last executing test programs: 2m38.675913521s ago: executing program 2 (id=2542): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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") mknod$loop(&(0x7f0000000000)='.\x02\x00', 0x800, 0x1) 2m37.083514139s ago: executing program 2 (id=2565): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) 2m36.785919093s ago: executing program 2 (id=2569): r0 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) read$FUSE(r0, &(0x7f0000001c80)={0x2020}, 0x2020) 2m36.514504845s ago: executing program 2 (id=2573): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, &(0x7f00000000c0)}) 2m36.298218542s ago: executing program 2 (id=2576): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$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") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m35.276512925s ago: executing program 2 (id=2592): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) 2m20.151511063s ago: executing program 32 (id=2592): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x18, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0) 3.375479548s ago: executing program 4 (id=4469): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix_mp={0x1, 0x7f, 0x30314442, 0x7, 0x6, [{0xfffffffb, 0x80000001}, {0x781, 0x5}, {0x10000, 0x2}, {0x149, 0x400}, {0x0, 0x3}, {0x8, 0x5}, {0xef}, {0x3, 0x4}], 0x7, 0x6, 0x2, 0x2, 0x3}}) 3.007589788s ago: executing program 4 (id=4476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) 1.835643672s ago: executing program 4 (id=4489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 1.777026317s ago: executing program 0 (id=4491): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) 1.643288768s ago: executing program 4 (id=4492): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x800, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000840)={0xd, 0x2, 0x0, "e1db30af6edd9a2ad5b40b4e5654670f0000005eff9ca8ac00", 0x35315241}) 1.482740161s ago: executing program 0 (id=4494): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) 1.426210025s ago: executing program 4 (id=4495): r0 = syz_open_dev$media(&(0x7f00000005c0), 0x6, 0x80000) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x118, 0x0, &(0x7f0000000cc0), 0x3, 0x0, 0x0, 0x42, 0x0, 0x0}) 1.268757098s ago: executing program 0 (id=4497): r0 = syz_io_uring_setup(0x7ac6, &(0x7f0000000000)={0x0, 0x7071, 0x800, 0x1, 0x12c}, &(0x7f00000003c0), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0xfffffffffffffffe, 0x3c) 1.130250009s ago: executing program 4 (id=4499): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB='LiA'], 0x0, 0x0, 0x0}, 0x0) 1.078007393s ago: executing program 1 (id=4500): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@updsa={0x104, 0x1a, 0xa21, 0x0, 0x0, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6c}, {@in, 0x0, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x4, 0x0, 0x0, 0x2000000000000, 0x0, 0x7}, {0x0, 0x0, 0x4}, {}, 0x0, 0xffffffff, 0xa, 0x1, 0x0, 0x39}, [@coaddr={0x14, 0xe, @in=@loopback}]}, 0x104}}, 0x810) 971.503922ms ago: executing program 0 (id=4501): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 966.760692ms ago: executing program 3 (id=4502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 883.213259ms ago: executing program 1 (id=4503): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x5437, 0x0) 828.556513ms ago: executing program 3 (id=4504): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) 736.065671ms ago: executing program 0 (id=4505): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000180)=0x1, 0x4) 733.076701ms ago: executing program 1 (id=4506): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) eventfd(0x3) 658.664497ms ago: executing program 3 (id=4507): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x100a, 0x3, @discrete={0x8, 0x7}}) 585.609383ms ago: executing program 0 (id=4508): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000580)='./file0\x00', 0x2000006, &(0x7f0000000180)={[{@uni_xlateno}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@shortname_lower}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@uni_xlate}, {@uni_xlate}, {@shortname_lower}, {@uni_xlateno}]}, 0x25, 0x365, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) 569.645454ms ago: executing program 1 (id=4509): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0x10000, 'syz0\x00', @default, 0xfffffdb6, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 382.528409ms ago: executing program 3 (id=4510): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0xc2602, 0x2bd) write$tcp_mem(r0, &(0x7f000003eec0)={0x7fffffffffffffff, 0x20, 0x1}, 0x48) 363.009211ms ago: executing program 1 (id=4511): r0 = syz_io_uring_setup(0x7ac6, &(0x7f0000000000)={0x0, 0x7071, 0x800, 0x1, 0x12c}, &(0x7f00000003c0), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0xfffffffffffffffe, 0x3c) 219.068742ms ago: executing program 3 (id=4512): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) fallocate(r0, 0x20, 0x5, 0x6) 19.327638ms ago: executing program 3 (id=4513): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') pread64(r0, &(0x7f0000000080)=""/88, 0x58, 0x100) 0s ago: executing program 1 (id=4514): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000340)={0x2, 0x9, 0x9, 0xb3, 0x0, 0x3, 0x0}) kernel console output (not intermixed with test programs): T8] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 289.794376][ T5882] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 289.882750][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2512'. [ 289.997213][T11355] xt_connbytes: Forcing CT accounting to be enabled [ 290.010944][ T5882] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 290.029383][T11355] xt_bpf: check failed: parse error [ 290.063852][ T5882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.084974][ T966] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.104536][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 290.146494][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.190527][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.236067][ T5882] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 290.253698][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 290.304355][ T5882] usb 1-1: Product: syz [ 290.309962][ T5882] usb 1-1: Manufacturer: syz [ 290.344862][ T8199] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 290.367213][ T5882] cdc_wdm 1-1:1.0: skipping garbage [ 290.373825][ T5882] cdc_wdm 1-1:1.0: skipping garbage [ 290.428039][ T5882] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 290.437356][ T5882] cdc_wdm 1-1:1.0: Unknown control protocol [ 290.581177][T11370] loop2: detected capacity change from 0 to 256 [ 290.647328][T11370] exfat: Deprecated parameter 'namecase' [ 290.675243][T11370] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 290.715900][T11338] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 290.740996][ T5882] usb 1-1: USB disconnect, device number 6 [ 290.760653][T11370] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 290.860169][T11377] loop3: detected capacity change from 0 to 256 [ 290.938373][T11377] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 291.385320][ T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.412406][ T58] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 291.792027][T11401] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2535'. [ 291.977429][ T27] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 293.264476][T11417] loop2: detected capacity change from 0 to 32768 [ 293.356450][T11417] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 293.533230][T11455] netlink: 'syz.1.2561': attribute type 1 has an invalid length. [ 293.743690][ T5788] ocfs2: Unmounting device (7,2) on (node local) [ 294.620930][T11485] loop2: detected capacity change from 0 to 8 [ 295.422780][ T28] audit: type=1800 audit(1755657549.031:2137): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2576" name="file2" dev="loop2" ino=6 res=0 errno=0 [ 295.544463][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 295.716752][T11519] loop0: detected capacity change from 0 to 128 [ 295.764148][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.802014][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2596'. [ 295.812423][T11519] FAT-fs (loop0): Filesystem has been set read-only [ 295.821397][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.841125][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.854635][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.881650][T11522] loop1: detected capacity change from 0 to 4096 [ 295.889890][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.902462][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.921129][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.945848][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.966364][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 295.990661][T11519] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 296.007071][ T28] audit: type=1800 audit(1755657549.631:2138): pid=11519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2594" name="file2" dev="loop0" ino=1048618 res=0 errno=0 [ 296.434509][ T2181] IPVS: starting estimator thread 0... [ 296.524451][T11536] IPVS: using max 17 ests per chain, 40800 per kthread [ 297.047052][T11550] netlink: 'syz.0.2609': attribute type 1 has an invalid length. [ 297.228209][T11537] loop3: detected capacity change from 0 to 32768 [ 297.284526][T11537] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 297.478910][T11537] XFS (loop3): Ending clean mount [ 297.507900][T11537] XFS (loop3): Quotacheck needed: Please wait. [ 297.625520][T11537] XFS (loop3): Quotacheck: Done. [ 297.909158][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 298.157369][T11552] loop1: detected capacity change from 0 to 32768 [ 298.338201][T11552] ERROR: (device loop1): dbAllocNext: Corrupt dmap page [ 298.338201][T11552] [ 298.421570][T11576] netlink: 'syz.3.2616': attribute type 10 has an invalid length. [ 298.433597][T11576] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 298.565831][T11580] ipt_REJECT: ECHOREPLY no longer supported. [ 298.734857][T11584] gretap1: entered allmulticast mode [ 299.485041][T11607] CIFS: VFS: Malformed UNC in devname [ 299.819543][T11621] loop3: detected capacity change from 0 to 256 [ 299.958138][T11621] FAT-fs (loop3): Directory bread(block 64) failed [ 299.984414][T11621] FAT-fs (loop3): Directory bread(block 65) failed [ 299.992829][T11621] FAT-fs (loop3): Directory bread(block 66) failed [ 300.039933][T11621] FAT-fs (loop3): Directory bread(block 67) failed [ 300.051104][T11621] FAT-fs (loop3): Directory bread(block 68) failed [ 300.061427][T11621] FAT-fs (loop3): Directory bread(block 69) failed [ 300.069360][T11621] FAT-fs (loop3): Directory bread(block 70) failed [ 300.078746][T11621] FAT-fs (loop3): Directory bread(block 71) failed [ 300.086760][T11621] FAT-fs (loop3): Directory bread(block 72) failed [ 300.094693][T11621] FAT-fs (loop3): Directory bread(block 73) failed [ 301.021309][T11654] loop1: detected capacity change from 0 to 4096 [ 301.038266][T11654] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 301.178564][T11658] netlink: 'syz.3.2658': attribute type 2 has an invalid length. [ 301.187541][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 301.360560][T11662] loop3: detected capacity change from 0 to 512 [ 301.374339][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 301.391622][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.404536][T11662] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 301.432773][ T27] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 301.446052][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.461777][ T27] usb 1-1: Product: syz [ 301.470011][T11662] EXT4-fs (loop3): 1 truncate cleaned up [ 301.480617][T11662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.486978][ T27] usb 1-1: Manufacturer: syz [ 301.510591][ T27] usb 1-1: SerialNumber: syz [ 301.533613][ T27] usb 1-1: config 0 descriptor?? [ 301.542338][T11662] EXT4-fs error (device loop3): ext4_get_verity_descriptor_location:298: inode #15: comm syz.3.2660: verity file has no extents [ 301.546526][ T27] usb 1-1: bad CDC descriptors [ 301.575343][ T27] usb 1-1: unsupported MDLM descriptors [ 301.594061][T11662] fs-verity (loop3, inode 15): Error -117 getting verity descriptor size [ 301.674148][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.889308][ T966] usb 1-1: USB disconnect, device number 7 [ 302.085263][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'. [ 302.096415][T11682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'. [ 302.107496][T11682] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2668'. [ 302.317849][T11686] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 302.574481][T11690] netlink: 'syz.0.2673': attribute type 30 has an invalid length. [ 303.101465][T11697] xt_connbytes: Forcing CT accounting to be enabled [ 303.114508][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 303.124804][T11693] loop1: detected capacity change from 0 to 32768 [ 303.142601][T11693] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2674 (11693) [ 303.194156][T11693] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 303.225058][T11693] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 303.244623][T11693] BTRFS info (device loop1): setting nodatacow, compression disabled [ 303.265671][T11693] BTRFS info (device loop1): max_inline at 0 [ 303.272388][T11693] BTRFS info (device loop1): enabling disk space caching [ 303.299244][T11693] BTRFS info (device loop1): turning off barriers [ 303.316936][ T27] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 303.336864][T11693] BTRFS info (device loop1): turning on flush-on-commit [ 303.344891][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.353487][ T27] usb 1-1: Product: syz [ 303.362998][T11701] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 303.371029][T11693] BTRFS info (device loop1): doing ref verification [ 303.378883][ T27] usb 1-1: Manufacturer: syz [ 303.384178][ T27] usb 1-1: SerialNumber: syz [ 303.389853][T11693] BTRFS info (device loop1): force clearing of disk cache [ 303.403967][ T27] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 303.432957][ T23] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 303.447698][T11693] BTRFS info (device loop1): enabling ssd optimizations [ 303.466936][T11693] BTRFS info (device loop1): max_inline at 4096 [ 303.484551][T11693] BTRFS info (device loop1): disk space caching is enabled [ 303.632808][T11693] BTRFS info (device loop1): auto enabling async discard [ 303.656445][T11693] BTRFS info (device loop1): rebuilding free space tree [ 303.704546][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 303.746137][T11693] BTRFS info (device loop1): disabling free space tree [ 303.755418][T11693] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 303.778552][T11693] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 304.005602][ T966] usb 1-1: USB disconnect, device number 8 [ 304.202011][ T5787] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 304.374517][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 304.478624][T11727] libceph: resolve '40.' (ret=-3): failed [ 304.507046][ T23] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 304.524676][ T23] ath9k_htc: Failed to initialize the device [ 304.544679][ T966] usb 1-1: ath9k_htc: USB layer deinitialized [ 304.589561][ T27] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 304.616667][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.668108][ T27] usb 4-1: Product: syz [ 304.673184][ T27] usb 4-1: Manufacturer: syz [ 304.680258][ T27] usb 4-1: SerialNumber: syz [ 304.692163][ T27] usb 4-1: config 0 descriptor?? [ 304.706471][ T27] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 304.870772][T11736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2686'. [ 305.148693][ T27] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 305.174598][ T27] sq905c 4-1:0.0: Reading version command failed [ 305.181484][ T27] sq905c: probe of 4-1:0.0 failed with error -71 [ 305.215096][ T27] usb 4-1: USB disconnect, device number 13 [ 307.144957][T11805] libceph: resolve 'c' (ret=-3): failed [ 307.319229][T11791] loop3: detected capacity change from 0 to 32768 [ 307.358849][T11791] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2712 (11791) [ 307.372779][T11811] syz.0.2723 uses old SIOCAX25GETINFO [ 307.403831][T11791] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 307.423907][T11791] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 307.464501][T11791] BTRFS info (device loop3): force zlib compression, level 3 [ 307.494726][T11791] BTRFS info (device loop3): force clearing of disk cache [ 307.514801][T11791] BTRFS info (device loop3): turning off barriers [ 307.543932][ T28] audit: type=1326 audit(1755657561.151:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 307.582806][T11791] BTRFS info (device loop3): doing ref verification [ 307.604346][T11791] BTRFS info (device loop3): enabling disk space caching [ 307.634607][T11791] BTRFS info (device loop3): disk space caching is enabled [ 307.674386][ T28] audit: type=1326 audit(1755657561.151:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 307.711453][ T28] audit: type=1326 audit(1755657561.211:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 307.743400][ T28] audit: type=1326 audit(1755657561.211:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 307.780115][ T28] audit: type=1326 audit(1755657561.211:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11812 comm="syz.0.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 307.885704][T11791] BTRFS info (device loop3): enabling ssd optimizations [ 307.944819][T11791] BTRFS info (device loop3): auto enabling async discard [ 308.002285][T11791] BTRFS info (device loop3): rebuilding free space tree [ 308.092949][T11791] BTRFS info (device loop3): disabling free space tree [ 308.110721][T11791] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 308.134301][T11791] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 308.341472][T11791] BTRFS error (device loop3): balance: mixed groups data and metadata options must be the same [ 308.449561][ T5789] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 308.925534][T11855] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 309.786046][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2751'. [ 309.806126][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2751'. [ 310.371606][T11905] loop1: detected capacity change from 0 to 256 [ 310.473081][T11905] FAT-fs (loop1): Directory bread(block 64) failed [ 310.481939][ T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 310.502054][T11905] FAT-fs (loop1): Directory bread(block 65) failed [ 310.534872][T11905] FAT-fs (loop1): Directory bread(block 66) failed [ 310.541974][T11905] FAT-fs (loop1): Directory bread(block 67) failed [ 310.565785][T11905] FAT-fs (loop1): Directory bread(block 68) failed [ 310.573358][T11905] FAT-fs (loop1): Directory bread(block 69) failed [ 310.582379][T11905] FAT-fs (loop1): Directory bread(block 70) failed [ 310.600432][T11905] FAT-fs (loop1): Directory bread(block 71) failed [ 310.612899][T11905] FAT-fs (loop1): Directory bread(block 72) failed [ 310.621665][T11905] FAT-fs (loop1): Directory bread(block 73) failed [ 310.711039][ T23] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 310.730556][ T23] usb 4-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 310.743592][ T23] usb 4-1: Product: syz [ 310.752659][ T23] usb 4-1: Manufacturer: syz [ 310.760589][ T23] usb 4-1: SerialNumber: syz [ 310.784745][ T23] r8152-cfgselector 4-1: config 0 descriptor?? [ 311.263704][ T23] r8152-cfgselector 4-1: Unknown version 0x0000 [ 311.292605][ T23] r8152-cfgselector 4-1: USB disconnect, device number 14 [ 311.334666][T11916] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.390472][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.407378][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.434584][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.457881][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.472596][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 311.481860][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.528822][T11920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2768'. [ 311.698274][T11912] loop0: detected capacity change from 0 to 32768 [ 311.728324][T11912] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 311.749362][T11912] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 311.797741][T11912] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 311.897663][T11912] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 312.235004][ T5791] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 312.320345][T11917] chnl_net:caif_netlink_parms(): no params data found [ 312.457974][ T5791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 312.504477][ T5791] usb 4-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 312.526659][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.565103][ T5791] usb 4-1: config 0 descriptor?? [ 312.578350][ T5791] smsusb:smsusb_probe: board id=8, interface number 0 [ 312.604729][ T5791] smsusb:smsusb_probe: Device initialized with return code -19 [ 312.641879][T11947] loop1: detected capacity change from 0 to 64 [ 312.736481][T11917] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.783554][T11917] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.825829][T11917] bridge_slave_0: entered allmulticast mode [ 312.884084][T11917] bridge_slave_0: entered promiscuous mode [ 312.925317][ T5791] usb 4-1: USB disconnect, device number 15 [ 312.930142][T11917] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.951932][T11917] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.965363][T11917] bridge_slave_1: entered allmulticast mode [ 312.996223][T11917] bridge_slave_1: entered promiscuous mode [ 313.199795][T11917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.237613][T11917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.323819][T11959] dlm: non-version read from control device 36 [ 313.366181][T11917] team0: Port device team_slave_0 added [ 313.389922][T11917] team0: Port device team_slave_1 added [ 313.513009][T11917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.545118][T11917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.554560][ T50] Bluetooth: hci4: command tx timeout [ 313.638983][T11917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.656972][T11917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.666293][T11917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.732841][T11917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.765650][T11967] loop3: detected capacity change from 0 to 1024 [ 313.865126][T11967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.045970][T11917] hsr_slave_0: entered promiscuous mode [ 314.066368][T11917] hsr_slave_1: entered promiscuous mode [ 314.091529][T11917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 314.106181][T11917] Cannot create hsr debugfs directory [ 314.360262][T11980] loop1: detected capacity change from 0 to 256 [ 314.561656][T11980] FAT-fs (loop1): Directory bread(block 64) failed [ 314.576984][T11980] FAT-fs (loop1): Directory bread(block 65) failed [ 314.600505][T11980] FAT-fs (loop1): Directory bread(block 66) failed [ 314.614681][T11980] FAT-fs (loop1): Directory bread(block 67) failed [ 314.622637][T11980] FAT-fs (loop1): Directory bread(block 68) failed [ 314.674458][T11980] FAT-fs (loop1): Directory bread(block 69) failed [ 314.681811][T11980] FAT-fs (loop1): Directory bread(block 70) failed [ 314.702706][T11989] ip6gre1: entered allmulticast mode [ 314.722729][T11980] FAT-fs (loop1): Directory bread(block 71) failed [ 314.737358][T11980] FAT-fs (loop1): Directory bread(block 72) failed [ 314.752236][T11980] FAT-fs (loop1): Directory bread(block 73) failed [ 315.017215][T11917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 315.068434][T11917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 315.128641][T11917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 315.178173][T11917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 315.576199][T11917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.636552][ T50] Bluetooth: hci4: command tx timeout [ 315.650786][T11917] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.677028][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.686020][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.773538][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.781723][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.936824][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 315.951923][T12017] netlink: 'syz.1.2807': attribute type 6 has an invalid length. [ 316.190069][T12001] loop0: detected capacity change from 0 to 32768 [ 316.238745][T12001] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.2802 (12001) [ 316.316859][T12001] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 316.364509][T12001] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 316.412299][T12001] BTRFS info (device loop0): force zlib compression, level 3 [ 316.444421][T12001] BTRFS info (device loop0): force clearing of disk cache [ 316.452364][T12001] BTRFS info (device loop0): turning off barriers [ 316.504704][T12001] BTRFS info (device loop0): doing ref verification [ 316.511756][T12001] BTRFS info (device loop0): enabling disk space caching [ 316.547335][T12001] BTRFS info (device loop0): disk space caching is enabled [ 316.607662][T12011] loop3: detected capacity change from 0 to 32768 [ 316.652206][T11917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.679981][T12011] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 316.743654][T12028] xt_CT: No such helper "pptp" [ 316.747025][T12011] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 316.785619][T12001] BTRFS info (device loop0): enabling ssd optimizations [ 316.804467][T12001] BTRFS info (device loop0): auto enabling async discard [ 316.847682][T12001] BTRFS info (device loop0): rebuilding free space tree [ 316.954615][T12011] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 316.981780][T12001] BTRFS info (device loop0): disabling free space tree [ 317.035216][T12001] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 317.043211][T12011] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 317.094432][T12001] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 317.118388][T12011] OCFS2: File system is now read-only. [ 317.138727][T12011] (syz.3.2803,12011,0):ocfs2_search_chain:1761 ERROR: status = -30 [ 317.164529][T12011] (syz.3.2803,12011,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 317.208289][T12011] (syz.3.2803,12011,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 317.217635][T12011] (syz.3.2803,12011,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 317.226820][T12011] (syz.3.2803,12011,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 317.236105][T12011] (syz.3.2803,12011,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 317.244905][T12011] (syz.3.2803,12011,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 317.253661][T12011] (syz.3.2803,12011,1):ocfs2_symlink:1944 ERROR: status = -30 [ 317.265709][T12011] (syz.3.2803,12011,1):ocfs2_symlink:2068 ERROR: status = -30 [ 317.411847][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 317.525189][ T5790] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 317.706477][ T50] Bluetooth: hci4: command tx timeout [ 317.757256][T11917] veth0_vlan: entered promiscuous mode [ 317.815008][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.828825][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.890028][T11917] veth1_vlan: entered promiscuous mode [ 318.052344][T11917] veth0_macvtap: entered promiscuous mode [ 318.082787][T11917] veth1_macvtap: entered promiscuous mode [ 318.269129][T11917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.286582][ T28] audit: type=1326 audit(1755657571.901:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 318.324450][T11917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.359642][T11917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.399860][ T28] audit: type=1326 audit(1755657571.921:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 318.400843][T11917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.462216][ T28] audit: type=1326 audit(1755657571.941:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 318.488462][ T28] audit: type=1326 audit(1755657571.941:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 318.529382][ T28] audit: type=1326 audit(1755657571.941:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.0.2817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 318.544288][T11917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.616502][T12076] xt_ecn: cannot match TCP bits for non-tcp packets [ 318.639494][T11917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.661177][T11917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.676210][T11917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.710395][T11917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.767225][T11917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.824451][T11917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.864338][T11917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.887611][T11917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.934264][T11917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.954523][T11917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.972006][T11917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.008477][T11917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.038137][T11917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.064513][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 