last executing test programs: 2m37.252655101s ago: executing program 2 (id=1261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080004000280000008001b"], 0x3c}}, 0x0) 2m36.981423833s ago: executing program 2 (id=1267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000000004000000000020000000800", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd02000000000000000000000000000000000002"], 0x23c}}, 0x0) 2m36.667453478s ago: executing program 2 (id=1273): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="020300001b00000000000000000000000400030000000000000000000000000000000000000000000000000000000000050006006c0000000a00000000000000fc0100000000000000000000000000000000000000000000040004000000000027000000000000000000000000000000ad0c00000000000002000100000000000000fe030000000005000500002000000a00000000000000ff010000000000000000000000000001000000000000000005000700000000000a"], 0xd8}}, 0x0) 2m36.485901552s ago: executing program 2 (id=1276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x6000000) 2m36.326302455s ago: executing program 2 (id=1279): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000500)="$eJzskr9OAkEQxr+9O/5oFDWxooGC+KdQjkONnZbY29lI4ETiocKRKITijDEUFsbSJ+A1THwBLYwPQE1BrM2ZvZ3bLL6C+yvu2/l2ZnZ2c+d+208B+JkOajhEhIkMPhiDBSDHhDcxhD6TfpI+CcE75R2Rf0+a9Xv9JAC+nceKMC6qnud28gC+I09a/sGdgUnU6ms6qPHFKYAwDEPu1QGejgUlxwTQVnKyFrAaXSKUORYNsA6g2G1dF/1ef6vZqjbchnvpmOU9e8e2d53iWdNzbfFlyhF0FXDdBJBKQ8L3EwAeKJ7HLEwZjfbZHE5kbTJ+www9IExZayi1sTK8yrlSSsUx1sDHugmWFLcQdbEQXakCBpOCkqXMJ85KRxvbtSuvPgQDi8tGsGSP0hgJGThqUN4PsChaDallgbRCOiIdk+b+/DJWwL+PFG0EQBK31W63U+KPJFYsXjnSc5YD9cH4qS/G7OXeDGg0Go1Go9FoNBrNf+c3AAD//8PfdhM=") open(&(0x7f0000000400)='./file2\x00', 0x40, 0x82) 2m35.39837433s ago: executing program 2 (id=1299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2m20.148490245s ago: executing program 32 (id=1299): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 4.463117601s ago: executing program 3 (id=3540): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000100)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4"], 0x3, 0x444a, &(0x7f0000004480)="$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") symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.432501824s ago: executing program 3 (id=3559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff8100632f77fb86dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 3.014411967s ago: executing program 3 (id=3567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) 2.821603243s ago: executing program 3 (id=3571): r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file1\x00', 0x8c0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x441f, &(0x7f0000008940)="$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") ioctl$FS_IOC_RESVSP(r0, 0x40186f02, 0x0) 2.538698266s ago: executing program 0 (id=3577): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) sendto$rose(r0, 0x0, 0x0, 0x90, &(0x7f0000000880)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @default}, 0x1c) 2.441314884s ago: executing program 0 (id=3578): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x82, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) 2.293120735s ago: executing program 0 (id=3581): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000180)=@ethtool_rxnfc={0x32, 0xc, 0x9, {0x2, @ah_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x11}, @remote, 0x0, 0x3}, {0x0, @random="1ac9a523985a", 0xf, 0x276, [0x1, 0x2]}, @usr_ip6_spec={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa7, 0x3, 0xfe}, {0x0, @multicast, 0x2, 0x0, [0x9, 0xffffffff]}, 0x0, 0x9}}}) 2.158120736s ago: executing program 0 (id=3584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.947533333s ago: executing program 0 (id=3587): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f0000001440)=""/126, 0x7e, 0x41) 1.726828911s ago: executing program 0 (id=3589): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 1.673209335s ago: executing program 3 (id=3591): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) 1.288257266s ago: executing program 3 (id=3595): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 848.237162ms ago: executing program 4 (id=3603): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) 760.272319ms ago: executing program 4 (id=3605): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000100)={[{@noload}, {@noblock_validity}, {@discard}, {@errors_remount}, {@inode_readahead_blks, 0x0}, {@noauto_da_alloc}, {@noload}, {@journal_checksum}, {@mblk_io_submit}, {@noacl}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x765}}, {@norecovery}, {@nobarrier}, {@data_writeback}, {@resgid}], [{@audit}, {@uid_lt={'uid<', 0xee01}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 622.64889ms ago: executing program 1 (id=3606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="7000000000010104ee00000000000000020000002400018014000180080001007f00000108000200ac1414000c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000000004000e8008000840e3"], 0x70}}, 0x0) 543.146426ms