last executing test programs: 4m21.664442594s ago: executing program 1 (id=2882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001d80)={0x30, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x58}, 0x4) 4m21.565974705s ago: executing program 1 (id=2883): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x1f) 4m21.315529029s ago: executing program 1 (id=2886): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x5c, 0x0, 0x9, 0x801, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0) 4m21.050437813s ago: executing program 1 (id=2889): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58b, &(0x7f00000006c0)="$eJzs3U1oHGUfAPD/zGbffuV90xfeF1R6KCpUKN0k/dDqqb2KhUIPghcNm20o2WRLNtEm5JDei9iDqPRSb3rwqHjwIF48Cp68KJ6FYoNC04OuzH6kabJJk5pkbeb3g9mdZ57Z/T/PzP5ndx5m2ABy62j2kEY8HREXk4iBFXV90a482lpvaXG+fH9xvpxEo3Hp1ySSiLi3OF/urJ+0nw9FxEJEPBUR3xQjjqdr49Zn58ZHqtXKVLs8OD1xdbA+O3fiysTIWGWsMnnqpZfPnD19Zvjk8MqX3W+sLBW31tcbP91898Z3r96++elnRxbK748kcS7623Ur+7GdWtukGOdWLT+9E8F6KOl1A3gshXaeZ6n0/xiIQjvru2kM7GrTgB3W2BfRAHIqkf+QU53fAdn5b2fazd8fd863TkCyuEvtqVXT1xqbiP3Nc5ODvyUPnZlk55uHd7Oh7EkL1yNiqK9v7ec/aX/+Ht/QdjSQHfX1+daOWrv/0+XjT3Q5/vR3xk7/ps7xb2nN8e9B/MI6x7+Lm4zxxxs/f7Ru/OsRz3SNnyzHT7rETyPirU3Gv/X6l2fXq2t8HHEsusfvSDYeHx68fKVaGWo9do3x1bEjr2zU/4PrxG+N2e5vfs102/5dhrW7+uLbz59d2CD+C89tvP+7bf8DEfHeJuP/994nr61Xd+d6cjf7FbDV/Z9EMW53f8tk9WDwi+eO/rjJpgIAAAAAAAAAAFuQNq9lS9LS8nyalkqte3j/FwfTaq0+ffxybWZytHXN2+Eopp0rrQZa5SQrD7evx+2UT64qnyq0AxYONMulcq062uO+AwAAAAAAAAAAAAAAAAAAwD/FoVX3//9eaN7/v/rvqoG9av2//Ab2OvkP+fVw/ic9awew+3z/Q2415D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74uKFC9nUuL84X87Ko32zM+O1t0+MVurjpYmZcqlcm7paGqvVxqqVUrk28aj3S2q1q0MxOXNtcLpSnx6sz869OVGbmez8p2iluOM9AgAAAAAAAAAAAAAAAAAAgCdPf3NK0lJEpM35NC2VIv4dEYeTSC5fqVaGIuI/EfFDobgvKw/3utEAAAAAAAAAAAAAAAAAAACwx9Rn58ZHqtXKVE5m+rayckQsbG8zsnfc8quK7X211aDZa3q+wc08oTO9PS4BAAAAAAAAAAAAAAAAAEAePbjp99Hrfh8HIuLP3WgWAAAAAAAAAAAAAAAAAAAA5Ez6SxIR2XRs4Pn+1bX/SpYKzeeIeOfWpQ+ujUxPTw1ny+8uL5/+sL385CbCJa2nhW3vB/AonTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQH12bnykWq1M7eBMr/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Dj+CgAA//8+jtaV") mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003640)='./file0\x00', &(0x7f0000003680)='ext4\x00', 0x0, 0x0) 4m20.474560512s ago: executing program 1 (id=2900): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x62}, 0xc) 4m19.000615194s ago: executing program 1 (id=2924): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005140dc9"], 0x20}}, 0x4040) 4m18.680940069s ago: executing program 32 (id=2924): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005140dc9"], 0x20}}, 0x4040) 2m35.214255703s ago: executing program 3 (id=4455): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c3100004a1000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e62367581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu_fail\x00', r0}, 0x18) 2m35.009762206s ago: executing program 3 (id=4460): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x4b4b, 0x10000000000004) 2m34.853613609s ago: executing program 3 (id=4464): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x70bd25, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0xd, 0x2, {{0x2, 0x0, 0x9}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 2m34.644452592s ago: executing program 3 (id=4467): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 2m34.261837918s ago: executing program 3 (id=4475): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$eJzskr9rFEEUx7+zO3fuaUIOORBFEDVoLJLbbDT+KBRsDCoIohADgsfdJS5u/JE90DsOXKsUNoIiJIiFIElhIf4DLqiN2CgEuxBJnSKFjSSsvNm3mwnY28ynuO/NvLfvve/M3A4fhDsAbK5360AZhEQF338JSAAHhNpCw07VYb3MWuT4BSvVmPUP6+bJzvgEIPxDy6NWvKdxUJTRU/n9dQV19N3E6deX3v24WnixtHvt7UfKv3i9/QHiaKPvzav3z87P9ary4saEXseO9887VAjA843x5RW5165ktfxoiVoXkPFyEsKddwAMfR6cO+v2PrW4Ztju3KkFQXMmPPfEwppq9XO9W6c/twAkBPsbA6DnkP1FzqG9fRK4BsBGkudIbFFtTd+vhu3OoD9dm2pONe963sioe9x1T3jVST9ouvQLcDf1OZ8gSI8BoGsq0QhCxXdRbINzdmI7VIfmivK496XE45fQrRe1qxs4jHRb65fZylQgZluOmgPKKlk+Ajrah5HQdvtVFQllbAwCNi+GpTZf2stRgaFP94LGLMgbf7YAmdcYXkUhX3j6YuRU5hCzrP3YujFigXWVNXvR2UuVqoLF73kgAop4VGu1kiR5jMUeXPmWRmhvxivm/8qRfmDUtWxvN3fG/setGAwGg8FgMBgMBsN/4m8AAAD//4Hjlpw=") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m33.204594844s ago: executing program 3 (id=4490): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0x14) 2m18.068571142s ago: executing program 33 (id=4490): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@loopback}, 0x14) 36.158458125s ago: executing program 0 (id=6405): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xff00000000000000}}, 0x1c) 35.9006337s ago: executing program 0 (id=6408): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0xffff0006}, 0x8) 35.743985512s ago: executing program 0 (id=6411): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fremovexattr(r0, &(0x7f00000002c0)=@known='system.sockprotoname\x00') 35.444590286s ago: executing program 0 (id=6417): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) 35.22869473s ago: executing program 0 (id=6421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 35.016690183s ago: executing program 0 (id=6424): ioprio_set$pid(0x2, 0x0, 0x6000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 19.976974789s ago: executing program 34 (id=6424): ioprio_set$pid(0x2, 0x0, 0x6000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 3.760381093s ago: executing program 2 (id=6924): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x40505331, &(0x7f0000000300)={0x0, 0x0, {0xffffffffffffffff}}) 3.540133736s ago: executing program 2 (id=6937): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f0000000300), 0x4da) 3.33660303s ago: executing program 2 (id=6930): r0 = fsopen(&(0x7f00000001c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 3.196583962s ago: executing program 2 (id=6934): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe8011e0000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 2.848435847s ago: executing program 2 (id=6941): syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@gqnoenforce}, {@noquota}, {@discard}, {@inode64}, {@ikeep}]}, 0x1, 0xb91b, &(0x7f0000001440)="$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") open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) 1.930297531s ago: executing program 7 (id=6956): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x7, 0x20, 0x0, 0x2}, 0x10}}, 0x0) 1.608777396s ago: executing program 5 (id=6971): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_robust_list(0x0, 0x0) 1.461828647s ago: executing program 5 (id=6962): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x3818082, &(0x7f0000000100)=ANY=[@ANYBLOB='undelete,gid=', @ANYRESOCT=0x0, @ANYRESOCT=0x0], 0xff, 0xc3c, &(0x7f00000003c0)="$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") rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') 1.124438053s ago: executing program 6 (id=6968): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x82, &(0x7f0000000300), 0x4da) 1.109362343s ago: executing program 4 (id=6969): r0 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source', &(0x7f0000000180)='#/::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<+\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[\a\x00\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce5<\x0e\xd25\fo\x8f^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 current cno (= 3) [ 392.809606][T15877] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=13) [ 392.942193][T15877] Remounting filesystem read-only [ 392.947534][T15877] NILFS (loop2): error -5 truncating bmap (ino=13) [ 393.119813][T15906] loop5: detected capacity change from 0 to 512 [ 393.148194][ T4264] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 393.182804][ T4262] Bluetooth: hci5: command 0x0405 tx timeout [ 393.223026][T15906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 393.354181][T15906] EXT4-fs (loop5): orphan cleanup on readonly fs [ 393.361032][T15906] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 393.424638][T15921] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 393.458142][T15919] cgroup: release_agent respecified [ 393.481894][T15906] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 393.488554][T15906] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.5100: bad orphan inode 768 [ 393.523634][T15906] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 393.582200][T15906] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 393.644069][T15927] openvswitch: netlink: Message has 8 unknown bytes. [ 393.690333][T15906] EXT4-fs warning (device loop5): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 393.902879][T10890] EXT4-fs (loop5): unmounting filesystem. [ 394.014476][T15945] loop5: detected capacity change from 0 to 128 [ 394.220674][T15952] loop4: detected capacity change from 0 to 256 [ 394.256274][T15955] loop2: detected capacity change from 0 to 256 [ 394.297761][T15952] FAT-fs (loop4): Directory bread(block 64) failed [ 394.342041][T15952] FAT-fs (loop4): Directory bread(block 65) failed [ 394.348756][T15952] FAT-fs (loop4): Directory bread(block 66) failed [ 394.432004][T15952] FAT-fs (loop4): Directory bread(block 67) failed [ 394.449750][T15952] FAT-fs (loop4): Directory bread(block 68) failed [ 394.466930][T15952] FAT-fs (loop4): Directory bread(block 69) failed [ 394.492797][T15958] loop0: detected capacity change from 0 to 4096 [ 394.509585][T15952] FAT-fs (loop4): Directory bread(block 70) failed [ 394.529799][T15952] FAT-fs (loop4): Directory bread(block 71) failed [ 394.553383][T15958] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 394.564213][T15952] FAT-fs (loop4): Directory bread(block 72) failed [ 394.570787][T15952] FAT-fs (loop4): Directory bread(block 73) failed [ 394.572174][T15958] System zones: 0-5 [ 394.622479][T15958] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 394.743354][T15968] ipt_CLUSTERIP: bad num_local_nodes 32 [ 394.852875][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 394.934460][T15973] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5132'. [ 395.025666][T15981] loop4: detected capacity change from 0 to 8 [ 395.108394][T15984] loop5: detected capacity change from 0 to 256 [ 395.166952][T15984] FAT-fs (loop5): Directory bread(block 64) failed [ 395.193766][T15984] FAT-fs (loop5): Directory bread(block 65) failed [ 395.217792][T15984] FAT-fs (loop5): Directory bread(block 66) failed [ 395.251412][T15984] FAT-fs (loop5): Directory bread(block 67) failed [ 395.278285][T15984] FAT-fs (loop5): Directory bread(block 68) failed [ 395.290617][T15986] loop2: detected capacity change from 0 to 1024 [ 395.304969][T15984] FAT-fs (loop5): Directory bread(block 69) failed [ 395.321994][T15984] FAT-fs (loop5): Directory bread(block 70) failed [ 395.352886][T15984] FAT-fs (loop5): Directory bread(block 71) failed [ 395.373289][T15984] FAT-fs (loop5): Directory bread(block 72) failed [ 395.400940][T15984] FAT-fs (loop5): Directory bread(block 73) failed [ 395.472254][ T4994] hfsplus: b-tree write err: -5, ino 4 [ 395.855384][T16008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5148'. [ 395.991962][ T4440] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 396.133438][T16019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.191879][ T4440] usb 7-1: Using ep0 maxpacket: 8 [ 396.200811][ T4440] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 396.229181][T16017] xt_CT: No such helper "netbios-ns" [ 396.231842][ T4440] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.261849][ T4440] usb 7-1: Product: syz [ 396.269216][ T4440] usb 7-1: Manufacturer: syz [ 396.291837][ T4440] usb 7-1: SerialNumber: syz [ 396.321760][ T4440] usb 7-1: config 0 descriptor?? [ 396.339973][ T4440] gspca_main: sq905-2.14.0 probing 2770:9120 [ 396.721637][T16001] loop0: detected capacity change from 0 to 40427 [ 396.732885][ T4440] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 396.740364][ T4440] sq905: probe of 7-1:0.0 failed with error -71 [ 396.758555][T16001] F2FS-fs (loop0): build fault injection attr: rate: 4, type: 0x3ffff [ 396.769692][ T4440] usb 7-1: USB disconnect, device number 2 [ 396.777144][T16001] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 396.791412][T16001] F2FS-fs (loop0): invalid crc value [ 396.832936][T16001] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x300 [ 396.856563][T16001] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0x9b0 [ 396.923837][T16001] F2FS-fs (loop0): Found nat_bits in checkpoint [ 397.060003][T16001] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0x9b0 [ 397.106930][T16001] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0x9b0 [ 397.146649][T16001] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x300 [ 397.288828][T16001] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 397.319213][T16001] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xe5/0x610 [ 397.444680][ T4252] F2FS-fs (loop0) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x63/0x210 [ 397.521973][ T4413] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 397.745089][ T4413] usb 5-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 397.764648][ T4413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.800245][ T4413] pwc: Logitech ViewPort AV 100 webcam detected. [ 397.873401][T16078] loop6: detected capacity change from 0 to 256 [ 398.231993][ T4413] pwc: send_video_command error -71 [ 398.237298][ T4413] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 398.265687][ T4413] Philips webcam: probe of 5-1:127.0 failed with error -71 [ 398.313867][ T4413] usb 5-1: USB disconnect, device number 16 [ 398.516624][T16100] loop0: detected capacity change from 0 to 2048 [ 398.526933][T16102] netlink: 'syz.2.5194': attribute type 5 has an invalid length. [ 398.561870][ T4440] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 398.620311][T16103] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 398.671734][T16100] NILFS (loop0): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 398.697204][T16100] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=13) [ 398.722479][T16100] Remounting filesystem read-only [ 398.742058][T16100] NILFS (loop0): error -5 truncating bmap (ino=13) [ 398.764176][ T4440] usb 6-1: config 0 has an invalid interface number: 58 but max is 0 [ 398.764451][T16093] loop6: detected capacity change from 0 to 32768 [ 398.778942][ T4440] usb 6-1: config 0 has no interface number 0 [ 398.813850][T16093] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.5189 (16093) [ 398.818890][ T4440] usb 6-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=49.f8 [ 398.854232][ T4440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.863700][T16107] device netdevsim0 entered promiscuous mode [ 398.898371][ T4440] usb 6-1: config 0 descriptor?? [ 398.901833][T16093] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 398.903950][ T4252] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 398.925518][ T4440] gspca_main: spca500-2.14.0 probing 041e:400a [ 398.936566][T16107] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 398.971262][T16093] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 398.997571][T16093] BTRFS info (device loop6): using free space tree [ 399.133090][T16113] loop0: detected capacity change from 0 to 256 [ 399.143167][ T4440] usb 6-1: USB disconnect, device number 16 [ 399.339775][T16093] BTRFS info (device loop6): enabling ssd optimizations [ 399.464624][T15067] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.472817][T16142] loop4: detected capacity change from 0 to 128 [ 399.592979][T16146] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5207'. [ 399.937640][T16150] loop5: detected capacity change from 0 to 2048 [ 399.952577][T16152] netlink: 'syz.0.5211': attribute type 3 has an invalid length. [ 400.024133][T16155] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.092728][T16150] NILFS (loop5): vblocknr = 5121 has abnormal lifetime: start cno (= 100663298) > current cno (= 3) [ 400.152012][T16150] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=13) [ 400.196749][T16150] Remounting filesystem read-only [ 400.217397][T16150] NILFS (loop5): error -5 truncating bmap (ino=13) [ 400.356017][T10890] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 400.412157][T16170] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.521926][T16175] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5219'. [ 400.665993][T16181] loop2: detected capacity change from 0 to 256 [ 400.708690][T16181] exfat: Deprecated parameter 'namecase' [ 400.731971][T16181] exfat: Deprecated parameter 'namecase' [ 400.762328][T16181] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 400.789611][ T26] audit: type=1326 audit(400.748:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882078e929 code=0x7ffc0000 [ 400.840650][ T26] audit: type=1326 audit(400.788:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f882078e929 code=0x7ffc0000 [ 400.951857][T16193] dlm: plock device version mismatch: kernel (1.2.0), user (1.16121856.0) [ 401.010471][ T26] audit: type=1326 audit(400.788:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882078e929 code=0x7ffc0000 [ 401.101952][ T26] audit: type=1326 audit(400.788:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16186 comm="syz.4.