last executing test programs: 2m25.354110366s ago: executing program 4 (id=7183): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) 2m25.229602419s ago: executing program 4 (id=7185): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@dellinkprop={0x28, 0x6d, 0x807, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8, 0x8}, [@IFLA_NET_NS_PID={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x34000894}, 0x2) 2m25.15003121s ago: executing program 4 (id=7187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0) 2m24.987648802s ago: executing program 4 (id=7190): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2a, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 2m24.804957775s ago: executing program 4 (id=7193): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m23.856396619s ago: executing program 4 (id=7208): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) tee(r0, r0, 0xaf06, 0x2) 2m8.791441512s ago: executing program 32 (id=7208): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4880) tee(r0, r0, 0xaf06, 0x2) 1m14.968955063s ago: executing program 2 (id=8290): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001200)={0x0, 0x0}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000200)={'bond0\x00', @ifru_names='lo\x00'}) 1m14.655992057s ago: executing program 2 (id=8295): syz_usb_connect(0x3, 0x36, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4cb81, 0x0) 1m12.946083234s ago: executing program 2 (id=8318): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0xa, 0x2000) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x391) 1m12.732102937s ago: executing program 2 (id=8319): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0xb}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp775'}}, {@uid}, {@type={'type', 0x3d, "0ff88dbf"}}, {@nobarrier}]}, 0x20, 0x6e7, &(0x7f00000006c0)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1m12.295996904s ago: executing program 2 (id=8323): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x54583, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}}, 0x0) 1m11.771088922s ago: executing program 2 (id=8331): r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x40000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) 1m11.374677209s ago: executing program 33 (id=8331): r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x40000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, 0x0) 51.218574079s ago: executing program 5 (id=8536): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x377, &(0x7f00000004c0)="$eJzs3T+IHGUUAPC3mb3du0C8K4SgII52Fh5JxEIbL4QLBK9RWfxTiIu5qNyegV1cvBTZnI1YCpZa2aXQwiK1CIrYWdgaQaJioakSMDoyu7P/bvcuOXATjb9fMby87735vsksd3tz7HevrMTG6bk4c/XqlZifL0V55cRKXC/FUiTRdyEmVabkAID/hutZFr9nPbfYUuoek5kuCwCYoe73/9cOjWTe+XKv+qw0CP+c5boAgNkpfv5f2KtmfreBszNZEgAwYxPP/x8eG66M/6q/7LE/ANwFnnvxpaePr0U8m6bzEZvvtmvtWjw5HD9+Jt6IRqzHkViMGxG9Nwr5odQ9njy1tnokTdNO/LQUtbyjXYvY7LRrvXcKx5NufzWOxmIsFf3Fu40sy5KTn62tHk27IuJCpzt/bJbatbk4WMz//cFYj2ORxr0T/RGn1laPpcUJapv9/k7E9vC5Rb7+5ViMb1+Ns9GI05H3ViKu5WdYWz1/NE1PZGtj/e1atVvXs9sTkObsbgwAAAAAAAAAAAAAAAAAAAAAAHe15XRgabD/TTbcv2d5ecp4bCbtWq+/2B9ou7c/UFbNIst+e/vR2ntJjO0PtHN/nnatHAfu7KUDAAAAAAAAAAAAAAAAAADAv0ZrqxL1RmO92do6tzEadJqtrQMRkWfe/PqTLxZisuYmQbmYY2QoLVLnNupZ0i/OkrGaIkjyyfuZi5fyroX8MFpTHVzF1GVUdx9qNA499OOHw8wDSX7m6ta5jb8ODLqSmH6ByY5ljAab9/SWtJ//qEFw7CY1l7Ms2639/MuTXVGKKO//xu0dZHnw1ZXX73usdfjxbubzrOeRa4vPX/7g41826o185ujewUqzdSPbqBf/jvrF6n4mTUZeP6XoBf1TdWvKe7Vvj2fqyXe/vnD/+9/c2uzZaOatKTX52uqNxqc7hyq9IF/mjqGFaXPN9S/wqcHL5sHemdebrfI/duMOf7RSv3T+h59vtWvki4SNOgAAAAAAAAAAAAAAAAAA4LYY+ax4ofiw79xeXU88M/uVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDtM/z7/yPB9kRm16A6zPzRicma6nqzFVG505cJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/3N8BAAD//zBdbcU=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 50.438653682s ago: executing program 5 (id=8542): r0 = syz_open_procfs(0x0, &(0x7f0000000700)='net/fib_triestat\x00') read$FUSE(r0, 0x0, 0x53) 50.122707866s ago: executing program 5 (id=8549): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x1b, 0x1, 0x0, "69060077b4f80102f5372f2c74f6024305f11fd3454ad23d00", 0x3436324d}) 49.86480041s ago: executing program 5 (id=8552): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'cp775'}}, {@umask={'umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x4, 0x33e, &(0x7f0000000540)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 49.477832306s ago: executing program 5 (id=8559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4278b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @private=0xa010101}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x43}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 48.866105346s ago: executing program 5 (id=8567): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 48.371867073s ago: executing program 34 (id=8567): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x5, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 3.589025105s ago: executing program 6 (id=9191): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000940)={&(0x7f0000000600)="8731", 0x0, 0x0, 0x0, 0x3, r0}, 0x38) 3.366116408s ago: executing program 6 (id=9195): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380), 0xd, 0x5e4, &(0x7f0000001200)="$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") rmdir(&(0x7f0000000000)='./file0\x00') 3.178645561s ago: executing program 1 (id=9200): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000240), &(0x7f0000000280)=0x8) 2.851609766s ago: executing program 1 (id=9205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@delneigh={0x28, 0x1a, 0x1, 0x70bd25, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x84}, [@NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x28}}, 0x0) 2.749664228s ago: executing program 6 (id=9207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x7f390004, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000a"], 0x60}}, 0x0) 2.530099871s ago: executing program 0 (id=9209): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000280)="0000000000000004ff6943b80000000800000028f2000000008607000000ebb01f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d0000009c238532dd4c6ee9eddd58a599264432dc88941a476f8674c3b25a20e8d25504d773dd523add126ab51ca15c9d0436b3d0164bda8d9ed4e88158a20d3c55bd06050b964a5503bd0ef4b3a0823ad11bfae501057d95ba3e8d12893e6201c24e96b3031a817db4aa92e708a23ec370714940856977cb6f99f8ddc11996d1d5587f9c325bf5c2f77088d08a05af40a5392711377de42a66c2adee5a0612b9", 0xdc, r0) 2.529587051s ago: executing program 1 (id=9210): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000140)=0x4, 0x4) 2.451364922s ago: executing program 6 (id=9222): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0xc8, 0x8, 0x1c0, 0x5803, 0x1c0, 0x2e8, 0x2e8, 0x340, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'vlan0\x00', 'geneve1\x00', {}, {}, 0x33, 0x0, 0x6}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x2, {0xfffffffffffffffe}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x98, 0x5df5, 0x800}}}, {{@ipv6={@mcast2, @private0, [0x0, 0x0, 0xff], [], 'batadv_slave_1\x00', 'bridge_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x6, 0x1, 0x9, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) 2.367515193s ago: executing program 0 (id=9213): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000f00)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)='k', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="b6", 0x1}], 0x1}}], 0x2, 0x20000010) 2.315994244s ago: executing program 1 (id=9215): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000000)={0x403d, &(0x7f0000000080)=[{}, {}, {}]}) 2.283193355s ago: executing program 6 (id=9216): open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") 2.252823365s ago: executing program 7 (id=9217): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=prefer:', @ANYRESOCT=0x0]) 2.123122147s ago: executing program 1 (id=9219): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="400e0100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.115401947s ago: executing program 0 (id=9220): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr={{0x18, 0x29, 0x5, {0x87, 0x0, 0x2, 0x1}}}], 0x18}}], 0x1, 0x20000850) 2.025167129s ago: executing program 7 (id=9221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xa1) 1.92890856s ago: executing program 0 (id=9223): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$link(0x8, r0, r0) 1.872315321s ago: executing program 7 (id=9224): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) 1.779967402s ago: executing program 6 (id=9225): sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000600)={[{@discard_sync}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x37, 0x67, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@user_subvol_rm}, {@nospace_cache}, {@nodatasum}, {@clear_cache}, {@discard_sync}, {@ssd}, {@nobarrier}, {@noacl}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") 1.665140214s ago: executing program 0 (id=9226): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0xfffffffb, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.595995865s ago: executing program 3 (id=9227): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, 0x0, &(0x7f0000000200)) 1.444668078s ago: executing program 3 (id=9228): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x4d0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {}, 0x62}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x2}, [0xffffffff], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {0xff}, {}, 0x32}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @empty, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x4}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x7fff, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) 1.413928988s ago: executing program 0 (id=9229): syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@sysvgroups}, {@gqnoenforce}, {@nolazytime}, {@ikeep}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 1.072147113s ago: executing program 3 (id=9230): r0 = memfd_create(&(0x7f00000011c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f0000000080)={0x1f, 0x39061c595a41012a, 0xa0b}) 864.342376ms ago: executing program 7 (id=9231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000010000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e208000140000000000800014000000007ebfd014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb08000140000000031400018008000140000000050800014000000001"], 0x140}}, 0x0) 844.735247ms ago: executing program 3 (id=9232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x439, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9805, 0x2000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x44}}, 0x0) 569.565701ms ago: executing program 3 (id=9233): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000a80)='./file1\x00', 0x41c, &(0x7f00000001c0)={[{@nodiscard}, {@order_strict}, {@nobarrier}, {@norecovery}, {@discard}, {@discard}, {@nobarrier}, {@nodiscard}, {@nobarrier}]}, 0x1, 0xa7f, &(0x7f0000001540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x101142, 0x0) 455.816053ms ago: executing program 7 (id=9234): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TIOCCONS(r0, 0x541d) 304.783905ms ago: executing program 1 (id=9235): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @default, @bcast]}, 0x10) 168.412227ms ago: executing program 7 (id=9236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x844}, 0x4040004) 0s ago: executing program 3 (id=9237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a0000000000101040000000000000000020000002400018014000180080001000000000008000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e0000002080002000000000008000740000000003c00188008000340000000000800024000000000080001"], 0xa0}}, 0x0) kernel console output (not intermixed with test programs): ink: 'syz.5.7876': attribute type 2 has an invalid length. [ 528.933319][ T22] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 528.960060][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.988122][ T22] usb 4-1: Product: syz [ 528.991560][T21374] sctp: [Deprecated]: syz.0.7877 (pid 21374) Use of int in max_burst socket option. [ 528.991560][T21374] Use struct sctp_assoc_value instead [ 528.992686][ T22] usb 4-1: Manufacturer: syz [ 529.007558][ T3995] usb 2-1: Using ep0 maxpacket: 16 [ 529.019984][ T3995] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 529.033831][ T22] usb 4-1: SerialNumber: syz [ 529.043766][ T22] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 529.081154][ T3995] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 529.085661][ T22] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 529.090238][ T3995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.090260][ T3995] usb 2-1: Product: syz [ 529.137524][ T3995] usb 2-1: Manufacturer: syz [ 529.144143][ T3995] usb 2-1: SerialNumber: syz [ 529.179863][ T3995] usb 2-1: config 0 descriptor?? [ 529.197100][ T3995] hub 2-1:0.0: bad descriptor, ignoring hub [ 529.205880][ T3995] hub: probe of 2-1:0.0 failed with error -5 [ 529.224435][ T3995] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 529.533926][T21384] loop2: detected capacity change from 0 to 64 [ 529.620540][ T8474] usb 4-1: USB disconnect, device number 32 [ 529.959846][T21376] loop5: detected capacity change from 0 to 32768 [ 529.983991][T21376] (syz.5.7878,21376,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 530.008889][T21376] (syz.5.7878,21376,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 530.055508][T21376] JBD2: Ignoring recovery information on journal [ 530.150752][ T22] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 530.168073][ T22] ath9k_htc: Failed to initialize the device [ 530.174810][ T8474] usb 4-1: ath9k_htc: USB layer deinitialized [ 530.213371][T21403] netlink: 280 bytes leftover after parsing attributes in process `syz.0.7890'. [ 530.314881][T21376] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 530.526579][T20523] ocfs2: Unmounting device (7,5) on (node local) [ 530.569770][T21414] xt_hashlimit: invalid interval [ 530.577891][T21416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7898'. [ 530.631273][T21417] ALSA: mixer_oss: invalid OSS volume 'u' [ 530.690844][T21420] netlink: 'syz.5.7899': attribute type 10 has an invalid length. [ 530.961407][T21420] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.990043][T21420] bond0: (slave team0): Enslaving as an active interface with an up link [ 530.997397][T21428] netlink: 'syz.1.7903': attribute type 1 has an invalid length. [ 531.101527][T21432] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.7905'. [ 531.139452][T21432] netlink: 3648 bytes leftover after parsing attributes in process `syz.0.7905'. [ 531.653105][T21452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7915'. [ 531.680133][T21454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7916'. [ 532.048759][T21468] loop0: detected capacity change from 0 to 8 [ 532.307972][T21474] loop1: detected capacity change from 0 to 512 [ 532.439982][T21474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 532.517849][T21464] loop3: detected capacity change from 0 to 32768 [ 532.534619][T21464] (syz.3.7921,21464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 532.586952][T21483] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.598578][T21464] (syz.3.7921,21464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 532.666131][T21464] (syz.3.7921,21464,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 532.682162][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 532.712071][T21464] JBD2: Ignoring recovery information on journal [ 532.831186][T21464] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 533.080064][ T4258] ocfs2: Unmounting device (7,3) on (node local) [ 533.104910][T21501] loop5: detected capacity change from 0 to 1024 [ 533.172205][T21504] loop1: detected capacity change from 0 to 16 [ 533.667460][T21521] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7943'. [ 533.671294][T21518] loop3: detected capacity change from 0 to 256 [ 533.686933][T21521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7943'. [ 533.741939][T21521] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7943'. [ 533.814340][T21518] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 533.977921][ T26] usb 2-1: USB disconnect, device number 25 [ 534.188789][T21502] loop0: detected capacity change from 0 to 32768 [ 534.255823][T21533] loop2: detected capacity change from 0 to 4096 [ 534.281956][T21533] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 534.333554][T21533] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 534.392302][T21502] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 534.474198][T21516] loop1: detected capacity change from 0 to 32768 [ 534.479900][T21502] (syz.0.7935,21502,1):ocfs2_mknod:502 ERROR: status = -2 [ 534.485683][T21516] XFS: ikeep mount option is deprecated. [ 534.504720][T21502] (syz.0.7935,21502,1):ocfs2_create:676 ERROR: status = -2 [ 534.509503][T21544] loop3: detected capacity change from 0 to 1024 [ 534.631890][T21495] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22. [ 534.654004][ T4261] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 534.667087][ T4253] (syz-executor,4253,0):ocfs2_inode_is_valid_to_delete:852 ERROR: Skipping delete of root inode. [ 534.678153][T21516] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 534.693041][T21516] XFS (loop1): Mounting V5 Filesystem [ 534.699839][ T4253] ocfs2: Unmounting device (7,0) on (node local) [ 534.830886][T21516] XFS (loop1): Ending clean mount [ 534.946567][T21549] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7952'. [ 535.180250][ T4252] XFS (loop1): Unmounting Filesystem [ 535.259272][T21567] UBIFS error (pid: 21567): cannot open "", error -22 [ 535.605865][T21581] netlink: 'syz.3.7966': attribute type 1 has an invalid length. [ 535.817596][T21589] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7970'. [ 536.121638][T21595] loop5: detected capacity change from 0 to 4096 [ 536.381894][T20523] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 536.388539][T20523] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 536.620874][ T3995] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 536.830751][ T3995] usb 2-1: Using ep0 maxpacket: 16 [ 536.839648][ T3995] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 536.866701][ T3995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.885254][ T3995] usb 2-1: Product: syz [ 536.889457][ T3995] usb 2-1: Manufacturer: syz [ 536.897718][T21629] loop5: detected capacity change from 0 to 64 [ 536.915594][ T3995] usb 2-1: SerialNumber: syz [ 536.936067][ T3995] usb 2-1: config 0 descriptor?? [ 536.942667][T21629] overlayfs: failed to resolve 'wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/': -36 [ 536.945108][T21631] netlink: 'syz.0.7989': attribute type 2 has an invalid length. [ 536.975702][ T3995] usb_ehset_test: probe of 2-1:0.0 failed with error -32 [ 537.020984][T21631] netlink: 'syz.0.7989': attribute type 1 has an invalid length. [ 537.058156][T21631] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.7989'. [ 537.078855][T21602] loop3: detected capacity change from 0 to 32768 [ 537.202176][ T3995] usb 2-1: USB disconnect, device number 26 [ 537.242008][T21635] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7992'. [ 537.633051][T21651] loop5: detected capacity change from 0 to 256 [ 537.659543][T21651] exfat: Deprecated parameter 'utf8' [ 537.754004][T21651] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 537.849218][T21655] CIFS: iocharset name too long [ 538.197336][T21665] loop3: detected capacity change from 0 to 4096 [ 538.268187][T21672] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 538.298266][T21665] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 538.302425][T21674] netlink: 'syz.0.8010': attribute type 30 has an invalid length. [ 538.332323][T21665] Remounting filesystem read-only [ 538.350811][ T3995] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 538.550929][ T3995] usb 3-1: Using ep0 maxpacket: 32 [ 538.557652][ T3995] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 538.587530][ T3995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.618706][ T3995] usb 3-1: config 0 descriptor?? [ 538.623971][T21686] netlink: 'syz.1.8017': attribute type 4 has an invalid length. [ 538.623990][T21686] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8017'. [ 538.753657][ T3995] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 538.941299][T21698] loop0: detected capacity change from 0 to 256 [ 538.983871][T21701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8025'. [ 539.017150][T21698] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 539.133569][T21705] CIFS mount error: No usable UNC path provided in device string! [ 539.133569][T21705] [ 539.167104][ T3995] gspca_sunplus: reg_w_riv err -71 [ 539.173487][T21705] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 539.183736][ T3995] sunplus: probe of 3-1:0.0 failed with error -71 [ 539.217614][ T3995] usb 3-1: USB disconnect, device number 27 [ 539.685454][T21721] loop1: detected capacity change from 0 to 4096 [ 539.703676][T21721] EXT4-fs: inline encryption not supported [ 539.718843][T21721] EXT4-fs: Ignoring removed oldalloc option [ 539.745991][T21721] EXT4-fs (loop1): Test dummy encryption mode enabled [ 539.813394][T21721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 539.938204][T21721] Quota error (device loop1): do_check_range: Getting block 134217730 out of range 1-5 [ 539.987343][T21721] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 540.044087][T21721] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.8034: Failed to acquire dquot type 1 [ 540.241441][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 540.932434][T21771] Cannot find map_set index 0 as target [ 541.172631][T21782] Cannot find del_set index 0 as target [ 541.271096][ T27] audit: type=1326 audit(542.252:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.3.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b98e929 code=0x7ffc0000 [ 541.335989][ T27] audit: type=1326 audit(542.252:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.3.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbf8b98e929 code=0x7ffc0000 [ 541.416483][T21793] loop5: detected capacity change from 0 to 2048 [ 541.449204][ T27] audit: type=1326 audit(542.252:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.3.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b98e929 code=0x7ffc0000 [ 541.474379][T21793] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 541.515723][T21798] loop2: detected capacity change from 0 to 512 [ 541.606840][ T27] audit: type=1326 audit(542.252:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.3.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b98e929 code=0x7ffc0000 [ 541.613164][T21798] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 541.655552][ T27] audit: type=1326 audit(542.252:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.3.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbf8b98e929 code=0x7ffc0000 [ 541.706923][ T27] audit: type=1326 audit(542.262:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21786 comm="syz.3.8066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbf8b98e929 code=0x7ffc0000 [ 541.823188][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 542.225777][T21828] loop3: detected capacity change from 0 to 128 [ 542.299153][T21832] loop2: detected capacity change from 0 to 8 [ 542.325541][T21832] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 542.379334][T21832] cramfs: Error -3 while decompressing! [ 542.389525][T21832] cramfs: ffffffff96b4c568(26)->ffff888049092000(4096) [ 542.430990][T21832] cramfs: Error -3 while decompressing! [ 542.436622][T21832] cramfs: ffffffff96b4c582(26)->ffff88804a331000(4096) [ 542.487016][T21832] cramfs: Error -3 while decompressing! [ 542.520962][T21832] cramfs: ffffffff96b4c59c(16)->ffff88805589c000(4096) [ 542.527900][T21832] cramfs: Error -3 while decompressing! [ 542.569212][T21832] cramfs: ffffffff96b4c568(26)->ffff888049092000(4096) [ 542.569972][ T4336] udevd[4336]: incorrect cramfs checksum on /dev/loop2 [ 542.636888][T21844] loop1: detected capacity change from 0 to 512 [ 542.751901][T21844] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 542.794114][ T4336] udevd[4336]: incorrect cramfs checksum on /dev/loop2 [ 542.844961][T21849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8093'. [ 542.855005][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 542.889116][T21849] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 543.045385][T21855] loop1: detected capacity change from 0 to 4096 [ 543.070696][T12233] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 543.105204][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 543.131231][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 543.139109][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 543.178973][T21857] loop3: detected capacity change from 0 to 4096 [ 543.189393][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00 [ 543.240910][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00 [ 543.244692][T21863] tmpfs: Bad value for 'mpol' [ 543.248930][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00 [ 543.261689][T12233] usb 1-1: Using ep0 maxpacket: 16 [ 543.269364][T12233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 543.287661][T21857] NILFS (loop3): invalid segment: Checksum error in segment payload [ 543.311156][T21857] NILFS (loop3): trying rollback from an earlier position [ 543.318916][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00 [ 543.323422][T21865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8102'. [ 543.328328][T12233] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 543.358970][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00 [ 543.367945][T21857] NILFS (loop3): norecovery option specified, skipping roll-forward recovery [ 543.394023][T12233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.410830][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00 [ 543.418807][T21855] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00 [ 543.440774][T12233] usb 1-1: Product: syz [ 543.444976][T12233] usb 1-1: Manufacturer: syz [ 543.449686][T12233] usb 1-1: SerialNumber: syz [ 543.461815][T21857] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state [ 543.492217][T12233] usb 1-1: config 0 descriptor?? [ 543.546646][T12233] hub 1-1:0.0: bad descriptor, ignoring hub [ 543.561567][T12233] hub: probe of 1-1:0.0 failed with error -5 [ 543.592069][T12233] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input29 [ 543.774377][T21872] loop2: detected capacity change from 0 to 128 [ 543.829210][T21874] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8105'. [ 543.858314][T21872] EXT4-fs (loop2): Test dummy encryption mode enabled [ 543.889254][T21872] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 544.205792][ T6000] usb 1-1: USB disconnect, device number 25 [ 544.318985][T21893] loop3: detected capacity change from 0 to 1024 [ 544.355101][T21872] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 544.379429][T21872] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.8106: bg 0: bad block bitmap checksum [ 544.451066][ T4992] hfsplus: b-tree write err: -5, ino 4 [ 544.483616][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 544.869453][T21915] device hsr0 entered promiscuous mode [ 544.951731][T21915] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 545.034060][T21923] sctp: [Deprecated]: syz.5.8127 (pid 21923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 545.034060][T21923] Use struct sctp_sack_info instead [ 545.106722][T21921] loop1: detected capacity change from 0 to 4096 [ 545.140774][T21921] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 545.207669][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8129'. [ 545.332046][T21932] loop0: detected capacity change from 0 to 1024 [ 545.364417][T21921] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 545.513538][ T4976] hfsplus: b-tree write err: -5, ino 4 [ 545.547165][ T4252] ntfs3: loop1: ntfs_evict_inode r=1e failed, -22. [ 545.571505][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 545.610854][ T8474] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 545.763733][T21946] netlink: 'syz.3.8138': attribute type 4 has an invalid length. [ 545.779105][T21946] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8138'. [ 545.820880][ T8474] usb 3-1: Using ep0 maxpacket: 16 [ 545.827836][ T8474] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 545.870423][ T8474] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 545.916068][ T8474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.955915][ T8474] usb 3-1: Product: syz [ 545.972347][ T8474] usb 3-1: Manufacturer: syz [ 546.008922][ T8474] usb 3-1: SerialNumber: syz [ 546.027532][ T8474] usb 3-1: config 0 descriptor?? [ 546.059987][ T8474] hub 3-1:0.0: bad descriptor, ignoring hub [ 546.069257][ T8474] hub: probe of 3-1:0.0 failed with error -5 [ 546.090488][ T8474] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input30 [ 546.228131][T21961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8145'. [ 546.290651][T21963] netlink: 'syz.3.8146': attribute type 21 has an invalid length. [ 546.310406][T21963] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8146'. [ 546.340823][T21963] netlink: 'syz.3.8146': attribute type 5 has an invalid length. [ 546.350776][T21963] netlink: 'syz.3.8146': attribute type 6 has an invalid length. [ 546.391547][T21963] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8146'. [ 546.412436][T21940] loop5: detected capacity change from 0 to 32768 [ 546.833736][T21979] loop3: detected capacity change from 0 to 1024 [ 546.895867][T21979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 547.133152][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 547.268608][T21997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8163'. [ 547.770892][T22013] loop1: detected capacity change from 0 to 1024 [ 547.833311][T22015] loop2: detected capacity change from 0 to 1024 [ 547.863749][T22015] EXT4-fs: Ignoring removed nomblk_io_submit option [ 547.881496][T22015] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 547.922318][T21986] loop5: detected capacity change from 0 to 32768 [ 547.951163][ T4976] hfsplus: b-tree write err: -5, ino 4 [ 548.039638][T22015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 548.241111][T21999] loop3: detected capacity change from 0 to 32768 [ 548.269350][T21999] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 548.283999][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 548.290360][T21999] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 548.401472][T22030] netlink: 'syz.2.8176': attribute type 4 has an invalid length. [ 548.451665][T22030] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8176'. [ 548.479972][T21999] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 548.511512][ T6000] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 548.562449][T12233] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 548.569689][T12233] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 548.720687][ T6000] usb 6-1: Using ep0 maxpacket: 16 [ 548.727453][ T6000] usb 6-1: config 0 has an invalid interface number: 237 but max is 0 [ 548.727774][T22032] loop0: detected capacity change from 0 to 4096 [ 548.748629][T12233] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 178ms [ 548.764528][ T6000] usb 6-1: config 0 has no interface number 0 [ 548.781674][ T6000] usb 6-1: config 0 interface 237 has no altsetting 0 [ 548.792303][T12233] gfs2: fsid=syz:syz.0: jid=0: Done [ 548.803642][T21999] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 548.821696][T22032] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 548.833164][ T6000] usb 6-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad [ 548.892946][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.913172][ T6000] usb 6-1: Product: syz [ 548.917382][ T6000] usb 6-1: Manufacturer: syz [ 548.931183][ T6000] usb 6-1: SerialNumber: syz [ 548.953864][ T6000] usb 6-1: config 0 descriptor?? [ 548.987594][ T6000] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 found [ 549.158715][T22043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8182'. [ 549.180367][ T6000] snd_usb_podhd 6-1:0.237: cannot get proper max packet size [ 549.211281][ T6000] snd_usb_podhd 6-1:0.237: Line 6 POD HD300 now disconnected [ 549.249742][ T6000] snd_usb_podhd: probe of 6-1:0.237 failed with error -22 [ 549.400190][ T6000] usb 6-1: USB disconnect, device number 4 [ 549.647277][T22056] xt_CT: You must specify a L4 protocol and not use inversions on it [ 549.899285][T22068] loop1: detected capacity change from 0 to 1024 [ 550.092623][ T51] hfsplus: b-tree write err: -5, ino 4 [ 550.127207][T22074] device bridge1 entered promiscuous mode [ 550.140779][T12233] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 550.331034][T22076] loop2: detected capacity change from 0 to 4096 [ 550.352128][T12233] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 550.368744][T22076] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 550.384633][T12233] usb 4-1: config 0 interface 0 has no altsetting 0 [ 550.402176][T12233] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 550.422504][T12233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.438862][T12233] usb 4-1: Product: syz [ 550.444525][T12233] usb 4-1: Manufacturer: syz [ 550.449316][T12233] usb 4-1: SerialNumber: syz [ 550.472921][T12233] usb 4-1: config 0 descriptor?? [ 550.528384][T12233] usb 4-1: selecting invalid altsetting 0 [ 550.562258][T22076] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22. [ 550.562929][ T22] usb 3-1: USB disconnect, device number 28 [ 550.694173][ T8474] usb 4-1: USB disconnect, device number 33 [ 550.824384][ T4261] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22. [ 550.851141][ T4261] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 551.380799][ T22] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 551.560840][ T8474] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 551.570755][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 551.579448][ T22] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 551.609946][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.637133][T22121] netlink: 'syz.0.8219': attribute type 4 has an invalid length. [ 551.653725][ T22] usb 3-1: config 0 descriptor?? [ 551.687653][T22121] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.8219'. [ 551.744167][T22123] dlm: no local IP address has been set [ 551.758408][ T8474] usb 2-1: Using ep0 maxpacket: 32 [ 551.764767][T22123] dlm: cannot start dlm midcomms -107 [ 551.765910][ T8474] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.832487][ T8474] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.861830][ T8474] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 551.888948][ T22] usb 3-1: string descriptor 0 read error: -71 [ 551.897698][ T22] usb 3-1: Found UVC 0.00 device (2833:0201) [ 551.913459][ T8474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.931442][ T22] usb 3-1: No valid video chain found. [ 551.957498][ T8474] hub 2-1:4.0: USB hub found [ 551.967598][ T22] usb 3-1: USB disconnect, device number 29 [ 552.149965][ T8474] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 552.159252][T22137] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8228'. [ 552.322460][T22145] loop5: detected capacity change from 0 to 64 [ 552.465119][T22149] loop0: detected capacity change from 0 to 2048 [ 552.481119][ T8468] usb 2-1: USB disconnect, device number 27 [ 552.509098][T22149] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 552.535937][ T8474] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 552.616894][T22149] UDF-fs: unknown compression code (0) [ 552.739559][ T8474] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.759596][ T8474] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 552.789123][ T8474] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 552.811848][ T8474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.843066][ T8474] usb 4-1: config 0 descriptor?? [ 553.008551][T22163] loop5: detected capacity change from 0 to 2048 [ 553.036787][T22167] loop1: detected capacity change from 0 to 256 [ 553.078619][T22167] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 553.105320][T22163] Alternate GPT is invalid, using primary GPT. [ 553.131890][T22163] loop5: p2 p3 p7 [ 553.147389][T22167] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 553.215713][T22167] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 553.250761][ T6000] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 553.272450][ T8474] Bluetooth: Can't get version to change to load ram patch err [ 553.298835][ T8474] Bluetooth: Loading patch file failed [ 553.324924][ T8474] ath3k: probe of 4-1:0.0 failed with error -71 [ 553.374820][ T8474] usb 4-1: USB disconnect, device number 34 [ 553.460985][ T6000] usb 1-1: Using ep0 maxpacket: 8 [ 553.472740][ T6000] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 553.529643][ T6000] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.544874][ T4336] udevd[4336]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 553.554792][ T6000] usb 1-1: Product: syz [ 553.558970][ T6000] usb 1-1: Manufacturer: syz [ 553.579541][ T4389] udevd[4389]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 553.598294][ T6000] usb 1-1: SerialNumber: syz [ 553.610503][ T4558] udevd[4558]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 553.623705][ T6000] usb 1-1: config 0 descriptor?? [ 553.662871][T22179] loop5: detected capacity change from 0 to 2048 [ 553.668626][ T4558] udevd[4558]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 553.702111][T22179] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 553.704773][ T4389] udevd[4389]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 553.767483][T22179] UDF-fs: unknown compression code (0) [ 553.836984][ T6000] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 553.862469][ T6000] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 553.897315][ T6000] usb 1-1: USB disconnect, device number 26 [ 554.321973][T22194] device ip6gretap3 entered promiscuous mode [ 554.723074][T22175] loop2: detected capacity change from 0 to 32768 [ 554.797605][T22175] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 554.821104][T22175] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 554.928500][T22175] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 554.964081][ T26] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 554.971574][ T26] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 554.998864][T22221] autofs4:pid:22221:autofs_fill_super: called with bogus options [ 555.062439][T22223] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 555.105655][ T26] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 555.121112][T22223] Error parsing options; rc = [-22] [ 555.131167][ T26] gfs2: fsid=syz:syz.0: jid=0: Done [ 555.136457][T22175] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 555.240899][ T8474] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 555.362565][T22231] netlink: 'syz.3.8276': attribute type 10 has an invalid length. [ 555.430889][ T8474] usb 6-1: Using ep0 maxpacket: 16 [ 555.438361][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 555.535495][ T8474] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 555.573124][ T8474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.610711][ T8474] usb 6-1: Product: syz [ 555.621221][ T8474] usb 6-1: Manufacturer: syz [ 555.631079][ T8474] usb 6-1: SerialNumber: syz [ 555.647760][ T8474] usb 6-1: config 0 descriptor?? [ 555.668021][ T8474] hub 6-1:0.0: bad descriptor, ignoring hub [ 555.704524][ T8474] hub: probe of 6-1:0.0 failed with error -5 [ 555.745659][ T8474] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input31 [ 555.783722][T22249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8284'. [ 555.840463][T22245] loop1: detected capacity change from 0 to 128 [ 555.921121][T22245] VFS: Found a Xenix FS (block size = 1024) on device loop1 [ 555.993696][T22245] syz.1.8282: attempt to access beyond end of device [ 555.993696][T22245] loop1: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 556.062115][T22245] Buffer I/O error on dev loop1, logical block 3245768, async page read [ 556.082239][ T26] usb 6-1: USB disconnect, device number 5 [ 556.199779][ T4252] sysv_free_block: flc_count > flc_size [ 556.221691][ T4252] sysv_free_block: flc_count > flc_size [ 556.225767][T22260] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 556.239421][ T4252] sysv_free_block: flc_count > flc_size [ 556.247663][ T4252] sysv_free_block: flc_count > flc_size [ 556.262530][T22263] loop3: detected capacity change from 0 to 512 [ 556.266376][T22260] bond0: (slave lo): Error: Device can not be enslaved while up [ 556.274040][ T4252] sysv_free_block: flc_count > flc_size [ 556.298655][ T4252] sysv_free_block: flc_count > flc_size [ 556.305706][ T4252] sysv_free_block: flc_count > flc_size [ 556.341316][ T4336] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 556.360736][ T4252] sysv_free_block: flc_count > flc_size [ 556.366348][ T4252] sysv_free_block: flc_count > flc_size [ 556.400739][ T4252] sysv_free_block: flc_count > flc_size [ 556.406892][ T4252] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 556.553586][T22273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 556.770805][ T26] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 556.792718][T22281] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 556.822867][T22281] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 556.948867][T22288] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8303'. [ 556.965413][ T26] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 556.990935][ T26] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 557.024811][ T26] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.064525][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.079933][T22290] loop5: detected capacity change from 0 to 4096 [ 557.088085][T22269] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 557.196249][T22295] loop0: detected capacity change from 0 to 256 [ 557.253929][T22295] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 557.263664][T22290] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 557.278635][T22293] loop3: detected capacity change from 0 to 8192 [ 557.299574][T22295] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 557.365996][T22293] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 557.477529][T22295] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 557.482727][T22293] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 557.530974][T22293] REISERFS (device loop3): using ordered data mode [ 557.537653][T22293] reiserfs: using flush barriers [ 557.564917][ T3995] usb 3-1: USB disconnect, device number 30 [ 557.600223][T22293] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 557.699703][T22306] xt_cgroup: xt_cgroup: no path or classid specified [ 557.708558][T22293] REISERFS (device loop3): checking transaction log (loop3) [ 557.728343][T22293] REISERFS (device loop3): Using r5 hash to sort names [ 557.760777][T22293] REISERFS (device loop3): using 3.5.x disk format [ 557.767808][T22293] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 558.212898][T22315] loop5: detected capacity change from 0 to 8 [ 558.304756][T22315] SQUASHFS error: lzo decompression failed, data probably corrupt [ 558.332167][T22318] netlink: 'syz.3.8316': attribute type 21 has an invalid length. [ 558.335377][T22315] SQUASHFS error: Failed to read block 0x144: -5 [ 558.371019][T22315] SQUASHFS error: Unable to read metadata cache entry [142] [ 558.380196][T22304] loop1: detected capacity change from 0 to 32768 [ 558.385059][T22318] IPv6: NLM_F_CREATE should be specified when creating new route [ 558.394969][T22315] SQUASHFS error: Unable to read directory block [142:26] [ 558.420309][T22304] [ 558.420309][T22304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 558.420309][T22304] [ 558.460332][T22320] loop2: detected capacity change from 0 to 1024 [ 558.489945][T22304] [ 558.489945][T22304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 558.489945][T22304] [ 558.529649][T22304] [ 558.529649][T22304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 558.529649][T22304] [ 558.786734][ T4261] hfsplus: bad catalog entry type [ 558.791707][T22308] loop0: detected capacity change from 0 to 32768 [ 558.874918][T22308] [ 558.874918][T22308] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 558.874918][T22308] [ 559.095957][ T5008] [ 559.095957][ T5008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.095957][ T5008] [ 559.118080][ T5008] [ 559.118080][ T5008] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.118080][ T5008] [ 559.151073][ T106] [ 559.151073][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.151073][ T106] [ 559.201587][ T4253] [ 559.201587][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.201587][ T4253] [ 559.231335][T21495] hfsplus: b-tree write err: -5, ino 4 [ 559.237346][ T4253] [ 559.237346][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 559.237346][ T4253] [ 559.476072][ T5008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.519864][ T5008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 38471 - 0 [ 559.538840][ T5008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 56772 - 0 [ 559.673428][ T5008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.697805][ T5008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 38471 - 0 [ 559.708545][ T5008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 56772 - 0 [ 559.930493][ T5008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.975646][ T5008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 38471 - 0 [ 560.017950][ T5008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 56772 - 0 [ 560.021111][T22357] __vm_enough_memory: pid: 22357, comm: syz.0.8338, no enough memory for the allocation [ 560.172364][ T5008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.193417][ T5008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 38471 - 0 [ 560.220780][ T5008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 56772 - 0 [ 560.250728][ T8474] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 560.317612][T22359] loop1: detected capacity change from 0 to 4096 [ 560.382393][T22359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 560.424977][T22346] loop5: detected capacity change from 0 to 32768 [ 560.431628][ T8474] usb 4-1: Using ep0 maxpacket: 16 [ 560.461527][ T8474] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 560.476517][ T8474] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 560.490729][ T8474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.498773][ T8474] usb 4-1: Product: syz [ 560.519927][ T8474] usb 4-1: Manufacturer: syz [ 560.530684][ T8474] usb 4-1: SerialNumber: syz [ 560.546542][T22346] read_mapping_page failed! [ 560.556691][ T8474] usb 4-1: config 0 descriptor?? [ 560.594117][T22359] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 560.620877][ T8474] hub 4-1:0.0: bad descriptor, ignoring hub [ 560.640701][ T8474] hub: probe of 4-1:0.0 failed with error -5 [ 560.674100][ T8474] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input32 [ 560.828370][T22359] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 560.832935][T20076] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 560.846812][T22359] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.8339: Failed to acquire dquot type 0 [ 560.862523][T20076] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 560.879315][T20076] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 560.890216][T20076] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 560.897828][T20076] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 560.907075][T20076] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 560.963429][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 561.140909][T22367] xfrm0 speed is unknown, defaulting to 1000 [ 561.421710][T22382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8349'. [ 561.617675][T22393] loop1: detected capacity change from 0 to 16 [ 561.668407][T22393] erofs: (device loop1): mounted with root inode @ nid 36. [ 562.030532][T22367] chnl_net:caif_netlink_parms(): no params data found [ 562.299850][T22412] netlink: 'syz.3.8357': attribute type 1 has an invalid length. [ 562.712515][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.719168][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.813393][T22367] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.836216][T22367] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.844606][T22367] device bridge_slave_0 entered promiscuous mode [ 562.951021][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 563.031230][ T8474] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 563.114069][ T4269] Bluetooth: hci5: unexpected cc 0x041a length: 7 > 1 [ 563.214562][T22367] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.230833][ T8474] usb 2-1: Using ep0 maxpacket: 8 [ 563.239185][ T8474] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.260119][T22367] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.278150][T22367] device bridge_slave_1 entered promiscuous mode [ 563.293014][ T8474] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 563.320551][ T8474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.352139][ T8474] usb 2-1: Product: syz [ 563.356348][ T8474] usb 2-1: Manufacturer: syz [ 563.390724][ T8474] usb 2-1: SerialNumber: syz [ 563.411765][ T8474] usb 2-1: config 0 descriptor?? [ 563.453890][ T8474] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 563.460901][ T8474] usb 2-1: selecting invalid altsetting 1 [ 563.766603][T22367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.878416][T22367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.891272][ T3995] usb 2-1: USB disconnect, device number 28 [ 563.923296][T22477] xt_TCPMSS: Only works on TCP SYN packets [ 563.997383][ T5008] device hsr_slave_0 left promiscuous mode [ 564.021333][ T5008] device hsr_slave_1 left promiscuous mode [ 564.043384][ T5008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 564.066592][ T5008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.070472][T22480] loop5: detected capacity change from 0 to 256 [ 564.126204][ T5008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.145469][T22480] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 564.154133][ T5008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.201387][ T5008] batman_adv: batadv0: Removing interface: macvtap0 [ 564.250829][ T3609] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 564.294314][ T3609] usb 4-1: device reset changed ep0 maxpacket size! [ 564.310475][ T22] usb 4-1: USB disconnect, device number 35 [ 564.370202][ T5008] device veth1_macvtap left promiscuous mode [ 564.410334][ T5008] device veth1_vlan left promiscuous mode [ 564.500727][ T22] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 564.687297][T22495] netlink: 'syz.1.8389': attribute type 2 has an invalid length. [ 564.702414][ T22] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 564.724976][ T22] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 564.735456][ T22] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 564.749478][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.781829][T22481] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 564.797044][ T5008] bond4 (unregistering): Released all slaves [ 564.836498][T22497] loop1: detected capacity change from 0 to 256 [ 564.912703][T22497] FAT-fs (loop1): Directory bread(block 64) failed [ 564.919477][T22497] FAT-fs (loop1): Directory bread(block 65) failed [ 564.926481][T22497] FAT-fs (loop1): Directory bread(block 66) failed [ 564.945046][T22497] FAT-fs (loop1): Directory bread(block 67) failed [ 564.964490][T22497] FAT-fs (loop1): Directory bread(block 68) failed [ 564.971352][T22497] FAT-fs (loop1): Directory bread(block 69) failed [ 564.978257][T22497] FAT-fs (loop1): Directory bread(block 70) failed [ 565.017790][T22497] FAT-fs (loop1): Directory bread(block 71) failed [ 565.024850][T22497] FAT-fs (loop1): Directory bread(block 72) failed [ 565.030786][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 565.031939][T22497] FAT-fs (loop1): Directory bread(block 73) failed [ 565.104538][ T22] usb 4-1: USB disconnect, device number 36 [ 565.312702][ T5008] bond3 (unregistering): Released all slaves [ 565.384551][ T5008] bond2 (unregistering): Released all slaves [ 565.656548][ T5008] bond1 (unregistering): Released all slaves [ 565.772936][T22509] loop3: detected capacity change from 0 to 64 [ 565.787314][ T3995] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 565.997710][ T3995] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 566.003370][T22511] loop3: detected capacity change from 0 to 4096 [ 566.013259][ T3995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.037948][ T3995] usb 2-1: config 0 descriptor?? [ 566.045839][ T3995] gspca_main: spca508-2.14.0 probing 8086:0110 [ 566.054477][T22511] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 566.090663][T22511] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 566.107425][T22511] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 566.130802][T22511] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 566.177832][T22511] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 566.201601][T22511] ntfs: volume version 3.1. [ 566.216918][T22511] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 566.228761][T22511] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 566.241208][T22511] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 566.270946][T22511] ntfs: (device loop3): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 566.284223][T22511] ntfs: (device loop3): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 566.481847][ T3995] gspca_spca508: reg_read err -71 [ 566.487438][ T3995] gspca_spca508: reg_read err -71 [ 566.493160][ T3995] gspca_spca508: reg_read err -71 [ 566.501092][ T3995] gspca_spca508: reg_read err -71 [ 566.518734][ T3995] gspca_spca508: reg write: error -71 [ 566.524731][ T3995] spca508: probe of 2-1:0.0 failed with error -71 [ 566.544737][ T3995] usb 2-1: USB disconnect, device number 29 [ 566.656069][ T5008] team0 (unregistering): Port device team_slave_1 removed [ 566.710351][ T5008] team0 (unregistering): Port device team_slave_0 removed [ 566.758207][ T5008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.110973][ T4269] Bluetooth: hci3: command 0x040f tx timeout [ 567.175664][ T5008] team0 (unregistering): Port device bond0 removed [ 567.340236][ T5008] bond0 (unregistering): Released all slaves [ 567.370792][ T8474] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 567.432029][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8398'. [ 567.444810][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8398'. [ 567.501441][T22513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8398'. [ 567.562772][ T8474] usb 2-1: Using ep0 maxpacket: 8 [ 567.565495][T22367] team0: Port device team_slave_0 added [ 567.572237][ T8474] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 567.587347][T22367] team0: Port device team_slave_1 added [ 567.614282][ T8474] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.636599][ T8474] usb 2-1: Product: syz [ 567.664885][ T8474] usb 2-1: Manufacturer: syz [ 567.669558][ T8474] usb 2-1: SerialNumber: syz [ 567.678516][T22367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.690954][T22367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.727734][ T8474] usb 2-1: config 0 descriptor?? [ 567.746734][T22367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.785324][T22367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.832338][T22367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.870971][ T6000] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 567.938801][T22367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.955390][ T8474] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 567.974654][ T8474] dvb_usb_af9015: probe of 2-1:0.0 failed with error -22 [ 568.014156][ T8474] usb 2-1: USB disconnect, device number 30 [ 568.072451][ T6000] usb 6-1: config 0 has an invalid interface number: 156 but max is 0 [ 568.082774][ T6000] usb 6-1: config 0 has no interface number 0 [ 568.091101][ T6000] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 568.123447][ T6000] usb 6-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 568.148177][ T6000] usb 6-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 568.179791][ T6000] usb 6-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 568.199450][ T6000] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.228686][ T6000] usb 6-1: config 0 descriptor?? [ 568.262495][ T6000] gspca_main: spca561-2.14.0 probing abcd:cdee [ 568.412501][T22367] device hsr_slave_0 entered promiscuous mode [ 568.429220][T22367] device hsr_slave_1 entered promiscuous mode [ 568.449250][T22367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.466569][ T6000] spca561: probe of 6-1:0.156 failed with error -22 [ 568.474619][ T6000] usb 6-1: MIDIStreaming interface descriptor not found [ 568.507779][T22367] Cannot create hsr debugfs directory [ 568.567515][ T6000] usb 6-1: USB disconnect, device number 6 [ 568.973918][T22554] PKCS7: Unknown OID: [4] 0.0 [ 568.997048][T22554] PKCS7: Only support pkcs7_signedData type [ 569.190726][ T4269] Bluetooth: hci3: command 0x0419 tx timeout [ 569.443671][T22576] tmpfs: Bad value for 'mpol' [ 569.534509][T22367] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 569.611940][T22367] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 569.642687][T22367] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.680806][T22367] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 569.938382][T22589] loop1: detected capacity change from 0 to 1024 [ 569.987407][T22367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 570.057970][T22589] fuse: Invalid rootmode [ 570.072756][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 570.102298][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 570.180386][T22367] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.188376][ T75] hfsplus: b-tree write err: -5, ino 4 [ 570.238981][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 570.268377][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 570.294443][T21495] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.301627][T21495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.318560][T22598] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 22598 comm: syz.1.8433) [ 570.332333][T22593] loop3: detected capacity change from 0 to 8192 [ 570.339848][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 570.360338][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 570.379155][T22593] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 570.401424][T21495] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.408567][T21495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.448629][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 570.478889][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 570.518240][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 570.563763][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 570.596848][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 570.637042][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 570.655661][T22604] loop1: detected capacity change from 0 to 64 [ 570.662540][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 570.684241][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 570.729301][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 570.761117][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 570.811370][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 570.882168][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 570.922509][T22367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 571.263247][T22624] loop0: detected capacity change from 0 to 1764 [ 571.775333][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 571.794015][ T4976] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 571.815731][T22367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.949800][T22658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8454'. [ 572.010806][T22658] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8454'. [ 572.450924][ T3995] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 572.560806][ T8470] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 572.650989][ T3995] usb 6-1: Using ep0 maxpacket: 16 [ 572.660397][ T3995] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 572.705175][ T3995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.727886][ T3995] usb 6-1: Product: syz [ 572.742552][ T3995] usb 6-1: Manufacturer: syz [ 572.750894][ T8470] usb 1-1: Using ep0 maxpacket: 16 [ 572.763061][ T3995] usb 6-1: SerialNumber: syz [ 572.766304][ T8470] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 572.792699][ T3995] usb 6-1: config 0 descriptor?? [ 572.797714][ T8470] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 572.836593][ T8470] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 572.899073][ T8470] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 572.920267][T22695] loop3: detected capacity change from 0 to 764 [ 572.950417][T22695] rock: directory entry would overflow storage [ 572.953144][ T8470] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 572.980904][T22695] rock: sig=0x4654, size=5, remaining=4 [ 572.997446][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 573.011202][ T3995] usb 6-1: ignoring: not an USB2CAN converter [ 573.018875][ T8470] usb 1-1: config 1 interface 0 has no altsetting 0 [ 573.044746][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 573.071026][ T8470] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 573.082603][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 573.100559][ T8470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.122186][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 573.147547][T22367] device veth0_vlan entered promiscuous mode [ 573.148523][ T8470] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 573.162869][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 573.200242][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 573.227741][T12233] usb 6-1: USB disconnect, device number 7 [ 573.274673][T22367] device veth1_vlan entered promiscuous mode [ 573.296626][T22705] loop3: detected capacity change from 0 to 512 [ 573.381882][ T8470] scsi host1: usb-storage 1-1:1.0 [ 573.385178][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 573.410082][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 573.419608][T22705] __quota_error: 5 callbacks suppressed [ 573.419618][T22705] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 573.428419][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 573.449583][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 573.460485][T22705] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 573.462014][T22367] device veth0_macvtap entered promiscuous mode [ 573.481920][T22367] device veth1_macvtap entered promiscuous mode [ 573.521987][T22705] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.8471: Failed to acquire dquot type 0 [ 573.547090][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.586686][T22705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.8471: bg 0: block 64: padding at end of block bitmap is not set [ 573.589816][ T8474] usb 1-1: USB disconnect, device number 27 [ 573.630935][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.641326][T22705] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 573.670936][T22705] EXT4-fs (loop3): 1 truncate cleaned up [ 573.676770][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.687861][T22705] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 573.702738][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.730672][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.748182][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.768987][T22705] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 573.826529][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 573.837639][T22705] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 573.853531][T22705] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.8471: Failed to acquire dquot type 0 [ 573.860691][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.926030][T22367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.948873][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 573.985258][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 574.002444][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 574.011787][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 574.033700][T22723] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8474'. [ 574.061275][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.094319][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 574.113774][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.153818][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.194297][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.242372][T22728] loop3: detected capacity change from 0 to 16 [ 574.245585][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.292721][T22728] erofs: (device loop3): mounted with root inode @ nid 36. [ 574.311780][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.353026][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.391641][T22716] loop1: detected capacity change from 0 to 32768 [ 574.398177][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.435925][T22367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 574.460054][T22716] JBD2: Ignoring recovery information on journal [ 574.467092][T22367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 574.567417][T22367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.569177][T22736] loop5: detected capacity change from 0 to 256 [ 574.633030][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 574.649963][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 574.679363][T22367] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.708502][T22716] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 574.728200][T22739] loop3: detected capacity change from 0 to 256 [ 574.737974][T22367] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.788741][T22739] FAT-fs (loop3): Directory bread(block 64) failed [ 574.800777][T22367] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.840772][T22367] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.841294][T22739] FAT-fs (loop3): Directory bread(block 65) failed [ 574.964642][T22739] FAT-fs (loop3): Directory bread(block 66) failed [ 575.011035][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 575.017810][T22739] FAT-fs (loop3): Directory bread(block 67) failed [ 575.072663][T22739] FAT-fs (loop3): Directory bread(block 68) failed [ 575.079235][T22739] FAT-fs (loop3): Directory bread(block 69) failed [ 575.126396][T22746] loop1: detected capacity change from 0 to 512 [ 575.140803][T22739] FAT-fs (loop3): Directory bread(block 70) failed [ 575.147457][T22739] FAT-fs (loop3): Directory bread(block 71) failed [ 575.181324][T22739] FAT-fs (loop3): Directory bread(block 72) failed [ 575.187923][T22739] FAT-fs (loop3): Directory bread(block 73) failed [ 575.233344][T22746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 575.330456][T22746] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 575.525775][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.551936][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.564514][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 575.635070][ T5008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.681389][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 575.686102][ T5008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.764398][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 576.298231][T22787] loop3: detected capacity change from 0 to 16 [ 576.306912][T22784] netlink: 'syz.1.8496': attribute type 3 has an invalid length. [ 576.372524][T22787] erofs: (device loop3): mounted with root inode @ nid 36. [ 576.461136][T22787] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 576.567616][ T27] audit: type=1326 audit(577.542:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.8499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 576.628129][ T27] audit: type=1326 audit(577.582:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.8499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 576.650244][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.737389][ T27] audit: type=1326 audit(577.582:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22794 comm="syz.1.8499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 576.821789][T22800] ceph: Path missing in source [ 576.830887][ T3995] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 576.964499][ T27] audit: type=1326 audit(577.942:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.1.