last executing test programs: 2m35.391186726s ago: executing program 3 (id=4127): ioprio_set$pid(0x1, 0x0, 0x0) add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe) 2m35.030534686s ago: executing program 3 (id=4135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) fchmod(r0, 0x20) 2m34.904485041s ago: executing program 3 (id=4138): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000040)={0x0, 0x4, 0x2, 0x1000, @vifc_lcl_ifindex, @remote}, 0x10) 2m34.47174465s ago: executing program 3 (id=4143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000010900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500200000000d000300686173683a6d6163"], 0x5c}}, 0x0) 2m34.228556185s ago: executing program 3 (id=4149): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m33.222605028s ago: executing program 3 (id=4164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m18.845523832s ago: executing program 32 (id=4164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.071255387s ago: executing program 4 (id=5316): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 1m7.530124644s ago: executing program 4 (id=5322): r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000200)={0x0, 0x8, 0x0, 0x0, 0x28}) 1m7.193996139s ago: executing program 4 (id=5327): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) 1m6.840569072s ago: executing program 4 (id=5333): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x808, &(0x7f0000000400)={[{@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x9}}, {@utf8}, {@errors_continue}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@errors_remount}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@utf8}]}, 0x1, 0x1522, &(0x7f0000006280)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 1m6.284578016s ago: executing program 4 (id=5340): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x160) getdents64(r0, 0xfffffffffffffffe, 0xff70) 1m5.697992856s ago: executing program 4 (id=5346): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@keep_last_dots}, {@utf8}, {@utf8}, {@fmask={'fmask', 0x3d, 0x2}}, {@allow_utime={'allow_utime', 0x3d, 0x6}}, {@gid}, {@errors_remount}]}, 0xff, 0x1557, &(0x7f0000004a40)="$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") utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) 1m5.049919788s ago: executing program 33 (id=5346): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@keep_last_dots}, {@utf8}, {@utf8}, {@fmask={'fmask', 0x3d, 0x2}}, {@allow_utime={'allow_utime', 0x3d, 0x6}}, {@gid}, {@errors_remount}]}, 0xff, 0x1557, &(0x7f0000004a40)="$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") utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) 38.408038879s ago: executing program 1 (id=5682): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, &(0x7f0000000100)=0x147ae147ae147ad, 0x112) 37.994581495s ago: executing program 1 (id=5688): getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0xffffffffffffffff, &(0x7f0000000000)=0x6d) lsm_get_self_attr(0x64, &(0x7f0000000000)={0x0, 0x0, 0xfd, 0xdd, ""/221}, &(0x7f0000000100)=0xfd, 0x1) 37.692981228s ago: executing program 1 (id=5689): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000340)='./file1\x00', 0x3000010, &(0x7f0000000200)={[{@adinicb}, {@volume={'volume', 0x3d, 0x3}}, {@uid}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@gid_forget}, {@shortad}, {@uid_forget}, {@partition={'partition', 0x3d, 0x410a}}]}, 0x1, 0xc59, &(0x7f0000001640)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2901842, 0x0, 0x0, 0x0, &(0x7f0000000100)) 37.235419764s ago: executing program 1 (id=5693): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000140)={[{@uid}, {@nodecompose}, {@umask={'umask', 0x3d, 0x1}}, {@barrier}, {@gid={'gid', 0x3d, 0xee00}}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'cp1251'}}, {}, {@barrier}]}, 0xfc, 0x6ea, &(0x7f0000000f80)="$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") mount$bind(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x883042, 0x0) 36.60981945s ago: executing program 1 (id=5695): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./bus\x00', 0x1008840, &(0x7f0000000280)={[{@utf8}, {@fat=@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@rodir}, {@fat=@check_strict}, {@rodir}, {@shortname_lower}, {@numtail}, {@uni_xlate}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0x33}}]}, 0x1, 0x360, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x17e) 35.868135034s ago: executing program 1 (id=5701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 34.97948243s ago: executing program 34 (id=5701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x9c}}, 0x0) 4.556948424s ago: executing program 6 (id=6011): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000009c0)={{0x4a, 0x4}, {0x3, 0x2}, 0x3, 0x1, 0x8}) 3.881619191s ago: executing program 6 (id=6020): bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) 3.514339079s ago: executing program 6 (id=6026): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x70bd2a, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) 3.143882112s ago: executing program 6 (id=6030): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x8400, &(0x7f00000005c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x39]}}]}) 2.873719197s ago: executing program 2 (id=6034): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="0203f3021600000000000000200000000200090008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000041414aa00000000000000000a00080008", @ANYRES8], 0xb0}, 0x1, 0x7}, 0x0) 2.808158374s ago: executing program 6 (id=6035): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000000380)=ANY=[], 0xfa, 0x61c5, &(0x7f00000072c0)="$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") symlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.529641517s ago: executing program 2 (id=6039): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x76, 0x1, 0x70bd27, 0x7, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000, 0x0, 0x24040010}, 0x0) 2.427109481s ago: executing program 7 (id=6041): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) 2.202214387s ago: executing program 2 (id=6043): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fcntl$setstatus(r0, 0x4, 0x46c00) 2.126662382s ago: executing program 7 (id=6044): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000002540)={0x10, 0x0, 0x4}, 0x10}, {&(0x7f0000002600)={0x10, 0x20, 0x1}, 0x10}], 0x3}, 0x0) 1.882026344s ago: executing program 5 (id=6047): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x20040) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x6, 0x7, 0x10}) 1.874911626s ago: executing program 2 (id=6048): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 1.773685862s ago: executing program 7 (id=6049): r0 = syz_open_dev$evdev(&(0x7f0000000380), 0x2, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000740)=""/143) 1.685425735s ago: executing program 8 (id=6050): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) 1.594128625s ago: executing program 0 (id=6051): r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0xa, @win={{0x7e, 0x2, 0x401, 0x6}, 0x7, 0x3, 0x0, 0x5, 0x0, 0xff}}) 1.590059568s ago: executing program 2 (id=6052): getgroups(0x3, &(0x7f0000000000)=[0xee01, 0xee00, 0xffffffffffffffff]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4056, &(0x7f00000001c0)={[{@noload}, {@nombcache}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@lazytime}, {@journal_async_commit}, {@noquota}, {@data_ordered}, {@nogrpid}, {@stripe={'stripe', 0x3d, 0x9}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80}}, {@nolazytime}, {@resgid={'resgid', 0x3d, r0}}, {@block_validity}]}, 0x1, 0x45c, &(0x7f0000000580)="$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") 1.524111481s ago: executing program 5 (id=6053): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) 1.389412702s ago: executing program 7 (id=6054): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='syscall\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 1.335165374s ago: executing program 8 (id=6055): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000000c0)=0x100000001, 0x4) 1.301294362s ago: executing program 0 (id=6056): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 1.154099161s ago: executing program 5 (id=6057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x9657, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x5, &(0x7f0000000040)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}]}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.131681865s ago: executing program 7 (id=6058): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x1ff, 0x0, 0x0, 0x8fc0, 0x65d40}) 1.094507418s ago: executing program 2 (id=6059): r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0x40109441, &(0x7f0000000440)={0x2, 0x4, {0x32, @usage=0xe4, 0x0, 0x5, 0x0, 0x2, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x0, 0xce82}, 0x4000, 0x3, [0x0, 0x8, 0x1000000000, 0x0, 0x0, 0xfffffffffffffffd]}, {0x5, @struct={0x7b30, 0x1}, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0xf415, 0x8, 0x58a, @struct={0x2, 0xf136}, 0x3, 0x4, [0x4, 0x20000000000001, 0x2, 0xfffffffffffffffc, 0x0, 0x8]}, {0x6, @struct={0x2, 0x9aa}, 0x0, 0x7, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x8, 0xe4ae66913924f322, @struct={0x8, 0x4d86}, 0xffffffef, 0x4, [0x80000000, 0x800006, 0x6532, 0x3ff, 0x80]}}) 1.047423579s ago: executing program 8 (id=6060): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000d40)={0x4, "4397146ada3c1a625e501717b1c348e4f1e11c5cff45fffffffb00", 0x1, 0x0, 0x5, 0xc00000, 0x4}) 922.497179ms ago: executing program 0 (id=6061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a0000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a3100000000090001"], 0xc0}}, 0x0) 753.009901ms ago: executing program 5 (id=6062): r0 = syz_open_dev$vim2m(&(0x7f0000000280), 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xfffffff1, 0x48, 0x30314442, 0x1, 0xfffffff2, 0xc1, 0x2, 0xc92, 0x0, 0x1, 0x2, 0x7}}) 730.357763ms ago: executing program 7 (id=6063): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x24, &(0x7f0000000800)=ANY=[@ANYBLOB="1201500272464840cc1720106442010203010902120001030820a90904"], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) 728.466397ms ago: executing program 8 (id=6064): r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000100)=0x2) 641.740103ms ago: executing program 0 (id=6065): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x1, 0x6, "01000009000000000000b4e2e808dc45fdf100bc8d19b3000800", 0x30395056}) 455.15629ms ago: executing program 8 (id=6066): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x2c8, 0xe8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f8, 0xffffffff, 0xffffffff, 0x1f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x8, "84060053472fe88331eb62fe672782c008001000004000"}}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0xb}, [0xff000000, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffff00, 0xff000000], 'caif0\x00', 'dvmrp1\x00', {0xff}, {0xff}, 0x2f, 0x6, 0x3, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x9, 0x0, '\x00', 'syz1\x00', {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x328) 417.48535ms ago: executing program 6 (id=6067): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 383.16004ms ago: executing program 5 (id=6068): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000c"], 0x34}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) 362.605321ms ago: executing program 0 (id=6069): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f028, 0x1}) 160.955604ms ago: executing program 8 (id=6070): r0 = socket(0x22, 0x2, 0x3) ioctl$PPPOEIOCDFWD(r0, 0x80044944, 0x1000000000000) 40.888271ms ago: executing program 0 (id=6071): socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x53, &(0x7f000002eff0)={0x0, 0x0}, 0x10) 0s ago: executing program 5 (id=6072): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="9a8aa489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0) kernel console output (not intermixed with test programs): alid ID 0 [ 575.749049][ T5974] usb 7-1: USB disconnect, device number 3 [ 575.755155][ T24] uvcvideo 1-1:135.230: Found UVC 0.00 device syz (18ec:3288) [ 575.786635][ T24] uvcvideo 1-1:135.230: No valid video chain found. [ 575.806517][ T5966] usb 5-1: config index 0 descriptor too short (expected 133, got 72) [ 575.828063][ T5966] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 575.858469][ T5966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.872006][ T5966] usb 5-1: Product: syz [ 575.876192][ T5966] usb 5-1: Manufacturer: syz [ 575.897594][ T5966] usb 5-1: SerialNumber: syz [ 575.933024][ T5966] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 575.976264][ T5966] usb 1-1: USB disconnect, device number 102 [ 576.039873][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 576.141452][T17166] loop1: detected capacity change from 0 to 1024 [ 576.418101][ T31] audit: type=1326 audit(2000000932.533:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.5.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 576.499979][ T31] audit: type=1326 audit(2000000932.533:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.5.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 576.551604][ T6567] usb 5-1: USB disconnect, device number 105 [ 576.621371][ T31] audit: type=1326 audit(2000000932.533:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.5.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 576.711297][ T31] audit: type=1326 audit(2000000932.533:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.5.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 576.821878][ T31] audit: type=1326 audit(2000000932.533:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17171 comm="syz.5.4815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 576.985081][T17193] loop6: detected capacity change from 0 to 1764 [ 577.009840][T17193] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 577.032731][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 577.036540][T17186] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 577.073717][ T24] ath9k_htc: Failed to initialize the device [ 577.105406][ T6567] usb 5-1: ath9k_htc: USB layer deinitialized [ 577.130006][T17186] bond2 (unregistering): Released all slaves [ 577.425323][T17205] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 577.500923][ T31] audit: type=1326 audit(2000000933.645:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ed8f749 code=0x7ffc0000 [ 577.555748][T17211] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4833'. [ 577.580240][ T31] audit: type=1326 audit(2000000933.656:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c7ed8f749 code=0x7ffc0000 [ 577.583243][T17209] loop1: detected capacity change from 0 to 2048 [ 577.686243][ T31] audit: type=1326 audit(2000000933.666:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2c7ed8f749 code=0x7ffc0000 [ 577.720184][ T31] audit: type=1326 audit(2000000933.666:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c7ed8f783 code=0x7ffc0000 [ 577.750669][ T31] audit: type=1326 audit(2000000933.677:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17208 comm="syz.1.4832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c7ed8e1ff code=0x7ffc0000 [ 577.906858][T17215] loop6: detected capacity change from 0 to 4096 [ 577.966158][T17215] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 578.169359][T17229] loop0: detected capacity change from 0 to 256 [ 578.193659][T17215] ntfs3(loop6): ino=1e, "file1" ntfs_sync_inode failed, -22. [ 578.201253][T17215] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 578.267825][T17233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4844'. [ 578.430473][T12643] ntfs3(loop6): ino=1e, ntfs3_write_inode failed, -22. [ 578.672438][T17246] netlink: 'syz.0.4851': attribute type 3 has an invalid length. [ 578.773126][T17251] tmpfs: Bad value for 'mpol' [ 579.251983][T17270] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 579.253635][T17267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 579.314128][T17272] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.344152][T17275] loop0: detected capacity change from 0 to 8 [ 579.394035][T17275] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 579.444576][ T5982] udevd[5982]: incorrect cramfs checksum on /dev/loop0 [ 579.470992][T17275] cramfs: Error -3 while decompressing! [ 579.502141][T17275] cramfs: ffffffff999d22e8(26)->ffff888068062000(4096) [ 579.546070][ T6241] udevd[6241]: incorrect cramfs checksum on /dev/loop0 [ 579.554468][T17275] cramfs: Error -3 while decompressing! [ 579.577341][T17275] cramfs: ffffffff999d22e8(26)->ffff888068062000(4096) [ 579.879476][T17295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.131787][T17307] !: renamed from dummy0 [ 580.583870][T17323] netlink: 964 bytes leftover after parsing attributes in process `syz.2.4888'. [ 580.590209][T17325] netlink: 