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882078e929 code=0x7ffc0000 [ 401.343311][ T26] audit: type=1326 audit(401.308:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 401.396383][ T26] audit: type=1326 audit(401.308:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 401.484855][ T26] audit: type=1326 audit(401.308:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 401.565602][ T26] audit: type=1326 audit(401.308:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16207 comm="syz.6.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 401.880859][T16230] program syz.4.5245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.914161][T16230] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 402.295038][T16246] loop6: detected capacity change from 0 to 256 [ 402.330307][T16246] exfat: Deprecated parameter 'namecase' [ 402.356638][T16246] exfat: Deprecated parameter 'utf8' [ 402.437371][T16246] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 403.111918][ T14] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 403.164424][T16280] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.307627][T16286] loop2: detected capacity change from 0 to 256 [ 403.322131][ T14] usb 5-1: Using ep0 maxpacket: 16 [ 403.331639][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 403.356591][ T14] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 403.382089][ T14] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 403.383381][T16288] loop6: detected capacity change from 0 to 1024 [ 403.399846][T16286] FAT-fs (loop2): Directory bread(block 64) failed [ 403.407231][T16286] FAT-fs (loop2): Directory bread(block 65) failed [ 403.416641][T16286] FAT-fs (loop2): Directory bread(block 66) failed [ 403.427865][T16286] FAT-fs (loop2): Directory bread(block 67) failed [ 403.434803][T16286] FAT-fs (loop2): Directory bread(block 68) failed [ 403.441495][T16286] FAT-fs (loop2): Directory bread(block 69) failed [ 403.449554][T16286] FAT-fs (loop2): Directory bread(block 70) failed [ 403.456752][ T14] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 403.461000][T16286] FAT-fs (loop2): Directory bread(block 71) failed [ 403.474916][T16288] syz.6.5275: attempt to access beyond end of device [ 403.474916][T16288] loop6: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 403.490555][T16286] FAT-fs (loop2): Directory bread(block 72) failed [ 403.504270][T16288] Buffer I/O error on dev loop6, logical block 100663296, async page read [ 403.513167][T16286] FAT-fs (loop2): Directory bread(block 73) failed [ 403.521936][ T14] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 403.533780][T16288] hfsplus: unable to mark blocks free: error -5 [ 403.540450][ T14] usb 5-1: config 1 interface 0 has no altsetting 0 [ 403.549338][ T14] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 403.551723][T16288] hfsplus: can't free extent [ 403.600474][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.649033][ T14] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 403.902706][ T14] scsi host1: usb-storage 5-1:1.0 [ 404.086960][ T4297] usb 5-1: USB disconnect, device number 17 [ 404.776411][T16333] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 404.824482][T16337] sock: sock_timestamping_bind_phc: sock not bind to device [ 405.226713][T16355] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5305'. [ 405.855065][T16388] loop0: detected capacity change from 0 to 256 [ 405.898431][T16390] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5323'. [ 406.043090][T16395] CIFS mount error: No usable UNC path provided in device string! [ 406.043090][T16395] [ 406.087295][T16399] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5327'. [ 406.096512][T16398] netlink: 'syz.2.5328': attribute type 2 has an invalid length. [ 406.106551][T16395] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 406.261887][ T14] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 406.279837][T16403] loop2: detected capacity change from 0 to 8 [ 406.321197][T16403] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 406.329419][T16405] loop6: detected capacity change from 0 to 1764 [ 406.417965][T16405] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 406.461990][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 406.469508][ T14] usb 5-1: unable to get BOS descriptor or descriptor too short [ 406.503091][ T14] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 406.515888][T16411] device bridge2 entered promiscuous mode [ 406.530858][ T14] usb 5-1: config 8 interface 0 has no altsetting 0 [ 406.560421][ T14] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 406.610497][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.640213][ T14] usb 5-1: Product: syz [ 406.662642][ T14] usb 5-1: Manufacturer: syz [ 406.677548][ T14] usb 5-1: SerialNumber: syz [ 406.699288][T16393] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 406.830112][T16423] Cannot find del_set index 2 as target [ 406.929011][ T14] usb 5-1: selecting invalid altsetting 0 [ 407.009652][ T14] usb 5-1: USB disconnect, device number 18 [ 407.273121][T10585] udevd[10585]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.321101][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5351'. [ 407.351953][T16444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5351'. [ 407.785984][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5362'. [ 407.851896][ T14] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 408.053947][ T14] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 408.068732][T16480] loop6: detected capacity change from 0 to 8 [ 408.071909][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.131961][ T4431] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 408.146572][ T14] usb 6-1: config 0 has no interface number 0 [ 408.166168][ T14] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 408.207103][ T14] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.253540][ T14] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 408.272406][ T14] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.291345][ T14] usb 6-1: Product: syz [ 408.300866][ T14] usb 6-1: Manufacturer: syz [ 408.313626][ T14] usb 6-1: SerialNumber: syz [ 408.320590][ T14] usb 6-1: config 0 descriptor?? [ 408.323746][ T4431] usb 1-1: config 0 has no interfaces? [ 408.338259][ T4431] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 408.371935][ T4431] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.406850][ T4431] usb 1-1: Product: syz [ 408.411155][ T4431] usb 1-1: Manufacturer: syz [ 408.420690][ T4431] usb 1-1: SerialNumber: syz [ 408.452222][ T4431] r8152-cfgselector 1-1: config 0 descriptor?? [ 408.495104][T16494] loop6: detected capacity change from 0 to 256 [ 408.591884][ T4413] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 408.669062][ T4431] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 408.687330][ T4994] usb 1-1: config 0 descriptor?? [ 408.699721][T16498] ieee802154 phy0 wpan0: encryption failed: -90 [ 408.756105][ T4297] usb 6-1: USB disconnect, device number 17 [ 408.785309][ T4413] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.786310][T16502] netlink: 'syz.6.5379': attribute type 2 has an invalid length. [ 408.805944][ T4413] usb 5-1: New USB device found, idVendor=0421, idProduct=026c, bcdDevice=1f.2f [ 408.847397][ T4413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.876767][ T4413] usb 5-1: config 0 descriptor?? [ 408.882952][ T4431] usb 1-1: USB disconnect, device number 22 [ 408.883106][ T4994] usb 1-1: can't set config #0, error -71 [ 408.952428][ T4413] usb 5-1: bad CDC descriptors [ 408.967582][ T4413] usb 5-1: bad CDC descriptors [ 409.125162][ T4297] usb 5-1: USB disconnect, device number 19 [ 409.828239][T16532] loop5: detected capacity change from 0 to 4096 [ 409.853717][T16532] ntfs: (device loop5): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 409.949424][T16532] ntfs: volume version 3.1. [ 410.332633][ T4407] udevd[4407]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 410.724958][T16566] loop6: detected capacity change from 0 to 4096 [ 410.767739][T16566] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 410.912875][T16566] ntfs3: loop6: failed to convert "c46c" to cp850 [ 410.984754][T16581] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5418'. [ 411.422189][T16604] netlink: 'syz.2.5429': attribute type 8 has an invalid length. [ 411.476784][T16606] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5431'. [ 411.569416][T16610] loop6: detected capacity change from 0 to 128 [ 411.743876][T16620] device lo entered promiscuous mode [ 411.778286][T16620] device tunl0 entered promiscuous mode [ 411.800747][T16620] device gre0 entered promiscuous mode [ 411.820755][T16620] device gretap0 entered promiscuous mode [ 411.848407][T16620] device erspan0 entered promiscuous mode [ 411.895721][T16620] device ip_vti0 entered promiscuous mode [ 411.917069][T16620] device ip6_vti0 entered promiscuous mode [ 411.943374][T16620] device sit0 entered promiscuous mode [ 411.963161][T16620] device ip6tnl0 entered promiscuous mode [ 411.986088][T16620] device ip6gre0 entered promiscuous mode [ 412.004596][T16620] device syz_tun entered promiscuous mode [ 412.011632][T16620] device ip6gretap0 entered promiscuous mode [ 412.019144][T16620] bridge0: port 3(team0) entered blocking state [ 412.025567][T16620] bridge0: port 3(team0) entered forwarding state [ 412.032294][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.039397][T16620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.046810][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.054003][T16620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.074985][T16620] device bridge0 entered promiscuous mode [ 412.082700][T16620] device vcan0 entered promiscuous mode [ 412.088576][T16620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 412.098212][T16620] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 412.115346][T16620] device bond0 entered promiscuous mode [ 412.121048][T16620] device bond_slave_0 entered promiscuous mode [ 412.135610][T16620] device bond_slave_1 entered promiscuous mode [ 412.149212][T16620] device dummy0 entered promiscuous mode [ 412.159111][T16620] device nlmon0 entered promiscuous mode [ 412.176341][T16620] device caif0 entered promiscuous mode [ 412.187321][T16620] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.211952][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 412.437649][T16644] loop6: detected capacity change from 0 to 512 [ 412.462100][T16646] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5448'. [ 412.496455][T16644] EXT4-fs (loop6): Test dummy encryption mode enabled [ 412.524841][T16644] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 412.608773][T16644] EXT4-fs (loop6): 1 truncate cleaned up [ 412.647448][T16644] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 412.902652][T15067] EXT4-fs (loop6): unmounting filesystem. [ 413.044793][T16665] loop4: detected capacity change from 0 to 256 [ 413.110947][T16665] FAT-fs (loop4): Directory bread(block 64) failed [ 413.137116][T16665] FAT-fs (loop4): Directory bread(block 65) failed [ 413.178559][T16665] FAT-fs (loop4): Directory bread(block 66) failed [ 413.216194][T16665] FAT-fs (loop4): Directory bread(block 67) failed [ 413.252167][T16665] FAT-fs (loop4): Directory bread(block 68) failed [ 413.258746][T16665] FAT-fs (loop4): Directory bread(block 69) failed [ 413.302395][T16665] FAT-fs (loop4): Directory bread(block 70) failed [ 413.309025][T16665] FAT-fs (loop4): Directory bread(block 71) failed [ 413.351995][T16665] FAT-fs (loop4): Directory bread(block 72) failed [ 413.358584][T16665] FAT-fs (loop4): Directory bread(block 73) failed [ 413.388333][ T26] audit: type=1326 audit(413.348:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.5.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 413.464903][T16665] FAT-fs (loop4): Filesystem has been set read-only [ 413.491954][ T26] audit: type=1326 audit(413.378:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.5.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 413.553147][T16665] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006c61) [ 413.601229][ T26] audit: type=1326 audit(413.378:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.5.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 413.716425][ T26] audit: type=1326 audit(413.378:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.5.