319.097615][T11917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.142392][T11917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.174299][T11917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.183552][T11917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.459766][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.504423][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.628563][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.664412][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.784648][ T50] Bluetooth: hci4: command tx timeout [ 320.519671][T12127] xt_l2tp: wrong L2TP version: 0 [ 321.680141][T12168] netlink: 'syz.0.2863': attribute type 7 has an invalid length. [ 321.705297][T12168] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2863'. [ 322.021673][T12176] x_tables: unsorted underflow at hook 2 [ 322.534948][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2875'. [ 322.551499][T12189] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2875'. [ 322.611495][T12191] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2876'. [ 322.644575][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'. [ 322.685199][T12191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2876'. [ 322.738888][T12167] loop4: detected capacity change from 0 to 32768 [ 322.874945][T12167] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 323.095443][T12167] XFS (loop4): Ending clean mount [ 323.169657][T12167] XFS (loop4): Quotacheck needed: Please wait. [ 323.231392][T12209] netlink: 'syz.3.2881': attribute type 8 has an invalid length. [ 323.266451][T12209] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2881'. [ 323.316919][T12167] XFS (loop4): Quotacheck: Done. [ 323.506705][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'. [ 323.512943][T12185] loop1: detected capacity change from 0 to 32768 [ 323.601635][T11917] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 323.645802][T12185] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 323.815450][T12185] XFS (loop1): Ending clean mount [ 323.912150][T12185] XFS (loop1): Quotacheck needed: Please wait. [ 324.084630][T12185] XFS (loop1): Quotacheck: Done. [ 324.215822][T12233] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2889'. [ 324.376031][ T5787] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 324.769630][T12243] loop4: detected capacity change from 0 to 4096 [ 324.813294][T12243] EXT4-fs: inline encryption not supported [ 324.818349][T12247] netlink: 772 bytes leftover after parsing attributes in process `syz.3.2897'. [ 324.889777][T12243] EXT4-fs (loop4): Test dummy encryption mode enabled [ 325.004671][T12243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.036660][T12250] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 325.295107][T11917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.559079][T12268] loop4: detected capacity change from 0 to 47 [ 326.064817][ T966] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 326.257046][ T966] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 326.274581][ T966] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 326.302196][ T966] usb 4-1: config 0 has no interface number 0 [ 326.337530][ T966] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 326.347501][T12290] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 326.383099][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.402842][ T966] usb 4-1: Product: syz [ 326.418824][ T966] usb 4-1: Manufacturer: syz [ 326.424159][ T966] usb 4-1: SerialNumber: syz [ 326.441713][ T966] usb 4-1: config 0 descriptor?? [ 326.610029][T12296] loop1: detected capacity change from 0 to 2048 [ 326.691476][T12296] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 326.748228][T12301] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.921134][ T966] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 326.954309][ T966] usb 4-1: No valid video chain found. [ 326.982975][ T966] usb 4-1: USB disconnect, device number 16 [ 327.902732][T12334] program syz.1.2935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.129216][T12338] bridge3: entered promiscuous mode [ 328.523053][T12324] loop4: detected capacity change from 0 to 32768 [ 328.583841][T12324] JBD2: Ignoring recovery information on journal [ 328.663714][T12324] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 328.982389][T12362] netlink: 'syz.0.2948': attribute type 10 has an invalid length. [ 329.035404][T12364] vlan0: left promiscuous mode [ 329.053513][T12366] netlink: 'syz.3.2950': attribute type 13 has an invalid length. [ 329.107766][T11917] ocfs2: Unmounting device (7,4) on (node local) [ 329.564649][T12378] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 329.628919][T12378] netlink: 'syz.3.2957': attribute type 3 has an invalid length. [ 329.643034][T12378] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2957'. [ 330.044109][T12394] tmpfs: Bad value for 'mpol' [ 330.472473][T12410] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2973'. [ 330.771689][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2978'. [ 330.793705][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'. [ 330.811891][T12422] raw_sendmsg: syz.4.2977 forgot to set AF_INET. Fix it! [ 330.854644][T12421] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2976'. [ 331.114943][T12432] xt_policy: too many policy elements [ 331.427436][T12442] loop0: detected capacity change from 0 to 512 [ 331.479362][T12442] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 331.532742][T12442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 331.552755][T12442] System zones: 0-2, 18-18, 34-34 [ 331.651265][T12442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.743915][T12455] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 331.754617][T12442] ext4 filesystem being mounted at /814/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.981390][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.040838][T12462] comedi comedi3: no devices specified [ 332.477816][T12474] xt_hashlimit: max too large, truncated to 1048576 [ 334.094060][T12509] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 334.199419][T12487] loop4: detected capacity change from 0 to 32768 [ 334.244541][T12487] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3008 (12487) [ 334.309354][T12487] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 334.356298][T12487] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 334.378700][T12487] BTRFS info (device loop4): using free space tree [ 334.489316][T12513] loop3: detected capacity change from 0 to 4096 [ 334.517285][T12513] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 334.695917][T12487] BTRFS info (device loop4): enabling ssd optimizations [ 334.784851][T12487] BTRFS info (device loop4): auto enabling async discard [ 335.145351][T11917] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 336.391825][ T28] audit: type=1326 audit(1755657589.981:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 336.482225][ T28] audit: type=1326 audit(1755657589.981:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 336.556771][ T28] audit: type=1326 audit(1755657589.991:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 336.644866][ T28] audit: type=1326 audit(1755657589.991:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 336.704896][T12547] loop1: detected capacity change from 0 to 32768 [ 336.728610][ T28] audit: type=1326 audit(1755657589.991:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.3.3040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 336.919057][T12579] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.3047'. [ 337.457922][T12595] JFS: discard option not supported on device [ 337.484779][T12595] Mount JFS Failure: -22 [ 337.501666][T12595] jfs_mount failed w/return code = -22 [ 337.798774][T12606] loop4: detected capacity change from 0 to 128 [ 338.137162][T12617] loop4: detected capacity change from 0 to 64 [ 338.434432][ T28] audit: type=1326 audit(1755657592.031:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12624 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 338.547650][ T28] audit: type=1326 audit(1755657592.031:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12624 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 338.640516][ T28] audit: type=1326 audit(1755657592.041:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12624 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 338.746644][ T28] audit: type=1326 audit(1755657592.041:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12624 comm="syz.1.3073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 338.776476][T12637] (null): rxe_set_mtu: Set mtu to 256 [ 338.790732][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 338.815925][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 338.827945][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 339.093328][T12649] loop1: detected capacity change from 0 to 22 [ 339.115502][T12649] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 339.142569][T12649] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 339.262337][T12651] loop4: detected capacity change from 0 to 256 [ 339.317269][T12653] netlink: 'syz.0.3084': attribute type 1 has an invalid length. [ 339.345932][T12653] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3084'. [ 339.413886][ T27] vxcan1 speed is unknown, defaulting to 1000 [ 339.423020][T12637] infiniband syz2: set active [ 339.441600][T12651] FAT-fs (loop4): Directory bread(block 64) failed [ 339.454998][T12637] infiniband syz2: added vxcan1 [ 339.462897][T12651] FAT-fs (loop4): Directory bread(block 65) failed [ 339.485788][T12651] FAT-fs (loop4): Directory bread(block 66) failed [ 339.492578][T12651] FAT-fs (loop4): Directory bread(block 67) failed [ 339.522721][T12651] FAT-fs (loop4): Directory bread(block 68) failed [ 339.572115][T12651] FAT-fs (loop4): Directory bread(block 69) failed [ 339.608659][T12651] FAT-fs (loop4): Directory bread(block 70) failed [ 339.618329][T12651] FAT-fs (loop4): Directory bread(block 71) failed [ 339.627912][T12651] FAT-fs (loop4): Directory bread(block 72) failed [ 339.636005][T12651] FAT-fs (loop4): Directory bread(block 73) failed [ 339.748434][T12637] RDS/IB: syz2: added [ 339.795136][T12637] smc: adding ib device syz2 with port count 1 [ 339.818756][T12637] smc: ib device syz2 port 1 has pnetid [ 339.852672][ T27] vxcan1 speed is unknown, defaulting to 1000 [ 339.880015][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 340.126690][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3091'. [ 340.299546][T12674] loop4: detected capacity change from 0 to 256 [ 340.351689][T12676] loop1: detected capacity change from 0 to 256 [ 340.357229][T12674] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x08fbab18, utbl_chksum : 0xe619d30d) [ 340.551333][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 340.580049][T12678] loop0: detected capacity change from 0 to 256 [ 340.617271][T12678] exfat: Deprecated parameter 'utf8' [ 340.715783][T12678] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 341.331998][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 341.745524][ T27] kernel write not supported for file /1710/net/ip6_tables_matches (pid: 27 comm: kworker/1:1) [ 341.965164][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 342.178681][T12719] loop1: detected capacity change from 0 to 128 [ 342.269717][T12719] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.293617][T12719] ext4 filesystem being mounted at /812/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 342.416498][ T5787] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.590772][T12637] vxcan1 speed is unknown, defaulting to 1000 [ 342.770103][T12735] loop4: detected capacity change from 0 to 256 [ 343.724838][T12762] dummy0: entered promiscuous mode [ 343.750185][T12761] dummy0: left promiscuous mode [ 344.421161][T12788] dummy0: entered promiscuous mode [ 344.442344][T12786] dummy0: left promiscuous mode [ 345.074533][ T5791] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 345.223681][ T5845] kernel write not supported for file /155/net/ip6_tables_matches (pid: 5845 comm: kworker/0:5) [ 345.299391][ T5791] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 345.324547][ T5791] usb 2-1: config 0 has no interface number 0 [ 345.336349][ T5791] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 345.374638][ T5791] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 345.406439][ T5791] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 345.448467][ T5791] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 345.480820][ T5791] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.516451][ T5791] usb 2-1: config 0 descriptor?? [ 345.548584][ T5791] gspca_main: spca561-2.14.0 probing abcd:cdee [ 345.753697][ T5791] spca561: probe of 2-1:0.156 failed with error -22 [ 345.778155][ T5791] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 345.804389][ T5791] usb 2-1: MIDIStreaming interface descriptor not found [ 345.925206][ T5791] usb 2-1: USB disconnect, device number 13 [ 346.524257][T12825] loop0: detected capacity change from 0 to 32768 [ 346.542250][T12843] netlink: 'syz.3.3176': attribute type 21 has an invalid length. [ 346.565488][T12843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 346.586274][T12825] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 346.603346][T12825] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 346.821109][T12825] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136 [ 346.900604][T12854] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 346.918838][T12825] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 346.932411][T12856] netlink: 'syz.4.3178': attribute type 1 has an invalid length. [ 346.946617][T12856] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3178'. [ 346.956798][T12825] OCFS2: File system is now read-only. [ 346.962783][T12825] (syz.0.3165,12825,1):ocfs2_search_chain:1761 ERROR: status = -30 [ 346.994433][T12825] (syz.0.3165,12825,1):ocfs2_search_chain:1871 ERROR: status = -30 [ 347.019529][T12825] (syz.0.3165,12825,1):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 347.064489][T12825] (syz.0.3165,12825,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 347.105847][T12825] (syz.0.3165,12825,1):ocfs2_claim_new_inode:2216 ERROR: status = -30 [ 347.142844][T12825] (syz.0.3165,12825,1):ocfs2_claim_new_inode:2231 ERROR: status = -30 [ 347.162741][T12861] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3183'. [ 347.174387][T12825] (syz.0.3165,12825,1):ocfs2_mknod_locked:639 ERROR: status = -30 [ 347.174550][T12825] (syz.0.3165,12825,1):ocfs2_symlink:1944 ERROR: status = -30 [ 347.174733][T12825] (syz.0.3165,12825,1):ocfs2_symlink:2068 ERROR: status = -30 [ 347.223957][T12861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3183'. [ 347.254537][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'. [ 347.283043][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 348.022875][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3193'. [ 348.372601][T12891] netlink: 'syz.4.3200': attribute