'syz.0.4889': attribute type 1 has an invalid length. [ 580.618079][T17325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.628922][T17328] loop6: detected capacity change from 0 to 64 [ 580.687389][T17328] Trying to free block not in datazone [ 580.757427][T17328] Trying to free block not in datazone [ 580.762925][T17328] Trying to free block not in datazone [ 580.821814][T17328] Trying to free block not in datazone [ 580.845556][T17328] minix_free_block (loop6:6): bit already cleared [ 580.891286][T17328] Trying to free block not in datazone [ 580.910297][T17340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4898'. [ 580.938599][T17328] Trying to free block not in datazone [ 581.266542][T17355] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4904'. [ 581.550007][T17372] loop6: detected capacity change from 0 to 64 [ 581.591962][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 581.591984][ T31] audit: type=1326 audit(2000000937.961:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 581.664703][ T31] audit: type=1326 audit(2000000937.971:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 581.725087][T17372] hfs: filesystem is marked locked, mounting read-only. [ 581.790782][T17372] hfs: filesystem is marked locked, leaving read-only. [ 581.814635][ T31] audit: type=1326 audit(2000000937.971:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 581.953177][ T31] audit: type=1326 audit(2000000938.013:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 582.031282][ T31] audit: type=1326 audit(2000000938.013:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 582.053536][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4918'. [ 582.156254][ T31] audit: type=1326 audit(2000000938.013:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 582.250305][ T31] audit: type=1326 audit(2000000938.013:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 582.310766][T17392] loop6: detected capacity change from 0 to 256 [ 582.312261][ T31] audit: type=1326 audit(2000000938.013:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 582.378382][T17392] exfat: Deprecated parameter 'namecase' [ 582.427747][T17398] loop2: detected capacity change from 0 to 64 [ 582.443437][T17392] exfat: Deprecated parameter 'namecase' [ 582.449241][ T31] audit: type=1326 audit(2000000938.013:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.4913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 582.475538][T17392] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 582.572896][ T31] audit: type=1326 audit(2000000938.160:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17377 comm="syz.5.4914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 582.855304][ T5972] lo speed is unknown, defaulting to 1000 [ 582.862756][ T5972] syz0: Port: 1 Link DOWN [ 582.893524][ T5972] lo speed is unknown, defaulting to 1000 [ 582.969424][T17413] xt_l2tp: v2 tid > 0xffff: 262144 [ 583.190930][T17421] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4935'. [ 583.382578][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.418116][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.452070][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.486165][T17431] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 583.562464][T17431] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 583.702155][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.757499][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.782684][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.804927][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.901654][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.935125][T17431] wlan0 speed is unknown, defaulting to 1000 [ 583.963778][T17431] wlan0 speed is unknown, defaulting to 1000 [ 584.122063][T17449] loop0: detected capacity change from 0 to 4096 [ 584.166208][T17449] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 584.256682][T17449] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 584.456534][T17427] loop5: detected capacity change from 0 to 32768 [ 584.502246][T17427] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4938 (17427) [ 584.629472][T17427] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 584.688739][T17427] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 584.859794][T17469] loop1: detected capacity change from 0 to 4096 [ 584.914897][T17469] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 584.968500][T17427] BTRFS info (device loop5): enabling ssd optimizations [ 584.994148][T17427] BTRFS info (device loop5): turning on async discard [ 585.012569][T17469] ntfs3(loop1): Failed to load $Extend (-22). [ 585.019364][T17469] ntfs3(loop1): Failed to initialize $Extend. [ 585.031822][T17427] BTRFS info (device loop5): enabling free space tree [ 585.310781][ T5838] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 586.035388][T17528] loop6: detected capacity change from 0 to 128 [ 586.160935][T17528] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 586.239389][T17528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 586.304804][T17538] loop5: detected capacity change from 0 to 1024 [ 586.651129][ T1313] hfsplus: b-tree write err: -5, ino 4 [ 586.754813][T17552] loop1: detected capacity change from 0 to 764 [ 586.808486][T17555] netlink: 'syz.6.4987': attribute type 15 has an invalid length. [ 587.010884][T17561] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4991'. [ 587.490338][T17577] netlink: 'syz.5.4997': attribute type 30 has an invalid length. [ 587.755606][ T5998] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 587.904309][T17593] loop1: detected capacity change from 0 to 16 [ 587.943029][T17593] erofs (device loop1): mounted with root inode @ nid 36. [ 587.950334][ T5998] usb 7-1: Using ep0 maxpacket: 16 [ 587.968359][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 54, changing to 7 [ 588.022963][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8548, setting to 1024 [ 588.076039][ T5998] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 588.117721][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.125760][ T5998] usb 7-1: Product: syz [ 588.200060][ T5998] usb 7-1: Manufacturer: syz [ 588.222226][ T5998] usb 7-1: SerialNumber: syz [ 588.276012][ T5998] usb 7-1: config 0 descriptor?? [ 588.321818][ T5998] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 588.374727][T17545] loop0: detected capacity change from 0 to 40427 [ 588.392597][ T5998] em28xx 7-1:0.0: DVB interface 0 found: isoc [ 588.440435][T17545] F2FS-fs (loop0): invalid crc value [ 588.594267][ T5998] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 588.705425][T17617] loop2: detected capacity change from 0 to 1024 [ 588.737057][ T5998] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 588.766912][ T5998] em28xx 7-1:0.0: board has no eeprom [ 588.844637][T17617] hfsplus: cannot replace xattr [ 588.882652][ T5998] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 588.890464][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 588.890482][ T31] audit: type=1326 audit(2000000945.635:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.5.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 588.890739][ T31] audit: type=1326 audit(2000000945.635:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.5.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 588.938226][ T5998] em28xx 7-1:0.0: dvb set to isoc mode. [ 588.962720][T17545] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 589.010618][ T31] audit: type=1326 audit(2000000945.751:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.5.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 589.052556][T17545] F2FS-fs (loop0): Start checkpoint disabled! [ 589.098153][ T5998] usb 7-1: USB disconnect, device number 4 [ 589.104654][ T4510] hfsplus: b-tree write err: -5, ino 4 [ 589.117979][T17545] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 589.150581][ T5998] em28xx 7-1:0.0: Disconnecting em28xx [ 589.156232][ T10] em28xx 7-1:0.0: Binding DVB extension [ 589.166245][ T31] audit: type=1326 audit(2000000945.782:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.5.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 589.214971][T17545] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 589.247570][T17628] loop1: detected capacity change from 0 to 2048 [ 589.310883][T17628] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 589.336959][ T31] audit: type=1326 audit(2000000945.782:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17623 comm="syz.5.5015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 589.401852][ T10] em28xx 7-1:0.0: Registering input extension [ 589.441474][ T5998] em28xx 7-1:0.0: Closing input extension [ 589.565307][ T5998] em28xx 7-1:0.0: Freeing device [ 589.684933][ T10] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 589.870749][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 589.899394][ T10] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 589.936772][ T10] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 590.004513][ T10] usb 6-1: config 0 has no interface number 0 [ 590.011481][T17646] loop6: detected capacity change from 0 to 4096 [ 590.014203][ T10] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 590.070327][ T10] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 50404, setting to 1024 [ 590.126117][T17646] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 590.166751][ T10] usb 6-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 590.196934][ T10] usb 6-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.216206][T17646] ntfs3(loop6): ino=0, "file0" The size of extended attributes must not exceed 64KiB [ 590.291923][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 590.327174][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.356000][ T10] usb 6-1: Product: syz [ 590.370096][ T10] usb 6-1: Manufacturer: syz [ 590.385429][ T10] usb 6-1: SerialNumber: syz [ 590.491676][ T10] usb 6-1: config 0 descriptor?? [ 590.504756][T17640] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 590.512315][T17662] openvswitch: netlink: Duplicate key (type 21). [ 590.563400][T17640] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 590.754018][T17671] loop0: detected capacity change from 0 to 64 [ 590.770919][T17672] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5036'. [ 590.806495][ T10] usb 6-1: probing VID:PID(0424:012C) [ 590.845139][ T10] usb 6-1: vub300 testing BULK OUT EndPoint(0) 0B [ 590.870141][ T10] usb 6-1: vub300 testing BULK OUT EndPoint(1) 0F [ 590.893164][ T10] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 590.953061][ T10] vub300 6-1:0.133: probe with driver vub300 failed with error -22 [ 590.989955][ T10] usb 6-1: USB disconnect, device number 106 [ 591.302459][T17682] loop2: detected capacity change from 0 to 4096 [ 591.632860][T17702] batadv_slave_0: entered promiscuous mode [ 591.724713][T17702] batadv_slave_0: entered allmulticast mode [ 591.797744][T17707] loop2: detected capacity change from 0 to 128 [ 591.892189][T17707] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 591.975925][T17707] ext4 filesystem being mounted at /898/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 592.143116][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 592.143778][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5059'. [ 592.241649][T17722] geneve2: entered promiscuous mode [ 592.256907][T17722] geneve2: entered allmulticast mode [ 592.283683][ T6170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 37472 - 0 [ 592.312841][ T6170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 37472 - 0 [ 592.346984][ T6170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 37472 - 0 [ 592.386680][ T6170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 37472 - 0 [ 592.423282][ T24] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 592.594059][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 592.608316][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 592.654454][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 592.706787][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 592.747563][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 592.777231][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 592.796220][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.822228][ T24] usb 5-1: config 0 descriptor?? [ 592.846404][T17724] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 593.095009][T17748] loop5: detected capacity change from 0 to 1024 [ 593.116102][T17751] loop1: detected capacity change from 0 to 1024 [ 593.221314][T17751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.309879][ T5835] usb 5-1: USB disconnect, device number 106 [ 593.319882][ T5843] Bluetooth: hci7: Opcode 0x0c03 failed: -19 [ 593.359901][T17731] loop0: detected capacity change from 0 to 32768 [ 593.459975][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.471980][T17731] JBD2: Ignoring recovery information on journal [ 593.480038][ T10] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 593.616282][T17731] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 593.695483][ T10] usb 6-1: config index 0 descriptor too short (expected 3133, got 61) [ 593.723901][ T10] usb 6-1: config 0 has an invalid interface number: 156 but max is 1 [ 593.761662][ T10] usb 6-1: config 0 has an invalid descriptor of length 111, skipping remainder of the config [ 593.832275][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 593.861057][ T10] usb 6-1: config 0 has no interface number 0 [ 593.899318][ T10] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 593.940091][ T10] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 594.011276][ T10] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 594.037879][ T10] usb 6-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.038715][ T5849] ocfs2: Unmounting device (7,0) on (node local) [ 594.088131][ T10] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 594.127725][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.182198][ T10] usb 6-1: config 0 descriptor?? [ 594.207728][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 594.308365][T17780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5087'. [ 594.404794][ T10] spca561 6-1:0.156: probe with driver spca561 failed with error -22 [ 594.424202][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.443364][ T10] usb 6-1: MIDIStreaming interface descriptor not found [ 594.529165][T17784] Cannot find map_set index 135 as target [ 594.565899][ T10] usb 6-1: USB disconnect, device number 107 [ 594.803269][T17765] loop2: detected capacity change from 0 to 32768 [ 594.848650][T17765] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5079 (17765) [ 594.930432][T17765] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 594.987121][T17765] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 595.243879][T17765] BTRFS info (device loop2): enabling ssd optimizations [ 595.250873][T17765] BTRFS info (device loop2): turning on async discard [ 595.334714][T17765] BTRFS info (device loop2): enabling free space tree [ 595.656879][ T5828] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 595.844886][T17838] loop0: detected capacity change from 0 to 1764 [ 596.036617][T17845] netlink: 'syz.1.5110': attribute type 1 has an invalid length. [ 596.070152][T17847] loop6: detected capacity change from 0 to 512 [ 596.349996][T17852] loop0: detected capacity change from 0 to 256 [ 596.519383][T17852] FAT-fs (loop0): Directory bread(block 64) failed [ 596.525950][T17852] FAT-fs (loop0): Directory bread(block 65) failed [ 596.528634][T17853] loop2: detected capacity change from 0 to 4096 [ 596.586490][T17853] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 596.624742][T17852] FAT-fs (loop0): Directory bread(block 66) failed [ 596.669264][T17852] FAT-fs (loop0): Directory bread(block 67) failed [ 596.694029][T17853] ntfs3(loop2): ino=1a, mi_enum_attr [ 596.697433][T17852] FAT-fs (loop0): Directory bread(block 68) failed [ 596.708533][T17852] FAT-fs (loop0): Directory bread(block 69) failed [ 596.715130][T17852] FAT-fs (loop0): Directory bread(block 70) failed [ 596.722214][T17853] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 596.740375][T17859] loop5: detected capacity change from 0 to 2048 [ 596.787351][T17852] FAT-fs (loop0): Directory bread(block 71) failed [ 596.813756][T17863] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 596.832731][T17852] FAT-fs (loop0): Directory bread(block 72) failed [ 596.850678][T17852] FAT-fs (loop0): Directory bread(block 73) failed [ 596.851511][T17859] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=203 [ 596.898127][T17828] loop4: detected capacity change from 0 to 32768 [ 596.940097][T17828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5101 (17828) [ 596.967087][T17859] Remounting filesystem read-only [ 596.985289][T17828] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 