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 413.801985][ T26] audit: type=1326 audit(413.378:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16675 comm="syz.5.5463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 413.891964][ T26] audit: type=1800 audit(413.498:156): pid=16665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5458" name="cpu.stat" dev="loop4" ino=1048678 res=0 errno=0 [ 413.998821][T16668] loop2: detected capacity change from 0 to 32768 [ 414.115383][T16692] netlink: 308 bytes leftover after parsing attributes in process `syz.4.5471'. [ 414.167104][T16668] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 414.195261][T16668] (syz.2.5460,16668,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 414.272202][T16668] (syz.2.5460,16668,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 414.302126][T16668] (syz.2.5460,16668,0):ocfs2_mknod:298 ERROR: status = -2 [ 414.332487][T16668] (syz.2.5460,16668,0):ocfs2_mknod:502 ERROR: status = -2 [ 414.344526][T16668] (syz.2.5460,16668,0):ocfs2_create:676 ERROR: status = -2 [ 414.447638][ T4264] ocfs2: Unmounting device (7,2) on (node local) [ 414.723353][T16711] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 414.831255][T16682] loop6: detected capacity change from 0 to 32768 [ 414.888534][T16682] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop6 scanned by syz.6.5466 (16682) [ 414.969297][T16682] BTRFS info (device loop6): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 415.016993][T16682] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 415.052222][T16682] BTRFS info (device loop6): using free space tree [ 415.141657][T16731] kernel read not supported for file /½ lhObíñ~åÑhþµ“3žJÇÈyûxÐîÃüv÷Lª=QäRúnÁ·$h®ÌÜf€ǹ”óW£FGr‚¥òqðςû~QV7¶·"qHâ—ÉdNn9µƒÝD0ª)g [ 415.141657][T16731] .j``~éäN@»Û€Ï žWâctéö\x•|êbÎEïVyS$’µPAXg¦8mRC“l†EtùTíTS_øm)ל- (pid: 16731 comm: syz.2.5489) [ 415.233504][ T26] audit: type=1800 audit(415.198:157): pid=16731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5489" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B72468AECCDC668015C7B9949DF357A346477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E21197C9644E6E39B503831CDD4430AA29670A2E6A60601F7EE9E44E40BBDB80CF1E209E571302E26374E9F65C78957CEA62CE45EF5679532492B550415867A6386D5243936C864574F954ED9054535FF86D0729D79C2D dev="mqueue" ino=71627 res=0 errno=0 [ 415.252026][T16737] binder: 16736:16737 ioctl c018620c 200000000040 returned -1 [ 415.282088][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.484503][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5492'. [ 415.493855][T16755] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5492'. [ 415.511948][T16682] BTRFS info (device loop6): enabling ssd optimizations [ 415.625827][T15067] BTRFS info (device loop6): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 416.137067][T16771] device hsr0 entered promiscuous mode [ 416.159301][T16771] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 416.298426][ T26] audit: type=1326 audit(416.258:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.4.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882078e929 code=0x7ffc0000 [ 416.383119][ T26] audit: type=1326 audit(416.258:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.4.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f882078e929 code=0x7ffc0000 [ 416.467604][ T26] audit: type=1326 audit(416.258:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16780 comm="syz.4.5505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882078e929 code=0x7ffc0000 [ 416.489405][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.610709][T16787] loop6: detected capacity change from 0 to 4096 [ 416.638194][T16787] ntfs: (device loop6): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 416.767679][T16787] ntfs: volume version 3.1. [ 417.114508][T16814] netlink: 'syz.6.5520': attribute type 10 has an invalid length. [ 417.162621][T16814] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 417.699861][T16839] loop4: detected capacity change from 0 to 512 [ 417.813353][T16839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 417.990675][T16854] loop2: detected capacity change from 0 to 8 [ 418.036130][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 418.099880][T16854] SQUASHFS error: Unable to read inode 0xe3 [ 418.122036][T16859] netlink: 'syz.5.5540': attribute type 3 has an invalid length. [ 418.480346][T16872] loop2: detected capacity change from 0 to 1024 [ 418.506956][T16872] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 418.612013][T16872] hfsplus: filesystem is marked journaled, leaving read-only. [ 419.021942][ T4267] Bluetooth: hci5: command 0x0405 tx timeout [ 419.162022][ T4297] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 419.170904][T16906] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 419.353549][ T4297] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 419.381135][ T4297] usb 1-1: config 0 interface 0 has no altsetting 0 [ 419.404088][ T4297] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.451979][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.475503][ T4297] usb 1-1: Product: syz [ 419.479727][ T4297] usb 1-1: Manufacturer: syz [ 419.499277][T16922] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5572'. [ 419.508356][ T4297] usb 1-1: SerialNumber: syz [ 419.522759][ T4297] usb 1-1: config 0 descriptor?? [ 419.549771][ T4297] usb 1-1: selecting invalid altsetting 0 [ 419.571232][T16922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 419.652075][ T4431] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 419.737286][ T4297] usb 1-1: USB disconnect, device number 23 [ 419.784889][ T26] audit: type=1326 audit(419.748:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.6.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 419.818284][ T26] audit: type=1326 audit(419.778:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.6.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 419.853374][ T26] audit: type=1326 audit(419.778:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.6.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 419.885410][ T4431] usb 3-1: Using ep0 maxpacket: 8 [ 419.895710][ T26] audit: type=1326 audit(419.778:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.6.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 419.931603][ T4431] usb 3-1: unable to get BOS descriptor or descriptor too short [ 419.946293][ T26] audit: type=1326 audit(419.778:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16928 comm="syz.6.5573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 419.970193][ T4431] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 419.994166][ T4431] usb 3-1: config 8 interface 0 has no altsetting 0 [ 420.047682][ T4431] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 420.061327][ T4431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.085428][ T4431] usb 3-1: Product: syz [ 420.089736][ T4431] usb 3-1: Manufacturer: syz [ 420.106703][ T4431] usb 3-1: SerialNumber: syz [ 420.152341][T16915] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 420.204979][T16943] device lo entered promiscuous mode [ 420.221090][T16943] device tunl0 entered promiscuous mode [ 420.240786][T16943] device gre0 entered promiscuous mode [ 420.250396][T16943] device gretap0 entered promiscuous mode [ 420.268854][T16943] device erspan0 entered promiscuous mode [ 420.279478][T16943] device ip_vti0 entered promiscuous mode [ 420.301318][T16943] device ip6_vti0 entered promiscuous mode [ 420.317408][T16943] device sit0 entered promiscuous mode [ 420.331007][T16943] device ip6tnl0 entered promiscuous mode [ 420.346485][T16943] device ip6gre0 entered promiscuous mode [ 420.353804][T16943] device syz_tun entered promiscuous mode [ 420.360608][T16943] device ip6gretap0 entered promiscuous mode [ 420.373879][T16943] device bridge0 entered promiscuous mode [ 420.386614][ T4431] usb 3-1: selecting invalid altsetting 0 [ 420.395954][T16943] device vcan0 entered promiscuous mode [ 420.411927][ T4334] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 420.431545][T16943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 420.445768][T16943] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 420.473218][ T4431] usb 3-1: USB disconnect, device number 27 [ 420.481087][T16943] device bond0 entered promiscuous mode [ 420.490873][T16943] device bond_slave_0 entered promiscuous mode [ 420.527255][T16943] device bond_slave_1 entered promiscuous mode [ 420.540421][T16943] device team0 entered promiscuous mode [ 420.561748][T16943] device team_slave_0 entered promiscuous mode [ 420.572531][T16943] device team_slave_1 entered promiscuous mode [ 420.588824][T16943] device dummy0 entered promiscuous mode [ 420.601895][ T4334] usb 6-1: Using ep0 maxpacket: 8 [ 420.610679][ T4334] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 420.631600][T16943] device nlmon0 entered promiscuous mode [ 420.638236][ T4334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.657018][ T4334] usb 6-1: Product: syz [ 420.661259][ T4334] usb 6-1: Manufacturer: syz [ 420.682086][ T4334] usb 6-1: SerialNumber: syz [ 420.697587][ T4334] usb 6-1: config 0 descriptor?? [ 420.708455][T16943] device caif0 entered promiscuous mode [ 420.717634][ T4334] gspca_main: sq905-2.14.0 probing 2770:9120 [ 420.724082][T16943] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 420.742498][T10585] udevd[10585]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.774884][T16957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5589'. [ 420.795755][T16957] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5589'. [ 420.829021][T16957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5589'. [ 421.004735][T16966] netlink: 2 bytes leftover after parsing attributes in process `syz.6.5592'. [ 421.135743][ T4334] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 421.151950][ T4334] sq905: probe of 6-1:0.0 failed with error -71 [ 421.190219][ T4334] usb 6-1: USB disconnect, device number 18 [ 421.298721][T16976] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5598'. [ 421.509815][T16986] loop4: detected capacity change from 0 to 2048 [ 421.555448][T16989] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 421.574764][T16988] device tunl0 entered promiscuous mode [ 421.584985][T16988] device gre0 entered promiscuous mode [ 421.591474][T16988] device gretap0 entered promiscuous mode [ 421.642533][T16988] device erspan0 entered promiscuous mode [ 421.649164][T16988] device ip_vti0 entered promiscuous mode [ 421.658781][T16988] device ip6_vti0 entered promiscuous mode [ 421.679850][T16988] device sit0 entered promiscuous mode [ 421.690228][T16988] device ip6tnl0 entered promiscuous mode [ 421.716440][T16988] device ip6gre0 entered promiscuous mode [ 421.742922][T16988] device syz_tun entered promiscuous mode [ 421.788039][T16988] device ip6gretap0 entered promiscuous mode [ 421.838812][T16988] device bridge0 entered promiscuous mode [ 421.876620][T16988] device vcan0 entered promiscuous mode [ 421.907332][T16988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 421.926637][T16988] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 421.955118][T16988] device bond0 entered promiscuous mode [ 421.970931][T16988] device bond_slave_0 entered promiscuous mode [ 421.980837][T16988] device bond_slave_1 entered promiscuous mode [ 422.024470][T16988] device team0 entered promiscuous mode [ 422.062335][T16988] device team_slave_0 entered promiscuous mode [ 422.078545][T16988] device team_slave_1 entered promiscuous mode [ 422.081904][ T41] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 422.092751][T16988] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.093081][T16988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.150211][T16988] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.169939][T16988] device dummy0 entered promiscuous mode [ 422.201491][T16988] device nlmon0 entered promiscuous mode [ 422.216772][T16988] device caif0 entered promiscuous mode [ 422.232494][T17013] loop4: detected capacity change from 0 to 8 [ 422.238896][T16988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.302049][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 422.316825][ T26] audit: type=1326 audit(422.278:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.5.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 422.341101][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 422.367125][T17013] SQUASHFS error: Unable to read inode 0xe3 [ 422.373058][ T41] usb 7-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 422.373086][ T41] usb 7-1: config 8 interface 0 has no altsetting 0 [ 422.375072][ T41] usb 7-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 422.427487][ T26] audit: type=1326 audit(422.278:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.5.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 422.489704][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.511913][ T26] audit: type=1326 audit(422.278:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17014 comm="syz.5.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 422.534622][ T41] usb 7-1: Product: syz [ 422.538992][ T41] usb 7-1: Manufacturer: syz [ 422.558826][ T41] usb 7-1: SerialNumber: syz [ 422.572235][T16997] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 422.639153][T17025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 422.794016][ T41] usb 7-1: selecting invalid altsetting 0 [ 422.864948][ T41] usb 7-1: USB disconnect, device number 3 [ 423.098755][T17044] device lo entered promiscuous mode [ 423.135093][T17044] device tunl0 entered promiscuous mode [ 423.149376][T17044] device gre0 entered promiscuous mode [ 423.159491][T17044] device gretap0 entered promiscuous mode [ 423.193104][T17044] device erspan0 entered promiscuous mode [ 423.205294][T17044] device ip_vti0 entered promiscuous mode [ 423.224500][T17044] device ip6_vti0 entered promiscuous mode [ 423.239081][T17044] device sit0 entered promiscuous mode [ 423.263714][T17044] device ip6tnl0 entered promiscuous mode [ 423.285380][T17044] device ip6gre0 entered promiscuous mode [ 423.313796][T17044] device syz_tun entered promiscuous mode [ 423.325471][T17044] device ip6gretap0 entered promiscuous mode [ 423.343355][T17049] loop2: detected capacity change from 0 to 64 [ 423.352955][T17044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.380996][T17044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.419527][T17044] device vcan0 entered promiscuous mode [ 423.459867][T17044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.488655][T17044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 423.502130][T17044] device bond0 entered promiscuous mode [ 423.529415][T17044] device bond_slave_0 entered promiscuous mode [ 423.582405][T17044] device bond_slave_1 entered promiscuous mode [ 423.589911][T17044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 423.652629][T17044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 423.660510][T17044] device dummy0 entered promiscuous mode [ 423.710630][T17044] device nlmon0 entered promiscuous mode [ 423.772623][T17044] device caif0 entered promiscuous mode [ 423.778229][T17044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.872450][T17068] netlink: 'syz.6.5642': attribute type 1 has an invalid length. [ 423.921679][T17068] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5642'. [ 424.241031][T17084] netlink: 'syz.0.5650': attribute type 1 has an invalid length. [ 424.735332][T17105] netlink: 'syz.5.5670': attribute type 30 has an invalid length. [ 424.769994][T17106] netlink: 'syz.6.5659': attribute type 1 has an invalid length. [ 424.783146][T17105] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 424.805337][T17105] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 424.809829][T17106] netlink: 244 bytes leftover after parsing attributes in process `syz.6.5659'. [ 424.825573][T17108] device lo entered promiscuous mode [ 424.843780][T17108] device tunl0 entered promiscuous mode [ 424.882980][T17108] device gre0 entered promiscuous mode [ 424.890228][T17108] device gretap0 entered promiscuous mode [ 424.918283][T17108] device erspan0 entered promiscuous mode [ 424.929151][T17108] device ip_vti0 entered promiscuous mode [ 424.955883][T17108] device ip6_vti0 entered promiscuous mode [ 424.976478][T17108] device sit0 entered promiscuous