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 576.986239][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.000211][ T27] audit: type=1326 audit(577.942:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.1.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 577.029399][ T27] audit: type=1326 audit(577.972:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22804 comm="syz.1.8503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 577.051189][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.063085][ T3995] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 577.100768][ T3995] usb 7-1: config 220 has an invalid interface descriptor of length 5, skipping [ 577.109954][ T3995] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 577.186732][ T3995] usb 7-1: config 220 has no interface number 2 [ 577.200507][T22773] loop0: detected capacity change from 0 to 32768 [ 577.212008][ T3995] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 577.240743][ T3995] usb 7-1: config 220 interface 0 has no altsetting 0 [ 577.247653][ T3995] usb 7-1: config 220 interface 76 has no altsetting 0 [ 577.291731][ T3995] usb 7-1: config 220 interface 1 has no altsetting 0 [ 577.316291][ T3995] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 577.350913][ T3995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.358950][ T3995] usb 7-1: Product: syz [ 577.376785][ T3995] usb 7-1: Manufacturer: syz [ 577.381976][ T3995] usb 7-1: SerialNumber: syz [ 577.389531][T22773] XFS (loop0): Mounting V5 Filesystem [ 577.475677][T22797] loop5: detected capacity change from 0 to 32768 [ 577.510824][T22797] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 577.542700][T22773] XFS (loop0): Ending clean mount [ 577.576461][T22773] XFS (loop0): Quotacheck needed: Please wait. [ 577.592418][T22823] loop1: detected capacity change from 0 to 2048 [ 577.620073][ T3995] usb 7-1: selecting invalid altsetting 0 [ 577.642984][ T3995] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 577.675202][ T3995] usb 7-1: No valid video chain found. [ 577.705901][T22827] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 577.740420][ T3995] usb 7-1: selecting invalid altsetting 0 [ 577.770581][ T3995] usbtest: probe of 7-1:220.1 failed with error -22 [ 577.792926][T22823] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 577.827125][ T3995] usb 7-1: USB disconnect, device number 2 [ 577.898882][T22823] Remounting filesystem read-only [ 577.947734][T22773] XFS (loop0): Quotacheck: Done. [ 577.987196][ T4558] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 9 [ 578.022139][T22773] XFS: no-recovery mounts must be read-only. [ 578.081598][ T4252] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 578.230926][ T4253] XFS (loop0): Unmounting Filesystem [ 578.489336][T22852] loop1: detected capacity change from 0 to 256 [ 578.846857][ T8468] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 578.917065][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 578.917080][ T27] audit: type=1326 audit(579.892:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22870 comm="syz.1.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 578.991842][ T27] audit: type=1326 audit(579.932:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22870 comm="syz.1.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 579.034338][ T27] audit: type=1326 audit(579.932:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22870 comm="syz.1.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 579.060868][ T8468] usb 7-1: Using ep0 maxpacket: 32 [ 579.089474][ T8468] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 579.121545][ T8468] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.161462][ T8468] usb 7-1: config 0 has no interface number 0 [ 579.167638][ T8468] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 579.197644][ T27] audit: type=1326 audit(579.932:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22870 comm="syz.1.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 579.213338][ T8468] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 579.241082][ T8468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.260732][ T8468] usb 7-1: Product: syz [ 579.264947][ T8468] usb 7-1: Manufacturer: syz [ 579.281311][ T8468] usb 7-1: SerialNumber: syz [ 579.302558][ T27] audit: type=1326 audit(579.932:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22870 comm="syz.1.8526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482838e929 code=0x7ffc0000 [ 579.318422][ T8468] usb 7-1: config 0 descriptor?? [ 579.330711][T22880] loop3: detected capacity change from 0 to 1024 [ 579.370769][ T8468] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 579.374725][T22880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 579.378406][ T8468] radio-si470x: probe of 7-1:0.35 failed with error -5 [ 579.539733][T22880] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 579.567342][ T8468] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 579.583091][ T8468] usbhid 7-1:0.35: couldn't find an input interrupt endpoint [ 579.828971][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 579.953115][ T3995] usb 7-1: USB disconnect, device number 3 [ 580.001242][T22901] loop5: detected capacity change from 0 to 256 [ 580.062893][T22901] FAT-fs (loop5): Directory bread(block 64) failed [ 580.098230][T22901] FAT-fs (loop5): Directory bread(block 65) failed [ 580.116950][T22901] FAT-fs (loop5): Directory bread(block 66) failed [ 580.135459][T22901] FAT-fs (loop5): Directory bread(block 67) failed [ 580.171203][T22901] FAT-fs (loop5): Directory bread(block 68) failed [ 580.187677][T22901] FAT-fs (loop5): Directory bread(block 69) failed [ 580.207815][T22901] FAT-fs (loop5): Directory bread(block 70) failed [ 580.234194][T22901] FAT-fs (loop5): Directory bread(block 71) failed [ 580.273692][T22901] FAT-fs (loop5): Directory bread(block 72) failed [ 580.280261][T22901] FAT-fs (loop5): Directory bread(block 73) failed [ 580.438685][ T27] audit: type=1800 audit(581.412:210): pid=22901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8536" name="cgroup.controllers" dev="loop5" ino=1048698 res=0 errno=0 [ 580.491150][T22901] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000656c) [ 580.869192][T22928] loop0: detected capacity change from 0 to 512 [ 580.987299][T22931] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8546'. [ 580.996793][T22928] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 581.011293][T22928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 581.021007][T22928] System zones: 0-1, 15-15, 18-18, 34-34 [ 581.027754][T22928] EXT4-fs (loop0): orphan cleanup on readonly fs [ 581.111185][T22928] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 581.141001][T22928] EXT4-fs warning (device loop0): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 581.171315][T22928] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 581.213285][T22928] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.8544: bad orphan inode 16 [ 581.250961][T22928] ext4_test_bit(bit=15, block=18) = 1 [ 581.256381][T22928] is_bad_inode(inode)=0 [ 581.299689][T22928] NEXT_ORPHAN(inode)=0 [ 581.323964][T22947] UBIFS error (pid: 22947): cannot open "(null)", error -22 [ 581.340334][T22928] max_ino=32 [ 581.343063][T22949] loop5: detected capacity change from 0 to 64 [ 581.381635][T22928] i_nlink=2 [ 581.384880][T22928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 581.472188][T22928] fscrypt (loop0, inode 16): Error -61 getting encryption context [ 581.556125][T22956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8556'. [ 581.631788][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 581.638039][T22956] netlink: 'syz.3.8556': attribute type 2 has an invalid length. [ 581.684614][T22956] netlink: 'syz.3.8556': attribute type 1 has an invalid length. [ 581.694794][T22956] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8556'. [ 582.019786][T22969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8563'. [ 582.046903][T22973] loop1: detected capacity change from 0 to 16 [ 582.061071][T22973] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 582.068145][T22969] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8563'. [ 582.254795][T22979] loop0: detected capacity change from 0 to 256 [ 582.408183][ T75] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.690007][ T75] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.792682][ T75] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.841839][T22993] netlink: 'syz.6.8572': attribute type 5 has an invalid length. [ 583.004072][ T75] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.161160][T22998] loop1: detected capacity change from 0 to 1764 [ 583.259120][T22998] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 583.583667][T23019] loop3: detected capacity change from 0 to 128 [ 583.607792][T23020] netlink: 920 bytes leftover after parsing attributes in process `syz.6.8582'. [ 583.649945][T23021] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8584'. [ 583.667805][T23020] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8582'. [ 583.721037][T23021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8584'. [ 583.971914][ T4259] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 583.985541][ T4259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 583.996298][ T4259] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 584.005797][ T4259] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 584.015110][ T4259] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 584.028209][T20076] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 584.326345][ T27] audit: type=1400 audit(585.302:211): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=23040 comm="syz.3.8591" [ 584.352549][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.373422][T23025] xfrm0 speed is unknown, defaulting to 1000 [ 584.633286][ T8474] xfrm0 speed is unknown, defaulting to 1000 [ 584.772934][T23055] loop1: detected capacity change from 0 to 2048 [ 584.813849][T23055] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 584.997833][ T27] audit: type=1800 audit(585.972:212): pid=23055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8596" name="bus" dev="loop1" ino=1367 res=0 errno=0 [ 585.017754][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.062633][T23039] loop0: detected capacity change from 0 to 32768 [ 585.150894][T23039] ERROR: (device loop0): diAllocAG: error reading iag [ 585.150894][T23039] [ 585.180073][T23025] chnl_net:caif_netlink_parms(): no params data found [ 585.240919][T23039] ialloc: diAlloc returned -5! [ 585.407149][T23071] loop1: detected capacity change from 0 to 8 [ 585.613800][T23025] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.622938][T23025] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.661970][T23025] device bridge_slave_0 entered promiscuous mode [ 586.031797][T23025] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.039631][T23025] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.049117][T23058] loop3: detected capacity change from 0 to 32768 [ 586.071043][ T4269] Bluetooth: hci5: command 0x0409 tx timeout [ 586.078955][T23025] device bridge_slave_1 entered promiscuous mode [ 586.564306][T23025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.709878][T23115] loop3: detected capacity change from 0 to 64 [ 586.724815][T23114] cgroup: Invalid name [ 586.852714][ T75] device hsr_slave_0 left promiscuous mode [ 586.877257][ T75] device hsr_slave_1 left promiscuous mode [ 586.930121][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.952608][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.990736][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.017956][T23117] loop1: detected capacity change from 0 to 4096 [ 587.031567][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.037869][T23124] openvswitch: netlink: Message has 8 unknown bytes. [ 587.064873][ T75] device bridge_slave_1 left promiscuous mode [ 587.077845][T23117] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 587.100972][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.169569][ T75] device bridge_slave_0 left promiscuous mode [ 587.180720][ T8470] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 587.217491][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.307281][T23127] loop6: detected capacity change from 0 to 2048 [ 587.339317][ T75] device veth1_macvtap left promiscuous mode [ 587.356911][ T75] device veth0_macvtap left promiscuous mode [ 587.372663][ T75] device veth1_vlan left promiscuous mode [ 587.387013][ T8470] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 587.410865][ T75] device veth0_vlan left promiscuous mode [ 587.420521][ T8470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.450814][ T8470] usb 1-1: Product: syz [ 587.461560][ T8470] usb 1-1: Manufacturer: syz [ 587.471698][ T8470] usb 1-1: SerialNumber: syz [ 587.519379][ T8470] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 587.587731][ T8470] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 587.718816][T23135] loop1: detected capacity change from 0 to 1024 [ 587.839823][T23135] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 587.965943][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 588.030580][ T3995] usb 1-1: USB disconnect, device number 28 [ 588.151476][T20076] Bluetooth: hci5: command 0x041b tx timeout [ 588.491455][T23158] loop1: detected capacity change from 0 to 4096 [ 588.520503][T23158] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 588.630904][ T8470] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 588.644889][ T8470] ath9k_htc: Failed to initialize the device [ 588.655034][ T3995] usb 1-1: ath9k_htc: USB layer deinitialized [ 589.089899][ T75] team0 (unregistering): Port device team_slave_1 removed [ 589.147407][ T75] team0 (unregistering): Port device team_slave_0 removed [ 589.197482][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.256334][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.646728][ T75] bond0 (unregistering): (slave team0): Releasing backup interface [ 589.802369][ T75] bond0 (unregistering): Released all slaves [ 589.887207][T23025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.899209][T23130] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8625'. [ 589.908436][T23130] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8625'. [ 589.918082][T23130] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8625'. [ 589.928559][T23130] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 589.944340][T23144] netlink: 'syz.6.8627': attribute type 1 has an invalid length. [ 590.211770][T23025] team0: Port device team_slave_0 added [ 590.231692][T20076] Bluetooth: hci5: command 0x040f tx timeout [ 590.251556][T23025] team0: Port device team_slave_1 added [ 590.329890][T23025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.363747][T23025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.481337][T23025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.521252][T23025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.532239][T23025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.640206][T23025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.849053][T23025] device hsr_slave_0 entered promiscuous mode [ 590.851322][ T22] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 590.866806][T23025] device hsr_slave_1 entered promiscuous mode [ 590.941545][T23025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.949195][T23025] Cannot create hsr debugfs directory [ 591.072421][ T22] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 591.103822][ T22] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 591.149833][ T22] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 591.190178][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.191416][T23212] netlink: 