597.038574][T17828] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm [ 597.236377][T17882] loop2: detected capacity change from 0 to 64 [ 597.303939][T17828] BTRFS info (device loop4): enabling ssd optimizations [ 597.324485][T17882] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 597.354260][T17828] BTRFS info (device loop4): turning on async discard [ 597.363096][T17828] BTRFS info (device loop4): enabling free space tree [ 597.412955][T17882] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 597.717378][ T5830] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 598.096790][T17903] loop1: detected capacity change from 0 to 2048 [ 598.196004][T17903] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.395970][T17907] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 598.503408][T17907] bond3 (unregistering): Released all slaves [ 598.666138][T17890] loop0: detected capacity change from 0 to 32768 [ 598.672765][T17922] Driver unsupported XDP return value 0 on prog (id 310) dev N/A, expect packet loss! [ 598.737800][ T5972] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 598.798738][T17890] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 598.932496][ T5972] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 598.949568][ T5972] usb 7-1: config 0 has no interface number 0 [ 598.955757][ T5972] usb 7-1: config 0 interface 29 has no altsetting 0 [ 598.968409][ T5972] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 598.979780][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.988206][ T5972] usb 7-1: Product: syz [ 598.992501][ T5972] usb 7-1: Manufacturer: syz [ 598.997543][ T5972] usb 7-1: SerialNumber: syz [ 599.005507][ T5972] usb 7-1: config 0 descriptor?? [ 599.043099][T17890] XFS (loop0): Ending clean mount [ 599.218184][ T5972] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v248 fw v82.234.206 (2 channels) [ 599.251222][ T5849] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 599.405047][ T5972] peak_usb 7-1:0.29 can0: unable to request usb[type=2 value=5] err=-71 [ 599.413437][ T5972] peak_usb 7-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71) [ 599.437871][T17942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.690871][ T5972] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -71 [ 599.716707][ T5830] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.773079][ T5972] usb 7-1: USB disconnect, device number 5 [ 600.114259][T17959] set_capacity_and_notify: 1 callbacks suppressed [ 600.114281][T17959] loop2: detected capacity change from 0 to 4096 [ 600.158319][T17959] ntfs3(loop2): ino=0, mi_enum_attr [ 600.197684][T17959] ntfs3(loop2): ino=0, mi_enum_attr [ 600.225513][T17959] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 600.472400][T17978] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 601.302735][T18008] random: crng reseeded on system resumption [ 601.474065][T17973] loop4: detected capacity change from 0 to 32768 [ 602.027981][T18028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5186'. [ 602.061608][T18028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5186'. [ 602.422900][T18033] loop0: detected capacity change from 0 to 1024 [ 602.537522][T18006] loop5: detected capacity change from 0 to 32768 [ 602.566625][T18037] bridge2: entered promiscuous mode [ 602.637005][T18014] loop6: detected capacity change from 0 to 32768 [ 602.675110][T18014] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5179 (18014) [ 602.741391][T18017] loop2: detected capacity change from 0 to 32768 [ 602.778456][T18014] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 602.842776][T18014] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 602.932301][T18017] ea_get: invalid extended attribute [ 602.967355][T18017] ffff88804be4a7d0: 04 00 00 00 .... [ 603.119145][T18014] BTRFS info (device loop6): enabling ssd optimizations [ 603.126137][T18014] BTRFS info (device loop6): turning on async discard [ 603.159274][ T5998] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 603.205644][T18014] BTRFS info (device loop6): enabling free space tree [ 603.337705][ T5998] usb 5-1: Using ep0 maxpacket: 32 [ 603.354046][T18066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5198'. [ 603.374594][ T5998] usb 5-1: config 0 has an invalid interface number: 119 but max is 4 [ 603.421468][ T5998] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 603.449540][ T5998] usb 5-1: config 0 has no interface number 0 [ 603.486234][ T5998] usb 5-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.578867][T16121] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 603.592235][ T5998] usb 5-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 603.633575][T18066] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 603.643422][ T5998] usb 5-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 603.679481][ T5998] usb 5-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.714799][T18066] bond3 (unregistering): Released all slaves [ 603.755626][ T5998] usb 5-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 603.795027][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.806096][T18079] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5205'. [ 603.833955][ T5998] usb 5-1: Product: syz [ 603.842540][ T5998] usb 5-1: Manufacturer: syz [ 603.847146][ T5998] usb 5-1: SerialNumber: syz [ 603.939689][ T5998] usb 5-1: config 0 descriptor?? [ 603.989156][ T5998] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.119/input/input54 [ 604.022045][T18083] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 604.210374][T18085] netlink: 'syz.0.5208': attribute type 1 has an invalid length. [ 604.395519][ T5998] usb 5-1: USB disconnect, device number 107 [ 604.587314][T18095] loop5: detected capacity change from 0 to 1024 [ 604.643182][T18099] netlink: 'syz.1.5214': attribute type 2 has an invalid length. [ 604.723612][T18099] : entered promiscuous mode [ 605.023861][T18108] openvswitch: netlink: IP tunnel dst address not specified [ 605.407814][T18089] loop2: detected capacity change from 0 to 32768 [ 605.419160][T18121] loop5: detected capacity change from 0 to 256 [ 605.442742][T18089] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5211 (18089) [ 605.557349][T18089] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 605.557435][T18089] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 605.789642][T18089] BTRFS info (device loop2): enabling ssd optimizations [ 605.789673][T18089] BTRFS info (device loop2): turning on async discard [ 605.789694][T18089] BTRFS info (device loop2): enabling free space tree [ 605.983157][ T5828] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 605.998700][T18151] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 606.025534][T18101] loop6: detected capacity change from 0 to 32768 [ 606.120980][T18101] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 606.350794][T18101] XFS (loop6): Ending clean mount [ 606.590534][T16121] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 606.785537][ T5972] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 606.978670][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 606.988511][ T5972] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.037192][ T5972] usb 3-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85 [ 607.078750][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.112041][ T5972] usb 3-1: Product: syz [ 607.118012][ T5972] usb 3-1: Manufacturer: syz [ 607.157976][ T5972] usb 3-1: SerialNumber: syz [ 607.188737][ T5972] usb 3-1: config 0 descriptor?? [ 607.225972][ T5972] ipw 3-1:0.0: IPWireless converter converter detected [ 607.456429][ T5972] usb 3-1: USB disconnect, device number 104 [ 607.492229][ T5972] ipw 3-1:0.0: device disconnected [ 607.895208][T18217] loop6: detected capacity change from 0 to 256 [ 607.943652][T18217] exFAT-fs (loop6): failed to test first cluster bit of root dir(5) [ 608.028917][T18217] loop6: Can't mount, would change RO state [ 608.500524][ T5972] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 608.673289][ T5972] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 608.719060][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 608.761933][ T5972] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 608.774415][T18249] loop2: detected capacity change from 0 to 512 [ 608.807991][ T5972] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 608.837876][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.859356][ T5972] usb 2-1: Product: syz [ 608.866091][ T5972] usb 2-1: Manufacturer: syz [ 608.870058][T18249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.870753][ T5972] usb 2-1: SerialNumber: syz [ 608.890843][ T5972] usb 2-1: config 0 descriptor?? [ 608.912940][ T5972] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 608.930904][T18249] ext4 filesystem being mounted at /928/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 609.000528][T18249] EXT4-fs error (device loop2): ext4_empty_dir:3084: inode #12: block 32: comm syz.2.5275: bad entry in directory: directory entry overrun - offset=0, inode=12, rec_len=131176, size=2048 fake=1 [ 609.071485][T18249] EXT4-fs warning (device loop2): ext4_empty_dir:3087: inode #12: comm syz.2.5275: directory missing '.' [ 609.205272][ T24] usb 2-1: USB disconnect, device number 97 [ 609.260914][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 609.423027][T18231] loop0: detected capacity change from 0 to 32768 [ 609.456656][T18231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5267 (18231) [ 609.457114][T18272] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5284'. [ 609.512491][T18231] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 609.546432][T18231] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 609.745295][T18272] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5284'. [ 609.847706][T18231] BTRFS info (device loop0): enabling ssd optimizations [ 609.864607][T18231] BTRFS info (device loop0): turning on async discard [ 609.913527][T18231] BTRFS info (device loop0): enabling free space tree [ 609.934888][T18298] loop5: detected capacity change from 0 to 512 [ 609.999899][T18298] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 610.128307][ T5849] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 610.327324][T18304] loop6: detected capacity change from 0 to 4096 [ 610.416051][T18304] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 610.724757][T18317] loop5: detected capacity change from 0 to 256 [ 610.860322][T18317] FAT-fs (loop5): Directory bread(block 64) failed [ 610.907783][T18317] FAT-fs (loop5): Directory bread(block 65) failed [ 610.948077][T18317] FAT-fs (loop5): Directory bread(block 66) failed [ 610.954625][T18317] FAT-fs (loop5): Directory bread(block 67) failed [ 610.959111][T18321] fuse: blksize only supported for fuseblk [ 611.028713][T18317] FAT-fs (loop5): Directory bread(block 68) failed [ 611.046062][T18317] FAT-fs (loop5): Directory bread(block 69) failed [ 611.065727][T18317] FAT-fs (loop5): Directory bread(block 70) failed [ 611.090832][T18317] FAT-fs (loop5): Directory bread(block 71) failed [ 611.119746][T18317] FAT-fs (loop5): Directory bread(block 72) failed [ 611.179719][T18317] FAT-fs (loop5): Directory bread(block 73) failed [ 611.506246][T18337] loop6: detected capacity change from 0 to 256 [ 611.568579][T18340] gretap1: entered allmulticast mode [ 611.575191][T18300] loop1: detected capacity change from 0 to 40427 [ 611.582338][T18337] FAT-fs (loop6): Directory bread(block 64) failed [ 611.608810][T18337] FAT-fs (loop6): Directory bread(block 65) failed [ 611.619642][T18300] F2FS-fs (loop1): build fault injection rate: 174 [ 611.638951][T18337] FAT-fs (loop6): Directory bread(block 66) failed [ 611.652979][T18300] F2FS-fs (loop1): build fault injection type: 0x3bfe8c [ 611.671624][T18337] FAT-fs (loop6): Directory bread(block 67) failed [ 611.680771][T18300] F2FS-fs (loop1): invalid crc value [ 611.711218][T18337] FAT-fs (loop6): Directory bread(block 68) failed [ 611.717759][T18337] FAT-fs (loop6): Directory bread(block 69) failed [ 611.777020][T18337] FAT-fs (loop6): Directory bread(block 70) failed [ 611.783595][T18337] FAT-fs (loop6): Directory bread(block 71) failed [ 611.837877][T18337] FAT-fs (loop6): Directory bread(block 72) failed [ 611.868822][T18337] FAT-fs (loop6): Directory bread(block 73) failed [ 612.108456][T18353] xt_CT: No such helper "pptp" [ 612.153411][T18358] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5318'. [ 612.182242][T18300] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 612.224449][T18300] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 612.512415][T18369] loop0: detected capacity change from 0 to 764 [ 612.558647][T18369] Symlink component flag not implemented [ 612.564574][T18369] Symlink component flag not implemented [ 612.819743][T18380] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5329'. [ 613.059629][T18386] loop0: detected capacity change from 0 to 512 [ 613.066878][T18387] loop4: detected capacity change from 0 to 256 [ 613.080642][T18387] exfat: Deprecated parameter 'utf8' [ 613.101726][T18386] EXT4-fs: Ignoring removed orlov option [ 613.115797][T18387] exfat: Deprecated parameter 'utf8' [ 613.129933][T18386] EXT4-fs: Ignoring removed i_version option [ 613.135944][T18386] EXT4-fs: Ignoring removed nomblk_io_submit option [ 613.161816][T18387] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x97823c56, utbl_chksum : 0xe619d30d) [ 613.212996][T18386] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 613.263078][T18386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 613.271385][T18386] EXT4-fs (loop0): orphan cleanup on readonly fs [ 613.328024][T18396] netlink: 'syz.1.5326': attribute type 1 has an invalid length. [ 613.343714][T18396] netlink: 'syz.1.5326': attribute type 2 has an invalid length. [ 613.359462][T18386] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 613.426626][T18386] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 613.514609][T18386] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 613.535606][T18391] loop6: detected capacity change from 0 to 8192 [ 613.546152][ T5830] exFAT-fs (loop4): valid_size(72057594054706202) is greater than size(1050) [ 613.585156][T18386] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5331: bg 0: block 40: padding at end of block bitmap is not set [ 613.646434][T18386] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 613.705273][T18386] EXT4-fs (loop0): 1 truncate cleaned up [ 613.768505][T18386] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 613.948453][T18386] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 613.971871][T18386] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 614.211349][ T31] audit: type=1326 audit(2000000972.209:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.5.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 614.263400][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.277786][T18417] overlayfs: workdir and upperdir must be separate subtrees [ 614.328659][ T31] audit: type=1326 audit(2000000972.209:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.5.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 614.361017][ T31] audit: type=1326 audit(2000000972.209:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.5.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 614.460084][ T31] audit: type=1326 audit(2000000972.209:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.5.