mode [ 425.002412][T17108] device ip6tnl0 entered promiscuous mode [ 425.032749][T17108] device ip6gre0 entered promiscuous mode [ 425.052640][T17108] device syz_tun entered promiscuous mode [ 425.104765][T17108] device ip6gretap0 entered promiscuous mode [ 425.133495][T17108] device vcan0 entered promiscuous mode [ 425.139288][T17108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.223972][T17108] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.242380][T17108] device bond0 entered promiscuous mode [ 425.248249][T17108] device bond_slave_0 entered promiscuous mode [ 425.275293][T17108] device bond_slave_1 entered promiscuous mode [ 425.289525][T17108] device dummy0 entered promiscuous mode [ 425.300482][T17108] device nlmon0 entered promiscuous mode [ 425.319735][T17108] device caif0 entered promiscuous mode [ 425.325920][T17108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 425.498960][T17132] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 425.685180][T17142] mmap: syz.4.5678 (17142): VmData 37470208 exceed data ulimit 1023. Update limits or use boot option ignore_rlimit_data. [ 426.088502][T17162] netlink: 'syz.6.5689': attribute type 21 has an invalid length. [ 426.144213][T17165] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 426.154806][T17164] ALSA: mixer_oss: invalid OSS volume 'Ô¸{' [ 426.158348][T17162] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5689'. [ 426.180839][T17162] netlink: 'syz.6.5689': attribute type 4 has an invalid length. [ 426.204076][T17162] netlink: 'syz.6.5689': attribute type 3 has an invalid length. [ 426.229468][T17162] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5689'. [ 426.334616][T17172] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5696'. [ 426.445409][T17176] loop2: detected capacity change from 0 to 2048 [ 426.510196][T17176] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 426.553703][T17176] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.674759][T17180] loop5: detected capacity change from 0 to 4096 [ 426.769889][T17180] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 426.805210][T17187] loop6: detected capacity change from 0 to 2048 [ 426.832949][T17180] ntfs3: loop5: Failed to load $Extend. [ 426.906286][T17191] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.184076][T17196] loop5: detected capacity change from 0 to 164 [ 427.322827][T17196] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 427.440187][T17182] loop4: detected capacity change from 0 to 32768 [ 427.859377][T17216] loop5: detected capacity change from 0 to 2048 [ 427.902580][T17220] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 427.991670][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 428.037782][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.082476][T17222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 428.251288][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5722'. [ 428.312020][ T4431] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 428.504482][T17236] netlink: 'syz.0.5725': attribute type 21 has an invalid length. [ 428.522939][T17236] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5725'. [ 428.526147][ T4431] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 428.581922][ T4431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.607401][ T4431] usb 3-1: Product: syz [ 428.620332][ T4431] usb 3-1: Manufacturer: syz [ 428.635251][ T4431] usb 3-1: SerialNumber: syz [ 428.664045][ T4431] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 428.725468][ T4431] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 428.756010][T17219] loop6: detected capacity change from 0 to 32768 [ 429.136959][ T4297] usb 3-1: USB disconnect, device number 28 [ 429.237259][T17251] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 429.308582][T17254] loop4: detected capacity change from 0 to 512 [ 429.337769][T17254] ext4: Unknown parameter 'noacl' [ 429.503469][T17259] netlink: 'syz.0.5735': attribute type 1 has an invalid length. [ 429.831909][ T4431] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 429.839212][ T4431] ath9k_htc: Failed to initialize the device [ 429.842226][T17274] ieee802154 phy0 wpan0: encryption failed: -22 [ 429.885191][ T4297] usb 3-1: ath9k_htc: USB layer deinitialized [ 430.145106][T17288] netlink: 'syz.4.5750': attribute type 6 has an invalid length. [ 430.454711][T17302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5756'. [ 431.064751][ T26] audit: type=1326 audit(431.028:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17332 comm="syz.6.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 431.107374][ T26] audit: type=1326 audit(431.058:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17332 comm="syz.6.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 431.197612][ T26] audit: type=1326 audit(431.058:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17332 comm="syz.6.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 431.226828][T17338] program syz.5.5775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 431.260193][ T26] audit: type=1326 audit(431.058:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17332 comm="syz.6.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 431.342100][ T4431] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 431.355610][ T26] audit: type=1326 audit(431.058:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17332 comm="syz.6.5773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035bf8e929 code=0x7ffc0000 [ 431.535649][ T4431] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 431.557646][ T4431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.593450][ T4431] usb 3-1: config 0 descriptor?? [ 431.652039][T17358] xt_hashlimit: max too large, truncated to 1048576 [ 431.682007][ T6658] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 431.814994][ T4431] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 431.832946][ T4431] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 431.873623][ T6658] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 431.892064][ T6658] usb 6-1: config 0 interface 0 has no altsetting 0 [ 431.924173][ T6658] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 431.952088][ T6658] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.969983][ T6658] usb 6-1: Product: syz [ 431.981900][ T6658] usb 6-1: Manufacturer: syz [ 431.992632][ T6658] usb 6-1: SerialNumber: syz [ 432.014123][ T6658] usb 6-1: config 0 descriptor?? [ 432.023279][T17354] loop4: detected capacity change from 0 to 32768 [ 432.025159][ T4431] [drm:udl_init] *ERROR* Selecting channel failed [ 432.049647][ T6658] usb 6-1: selecting invalid altsetting 0 [ 432.085559][T17354] ERROR: (device loop4): dbAlloc: the hint is outside the map [ 432.085559][T17354] [ 432.131978][ T4431] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 432.144450][ T4431] [drm] Initialized udl on minor 2 [ 432.173452][ T4431] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 432.199402][ T4431] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 432.232128][ T4431] usb 3-1: USB disconnect, device number 29 [ 432.295689][ T4334] usb 6-1: USB disconnect, device number 19 [ 432.299093][ T5026] read_mapping_page failed! [ 432.305474][T17370] loop6: detected capacity change from 0 to 16 [ 432.334739][ T5026] ERROR: (device loop4): txCommit: [ 432.334739][ T5026] [ 432.373537][T17370] erofs: (device loop6): mounted with root inode @ nid 36. [ 432.394287][ T5026] jfs_write_inode: jfs_commit_inode failed! [ 432.404768][T17370] erofs: (device loop6): erofs_read_inode: bogus i_mode (0) @ nid 0 [ 432.881101][T17388] loop2: detected capacity change from 0 to 8 [ 432.926732][T17388] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 432.987052][ T4950] udevd[4950]: incorrect cramfs checksum on /dev/loop2 [ 433.079637][T17395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.695455][T17422] netlink: 604 bytes leftover after parsing attributes in process `syz.6.5818'. [ 433.728185][T17424] loop4: detected capacity change from 0 to 2048 [ 433.774885][T17424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.056890][T17436] loop2: detected capacity change from 0 to 2048 [ 434.107792][T17436] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 434.211351][T17436] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 434.478931][T17456] loop2: detected capacity change from 0 to 64 [ 435.086230][T17447] loop4: detected capacity change from 0 to 32768 [ 435.154415][T17480] sctp: [Deprecated]: syz.0.5846 (pid 17480) Use of int in maxseg socket option. [ 435.154415][T17480] Use struct sctp_assoc_value instead [ 435.504791][T17494] netlink: 'syz.6.5853': attribute type 7 has an invalid length. [ 435.552037][T17494] netlink: 140 bytes leftover after parsing attributes in process `syz.6.5853'. [ 436.097264][T17484] loop2: detected capacity change from 0 to 32768 [ 436.770705][T17543] loop2: detected capacity change from 0 to 64 [ 437.069402][T17556] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 437.572566][T17575] overlayfs: conflicting options: nfs_export=on,index=off [ 437.686020][T17579] netlink: 'syz.5.5894': attribute type 10 has an invalid length. [ 437.701826][T17579] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5894'. [ 437.892315][T17585] loop5: detected capacity change from 0 to 16 [ 437.963370][T17589] xt_ecn: cannot match TCP bits for non-tcp packets [ 438.002272][T17591] device lo left promiscuous mode [ 438.179344][T17557] loop2: detected capacity change from 0 to 40427 [ 438.220246][T17557] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 438.251958][T17557] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 438.268633][ T52] block nbd0: Attempted send on invalid socket [ 438.274976][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 438.315777][T17557] F2FS-fs (loop2): invalid crc value [ 438.369874][T17557] F2FS-fs (loop2): Found nat_bits in checkpoint [ 438.518336][T17557] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 438.518368][T17557] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 438.589641][T17557] syz.2.5883: attempt to access beyond end of device [ 438.589641][T17557] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 438.777159][T17615] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 439.153061][T17631] loop5: detected capacity change from 0 to 256 [ 439.283872][T17631] FAT-fs (loop5): Directory bread(block 64) failed [ 439.312041][T17631] FAT-fs (loop5): Directory bread(block 65) failed [ 439.318807][T17631] FAT-fs (loop5): Directory bread(block 66) failed [ 439.349141][T17631] FAT-fs (loop5): Directory bread(block 67) failed [ 439.359372][T17631] FAT-fs (loop5): Directory bread(block 68) failed [ 439.379569][T17631] FAT-fs (loop5): Directory bread(block 69) failed [ 439.448506][T17631] FAT-fs (loop5): Directory bread(block 70) failed [ 439.482104][T17631] FAT-fs (loop5): Directory bread(block 71) failed [ 439.488804][T17631] FAT-fs (loop5): Directory bread(block 72) failed [ 439.504757][T17631] FAT-fs (loop5): Directory bread(block 73) failed [ 439.894643][T17649] loop4: detected capacity change from 0 to 4096 [ 439.905228][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.911556][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.927296][T17649] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 439.998676][T17659] loop6: detected capacity change from 0 to 512 [ 440.098601][T17659] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2768: inode #11: comm syz.6.5931: corrupted xattr block 95 [ 440.193513][T17659] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.5931: bg 0: block 7: invalid block bitmap [ 440.272913][T17659] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 440.329322][T17659] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2934: inode #11: comm syz.6.5931: corrupted xattr block 95 [ 440.384399][T17659] EXT4-fs warning (device loop6): ext4_evict_inode:299: xattr delete (err -117) [ 440.402646][T17659] EXT4-fs (loop6): 1 orphan inode deleted [ 440.416198][T17659] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 440.565630][T15067] EXT4-fs (loop6): unmounting filesystem. [ 440.764614][T17685] netlink: 'syz.4.5945': attribute type 4 has an invalid length. [ 441.241945][ T4334] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 441.396618][T17714] loop5: detected capacity change from 0 to 128 [ 441.455228][ T4334] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 441.472384][ T4334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.497229][ T4334] usb 1-1: config 0 descriptor?? [ 441.589934][T17714] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 441.709499][ T4334] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 441.729180][ T4334] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 441.778614][T10890] EXT4-fs (loop5): unmounting filesystem. [ 441.923145][ T4334] [drm:udl_init] *ERROR* Selecting channel failed [ 441.984488][ T4334] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 442.003755][ T4334] [drm] Initialized udl on minor 2 [ 442.019548][ T4334] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 442.029753][ T4334] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 442.080619][ T4334] usb 1-1: USB disconnect, device number 24 [ 442.545933][T17755] loop6: detected capacity change from 0 to 4096 [ 442.588321][T17757] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2) [ 442.612583][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 442.620489][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 442.669650][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 442.690184][T17760] delete_channel: no stack [ 442.712170][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffc0c00 [ 442.720069][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffc1c00 [ 442.766150][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffc2c00 [ 442.821137][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffc4c00 [ 442.871375][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffc8c00 [ 442.900424][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffd0c00 [ 442.922773][T17769] usb usb1: usbfs: process 17769 (syz.4.5984) did not claim interface 0 before use [ 442.923027][T17755] ntfs3: loop6: try to read out of volume at offset 0x3fffffe0c00 [ 443.554130][ T4334] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 443.763647][ T4334] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 443.792550][ T4334] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.808991][ T4334] usb 7-1: config 0 descriptor?? [ 443.822020][ T4298] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 443.852454][T17805] loop5: detected capacity change from 0 to 4096 [ 443.881407][T17805] ntfs: (device loop5): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 443.901471][T17805] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 443.925351][T17805] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 443.968505][T17805] ntfs: volume version 3.1. [ 444.021994][ T4298] usb 5-1: Using ep0 maxpacket: 32 [ 444.029358][ T4334] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 444.030802][ T4298] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.048872][ T4334] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 444.093496][ T4298] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.123774][ T4298] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 444.143971][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.190855][T10890] ntfs: (device loop5): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 444.236230][ T4298] hub 5-1:4.0: USB hub found [ 444.240045][ T4334] [drm:udl_init] *ERROR* Selecting channel failed [ 444.296796][ T4334] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 444.319325][ T4334] [drm] Initialized udl on minor 2 [ 444.335905][ T4334] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 444.370463][ T4334] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 444.395232][ T4298] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 444.414509][ T4334] usb 7-1: USB disconnect, device number 4 [ 444.742418][ T4298] usb 5-1: USB disconnect, device number 20 [ 444.868146][T17838] openvswitch: netlink: Missing key (keys=40, expected=80) [ 445.505624][T17863] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 445.555612][T17867] loop4: detected capacity change from 0 to 256 [ 445.588144][T17868] loop2: detected capacity change from 0 to 512 [ 445.628890][T17867] FAT-fs (loop4): Directory bread(block 64) failed [ 445.663786][T17867] FAT-fs (loop4): Directory bread(block 65) failed [ 445.670722][T17867] FAT-fs (loop4): Directory bread(block 66) failed [ 445.718568][T17868] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2768: inode #11: comm syz.2.6033: corrupted xattr block 95 [ 445.731974][T17867] FAT-fs (loop4): Directory bread(block 67) failed [ 445.738617][T17867] FAT-fs (loop4): Directory bread(block 68) failed [ 445.750376][T17867] FAT-fs (loop4): Directory bread(block 69) failed [ 445.757361][T17867] FAT-fs (loop4): Directory bread(block 70) failed [ 445.764326][T17867] FAT-fs (loop4): Directory bread(block 71) failed [ 445.770949][T17867] FAT-fs (loop4): Directory bread(block 72) failed [ 445.778450][T17867] FAT-fs (loop4): Directory bread(block 73) failed [ 445.781015][T17868] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.6033: bg 0: block 7: invalid block bitmap [ 445.808638][ T26] audit: type=1800 audit(445.768:174): pid=17867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.6032" name="file2" dev="loop4" ino=1048680 res=0 errno=0 [ 445.893056][T17868] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 445.949851][T17868] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2934: inode #11: comm syz.2.6033: corrupted xattr block 95 [ 445.992333][T17868] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 446.018482][T17868] EXT4-fs (loop2): 1 orphan inode deleted [ 446.034604][T17868] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 446.258506][ T4264] EXT4-fs (loop2): unmounting filesystem. [ 446.311581][T17885] loop4: detected capacity change from 0 to 4096 [ 446.356690][T17885] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 446.480756][T17885] ntfs3: loop4: failed to convert "c46c" to euc-jp [ 446.658508][T17890] loop2: detected capacity change from 0 to 8192 [ 446.719935][T17890] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 446.754172][T17890] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 446.793989][T17890] REISERFS (device loop2): using ordered data mode [ 446.800637][T17890] reiserfs: using flush barriers [ 446.822557][T17890] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 446.843090][T17890] REISERFS (device loop2): checking transaction log (loop2) [ 447.100778][T17890] REISERFS (device loop2): Using tea hash to sort names [ 447.121746][T17890] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 447.311147][T17891] loop5: detected capacity change from 0 to 32768 [ 447.408882][T17891] XFS (loop5): Mounting V5 Filesystem [ 447.415820][T17913] netlink: 'syz.6.6052': attribute type 1 has an invalid length. [ 447.490503][T17891] XFS (loop5): Ending clean mount [ 447.559770][T17891] XFS (loop5): Quotacheck needed: Please wait. [ 447.706382][T17891] XFS (loop5): Quotacheck: Done. [ 447.727358][ T26] audit: type=1326 audit(447.688:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17920 comm="syz.2.6054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f451ff8e929 code=0x0 [ 447.873636][T10890] XFS (loop5): Unmounting Filesystem [ 449.142142][T17965] [U]  [ 449.246823][T17970] xt_CONNSECMARK: invalid mode: 0 [ 449.331474][T17972] libceph: resolve '0.0' (ret=-3): failed [ 449.359815][T17975] netlink: 'syz.4.6080': attribute type 10 has an invalid length. [ 449.400921][T17975] device bond0 left promiscuous mode [ 449.410066][T17975] device bond_slave_0 left promiscuous mode [ 449.431553][T17975] device bond_slave_1 left promiscuous mode [ 449.490647][T17975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.512866][T17975] device bond0 entered promiscuous mode [ 449.522015][T17975] device bond_slave_0 entered promiscuous mode [ 449.535204][T17975] device bond_slave_1 entered promiscuous mode [ 449.555043][T17975] team0: Port device bond0 added [ 449.566036][T17940] loop6: detected capacity change from 0 to 40427 [ 449.615799][T17940] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 449.642792][T17940] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 449.685712][T17940] F2FS-fs (loop6): invalid crc value [ 449.743764][T17940] F2FS-fs (loop6): Found nat_bits in checkpoint [ 449.884560][T17989] netlink: 'syz.4.6086': attribute type 12 has an invalid length. [ 449.989900][T17940] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 450.023158][T17940] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 450.166126][T17940] syz.6.6063: attempt to access beyond end of device [ 450.166126][T17940] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 450.378900][T18010] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6095'. [ 450.814802][T18025] netlink: 'syz.5.6103': attribute type 1 has an invalid length. [ 451.274045][T18043] loop2: detected capacity change from 0 to 64 [ 451.360284][T18047] loop4: detected capacity change from 0 to 64 [ 451.387103][T18047] Trying to free block not in datazone [ 451.408120][T18049] netlink: 'syz.5.6115': attribute type 4 has an invalid length. [ 451.431966][T18047] Trying to free block not in datazone [ 451.437534][T18047] Trying to free block not in datazone [ 451.451725][T18049] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.6115'. [ 451.472038][T18047] Trying to free block not in datazone [ 451.482061][T18047] Trying to free block not in datazone [ 451.721182][T18061] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 451.810314][T18057] loop6: detected capacity change from 0 to 4096 [ 451.856027][T18057] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 452.005327][T18057] ntfs3: loop6: failed to convert "c46c" to euc-jp [ 452.162285][T18075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.496086][T18091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6135'. [ 452.530297][T18091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6135'. [ 452.709561][T18099] QAT: Invalid ioctl 1075883590 [ 452.751933][T18099] QAT: Invalid ioctl 1075883590 [ 452.756984][T18099] QAT: Invalid ioctl 1075883590 [ 452.782552][T18101] cgroup: none used incorrectly [ 452.792717][T18099] QAT: Invalid ioctl 1075883590 [ 452.821169][T18099] QAT: Invalid ioctl 1075883590 [ 452.842007][T18099] QAT: Invalid ioctl 1075883590 [ 452.857216][T18099] QAT: Invalid ioctl 1075883590 [ 452.877475][T18099] QAT: Invalid ioctl 1075883590 [ 452.891979][T18099] QAT: Invalid ioctl 1075883590 [ 452.907814][T18099] QAT: Invalid ioctl 1075883590 [ 453.430242][T18131] netlink: 'syz.0.6153': attribute type 3 has an invalid length. [ 453.452137][T18131] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6153'. [ 453.671931][T18143] loop4: detected capacity change from 0 to 256 [ 453.808529][T18145] loop2: detected capacity change from 0 to 256 [ 453.853491][T18145] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 453.947907][T18153] loop4: detected capacity change from 0 to 256 [ 454.841885][ T5404] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 454.921620][T18165] loop6: detected capacity change from 0 to 32768 [ 454.967572][T18165] ERROR: (device loop6): diNewExt: no free extents [ 454.967572][T18165] [ 455.038781][T18165] ERROR: (device loop6): remounting filesystem as read-only [ 455.048970][ T5404] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 455.067090][ T5404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 455.076253][T18165] ialloc: diAlloc returned -5! [ 455.095597][ T5404] usb 5-1: SerialNumber: syz [ 455.126527][ T5404] usb 5-1: config 0 descriptor?? [ 455.297969][T18199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6189'. [ 455.326247][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6189'. [ 455.368354][T18199] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6189'. [ 455.564649][ T5404] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 455.591672][ T5404] hackrf 5-1:0.0: Could not detect board [ 455.603540][ T5404] hackrf: probe of 5-1:0.0 failed with error -71 [ 455.633624][ T5404] usb 5-1: USB disconnect, device number 21 [ 455.792086][ T26] audit: type=1326 audit(455.758:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18214 comm="syz.0.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9ef8e929 code=0x7ffc0000 [ 455.854342][ T26] audit: type=1326 audit(455.758:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18214 comm="syz.0.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f4f9ef8e929 code=0x7ffc0000 [ 455.868090][T18217] IPv6: sit1: Disabled Multicast RS [ 455.942926][ T26] audit: type=1326 audit(455.758:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18214 comm="syz.0.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9ef8e929 code=0x7ffc0000 [ 456.001549][ T26] audit: type=1326 audit(455.758:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18214 comm="syz.0.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9ef8e929 code=0x7ffc0000 [ 456.943881][T18266] netlink: 'syz.4.6222': attribute type 21 has an invalid length. [ 456.946658][T18267] loop2: detected capacity change from 0 to 64 [ 457.232471][T18281] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 457.250264][T18281] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 457.448191][T18289] loop5: detected capacity change from 0 to 128 [ 457.493439][T18289] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 457.516425][T18289] System zones: 1-3, 19-19, 35-36 [ 457.544024][T18289] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 457.672782][T18289] EXT4-fs warning (device loop5): ext4_group_extend:1899: can't read last block, resize aborted [ 457.699701][ T26] audit: type=1326 audit(457.658:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18294 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9ef8e929 code=0x7ffc0000 [ 457.743937][T18297] netlink: 'syz.4.6237': attribute type 9 has an invalid length. [ 457.752215][ T26] audit: type=1326 audit(457.658:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18294 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4f9ef8e929 code=0x7ffc0000 [ 457.772191][T18297] netlink: 'syz.4.6237': attribute type 6 has an invalid length. [ 457.813429][T10890] EXT4-fs (loop5): unmounting filesystem. [ 457.859850][ T26] audit: type=1326 audit(457.658:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18294 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9ef8e929 code=0x7ffc0000 [ 457.938852][ T26] audit: type=1326 audit(457.658:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18294 comm="syz.0.6236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9ef8e929 code=0x7ffc0000 [ 458.019756][T18303] adf_ctl_ioctl: 15 callbacks suppressed [ 458.019773][T18303] QAT: Invalid ioctl 1075883590 [ 458.078775][T18303] QAT: Invalid ioctl 1075883590 [ 458.095414][T18303] QAT: Invalid ioctl 1075883590 [ 458.109357][T18303] QAT: Invalid ioctl 1075883590 [ 458.124430][T18303] QAT: Invalid ioctl 1075883590 [ 458.139462][T18303] QAT: Invalid ioctl 1075883590 [ 458.154773][T18303] QAT: Invalid ioctl 1075883590 [ 458.170868][T18303] QAT: Invalid ioctl 1075883590 [ 458.184869][T18303] QAT: Invalid ioctl 1075883590 [ 458.195491][T18303] QAT: Invalid ioctl 1075883590 [ 458.309976][T18283] loop2: detected capacity change from 0 to 32768 [ 458.406160][T18283] ialloc: diAlloc returned -17! [ 458.543257][T18315] loop5: detected capacity change from 0 to 64 [ 458.903269][T18327] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6251'. [ 459.021469][T18331] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.6254'. [ 459.050766][T18331] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.6254'. [ 459.449971][T18340] netlink: 'syz.2.6256': attribute type 21 has an invalid length. [ 459.478739][T18340] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6256'. [ 459.519869][T18341] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 459.750249][T18352] SET target dimension over the limit! [ 459.930656][T18361] IPv6: sit1: Disabled Multicast RS [ 460.003759][T18366] loop5: detected capacity change from 0 to 64 [ 460.052913][T18369] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 460.060283][T18369] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 460.232803][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6275'. [ 461.175483][T18407] loop6: detected capacity change from 0 to 2048 [ 461.235333][T18407] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 461.312030][T18414] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 461.731727][T18427] loop6: detected capacity change from 0 to 4096 [ 461.761979][T18422] loop2: detected capacity change from 0 to 4096 [ 461.777461][T18427] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 461.783211][T18422] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 461.836526][T18432] usb usb8: usbfs: process 18432 (syz.4.6303) did not claim interface 0 before use [ 461.896636][T18427] ntfs3: loop6: ino=1e, "file1" attr_set_size [ 461.919484][T18427] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 461.929310][T18422] ntfs3: loop2: failed to convert "c46c" to cp437 [ 461.962244][T18427] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 462.055117][ T5029] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22. [ 462.056854][T18436] loop4: detected capacity change from 0 to 512 [ 462.062692][T15067] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22. [ 462.082494][ T4298] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 462.105479][T18436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 462.233391][T18436] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 462.281872][ T4298] usb 6-1: Using ep0 maxpacket: 32 [ 462.301264][ T4298] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 462.331189][ T4298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.357630][ T4298] usb 6-1: Product: syz [ 462.369017][ T4298] usb 6-1: Manufacturer: syz [ 462.380009][ T4298] usb 6-1: SerialNumber: syz [ 462.404972][ T4298] usb 6-1: config 0 descriptor?? [ 462.423163][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 462.567995][T18453] netlink: 'syz.4.6310': attribute type 11 has an invalid length. [ 462.597659][T18455] loop2: detected capacity change from 0 to 164 [ 462.667458][ T4298] snd-usb-6fire 6-1:0.0: unknown device firmware state received from device: [ 462.690053][T18455] syz.2.6313: attempt to access beyond end of device [ 462.690053][T18455] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 