type 8 has an invalid length. [ 348.409283][T12891] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3200'. [ 348.916469][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3209'. [ 349.004360][ T27] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 349.145328][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 349.204409][ T27] usb 5-1: Using ep0 maxpacket: 16 [ 349.227084][ T27] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 349.253999][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.273827][ T27] usb 5-1: Product: syz [ 349.283981][ T27] usb 5-1: Manufacturer: syz [ 349.294088][ T27] usb 5-1: SerialNumber: syz [ 349.316341][ T27] usb 5-1: config 0 descriptor?? [ 349.384594][ T2181] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 349.550610][ T27] usb 5-1: ignoring: not an USB2CAN converter [ 349.585000][ T2181] usb 4-1: Using ep0 maxpacket: 8 [ 349.603257][ T2181] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.632026][ T2181] usb 4-1: config 0 has no interface number 0 [ 349.654439][ T2181] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.682252][ T2181] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 349.697133][ T2181] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 349.719168][ T2181] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.742083][ T2181] usb 4-1: config 0 descriptor?? [ 349.776222][ T2181] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 349.783978][ T5791] usb 5-1: USB disconnect, device number 2 [ 350.030922][ T2181] usb 4-1: USB disconnect, device number 17 [ 350.219956][T12930] loop0: detected capacity change from 0 to 32768 [ 350.239612][T12930] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 350.311937][T12930] XFS (loop0): Ending clean mount [ 350.323693][T12930] XFS (loop0): Quotacheck needed: Please wait. [ 350.388718][T12930] XFS (loop0): Quotacheck: Done. [ 350.598279][ T5790] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 351.469759][T12970] netlink: 'syz.1.3235': attribute type 1 has an invalid length. [ 351.953936][T12986] netlink: 'syz.4.3243': attribute type 10 has an invalid length. [ 351.974689][T12986] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3243'. [ 351.993372][T12986] team0: entered promiscuous mode [ 352.003498][T12986] team_slave_0: entered promiscuous mode [ 352.013832][T12986] team_slave_1: entered promiscuous mode [ 352.041684][T12986] bridge0: port 3(team0) entered blocking state [ 352.064730][T12986] bridge0: port 3(team0) entered disabled state [ 352.077219][T12986] team0: entered allmulticast mode [ 352.083052][T12986] team_slave_0: entered allmulticast mode [ 352.090990][T12986] team_slave_1: entered allmulticast mode [ 352.114000][T12986] bridge0: port 3(team0) entered blocking state [ 352.120966][T12986] bridge0: port 3(team0) entered forwarding state [ 352.401139][T12968] loop0: detected capacity change from 0 to 32768 [ 352.483398][T13001] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 352.542442][T12968] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 352.756766][T12968] XFS (loop0): Ending clean mount [ 352.815920][T12968] XFS (loop0): Quotacheck needed: Please wait. [ 353.017777][T12968] XFS (loop0): Quotacheck: Done. [ 353.283615][T13024] netlink: 'syz.1.3266': attribute type 1 has an invalid length. [ 353.293656][T13024] netlink: 'syz.1.3266': attribute type 3 has an invalid length. [ 353.307287][T13024] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3266'. [ 353.314319][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 353.317748][ T5845] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 353.549269][ T5845] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 353.577007][T13028] loop4: detected capacity change from 0 to 64 [ 353.584810][ T5845] usb 4-1: config 0 has no interface number 0 [ 353.608829][ T5845] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 353.665132][ T5845] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 353.704275][ T5845] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 353.809847][ T5845] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 353.834396][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.888431][ T5845] usb 4-1: config 0 descriptor?? [ 353.909062][ T5845] gspca_main: spca561-2.14.0 probing abcd:cdee [ 354.134028][ T5845] spca561: probe of 4-1:0.156 failed with error -22 [ 354.152957][ T5845] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 354.173306][ T5845] usb 4-1: MIDIStreaming interface descriptor not found [ 354.288663][ T5845] usb 4-1: USB disconnect, device number 18 [ 355.407116][ T28] audit: type=1400 audit(1755657609.021:2158): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=13069 comm="syz.4.3280" [ 355.526153][T13075] loop0: detected capacity change from 0 to 256 [ 355.894638][T13084] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 356.236593][ C1] sd 0:0:1:0: [sda] tag#8081 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 356.248650][ C1] sd 0:0:1:0: [sda] tag#8081 CDB: Read(6) 08 00 9f d1 fe de [ 356.381208][T13100] netlink: 'syz.0.3295': attribute type 2 has an invalid length. [ 356.400506][T13100] netlink: 'syz.0.3295': attribute type 1 has an invalid length. [ 356.672985][T13112] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3301'. [ 356.901110][ C1] sd 0:0:1:0: [sda] tag#8082 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 356.912268][ C1] sd 0:0:1:0: [sda] tag#8082 CDB: Read(6) 08 00 9f d1 fe de [ 356.920335][T13118] loop0: detected capacity change from 0 to 1024 [ 357.047256][T13123] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3307'. [ 357.063879][T13118] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 357.089716][T13118] syz.0.3304: attempt to access beyond end of device [ 357.089716][T13118] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 357.133624][T13118] Buffer I/O error on dev loop0, logical block 458752, async page read [ 357.152293][T13118] syz.0.3304: attempt to access beyond end of device [ 357.152293][T13118] loop0: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 357.190958][T13118] Buffer I/O error on dev loop0, logical block 458752, async page read [ 357.205108][T13126] netlink: 'syz.4.3308': attribute type 2 has an invalid length. [ 357.213198][T13126] netlink: 'syz.4.3308': attribute type 1 has an invalid length. [ 357.773751][T13146] comedi comedi3: no devices specified [ 357.957268][T13151] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 359.137349][T13161] loop3: detected capacity change from 0 to 32768 [ 359.164901][T13161] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 359.286654][T13161] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 359.654900][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 359.782324][T13199] loop0: detected capacity change from 0 to 512 [ 359.861568][T13199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.899191][T13199] ext4 filesystem being mounted at /901/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.128113][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.463676][T13218] loop3: detected capacity change from 0 to 512 [ 360.574981][T13218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.614519][T13218] ext4 filesystem being mounted at /791/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.678211][T13218] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.3351: invalid size [ 360.826195][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.057330][T13238] netlink: 'syz.4.3360': attribute type 5 has an invalid length. [ 361.695346][T13256] loop3: detected capacity change from 0 to 512 [ 361.839495][T13256] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.884053][T13256] ext4 filesystem being mounted at /795/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.107281][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.156900][T13270] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 362.327998][ T5845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 362.372892][T13275] loop0: detected capacity change from 0 to 2048 [ 362.433611][T13275] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 362.467399][T13275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 362.524464][ T5845] usb 5-1: Using ep0 maxpacket: 16 [ 362.571867][ T5845] usb 5-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 362.617868][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32695, setting to 1024 [ 362.677193][ T5845] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 362.731351][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.807705][ T5845] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 362.848809][ T5845] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 362.888648][ T5845] usb 5-1: Manufacturer: syz [ 362.906513][ T5845] usb 5-1: config 0 descriptor?? [ 362.913167][T13266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 363.088103][T13290] loop1: detected capacity change from 0 to 512 [ 363.150013][T13290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.194611][T13290] ext4 filesystem being mounted at /889/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.222015][ T5882] usb 5-1: USB disconnect, device number 3 [ 363.361551][ T28] audit: type=1400 audit(1755657616.971:2159): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=13299 comm="syz.3.3387" [ 363.471682][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.542946][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3389'. [ 363.565903][T13304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3389'. [ 363.603923][T13304] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3389'. [ 364.352825][T13328] netlink: 'syz.4.3401': attribute type 10 has an invalid length. [ 364.401742][T13330] loop1: detected capacity change from 0 to 1024 [ 364.435631][T13328] bridge0: port 3(team0) entered disabled state [ 364.524855][T13328] team0: left allmulticast mode [ 364.530494][T13328] team_slave_0: left allmulticast mode [ 364.560452][T13328] team_slave_1: left allmulticast mode [ 364.573188][T13328] team0: left promiscuous mode [ 364.579010][T13328] team_slave_0: left promiscuous mode [ 364.595201][T13328] team_slave_1: left promiscuous mode [ 364.613737][T13328] bridge0: port 3(team0) entered disabled state [ 364.671177][T13328] batman_adv: batadv0: Adding interface: team0 [ 364.690549][T13328] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.732349][T13328] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 364.763056][T13338] xt_TPROXY: Can be used only with -p tcp or -p udp [ 365.423081][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3423'. [ 365.450634][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3423'. [ 365.506401][T13355] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3423'. [ 365.935384][T13374] xt_TPROXY: Can be used only with -p tcp or -p udp [ 366.447352][T13394] netlink: 'syz.1.3434': attribute type 10 has an invalid length. [ 366.498955][T13394] batman_adv: batadv0: Adding interface: team0 [ 366.544693][T13394] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.651058][T13394] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 366.772381][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'. [ 367.323176][T13422] loop3: detected capacity change from 0 to 1024 [ 367.831622][T13420] loop1: detected capacity change from 0 to 32768 [ 368.224892][ T28] audit: type=1326 audit(1755657621.831:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.0.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 368.294277][ T28] audit: type=1326 audit(1755657621.871:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.0.3464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 368.463774][T13445] netlink: 'syz.1.3466': attribute type 1 has an invalid length. [ 368.479160][T13448] loop0: detected capacity change from 0 to 256 [ 368.510581][T13445] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.3466'. [ 368.983523][T13459] loop0: detected capacity change from 0 to 1024 [ 369.354905][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3472'. [ 369.646097][T13484] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3478'. [ 369.883322][T13493] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 369.890856][T13493] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 369.900386][T13494] netlink: 'syz.1.3481': attribute type 30 has an invalid length. [ 369.935965][T13493] vhci_hcd vhci_hcd.0: Device attached [ 369.978871][T13498] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 369.986102][T13498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.999581][T13498] vhci_hcd vhci_hcd.0: Device attached [ 370.067690][T13499] vhci_hcd: connection closed [ 370.070542][T13495] vhci_hcd: connection closed [ 370.098358][ T8195] vhci_hcd: stop threads [ 370.120599][ T8195] vhci_hcd: release socket [ 370.124595][ T5795] vhci_hcd: vhci_device speed not set [ 370.142610][ T8195] vhci_hcd: disconnect device [ 370.185833][ T8195] vhci_hcd: stop threads [ 370.190782][ T8195] vhci_hcd: release socket [ 370.224549][ T5795] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 370.224896][ T8195] vhci_hcd: disconnect device [ 370.250138][T13509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3485'. [ 370.546297][T13513] loop3: detected capacity change from 0 to 4096 [ 370.565993][T13513] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 370.833146][T13525] netlink: 'syz.0.3491': attribute type 30 has an invalid length. [ 371.039438][T13527] loop4: detected capacity change from 0 to 512 [ 371.121661][ T5796] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 371.321182][T13535] loop3: detected capacity change from 0 to 256 [ 371.425282][T13539] loop4: detected capacity change from 0 to 64 [ 371.568450][T13543] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3500'. [ 371.660825][T13545] netlink: 292 bytes leftover after parsing attributes in process `syz.1.3509'. [ 372.159722][T13560] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 372.174483][T13557] loop1: detected capacity change from 0 to 4096 [ 372.219344][T13557] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 372.276879][T13557] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 372.321209][T13557] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 372.378649][T13557] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 372.437228][T13557] ntfs: volume version 3.1. [ 372.494490][T13557] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 372.528557][T13557] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 372.551156][T13557] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 372.551693][T13568] overlayfs: empty lowerdir [ 372.574368][T13557] ntfs: (device loop1): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing. [ 372.596538][T13557] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -2 while reading index inode (mft_no 0x0, name_len 2. [ 372.612859][T13557] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota/$Q index. [ 373.818673][T13601] overlayfs: empty lowerdir [ 374.348868][T13618] tmpfs: Bad value for 'mpol' [ 