ago: executing program 1 (id=3607): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) 412.102796ms ago: executing program 1 (id=3608): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') pread64(r0, &(0x7f0000000000)=""/65, 0x41, 0x7bdb) 389.380468ms ago: executing program 4 (id=3609): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) sigaltstack(&(0x7f0000001400)={0x0, 0x2}, &(0x7f0000001500)={0x0}) 216.557053ms ago: executing program 1 (id=3610): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) 162.723747ms ago: executing program 4 (id=3611): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1fe, 0x8, 0x1, 0x0, 0xa}) 110.636071ms ago: executing program 4 (id=3612): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x4, 0x4) 101.932421ms ago: executing program 1 (id=3613): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@setlink={0x28, 0x13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x4002}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000) 26.839787ms ago: executing program 1 (id=3614): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2b) 0s ago: executing program 4 (id=3615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x50, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x4004800) kernel console output (not intermixed with test programs): ave_0: entered promiscuous mode [ 168.500912][ T8718] hsr_slave_1: entered promiscuous mode [ 168.523465][ T8718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.531071][ T8718] Cannot create hsr debugfs directory [ 168.662393][ T8810] futex_wake_op: syz.3.1345 tries to shift op by 32; fix this program [ 168.953640][ T28] audit: type=1800 audit(1755784568.769:60): pid=8805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.1.1343" name="/newroot/358/file0" dev="tmpfs" ino=1835 res=0 errno=0 [ 169.533816][ T8718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.562429][ T8718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.606396][ T8718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.687085][ T8718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.006290][ T8718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.092359][ T8718] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.141353][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.148833][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.218369][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.225818][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.290033][ T8718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.314006][ T8718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.748324][ T28] audit: type=1326 audit(1755784570.559:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 170.811610][ T28] audit: type=1326 audit(1755784570.559:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 170.861720][ T28] audit: type=1326 audit(1755784570.659:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 170.948296][ T28] audit: type=1326 audit(1755784570.659:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 170.999088][ T8718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.031782][ T28] audit: type=1326 audit(1755784570.659:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.0.1363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 171.141156][ T28] audit: type=1400 audit(1755784570.949:66): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=8900 comm="syz.0.1364" [ 171.760959][ T8893] loop3: detected capacity change from 0 to 40427 [ 171.823207][ T8893] F2FS-fs (loop3): build fault injection attr: rate: 4, type: 0x7ffff [ 171.834250][ T8718] veth0_vlan: entered promiscuous mode [ 171.872947][ T8893] F2FS-fs (loop3): Image doesn't support compression [ 171.880362][ T8893] F2FS-fs (loop3): Image doesn't support compression [ 171.902820][ T8893] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 171.930193][ T8718] veth1_vlan: entered promiscuous mode [ 171.947061][ T8893] F2FS-fs (loop3): invalid crc value [ 171.979065][ T8893] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 172.024329][ T8893] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 172.048830][ T8718] veth0_macvtap: entered promiscuous mode [ 172.063333][ T8893] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.090786][ T8718] veth1_macvtap: entered promiscuous mode [ 172.155869][ T8718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.186993][ T8893] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 172.214818][ T8718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.221978][ T8893] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 172.245173][ T8718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.268566][ T8893] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 172.279452][ T8718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.281199][ T8718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.360696][ T8718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.398126][ T8893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 172.401957][ T8718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.451802][ T8718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.501707][ T8718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.530613][ T8893] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of __get_node_page+0x17b/0xf40 [ 172.541798][ T8718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.578848][ T8718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.608908][ T8940] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 172.627184][ T8718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.638616][ T8918] loop1: detected capacity change from 0 to 32768 [ 172.652879][ T8718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.677922][ T8718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.690161][ T5780] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x210 [ 172.700760][ T8918] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 172.817575][ T1309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.852471][ T1309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.953850][ T8918] XFS (loop1): Ending clean mount [ 172.991167][ T8956] sock: sock_timestamping_bind_phc: sock not bind to device [ 173.009273][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.019823][ T8918] XFS (loop1): Quotacheck needed: Please wait. [ 173.038674][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.197255][ T8918] XFS (loop1): Quotacheck: Done. [ 173.417194][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.492410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 173.503587][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 174.082245][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1387'. [ 174.338905][ T8993] loop3: detected capacity change from 0 to 4096 [ 174.381748][ T8993] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 174.957965][ T9027] loop1: detected capacity change from 0 to 512 [ 175.018920][ T9027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.047614][ T9027] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.098954][ T9032] netlink: 'syz.4.1406': attribute type 2 has an invalid length. [ 175.128926][ T9032] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 175.275413][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.494117][ T9050] netlink: 'syz.3.1415': attribute type 13 has an invalid length. [ 175.684799][ T9055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1418'. [ 177.171781][ T785] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 177.370384][ T9111] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 177.420586][ T785] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 177.440127][ T785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.456165][ T785] usb 4-1: Product: syz [ 177.470624][ T785] usb 4-1: Manufacturer: syz [ 177.475792][ T785] usb 4-1: SerialNumber: syz [ 177.502358][ T785] usb 4-1: config 0 descriptor?? [ 177.514411][ T785] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 177.597721][ T9121] loop1: detected capacity change from 0 to 512 [ 177.647168][ T9121] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 177.694624][ T9121] EXT4-fs (loop1): orphan cleanup on readonly fs [ 177.753175][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1453'. [ 177.798218][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1453'. [ 177.809678][ T9121] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 177.844999][ T9121] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 177.866621][ T9121] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.1450: Failed to acquire dquot type 1 [ 177.900748][ T9121] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.1450: bg 0: block 40: padding at end of block bitmap is not set [ 177.925222][ T9121] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 177.941399][ T9121] EXT4-fs (loop1): 1 truncate cleaned up [ 177.949108][ T785] gspca_stk1135: reg_w 0x0 err -71 [ 177.972820][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 177.987796][ T9121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 178.000591][ T785] gspca_stk1135: Sensor write failed [ 178.006528][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 178.019110][ T785] gspca_stk1135: Sensor write failed [ 178.032369][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 178.052191][ T785] gspca_stk1135: Sensor read failed [ 178.057684][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 178.089737][ T785] gspca_stk1135: Sensor read failed [ 178.102802][ T9121] EXT4-fs error (device loop1): ext4_get_link:104: inode #16: comm syz.1.1450: bad symlink. [ 178.116450][ T785] gspca_stk1135: Detected sensor type unknown (0x0) [ 178.141782][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 178.157307][ T785] gspca_stk1135: Sensor read failed [ 178.173553][ T9140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 178.181805][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 178.181823][ T785] gspca_stk1135: Sensor read failed [ 178.181845][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 