'syz.3.8653': attribute type 3 has an invalid length. [ 591.210149][T23190] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 591.230395][T23212] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8653'. [ 591.484452][ T8468] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 591.508397][T23025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 591.559656][ T22] usb 7-1: USB disconnect, device number 4 [ 591.610282][T23025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 591.659516][T23025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 591.691251][ T8468] usb 2-1: Using ep0 maxpacket: 32 [ 591.699191][ T8468] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 591.701571][T23025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 591.746164][ T8468] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 591.780888][ T8468] usb 2-1: config 0 has no interface number 0 [ 591.787191][ T8468] usb 2-1: config 0 interface 200 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 591.805692][ T8468] usb 2-1: config 0 interface 200 has no altsetting 0 [ 591.815810][ T8468] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0306, bcdDevice=d3.fc [ 591.825184][ T8468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.834033][ T8468] usb 2-1: Product: syz [ 591.838224][ T8468] usb 2-1: Manufacturer: syz [ 591.843205][ T8468] usb 2-1: SerialNumber: syz [ 591.856855][ T8468] usb 2-1: config 0 descriptor?? [ 591.904196][T23025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.931632][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 591.949784][ T4978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 591.964111][T23025] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.984690][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 592.001672][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 592.020082][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.027253][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.047032][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 592.060788][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 592.069551][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.079989][ T8468] qmi_wwan: probe of 2-1:0.200 failed with error -22 [ 592.095907][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.103116][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.132562][ T8468] usb 2-1: USB disconnect, device number 31 [ 592.142099][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 592.181740][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 592.238442][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 592.266916][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 592.297032][T23241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.304341][T23241] IPv6: NLM_F_CREATE should be set when creating new route [ 592.311665][T23241] IPv6: NLM_F_CREATE should be set when creating new route [ 592.326003][T20076] Bluetooth: hci5: command 0x0419 tx timeout [ 592.346844][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 592.414357][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 592.462058][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 592.502484][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 592.525738][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 592.577050][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 592.591459][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 592.612566][T23025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 593.074675][T23272] loop6: detected capacity change from 0 to 128 [ 593.096080][T23272] VFS: Found a Xenix FS (block size = 1024) on device loop6 [ 593.222857][T22367] sysv_free_block: flc_count > flc_size [ 593.243470][T22367] sysv_free_block: flc_count > flc_size [ 593.261338][T22367] sysv_free_block: flc_count > flc_size [ 593.286618][T22367] sysv_free_block: flc_count > flc_size [ 593.330881][T22367] sysv_free_block: flc_count > flc_size [ 593.336470][T22367] sysv_free_block: flc_count > flc_size [ 593.351825][T22367] sysv_free_block: flc_count > flc_size [ 593.357412][T22367] sysv_free_block: flc_count > flc_size [ 593.367404][T22367] sysv_free_block: flc_count > flc_size [ 593.373270][T22367] sysv_free_block: flc_count > flc_size [ 593.380248][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 593.381697][T22367] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 593.403460][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 593.425261][T23025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.465962][T23317] loop1: detected capacity change from 0 to 4096 [ 594.533660][T23328] overlayfs: workdir and upperdir must be separate subtrees [ 594.534827][T23317] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 594.630775][T23317] ntfs3: loop1: Failed to load $Extend. [ 594.783436][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 594.802985][T21495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 594.880733][T20993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 594.889150][T20993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 594.926027][T23025] device veth0_vlan entered promiscuous mode [ 594.936981][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 594.976211][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 595.011298][T23025] device veth1_vlan entered promiscuous mode [ 595.088731][T23311] loop0: detected capacity change from 0 to 32768 [ 595.121999][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 595.130923][ T8470] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 595.131117][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 595.185586][T23311] [ 595.185586][T23311] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 595.185586][T23311] [ 595.201546][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 595.237588][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 595.266438][T23025] device veth0_macvtap entered promiscuous mode [ 595.294273][T23025] device veth1_macvtap entered promiscuous mode [ 595.322364][ T8470] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 595.353266][ T8470] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 595.364089][T21495] read_mapping_page failed! [ 595.364364][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.368688][T21495] ERROR: (device loop0): txCommit: [ 595.368688][T21495] [ 595.389490][T21495] ERROR: (device loop0): remounting filesystem as read-only [ 595.397275][ T8470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.430880][T21495] jfs_write_inode: jfs_commit_inode failed! [ 595.437018][ T4253] [ 595.437018][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 595.437018][ T4253] [ 595.448009][ T8470] usb 4-1: Product: syz [ 595.460863][ T8470] usb 4-1: Manufacturer: syz [ 595.473192][ T4253] [ 595.473192][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 595.473192][ T4253] [ 595.494593][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.505076][ T8470] usb 4-1: SerialNumber: syz [ 595.528540][ T8470] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 595.554927][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.580918][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.613377][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.631413][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.641410][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.653152][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.679782][T23025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.693462][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.732394][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.748327][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.759491][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.770177][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.782306][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.792767][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.804028][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.815246][T23025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.835777][T23025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.857518][T23025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.872496][T23351] netlink: 'syz.1.8702': attribute type 24 has an invalid length. [ 595.888618][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 595.907249][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 595.918341][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 595.952237][ T8470] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 595.968808][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 596.007978][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 596.030090][ T8470] usb 4-1: USB disconnect, device number 37 [ 596.070100][ T4992] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 596.099099][T23025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.109033][T23025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.118063][T23025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.128346][T23025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.304491][T23369] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8706'. [ 596.336107][T20993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.354566][T20993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.408674][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 596.479161][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.503173][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.509088][T23376] loop6: detected capacity change from 0 to 64 [ 596.579036][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 596.901135][T23388] loop7: detected capacity change from 0 to 164 [ 597.007226][T23388] Unable to read rock-ridge attributes [ 597.071294][T23395] device ip6tnl3 entered promiscuous mode [ 597.548078][T23417] overlayfs: workdir and upperdir must be separate subtrees [ 597.704887][T23426] netlink: 'syz.6.8729': attribute type 10 has an invalid length. [ 597.803215][T23429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8730'. [ 597.866666][T23429] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8730'. [ 597.887883][T23430] loop0: detected capacity change from 0 to 2048 [ 598.006595][T23430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 598.156994][T23430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.8731: bg 0: block 345: padding at end of block bitmap is not set [ 598.267141][T23405] loop7: detected capacity change from 0 to 32768 [ 598.290093][T23430] EXT4-fs (loop0): Remounting filesystem read-only [ 598.345474][T23405] jfs_strtoUCS: char2uni returned -22. [ 598.377352][T23405] charset = cp949, char = 0xd4 [ 598.417736][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 599.038258][T23474] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8748'. [ 599.172252][T23482] loop7: detected capacity change from 0 to 512 [ 599.269958][T23482] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 599.392962][T23482] EXT4-fs (loop7): re-mounted. Quota mode: writeback. [ 599.537524][T23025] EXT4-fs (loop7): unmounting filesystem. [ 599.625865][T23501] netlink: 'syz.3.8759': attribute type 1 has an invalid length. [ 599.670899][ T5995] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 599.838927][T23508] loop0: detected capacity change from 0 to 256 [ 599.864124][ T5995] usb 7-1: Using ep0 maxpacket: 32 [ 599.890062][ T5995] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.939974][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.989380][ T5995] usb 7-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 600.018679][ T5995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.047260][ T5995] usb 7-1: Product: syz [ 600.056578][ T5995] usb 7-1: Manufacturer: syz [ 600.077759][ T5995] usb 7-1: SerialNumber: syz [ 600.111675][ T5995] usb 7-1: config 0 descriptor?? [ 600.147220][ T5995] qmi_wwan: probe of 7-1:0.0 failed with error -22 [ 600.162262][T23522] xt_TCPMSS: Only works on TCP SYN packets [ 600.374575][ T4303] usb 7-1: USB disconnect, device number 5 [ 600.406703][T23530] loop0: detected capacity change from 0 to 512 [ 600.486082][T23530] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 600.590307][T23530] EXT4-fs (loop0): re-mounted. Quota mode: writeback. [ 600.712995][T23512] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 600.857752][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 600.886044][T23549] loop7: detected capacity change from 0 to 256 [ 600.938906][T23549] FAT-fs (loop7): Directory bread(block 64) failed [ 600.962398][T23549] FAT-fs (loop7): Directory bread(block 65) failed [ 600.972873][T23549] FAT-fs (loop7): Directory bread(block 66) failed [ 600.979447][T23549] FAT-fs (loop7): Directory bread(block 67) failed [ 601.012684][T23549] FAT-fs (loop7): Directory bread(block 68) failed [ 601.019287][T23549] FAT-fs (loop7): Directory bread(block 69) failed [ 601.034458][T23549] FAT-fs (loop7): Directory bread(block 70) failed [ 601.075960][T23549] FAT-fs (loop7): Directory bread(block 71) failed [ 601.086090][T23549] FAT-fs (loop7): Directory bread(block 72) failed [ 601.140486][T23549] FAT-fs (loop7): Directory bread(block 73) failed [ 601.613051][T23573] netlink: 'syz.7.8784': attribute type 1 has an invalid length. [ 601.638557][T23573] netlink: 'syz.7.8784': attribute type 2 has an invalid length. [ 601.937599][T23587] loop6: detected capacity change from 0 to 1764 [ 601.990899][ T4269] Bluetooth: hci0: command 0x080f tx timeout [ 602.098721][T23594] netlink: 'syz.0.8793': attribute type 1 has an invalid length. [ 602.470579][T23611] binder: 23610:23611 ioctl c00c6211 9999999999999999 returned -14 [ 602.649748][T23620] netlink: 'syz.7.8804': attribute type 1 has an invalid length. [ 602.768740][T23626] xt_nat: multiple ranges no longer supported [ 603.406980][T23658] netlink: 'syz.3.8819': attribute type 5 has an invalid length. [ 603.818323][T23676] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8827'. [ 604.070198][T23690] loop3: detected capacity change from 0 to 16 [ 604.103790][T23690] erofs: (device loop3): mounted with root inode @ nid 36. [ 604.493927][T23706] netlink: 'syz.6.8840': attribute type 1 has an invalid length. [ 604.675935][T23709] loop0: detected capacity change from 0 to 2048 [ 604.780675][T23718] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 604.813652][T23709] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 604.816534][T23722] loop6: detected capacity change from 0 to 8 [ 604.839866][T23709] Remounting filesystem read-only [ 605.051073][ T4253] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 605.474129][T23753] overlayfs: missing 'lowerdir' [ 605.500829][T23752] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 605.550304][T23752] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 605.613669][T23752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.678546][T23752] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 605.716314][T23752] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 606.056577][T23771] loop7: detected capacity change from 0 to 1024 [ 606.341161][T21495] hfsplus: b-tree write err: -5, ino 4 [ 606.413642][T23783] ERROR: device name not specified. [ 606.715275][T23798] loop7: detected capacity change from 0 to 64 [ 606.731492][T23794] loop0: detected capacity change from 0 to 4096 [ 606.790319][T23759] loop1: detected capacity change from 0 to 32768 [ 606.799979][T23794] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 606.943198][T23759] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 606.970721][T23794] ntfs3: loop0: failed to convert "c46c" to koi8-r [ 607.056869][T23759] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 607.457874][T23813] loop6: detected capacity change from 0 to 4096 [ 607.489837][T23813] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 607.508680][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 607.637719][T23820] loop7: detected capacity change from 0 to 256 [ 608.031004][ T51] ntfs3: loop6: ntfs3_write_inode r=1e failed, -22. [ 608.078211][T22367] ntfs3: loop6: ntfs_evict_inode r=1e failed, -22. [ 608.108825][T22367] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 608.118244][T23830] netlink: 'syz.3.8888': attribute type 10 has an invalid length. [ 608.706928][T23860] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 608.714840][T23860] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 608.991453][T23874] binder: 23872:23874 ioctl 400c620e 0 returned -14 [ 609.445955][T23895] netlink: 'syz.6.8914': attribute type 1 has an invalid length. [ 609.479077][T23895] netlink: 'syz.6.8914': attribute type 2 has an invalid length. [ 609.513009][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8914'. [ 609.711116][T23905] loop3: detected capacity change from 0 to 512 [ 609.770424][T23905] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 609.791881][T23910] netlink: 140 bytes leftover after parsing attributes in process `syz.6.8920'. [ 609.831259][T23910] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 609.948850][T23905] block