374.384754][T13622] netlink: 'syz.0.3539': attribute type 21 has an invalid length. [ 374.920422][T13631] loop0: detected capacity change from 0 to 4096 [ 374.971931][T13631] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 375.151130][T13631] ntfs3: loop0: failed to convert "c46c" to cp861 [ 375.412440][ T5795] vhci_hcd: vhci_device speed not set [ 375.856225][T13630] loop1: detected capacity change from 0 to 32768 [ 376.010726][T13657] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 376.044343][T13657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3556'. [ 376.084944][T13657] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 376.452407][T13667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3562'. [ 377.073714][T13686] xt_NFQUEUE: number of total queues is 0 [ 377.423352][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 377.423370][ T28] audit: type=1326 audit(1755657631.021:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 377.471063][ T28] audit: type=1326 audit(1755657631.021:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 377.496110][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.515451][ T28] audit: type=1326 audit(1755657631.081:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 377.540467][ C1] vkms_vblank_simulate: vblank timer overrun [ 377.595877][ T28] audit: type=1326 audit(1755657631.081:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 377.662142][ T28] audit: type=1326 audit(1755657631.081:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13695 comm="syz.0.3576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc26998ebe9 code=0x7ffc0000 [ 378.222802][T13723] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3587'. [ 378.996784][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3601'. [ 379.233933][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.241433][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.292168][T13769] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 381.053770][ T28] audit: type=1326 audit(1755657634.651:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 381.138155][ T28] audit: type=1326 audit(1755657634.651:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 381.196685][ T28] audit: type=1326 audit(1755657634.661:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 381.270468][ T28] audit: type=1326 audit(1755657634.661:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13820 comm="syz.1.3636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 381.299677][T13824] loop4: detected capacity change from 0 to 4096 [ 381.308927][T13828] program syz.3.3639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.324871][T13824] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 381.356515][T13804] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 381.449281][T13824] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 381.514440][T13830] loop1: detected capacity change from 0 to 256 [ 381.603645][T13830] FAT-fs (loop1): Directory bread(block 64) failed [ 381.639258][T13830] FAT-fs (loop1): Directory bread(block 65) failed [ 381.674763][T13830] FAT-fs (loop1): Directory bread(block 66) failed [ 381.682052][T13830] FAT-fs (loop1): Directory bread(block 67) failed [ 381.733117][T13830] FAT-fs (loop1): Directory bread(block 68) failed [ 381.763933][T13830] FAT-fs (loop1): Directory bread(block 69) failed [ 381.782471][T13830] FAT-fs (loop1): Directory bread(block 70) failed [ 381.813159][T13830] FAT-fs (loop1): Directory bread(block 71) failed [ 381.851759][T13830] FAT-fs (loop1): Directory bread(block 72) failed [ 381.895676][T13830] FAT-fs (loop1): Directory bread(block 73) failed [ 382.017052][T13839] loop3: detected capacity change from 0 to 2048 [ 382.106135][T13839] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.153781][T13839] EXT4-fs error (device loop3): ext4_find_extent:936: inode #2: comm syz.3.3645: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 382.311163][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.654633][ T5795] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 382.854342][ T5795] usb 5-1: Using ep0 maxpacket: 32 [ 382.862725][ T5795] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 382.890062][ T5795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.915210][T13869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3657'. [ 382.945270][ T5795] usb 5-1: config 0 descriptor?? [ 382.961154][ T5795] as10x_usb: device has been detected [ 382.983406][ T5795] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 383.095697][ T5795] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 383.213999][ T5795] as10x_usb: error during firmware upload part1 [ 383.228360][ T5795] Registered device nBox DVB-T Dongle [ 383.263100][ T5795] usb 5-1: USB disconnect, device number 4 [ 383.363677][ T5795] Unregistered device nBox DVB-T Dongle [ 383.405309][ T5795] as10x_usb: device has been disconnected [ 383.602883][T13883] loop3: detected capacity change from 0 to 4096 [ 383.634749][T13883] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 383.712512][T13887] loop0: detected capacity change from 0 to 256 [ 383.786045][T13887] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 383.807974][T13883] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 384.755098][T13913] usb usb8: check_ctrlrecip: process 13913 (syz.1.3678) requesting ep 01 but needs 81 [ 384.781954][T13913] usb usb8: usbfs: process 13913 (syz.1.3678) did not claim interface 0 before use [ 384.923029][T13920] loop1: detected capacity change from 0 to 256 [ 385.022107][T13920] FAT-fs (loop1): Directory bread(block 64) failed [ 385.032116][T13920] FAT-fs (loop1): Directory bread(block 65) failed [ 385.044604][ T27] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 385.074607][T13920] FAT-fs (loop1): Directory bread(block 66) failed [ 385.083659][T13920] FAT-fs (loop1): Directory bread(block 67) failed [ 385.121316][T13920] FAT-fs (loop1): Directory bread(block 68) failed [ 385.134538][T13920] FAT-fs (loop1): Directory bread(block 69) failed [ 385.149415][T13920] FAT-fs (loop1): Directory bread(block 70) failed [ 385.164525][T13920] FAT-fs (loop1): Directory bread(block 71) failed [ 385.183207][T13920] FAT-fs (loop1): Directory bread(block 72) failed [ 385.215154][T13920] FAT-fs (loop1): Directory bread(block 73) failed [ 385.234455][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 385.256257][ T27] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 385.285218][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.315855][ T27] usb 4-1: config 0 descriptor?? [ 385.354978][ T27] as10x_usb: device has been detected [ 385.361765][ T27] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 385.441383][ T27] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 385.447419][T13930] loop0: detected capacity change from 0 to 4096 [ 385.478339][ T27] as10x_usb: error during firmware upload part1 [ 385.510084][T13933] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 385.512844][ T27] Registered device nBox DVB-T Dongle [ 385.780171][ T5791] usb 4-1: USB disconnect, device number 19 [ 385.861475][T13937] loop4: detected capacity change from 0 to 1024 [ 385.868753][ T5791] Unregistered device nBox DVB-T Dongle [ 385.908477][ T5791] as10x_usb: device has been disconnected [ 385.986069][T13937] hfsplus: found bad thread record in catalog [ 386.065477][T13940] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3691'. [ 386.112436][ T58] hfsplus: b-tree write err: -5, ino 4 [ 386.439635][T13951] loop1: detected capacity change from 0 to 256 [ 386.572682][T13953] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 386.585169][T13951] FAT-fs (loop1): Directory bread(block 64) failed [ 386.592144][T13951] FAT-fs (loop1): Directory bread(block 65) failed [ 386.624052][T13951] FAT-fs (loop1): Directory bread(block 66) failed [ 386.642873][T13951] FAT-fs (loop1): Directory bread(block 67) failed [ 386.668118][T13951] FAT-fs (loop1): Directory bread(block 68) failed [ 386.685568][T13951] FAT-fs (loop1): Directory bread(block 69) failed [ 386.704371][T13951] FAT-fs (loop1): Directory bread(block 70) failed [ 386.720869][T13951] FAT-fs (loop1): Directory bread(block 71) failed [ 386.754896][T13951] FAT-fs (loop1): Directory bread(block 72) failed [ 386.811030][T13951] FAT-fs (loop1): Directory bread(block 73) failed [ 386.815632][T13957] loop4: detected capacity change from 0 to 4096 [ 386.895317][T13962] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 386.910685][T13961] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3701'. [ 387.658685][T13980] loop3: detected capacity change from 0 to 256 [ 387.749071][T13980] FAT-fs (loop3): Directory bread(block 64) failed [ 387.774519][ T2181] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 387.787185][T13984] loop0: detected capacity change from 0 to 1024 [ 387.796045][T13980] FAT-fs (loop3): Directory bread(block 65) failed [ 387.803800][T13980] FAT-fs (loop3): Directory bread(block 66) failed [ 387.850808][T13980] FAT-fs (loop3): Directory bread(block 67) failed [ 387.866800][T13980] FAT-fs (loop3): Directory bread(block 68) failed [ 387.884717][T13984] hfsplus: found bad thread record in catalog [ 387.897591][T13980] FAT-fs (loop3): Directory bread(block 69) failed [ 387.923554][T13980] FAT-fs (loop3): Directory bread(block 70) failed [ 387.945803][T13980] FAT-fs (loop3): Directory bread(block 71) failed [ 387.973928][T13980] FAT-fs (loop3): Directory bread(block 72) failed [ 387.983209][ T58] hfsplus: b-tree write err: -5, ino 4 [ 387.989505][T13980] FAT-fs (loop3): Directory bread(block 73) failed [ 388.015090][ T2181] usb 5-1: Using ep0 maxpacket: 32 [ 388.057530][ T2181] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.076316][ T2181] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.132071][ T2181] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 388.148516][ T2181] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 388.184989][ T2181] usb 5-1: Product: syz [ 388.189370][ T2181] usb 5-1: Manufacturer: syz [ 388.219893][ T2181] hub 5-1:4.0: USB hub found [ 388.440811][ T2181] hub 5-1:4.0: config failed, hub has too many ports! (err -19) [ 388.864753][ T5795] usb 5-1: USB disconnect, device number 5 [ 388.897704][T14009] netlink: 'syz.0.3724': attribute type 32 has an invalid length. [ 388.977677][T14010] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 390.248843][T14050] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 390.274449][T14050] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 390.404452][ T5791] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 390.609414][ T5791] usb 4-1: Using ep0 maxpacket: 32 [ 390.636302][ T5791] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 390.654341][ T5791] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 390.674957][ T5791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 390.691617][T14030] loop1: detected capacity change from 0 to 32768 [ 390.698980][ T5791] usb 4-1: config 1 has no interface number 0 [ 390.723607][ T5791] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 390.761604][T14030] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 390.771569][T14030] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 390.793502][T14030] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 390.809239][ T5791] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 390.867958][ T5791] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 390.876909][T14030] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 390.930516][ T5791] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 390.980934][ T5791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.035832][ T5791] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 391.271346][ T5791] snd_usb_pod 4-1:1.1: cannot start listening: -90 [ 391.282756][ T5791] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 391.304821][ T5791] snd_usb_pod: probe of 4-1:1.1 failed with error -90 [ 391.543702][ T5882] usb 4-1: USB disconnect, device number 20 [ 391.705690][T14079] vxcan1 speed is unknown, defaulting to 1000 [ 392.028736][T14091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3764'. [ 392.039767][T14091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3764'. [ 392.051824][T14091] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3764'. [ 392.356511][T14101] vxcan1 speed is unknown, defaulting to 1000 [ 392.774617][T14114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3775'. [ 392.805530][T14114] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3775'. [ 392.848924][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3775'. [ 392.954994][T14119] binder: 14118:14119 ioctl 40046205 0 returned -22 [ 393.154647][T14127] vxcan1 speed is unknown, defaulting to 1000 [ 394.553956][T14143] loop3: detected capacity change from 0 to 32768 [ 394.620619][T14143] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 394.655559][T14143] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 394.718321][T14143] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 394.893558][T14173] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.916375][T14143] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 394.985635][T14176] netlink: 'syz.4.3806': attribute type 10 has an invalid length. [ 395.055344][T14176] veth0_macvtap: left promiscuous mode [ 395.149381][T14176] batman_adv: batadv0: Adding interface: macvtap0 [ 395.169970][T14176] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.248913][T14176] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 395.327872][T14180] batadv0: entered promiscuous mode [ 396.132130][T14192] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 396.168800][T14192] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 396.194330][ T27] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 396.321558][T14179] loop0: detected capacity change from 0 to 32768 [ 396.392389][T14199] loop4: detected capacity change from 0 to 256 [ 396.392853][T14179] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 396.407457][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.422246][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.444005][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.455093][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.464437][ T27] usb 2-1: Product: syz [ 396.469952][ T27] usb 2-1: Manufacturer: syz [ 396.475393][ T27] usb 2-1: SerialNumber: syz [ 396.519918][T14179] (syz.0.3808,14179,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=8 [ 396.542937][T14179] (syz.0.3808,14179,1):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 396.553866][T14179] (syz.0.3808,14179,1):ocfs2_mknod:298 ERROR: status = -2 [ 396.571416][T14179] (syz.0.3808,14179,1):ocfs2_mknod:502 ERROR: status = -2 [ 396.581092][T14179] (syz.0.3808,14179,1):ocfs2_mkdir:659 ERROR: status = -2 [ 396.759316][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 396.932740][ T27] usb 2-1: cannot find UAC_HEADER [ 397.006663][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 397.026559][ T27] usb 2-1: USB disconnect, device number 14 [ 397.215270][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.425616][T14214] netlink: 'syz.4.3824': attribute type 10 has an invalid length. [ 397.551908][T14214] team0: Port device dummy0 added [ 397.666470][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3827'. [ 397.930443][ T28] audit: type=1326 audit(1755657651.531:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.3.