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 614.557492][ T5993] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.576947][ T31] audit: type=1326 audit(2000000972.209:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18416 comm="syz.5.5350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53c178f749 code=0x7ffc0000 [ 614.694788][ T5993] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.821190][T18427] random: crng reseeded on system resumption [ 614.871270][T18430] netlink: 260 bytes leftover after parsing attributes in process `syz.6.5354'. [ 614.883216][ T5993] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.009514][T18411] loop1: detected capacity change from 0 to 32768 [ 615.075627][T18411] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 615.157170][T18411] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 615.171411][ T5993] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.216976][T18411] XFS (loop1): Starting recovery (logdev: internal) [ 615.271531][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 615.282956][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 615.295983][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 615.305515][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 615.312636][T18411] XFS (loop1): Ending recovery (logdev: internal) [ 615.320807][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 615.505022][T18446] lo speed is unknown, defaulting to 1000 [ 615.539671][T18451] netlink: 'syz.5.5360': attribute type 12 has an invalid length. [ 615.602214][ T5993] bridge_slave_1: left allmulticast mode [ 615.615392][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 615.651251][ T5993] bridge_slave_1: left promiscuous mode [ 615.683429][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.877543][ T5993] bridge_slave_0: left allmulticast mode [ 615.920374][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.026131][T18424] loop0: detected capacity change from 0 to 32768 [ 616.067424][T18424] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.5352 (18424) [ 616.148433][T18424] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 616.205176][T18424] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm [ 616.488803][T18424] BTRFS info (device loop0): enabling ssd optimizations [ 616.551831][T18424] BTRFS info (device loop0): turning on async discard [ 616.559265][T18424] BTRFS info (device loop0): enabling free space tree [ 616.730969][ T5849] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 617.331176][T18510] netlink: get zone limit has 4 unknown bytes [ 617.339817][ T5846] Bluetooth: hci2: command tx timeout [ 617.550773][ T5993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.562001][ T5993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.573888][ T5993] bond0 (unregistering): Released all slaves [ 617.598930][T18446] wlan0 speed is unknown, defaulting to 1000 [ 617.656827][T18508] gretap0: refused to change device tx_queue_len [ 617.682173][T18508] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 617.737099][T18512] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5383'. [ 618.663672][T18548] program syz.6.5398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 619.179776][T18568] xt_cgroup: xt_cgroup: no path or classid specified [ 619.320632][ T5846] Bluetooth: hci2: command tx timeout [ 619.380476][ T5835] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 619.412712][ T5998] wlan0 speed is unknown, defaulting to 1000 [ 619.434100][ T5998] infiniband syz1: ib_query_port failed (-19) [ 619.577410][T18581] xt_TPROXY: Can be used only with -p tcp or -p udp [ 619.613101][ T5835] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 619.636307][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.663064][ T5835] usb 2-1: Product: syz [ 619.672172][ T5835] usb 2-1: Manufacturer: syz [ 619.693903][ T5835] usb 2-1: SerialNumber: syz [ 619.725096][ T5835] r8152-cfgselector 2-1: Unknown version 0x0000 [ 619.759150][ T5835] r8152-cfgselector 2-1: config 0 descriptor?? [ 619.820603][T18545] loop2: detected capacity change from 0 to 32768 [ 620.089411][T18446] chnl_net:caif_netlink_parms(): no params data found [ 620.189256][ T5835] r8152-cfgselector 2-1: USB disconnect, device number 98 [ 620.462213][T18607] loop5: detected capacity change from 0 to 1024 [ 620.515394][T18607] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 620.637614][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.644010][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 620.838876][ T5993] hsr_slave_0: left promiscuous mode [ 620.853992][ T5993] hsr_slave_1: left promiscuous mode [ 620.940825][ T5993] veth1_macvtap: left promiscuous mode [ 620.940947][ T5993] veth0_macvtap: left promiscuous mode [ 620.941151][ T5993] veth1_vlan: left promiscuous mode [ 620.941341][ T5993] veth0_vlan: left promiscuous mode [ 621.310559][ T5846] Bluetooth: hci2: command tx timeout [ 621.323758][ T31] audit: type=1326 audit(2000000979.684:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18631 comm="syz.2.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 621.355848][ T31] audit: type=1326 audit(2000000979.716:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18631 comm="syz.2.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 621.380516][ T31] audit: type=1326 audit(2000000979.716:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18631 comm="syz.2.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 621.407497][ T31] audit: type=1326 audit(2000000979.716:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18631 comm="syz.2.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 621.434549][ T31] audit: type=1326 audit(2000000979.716:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18631 comm="syz.2.5430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 621.828209][ T5993] team0 (unregistering): Port device team_slave_1 removed [ 621.867916][ T5993] team0 (unregistering): Port device C removed [ 622.205852][T18625] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 622.225797][T18625] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 622.366335][T18446] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.398450][T18446] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.415871][T18446] bridge_slave_0: entered allmulticast mode [ 622.424773][T18446] bridge_slave_0: entered promiscuous mode [ 622.456488][T18446] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.483597][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.490889][T18446] bridge_slave_1: entered allmulticast mode [ 622.522280][T18446] bridge_slave_1: entered promiscuous mode [ 622.856486][T18446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.922444][T18446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.014546][T18667] loop1: detected capacity change from 0 to 64 [ 623.026568][T18662] loop5: detected capacity change from 0 to 4096 [ 623.062307][T18667] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 623.091488][T18662] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 623.179788][T18662] ntfs3(loop5): ino=19, mi_enum_attr [ 623.186495][T18446] team0: Port device team_slave_0 added [ 623.211721][T18662] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 623.276950][T18446] team0: Port device team_slave_1 added [ 623.291170][T18662] ntfs3(loop5): failed to convert "c46c" to cp437 [ 623.292614][ T5846] Bluetooth: hci2: command tx timeout [ 623.334441][T18662] ntfs3(loop5): ino=20, mi_enum_attr [ 623.705834][T18446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.734710][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.840357][T18650] loop2: detected capacity change from 0 to 32768 [ 623.846886][T18446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.907866][T18446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.949706][T18650] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 623.968319][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.055607][T18446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.164494][T18703] binder: 18702:18703 ioctl 400c620e 200000001380 returned -22 [ 624.202849][T18650] XFS (loop2): Ending clean mount [ 624.223354][T18650] XFS (loop2): Quotacheck needed: Please wait. [ 624.260379][T18705] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5456'. [ 624.362652][T18650] XFS (loop2): Quotacheck: Done. [ 624.524725][T18446] hsr_slave_0: entered promiscuous mode [ 624.559906][T18446] hsr_slave_1: entered promiscuous mode [ 624.580921][ T5828] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 625.212054][T18733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.635452][T18745] SET target dimension over the limit! [ 625.728229][T18749] loop5: detected capacity change from 0 to 512 [ 625.792325][T18749] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 625.888306][T18446] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 625.905174][T18749] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.5475: corrupted in-inode xattr: e_value out of bounds [ 625.952177][T18749] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.5475: couldn't read orphan inode 15 (err -117) [ 625.954035][T18756] openvswitch: netlink: Message has 8 unknown bytes. [ 626.005386][ T5846] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 626.017941][T18446] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 626.049138][T18709] loop1: detected capacity change from 0 to 32768 [ 626.058152][T18749] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.098060][T18446] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 626.151835][T18709] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 626.167857][T18446] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 626.327697][T18709] XFS (loop1): Ending clean mount [ 626.479933][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.661177][ T5826] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 626.708829][T18446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.880757][T18446] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.946299][ T6062] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.953503][ T6062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.088676][ T6170] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.095853][ T6170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.602187][T18815] bridge3: entered promiscuous mode [ 627.642338][T18815] bridge3: entered allmulticast mode [ 627.942777][T18832] loop2: detected capacity change from 0 to 64 [ 628.140003][T18838] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5501'. [ 628.262406][T18446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.571747][T18803] loop5: detected capacity change from 0 to 32768 [ 628.755599][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5509'. [ 628.798260][T18860] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5509'. [ 628.840643][T18860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5509'. [ 629.273333][T18874] IPv6: NLM_F_CREATE should be specified when creating new route [ 629.282541][ T5835] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 629.425352][ T5835] usb 6-1: Using ep0 maxpacket: 32 [ 629.434079][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.467897][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.520245][ T5835] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 629.561548][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.573446][ T5998] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 629.634355][ T5835] usb 6-1: config 0 descriptor?? [ 629.672096][ T5835] hub 6-1:0.0: USB hub found [ 629.680510][T18446] veth0_vlan: entered promiscuous mode [ 629.709576][T18841] loop1: detected capacity change from 0 to 32768 [ 629.748259][T18841] xfs: Deprecated parameter 'noattr2' [ 629.757304][ T5998] usb 7-1: Using ep0 maxpacket: 32 [ 629.789709][T18446] veth1_vlan: entered promiscuous mode [ 629.799725][ T5998] usb 7-1: unable to get BOS descriptor or descriptor too short [ 629.813080][T18841] XFS: noattr2 mount option is deprecated. [ 629.833813][ T5998] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 629.842627][ T5846] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 629.851343][ T5846] Bluetooth: hci3: Injecting HCI hardware error event [ 629.854582][T18885] loop0: detected capacity change from 0 to 4096 [ 629.861353][ T5846] Bluetooth: hci3: hardware error 0x00 [ 629.885603][ T5998] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 629.901935][ T5835] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 629.920427][T18885] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 629.939991][ T5998] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 629.953059][T18446] veth0_macvtap: entered promiscuous mode [ 629.976181][ T5998] usb 7-1: config 128 has no interface number 0 [ 629.978171][T18446] veth1_macvtap: entered promiscuous mode [ 629.994428][T18841] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 630.020778][ T5998] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 630.046469][T18446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.091755][ T5835] usbhid 6-1:0.0: can't add hid device: -71 [ 630.104946][T18446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.124398][ T5998] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 630.135003][ T5835] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 630.162471][ T5998] usb 7-1: config 128 interface 127 has no altsetting 0 [ 630.190325][ T5998] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 630.201890][ T5835] usb 6-1: USB disconnect, device number 108 [ 630.219227][T18841] XFS (loop1): Ending clean mount [ 630.226659][ T5998] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.234655][ T5998] usb 7-1: Product: syz [ 630.241259][T12643] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.262522][T18841] XFS (loop1): Quotacheck needed: Please wait. [ 630.292325][ T5998] usb 7-1: Manufacturer: syz [ 630.301064][T12643] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.329048][ T5998] usb 7-1: SerialNumber: syz [ 630.341883][T12643] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.364960][T18841] XFS (loop1): Quotacheck: Done. [ 630.407288][T12643] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.642060][ T5826] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 630.724070][ T5998] usb 7-1: USB disconnect, device number 6 [ 630.849231][ T6241] udevd[6241]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.919994][T18906] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5522'. [ 631.047762][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.100706][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.276045][T18911] netlink: 'syz.5.5524': attribute type 21 has an invalid length. [ 631.323994][T12643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.365181][T12643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.376062][T18911] netlink: 'syz.5.5524': attribute type 1 has an invalid length. [ 631.445028][T18911] netlink: 144 bytes leftover after parsing attributes in process `syz.5.5524'. [ 631.789761][T18922] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 631.817649][ T5846] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 632.540031][T18950] loop0: detected capacity change from 0 to 512 [ 632.616598][T18950] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.5540: inode has both inline data and extents flags [ 632.654568][T18950] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5540: couldn't read orphan inode 15 (err -117) [ 632.670945][T18950] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 632.758456][T18958] ip6t_srh: unknown srh invflags 4000 [ 632.782012][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.016755][T18968] netlink: 'syz.0.5546': attribute type 21 has an invalid length. [ 633.057869][T18968] netlink: 'syz.0.5546': attribute type 1 has an invalid length. [ 633.086063][T18968] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5546'. [ 633.284303][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 633.457917][ T10] usb 8-1: unable to get BOS descriptor or descriptor too short [ 633.492934][ T10] usb 8-1: config 1 has an invalid interface number: 255 but max is 1 [ 633.506083][ T10] usb 8-1: config 1 has no interface number 1 [ 633.537878][ T10] usb 8-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 633.590123][ T10] usb 8-1: too many endpoints for config 1 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 633.629628][ T10] usb 8-1: config 1 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 633.682468][ T10] usb 8-1: config 1 interface 0 has no altsetting 0 [ 633.709219][ T10] usb 8-1: config 1 interface 255 has no altsetting 0 [ 633.737825][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 633.763777][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.790039][ T10] usb 8-1: Product: syz [ 633.811939][ T10] usb 8-1: Manufacturer: syz [ 633.826036][ T10] usb 8-1: SerialNumber: syz [ 634.075056][ T10] smsusb:smsusb_probe: board id=8, interface number 0 [ 634.086464][ T10] smsusb:smsusb_probe: board id=8, interface number 255 [ 634.100737][ T10] usb 8-1: USB disconnect, device number 2 [ 634.268236][T19013] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 634.302462][T19013] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 634.330018][T19013] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 634.371702][T19019] tmpfs: Bad value for 'mpol' [ 634.463950][ T5907] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 634.521177][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 634.645790][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 634.655463][ T5907] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 634.673548][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.691037][ T5907] usb 2-1: Product: syz [ 634.695997][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 634.708013][ T10] usb 7-1: config 0 has an invalid interface number: 244 but max is 0 [ 634.730018][ T5907] usb 2-1: Manufacturer: syz [ 634.742405][ T10] usb 7-1: config 0 has no interface number 0 [ 634.748555][ T5907] usb 2-1: SerialNumber: syz [ 634.764129][ T10] usb 7-1: config 0 interface 244 has no altsetting 0 [ 634.780333][ T5907] usb 2-1: config 0 descriptor?? [ 634.786405][T19032] loop7: detected capacity change from 0 to 164 [ 634.792951][ T5907] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 634.795307][ T10] usb 7-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 634.834558][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.913139][ T10] usb 7-1: Product: syz [ 634.921121][ T10] usb 7-1: Manufacturer: syz [ 634.943587][ T10] usb 7-1: SerialNumber: syz [ 634.980371][ T10] usb 7-1: config 0 descriptor?? [ 635.011829][ T10] snd_usb_toneport 7-1:0.244: Line 6 GuitarPort found [ 635.023377][ T5972] usb 2-1: USB disconnect, device number 99 [ 635.229851][ T10] snd_usb_toneport 7-1:0.244: cannot get proper max packet size [ 635.256009][ T10] snd_usb_toneport 7-1:0.244: Line 6 GuitarPort now disconnected [ 635.286840][ T10] snd_usb_toneport 7-1:0.244: probe with driver snd_usb_toneport failed with error -22 [ 635.456607][ T5998] usb 7-1: USB disconnect, device number 7 [ 636.324430][ T31] audit: type=1326 audit(2000000995.433:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 636.453692][ T31] audit: type=1326 audit(2000000995.454:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 636.492917][ T31] audit: type=1326 audit(2000000995.496:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 636.516359][ T31] audit: type=1326 audit(2000000995.496:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19086 comm="syz.2.5601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb6cf8f749 code=0x7ffc0000 [ 636.644114][T19101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.811817][T19109] loop1: detected capacity change from 0 to 64 [ 637.057851][T19116] i2c i2c-0: Invalid block write size 252 [ 637.259705][T19124] loop1: detected capacity change from 0 to 2048 [ 637.287579][T19124] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 637.364180][T19131] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 637.424538][T19136] loop5: detected capacity change from 0 to 128 [ 637.486766][T19130] loop2: detected capacity change from 0 to 4096 [ 637.499198][T19130] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 637.525894][T19136] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 637.570693][T19136] ext4 filesystem being mounted at /883/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.623479][T19130] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 637.638461][T19136] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.5621: No space for directory leaf checksum. Please run e2fsck -D. [ 637.638600][T19144] netlink: 260 bytes leftover after parsing attributes in process `syz.7.5623'. [ 637.681076][T19136] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.5621: checksumming directory block 0 [ 638.043568][ T5838] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 638.248412][T19159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5631'. [ 638.302962][T19163] netlink: 'syz.5.5630': attribute type 16 has an invalid length. [ 638.353728][T19163] netlink: 'syz.5.5630': attribute type 17 has an invalid length. [ 638.395069][T19167] loop0: detected capacity change from 0 to 256 [ 638.513258][T19167] FAT-fs (loop0): Directory bread(block 64) failed [ 638.528106][T19167] FAT-fs (loop0): Directory bread(block 65) failed [ 638.570342][T19167] FAT-fs (loop0): Directory bread(block 66) failed [ 638.576999][T19167] FAT-fs (loop0): Directory bread(block 67) failed [ 638.617245][T19163] bridge0: port 3(bond0) entered blocking state [ 638.619608][T19167] FAT-fs (loop0): Directory bread(block 68) failed [ 638.623674][T19163] bridge0: port 3(bond0) entered forwarding state [ 638.651763][T19169] loop2: detected capacity change from 0 to 4096 [ 638.663644][T19167] FAT-fs (loop0): Directory bread(block 69) failed [ 638.672346][T19169] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 638.691012][T19163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.695600][T19175] loop6: detected capacity change from 0 to 1024 [ 638.704526][T19169] ntfs3(loop2): ino=3, mi_enum_attr [ 638.716449][T19163] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.728848][T19167] FAT-fs (loop0): Directory bread(block 70) failed [ 638.801157][T19167] FAT-fs (loop0): Directory bread(block 71) failed [ 638.818656][T19163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 638.846735][T19167] FAT-fs (loop0): Directory bread(block 72) failed [ 638.888654][T19167] FAT-fs (loop0): Directory bread(block 73) failed [ 638.956723][ T12] hfsplus: b-tree write err: -5, ino 4 [ 639.244251][T19179] xt_CT: No such helper "snmp" [ 639.381197][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 639.549417][T19197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5646'. [ 639.601143][ T10] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 639.645815][ T10] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 639.702495][ T10] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 639.741959][ T10] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 639.798055][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 639.833970][ T10] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 639.870088][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.914438][ T10] usb 8-1: Product: syz [ 639.918638][ T10] usb 8-1: Manufacturer: syz [ 639.952893][ T10] usb 8-1: SerialNumber: syz [ 639.998934][ T10] usb 8-1: config 0 descriptor?? [ 640.109102][T19215] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.378883][T19229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 640.410480][T19227] loop5: detected capacity change from 0 to 2048 [ 640.483813][ T6567] usb 8-1: USB disconnect, device number 3 [ 640.576668][T19235] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 640.677204][T19227] NILFS (loop5): error -2 truncating bmap (ino=16) [ 640.709740][T19240] IPv6: Can't replace route, no match found [ 640.730404][T19235] NILFS (loop5): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 640.789873][T19235] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=16) [ 640.845149][T19235] Remounting filesystem read-only [ 640.883109][T19243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.931655][ T5838] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 641.011978][T19249] loop1: detected capacity change from 0 to 512 [ 641.037380][T19249] EXT4-fs: Ignoring removed oldalloc option [ 641.107992][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5676'. [ 641.120019][T19249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.156091][T19251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5676'. [ 641.198165][T19249] ext4 filesystem being mounted at /947/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.412670][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.808853][ T10] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 641.896144][T19281] loop7: detected capacity change from 0 to 256 [ 641.970641][T19281] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xd22393c8, utbl_chksum : 0xe619d30d) [ 642.008310][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 642.030168][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 642.079726][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 642.160135][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 642.207310][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 642.236404][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.254465][ T10] usb 1-1: config 0 descriptor?? [ 642.286452][T19290] loop1: detected capacity change from 0 to 2048 [ 642.305644][T19245] loop2: detected capacity change from 0 to 32768 [ 642.334538][T19290] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 642.344705][T19245] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5672 (19245) [ 642.397491][T19245] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 642.419212][T19296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 642.455055][T19245] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 642.491090][ T10] hdpvr 1-1:0.0: firmware version 0x15 dated &S3;x&X^ wΖ g/ n# [ 642.605321][T19305] comedi: valid board names for 8255 driver are: [ 642.613526][T19305] 8255 [ 642.616294][T19305] comedi: valid board names for vmk80xx driver are: [ 642.623563][T19305] vmk80xx [ 642.627949][T19305] comedi: valid board names for usbduxsigma driver are: [ 642.634982][T19305] usbduxsigma [ 642.638566][T19305] comedi: valid board names for usbduxfast driver are: [ 642.645592][T19305] usbduxfast [ 642.649280][T19305] comedi: valid board names for usbdux driver are: [ 642.670246][ T10] hdpvr 1-1:0.0: device init failed [ 642.692062][T19305] usbdux [ 642.695519][T19305] comedi: valid board names for ni6501 driver are: [ 642.714491][T19305] ni6501 [ 642.718537][T19305] comedi: valid board names for dt9812 driver are: [ 642.725425][T19305] dt9812 [ 642.728474][T19305] comedi: valid board names for ni_labpc_cs driver are: [ 642.731937][ T10] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 642.736009][T19305] ni_labpc_cs [ 642.746712][T19305] comedi: valid board names for ni_daq_700 driver are: [ 642.807423][ T10] usb 1-1: USB disconnect, device number 103 [ 642.836245][T19305] ni_daq_700 [ 642.856646][T19245] BTRFS info (device loop2): setting nodatasum [ 642.865283][T19245] BTRFS info (device loop2): setting nodatacow [ 642.871464][T19245] BTRFS info (device loop2): enabling ssd optimizations [ 642.878447][T19305] comedi: valid board names for labpc_pci driver are: [ 642.878466][T19305] labpc_pci [ 642.878478][T19305] comedi: valid board names for adl_pci9118 driver are: [ 642.910369][T19312] loop1: detected capacity change from 0 to 1024 [ 642.931341][T19305] pci9118dg [ 642.941861][T19305] pci9118hg [ 642.945078][T19305] pci9118hr [ 642.963527][T19305] comedi: valid board names for 8255_pci driver are: [ 643.009215][T19245] BTRFS info (device loop2): turning on async discard [ 643.055897][T19245] BTRFS info (device loop2): enabling free space tree [ 643.072049][T19305] 8255_pci [ 643.086474][T19305] comedi: valid board names for s526 driver are: [ 643.092816][T19305] s526 [ 643.152177][T19305] comedi: valid board names for multiq3 driver are: [ 643.158802][T19305] multiq3 [ 643.160692][ T5826] hfsplus: walked past end of dir [ 643.195111][T19305] comedi: valid board names for pcmuio driver are: [ 643.208748][T19305] pcmuio48 [ 643.219562][T19305] pcmuio96 [ 643.223005][T19305] comedi: valid board names for pcmmio driver are: [ 643.282409][T19305] pcmmio [ 643.296927][T19305] comedi: valid board names for pcmda12 driver are: [ 643.362453][T19305] pcmda12 [ 643.382005][T19305] comedi: valid board names for pcmad driver are: [ 643.427968][T19305] pcmad12 [ 643.521973][T19305] pcmad16 [ 643.554359][T19305] comedi: valid board names for ni_labpc driver are: [ 643.611818][ T5828] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 643.626442][T19305] lab-pc-1200 [ 643.640095][T19330] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5698'. [ 643.645925][T19305] lab-pc-1200ai [ 643.652651][T19305] lab-pc+ [ 643.690979][T19305] comedi: valid board names for atmio16 driver are: [ 643.707965][T19305] atmio16 [ 643.719619][T19305] atmio16d [ 643.748085][T19305] comedi: valid board names for ni_at_ao driver are: [ 643.794633][T19283] loop5: detected capacity change from 0 to 40427 [ 643.803460][T19305] at-ao-6 [ 643.814144][T19305] at-ao-10 [ 643.821380][T19305] comedi: valid board names for ni_at_a2150 driver are: [ 643.830385][T19305] ni_at_a2150 [ 643.833838][T19305] comedi: valid board names for adq12b driver are: [ 643.840673][T19305] adq12b [ 643.844231][T19305] comedi: valid board names for mpc624 driver are: [ 643.852166][T19283] F2FS-fs (loop5): invalid crc value [ 643.853089][T19305] mpc624 [ 643.860615][T19305] comedi: valid board names for c6xdigio driver are: [ 643.867419][T19305] c6xdigio [ 643.870617][T19305] comedi: valid board names for aio_iiro_16 driver are: [ 643.890433][T19305] aio_iiro_16 [ 643.906044][T19305] comedi: valid board names for aio_aio12_8 driver are: [ 643.922578][T19305] aio_aio12_8 [ 643.925975][T19305] aio_ai12_8 [ 643.929257][T19305] aio_ao12_4 [ 643.941131][T19305] comedi: valid board names for fl512 driver are: [ 643.947547][T19305] fl512 [ 644.023495][T19305] comedi: valid board names for dmm32at driver are: [ 644.047400][T19305] dmm32at [ 644.050465][T19305] comedi: valid board names for dt282x driver are: [ 644.097999][T19305] dt2821 [ 644.100982][T19305] dt2821-f [ 644.136009][T19305] dt2821-g [ 644.162283][T19305] dt2823 [ 644.184827][T19305] dt2824-pgh [ 644.218393][T19305] dt2824-pgl [ 644.247351][T19305] dt2825 [ 644.252727][T19305] dt2827 [ 644.268170][T19305] dt2828 [ 644.274256][T19305] dt2829 [ 644.277193][T19305] dt21-ez [ 644.287386][ T4273] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.293258][T19305] dt23-ez [ 644.320960][T19305] dt24-ez [ 644.330934][T19305] dt24-ez-pgl [ 644.347632][T19305] comedi: valid board names for dt2817 driver are: [ 644.366232][T19305] dt2817 [ 644.376181][T19305] comedi: valid board names for dt2815 driver are: [ 644.412463][T19305] dt2815 [ 644.422355][T19305] comedi: valid board names for dt2814 driver are: [ 644.435645][T19283] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 644.438172][T19305] dt2814 [ 644.468323][T19305] comedi: valid board names for dt2811 driver are: [ 644.503148][T19305] dt2811-pgh [ 644.507018][T19283] F2FS-fs (loop5): Start checkpoint disabled! [ 644.508721][T19305] dt2811-pgl [ 644.524947][T19305] comedi: valid board names for dt2801 driver are: [ 644.535761][T19305] dt2801 [ 644.538710][T19305] comedi: valid board names for das6402 driver are: [ 644.570934][T19283] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 644.590316][ T4273] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.599322][T19283] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 644.600771][T19305] das6402-12 [ 644.629286][T19305] das6402-16 [ 644.632616][T19305] comedi: valid board names for das1800 driver are: [ 644.659112][T19305] das-1701st [ 644.662411][T19305] das-1701st-da [ 644.670643][T19305] das-1702st [ 644.673926][T19305] das-1702st-da [ 644.678735][T19305] das-1702hr [ 644.682019][T19305] das-1702hr-da [ 644.700171][T19305] das-1701ao [ 644.713748][T19305] das-1702ao [ 644.717042][T19305] das-1801st [ 644.730422][T19305] das-1801st-da [ 644.738468][T19305] das-1802st [ 644.781793][T19305] das-1802st-da [ 644.782314][ T4273] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.785381][T19305] das-1802hr [ 644.805897][T19305] das-1802hr-da [ 644.812638][T19305] das-1801hc [ 644.815997][T19305] das-1802hc [ 644.855688][T19305] das-1801ao [ 644.863692][T19305] das-1802ao [ 644.884258][T19305] comedi: valid board names for das800 driver are: [ 644.890777][T19305] das-800 [ 644.925082][T19305] cio-das800 [ 644.929558][T19305] das-801 [ 644.949431][T19305] cio-das801 [ 644.969110][T19305] das-802 [ 644.975210][T19305] cio-das802 [ 644.978495][T19305] cio-das802/16 [ 644.999520][T19305] comedi: valid board names for isa-das08 driver are: [ 645.031214][T19305] isa-das08 [ 645.041068][T19305] das08-pgm [ 645.044284][T19305] das08-pgh [ 645.092305][T19305] das08-pgl [ 645.098770][T19305] das08-aoh [ 645.101974][T19305] das08-aol [ 645.141615][T19305] das08-aom [ 645.153820][T19305] das08/jr-ao [ 645.157199][T19305] das08jr-16-ao [ 645.193750][T19305] pc104-das08 [ 645.203695][T19305] das08jr/16 [ 645.206988][T19305] comedi: valid board names for das16m1 driver are: [ 645.228246][ T4273] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.261718][T19305] das16m1 [ 645.264770][T19305] comedi: valid board names for dac02 driver are: [ 645.339901][T19362] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5709'. [ 645.349914][T19305] dac02 [ 645.367150][T19305] comedi: valid board names for rti802 driver are: [ 645.383930][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.397741][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.409179][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.418359][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.423147][T19362] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5709'. [ 645.451715][T19305] rti802 [ 645.457023][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.484179][T19305] comedi: valid board names for rti800 driver are: [ 645.503912][T19362] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5709'. [ 645.517160][T19305] rti800 [ 645.540808][T19305] rti815 [ 645.546332][T19305] comedi: valid board names for pcm3724 driver are: [ 645.610860][T19305] pcm3724 [ 645.616156][T19305] comedi: valid board names for pcl818 driver are: [ 645.656838][T19305] pcl818l [ 645.674688][T19305] pcl818h [ 645.696685][T19305] pcl818hd [ 645.716457][T19305] pcl818hg [ 645.721650][T19363] lo speed is unknown, defaulting to 1000 [ 645.751169][T19305] pcl818 [ 645.754415][T19305] pcl718 [ 645.763061][T19305] pcm3718 [ 645.776921][T19305] comedi: valid board names for pcl816 driver are: [ 645.817418][T19305] pcl816 [ 645.820781][T19305] pcl814b [ 645.859382][T19305] comedi: valid board names for pcl812 driver are: [ 645.874412][T19305] pcl812 [ 645.909261][T19305] pcl812pg [ 645.932537][T19305] acl8112pg [ 645.961170][T19305] acl8112dg [ 645.968637][T19380] netlink: 'syz.5.5707': attribute type 5 has an invalid length. [ 645.978757][T19305] acl8112hg [ 