462.696802][ T4298] eb 00 00 00 00 00 00 00 [ 462.721568][ T4298] snd-usb-6fire: probe of 6-1:0.0 failed with error -5 [ 462.750213][T18455] syz.2.6313: attempt to access beyond end of device [ 462.750213][T18455] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 462.901529][ T6661] usb 6-1: USB disconnect, device number 20 [ 462.968056][T18467] loop2: detected capacity change from 0 to 256 [ 463.063624][T18467] FAT-fs (loop2): Directory bread(block 64) failed [ 463.070214][T18467] FAT-fs (loop2): Directory bread(block 65) failed [ 463.086782][T18467] FAT-fs (loop2): Directory bread(block 66) failed [ 463.093691][T18467] FAT-fs (loop2): Directory bread(block 67) failed [ 463.100699][T18467] FAT-fs (loop2): Directory bread(block 68) failed [ 463.107647][T18467] FAT-fs (loop2): Directory bread(block 69) failed [ 463.122460][T18467] FAT-fs (loop2): Directory bread(block 70) failed [ 463.129027][T18467] FAT-fs (loop2): Directory bread(block 71) failed [ 463.151048][T18467] FAT-fs (loop2): Directory bread(block 72) failed [ 463.158200][T18467] FAT-fs (loop2): Directory bread(block 73) failed [ 463.240785][T18474] netlink: 'syz.4.6322': attribute type 2 has an invalid length. [ 463.271240][T18474] netlink: 'syz.4.6322': attribute type 11 has an invalid length. [ 463.289024][T18474] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6322'. [ 463.756071][T18492] loop5: detected capacity change from 0 to 64 [ 464.085236][T18480] loop6: detected capacity change from 0 to 32768 [ 464.135950][T18480] ialloc: diAlloc returned -17! [ 464.226117][T18488] loop4: detected capacity change from 0 to 32768 [ 464.307431][T18488] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 464.309523][T18503] loop5: detected capacity change from 0 to 128 [ 464.333395][T18488] (syz.4.6329,18488,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 464.350632][T18488] (syz.4.6329,18488,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 464.360041][T18488] (syz.4.6329,18488,0):ocfs2_mknod:298 ERROR: status = -2 [ 464.367433][T18488] (syz.4.6329,18488,0):ocfs2_mknod:502 ERROR: status = -2 [ 464.374672][T18488] (syz.4.6329,18488,0):ocfs2_create:676 ERROR: status = -2 [ 464.419937][T18503] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 464.448914][ T4251] ocfs2: Unmounting device (7,4) on (node local) [ 464.508202][T18503] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.757001][T18519] loop2: detected capacity change from 0 to 64 [ 464.771600][T18517] loop4: detected capacity change from 0 to 1024 [ 464.825031][T18517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 465.016209][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 465.157408][T18533] netlink: 'syz.6.6348': attribute type 8 has an invalid length. [ 465.514448][T18547] netlink: 'syz.2.6354': attribute type 21 has an invalid length. [ 465.552875][T18547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6354'. [ 466.327970][T18587] loop4: detected capacity change from 0 to 8 [ 466.372424][T18587] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 466.808678][T18609] ipt_CLUSTERIP: Please specify destination IP [ 467.113618][T18624] loop2: detected capacity change from 0 to 8 [ 467.211088][T18629] netlink: 'syz.4.6395': attribute type 11 has an invalid length. [ 467.252512][T18629] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6395'. [ 467.328644][T18631] netlink: 'syz.5.6396': attribute type 10 has an invalid length. [ 467.392242][T18631] device syz_tun left promiscuous mode [ 467.443923][T18631] device syz_tun entered promiscuous mode [ 467.470673][T18631] team0: Port device syz_tun added [ 467.722256][ T26] audit: type=1400 audit(467.688:184): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-22 profile="unconfined" name="&" pid=18644 comm="syz.2.6404" [ 467.988409][T18621] loop6: detected capacity change from 0 to 32768 [ 468.055880][T18621] ERROR: (device loop6): diAllocAG: error reading iag [ 468.055880][T18621] [ 468.121910][T18621] ialloc: diAlloc returned -5! [ 469.024588][T18637] loop4: detected capacity change from 0 to 65536 [ 469.039627][T18637] XFS: ikeep mount option is deprecated. [ 469.167101][T18637] XFS (loop4): Mounting V5 Filesystem [ 469.182536][T18701] loop2: detected capacity change from 0 to 256 [ 469.335148][T18637] XFS (loop4): Ending clean mount [ 469.441278][T18708] loop2: detected capacity change from 0 to 1024 [ 469.571296][ T4251] XFS (loop4): Unmounting Filesystem [ 469.607501][ T5010] hfsplus: b-tree write err: -5, ino 4 [ 470.492025][ T4298] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 470.658866][T18723] loop2: detected capacity change from 0 to 32768 [ 470.702016][ T4298] usb 6-1: Using ep0 maxpacket: 32 [ 470.710785][ T4298] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 470.714285][T18723] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 470.727496][ T4298] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 470.755223][T18723] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 470.763155][ T4298] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 470.786768][ T4298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 470.835043][ T4298] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 470.835148][T18723] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 470.859968][ T4298] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 470.899775][ T4298] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 470.931424][ T4298] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 470.966013][ T4298] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 470.981872][T18723] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 471.003868][ T4298] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.049247][ T4298] usb 6-1: config 0 descriptor?? [ 471.285500][ T4298] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 471.319132][ T4298] usb 6-1: USB disconnect, device number 21 [ 471.338833][ T4298] usblp0: removed [ 471.439548][T18760] device wireguard0 entered promiscuous mode [ 471.579546][T18752] loop6: detected capacity change from 0 to 32768 [ 471.677956][T18763] loop2: detected capacity change from 0 to 4096 [ 471.696582][T18752] XFS (loop6): Mounting V5 Filesystem [ 471.761683][T18763] ntfs: volume version 3.1. [ 471.871122][T18752] XFS (loop6): Ending clean mount [ 471.909191][T18752] XFS (loop6): Quotacheck needed: Please wait. [ 472.031992][T18752] XFS (loop6): Quotacheck: Done. [ 472.172681][T15067] XFS (loop6): Unmounting Filesystem [ 472.325444][T18793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6468'. [ 472.440610][T18797] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6470'. [ 472.472256][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6470'. [ 472.498551][T18797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6470'. [ 472.700673][T18806] loop5: detected capacity change from 0 to 1024 [ 472.769458][T18806] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 472.806500][T18806] EXT4-fs error (device loop5): ext4_empty_dir:3154: inode #11: block 32: comm syz.5.6473: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=65526, size=1024 fake=1 [ 472.838737][T18806] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #11: comm syz.5.6473: directory missing '..' [ 472.927476][T18814] loop6: detected capacity change from 0 to 512 [ 472.953048][T10890] EXT4-fs (loop5): unmounting filesystem. [ 473.086463][T18814] EXT4-fs error (device loop6): ext4_orphan_get:1426: comm syz.6.6467: bad orphan inode 11862016 [ 473.137926][T18814] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 473.155291][T18825] overlayfs: bad mount option "redirect_dir=nofollow::" [ 473.384256][T15067] EXT4-fs (loop6): unmounting filesystem. [ 473.709550][T18847] loop2: detected capacity change from 0 to 256 [ 473.742953][T18847] exfat: Deprecated parameter 'utf8' [ 473.748332][T18847] exfat: Deprecated parameter 'utf8' [ 473.818324][T18847] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 473.888701][T18847] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 474.098650][T18857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6495'. [ 474.301129][T18869] loop5: detected capacity change from 0 to 256 [ 474.418857][T18869] FAT-fs (loop5): Directory bread(block 64) failed [ 474.441972][T18869] FAT-fs (loop5): Directory bread(block 65) failed [ 474.448633][T18869] FAT-fs (loop5): Directory bread(block 66) failed [ 474.482151][T18869] FAT-fs (loop5): Directory bread(block 67) failed [ 474.499040][T18869] FAT-fs (loop5): Directory bread(block 68) failed [ 474.506020][ T6661] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 474.522991][T18869] FAT-fs (loop5): Directory bread(block 69) failed [ 474.530306][T18869] FAT-fs (loop5): Directory bread(block 70) failed [ 474.537640][T18869] FAT-fs (loop5): Directory bread(block 71) failed [ 474.545522][T18869] FAT-fs (loop5): Directory bread(block 72) failed [ 474.570746][T18869] FAT-fs (loop5): Directory bread(block 73) failed [ 474.685354][T18881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 474.699223][T18881] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 474.708330][ T6661] usb 7-1: too many configurations: 65, using maximum allowed: 8 [ 474.733118][ T6661] usb 7-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 474.757123][T18881] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.773152][ T6661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.803157][ T6661] usb 7-1: Found UVC 0.00 device (046d:08c1) [ 474.824826][ T6661] usb 7-1: No valid video chain found. [ 474.967083][T18890] loop5: detected capacity change from 0 to 256 [ 475.030101][ T6658] usb 7-1: USB disconnect, device number 5 [ 475.089970][T18890] exFAT-fs (loop5): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 475.140601][T18890] exFAT-fs (loop5): invalid start cluster (520) [ 475.453275][T18903] loop4: detected capacity change from 0 to 64 [ 475.529341][ T26] audit: type=1800 audit(475.488:185): pid=18903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6518" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 475.681373][T18889] loop2: detected capacity change from 0 to 32768 [ 475.727191][T18889] ERROR: (device loop2): diAllocAG: error reading iag [ 475.727191][T18889] [ 475.769709][T18889] ialloc: diAlloc returned -5! [ 476.084425][T18923] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6528'. [ 476.122093][T18923] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6528'. [ 476.482800][T18940] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6535'. [ 477.277978][T18969] loop4: detected capacity change from 0 to 256 [ 477.358442][T18969] FAT-fs (loop4): Directory bread(block 64) failed [ 477.371930][T18969] FAT-fs (loop4): Directory bread(block 65) failed [ 477.388864][T18969] FAT-fs (loop4): Directory bread(block 66) failed [ 477.408567][T18973] trusted_key: encrypted_key: keylen parameter is missing [ 477.415970][T18969] FAT-fs (loop4): Directory bread(block 67) failed [ 477.432013][T18969] FAT-fs (loop4): Directory bread(block 68) failed [ 477.459126][T18969] FAT-fs (loop4): Directory bread(block 69) failed [ 477.472272][T18969] FAT-fs (loop4): Directory bread(block 70) failed [ 477.489272][T18948] loop5: detected capacity change from 0 to 32768 [ 477.495583][T18969] FAT-fs (loop4): Directory bread(block 71) failed [ 477.512956][T18969] FAT-fs (loop4): Directory bread(block 72) failed [ 477.519547][T18969] FAT-fs (loop4): Directory bread(block 73) failed [ 477.582207][T18948] ERROR: (device loop5): diAllocAG: error reading iag [ 477.582207][T18948] [ 477.601886][T18948] ialloc: diAlloc returned -5! [ 477.968614][T18990] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 478.057145][T18994] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6558'. [ 478.203978][T18996] netlink: 'syz.2.6560': attribute type 3 has an invalid length. [ 478.333724][T19002] loop4: detected capacity change from 0 to 2048 [ 478.383420][T19002] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 479.062013][ T6661] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 479.146006][T19035] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6579'. [ 479.151237][T19037] kAFS: unable to lookup cell '/' [ 479.172002][T19035] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6579'. [ 479.274222][ T6661] usb 7-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 479.314558][ T6661] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.339692][ T6661] usb 7-1: config 0 descriptor?? [ 479.370247][ T6661] gspca_main: mars-2.14.0 probing 093a:050f [ 479.561055][ T6661] usb 7-1: USB disconnect, device number 6 [ 479.670275][T19056] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6589'. [ 479.993955][T19058] loop4: detected capacity change from 0 to 32768 [ 480.029195][T19058] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 480.064009][T19058] ocfs2: Unmounting device (7,4) on (node local) [ 480.162008][ T6661] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 480.352062][ T6661] usb 3-1: Using ep0 maxpacket: 32 [ 480.368523][ T6661] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 480.395899][ T6661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.420100][ T6661] usb 3-1: config 0 descriptor?? [ 480.456206][ T6661] gspca_main: sq930x-2.14.0 probing 041e:403c [ 480.540556][T19082] loop5: detected capacity change from 0 to 47 [ 480.613154][T19085] loop4: detected capacity change from 0 to 64 [ 480.640451][ T6661] gspca_sq930x: reg_r 001f failed -71 [ 480.649321][ T6661] sq930x: probe of 3-1:0.0 failed with error -71 [ 480.682318][ T6661] usb 3-1: USB disconnect, device number 30 [ 480.764466][T19087] sctp: [Deprecated]: syz.6.6603 (pid 19087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.764466][T19087] Use struct sctp_sack_info instead [ 481.056849][T19093] loop5: detected capacity change from 0 to 2048 [ 481.093206][T19093] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 481.185191][T19101] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 481.883184][T19132] loop2: detected capacity change from 0 to 8 [ 482.024563][T19132] SQUASHFS error: Failed to read block 0x6e6: -5 [ 482.035528][T19136] loop5: detected capacity change from 0 to 256 [ 482.042100][T19132] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 482.049458][T19132] SQUASHFS error: Unable to read directory block [631:26] [ 482.504411][T19149] netlink: 'syz.6.6632': attribute type 10 has an invalid length. [ 482.578718][T19149] device syz_tun left promiscuous mode [ 482.640772][T19149] device syz_tun entered promiscuous mode [ 482.653409][T19149] team0: Port device syz_tun added [ 482.665158][T19153] device netdevsim0 entered promiscuous mode [ 482.671467][T19153] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 483.625589][T19198] UBIFS error (pid: 19198): cannot open "", error -22 [ 483.691718][T19202] loop6: detected capacity change from 0 to 256 [ 483.753838][T19202] exfat: Deprecated parameter 'utf8' [ 483.759216][T19202] exfat: Deprecated parameter 'namecase' [ 483.778075][T19204] loop2: detected capacity change from 0 to 256 [ 483.784595][T19202] exfat: Deprecated parameter 'namecase' [ 483.837254][T19204] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 483.871731][T19202] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 484.645426][ T4267] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 484.657295][ T4267] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 484.670198][ T4267] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 484.679843][ T4267] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 484.687484][ T4267] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 484.694945][ T4267] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 485.001863][ T4298] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 485.072671][T19243] x_tables: unsorted underflow at hook 2 [ 485.203527][ T4298] usb 5-1: config index 0 descriptor too short (expected 147, got 72) [ 485.225558][ T4298] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 485.278284][ T4298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.312125][ T4298] usb 5-1: Product: syz [ 485.316332][ T4298] usb 5-1: Manufacturer: syz [ 485.332363][ T4298] usb 5-1: SerialNumber: syz [ 485.368767][T19232] chnl_net:caif_netlink_parms(): no params data found [ 485.379790][ T4298] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 485.434272][ T4298] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 485.448118][T19254] loop6: detected capacity change from 0 to 65 [ 485.480431][T19254] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway [ 485.612470][T19260] libceph: resolve '40.' (ret=-3): failed [ 485.664348][T19232] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.675483][T19232] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.684578][T19232] device bridge_slave_0 entered promiscuous mode [ 485.697244][T19232] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.705120][T19232] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.726328][T19232] device bridge_slave_1 entered promiscuous mode [ 485.836969][T19232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.864009][ T5404] usb 5-1: USB disconnect, device number 22 [ 485.895122][T19232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.986649][T19232] team0: Port device team_slave_0 added [ 486.006655][T19232] team0: Port device team_slave_1 added [ 486.093645][T19232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.131022][T19232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.167738][T19232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.189642][T19232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.209462][T19232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.281958][T19232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.306090][T19278] loop6: detected capacity change from 0 to 1764 [ 486.455272][T19232] device hsr_slave_0 entered promiscuous mode [ 486.471698][T19232] device hsr_slave_1 entered promiscuous mode [ 486.512605][T19232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.542400][ T4298] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 486.549484][ T4298] ath9k_htc: Failed to initialize the device [ 486.569351][T19232] Cannot create hsr debugfs directory [ 486.575384][ T5404] usb 5-1: ath9k_htc: USB layer deinitialized [ 486.782063][ T4267] Bluetooth: hci6: command 0x0409 tx timeout [ 486.796186][T19295] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6700'. [ 486.835445][T19296] netlink: 180 bytes leftover after parsing attributes in process `syz.5.6701'. [ 487.094045][T19232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 487.140269][T19232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 487.178656][T19232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 487.315122][T19232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 487.534525][T19323] loop4: detected capacity change from 0 to 256 [ 487.557259][T19323] exfat: Deprecated parameter 'utf8' [ 487.573629][T19323] exfat: Deprecated parameter 'utf8' [ 487.593844][T19232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.624469][T19323] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 487.643216][T19324] netlink: 'syz.6.6712': attribute type 11 has an invalid length. [ 487.643516][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.651126][T19324] netlink: 216 bytes leftover after parsing attributes in process `syz.6.6712'. [ 487.691399][ T4994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.693368][T19323] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 487.726789][T19232] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.748702][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.769004][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.794620][ T5026] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.801827][ T5026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.942103][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 487.958721][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.968554][T19336] loop5: detected capacity change from 0 to 64 [ 487.970792][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.984934][ T5026] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.992093][ T5026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.000612][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 488.027108][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 488.158124][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 488.178621][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 488.190776][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 488.243347][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 488.263081][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 488.272902][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 488.281328][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 488.299731][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 488.365001][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 488.561967][T19352] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6726'. [ 488.634141][T19358] loop6: detected capacity change from 0 to 256 [ 488.862100][ T4267] Bluetooth: hci6: command 0x041b tx timeout [ 489.430437][T19232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.448469][T19385] xt_hashlimit: invalid interval [ 489.472479][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 489.480201][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 489.653413][T19354] loop2: detected capacity change from 0 to 32768 [ 489.674007][T19393] loop6: detected capacity change from 0 to 1024 [ 489.737339][T19393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 489.751335][T19354] syz.2.6727: attempt to access beyond end of device [ 489.751335][T19354] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 489.792737][T19393] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 489.837157][T19354] metapage_write_end_io: I/O error [ 489.867215][T19400] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6743'. [ 489.872448][T19393] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 489.887602][T19354] ERROR: (device loop2): diWrite: ixpxd invalid [ 489.887602][T19354] [ 489.977428][T19354] ERROR: (device loop2): remounting filesystem as read-only [ 489.998988][T19393] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 490.040427][T19354] ERROR: (device loop2): txCommit: [ 490.040427][T19354] [ 490.143625][T19354] blkno = 8f7c0, nblocks = 1 [ 490.149287][T19354] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 490.149287][T19354] [ 490.228967][T19354] ERROR: (device loop2): dbAllocNext: Corrupt dmap page [ 490.228967][T19354] [ 490.271362][T19354] ialloc: diAlloc returned -5! [ 490.293288][T15067] EXT4-fs (loop6): unmounting filesystem. [ 490.470547][ T4264] syz-executor: attempt to access beyond end of device [ 490.470547][ T4264] loop2: rw=1, sector=4701696, nr_sectors = 8 limit=32768 [ 490.587752][ T4264] metapage_write_end_io: I/O error [ 490.911432][T19432] sctp: [Deprecated]: syz.4.6754 (pid 19432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.911432][T19432] Use struct sctp_sack_info instead [ 490.951963][ T4267] Bluetooth: hci6: command 0x040f tx timeout [ 491.012965][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.052572][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.071203][T19436] loop4: detected capacity change from 0 to 64 [ 491.148060][T19436] Trying to free block not in datazone [ 491.165749][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.183774][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.247737][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.272931][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.302308][T19232] device veth0_vlan entered promiscuous mode [ 491.338006][T19441] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 491.424882][T19232] device veth1_vlan entered promiscuous mode [ 491.555455][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 491.592313][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 491.623354][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 491.665662][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 491.714651][T19232] device veth0_macvtap entered promiscuous mode [ 491.735497][T19232] device veth1_macvtap entered promiscuous mode [ 491.752312][T19462] loop2: detected capacity change from 0 to 8 [ 491.832868][T19462] SQUASHFS error: Failed to read block 0x738: -5 [ 491.846567][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.875466][T19462] SQUASHFS error: Unable to read metadata cache entry [736] [ 491.898577][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.932916][T19468] xt_TCPMSS: Only works on TCP SYN packets [ 491.942090][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.985384][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.018993][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.032892][T19472] loop5: detected capacity change from 0 to 64 [ 492.062249][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.087693][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.104957][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.126968][T19476] loop6: detected capacity change from 0 to 736 [ 492.134902][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.155891][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.189538][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.220488][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.227099][T19476] rock: directory entry would overflow storage [ 492.273120][T19476] rock: sig=0x3b10, size=4, remaining=3 [ 492.290870][T19232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.344461][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.419801][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.451844][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.482276][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.526859][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.557448][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.571407][T19485] sctp: [Deprecated]: syz.5.6775 (pid 19485) Use of struct sctp_assoc_value in delayed_ack socket option. [ 492.571407][T19485] Use struct sctp_sack_info instead [ 492.593367][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.611815][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.641901][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.671830][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.700419][T19232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.728623][T19232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.789300][T19232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.828479][T19466] netlink: 'syz.4.6767': attribute type 2 has an invalid length. [ 492.891508][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 492.910602][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 492.943663][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 492.961586][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 492.993223][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 493.002947][ T4996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 493.025352][ T26] audit: type=1326 audit(492.988:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19500 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 493.027602][ T4267] Bluetooth: hci6: command 0x0419 tx timeout [ 493.090319][T19232] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.124902][T19232] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.146068][ T26] audit: type=1326 audit(493.028:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19500 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 493.182207][ T4267] Bluetooth: hci5: command 0x0406 tx timeout [ 493.188852][T19232] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.245494][T19232] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.295585][ T26] audit: type=1326 audit(493.028:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19500 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeca38e929 code=0x7ffc0000 [ 493.576108][ T4996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.601864][ T4996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.636170][ T5010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 493.686314][ T4994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.722487][ T4994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.758306][ T5026] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 493.964754][T19536] ufs: Invalid option: "Ûàßä0…(áeêªLüêd9(@ ûŸÀ8ìL´)uH\dKzLVÚÁR<%ï5rÆŒËze ~I2~ [ 493.964754][T19536] r0Rpyëhå:ã‰ÝèÖY³‡ [ 493.964754][T19536] òO©÷‰\›z«Y" or missing value [ 494.081913][T19536] ufs: wrong mount options [ 494.128386][T19540] loop4: detected capacity change from 0 to 256 [ 494.349738][T19549] netlink: 144 bytes leftover after parsing attributes in process `syz.5.6803'. [ 494.815207][T19571] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 494.865162][T19576] xt_TCPMSS: Only works on TCP SYN packets [ 494.895397][T19571] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 495.020688][T19581] netlink: 'syz.5.6817': attribute type 2 has an invalid length. [ 495.254472][T19594] loop4: detected capacity change from 0 to 64 [ 495.692657][T19604] loop4: detected capacity change from 0 to 4096 [ 495.762876][T19604] ntfs: volume version 3.1. [ 496.014586][T19620] sctp: [Deprecated]: syz.6.6836 (pid 19620) Use of struct sctp_assoc_value in delayed_ack socket option. [ 496.014586][T19620] Use struct sctp_sack_info instead [ 496.085772][T19624] loop7: detected capacity change from 0 to 256 [ 496.159430][T19626] netlink: 'syz.2.6851': attribute type 1 has an invalid length. [ 497.228383][T19673] ufs: Invalid option: "Ûàßä0…(áeêªLüêd9(@ ûŸÀ8ìL´)uH\dKzLVÚÁR<%ï5rÆŒËze ~I2~ [ 497.228383][T19673] r0Rpyëhå:ã‰ÝèÖY³‡ [ 497.228383][T19673] òO©÷‰\›z«Y" or missing value [ 497.256209][T19673] ufs: wrong mount options [ 497.528429][T19686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6870'. [ 497.565893][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6870'. [ 497.611944][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6870'. [ 497.747544][T19697] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6874'. [ 498.320469][T19722] loop4: detected capacity change from 0 to 1024 [ 498.399690][T19722] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 498.428671][T19722] EXT4-fs error (device loop4): ext4_empty_dir:3154: inode #11: block 32: comm syz.4.6886: bad entry in directory: rec_len % 4 != 0 - offset=12, inode=2, rec_len=65526, size=1024 fake=1 [ 498.448360][T19722] EXT4-fs warning (device loop4): ext4_empty_dir:3156: inode #11: comm syz.4.6886: directory missing '..' [ 