178.181855][ T785] gspca_stk1135: Sensor write failed [ 178.181878][ T785] gspca_stk1135: serial bus timeout: status=0x00 [ 178.181888][ T785] gspca_stk1135: Sensor write failed [ 178.181964][ T785] stk1135: probe of 4-1:0.0 failed with error -71 [ 178.199460][ T785] usb 4-1: USB disconnect, device number 8 [ 178.259850][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.701938][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1467'. [ 178.862365][ T9167] netlink: 'syz.4.1471': attribute type 8 has an invalid length. [ 179.112016][ T9174] loop4: detected capacity change from 0 to 1024 [ 179.147446][ T9174] EXT4-fs: Ignoring removed bh option [ 179.292537][ T9174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 179.330447][ T9174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 179.341896][ T9189] netlink: 'syz.0.1481': attribute type 21 has an invalid length. [ 179.349837][ T9189] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 179.781790][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.002225][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 180.023613][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.037917][ T8] usb 1-1: Product: syz [ 180.042319][ T8] usb 1-1: Manufacturer: syz [ 180.046996][ T8] usb 1-1: SerialNumber: syz [ 180.063484][ T8] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 180.073882][ T9218] netlink: 'syz.1.1494': attribute type 21 has an invalid length. [ 180.087281][ T5874] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 180.109962][ T9218] netlink: 'syz.1.1494': attribute type 1 has an invalid length. [ 180.182017][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 180.367253][ T23] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 180.391040][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.410797][ T23] usb 5-1: Product: syz [ 180.425754][ T23] usb 5-1: Manufacturer: syz [ 180.441949][ T23] usb 5-1: SerialNumber: syz [ 180.456780][ T23] usb 5-1: config 0 descriptor?? [ 180.490465][ T23] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 180.641072][ T8] usb 1-1: USB disconnect, device number 10 [ 180.952840][ T23] usb 5-1: USB disconnect, device number 2 [ 181.026699][ T9245] loop3: detected capacity change from 0 to 8 [ 181.070320][ T9245] SQUASHFS error: Failed to read block 0x1ec: -5 [ 181.085641][ T9245] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 181.348745][ T9258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.477459][ T5874] usb 1-1: Service connection timeout for: 256 [ 181.511732][ T5874] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 181.520134][ T5874] ath9k_htc: Failed to initialize the device [ 181.578857][ T8] usb 1-1: ath9k_htc: USB layer deinitialized [ 181.629902][ T9270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1519'. [ 182.317801][ T9293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1531'. [ 182.532240][ T5862] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.859138][ T785] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 182.905652][ T5862] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 182.914980][ T5862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.923091][ T5862] usb 1-1: Product: syz [ 182.927271][ T5862] usb 1-1: Manufacturer: syz [ 182.942195][ T5862] usb 1-1: SerialNumber: syz [ 182.959297][ T5862] usb 1-1: config 0 descriptor?? [ 182.968104][ T5862] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 183.071706][ T785] usb 5-1: Using ep0 maxpacket: 16 [ 183.089321][ T785] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 183.101851][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.121786][ T785] usb 5-1: Product: syz [ 183.126042][ T785] usb 5-1: Manufacturer: syz [ 183.130684][ T785] usb 5-1: SerialNumber: syz [ 183.163848][ T785] r8152-cfgselector 5-1: config 0 descriptor?? [ 183.206732][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1545'. [ 183.241542][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1545'. [ 183.423059][ T5862] usb 1-1: USB disconnect, device number 11 [ 183.626634][ T785] r8152-cfgselector 5-1: Unknown version 0x0000 [ 183.661689][ T785] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 184.256331][ T9347] loop1: detected capacity change from 0 to 4096 [ 184.267699][ T9348] loop3: detected capacity change from 0 to 512 [ 184.308988][ T9348] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 184.330626][ T9348] EXT4-fs (loop3): orphan cleanup on readonly fs [ 184.345813][ T9348] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 184.356910][ T9348] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 184.366601][ T9348] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.1558: Failed to acquire dquot type 1 [ 184.440346][ T9348] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1558: bg 0: block 40: padding at end of block bitmap is not set [ 184.559310][ T9348] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 184.589766][ T9348] EXT4-fs (loop3): 1 truncate cleaned up [ 184.599391][ T9348] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 184.697728][ T9348] EXT4-fs error (device loop3): ext4_get_link:104: inode #16: comm syz.3.1558: bad symlink. [ 184.784129][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.871818][ T785] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 184.899501][ T9367] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 185.065442][ T785] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 185.074813][ T785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.083454][ T785] usb 5-1: Product: syz [ 185.087662][ T785] usb 5-1: Manufacturer: syz [ 185.094279][ T785] usb 5-1: SerialNumber: syz [ 185.104366][ T785] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 185.121998][ T5862] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 185.161813][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 185.206221][ T5874] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.369402][ T23] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 185.378734][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.387109][ T23] usb 4-1: Product: syz [ 185.391359][ T23] usb 4-1: Manufacturer: syz [ 185.391867][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 185.397513][ T23] usb 4-1: SerialNumber: syz [ 185.410321][ T23] usb 4-1: config 0 descriptor?? [ 185.418271][ T5874] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 185.425380][ T23] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 185.433275][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.442009][ T5874] usb 1-1: Product: syz [ 185.446192][ T5874] usb 1-1: Manufacturer: syz [ 185.450789][ T5874] usb 1-1: SerialNumber: syz [ 185.466464][ T5874] r8152-cfgselector 1-1: config 0 descriptor?? [ 185.556683][ T8] usb 5-1: USB disconnect, device number 4 [ 185.854261][ T785] usb 4-1: USB disconnect, device number 9 [ 185.893785][ T5874] r8152-cfgselector 1-1: Unknown version 0x0000 [ 185.911994][ T5874] r8152-cfgselector 1-1: USB disconnect, device number 12 [ 186.258833][ T9382] loop4: detected capacity change from 0 to 4096 [ 186.447941][ T5862] usb 5-1: Service connection timeout for: 256 [ 186.471254][ T5862] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 186.498265][ T5862] ath9k_htc: Failed to initialize the device [ 186.535707][ T9386] loop4: detected capacity change from 0 to 512 [ 186.560898][ T8] usb 5-1: ath9k_htc: USB layer deinitialized [ 186.581893][ T9386] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 186.623557][ T9386] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.674873][ T9386] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 186.711980][ T9386] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 186.721418][ T9386] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1575: Failed to acquire dquot type 1 [ 186.794155][ T9386] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1575: bg 0: block 40: padding at end of block bitmap is not set [ 186.854587][ T9386] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 186.879814][ T9403] netlink: 'syz.1.1583': attribute type 13 has an invalid length. [ 186.901981][ T9386] EXT4-fs (loop4): 1 truncate cleaned up [ 186.931768][ T9386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.072666][ T9386] EXT4-fs error (device loop4): ext4_get_link:104: inode #16: comm syz.4.1575: bad symlink. [ 187.197078][ T8718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.269856][ T9413] netlink: 'syz.3.1590': attribute type 2 has an invalid length. [ 187.296280][ T9413] netlink: 'syz.3.1590': attribute type 1 has an invalid length. [ 187.452173][ T9419] loop3: detected capacity change from 0 to 512 [ 187.504525][ T9419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.570406][ T9419] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.581527][ T9425] futex_wake_op: syz.4.1592 tries to shift op by 32; fix this program [ 187.755572][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.055750][ T28] audit: type=1800 audit(1755784587.869:67): pid=9429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.1594" name="/newroot/42/file0" dev="tmpfs" ino=231 res=0 errno=0 [ 188.162306][ T9444] netlink: 'syz.3.1603': attribute type 2 has an invalid length. [ 188.236207][ T9450] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 188.282319][ T9452] sctp: [Deprecated]: syz.0.1606 (pid 9452) Use of int in maxseg socket option. [ 188.282319][ T9452] Use struct sctp_assoc_value instead [ 188.591806][ T5862] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 188.785583][ T5862] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 188.815345][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.834909][ T5862] usb 5-1: Product: syz [ 188.852307][ T5862] usb 5-1: Manufacturer: syz [ 188.878987][ T5862] usb 5-1: SerialNumber: syz [ 188.901371][ T5862] usb 5-1: config 0 descriptor?? [ 188.919493][ T5862] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 189.353144][ T5862] gspca_stk1135: reg_w 0x0 err -71 [ 189.359443][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 