645.997130][T19305] a821pgl [ 646.007349][T19305] a821pglnda [ 646.026114][ T4273] bridge_slave_1: left allmulticast mode [ 646.047032][T19305] a821pgh [ 646.060017][T19305] a822pgl [ 646.063099][ T4273] bridge_slave_1: left promiscuous mode [ 646.081511][T19305] a822pgh [ 646.093932][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.103373][T19305] a823pgl [ 646.106544][T19305] a823pgh [ 646.109632][T19305] pcl813 [ 646.123814][T19305] pcl813b [ 646.133935][T19305] acl8113 [ 646.144067][T19305] iso813 [ 646.164953][T19305] acl8216 [ 646.171709][ T4273] bridge_slave_0: left allmulticast mode [ 646.177367][ T4273] bridge_slave_0: left promiscuous mode [ 646.198634][T19305] a826pg [ 646.207918][T19305] comedi: valid board names for pcl730 driver are: [ 646.220954][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.247720][T19305] pcl730 [ 646.251270][T19305] iso730 [ 646.255380][T19305] acl7130 [ 646.258848][T19305] pcm3730 [ 646.274201][T19305] pcl725 [ 646.292174][T19305] p8r8dio [ 646.331887][T19305] acl7225b [ 646.344063][T19305] p16r16dio [ 646.354188][T19305] pcl733 [ 646.373736][T19305] pcl734 [ 646.379158][T19305] opmm-1616-xt [ 646.399954][T19305] pearl-mm-p [ 646.429814][T19305] ir104-pbf [ 646.438709][T19384] loop0: detected capacity change from 0 to 8192 [ 646.446179][T19305] comedi: valid board names for pcl726 driver are: [ 646.469625][T19305] pcl726 [ 646.487281][T19305] pcl727 [ 646.516592][T19305] pcl728 [ 646.533764][T19305] acl6126 [ 646.560313][T19305] acl6128 [ 646.589070][T19305] comedi: valid board names for pcl724 driver are: [ 646.621915][T19305] pcl724 [ 646.624885][T19305] pcl722 [ 646.665668][T19305] pcl731 [ 646.668653][T19305] acl7122 [ 646.671675][T19305] acl7124 [ 646.741510][T19305] pet48dio [ 646.755928][T19305] pcmio48 [ 646.764483][T19305] onyx-mm-dio [ 646.817324][T19305] comedi: valid board names for pcl711 driver are: [ 646.845798][T19305] pcl711 [ 646.849190][T19305] pcl711b [ 646.852217][T19305] acl8112hg [ 646.855411][T19305] acl8112dg [ 646.897440][T19402] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5723'. [ 646.953746][T19305] comedi: valid board names for amplc_pc263 driver are: [ 647.008149][T19305] pc263 [ 647.017082][T19305] comedi: valid board names for amplc_pc236 driver are: [ 647.061902][T19305] pc36at [ 647.084264][T19305] comedi: valid board names for amplc_dio200 driver are: [ 647.115506][T19305] pc212e [ 647.118472][T19305] pc214e [ 647.121399][T19305] pc215e [ 647.179523][T19305] pc218e [ 647.182508][T19305] pc272e [ 647.185445][T19305] comedi: valid board names for comedi_parport driver are: [ 647.207894][T19305] comedi_parport [ 647.211532][T19305] comedi: valid board names for comedi_test driver are: [ 647.261881][T19305] comedi_test [ 647.275506][T19305] comedi: valid board names for comedi_bond driver are: [ 647.302406][T19305] comedi_bond [ 647.442287][ T5843] Bluetooth: hci0: command tx timeout [ 647.597733][T19387] loop7: detected capacity change from 0 to 32768 [ 647.624054][T19387] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5717 (19387) [ 647.715555][T19387] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 647.790275][T19387] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 647.832467][T19426] netlink: 'syz.6.5735': attribute type 21 has an invalid length. [ 647.867737][T19430] comedi comedi4: bad chanlist[0]=0x00800000 chan=0 range length=2 [ 648.005880][T19387] BTRFS info (device loop7): enabling ssd optimizations [ 648.061384][T19387] BTRFS info (device loop7): turning on async discard [ 648.073664][T19387] BTRFS info (device loop7): enabling free space tree [ 648.237248][T18446] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 648.469057][T19459] SET target dimension over the limit! [ 648.656889][ T6567] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 648.817739][ T4273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.854224][ T6567] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 648.872127][ T4273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.889239][ T6567] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.921346][ T6567] usb 6-1: Product: syz [ 648.926687][ T4273] bond0 (unregistering): Released all slaves [ 648.928719][ T6567] usb 6-1: Manufacturer: syz [ 648.958014][ T6567] usb 6-1: SerialNumber: syz [ 648.987108][ T6567] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 649.044959][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 649.078841][T19475] bridge1: entered promiscuous mode [ 649.151062][ T4273] : left promiscuous mode [ 649.417479][ T5843] Bluetooth: hci0: command tx timeout [ 649.686334][ T6567] usb 6-1: USB disconnect, device number 109 [ 649.873166][T19500] xt_hashlimit: size too large, truncated to 1048576 [ 649.894828][T19497] loop0: detected capacity change from 0 to 1024 [ 649.897402][T19500] xt_hashlimit: max too large, truncated to 1048576 [ 649.960116][T19497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.089295][T19497] EXT4-fs error (device loop0): ext4_empty_dir:3107: inode #11: block 623: comm syz.0.5759: Attempting to read directory block (623) that is past i_size (638464) [ 650.104289][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 650.145484][ T24] ath9k_htc: Failed to initialize the device [ 650.159940][T19497] EXT4-fs (loop0): Remounting filesystem read-only [ 650.172934][ T6567] usb 6-1: ath9k_htc: USB layer deinitialized [ 650.281428][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.389879][T19506] loop6: detected capacity change from 0 to 4096 [ 650.418088][T19506] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 650.495264][T19515] netlink: 'syz.5.5765': attribute type 2 has an invalid length. [ 650.637956][T19506] ntfs3(loop6): ino=19, mi_enum_attr [ 650.646293][T19506] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 650.911858][T19492] loop7: detected capacity change from 0 to 32768 [ 651.031558][T19534] loop2: detected capacity change from 0 to 256 [ 651.042699][T19492] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 651.081884][T19363] chnl_net:caif_netlink_parms(): no params data found [ 651.180126][ T5907] usb 6-1: new full-speed USB device number 110 using dummy_hcd [ 651.183116][T19492] XFS (loop7): Ending clean mount [ 651.260222][T19492] XFS (loop7): Quotacheck needed: Please wait. [ 651.350099][ T5907] usb 6-1: config index 0 descriptor too short (expected 35562, got 27) [ 651.360856][T19492] XFS (loop7): Quotacheck: Done. [ 651.398971][ T5843] Bluetooth: hci0: command tx timeout [ 651.404663][ T5907] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 651.503684][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 651.548592][ T5907] usb 6-1: config 1 has no interface number 0 [ 651.573482][ T5907] usb 6-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 651.612912][ T5907] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 651.645304][T18446] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 651.684336][ T5907] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 651.699435][ T5907] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 651.712142][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.744086][ T5907] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 651.960043][ T5907] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 651.994489][ T5907] snd_usb_pod 6-1:1.1: invalid control EP [ 652.027401][ T5907] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 652.053729][ T5907] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 652.098236][ T5907] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 652.107841][ T31] audit: type=1326 audit(2000001012.001:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.0.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 652.152954][ T5907] usb 6-1: USB disconnect, device number 110 [ 652.176170][ T31] audit: type=1326 audit(2000001012.022:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.0.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 652.273954][ T31] audit: type=1326 audit(2000001012.032:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.0.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 652.340402][ T4273] hsr_slave_0: left promiscuous mode [ 652.352209][ T31] audit: type=1326 audit(2000001012.263:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19562 comm="syz.0.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9758f749 code=0x7ffc0000 [ 652.398170][ T4273] hsr_slave_1: left promiscuous mode [ 652.431419][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.477669][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.538986][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.551607][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.577460][T19575] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5783'. [ 652.591017][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5784'. [ 652.611443][ T4273] veth1_macvtap: left promiscuous mode [ 652.617469][ T4273] veth0_macvtap: left promiscuous mode [ 652.627420][ T4273] veth1_vlan: left promiscuous mode [ 652.633058][ T4273] veth0_vlan: left promiscuous mode [ 652.637770][T19576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5784'. [ 653.327676][T19583] loop5: detected capacity change from 0 to 32768 [ 653.342800][T19583] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5788 (19583) [ 653.370959][T19583] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.380197][ T5843] Bluetooth: hci0: command tx timeout [ 653.400290][T19583] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm [ 653.592529][T19583] BTRFS info (device loop5): enabling ssd optimizations [ 653.609689][T19583] BTRFS info (device loop5): turning on async discard [ 653.634644][T19583] BTRFS info (device loop5): enabling free space tree [ 653.737495][ T4273] team0 (unregistering): Port device team_slave_1 removed [ 653.755299][ T5838] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 653.771527][T19591] loop2: detected capacity change from 0 to 32768 [ 653.791469][T19591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5792 (19591) [ 653.825046][T19591] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 653.838608][T19591] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 653.860417][T19591] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 653.944139][ T4273] team0 (unregistering): Port device team_slave_0 removed [ 654.090244][T19591] BTRFS info (device loop2): rebuilding free space tree [ 654.143295][T19591] BTRFS info (device loop2): disabling free space tree [ 654.162326][T19591] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 654.199513][T19591] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 654.245402][T19591] BTRFS info (device loop2): checking UUID tree [ 654.262754][T19591] BTRFS info (device loop2): setting nodatasum [ 654.284971][T19591] BTRFS info (device loop2): setting nodatacow [ 654.291268][T19591] BTRFS info (device loop2): enabling ssd optimizations [ 654.299236][T19591] BTRFS info (device loop2): using spread ssd allocation scheme [ 654.323258][T19591] BTRFS info (device loop2): disabling tree log [ 654.329526][T19591] BTRFS info (device loop2): enabling disk space caching [ 654.358849][T19591] BTRFS info (device loop2): force clearing of disk cache [ 654.433132][T19625] loop5: detected capacity change from 0 to 4096 [ 654.463236][T19625] ntfs3(loop5): ino=3, Correct links count -> 2. [ 654.635201][ T5828] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 655.157437][T19637] loop2: detected capacity change from 0 to 256 [ 655.280733][T19637] FAT-fs (loop2): Directory bread(block 64) failed [ 655.293773][T19637] FAT-fs (loop2): Directory bread(block 65) failed [ 655.310581][T19637] FAT-fs (loop2): Directory bread(block 66) failed [ 655.322729][T19637] FAT-fs (loop2): Directory bread(block 67) failed [ 655.330722][T19637] FAT-fs (loop2): Directory bread(block 68) failed [ 655.347426][ T50] smc: removing ib device syz0 [ 655.352352][T19637] FAT-fs (loop2): Directory bread(block 69) failed [ 655.352464][T19637] FAT-fs (loop2): Directory bread(block 70) failed [ 655.369736][T19363] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.391444][T19363] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.398174][T19637] FAT-fs (loop2): Directory bread(block 71) failed [ 655.419455][T19363] bridge_slave_0: entered allmulticast mode [ 655.427416][T19363] bridge_slave_0: entered promiscuous mode [ 655.436380][T19637] FAT-fs (loop2): Directory bread(block 72) failed [ 655.472338][T19637] FAT-fs (loop2): Directory bread(block 73) failed [ 655.488196][T19363] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.504810][T19363] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.512225][T19363] bridge_slave_1: entered allmulticast mode [ 655.538776][T19363] bridge_slave_1: entered promiscuous mode [ 655.692619][T19633] loop5: detected capacity change from 0 to 32768 [ 655.732737][T19633] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.5797 (19633) [ 655.836407][T19633] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 655.862758][T19633] BTRFS info (device loop5): using blake2b (blake2b-256-lib) checksum algorithm [ 656.046282][T19363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.166512][T19633] BTRFS info (device loop5): enabling ssd optimizations [ 656.249483][T19633] BTRFS info (device loop5): turning on async discard [ 656.256295][T19633] BTRFS info (device loop5): enabling free space tree [ 656.273801][T19363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.341863][T19633] BTRFS info (device loop5): use zstd compression, level 3 [ 656.701624][ T5838] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 656.761066][T19678] loop6: detected capacity change from 0 to 2048 [ 656.814426][T19363] team0: Port device team_slave_0 added [ 656.890129][T19682] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 656.909796][T19363] team0: Port device team_slave_1 added [ 657.074711][T19678] NILFS (loop6): vblocknr = 12 has abnormal lifetime: start cno (= 150994946) > current cno (= 3) [ 657.179968][T19678] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=16) [ 657.225270][T19678] Remounting filesystem read-only [ 657.256397][T19678] NILFS (loop6): error -5 truncating bmap (ino=16) [ 657.502754][T19645] loop7: detected capacity change from 0 to 32768 [ 657.520628][T16121] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 657.676712][T19363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.711710][T19363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 657.839502][T19363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 657.884543][T19697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5813'. [ 657.904719][T19697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5813'. [ 658.225012][T19701] bond1: entered allmulticast mode [ 658.272230][T19701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 658.319673][T19363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.342370][T19363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 658.475547][T19363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.493698][T19718] loop0: detected capacity change from 0 to 512 [ 658.560793][T19713] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5817'. [ 658.584675][T19718] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.5821: iget: bad i_size value: 38620345925642 [ 658.646738][T19718] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.5821: couldn't read orphan inode 15 (err -117) [ 658.718019][T19718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 658.850607][T19721] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 659.013488][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.483030][T19719] loop2: detected capacity change from 0 to 32768 [ 659.539851][T19719] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.5822 (19719) [ 659.682606][T19719] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 659.738972][T19363] hsr_slave_0: entered promiscuous mode [ 659.778838][T19719] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 659.827357][T19363] hsr_slave_1: entered promiscuous mode [ 659.874572][T19363] debugfs: 'hsr0' already exists in 'hsr' [ 659.906505][T19363] Cannot create hsr debugfs directory [ 660.099936][T19719] BTRFS info (device loop2): enabling ssd optimizations [ 660.151719][T19719] BTRFS info (device loop2): turning on async discard [ 660.179792][T19719] BTRFS info (device loop2): enabling free space tree [ 660.416178][ T5828] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 661.263411][T19793] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 661.269968][T19793] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 661.357702][T19793] vhci_hcd vhci_hcd.0: Device attached [ 661.365568][T19794] vhci_hcd: connection closed [ 661.367720][ T6029] vhci_hcd vhci_hcd.6: stop threads [ 661.390474][ T6029] vhci_hcd vhci_hcd.6: release socket [ 661.395902][ T6029] vhci_hcd vhci_hcd.6: disconnect device [ 661.462278][T19792] bond3: option min_links: invalid