498.512834][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 498.730565][T19739] loop4: detected capacity change from 0 to 256 [ 498.751192][T19739] exfat: Deprecated parameter 'utf8' [ 498.787861][T19739] exfat: Deprecated parameter 'utf8' [ 498.819209][T19739] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 498.951000][T19739] exFAT-fs (loop4): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 499.268543][T19762] netlink: 'syz.7.6906': attribute type 10 has an invalid length. [ 499.296597][T19762] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6906'. [ 499.342402][T19762] device batadv0 entered promiscuous mode [ 499.380307][T19762] bridge0: port 3(batadv0) entered blocking state [ 499.409786][T19762] bridge0: port 3(batadv0) entered disabled state [ 499.434095][T19762] bridge0: port 3(batadv0) entered blocking state [ 499.443155][T19762] bridge0: port 3(batadv0) entered forwarding state [ 499.516691][T19765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6908'. [ 499.695034][ T5015] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 499.705300][ T5015] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 499.755387][T19783] loop7: detected capacity change from 0 to 256 [ 499.775201][T19785] loop4: detected capacity change from 0 to 256 [ 499.811869][ T4334] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 499.853518][T19785] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 499.883981][T19783] FAT-fs (loop7): Directory bread(block 64) failed [ 499.890597][T19783] FAT-fs (loop7): Directory bread(block 65) failed [ 499.916542][T19785] exFAT-fs (loop4): invalid start cluster (520) [ 499.937931][T19783] FAT-fs (loop7): Directory bread(block 66) failed [ 499.960973][T19783] FAT-fs (loop7): Directory bread(block 67) failed [ 500.002050][T19783] FAT-fs (loop7): Directory bread(block 68) failed [ 500.012675][ T4334] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 500.048331][T19783] FAT-fs (loop7): Directory bread(block 69) failed [ 500.060725][ T4334] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 500.070610][T19783] FAT-fs (loop7): Directory bread(block 70) failed [ 500.082047][ T4334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.101513][T19783] FAT-fs (loop7): Directory bread(block 71) failed [ 500.116738][ T4334] usb 6-1: Found UVC 0.00 device (046d:08c1) [ 500.123875][T19783] FAT-fs (loop7): Directory bread(block 72) failed [ 500.130433][T19783] FAT-fs (loop7): Directory bread(block 73) failed [ 500.175758][ T4334] usb 6-1: No valid video chain found. [ 500.291416][T19802] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6926'. [ 500.331397][T19802] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6926'. [ 500.343045][ T4334] usb 6-1: USB disconnect, device number 22 [ 500.492808][T19808] loop7: detected capacity change from 0 to 64 [ 500.574235][ T26] audit: type=1800 audit(500.538:189): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6928" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 500.605931][T19812] Device name cannot be null; rc = [-22] [ 500.626371][T19814] trusted_key: encrypted_key: master key parameter '' is invalid [ 500.779995][T19819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.787302][T19819] IPv6: NLM_F_CREATE should be set when creating new route [ 500.794616][T19819] IPv6: NLM_F_CREATE should be set when creating new route [ 500.801881][T19819] IPv6: NLM_F_CREATE should be set when creating new route [ 500.811313][T19820] loop7: detected capacity change from 0 to 8 [ 500.833330][T19820] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 500.935731][T19827] loop4: detected capacity change from 0 to 1024 [ 500.936160][T19820] cramfs: Error -3 while decompressing! [ 500.943249][T19827] EXT4-fs: Ignoring removed bh option [ 501.010098][T19820] cramfs: ffffffff96b50568(26)->ffff8880534b4000(4096) [ 501.027743][T19820] cramfs: Error -5 while decompressing! [ 501.033497][T19820] cramfs: ffffffff96b50582(26)->ffff8880549ed000(4096) [ 501.043524][T19827] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 501.067450][T19820] cramfs: Error -3 while decompressing! [ 501.165588][T19820] cramfs: ffffffff96b50568(26)->ffff8880534b4000(4096) [ 501.210861][ T26] audit: type=1800 audit(501.168:190): pid=19820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.6933" name="file2" dev="loop7" ino=348 res=0 errno=0 [ 501.301411][ T4251] EXT4-fs (loop4): unmounting filesystem. [ 501.349060][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.356275][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.787281][T19855] Device name cannot be null; rc = [-22] [ 502.587902][T19887] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 502.615595][T19831] loop2: detected capacity change from 0 to 65536 [ 502.664639][T19831] XFS: ikeep mount option is deprecated. [ 502.779085][T19886] loop5: detected capacity change from 0 to 2048 [ 502.812948][T19900] kAFS: unable to lookup cell '/' [ 502.844093][T19831] XFS (loop2): Mounting V5 Filesystem [ 502.877979][T19886] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 503.032684][T19831] XFS (loop2): Ending clean mount [ 503.249372][ T4264] XFS (loop2): Unmounting Filesystem [ 503.884521][T19945] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6988'. [ 503.902434][ T27] INFO: task syz-executor:4253 blocked for more than 143 seconds. [ 503.910350][ T27] Not tainted 6.1.141-syzkaller #0 [ 503.960408][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 503.999373][ T27] task:syz-executor state:D stack:22144 pid:4253 ppid:1 flags:0x00004004 [ 504.027543][ T27] Call Trace: [ 504.037693][ T27] [ 504.046677][ T27] __schedule+0x10e9/0x40d0 [ 504.065393][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 504.071428][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 504.078051][ T27] ? lock_chain_count+0x20/0x20 [ 504.091066][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 504.105920][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 504.117346][ T27] schedule+0xb9/0x180 [ 504.121617][ T27] io_schedule+0x7c/0xd0 [ 504.138669][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 504.145596][ T27] ? folio_wait_bit+0x30/0x30 [ 504.150407][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 504.157223][ T27] ? folio_mapping+0x1ba/0x4d0 [ 504.162340][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 504.168218][ T27] ? mapping_evict_folio+0x520/0x520 [ 504.173936][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 504.180088][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 504.185695][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 504.191059][ T27] evict+0x498/0x870 [ 504.199326][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 504.208631][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 504.219194][ T27] ? _raw_spin_unlock+0x24/0x40 [ 504.224997][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 504.230374][ T27] evict_inodes+0x604/0x690 [ 504.235639][ T27] ? clear_inode+0x150/0x150 [ 504.240337][ T27] ? dput+0x1c9/0x1d0 [ 504.245058][ T27] ? sync_filesystem+0x103/0x220 [ 504.250112][ T27] generic_shutdown_super+0x93/0x340 [ 504.256283][ T27] kill_block_super+0x7c/0xe0 [ 504.261074][ T27] deactivate_locked_super+0x93/0xf0 [ 504.266782][ T27] cleanup_mnt+0x463/0x4f0 [ 504.271316][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 504.276951][ T27] task_work_run+0x1ca/0x250 [ 504.281652][ T27] ? task_work_cancel+0x230/0x230 [ 504.287134][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 504.293086][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 504.298543][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 504.309428][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 504.341280][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.348550][ T27] do_syscall_64+0x58/0xa0 [ 504.353473][ T27] ? clear_bhb_loop+0x60/0xb0 [ 504.358539][ T27] ? clear_bhb_loop+0x60/0xb0 [ 504.363593][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 504.369635][ T27] RIP: 0033:0x7f61bfb8fc57 [ 504.374402][ T27] RSP: 002b:00007ffd7e3e9af8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 504.384373][ T27] RAX: 0000000000000000 RBX: 00007f61bfc10925 RCX: 00007f61bfb8fc57 [ 504.392664][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd7e3e9bb0 [ 504.400721][ T27] RBP: 00007ffd7e3e9bb0 R08: 0000000000000000 R09: 0000000000000000 [ 504.408896][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd7e3eac40 [ 504.417332][ T27] R13: 00007f61bfc10925 R14: 0000000000055961 R15: 00007ffd7e3eac80 [ 504.425722][ T27] [ 504.429117][ T27] [ 504.429117][ T27] Showing all locks held in the system: [ 504.437451][ T27] 1 lock held by rcu_tasks_kthre/12: [ 504.443127][ T27] #0: ffffffff8c92b430 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 504.454933][ T27] 1 lock held by rcu_tasks_trace/13: [ 504.460303][ T27] #0: ffffffff8c92bc50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 504.473412][ T27] 1 lock held by khungtaskd/27: [ 504.478306][ T27] #0: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 504.494487][ T27] 2 locks held by getty/4017: [ 504.499214][ T27] #0: ffff88814d27c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 504.530926][ T27] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 504.541673][ T27] 1 lock held by syz-executor/4253: [ 504.547614][ T27] #0: ffff888077abe0e0 (&type->s_umount_key#90){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 504.560409][ T27] 2 locks held by syz-executor/4264: [ 504.570994][ T27] #0: ffff888023b280e0 (&type->s_umount_key#54){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 504.585453][ T27] #1: ffffffff8c930778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 504.596699][ T27] 2 locks held by kworker/0:16/5404: [ 504.603295][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 504.621449][ T27] #1: ffffc9000468fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 504.640721][ T27] 1 lock held by syz.0.6424/18686: [ 504.646319][ T27] #0: ffff888077abe0e0 (&type->s_umount_key#90){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 504.657722][ T27] 1 lock held by sed/19956: [ 504.662530][ T27] [ 504.665034][ T27] ============================================= [ 504.665034][ T27] [ 504.674203][ T27] NMI backtrace for cpu 1 [ 504.678557][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 504.686584][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.696739][ T27] Call Trace: [ 504.700030][ T27] [ 504.702983][ T27] dump_stack_lvl+0x168/0x22e [ 504.707771][ T27] ? irq_work_queue+0xb8/0x140 [ 504.712566][ T27] ? show_regs_print_info+0x12/0x12 [ 504.717796][ T27] ? load_image+0x3b0/0x3b0 [ 504.722318][ T27] ? vprintk_emit+0x571/0x680 [ 504.727013][ T27] ? printk_sprint+0x460/0x460 [ 504.731800][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 504.736762][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 504.742986][ T27] ? _printk+0xcc/0x110 [ 504.747179][ T27] ? load_image+0x3b0/0x3b0 [ 504.751708][ T27] ? load_image+0x3b0/0x3b0 [ 504.756236][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 504.762330][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 504.768328][ T27] watchdog+0xeee/0xf30 [ 504.772491][ T27] ? watchdog+0x1ed/0xf30 [ 504.777009][ T27] kthread+0x29d/0x330 [ 504.781085][ T27] ? hungtask_pm_notify+0x40/0x40 [ 504.786189][ T27] ? kthread_blkcg+0xd0/0xd0 [ 504.790795][ T27] ret_from_fork+0x1f/0x30 [ 504.795206][ T27] [ 504.798263][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.805965][ T27] Sending NMI from CPU 1 to CPUs 0: [ 504.811579][ C0] NMI backtrace for cpu 0 [ 504.811591][ C0] CPU: 0 PID: 5010 Comm: kworker/u4:18 Not tainted 6.1.141-syzkaller #0 [ 504.811607][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.811615][ C0] Workqueue: bat_events batadv_nc_worker [ 504.811636][ C0] RIP: 0010:kasan_check_range+0x41/0x290 [ 504.811658][ C0] Code: 82 57 02 00 00 49 89 f8 49 c1 e8 2f 41 81 f8 ff ff 01 00 0f 82 43 02 00 00 49 bf 01 00 00 00 00 fc ff df 49 89 fb 49 c1 eb 03 <49> b8 00 00 00 00 00 fc ff df 4f 8d 0c 03 48 8d 5c 37 ff 48 c1 eb [ 504.811670][ C0] RSP: 0018:ffffc9000d5df820 EFLAGS: 00000806 [ 504.811682][ C0] RAX: 0000000000000001 RBX: 000000000000002c RCX: ffffffff8162f583 [ 504.811692][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff908b8240 [ 504.811701][ C0] RBP: ffffc9000d5dfa90 R08: 000000000001ffff R09: fffffbfff2117049 [ 504.811712][ C0] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: ffff88807d3e8000 [ 504.811722][ C0] R13: 0000000000000000 R14: 0000000000000002 R15: dffffc0000000001 [ 504.811732][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 504.811744][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 504.811754][ C0] CR2: 000055e4fa603950 CR3: 000000003046e000 CR4: 00000000003506f0 [ 504.811771][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 504.811778][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 504.811786][ C0] Call Trace: [ 504.811791][ C0] [ 504.811798][ C0] __lock_acquire+0x5e3/0x7c50 [ 504.811818][ C0] ? __lock_acquire+0x13c0/0x7c50 [ 504.811838][ C0] ? __update_load_avg_se+0x6e9/0xb90 [ 504.811858][ C0] ? verify_lock_unused+0x140/0x140 [ 504.811875][ C0] ? verify_lock_unused+0x140/0x140 [ 504.811892][ C0] ? try_to_wake_up+0x64c/0x1080 [ 504.811908][ C0] ? enqueue_entity+0x9ab/0x14f0 [ 504.811923][ C0] lock_acquire+0x1b4/0x490 [ 504.811938][ C0] ? batadv_nc_worker+0xce/0x600 [ 504.811955][ C0] ? read_lock_is_recursive+0x10/0x10 [ 504.811971][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 504.811988][ C0] ? batadv_nc_worker+0xce/0x600 [ 504.812002][ C0] batadv_nc_worker+0xeb/0x600 [ 504.812015][ C0] ? batadv_nc_worker+0xce/0x600 [ 504.812030][ C0] ? process_one_work+0x7a1/0x1160 [ 504.812044][ C0] process_one_work+0x898/0x1160 [ 504.812062][ C0] ? worker_detach_from_pool+0x240/0x240 [ 504.812077][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 504.812094][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 504.812110][ C0] ? kthread_data+0x4b/0xc0 [ 504.812127][ C0] worker_thread+0xaa2/0x1250 [ 504.812149][ C0] kthread+0x29d/0x330 [ 504.812164][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 504.812177][ C0] ? kthread_blkcg+0xd0/0xd0 [ 504.812193][ C0] ret_from_fork+0x1f/0x30 [ 504.812214][ C0] [ 505.093448][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 505.100376][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 505.108287][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.118359][ T27] Call Trace: [ 505.121664][ T27] [ 505.124596][ T27] dump_stack_lvl+0x168/0x22e [ 505.129298][ T27] ? memcpy+0x3c/0x60 [ 505.133285][ T27] ? show_regs_print_info+0x12/0x12 [ 505.138496][ T27] ? load_image+0x3b0/0x3b0 [ 505.142997][ T27] panic+0x2c9/0x710 [ 505.146879][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 505.152502][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 505.157003][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 505.162544][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 505.168689][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 505.174835][ T27] watchdog+0xf2d/0xf30 [ 505.178983][ T27] ? watchdog+0x1ed/0xf30 [ 505.183655][ T27] kthread+0x29d/0x330 [ 505.187717][ T27] ? hungtask_pm_notify+0x40/0x40 [ 505.192727][ T27] ? kthread_blkcg+0xd0/0xd0 [ 505.197319][ T27] ret_from_fork+0x1f/0x30 [ 505.201733][ T27] [ 505.204985][ T27] Kernel Offset: disabled [ 505.209296][ T27] Rebooting in 86400 seconds..