device autoloading is deprecated and will be removed. [ 609.953637][T23915] loop1: detected capacity change from 0 to 128 [ 609.972940][T23905] EXT4-fs (loop3): couldn't read superblock of external journal [ 610.108123][T23918] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8923'. [ 610.387767][T23888] loop7: detected capacity change from 0 to 32768 [ 610.411650][T23925] device lo entered promiscuous mode [ 610.417663][T23925] device tunl0 entered promiscuous mode [ 610.450177][T23930] loop3: detected capacity change from 0 to 1024 [ 610.454432][T23925] device gre0 entered promiscuous mode [ 610.473116][T23888] [ 610.473116][T23888] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.473116][T23888] [ 610.486671][T23925] device gretap0 entered promiscuous mode [ 610.512928][T23930] EXT4-fs: Ignoring removed orlov option [ 610.529980][T23925] device erspan0 entered promiscuous mode [ 610.541594][T23930] EXT4-fs: Ignoring removed nomblk_io_submit option [ 610.545619][T23888] ERROR: (device loop7): diWrite: ixpxd invalid [ 610.545619][T23888] [ 610.567844][T23925] device ip_vti0 entered promiscuous mode [ 610.581751][T23925] device ip6_vti0 entered promiscuous mode [ 610.596066][T23930] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 610.618143][T23930] System zones: 0-1, 3-36 [ 610.624245][T23925] device sit0 entered promiscuous mode [ 610.633573][T23925] device ip6tnl0 entered promiscuous mode [ 610.640137][T23925] device ip6gre0 entered promiscuous mode [ 610.647346][T23925] device syz_tun entered promiscuous mode [ 610.652269][T23930] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 610.661843][T23925] device ip6gretap0 entered promiscuous mode [ 610.668604][T23925] device bridge0 entered promiscuous mode [ 610.675656][T23925] device vcan0 entered promiscuous mode [ 610.681951][T23925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 610.689768][T23925] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 610.699624][T23925] device bond0 entered promiscuous mode [ 610.706196][T23925] device bond_slave_0 entered promiscuous mode [ 610.706271][T23888] ERROR: (device loop7): txCommit: [ 610.706271][T23888] [ 610.713456][T23925] device bond_slave_1 entered promiscuous mode [ 610.728262][T23925] device team0 entered promiscuous mode [ 610.734168][T23925] device team_slave_0 entered promiscuous mode [ 610.760137][T23925] device team_slave_1 entered promiscuous mode [ 610.804236][T23925] device dummy0 entered promiscuous mode [ 610.820974][T23925] device nlmon0 entered promiscuous mode [ 610.822070][T23025] [ 610.822070][T23025] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.822070][T23025] [ 610.847812][T23025] [ 610.847812][T23025] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 610.847812][T23025] [ 610.864740][T23925] device caif0 entered promiscuous mode [ 610.870531][T23925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.886419][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 611.495043][ T27] audit: type=1400 audit(612.472:213): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=23960 comm="syz.3.8940" [ 611.588824][T23969] loop1: detected capacity change from 0 to 1024 [ 611.620935][ T4303] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 611.638631][T23969] EXT4-fs: Ignoring removed orlov option [ 611.670952][T23969] EXT4-fs: Ignoring removed nomblk_io_submit option [ 611.740243][T23969] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 611.822419][ T4303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.828472][T23969] System zones: 0-1, 3-36 [ 611.851332][T23969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 611.865982][ T4303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 611.888148][T23979] device team0 left promiscuous mode [ 611.904176][T23979] device team_slave_0 left promiscuous mode [ 611.924751][ T4303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 611.950962][T23979] device team_slave_1 left promiscuous mode [ 611.962889][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 612.020106][ T4303] usb 1-1: SerialNumber: syz [ 612.045578][ T4303] usb 1-1: 0:2 : does not exist [ 612.076367][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 612.104963][T23985] loop7: detected capacity change from 0 to 512 [ 612.166322][T23985] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 612.231192][T23985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0102] [ 612.240079][T23985] EXT4-fs (loop7): orphan cleanup on readonly fs [ 612.262987][T23985] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.8949: bg 0: block 361: padding at end of block bitmap is not set [ 612.351047][T23985] EXT4-fs (loop7): Remounting filesystem read-only [ 612.357893][T23985] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 612.421057][T23985] EXT4-fs (loop7): Remounting filesystem read-only [ 612.427714][T23985] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.8949: attempt to clear invalid blocks 33619980 len 1 [ 612.507962][T23985] EXT4-fs (loop7): Remounting filesystem read-only [ 612.524306][ T4303] usb 1-1: USB disconnect, device number 29 [ 612.570679][T23985] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.8949: invalid indirect mapped block 1811939328 (level 0) [ 612.621720][T24003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8956'. [ 612.638936][T23985] EXT4-fs (loop7): Remounting filesystem read-only [ 612.658284][T23985] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.8949: invalid indirect mapped block 2185560079 (level 1) [ 612.701183][T23985] EXT4-fs (loop7): Remounting filesystem read-only [ 612.721293][T23985] EXT4-fs (loop7): 1 truncate cleaned up [ 612.726984][T23985] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 613.012762][T23025] EXT4-fs (loop7): unmounting filesystem. [ 613.548532][T24000] loop1: detected capacity change from 0 to 32768 [ 613.622583][T24000] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 613.959624][ T27] audit: type=1400 audit(614.932:214): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=24047 comm="syz.7.8970" [ 614.085894][ T4336] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9 [ 614.241565][T24066] netlink: 'syz.0.8978': attribute type 5 has an invalid length. [ 614.249346][T24066] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8978'. [ 614.309539][T24061] loop1: detected capacity change from 0 to 2048 [ 614.356522][T24061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 615.018139][T24094] loop1: detected capacity change from 0 to 1024 [ 615.101554][T24094] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 615.173639][T24094] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 615.187784][T24094] overlayfs: missing 'lowerdir' [ 615.316110][T24110] loop3: detected capacity change from 0 to 512 [ 615.365399][T24110] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 615.388913][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 615.404573][T24110] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 615.494061][T24110] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2195: inode #15: comm syz.3.8995: corrupted in-inode xattr [ 615.582278][T24110] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.8995: couldn't read orphan inode 15 (err -117) [ 615.603838][T24110] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 615.779980][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 616.060141][T24131] loop0: detected capacity change from 0 to 4096 [ 616.074695][T24139] loop3: detected capacity change from 0 to 2048 [ 616.107437][T24131] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 616.109721][T24146] netlink: 16 bytes leftover after parsing attributes in process `syz.7.9010'. [ 616.162296][T24139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 616.182951][T24131] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 616.219264][T24131] ntfs3: loop0: Failed to load $Extend. [ 616.522706][T24157] loop7: detected capacity change from 0 to 8 [ 616.650441][T24164] loop0: detected capacity change from 0 to 1764 [ 617.070953][ T4303] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 617.280795][ T4303] usb 2-1: Using ep0 maxpacket: 8 [ 617.311947][ T4303] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 617.368699][ T4303] usb 2-1: config 1 has no interface number 1 [ 617.388971][ T4303] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 617.392830][T24194] qrtr: Invalid version 0 [ 617.435435][T24196] ipt_CLUSTERIP: Please specify destination IP [ 617.456975][ T4303] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 617.502976][ T4303] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 617.542769][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.577327][ T4303] usb 2-1: Product: syz [ 617.599590][ T4303] usb 2-1: Manufacturer: syz [ 617.629966][ T4303] usb 2-1: SerialNumber: syz [ 617.663602][T24204] loop3: detected capacity change from 0 to 128 [ 617.904981][ T4303] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 617.977955][ T4303] usb 2-1: USB disconnect, device number 32 [ 618.025476][ T4336] udevd[4336]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.110131][T24215] loop6: detected capacity change from 0 to 4096 [ 618.144034][T24215] ntfs3: Invalid value for gid. [ 618.827804][T24242] loop6: detected capacity change from 0 to 256 [ 618.870900][T24211] loop7: detected capacity change from 0 to 32768 [ 618.905054][T24242] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 618.944795][T24211] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 619.299585][ T4389] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9 [ 619.541490][T24230] loop0: detected capacity change from 0 to 32768 [ 619.570089][T24254] loop1: detected capacity change from 0 to 4096 [ 619.589575][T24254] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 619.713205][T24230] XFS (loop0): Mounting V5 Filesystem [ 619.813256][T24254] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 619.869003][T24230] XFS (loop0): Ending clean mount [ 619.887763][T24254] ntfs3: loop1: Failed to load $Extend. [ 619.899671][T24230] XFS (loop0): Quotacheck needed: Please wait. [ 620.022501][T24230] XFS (loop0): Quotacheck: Done. [ 620.215640][ T4253] XFS (loop0): Unmounting Filesystem [ 620.310454][T24290] loop1: detected capacity change from 0 to 256 [ 620.591973][T24297] loop3: detected capacity change from 0 to 512 [ 620.683876][T24297] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 620.766477][T24297] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 620.783143][T24297] EXT4-fs (loop3): mount failed [ 620.980990][T24315] netlink: 'syz.1.9076': attribute type 24 has an invalid length. [ 621.235835][T24326] loop3: detected capacity change from 0 to 1024 [ 621.246131][T24329] loop6: detected capacity change from 0 to 512 [ 621.268775][T24332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 621.276059][T24332] IPv6: NLM_F_CREATE should be set when creating new route [ 621.283362][T24332] IPv6: NLM_F_CREATE should be set when creating new route [ 621.382646][T24329] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 621.422215][T24337] device ip6tnl1 entered promiscuous mode [ 621.610381][T22367] EXT4-fs (loop6): unmounting filesystem. [ 621.742119][ T51] hfsplus: b-tree write err: -5, ino 4 [ 622.231421][T24366] netlink: 'syz.1.9096': attribute type 27 has an invalid length. [ 622.270816][T24366] C: renamed from team_slave_0 [ 622.337880][T24375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9099'. [ 622.594149][T24385] netlink: 'syz.3.9104': attribute type 4 has an invalid length. [ 622.701949][T24382] loop7: detected capacity change from 0 to 4096 [ 623.502360][T24391] loop1: detected capacity change from 0 to 32768 [ 623.628502][T24393] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 623.651977][T24391] XFS (loop1): Mounting V5 Filesystem [ 623.879848][T24391] XFS (loop1): Ending clean mount [ 623.902988][T24391] XFS (loop1): Quotacheck needed: Please wait. [ 624.040398][T24391] XFS (loop1): Quotacheck: Done. [ 624.052639][T24443] loop6: detected capacity change from 0 to 64 [ 624.153119][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.159864][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.197948][ T4252] XFS (loop1): Unmounting Filesystem [ 624.453738][T24456] bad cache= option: nonw [ 624.453738][T24456] [ 624.471102][T24456] CIFS: VFS: bad cache= option: nonw [ 624.750782][ T22] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 624.963281][ T22] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 624.991531][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.004476][ T22] usb 1-1: Product: syz [ 625.008677][ T22] usb 1-1: Manufacturer: syz [ 625.023912][ T22] usb 1-1: SerialNumber: syz [ 625.052747][ T22] usb 1-1: config 0 descriptor?? [ 625.078389][ T22] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 625.354496][T24488] random: crng reseeded on system resumption [ 625.481345][ T22] gspca_sunplus: reg_w_riv err -71 [ 625.486210][T24494] bad cache= option: nonw [ 625.486210][T24494] [ 625.486670][ T22] sunplus: probe of 1-1:0.0 failed with error -71 [ 625.518796][T24494] CIFS: VFS: bad cache= option: nonw [ 625.543847][ T22] usb 1-1: USB disconnect, device number 30 [ 625.715145][T24500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9154'. [ 626.729943][T24542] netlink: 'syz.1.9173': attribute type 4 has an invalid length. [ 626.808005][T24551] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 626.981850][T24555] netlink: 'syz.3.9178': attribute type 16 has an invalid length. [ 626.987680][ T27] audit: type=1326 audit(627.962:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.6.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294038e929 code=0x7ffc0000 [ 626.989694][T24555] netlink: 'syz.3.9178': attribute type 3 has an invalid length. [ 627.076077][ T27] audit: type=1326 audit(627.992:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.6.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294038e929 code=0x7ffc0000 [ 627.097819][ C1] vkms_vblank_simulate: vblank timer overrun [ 627.098670][T24555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9178'. [ 627.171832][ T27] audit: type=1326 audit(627.992:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.6.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f294038e929 code=0x7ffc0000 [ 627.238094][ T27] audit: type=1326 audit(627.992:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.6.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294038e929 code=0x7ffc0000 [ 627.274039][T24569] loop1: detected capacity change from 0 to 164 [ 627.338852][ T27] audit: type=1326 audit(627.992:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24557 comm="syz.6.9179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f294038e929 code=0x7ffc0000 [ 627.419014][T24571] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9186'. [ 627.844883][T24590] loop6: detected capacity change from 0 to 1024 [ 627.928720][T24590] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 628.042033][T24590] Quota error (device loop6): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 628.080843][T24590] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 628.123786][T24590] EXT4-fs error (device loop6): ext4_acquire_dquot:6814: comm syz.6.9195: Failed to acquire dquot type 1 [ 628.338469][T24615] netlink: 'syz.1.9205': attribute type 1 has an invalid length. [ 628.357672][T22367] EXT4-fs (loop6): unmounting filesystem. [ 628.917878][T24640] loop6: detected capacity change from 0 to 512 [ 628.980799][T24640] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 629.025662][T24640] EXT4-fs (loop6): 1 truncate cleaned up [ 629.040759][T24640] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 629.063329][T24645] loop3: detected capacity change from 0 to 128 [ 629.071794][T24640] EXT4-fs (loop6): unmounting filesystem. [ 629.149647][T24645] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 629.176213][T24645] System zones: 1-3, 19-19, 35-36 [ 629.226928][T24645] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 629.291494][T24645] EXT4-fs warning (device loop3): ext4_group_extend:1899: can't read last block, resize aborted [ 629.410789][ T4303] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 629.469386][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 629.617317][ T4303] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 629.630697][ T4303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.660826][ T4303] usb 2-1: Product: syz [ 629.665042][ T4303] usb 2-1: Manufacturer: syz [ 629.680989][ T4303] usb 2-1: SerialNumber: syz [ 629.718343][ T4303] usb 2-1: config 0 descriptor?? [ 629.747107][ T4303] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 630.148194][ T4303] gspca_sunplus: reg_w_riv err -71 [ 630.164178][ T4303] sunplus: probe of 2-1:0.0 failed with error -71 [ 630.166478][T24658] loop6: detected capacity change from 0 to 32768 [ 630.173025][ T4303] usb 2-1: USB disconnect, device number 33 [ 630.203288][T24658] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.9225 (24658) [ 