_lvl+0x188/0x24e [ 1499.323194][ T28] ? irq_work_queue+0xbf/0x140 [ 1499.327993][ T28] ? show_regs_print_info+0x12/0x12 [ 1499.333219][ T28] ? load_image+0x400/0x400 [ 1499.337741][ T28] ? vprintk_emit+0x59f/0x6a0 [ 1499.342442][ T28] ? printk_sprint+0x460/0x460 [ 1499.347236][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 1499.352205][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1499.358388][ T28] ? _printk+0xda/0x130 [ 1499.362563][ T28] ? load_image+0x400/0x400 [ 1499.367090][ T28] ? load_image+0x400/0x400 [ 1499.371622][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 1499.377718][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1499.383812][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1499.389822][ T28] watchdog+0xeee/0xf30 [ 1499.394011][ T28] ? watchdog+0x1ed/0xf30 [ 1499.398375][ T28] kthread+0x29d/0x330 [ 1499.402484][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1499.407534][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1499.412160][ T28] ret_from_fork+0x1f/0x30 [ 1499.416618][ T28] [ 1499.420604][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1499.426290][ C0] NMI backtrace for cpu 0 [ 1499.426301][ C0] CPU: 0 PID: 27063 Comm: kworker/u4:23 Not tainted syzkaller #0 [ 1499.426320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1499.426331][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1499.426361][ C0] RIP: 0010:mark_lock+0x1/0x320 [ 1499.426389][ C0] Code: c1 7c 90 48 c7 c7 28 00 20 8e e8 ba 65 6e 00 4c 89 f7 41 89 d9 e9 79 ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 <41> 57 41 56 41 55 41 54 53 50 89 d5 49 89 f6 48 89 fb 49 bd 00 00 [ 1499.426404][ C0] RSP: 0018:ffffc9000d5e7770 EFLAGS: 00000006 [ 1499.426419][ C0] RAX: 0000000000000000 RBX: ffff88802b8e8ad8 RCX: ffffffff8164fa44 [ 1499.426432][ C0] RDX: 0000000000000006 RSI: ffff88802b8e8b58 RDI: ffff88802b8e8000 [ 1499.426445][ C0] RBP: ffffc9000d5e7828 R08: ffffffff90af4327 R09: 1ffffffff215e864 [ 1499.426458][ C0] R10: dffffc0000000000 R11: fffffbfff215e865 R12: ffff88802b8e8b78 [ 1499.426472][ C0] R13: 0000000000000003 R14: 1ffff1100571d15b R15: ffff88802b8e8b58 [ 1499.426484][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1499.426499][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1499.426512][ C0] CR2: 00007f17da7e4198 CR3: 000000007e46f000 CR4: 00000000003506f0 [ 1499.426527][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1499.426538][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1499.426550][ C0] Call Trace: [ 1499.426555][ C0] [ 1499.426562][ C0] lockdep_hardirqs_on_prepare+0x372/0x770 [ 1499.426589][ C0] ? lock_chain_count+0x20/0x20 [ 1499.426616][ C0] trace_hardirqs_on+0x34/0x40 [ 1499.426640][ C0] crng_make_state+0x4ee/0xb00 [ 1499.426665][ C0] ? crng_make_state+0x1d1/0xb00 [ 1499.426686][ C0] ? urandom_read_iter+0x140/0x140 [ 1499.426720][ C0] _get_random_bytes+0xfc/0x250 [ 1499.426741][ C0] ? get_random_bytes+0x20/0x20 [ 1499.426764][ C0] ? nsim_dev_trap_report_work+0x28f/0xaf0 [ 1499.426792][ C0] ? in_aton+0x39e/0x430 [ 1499.426819][ C0] nsim_dev_trap_report_work+0x642/0xaf0 [ 1499.426850][ C0] ? process_one_work+0x7b0/0x1160 [ 1499.426870][ C0] process_one_work+0x8a2/0x1160 [ 1499.426903][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1499.426925][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1499.426943][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1499.426960][ C0] ? kthread_data+0x4b/0xc0 [ 1499.426987][ C0] worker_thread+0xaa2/0x1270 [ 1499.427013][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1499.427041][ C0] kthread+0x29d/0x330 [ 1499.427055][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1499.427074][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1499.427101][ C0] ret_from_fork+0x1f/0x30 [ 1499.427130][ C0] [ 1499.704696][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1499.711602][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1499.718835][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1499.728911][ T28] Call Trace: [ 1499.732242][ T28] [ 1499.735212][ T28] dump_stack_lvl+0x188/0x24e [ 1499.739961][ T28] ? memcpy+0x3c/0x60 [ 1499.743968][ T28] ? show_regs_print_info+0x12/0x12 [ 1499.749196][ T28] ? load_image+0x400/0x400 [ 1499.753735][ T28] panic+0x2e5/0x730 [ 1499.757649][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1499.763317][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1499.767843][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1499.773422][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1499.779612][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1499.785793][ T28] watchdog+0xf2d/0xf30 [ 1499.789975][ T28] ? watchdog+0x1ed/0xf30 [ 1499.794337][ T28] kthread+0x29d/0x330 [ 1499.798428][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1499.803472][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1499.808089][ T28] ret_from_fork+0x1f/0x30 [ 1499.812537][ T28] [ 1499.816159][ T28] Kernel Offset: disabled [ 1499.820493][ T28] Rebooting in 86400 seconds..