value (18446744073709547520) [ 661.501631][T19792] bond3: option min_links: allowed values 0 - 2147483647 [ 661.534803][T19792] bond3 (unregistering): Released all slaves [ 661.610346][ T5846] Bluetooth: hci6: command 0x0406 tx timeout [ 661.729611][T19761] loop0: detected capacity change from 0 to 40427 [ 661.740247][T19761] F2FS-fs (loop0): invalid crc value [ 662.149519][T19816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5850'. [ 662.198635][T19761] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 662.208954][ T5907] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 662.279460][T19761] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 662.338492][T19819] netlink: 'syz.6.5851': attribute type 1 has an invalid length. [ 662.399275][T19821] netlink: 'syz.7.5852': attribute type 11 has an invalid length. [ 662.411039][ T5907] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 662.445751][ T5907] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 662.490067][ T5907] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 662.584547][ T5907] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 662.628674][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.657040][T19363] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 662.670911][ T5907] usb 6-1: Product: syz [ 662.676127][ T5907] usb 6-1: Manufacturer: syz [ 662.680809][ T5907] usb 6-1: SerialNumber: syz [ 662.690332][ T5907] usb 6-1: config 0 descriptor?? [ 662.697390][T19809] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 662.724888][T19828] comedi comedi1: dt2801: a I/O base address must be specified [ 662.725562][T19363] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 662.733369][T19809] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 662.794855][ T5907] usb 6-1: ucan: probing device on interface #0 [ 662.825082][T19363] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 662.882118][T19363] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 663.191171][ T5907] usb 6-1: ucan: failed to retrieve device info [ 663.221415][ T5907] usb 6-1: ucan: probe failed; try to update the device firmware [ 663.281042][T19363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.302953][ T5907] usb 6-1: USB disconnect, device number 111 [ 663.367788][T19363] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.407009][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.414205][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.503512][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.510735][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.531658][T19853] netlink: 'syz.2.5863': attribute type 5 has an invalid length. [ 663.644315][T19859] netlink: 'syz.0.5856': attribute type 10 has an invalid length. [ 663.657062][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 663.672303][T19859] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5856'. [ 663.819513][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 663.834948][ T10] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.866556][ T10] usb 8-1: config 0 has no interface number 0 [ 663.883033][ T10] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 663.923983][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.932011][ T10] usb 8-1: Product: syz [ 663.961824][ T10] usb 8-1: Manufacturer: syz [ 663.967914][ T10] usb 8-1: SerialNumber: syz [ 664.001055][ T10] usb 8-1: config 0 descriptor?? [ 664.022017][ T10] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 664.076400][ T10] usb 8-1: selecting invalid altsetting 1 [ 664.082165][ T10] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 664.112592][ T10] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 664.181254][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 664.189571][ T10] usb 8-1: media controller created [ 664.256699][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 664.487475][T19887] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 664.559187][ T10] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 664.640064][T19363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.771836][ T10] usb 8-1: USB disconnect, device number 4 [ 665.266493][T19910] netlink: 'syz.0.5881': attribute type 1 has an invalid length. [ 665.274252][T19910] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5881'. [ 665.666587][ T5907] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 665.793938][T19894] loop6: detected capacity change from 0 to 32768 [ 665.832109][T19894] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5875 (19894) [ 665.845158][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 665.874262][T19363] veth0_vlan: entered promiscuous mode [ 665.877212][ T5907] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 665.909921][T19894] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 665.928416][ T5907] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 665.947032][T19363] veth1_vlan: entered promiscuous mode [ 665.958233][ T5907] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.973661][T19894] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 665.986651][T19931] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 666.007627][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 666.043767][ T5907] usb 6-1: config 1 has no interface number 0 [ 666.076072][ T5907] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 666.077313][T19363] veth0_macvtap: entered promiscuous mode [ 666.118643][T19363] veth1_macvtap: entered promiscuous mode [ 666.143700][T19363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.155844][T19363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.176683][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.256782][ T5907] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 666.275864][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.280030][T19941] loop7: detected capacity change from 0 to 256 [ 666.310259][ T72] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.336684][T19894] BTRFS info (device loop6): enabling ssd optimizations [ 666.374736][T19951] openvswitch: netlink: Flow key attr not present in new flow. [ 666.389500][T19894] BTRFS info (device loop6): turning on async discard [ 666.403342][ T72] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.440041][T19894] BTRFS info (device loop6): enabling free space tree [ 666.449568][ T5907] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values [ 666.463332][ T5907] snd_usb_pod 6-1:1.1: invalid control EP [ 666.473128][ T5907] snd_usb_pod 6-1:1.1: cannot start listening: -22 [ 666.477638][T19941] FAT-fs (loop7): Directory bread(block 64) failed [ 666.481470][ T5907] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 666.501312][ T5907] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 666.512395][T19941] FAT-fs (loop7): Directory bread(block 65) failed [ 666.537361][T19941] FAT-fs (loop7): Directory bread(block 66) failed [ 666.554875][ T72] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.585386][T19941] FAT-fs (loop7): Directory bread(block 67) failed [ 666.650970][T19941] FAT-fs (loop7): Directory bread(block 68) failed [ 666.676032][T19941] FAT-fs (loop7): Directory bread(block 69) failed [ 666.727183][T19941] FAT-fs (loop7): Directory bread(block 70) failed [ 666.751205][ T5835] usb 6-1: USB disconnect, device number 112 [ 666.759917][ T7696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.786312][T16121] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 666.805338][T19941] FAT-fs (loop7): Directory bread(block 71) failed [ 666.809030][ T7696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.838781][T19941] FAT-fs (loop7): Directory bread(block 72) failed [ 666.867764][T19941] FAT-fs (loop7): Directory bread(block 73) failed [ 666.937566][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.972030][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.565585][T19976] ip6tnl2: entered allmulticast mode [ 667.657030][ T5974] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 667.696421][ T5993] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 667.729228][ T5907] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 667.750984][ T5993] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 667.851114][ T5974] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 667.887163][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.922354][ T5974] usb 3-1: config 0 descriptor?? [ 668.103976][T19956] loop0: detected capacity change from 0 to 32768 [ 668.152473][ T5974] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 668.271516][ T5907] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 668.371124][ T5974] [drm:udl_init] *ERROR* Selecting channel failed [ 668.405572][T20000] loop7: detected capacity change from 0 to 256 [ 668.441203][T20000] exfat: Deprecated parameter 'utf8' [ 668.465696][ T5974] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 668.476211][T20000] exfat: Deprecated parameter 'utf8' [ 668.481526][T20000] exfat: Deprecated parameter 'namecase' [ 668.514197][ T5974] [drm] Initialized udl on minor 2 [ 668.549289][ T5974] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 668.574562][ T5974] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 668.593783][T20000] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5f26ded4, utbl_chksum : 0xe619d30d) [ 668.621907][ T5907] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 668.631954][ T30] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 668.642367][ T5974] usb 3-1: USB disconnect, device number 105 [ 668.683064][ T30] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 668.736773][T20000] overlay: filesystem on ./file0 not supported [ 669.278047][ T5974] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 669.418056][T20029] bridge_slave_0: left allmulticast mode [ 669.484940][T20029] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.843399][T20050] ceph: No source [ 670.050987][ T5843] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 670.071152][ T72] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 670.297625][ T5974] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 670.321471][ T5907] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 670.341897][T20032] loop6: detected capacity change from 0 to 32768 [ 670.366028][T20032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5929 (20032) [ 670.469152][T20032] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 670.495219][ T5907] usb 1-1: Using ep0 maxpacket: 16 [ 670.505662][T20032] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm [ 670.509377][ T5907] usb 1-1: config 0 has an invalid interface number: 60 but max is 0 [ 670.544100][ T5907] usb 1-1: config 0 has no interface number 0 [ 670.558539][ T5907] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=fa.5a [ 670.574346][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.607399][ T5907] usb 1-1: Product: syz [ 670.627187][ T5907] usb 1-1: Manufacturer: syz [ 670.648936][ T5907] usb 1-1: SerialNumber: syz [ 670.671065][ T5907] usb 1-1: config 0 descriptor?? [ 670.688482][ T5907] gspca_main: spca500-2.14.0 probing 046d:0900 [ 670.732173][T20032] BTRFS info (device loop6): enabling ssd optimizations [ 670.750130][T20032] BTRFS info (device loop6): turning on async discard [ 670.768415][T20032] BTRFS info (device loop6): enabling free space tree [ 670.838672][T20057] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 670.887096][ T5907] gspca_spca500: reg write: error -71 [ 670.904372][ T5907] gspca_spca500: reg write: error -71 [ 670.932332][ T5907] gspca_spca500: reg write: error -71 [ 670.968609][ T5907] gspca_spca500: reg write: error -71 [ 670.999478][ T5907] gspca_spca500: reg write: error -71 [ 671.041934][ T5907] gspca_spca500: reg write: error -71 [ 671.056621][T16121] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 671.069940][ T72] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 671.082541][ T5907] gspca_spca500: reg write: error -71 [ 671.112562][ T5907] gspca_spca500: reg write: error -71 [ 671.118262][ T72] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 671.146225][ T5907] gspca_spca500: reg write: error -71 [ 671.172794][ T5907] gspca_spca500: reg write: error -71 [ 671.174019][T20098] loop2: detected capacity change from 0 to 128 [ 671.187566][ T5907] gspca_spca500: reg write: error -71 [ 671.190023][T20100] loop5: detected capacity change from 0 to 164 [ 671.239833][T20100] Unable to read rock-ridge attributes [ 671.254878][T20098] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 671.290639][T20103] ipvlan1: entered allmulticast mode [ 671.305582][ T5907] gspca_spca500: reg write: error -71 [ 671.307977][T20098] ext4 filesystem being mounted at /1072/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 671.312538][ T5907] gspca_spca500: reg write: error -71 [ 671.324098][T20103] veth0_vlan: entered allmulticast mode [ 671.337740][ T5907] gspca_spca500: reg write: error -71 [ 671.352143][ T5907] usb 1-1: USB disconnect, device number 104 [ 671.666839][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 672.051648][ T5843] Bluetooth: hci0: command 0x0c20 tx timeout [ 672.173774][T20128] loop0: detected capacity change from 0 to 128 [ 672.267203][T20132] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5968'. [ 672.883985][T20139] loop5: detected capacity change from 0 to 2048 [ 672.952183][T20139] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 673.432282][T20163] loop8: detected capacity change from 0 to 256 [ 673.555167][T20163] FAT-fs (loop8): Directory bread(block 64) failed [ 673.582736][T20163] FAT-fs (loop8): Directory bread(block 65) failed [ 673.589366][T20163] FAT-fs (loop8): Directory bread(block 66) failed [ 673.667085][T20163] FAT-fs (loop8): Directory bread(block 67) failed [ 673.712227][T20163] FAT-fs (loop8): Directory bread(block 68) failed [ 673.731908][T20163] FAT-fs (loop8): Directory bread(block 69) failed [ 673.781890][T20163] FAT-fs (loop8): Directory bread(block 70) failed [ 673.788450][T20163] FAT-fs (loop8): Directory bread(block 71) failed [ 673.858013][T20163] FAT-fs (loop8): Directory bread(block 72) failed [ 673.884937][T20163] FAT-fs (loop8): Directory bread(block 73) failed [ 673.899832][T20179] loop6: detected capacity change from 0 to 1024 [ 674.051498][T20179] hfsplus: invalid length 256 has been corrected to 127 [ 674.247118][ T6110] hfsplus: b-tree write err: -5, ino 4 [ 674.515635][T20196] loop5: detected capacity change from 0 to 64 [ 674.705660][T20201] loop6: detected capacity change from 0 to 512 [ 674.779280][T20201] EXT4-fs: Ignoring removed oldalloc option [ 674.870766][T20201] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: comm syz.6.6001: Parent and EA inode have the same ino 15 [ 674.910781][T20201] EXT4-fs (loop6): Remounting filesystem read-only [ 674.924640][T20201] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 674.933644][T20201] EXT4-fs (loop6): 1 orphan inode deleted [ 674.964704][T20181] loop7: detected capacity change from 0 to 32768 [ 674.992458][T20181] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5991 (20181) [ 675.015200][T20201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 675.096316][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 675.096336][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 675.118035][T20181] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 675.174674][T20181] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm [ 675.260559][T16121] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.340940][T20227] loop0: detected capacity change from 0 to 16 [ 675.373063][T20227] erofs (device loop0): mounted with root inode @ nid 36. [ 675.545021][T20181] BTRFS info (device loop7): enabling ssd optimizations [ 675.614679][T20181] BTRFS info (device loop7): turning on async discard [ 675.632011][T20181] BTRFS info (device loop7): enabling free space tree [ 675.799295][T20181] BTRFS warning (device loop7): can't clear the compat:0 feature bit while mounted [ 675.977476][T18446] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 676.020664][T20256] loop5: detected capacity change from 0 to 512 [ 676.238221][T20256] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.6018: couldn't read orphan inode 26 (err -116) [ 676.309483][T20256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.344266][T20256] ext4 filesystem being mounted at /953/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.445494][T20256] Quota error (device loop5): do_check_range: Getting dqdh_entries 36 out of range 0-14 [ 676.497091][T20256] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 676.543951][T20256] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.6018: Failed to acquire dquot type 1 [ 676.847708][ T5838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.091899][T20292] loop8: detected capacity change from 0 to 1024 [ 677.204001][T20301] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 20301 comm: syz.0.6036) [ 677.329975][T12643] hfsplus: b-tree write err: -5, ino 4 [ 677.510385][T20308] loop5: detected capacity change from 0 to 1024 [ 677.666010][T20308] hfsplus: keylen 65060 too large [ 677.714518][T20308] hfsplus: keylen 65060 too large [ 678.273654][ T31] audit: type=1326 audit(2000001039.467:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.8.