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 398.036126][ T28] audit: type=1326 audit(1755657651.531:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.3.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 398.153644][ T28] audit: type=1326 audit(1755657651.531:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.3.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 398.203117][T14235] loop3: detected capacity change from 0 to 1024 [ 398.232324][ T28] audit: type=1326 audit(1755657651.531:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.3.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 398.322979][ T28] audit: type=1326 audit(1755657651.531:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14227 comm="syz.3.3831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf0158ebe9 code=0x7ffc0000 [ 398.454996][ T1091] hfsplus: b-tree write err: -5, ino 4 [ 398.531199][T14244] loop4: detected capacity change from 0 to 128 [ 399.079335][T14258] netlink: 'syz.0.3845': attribute type 7 has an invalid length. [ 399.582072][T14276] loop1: detected capacity change from 0 to 128 [ 399.974240][ T28] audit: type=1326 audit(1755657653.581:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 400.052906][ T28] audit: type=1326 audit(1755657653.581:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 400.093766][ T28] audit: type=1326 audit(1755657653.641:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 400.164720][ T28] audit: type=1326 audit(1755657653.641:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 400.227922][ T28] audit: type=1326 audit(1755657653.641:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14286 comm="syz.1.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 402.217665][T14366] loop3: detected capacity change from 0 to 64 [ 402.483420][T14376] loop4: detected capacity change from 0 to 64 [ 402.755076][T14384] netlink: 'syz.1.3893': attribute type 11 has an invalid length. [ 402.772231][T14384] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3893'. [ 403.255652][T14403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3899'. [ 403.415237][T14409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3902'. [ 403.502874][T14412] comedi: No check for data length of config insn id 129 is implemented [ 403.551956][T14412] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 403.574891][T14412] comedi: Assuming n=15 is correct [ 403.688278][T14417] loop1: detected capacity change from 0 to 64 [ 404.023760][T14429] proc: Unknown parameter 'tmpfs' [ 405.998849][T14498] bridge3: entered allmulticast mode [ 406.991531][T14541] loop3: detected capacity change from 0 to 16 [ 407.035279][T14541] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 408.792283][T14595] loop4: detected capacity change from 0 to 4096 [ 408.815142][T14604] netlink: zone id is out of range [ 408.820772][T14604] netlink: zone id is out of range [ 408.845832][T14604] netlink: zone id is out of range [ 408.851633][T14604] netlink: zone id is out of range [ 408.888514][T14604] netlink: zone id is out of range [ 408.898985][T14604] netlink: zone id is out of range [ 408.919030][T14604] netlink: zone id is out of range [ 408.949174][T14604] netlink: zone id is out of range [ 408.951945][T14595] ntfs: volume version 3.1. [ 408.960625][T14608] [U]  [ 408.984711][T14604] netlink: zone id is out of range [ 409.043217][T14604] netlink: zone id is out of range [ 409.186368][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'. [ 409.227084][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3981'. [ 409.280890][T14611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3981'. [ 409.551031][T14622] loop0: detected capacity change from 0 to 128 [ 409.603472][T14622] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 409.631905][T14622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.649277][T14623] loop3: detected capacity change from 0 to 2048 [ 409.732014][T14623] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 409.874573][ T27] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 409.935830][T14629] loop1: detected capacity change from 0 to 16 [ 409.978755][T14629] erofs: (device loop1): mounted with root inode @ nid 36. [ 410.039949][T14629] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 410.068957][T14629] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -15 in[52, 4044] out[1851] [ 410.084483][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 410.092199][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3992'. [ 410.098636][T14629] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 410.135589][ T27] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 410.156902][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 410.168997][ T27] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 410.182877][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.215453][ T27] usb 5-1: Product: syz [ 410.220690][ T27] usb 5-1: Manufacturer: syz [ 410.227440][ T27] usb 5-1: SerialNumber: syz [ 410.241966][ T27] usb 5-1: config 0 descriptor?? [ 410.275866][ T27] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 410.499047][ T27] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 410.545556][ T27] snd_usb_toneport: probe of 5-1:0.0 failed with error -22 [ 410.695753][T14647] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 410.764742][ T2181] usb 5-1: USB disconnect, device number 6 [ 411.194019][T14663] 9pnet_fd: p9_fd_create_unix (14663): problem connecting socket: ./file1: -111 [ 411.504708][T14675] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 411.679730][T14673] loop1: detected capacity change from 0 to 4096 [ 411.692618][T14677] loop3: detected capacity change from 0 to 1024 [ 411.704961][T14680] binder: 14678:14680 ioctl c018620c 2000000001c0 returned -22 [ 411.729077][T14673] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 411.759917][T14673] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 411.834440][T14673] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 411.860925][T14677] hfsplus: xattr searching failed [ 411.894384][T14673] ntfs: volume version 3.1. [ 412.223093][T14687] 9pnet_fd: p9_fd_create_unix (14687): problem connecting socket: ./file1: -111 [ 412.766881][T14703] veth3: entered allmulticast mode [ 412.888019][T14709] x_tables: unsorted entry at hook 2 [ 413.023457][ T2181] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 413.086175][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4032'. [ 413.259947][ T2181] usb 5-1: Using ep0 maxpacket: 16 [ 413.274401][ T2181] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 413.283362][ T2181] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.309666][ T2181] usb 5-1: config 0 has no interface number 0 [ 413.333716][ T2181] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 413.344475][ T2181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.352733][ T2181] usb 5-1: Product: syz [ 413.384405][ T2181] usb 5-1: Manufacturer: syz [ 413.389781][ T2181] usb 5-1: SerialNumber: syz [ 413.407510][ T2181] usb 5-1: config 0 descriptor?? [ 413.642953][ T2181] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 413.662180][ T2181] usb 5-1: No valid video chain found. [ 413.794131][T14711] loop0: detected capacity change from 0 to 32768 [ 413.822629][T14711] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.4031 (14711) [ 413.904048][T14711] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 413.924067][ T5845] usb 5-1: USB disconnect, device number 7 [ 413.938095][T14733] SET target dimension over the limit! [ 413.963708][T14711] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 413.988924][T14711] BTRFS info (device loop0): using free space tree [ 414.120957][T14748] xt_l2tp: invalid flags combination: 0 [ 414.204921][T14711] BTRFS info (device loop0): enabling ssd optimizations [ 414.215645][T14711] BTRFS info (device loop0): auto enabling async discard [ 414.579096][ T5790] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 414.754889][T14767] SET target dimension over the limit! [ 414.882338][ T5937] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop0 scanned by udevd (5937) [ 415.064647][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 415.173878][T14773] loop4: detected capacity change from 0 to 4096 [ 415.332597][T14773] ntfs: volume version 3.1. [ 415.948804][T14794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 416.063770][T14796] net_ratelimit: 334 callbacks suppressed [ 416.063788][T14796] netlink: zone id is out of range [ 416.775206][T14786] loop3: detected capacity change from 0 to 32768 [ 416.806966][T14786] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 416.961649][T14792] loop0: detected capacity change from 0 to 32768 [ 416.981186][ T5937] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 417.150276][T14815] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4072'. [ 417.193983][T14815] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 417.436520][T14819] loop3: detected capacity change from 0 to 256 [ 417.484902][T14819] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.689086][T14827] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8) [ 417.924488][T14833] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4081'. [ 418.024900][T14837] netlink: 'syz.1.4084': attribute type 4 has an invalid length. [ 418.343800][T14843] loop0: detected capacity change from 0 to 2048 [ 418.412881][T14843] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 418.412926][T14849] QAT: failed to copy from user cfg_data. [ 418.484021][T14850] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.496584][T14843] syz.0.4087: attempt to access beyond end of device [ 418.496584][T14843] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 418.588971][T14843] syz.0.4087: attempt to access beyond end of device [ 418.588971][T14843] loop0: rw=0, sector=9437254, nr_sectors = 2 limit=2048 [ 418.641859][T14843] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=0) [ 419.034605][T14866] netlink: 340 bytes leftover after parsing attributes in process `syz.0.4095'. [ 419.116096][T14866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4095'. [ 419.654869][T14887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4108'. [ 419.967555][T14898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.333002][T14907] loop0: detected capacity change from 0 to 1764 [ 421.028678][T14935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4130'. [ 421.509353][T14953] netlink: 'syz.0.4141': attribute type 32 has an invalid length. [ 421.646622][T14958] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4144'. [ 421.947125][T14969] loop0: detected capacity change from 0 to 1024 [ 422.065552][T14969] hfsplus: request for non-existent node 211 in B*Tree [ 422.090340][T14969] hfsplus: request for non-existent node 211 in B*Tree [ 422.135367][T14975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4152'. [ 422.176100][T14975] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4152'. [ 422.364391][ T2181] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 422.583622][ T2181] usb 4-1: Using ep0 maxpacket: 32 [ 422.595377][ T2181] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 422.624557][ T2181] usb 4-1: config 0 has no interface number 0 [ 422.631128][ T2181] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.660535][T14989] netlink: 216 bytes leftover after parsing attributes in process `syz.0.4159'. [ 422.677439][ T2181] usb 4-1: config 0 interface 89 has no altsetting 0 [ 422.688420][ T2181] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 422.703764][ T2181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 422.755800][ T2181] usb 4-1: Product: syz [ 422.775183][ T2181] usb 4-1: Manufacturer: syz [ 422.794473][ T2181] usb 4-1: SerialNumber: syz [ 422.813058][ T2181] usb 4-1: config 0 descriptor?? [ 422.844924][ T2181] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 422.874698][ T2181] em28xx 4-1:0.89: Video interface 89 found: [ 423.035579][T14991] loop4: detected capacity change from 0 to 4096 [ 423.073053][T14991] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 423.202883][T14983] loop1: detected capacity change from 0 to 32768 [ 423.241629][T14991] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 423.255014][T14991] ntfs3: loop4: ino=1e, "file1" attr_set_size [ 423.324897][ T2181] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 423.337021][T14983] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 423.426263][ T8197] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 423.456981][T11917] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 423.473426][T14983] (syz.1.4155,14983,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 423.490889][T11917] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 423.519465][ T2181] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 423.520202][T11917] ntfs3: loop4: ino=3, ntfs_set_state failed, -22. [ 423.545741][T14983] (syz.1.4155,14983,0):ocfs2_prepare_dir_for_insert:4312 ERROR: status = -2 [ 423.565897][ T2181] em28xx 4-1:0.89: board has no eeprom [ 423.574830][T14983] (syz.1.4155,14983,0):ocfs2_mknod:298 ERROR: status = -2 [ 423.595412][ T8197] ntfs3: loop4: ino=3, ntfs3_write_inode failed, -22. [ 423.604886][T14983] (syz.1.4155,14983,1):ocfs2_mknod:502 ERROR: status = -2 [ 423.643504][T14983] (syz.1.4155,14983,1):ocfs2_create:676 ERROR: status = -2 [ 423.664492][ T2181] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 423.673357][ T2181] em28xx 4-1:0.89: analog set to bulk mode. [ 423.709595][ T27] em28xx 4-1:0.89: Registering V4L2 extension [ 423.764641][ T2181] usb 4-1: USB disconnect, device number 21 [ 423.846386][ T2181] em28xx 4-1:0.89: Disconnecting em28xx [ 423.939062][ T5787] ocfs2: Unmounting device (7,1) on (node local) [ 423.969307][ T27] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 424.024771][ T27] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 424.033113][ T27] em28xx 4-1:0.89: No AC97 audio processor [ 424.091594][T15014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4170'. [ 424.126242][ T27] usb 4-1: Decoder not found [ 424.143654][ T27] em28xx 4-1:0.89: failed to create media graph [ 424.154467][T15014] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4170'. [ 424.175096][ T27] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 424.208791][ T27] em28xx 4-1:0.89: Registering snapshot button... [ 424.250622][ T27] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input17 [ 424.320710][ T27] em28xx 4-1:0.89: Remote control support is not available for this card. [ 424.389406][ T2181] em28xx 