630.306156][T24658] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 630.340579][T24658] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 630.349533][T24658] BTRFS info (device loop6): turning on sync discard [ 630.372755][T24672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9231'. [ 630.390688][T24658] BTRFS info (device loop6): max_inline at 0 [ 630.418069][T24658] BTRFS info (device loop6): enabling disk space caching [ 630.435402][T24672] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9231'. [ 630.444470][T24658] BTRFS info (device loop6): setting nodatasum [ 630.470849][T24658] BTRFS info (device loop6): turning off barriers [ 630.487527][T24658] BTRFS info (device loop6): turning on flush-on-commit [ 630.507817][T24658] BTRFS info (device loop6): disabling disk space caching [ 630.538445][T24658] BTRFS info (device loop6): force clearing of disk cache [ 630.566628][T24658] BTRFS info (device loop6): enabling ssd optimizations [ 630.668313][T24678] loop3: detected capacity change from 0 to 2048 [ 630.669555][T24668] loop0: detected capacity change from 0 to 32768 [ 630.686707][T24668] XFS: ikeep mount option is deprecated. [ 630.711158][T24678] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 630.775455][T24678] syz.3.9233: attempt to access beyond end of device [ 630.775455][T24678] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 630.794386][T24700] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 630.808818][T24668] XFS (loop0): Mounting V5 Filesystem [ 630.829859][T24678] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=1816, name_len=0 [ 630.889674][T24658] BTRFS info (device loop6): rebuilding free space tree [ 630.912208][T24678] Remounting filesystem read-only [ 630.936199][T24658] BTRFS info (device loop6): disabling free space tree [ 630.966879][T24658] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 630.980652][T24668] XFS (loop0): Ending clean mount [ 630.989112][T24668] XFS (loop0): Quotacheck needed: Please wait. [ 631.055157][T24658] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 631.118035][T24668] XFS (loop0): Quotacheck: Done. [ 631.190463][T24714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9237'. [ 631.200045][ T28] INFO: task syz-executor:4260 blocked for more than 143 seconds. [ 631.257705][ T28] Not tainted 6.1.141-syzkaller #0 [ 631.280680][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.330683][ T28] task:syz-executor state:D stack:22144 pid:4260 ppid:1 flags:0x00004004 [ 631.374627][ T28] Call Trace: [ 631.378066][ T28] [ 631.394587][ T28] __schedule+0x10e9/0x40d0 [ 631.447567][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 631.455864][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 631.468328][ T28] ? lock_chain_count+0x20/0x20 [ 631.475364][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 631.480532][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 631.495696][ T28] schedule+0xb9/0x180 [ 631.499821][ T28] io_schedule+0x7c/0xd0 [ 631.508262][ T28] folio_wait_bit_common+0x6e1/0xf60 [ 631.519186][ T28] ? folio_wait_bit+0x30/0x30 [ 631.528162][ T28] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 631.539188][ T28] ? folio_mapping+0x1ba/0x4d0 [ 631.556521][ T28] truncate_inode_pages_range+0x9a2/0xff0 [ 631.564780][ T28] ? mapping_evict_folio+0x520/0x520 [ 631.570130][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 631.584498][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 631.589767][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 631.606251][ T28] evict+0x498/0x870 [ 631.610224][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 631.617582][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 631.637041][ T28] ? _raw_spin_unlock+0x24/0x40 [ 631.649289][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 631.667398][ T28] evict_inodes+0x604/0x690 [ 631.673628][ T28] ? clear_inode+0x150/0x150 [ 631.678265][ T28] ? dput+0x1c9/0x1d0 [ 631.689461][ T28] ? sync_filesystem+0x103/0x220 [ 631.695693][ T28] generic_shutdown_super+0x93/0x340 [ 631.708182][ T28] kill_block_super+0x7c/0xe0 [ 631.714275][ T28] deactivate_locked_super+0x93/0xf0 [ 631.719689][ T28] cleanup_mnt+0x463/0x4f0 [ 631.730776][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 631.736030][ T28] task_work_run+0x1ca/0x250 [ 631.748600][ T28] ? task_work_cancel+0x230/0x230 [ 631.755972][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 631.770982][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 631.776325][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 631.789574][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 631.795410][ T28] do_syscall_64+0x58/0xa0 [ 631.799869][ T28] ? clear_bhb_loop+0x60/0xb0 [ 631.812509][ T28] ? clear_bhb_loop+0x60/0xb0 [ 631.817235][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.829493][ T28] RIP: 0033:0x7efd21d8fc57 [ 631.845885][ T28] RSP: 002b:00007fffe9307318 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 631.859694][ T28] RAX: 0000000000000000 RBX: 00007efd21e10925 RCX: 00007efd21d8fc57 [ 631.869944][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe93073d0 [ 631.890768][ T28] RBP: 00007fffe93073d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.898895][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe9308460 [ 631.914223][ T28] R13: 00007efd21e10925 R14: 0000000000076ef7 R15: 00007fffe93084a0 [ 631.922675][ T28] [ 631.925874][ T28] [ 631.925874][ T28] Showing all locks held in the system: [ 631.926752][ T4253] XFS (loop0): Unmounting Filesystem [ 631.934345][ T28] 1 lock held by rcu_tasks_kthre/12: [ 631.948794][ T28] #0: ffffffff8c92b430 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 631.959661][T22367] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 631.966054][ T28] 1 lock held by rcu_tasks_trace/13: [ 631.975595][ T28] #0: ffffffff8c92bc50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 631.996813][ T28] 3 locks held by kworker/1:0/22: [ 632.006022][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.019843][ T28] #1: ffff8880b8f27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 632.041159][ T28] #2: ffff888058d2a240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x26b/0x32b0 [ 632.059753][ T28] 1 lock held by khungtaskd/28: [ 632.065094][ T28] #0: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 632.096488][ T28] 3 locks held by kworker/0:3/3995: [ 632.105752][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.116894][ T28] #1: ffffc900039a7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.130102][ T28] #2: ffffffff8c930778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 632.141395][ T28] 2 locks held by getty/4022: [ 632.146197][ T28] #0: ffff888031390098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 632.167846][ T28] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 632.184061][ T28] 2 locks held by syz-executor/4253: [ 632.189475][ T28] #0: ffff88807bb620e0 (&type->s_umount_key#70){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 632.209867][ T28] #1: ffffffff8c930778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 632.229611][ T28] 1 lock held by syz-executor/4260: [ 632.236453][ T28] #0: ffff888052d660e0 (&type->s_umount_key#54){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 632.254766][ T28] 2 locks held by kworker/0:5/4303: [ 632.267028][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.293121][ T28] #1: ffffc90004007d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.325407][ T28] 2 locks held by kworker/u4:25/5008: [ 632.340107][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.374367][ T28] #1: ffffc9000cd5fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.397463][ T28] 2 locks held by kworker/0:8/5995: [ 632.408620][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.430714][ T28] #1: ffffc9000d7efd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.458070][ T28] 2 locks held by kworker/0:9/5996: [ 632.469594][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.491941][ T28] #1: ffffc9000d737d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.504712][ T28] 2 locks held by kworker/0:10/5998: [ 632.510010][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.520470][ T28] #1: ffffc9000d797d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.533022][ T28] 2 locks held by kworker/0:11/5999: [ 632.538393][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.548844][ T28] #1: ffffc9000d80fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.561776][ T28] 2 locks held by kworker/0:12/6000: [ 632.567210][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.577649][ T28] #1: ffffc9000d81fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.593309][ T28] 2 locks held by kworker/0:13/6001: [ 632.598627][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.617191][ T28] #1: ffffc9000d83fd00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.629987][ T28] 2 locks held by kworker/1:8/8468: [ 632.635659][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.652986][ T28] #1: ffffc90004e1fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.670189][ T28] 2 locks held by kworker/0:17/12233: [ 632.675844][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.686670][ T28] #1: ffffc9000d8c7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.699631][ T28] 2 locks held by kworker/0:18/12234: [ 632.709145][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.725952][ T28] #1: ffffc9000d977d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.746994][ T28] 2 locks held by kworker/0:19/12236: [ 632.752824][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.763716][ T28] #1: ffffc9000d9a7d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 632.776960][ T28] [ 632.779407][ T28] ============================================= [ 632.779407][ T28] [ 632.790985][ T28] NMI backtrace for cpu 0 [ 632.795365][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 632.803280][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.813357][ T28] Call Trace: [ 632.816650][ T28] [ 632.819588][ T28] dump_stack_lvl+0x168/0x22e [ 632.824286][ T28] ? irq_work_queue+0xb8/0x140 [ 632.829079][ T28] ? show_regs_print_info+0x12/0x12 [ 632.834310][ T28] ? load_image+0x3b0/0x3b0 [ 632.838828][ T28] ? vprintk_emit+0x571/0x680 [ 632.843546][ T28] ? printk_sprint+0x460/0x460 [ 632.848341][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 632.853317][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 632.859497][ T28] ? _printk+0xcc/0x110 [ 632.863668][ T28] ? load_image+0x3b0/0x3b0 [ 632.868189][ T28] ? load_image+0x3b0/0x3b0 [ 632.872726][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 632.878812][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 632.884815][ T28] watchdog+0xeee/0xf30 [ 632.888998][ T28] ? watchdog+0x1ed/0xf30 [ 632.893355][ T28] kthread+0x29d/0x330 [ 632.897448][ T28] ? hungtask_pm_notify+0x40/0x40 [ 632.902491][ T28] ? kthread_blkcg+0xd0/0xd0 [ 632.907108][ T28] ret_from_fork+0x1f/0x30 [ 632.911620][ T28] [ 632.915201][ T28] Sending NMI from CPU 0 to CPUs 1: [ 632.920674][ C1] NMI backtrace for cpu 1 [ 632.920684][ C1] CPU: 1 PID: 20993 Comm: kworker/u4:0 Not tainted 6.1.141-syzkaller #0 [ 632.920699][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.920708][ C1] Workqueue: events_unbound toggle_allocation_gate [ 632.920729][ C1] RIP: 0010:__lock_acquire+0x171c/0x7c50 [ 632.920748][ C1] Code: ff ff ff 4c 8d 73 18 4c 89 f0 48 c1 e8 03 42 80 3c 00 00 74 12 4c 89 f7 e8 81 48 6f 00 49 b8 00 00 00 00 00 fc ff df 49 8b 06 <4c> 8b b4 24 90 00 00 00 4c 39 f0 0f 84 3b 02 00 00 48 83 c3 08 48 [ 632.920760][ C1] RSP: 0018:ffffc900001e0700 EFLAGS: 00000046 [ 632.920772][ C1] RAX: 6fb2871fbb8da996 RBX: ffffffff908bc500 RCX: ffffffff81630300 [ 632.920783][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff908b8240 [ 632.920793][ C1] RBP: ffffc900001e0950 R08: dffffc0000000000 R09: fffffbfff2117049 [ 632.920803][ C1] R10: fffffbfff2117049 R11: 1ffffffff2117048 R12: ffffffff9045fd20 [ 632.920814][ C1] R13: 000000000969c49f R14: ffffffff908bc518 R15: ffff88802ef9c650 [ 632.920824][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 632.920837][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.920848][ C1] CR2: 000055c3e6937950 CR3: 000000000c68e000 CR4: 00000000003506e0 [ 632.920860][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 632.920869][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 632.920878][ C1] Call Trace: [ 632.920883][ C1] [ 632.920897][ C1] ? verify_lock_unused+0x140/0x140 [ 632.920922][ C1] lock_acquire+0x1b4/0x490 [ 632.920938][ C1] ? raw_spin_rq_lock_nested+0x26/0x140 [ 632.920955][ C1] ? __rwlock_init+0x140/0x140 [ 632.920971][ C1] ? read_lock_is_recursive+0x10/0x10 [ 632.920989][ C1] ? select_task_rq_fair+0x673/0x35c0 [ 632.921006][ C1] _raw_spin_lock_nested+0x2e/0x40 [ 632.921024][ C1] ? raw_spin_rq_lock_nested+0x26/0x140 [ 632.921038][ C1] raw_spin_rq_lock_nested+0x26/0x140 [ 632.921053][ C1] try_to_wake_up+0x4ec/0x1080 [ 632.921071][ C1] call_timer_fn+0x1a0/0x670 [ 632.921084][ C1] ? update_process_times+0x1b0/0x1b0 [ 632.921102][ C1] ? call_timer_fn+0xc1/0x670 [ 632.921120][ C1] ? __run_timers+0x7c0/0x7c0 [ 632.921135][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 632.921151][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 632.921163][ C1] ? update_process_times+0x1b0/0x1b0 [ 632.921180][ C1] __run_timers+0x525/0x7c0 [ 632.921196][ C1] ? detach_timer+0x350/0x350 [ 632.921209][ C1] ? lock_chain_count+0x20/0x20 [ 632.921227][ C1] run_timer_softirq+0x63/0xf0 [ 632.921244][ C1] handle_softirqs+0x2a1/0x920 [ 632.921263][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 632.921281][ C1] ? do_softirq+0x200/0x200 [ 632.921299][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 632.921317][ C1] __irq_exit_rcu+0x12f/0x220 [ 632.921333][ C1] ? irq_exit_rcu+0x20/0x20 [ 632.921353][ C1] irq_exit_rcu+0x5/0x20 [ 632.921368][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 632.921386][ C1] [ 632.921391][ C1] [ 632.921395][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 632.921409][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xa5/0x100 [ 632.921426][ C1] Code: 74 05 e8 ce 97 6d f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 c6 13 3e f7 65 8b 05 97 d4 e8 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 632.921437][ C1] RSP: 0018:ffffc90005127a20 EFLAGS: 00000206 [ 632.921448][ C1] RAX: 46c9e783a1163000 RBX: 0000000000000a06 RCX: 46c9e783a1163000 [ 632.921459][ C1] RDX: dffffc0000000000 RSI: ffffffff8a6bffe0 RDI: 0000000000000001 [ 632.921468][ C1] RBP: ffffc90005127ab0 R08: dffffc0000000000 R09: fffffbfff211704b [ 632.921479][ C1] R10: fffffbfff211704b R11: 1ffffffff211704a R12: dffffc0000000000 [ 632.921489][ C1] R13: 0000000000000a06 R14: ffffffff8ca1d400 R15: 1ffff92000a24f44 [ 632.921504][ C1] ? _raw_spin_unlock+0x40/0x40 [ 632.921520][ C1] ? __might_sleep+0xd0/0xd0 [ 632.921537][ C1] ? rcu_read_lock_any_held+0xb0/0x120 [ 632.921552][ C1] prepare_to_wait_event+0x430/0x470 [ 632.921570][ C1] toggle_allocation_gate+0x1f7/0x430 [ 632.921585][ C1] ? show_object+0xa0/0xa0 [ 632.921599][ C1] ? wake_bit_function+0x200/0x200 [ 632.921615][ C1] ? read_lock_is_recursive+0x10/0x10 [ 632.921632][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 632.921649][ C1] ? process_one_work+0x7a1/0x1160 [ 632.921662][ C1] process_one_work+0x898/0x1160 [ 632.921679][ C1] ? worker_detach_from_pool+0x240/0x240 [ 632.921695][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 632.921710][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 632.921726][ C1] ? kthread_data+0x4b/0xc0 [ 632.921743][ C1] worker_thread+0xaa2/0x1250 [ 632.921761][ C1] ? __kthread_parkme+0x162/0x1c0 [ 632.921778][ C1] kthread+0x29d/0x330 [ 632.921793][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 632.921806][ C1] ? kthread_blkcg+0xd0/0xd0 [ 632.921823][ C1] ret_from_fork+0x1f/0x30 [ 632.921842][ C1] [ 632.936827][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 632.936842][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 632.936860][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.936871][ T28] Call Trace: [ 632.936877][ T28] [ 632.936884][ T28] dump_stack_lvl+0x168/0x22e [ 632.936909][ T28] ? memcpy+0x3c/0x60 [ 632.936927][ T28] ? show_regs_print_info+0x12/0x12 [ 632.936947][ T28] ? load_image+0x3b0/0x3b0 [ 632.936974][ T28] panic+0x2c9/0x710 [ 632.936989][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 632.937010][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 632.937025][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 632.937050][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 632.937073][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 632.937095][ T28] watchdog+0xf2d/0xf30 [ 632.937116][ T28] ? watchdog+0x1ed/0xf30 [ 632.937137][ T28] kthread+0x29d/0x330 [ 632.937157][ T28] ? hungtask_pm_notify+0x40/0x40 [ 632.937173][ T28] ? kthread_blkcg+0xd0/0xd0 [ 632.937195][ T28] ret_from_fork+0x1f/0x30 [ 632.937225][ T28] [ 632.945903][ T28] Kernel Offset: disabled [ 633.517428][ T28] Rebooting in 86400 seconds..