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7058f749 code=0x7ffc0000 [ 678.399371][ T31] audit: type=1326 audit(2000001039.467:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.8.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7058f749 code=0x7ffc0000 [ 678.424876][T20340] loop2: detected capacity change from 0 to 512 [ 678.461318][T20340] ext4: Invalid gid '0x00000000ffffffff' [ 678.538354][ T31] audit: type=1326 audit(2000001039.509:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.8.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f9b7058f749 code=0x7ffc0000 [ 678.652142][ T31] audit: type=1326 audit(2000001039.509:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.8.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7058f749 code=0x7ffc0000 [ 678.779201][ T31] audit: type=1326 audit(2000001039.519:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20333 comm="syz.8.6050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b7058f749 code=0x7ffc0000 [ 678.862729][T20300] loop6: detected capacity change from 0 to 32768 [ 678.987542][T20300] ERROR: (device loop6): dbAlloc: unable to allocate blocks [ 678.987542][T20300] [ 679.071558][T20300] ERROR: (device loop6): remounting filesystem as read-only [ 679.150138][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 679.164622][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 679.170936][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.461582][T20375] No such timeout policy "syz1" [ 679.531394][ T5907] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 679.608164][T20380] netlink: ct family unspecified [ 679.629540][T20380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.654635][T20381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.724827][ T5907] usb 8-1: unable to get BOS descriptor or descriptor too short [ 679.746080][ T32] INFO: task syz-executor:5827 blocked for more than 143 seconds. [ 679.753452][ T5907] usb 8-1: not running at top speed; connect to a high speed hub [ 679.793101][ T32] Not tainted syzkaller #0 [ 679.803297][ T5907] usb 8-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=42.64 [ 679.819296][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 679.848426][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.869891][ T32] task:syz-executor state:D stack:21432 pid:5827 tgid:5827 ppid:1 task_flags:0x400140 flags:0x00080002 [ 679.888626][ T5907] usb 8-1: Product: syz [ 679.923220][ T5907] usb 8-1: Manufacturer: syz [ 679.942351][ T32] Call Trace: [ 679.955751][ T32] [ 679.956963][ T5907] usb 8-1: SerialNumber: syz [ 679.973658][ T32] __schedule+0x14bc/0x5000 [ 679.985977][ T32] ? __pfx___schedule+0x10/0x10 [ 680.004395][ T32] ? schedule+0x91/0x360 [ 680.035265][ T32] schedule+0x165/0x360 [ 680.052287][ T32] io_schedule+0x80/0xd0 [ 680.073581][ T32] folio_wait_bit_common+0x6b0/0xb80 [ 680.095314][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 680.117209][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 680.150105][ T32] ? folios_put_refs+0x584/0x670 [ 680.172095][ T32] ? __pfx_find_lock_entries+0x10/0x10 [ 680.182950][ T32] ? __filemap_get_folio_mpol+0x81/0xb00 [ 680.195165][ T32] __filemap_get_folio_mpol+0x13e/0xb00 [ 680.235564][ T5907] snd-usb-audio 8-1:3.0: probe with driver snd-usb-audio failed with error -71 [ 680.237005][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 680.266733][ T32] truncate_inode_pages_range+0x3f0/0xd90 [ 680.275144][T20354] loop2: detected capacity change from 0 to 32768 [ 680.278193][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 680.284496][ T5907] usb 8-1: USB disconnect, device number 5 [ 680.302615][ T32] ? kasan_save_stack+0x4d/0x60 [ 680.321241][ T32] ? kasan_save_stack+0x3e/0x60 [ 680.336794][T20354] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6059 (20354) [ 680.342691][ T32] ? kasan_record_aux_stack+0xbd/0xd0 [ 680.381505][ T32] ? deactivate_locked_super+0xbc/0x130 [ 680.394339][ T32] ? task_work_run+0x1d4/0x260 [ 680.402150][ T32] ? exit_to_user_mode_loop+0xff/0x4f0 [ 680.407752][ T32] ? do_syscall_64+0x2e3/0xf80 [ 680.413059][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.419286][ T32] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 680.420457][T20354] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 680.426456][ T32] ? __lock_acquire+0x6b6/0x2cf0 [ 680.451378][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 680.456768][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 680.462886][ T32] evict+0x607/0xae0 [ 680.466886][ T32] ? __pfx_evict+0x10/0x10 [ 680.471736][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 680.475934][T20354] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 680.483205][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 680.491401][T20354] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 680.502527][ T32] ? do_raw_spin_unlock+0x122/0x240 [ 680.522314][ T32] evict_inodes+0x753/0x7e0 [ 680.527216][ T32] ? __pfx_evict_inodes+0x10/0x10 [ 680.542471][ T32] generic_shutdown_super+0x9a/0x2c0 [ 680.552715][ T32] kill_block_super+0x44/0x90 [ 680.572395][ T32] deactivate_locked_super+0xbc/0x130 [ 680.577812][ T32] cleanup_mnt+0x425/0x4c0 [ 680.593252][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 680.600026][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 680.614709][ T32] task_work_run+0x1d4/0x260 [ 680.620709][ T32] ? __pfx_task_work_run+0x10/0x10 [ 680.625934][ T32] ? exit_to_user_mode_loop+0x55/0x4f0 [ 680.632190][ T32] exit_to_user_mode_loop+0xff/0x4f0 [ 680.637563][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 680.640316][T20354] BTRFS info (device loop2): rebuilding free space tree [ 680.646301][ T32] ? rcu_is_watching+0x15/0xb0 [ 680.655124][ T32] do_syscall_64+0x2e3/0xf80 [ 680.660205][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.666352][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 680.672128][ T32] ? exc_page_fault+0xab/0x100 [ 680.677001][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.682978][ T32] RIP: 0033:0x7f50ddf90a77 [ 680.687532][ T32] RSP: 002b:00007ffec14f7ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 680.696847][ T32] RAX: 0000000000000000 RBX: 00007f50de013d7d RCX: 00007f50ddf90a77 [ 680.704897][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffec14f7f60 [ 680.720791][ T32] RBP: 00007ffec14f7f60 R08: 0000000000000000 R09: 0000000000000000 [ 680.728609][T20354] BTRFS info (device loop2): disabling free space tree [ 680.729015][ T32] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffec14f8ff0 [ 680.741774][T20354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 680.773472][T20354] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 680.783297][ T32] R13: 00007f50de013d7d R14: 00000000000815b7 R15: 00007ffec14f9030 [ 680.802992][T20354] BTRFS info (device loop2): setting nodatasum [ 680.809167][T20354] BTRFS info (device loop2): allowing degraded mounts [ 680.820017][ T32] [ 680.829631][T20354] BTRFS info (device loop2): turning on async discard [ 680.837783][ T32] [ 680.837783][ T32] Showing all locks held in the system: [ 680.852943][ T32] 1 lock held by khungtaskd/32: [ 680.857871][ T32] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 680.867960][T20354] BTRFS info (device loop2): enabling disk space caching [ 680.881648][ T32] 2 locks held by getty/5576: [ 680.886412][ T32] #0: ffff88803004e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 680.920361][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 680.927477][T20354] BTRFS info (device loop2): force clearing of disk cache [ 680.939560][T20354] BTRFS info (device loop2): force zlib compression, level 3 [ 680.940482][ T32] 1 lock held by syz-executor/5827: [ 680.952779][ T32] #0: ffff88804cc980e0 (&type->s_umount_key#65){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 680.968080][ T32] 1 lock held by syz.2.6059/20354: [ 680.973552][ T32] #0: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 680.989175][ T32] 3 locks held by dhcpcd-run-hook/20413: [ 680.995299][ T32] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 681.005652][ T32] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 681.014904][ T32] #2: ffff888046ba9078 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: __pte_offset_map_lock+0x13e/0x210 [ 681.026676][ T32] 5 locks held by sed/20414: [ 681.032495][ T32] [ 681.036426][ T32] ============================================= [ 681.036426][ T32] [ 681.102815][ T32] NMI backtrace for cpu 1 [ 681.102839][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 681.102866][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.102881][ T32] Call Trace: [ 681.102892][ T32] [ 681.102903][ T32] dump_stack_lvl+0x189/0x250 [ 681.102946][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.102978][ T32] ? __pfx__printk+0x10/0x10 [ 681.103029][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 681.103065][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 681.103098][ T32] ? __pfx__printk+0x10/0x10 [ 681.103136][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.103169][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 681.103213][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 681.103247][ T32] sys_info+0x135/0x170 [ 681.103272][ T32] watchdog+0xf95/0xfe0 [ 681.103314][ T32] ? watchdog+0x20a/0xfe0 [ 681.103358][ T32] kthread+0x711/0x8a0 [ 681.103394][ T32] ? __pfx_watchdog+0x10/0x10 [ 681.103429][ T32] ? __pfx_kthread+0x10/0x10 [ 681.103458][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.103492][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 681.103527][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.103556][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 681.103593][ T32] ? __pfx_kthread+0x10/0x10 [ 681.103639][ T32] ret_from_fork+0x599/0xb30 [ 681.103668][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 681.103703][ T32] ? __switch_to_asm+0x39/0x70 [ 681.103738][ T32] ? __switch_to_asm+0x33/0x70 [ 681.103771][ T32] ? __pfx_kthread+0x10/0x10 [ 681.103808][ T32] ret_from_fork_asm+0x1a/0x30 [ 681.103859][ T32] [ 681.103896][ T32] Sending NMI from CPU 1 to CPUs 0: [ 681.272426][ C0] NMI backtrace for cpu 0 [ 681.272446][ C0] CPU: 0 UID: 0 PID: 20417 Comm: rm Not tainted syzkaller #0 PREEMPT(full) [ 681.272472][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.272486][ C0] RIP: 0010:lock_release+0x4d/0x3b0 [ 681.272515][ C0] Code: 24 28 0f 1f 44 00 00 65 8b 05 63 ba df 10 83 f8 08 0f 83 87 02 00 00 89 c0 48 0f a3 05 8c 52 e3 0d 73 0d e8 05 f4 08 00 84 c0 <0f> 84 a3 02 00 00 83 3d a6 82 e3 0d 00 0f 84 3e 02 00 00 65 8b 05 [ 681.272535][ C0] RSP: 0018:ffffc9000cc06f50 EFLAGS: 00000202 [ 681.272555][ C0] RAX: 0000000000000001 RBX: ffffffff90242501 RCX: 3049ebefdd293600 [ 681.272572][ C0] RDX: ffffc9000cc07001 RSI: ffffffff8bc07940 RDI: ffffffff8bc07900 [ 681.272590][ C0] RBP: dffffc0000000000 R08: ffffc9000cc07e18 R09: ffffc9000cc070d8 [ 681.272608][ C0] R10: dffffc0000000000 R11: fffff52001980e1d R12: ffffc9000cc07e28 [ 681.272632][ C0] R13: ffffffff81743f85 R14: ffffffff8df419e0 R15: ffffffff81743f85 [ 681.272652][ C0] FS: 0000000000000000(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 681.272671][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 681.272687][ C0] CR2: 00007f1476afc286 CR3: 000000007d830000 CR4: 0000000000350ef0 [ 681.272705][ C0] Call Trace: [ 681.272714][ C0] [ 681.272722][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.272750][ C0] ? deref_stack_reg+0x19f/0x230 [ 681.272782][ C0] ? unwind_next_frame+0xa5/0x2390 [ 681.272808][ C0] unwind_next_frame+0x19a9/0x2390 [ 681.272843][ C0] ? unwind_next_frame+0xa5/0x2390 [ 681.272872][ C0] ? bprm_execve+0x92e/0x1400 [ 681.272897][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 681.272935][ C0] arch_stack_walk+0x11c/0x150 [ 681.272965][ C0] ? do_execveat_common+0x510/0x6a0 [ 681.272992][ C0] stack_trace_save+0x9c/0xe0 [ 681.273026][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 681.273070][ C0] kasan_save_stack+0x3e/0x60 [ 681.273093][ C0] ? kasan_save_stack+0x3e/0x60 [ 681.273115][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 681.273146][ C0] ? call_rcu+0x157/0x9c0 [ 681.273175][ C0] ? kmem_cache_free+0x488/0x620 [ 681.273197][ C0] ? vms_complete_munmap_vmas+0x626/0x8a0 [ 681.273226][ C0] ? do_vmi_align_munmap+0x364/0x440 [ 681.273253][ C0] ? do_vmi_munmap+0x253/0x2e0 [ 681.273280][ C0] ? __vm_munmap+0x207/0x380 [ 681.273309][ C0] ? elf_load+0x2c3/0x6c0 [ 681.273342][ C0] ? load_elf_binary+0x1079/0x2740 [ 681.273374][ C0] ? bprm_execve+0x92e/0x1400 [ 681.273427][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 681.273459][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 681.273487][ C0] call_rcu+0x157/0x9c0 [ 681.273525][ C0] ? __pfx_call_rcu+0x10/0x10 [ 681.273563][ C0] kmem_cache_free+0x488/0x620 [ 681.273586][ C0] ? vms_complete_munmap_vmas+0x626/0x8a0 [ 681.273623][ C0] vms_complete_munmap_vmas+0x626/0x8a0 [ 681.273663][ C0] do_vmi_align_munmap+0x364/0x440 [ 681.273706][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 681.273752][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.273785][ C0] do_vmi_munmap+0x253/0x2e0 [ 681.273818][ C0] __vm_munmap+0x207/0x380 [ 681.273851][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 681.273895][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.273921][ C0] ? vm_mmap+0x6a/0xc0 [ 681.273950][ C0] elf_load+0x2c3/0x6c0 [ 681.273990][ C0] load_elf_binary+0x1079/0x2740 [ 681.274046][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 681.274083][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.274117][ C0] bprm_execve+0x92e/0x1400 [ 681.274150][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 681.274179][ C0] do_execveat_common+0x510/0x6a0 [ 681.274210][ C0] __x64_sys_execve+0x94/0xb0 [ 681.274233][ C0] do_syscall_64+0xfa/0xf80 [ 681.274269][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.274292][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.274318][ C0] ? exc_page_fault+0xab/0x100 [ 681.274353][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.274375][ C0] RIP: 0033:0x7f1476a42107 [ 681.274399][ C0] Code: Unable to access opcode bytes at 0x7f1476a420dd. [ 681.274411][ C0] RSP: 002b:00007ffd5d8dca58 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 681.274434][ C0] RAX: ffffffffffffffda RBX: 000055d7692271b8 RCX: 00007f1476a42107 [ 681.274451][ C0] RDX: 000055d7692271d8 RSI: 000055d7692271b8 RDI: 000055d769227288 [ 681.274468][ C0] RBP: 000055d769227288 R08: 00007ffd5d8e0e01 R09: 0000000000000000 [ 681.274484][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 000055d7692271d8 [ 681.274499][ C0] R13: 00007f1476c07e8b R14: 000055d7692271d8 R15: 0000000000000000 [ 681.274528][ C0] [ 681.728850][ T5828] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 681.729305][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 681.729327][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 681.729357][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 681.729375][ T32] Call Trace: [ 681.729386][ T32] [ 681.729399][ T32] dump_stack_lvl+0x99/0x250 [ 681.729436][ T32] ? __asan_memcpy+0x40/0x70 [ 681.729463][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.729495][ T32] ? __pfx__printk+0x10/0x10 [ 681.729543][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.729579][ T32] vpanic+0x237/0x6d0 [ 681.729612][ T32] ? __pfx_vpanic+0x10/0x10 [ 681.729645][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.729676][ T32] ? preempt_schedule_common+0x83/0xd0 [ 681.729723][ T32] panic+0xb9/0xc0 [ 681.729755][ T32] ? __pfx_panic+0x10/0x10 [ 681.729788][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.729818][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 681.729851][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.729886][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 681.729924][ T32] watchdog+0xfdf/0xfe0 [ 681.729967][ T32] ? watchdog+0x20a/0xfe0 [ 681.730013][ T32] kthread+0x711/0x8a0 [ 681.730053][ T32] ? __pfx_watchdog+0x10/0x10 [ 681.730089][ T32] ? __pfx_kthread+0x10/0x10 [ 681.730121][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.730155][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 681.730190][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 681.730220][ T32] ? lockdep_hardirqs_on+0x98/0x140 [ 681.730258][ T32] ? __pfx_kthread+0x10/0x10 [ 681.730294][ T32] ret_from_fork+0x599/0xb30 [ 681.730324][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 681.730364][ T32] ? __switch_to_asm+0x39/0x70 [ 681.730398][ T32] ? __switch_to_asm+0x33/0x70 [ 681.730431][ T32] ? __pfx_kthread+0x10/0x10 [ 681.730468][ T32] ret_from_fork_asm+0x1a/0x30 [ 681.730523][ T32] [ 681.739288][ T32] Kernel Offset: disabled