4-1:0.89: Closing input extension [ 424.419676][ T2181] em28xx 4-1:0.89: Deregistering snapshot button [ 424.505924][T15024] netlink: set zone limit has 4 unknown bytes [ 424.553048][T15026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4169'. [ 424.635984][ T2181] em28xx 4-1:0.89: Freeing device [ 424.776739][T15030] netlink: 'syz.0.4177': attribute type 2 has an invalid length. [ 424.852228][ T28] audit: type=1326 audit(1755657678.441:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 424.886750][ T28] audit: type=1326 audit(1755657678.451:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 424.962840][ T28] audit: type=1326 audit(1755657678.461:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 425.064347][ T28] audit: type=1326 audit(1755657678.461:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15034 comm="syz.1.4180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe550f8ebe9 code=0x7ffc0000 [ 425.066435][T15039] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20004 [ 425.097219][ T786] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 425.326688][ T786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.340744][ T786] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.362753][ T786] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 425.383568][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.405980][ T786] usb 5-1: config 0 descriptor?? [ 425.428761][ T786] usbhid 5-1:0.0: can't add hid device: -22 [ 425.444437][ T786] usbhid: probe of 5-1:0.0 failed with error -22 [ 425.679198][ T5882] usb 5-1: USB disconnect, device number 8 [ 425.766293][T15060] netlink: 'syz.3.4192': attribute type 2 has an invalid length. [ 425.980196][T15070] loop1: detected capacity change from 0 to 256 [ 426.012326][T15070] exfat: Deprecated parameter 'utf8' [ 426.058642][T15070] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 426.129225][T15070] overlay: filesystem on ./file0 not supported [ 426.855640][T15094] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 427.257567][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4215'. [ 427.715848][T15125] netlink: 'syz.1.4224': attribute type 11 has an invalid length. [ 428.044908][T15133] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4228'. [ 428.066812][T15132] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4229'. [ 428.084494][T15135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4227'. [ 428.114339][T15132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.722207][T15150] loop0: detected capacity change from 0 to 256 [ 428.741775][T15113] loop3: detected capacity change from 0 to 40427 [ 428.811867][T15113] F2FS-fs (loop3): invalid crc value [ 428.832986][T15150] FAT-fs (loop0): Directory bread(block 64) failed [ 428.865899][T15150] FAT-fs (loop0): Directory bread(block 65) failed [ 428.875936][T15113] F2FS-fs (loop3): Found nat_bits in checkpoint [ 428.883297][T15150] FAT-fs (loop0): Directory bread(block 66) failed [ 428.905420][ T50] Bluetooth: hci0: command tx timeout [ 428.914976][T15150] FAT-fs (loop0): Directory bread(block 67) failed [ 428.923605][T15150] FAT-fs (loop0): Directory bread(block 68) failed [ 428.994393][T15150] FAT-fs (loop0): Directory bread(block 69) failed [ 429.002711][T15150] FAT-fs (loop0): Directory bread(block 70) failed [ 429.067352][T15150] FAT-fs (loop0): Directory bread(block 71) failed [ 429.092388][ T28] audit: type=1400 audit(1755657682.701:2190): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3A0C7E pid=15159 comm="syz.1.4240" [ 429.094347][T15150] FAT-fs (loop0): Directory bread(block 72) failed [ 429.129659][T15113] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 429.155537][T15150] FAT-fs (loop0): Directory bread(block 73) failed [ 430.249236][T15163] loop4: detected capacity change from 0 to 32768 [ 430.269779][T15182] syz.3.4250: attempt to access beyond end of device [ 430.269779][T15182] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 430.318224][T15182] syz.3.4250: attempt to access beyond end of device [ 430.318224][T15182] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 430.334135][T15163] ERROR: (device loop4): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 430.334135][T15163] [ 430.356146][T15163] ERROR: (device loop4): remounting filesystem as read-only [ 430.365006][T15182] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 430.375927][T15163] ERROR: (device loop4): jfs_unlink: [ 430.375927][T15163] [ 430.384729][T15182] syz.3.4250: attempt to access beyond end of device [ 430.384729][T15182] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 430.444437][T15182] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 430.508903][T11917] ERROR: (device loop4): xtTruncate: XT_GETPAGE: xtree page corrupt [ 430.508903][T11917] [ 430.528444][T15182] syz.3.4250: attempt to access beyond end of device [ 430.528444][T15182] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 430.582060][T15182] syz.3.4250: attempt to access beyond end of device [ 430.582060][T15182] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 430.640574][T15182] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 430.668647][T15182] syz.3.4250: attempt to access beyond end of device [ 430.668647][T15182] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 430.724672][T15182] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 430.775308][T15182] syz.3.4250: attempt to access beyond end of device [ 430.775308][T15182] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 430.828424][T15182] syz.3.4250: attempt to access beyond end of device [ 430.828424][T15182] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 430.883047][T15182] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 430.932435][T15182] syz.3.4250: attempt to access beyond end of device [ 430.932435][T15182] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 430.966036][T15194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4256'. [ 431.004781][T15182] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 431.025384][T15194] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 431.044926][T15182] syz.3.4250: attempt to access beyond end of device [ 431.044926][T15182] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 431.086368][T15182] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 431.154423][T15182] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 431.196818][T15182] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 431.501724][T15206] loop3: detected capacity change from 0 to 512 [ 431.593398][T15206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 431.634554][T15206] ext4 filesystem being mounted at /1005/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 431.911612][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 432.105776][T15227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 432.119620][T15227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 432.136046][T15227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 432.174831][T15227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 432.220406][T15227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 432.269848][T15227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 432.291582][T15227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 432.334606][T15227] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 432.371463][T15227] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 432.420868][T15237] loop0: detected capacity change from 0 to 256 [ 432.537327][T15237] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 432.574351][T15237] FAT-fs (loop0): Filesystem has been set read-only [ 432.594948][T15237] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 432.621712][T15241] loop1: detected capacity change from 0 to 512 [ 432.635933][T15237] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 432.757241][T15241] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 432.792856][T15241] ext4 filesystem being mounted at /1113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 432.926679][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 433.162406][T15257] netlink: 'syz.1.4291': attribute type 6 has an invalid length. [ 433.422678][T15265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4287'. [ 433.440194][T15265] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4287'. [ 433.451982][T15268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4286'. [ 433.497142][T15268] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 433.569174][T15270] loop4: detected capacity change from 0 to 256 [ 433.673027][T15270] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 433.710586][T15270] FAT-fs (loop4): Filesystem has been set read-only [ 433.747051][T15270] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 433.800750][T15270] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 434.660347][T15305] set match dimension is over the limit! [ 434.852153][T15309] netlink: 'syz.4.4309': attribute type 15 has an invalid length. [ 435.634042][T15304] loop0: detected capacity change from 0 to 32768 [ 435.788053][T15304] ERROR: (device loop0): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 435.788053][T15304] [ 435.857191][T15304] ERROR: (device loop0): remounting filesystem as read-only [ 435.891563][T15304] ERROR: (device loop0): jfs_unlink: [ 435.891563][T15304] [ 435.937002][T15307] loop1: detected capacity change from 0 to 40427 [ 436.000777][T15307] F2FS-fs (loop1): invalid crc value [ 436.043895][T15307] F2FS-fs (loop1): Found nat_bits in checkpoint [ 436.061181][ T5790] ERROR: (device loop0): xtTruncate: XT_GETPAGE: xtree page corrupt [ 436.061181][ T5790] [ 436.256890][T15307] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 436.286133][ T28] audit: type=1800 audit(1755657689.940:2191): pid=15325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.4318" name="/" dev="sockfs" ino=37346 res=0 errno=0 [ 437.822503][T15342] loop4: detected capacity change from 0 to 32768 [ 437.934300][ T28] audit: type=1800 audit(1755657691.574:2192): pid=15342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4323" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 438.103737][T15354] loop1: detected capacity change from 0 to 32768 [ 438.199636][T15374] loop0: detected capacity change from 0 to 512 [ 438.227037][T15354] ERROR: (device loop1): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 438.227037][T15354] [ 438.262143][T15374] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 438.305008][T15354] ERROR: (device loop1): remounting filesystem as read-only [ 438.323688][T15378] loop3: detected capacity change from 0 to 16 [ 438.337696][T15354] ERROR: (device loop1): jfs_unlink: [ 438.337696][T15354] [ 438.351160][T15378] erofs: (device loop3): mounted with root inode @ nid 36. [ 438.412309][T15374] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.4339: invalid indirect mapped block 83886080 (level 1) [ 438.478435][T15378] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 438.537932][ T5787] ERROR: (device loop1): xtTruncate: XT_GETPAGE: xtree page corrupt [ 438.537932][ T5787] [ 438.565859][T15378] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 438.570663][T15374] EXT4-fs (loop0): Remounting filesystem read-only [ 438.600855][T15374] EXT4-fs (loop0): 1 orphan inode deleted [ 438.662398][T15374] EXT4-fs (loop0): 1 truncate cleaned up [ 438.669901][T15374] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.965031][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.142196][T15395] tc_dump_action: action bad kind [ 439.190611][T15393] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 439.616665][T15407] loop3: detected capacity change from 0 to 1024 [ 439.830252][ T8197] hfsplus: b-tree write err: -5, ino 4 [ 439.879021][ T28] audit: type=1400 audit(1755657693.448:2193): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620E7 pid=15415 comm="syz.1.4359" [ 440.163115][T15427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4363'. [ 440.180996][T15427] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4363'. [ 440.199643][T15427] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4363'. [ 440.225561][T15427] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4363'. [ 440.243682][T15427] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4363'. [ 440.450758][T15432] loop0: detected capacity change from 0 to 2048 [ 440.556186][T15432] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.576209][T15442] loop4: detected capacity change from 0 to 1024 [ 440.635771][T15432] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 440.755787][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.762789][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.813988][ T8191] hfsplus: b-tree write err: -5, ino 4 [ 440.830130][ T28] audit: type=1400 audit(1755657694.355:2194): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620E7 pid=15445 comm="syz.3.4372" [ 441.065244][T15451] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4373'. [ 441.187824][T15457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4377'. [ 441.500913][T15465] netlink: 'syz.1.4382': attribute type 10 has an invalid length. [ 441.531326][T15467] loop3: detected capacity change from 0 to 1024 [ 441.534267][T15465] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4382'. [ 441.559320][T15470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.598014][T15465] ipvlan1: entered promiscuous mode [ 441.610498][T13879] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 441.624435][T15471] loop4: detected capacity change from 0 to 2048 [ 441.634746][T15465] bridge0: port 3(ipvlan1) entered blocking state [ 441.683026][T15465] bridge0: port 3(ipvlan1) entered disabled state [ 441.703728][T15465] ipvlan1: entered allmulticast mode [ 441.710517][T15471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 441.727597][T15465] veth0_vlan: entered allmulticast mode [ 441.770187][T15465] ipvlan1: left allmulticast mode [ 441.797613][T15465] veth0_vlan: left allmulticast mode [ 441.819077][T15471] UDF-fs: error (device loop4): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 442.575664][T15497] loop4: detected capacity change from 0 to 256 [ 443.341064][T15520] netlink: 'syz.1.4416': attribute type 3 has an invalid length. [ 443.355713][T15520] netlink: 'syz.1.4416': attribute type 3 has an invalid length. [ 443.397518][T15520] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4416'. [ 443.430743][T15526] netlink: 'syz.3.4411': attribute type 4 has an invalid length. [ 443.442872][T15526] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.4411'. [ 443.770711][T15534] netlink: 'syz.3.4415': attribute type 10 has an invalid length. [ 443.786401][T15534] ipvlan1: entered promiscuous mode [ 443.799373][T15534] bridge0: port 3(ipvlan1) entered blocking state [ 443.830604][T15534] bridge0: port 3(ipvlan1) entered disabled state [ 443.871712][T15534] ipvlan1: entered allmulticast mode [ 443.893088][T15534] veth0_vlan: entered allmulticast mode [ 443.900889][T15534] ipvlan1: left allmulticast mode [ 443.977169][T15534] veth0_vlan: left allmulticast mode [ 444.159863][T15547] x_tables: duplicate entry at hook 3 [ 444.239676][T15550] netlink: 'syz.3.4424': attribute type 3 has an invalid length. [ 444.270312][T15550] netlink: 'syz.3.4424': attribute type 3 has an invalid length. [ 444.921051][T15542] loop4: detected capacity change from 0 to 32768 [ 444.996862][T15542] XFS: attr2 mount option is deprecated. [ 445.064193][T15542] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 445.265732][T15542] XFS (loop4): Ending clean mount [ 445.274767][T15542] XFS (loop4): Quotacheck needed: Please wait. [ 445.386028][T15542] XFS (loop4): Quotacheck: Done. [ 445.562822][T11917] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 446.074486][T15604] loop1: detected capacity change from 0 to 64 [ 446.210925][T15610] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 446.481760][T15618] netlink: 'syz.1.4454': attribute type 10 has an invalid length. [ 446.520124][T15618] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.528031][T15618] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.590476][T15618] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.599214][T15618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.608336][T15618] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.616669][T15618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.631328][T15620] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 446.686932][T15618] .`: (slave bridge0): Enslaving as an active interface with an up link [ 446.784654][T15626] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 446.818170][T15626] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 447.644009][T15657] loop0: detected capacity change from 0 to 256 [ 447.698277][T15657] FAT-fs (loop0): Directory bread(block 64) failed [ 447.732983][T15657] FAT-fs (loop0): Directory bread(block 65) failed [ 447.753741][T15657] FAT-fs (loop0): Directory bread(block 66) failed [ 447.760881][T15657] FAT-fs (loop0): Directory bread(block 67) failed [ 447.806891][T15657] FAT-fs (loop0): Directory bread(block 68) failed [ 447.814530][T15657] FAT-fs (loop0): Directory bread(block 69) failed [ 447.851681][T15657] FAT-fs (loop0): Directory bread(block 70) failed [ 447.875411][T15657] FAT-fs (loop0): Directory bread(block 71) failed [ 447.899199][T15663] batman_adv: batadv0: Removing interface: team0 [ 447.913330][T15657] FAT-fs (loop0): Directory bread(block 72) failed [ 447.924114][T15657] FAT-fs (loop0): Directory bread(block 73) failed [ 448.078796][T15663] team0: Port device dummy0 removed [ 448.114486][T15663] bridge_slave_0: left allmulticast mode [ 448.127592][T15663] bridge_slave_0: left promiscuous mode [ 448.133953][T15663] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.160541][T15663] bridge_slave_1: left allmulticast mode [ 448.194251][T15663] bridge_slave_1: left promiscuous mode [ 448.200379][T15663] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.276085][T15663] bond0: (slave bond_slave_0): Releasing backup interface [ 448.321584][T15663] bond0: (slave bond_slave_1): Releasing backup interface [ 448.447963][T15663] team0: Port device team_slave_0 removed [ 448.517635][T15663] team0: Port device team_slave_1 removed [ 448.529808][T15663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.542822][T15663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.556182][T15663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.574766][T15663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.643087][T15663] batman_adv: batadv0: Removing interface: macvtap0 [ 449.101696][T15693] loop1: detected capacity change from 0 to 256 [ 449.195811][T15693] FAT-fs (loop1): Directory bread(block 64) failed [ 449.202955][T15693] FAT-fs (loop1): Directory bread(block 65) failed [ 449.237122][T15693] FAT-fs (loop1): Directory bread(block 66) failed [ 449.270423][T15693] FAT-fs (loop1): Directory bread(block 67) failed [ 449.300004][T15693] FAT-fs (loop1): Directory bread(block 68) failed [ 449.307247][T15693] FAT-fs (loop1): Directory bread(block 69) failed [ 449.350136][T15693] FAT-fs (loop1): Directory bread(block 70) failed [ 449.390432][T15693] FAT-fs (loop1): Directory bread(block 71) failed [ 449.405990][T15693] FAT-fs (loop1): Directory bread(block 72) failed [ 449.415007][T15693] FAT-fs (loop1): Directory bread(block 73) failed [ 449.973416][ T5845] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 450.185609][ T5845] usb 5-1: Using ep0 maxpacket: 32 [ 450.209077][ T5845] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 450.235968][ T5845] usb 5-1: config 4 has no interface number 0 [ 450.257578][ T5845] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.268784][T15728] loop0: detected capacity change from 0 to 256 [ 450.290830][ T5845] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.326494][T15728] FAT-fs (loop0): Directory bread(block 64) failed [ 450.331647][ T5845] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 450.336087][T15728] FAT-fs (loop0): Directory bread(block 65) failed [ 450.351323][T15728] FAT-fs (loop0): Directory bread(block 66) failed [ 450.378132][T15728] FAT-fs (loop0): Directory bread(block 67) failed [ 450.379152][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.385801][T15728] FAT-fs (loop0): Directory bread(block 68) failed [ 450.385845][T15728] FAT-fs (loop0): Directory bread(block 69) failed [ 450.385993][T15728] FAT-fs (loop0): Directory bread(block 70) failed [ 450.386022][T15728] FAT-fs (loop0): Directory bread(block 71) failed [ 450.439291][ T5845] hub 5-1:4.128: USB hub found [ 450.446455][T15728] FAT-fs (loop0): Directory bread(block 72) failed [ 450.526938][T15728] FAT-fs (loop0): Directory bread(block 73) failed [ 450.660627][ T5845] hub 5-1:4.128: 2 ports detected [ 450.666600][ T5845] hub 5-1:4.128: Using single TT (err -22) [ 450.765346][T15728] FAT-fs (loop0): Filesystem has been set read-only [ 450.789567][ T28] audit: type=1800 audit(1755657703.732:2195): pid=15728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4508" name="cpu.stat" dev="loop0" ino=1048653 res=0 errno=0 [ 450.791084][T15728] FAT-fs (loop0): error, invalid access to FAT (entry 0x00003861) [ 450.883322][ T5845] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 450.907184][ T5845] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 450.943816][ T29] INFO: task syz-executor:5788 blocked for more than 143 seconds. [ 450.965100][ T29] Not tainted 6.6.102-syzkaller #0 [ 450.970941][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 450.974396][ T5845] usb 5-1: USB disconnect, device number 9 [ 450.994339][ T29] task:syz-executor state:D stack:21384 pid:5788 ppid:1 flags:0x00004004 [ 451.015626][ T29] Call Trace: [ 451.019584][ T29] [ 451.022869][ T29] __schedule+0x14d2/0x44d0 [ 451.028173][ T29] ? asan.module_dtor+0x20/0x20 [ 451.046976][ T29] ? mark_lock+0x94/0x320 [ 451.056670][ T29] ? lock_chain_count+0x20/0x20 [ 451.066368][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 451.072607][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 451.079227][ T29] schedule+0xbd/0x170 [ 451.083659][ T29] io_schedule+0x80/0xd0 [ 451.088153][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 451.094554][ T29] ? folio_wait_bit+0x30/0x30 [ 451.100403][ T29] ? filemap_get_entry+0x35c/0x3c0 [ 451.106386][ T29] ? _compound_head+0x120/0x120 [ 451.126044][ T29] ? find_lock_entries+0xc38/0xfe0 [ 451.131502][ T29] __filemap_get_folio+0xbc/0xbc0 [ 451.137434][ T29] truncate_inode_pages_range+0x40a/0xf00 [ 451.143282][ T29] ? mapping_evict_folio+0x510/0x510 [ 451.148933][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 451.154114][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 451.159882][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 451.165233][ T29] evict+0x499/0x870 [ 451.169572][ T29] ? proc_nr_inodes+0x230/0x230 [ 451.174724][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 451.180403][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 451.185805][ T29] evict_inodes+0x5fe/0x690 [ 451.190703][ T29] ? clear_inode+0x150/0x150 [ 451.195597][ T29] generic_shutdown_super+0x97/0x2b0 [ 451.201107][ T29] kill_block_super+0x44/0x90 [ 451.206140][ T29] deactivate_locked_super+0x97/0x100 [ 451.211796][ T29] cleanup_mnt+0x429/0x4c0 [ 451.216579][ T29] task_work_run+0x1ce/0x250 [ 451.223553][ T29] ? task_work_cancel+0x240/0x240 [ 451.228831][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 451.234883][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 451.241255][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 451.247009][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 451.252690][ T29] do_syscall_64+0x61/0xb0 [ 451.257428][ T29] ? clear_bhb_loop+0x40/0x90 [ 451.262583][ T29] ? clear_bhb_loop+0x40/0x90 [ 451.267711][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.274089][ T29] RIP: 0033:0x7fd99d38ff17 [ 451.279225][ T29] RSP: 002b:00007ffe1f3e1f68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 451.288297][ T29] RAX: 0000000000000000 RBX: 00007fd99d411c05 RCX: 00007fd99d38ff17 [ 451.296717][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1f3e2020 [ 451.305117][ T29] RBP: 00007ffe1f3e2020 R08: 0000000000000000 R09: 0000000000000000 [ 451.313644][ T29] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1f3e30b0 [ 451.322069][ T29] R13: 00007fd99d411c05 R14: 00000000000481ec R15: 00007ffe1f3e30f0 [ 451.330719][ T29] [ 451.350161][ T29] [ 451.350161][ T29] Showing all locks held in the system: [ 451.359123][ T29] 1 lock held by khungtaskd/29: [ 451.369307][ T29] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 451.388945][ T29] 2 locks held by getty/5554: [ 451.394089][ T29] #0: ffff88802de2e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 451.405002][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 451.415636][ T29] 1 lock held by syz-executor/5788: [ 451.420984][ T29] #0: ffff88801f7e00e0 (&type->s_umount_key#98){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 451.432495][ T29] [ 451.436460][ T29] ============================================= [ 451.436460][ T29] [ 451.446646][ T29] NMI backtrace for cpu 1 [ 451.451810][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 451.460616][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.471845][ T29] Call Trace: [ 451.475493][ T29] [ 451.478619][ T29] dump_stack_lvl+0x16c/0x230 [ 451.483773][ T29] ? preempt_count_add+0x91/0x1a0 [ 451.489097][ T29] ? show_regs_print_info+0x20/0x20 [ 451.494532][ T29] ? load_image+0x3b0/0x3b0 [ 451.499518][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 451.505347][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 451.511777][ T29] ? _printk+0xd0/0x110 [ 451.516379][ T29] ? load_image+0x3b0/0x3b0 [ 451.521180][ T29] ? load_image+0x3b0/0x3b0 [ 451.525791][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 451.532400][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 451.538668][ T29] watchdog+0xf41/0xf80 [ 451.543110][ T29] ? watchdog+0x1e1/0xf80 [ 451.547567][ T29] kthread+0x2fa/0x390 [ 451.551929][ T29] ? hungtask_pm_notify+0x90/0x90 [ 451.557547][ T29] ? kthread_blkcg+0xd0/0xd0 [ 451.562527][ T29] ret_from_fork+0x48/0x80 [ 451.567081][ T29] ? kthread_blkcg+0xd0/0xd0 [ 451.572168][ T29] ret_from_fork_asm+0x11/0x20 [ 451.576980][ T29] [ 451.593064][ T29] Sending NMI from CPU 1 to CPUs 0: [ 451.599913][ C0] NMI backtrace for cpu 0 [ 451.599926][ C0] CPU: 0 PID: 8189 Comm: kworker/u4:15 Not tainted 6.6.102-syzkaller #0 [ 451.599942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.599951][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 451.599974][ C0] RIP: 0010:arch_stack_walk+0x4/0x190 [ 451.599993][ C0] Code: 7c 53 00 31 c0 e6 d4 48 c7 c7 c0 3e d5 8c 48 89 de 5b 41 5e 41 5f 5d e9 7a e0 44 09 cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 <55> 48 89 e5 41 57 41 56 41 54 53 48 83 ec 68 49 89 cf 49 89 d4 48 [ 451.600006][ C0] RSP: 0018:ffffc90003a476d8 EFLAGS: 00000246 [ 451.600019][ C0] RAX: ffffc90003a47700 RBX: 1ffff92000748edc RCX: 0000000000000000 [ 451.600030][ C0] RDX: ffff88805bc21e00 RSI: ffffc90003a47700 RDI: ffffffff817466a0 [ 451.600041][ C0] RBP: ffffc90003a47780 R08: dffffc0000000000 R09: 0000000000000000 [ 451.600051][ C0] R10: ffffc90003a47790 R11: fffffbfff21b46be R12: ffff888017842140 [ 451.600061][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffc90003a47790 [ 451.600072][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 451.600085][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 451.600096][ C0] CR2: 0000001b2d80fff8 CR3: 000000002cc64000 CR4: 00000000003506f0 [ 451.600111][ C0] Call Trace: [ 451.600117][ C0] [ 451.600122][ C0] stack_trace_save+0x9c/0xe0 [ 451.600143][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 451.600160][ C0] ? skb_release_data+0x634/0x800 [ 451.600183][ C0] kasan_set_track+0x4e/0x70 [ 451.600222][ C0] ? __kmem_cache_alloc_node+0x13e/0x260 [ 451.600240][ C0] ? __alloc_skb+0x138/0x2c0 [ 451.600258][ C0] __kasan_kmalloc+0x8f/0xa0 [ 451.600274][ C0] ? __alloc_skb+0x138/0x2c0 [ 451.600291][ C0] __kmalloc_node_track_caller+0xb2/0x230 [ 451.600310][ C0] ? rcu_is_watching+0x15/0xb0 [ 451.600328][ C0] ? __alloc_skb+0x138/0x2c0 [ 451.600345][ C0] kmalloc_reserve+0x117/0x260 [ 451.600365][ C0] __alloc_skb+0x138/0x2c0 [ 451.600384][ C0] nsim_dev_trap_report_work+0x293/0xb00 [ 451.600409][ C0] ? process_scheduled_works+0x957/0x15b0 [ 451.600426][ C0] process_scheduled_works+0xa45/0x15b0 [ 451.600462][ C0] ? assign_work+0x400/0x400 [ 451.600482][ C0] ? assign_work+0x39e/0x400 [ 451.600501][ C0] worker_thread+0xa55/0xfc0 [ 451.600539][ C0] kthread+0x2fa/0x390 [ 451.600552][ C0] ? pr_cont_work+0x560/0x560 [ 451.600569][ C0] ? kthread_blkcg+0xd0/0xd0 [ 451.600582][ C0] ret_from_fork+0x48/0x80 [ 451.600598][ C0] ? kthread_blkcg+0xd0/0xd0 [ 451.600611][ C0] ret_from_fork_asm+0x11/0x20 [ 451.600639][ C0] [ 451.652969][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 451.652986][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 451.653007][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.653016][ T29] Call Trace: [ 451.653026][ T29] [ 451.653035][ T29] dump_stack_lvl+0x16c/0x230 [ 451.653065][ T29] ? show_regs_print_info+0x20/0x20 [ 451.653084][ T29] ? load_image+0x3b0/0x3b0 [ 451.653120][ T29] panic+0x2c0/0x710 [ 451.653143][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 451.653167][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 451.653189][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 451.653213][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 451.653240][ T29] watchdog+0xf80/0xf80 [ 451.653263][ T29] ? watchdog+0x1e1/0xf80 [ 451.653289][ T29] kthread+0x2fa/0x390 [ 451.653305][ T29] ? hungtask_pm_notify+0x90/0x90 [ 451.653325][ T29] ? kthread_blkcg+0xd0/0xd0 [ 451.653341][ T29] ret_from_fork+0x48/0x80 [ 451.653359][ T29] ? kthread_blkcg+0xd0/0xd0 [ 451.653376][ T29] ret_from_fork_asm+0x11/0x20 [ 451.653411][ T29] [ 451.673029][ T29] Kernel Offset: disabled [ 452.012881][ T29] Rebooting in 86400 seconds..