189.372249][ T5862] gspca_stk1135: Sensor write failed [ 189.381608][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 189.388465][ T5862] gspca_stk1135: Sensor write failed [ 189.398521][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 189.411789][ T5862] gspca_stk1135: Sensor read failed [ 189.417358][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 189.431705][ T5862] gspca_stk1135: Sensor read failed [ 189.436970][ T5862] gspca_stk1135: Detected sensor type unknown (0x0) [ 189.444623][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 189.451009][ T5862] gspca_stk1135: Sensor read failed [ 189.456580][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 189.463421][ T5862] gspca_stk1135: Sensor read failed [ 189.468746][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 189.476068][ T5862] gspca_stk1135: Sensor write failed [ 189.481394][ T5862] gspca_stk1135: serial bus timeout: status=0x00 [ 189.490496][ T5862] gspca_stk1135: Sensor write failed [ 189.500564][ T5862] stk1135: probe of 5-1:0.0 failed with error -71 [ 189.534874][ T5862] usb 5-1: USB disconnect, device number 5 [ 189.772147][ T9514] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 190.227359][ T9527] netlink: 'syz.1.1642': attribute type 39 has an invalid length. [ 190.231509][ T9512] loop3: detected capacity change from 0 to 32768 [ 190.295371][ T9512] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.436614][ T9512] XFS (loop3): Ending clean mount [ 190.466117][ T9512] XFS (loop3): Quotacheck needed: Please wait. [ 190.526917][ T9512] XFS (loop3): Quotacheck: Done. [ 190.748109][ T9527] veth0_macvtap: left promiscuous mode [ 190.759578][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.017116][ T9552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1652'. [ 191.179406][ T9563] loop4: detected capacity change from 0 to 512 [ 191.721762][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1662'. [ 191.838429][ T9566] loop1: detected capacity change from 0 to 40427 [ 191.849341][ T9566] F2FS-fs (loop1): build fault injection attr: rate: 4, type: 0x7ffff [ 191.867097][ T9566] F2FS-fs (loop1): Image doesn't support compression [ 191.902172][ T9566] F2FS-fs (loop1): Image doesn't support compression [ 191.909135][ T9566] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 191.919724][ T9566] F2FS-fs (loop1): invalid crc value [ 191.963824][ T9566] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 192.000939][ T9566] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 192.061994][ T9566] F2FS-fs (loop1): Found nat_bits in checkpoint [ 192.164282][ T9566] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 192.187533][ T9566] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x644/0x920 [ 192.208883][ T9566] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x156/0x580 [ 192.300673][ T9566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 192.360032][ T9566] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of __get_node_page+0x17b/0xf40 [ 192.434537][ T5783] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x67/0x210 [ 192.977823][ T9610] loop3: detected capacity change from 0 to 512 [ 193.411929][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1688'. [ 193.585564][ T9638] netlink: 'syz.4.1691': attribute type 3 has an invalid length. [ 193.642316][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 193.687382][ T9642] Driver unsupported XDP return value 0 on prog (id 92) dev N/A, expect packet loss! [ 193.905818][ T9653] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1701'. [ 194.204465][ T9667] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1706'. [ 194.402437][ T9675] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1710'. [ 194.411792][ T9675] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1710'. [ 194.527733][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.534503][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.754374][ T9660] loop4: detected capacity change from 0 to 32768 [ 194.860720][ T9660] XFS (loop4): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 194.906132][ T9696] loop1: detected capacity change from 0 to 16 [ 194.929221][ T9696] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 194.980623][ T9660] XFS (loop4): ro->rw transition prohibited on norecovery mount [ 195.127383][ T8718] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 195.301772][ T9711] loop3: detected capacity change from 0 to 2048 [ 195.367178][ T9711] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.090413][ T9746] netlink: 'syz.0.1741': attribute type 39 has an invalid length. [ 196.114485][ T9746] veth0_macvtap: left promiscuous mode [ 196.247413][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1745'. [ 196.935574][ T9784] netlink: 'syz.3.1760': attribute type 39 has an invalid length. [ 196.948555][ T9784] veth0_macvtap: left promiscuous mode [ 197.017036][ T9789] program syz.0.1762 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.073948][ T9785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.094058][ T9785] bond0: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 197.119017][ T9785] bond0: (slave ip_vti0): Error -95 calling set_mac_address [ 197.852073][ T9828] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1774'. [ 197.872868][ T9828] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1774'. [ 199.204212][ T9845] loop3: detected capacity change from 0 to 32768 [ 199.297842][ T9845] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 199.700105][ T9845] XFS (loop3): Ending clean mount [ 199.753222][ T9845] XFS (loop3): Quotacheck needed: Please wait. [ 199.882186][ T9845] XFS (loop3): Quotacheck: Done. [ 200.065544][ T9917] loop1: detected capacity change from 0 to 2048 [ 200.082678][ T5780] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.105906][ T9917] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.096800][ T9941] netlink: 'syz.3.1815': attribute type 29 has an invalid length. [ 201.122109][ T9941] netlink: 'syz.3.1815': attribute type 29 has an invalid length. [ 201.281990][ T9951] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 201.450133][ T9957] loop3: detected capacity change from 0 to 1764 [ 201.493072][ T9957] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 201.537380][ T9957] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 202.309527][ T9993] loop1: detected capacity change from 0 to 2048 [ 202.365327][ T9993] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 202.401988][T10000] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 202.501202][ T9993] syz.1.1840 (9993) used greatest stack depth: 19856 bytes left [ 202.918876][T10018] loop1: detected capacity change from 0 to 1764 [ 202.929684][T10022] binder: 10019:10022 ioctl c0306201 200000000080 returned -14 [ 202.968706][T10018] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 203.072939][T10018] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 203.696208][T10054] loop4: detected capacity change from 0 to 1764 [ 203.697417][T10056] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1870'. [ 203.743258][T10054] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 203.822662][T10054] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 203.965647][ T28] audit: type=1326 audit(1755784603.769:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 203.988095][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.035257][ T28] audit: type=1326 audit(1755784603.769:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 204.063611][ T28] audit: type=1326 audit(1755784603.809:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 204.093664][ T28] audit: type=1326 audit(1755784603.809:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 204.177399][ T28] audit: type=1326 audit(1755784603.809:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10061 comm="syz.0.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b58d8ebe9 code=0x7ffc0000 [ 204.415604][T10060] loop3: detected capacity change from 0 to 32768 [ 204.492928][T10060] ERROR: (device loop3): dbFindCtl: Corrupt dmapctl page [ 204.492928][T10060] [ 204.524859][T10060] ERROR: (device loop3): remounting filesystem as read-only [ 204.543713][T10060] ialloc: diAlloc returned -5! [ 205.308268][T10103] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1893'. [ 205.316503][T10101] loop3: detected capacity change from 0 to 128 [ 205.376073][T10101] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.410043][T10101] ext4 filesystem being mounted at /459/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.453074][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1894'. [ 205.567363][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.798269][T10121] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (13) [ 205.807372][T10117] loop3: detected capacity change from 0 to 2048 [ 205.825028][T10117] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 205.841578][T10117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.098859][T10126] loop1: detected capacity change from 0 to 2048 [ 206.159269][T10126] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 206.202414][T10132] loop3: detected capacity change from 0 to 256 [ 206.211898][T10126] UDF-fs: Scanning with blocksize 512 failed [ 206.225790][T10132] exfat: Deprecated parameter 'utf8' [ 206.245931][T10126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.305812][T10132] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 206.506599][T10141] 9pnet_fd: Insufficient options for proto=fd [ 206.997017][T10163] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1922'. [ 207.032055][T10167] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 207.355619][T10180] netlink: 'syz.4.1930': attribute type 2 has an invalid length. [ 207.685053][T10191] netlink: 'syz.1.1936': attribute type 4 has an invalid length. [ 208.115965][T10207] loop1: detected capacity change from 0 to 256 [ 208.216318][T10207] FAT-fs (loop1): Directory bread(block 64) failed [ 208.262101][T10207] FAT-fs (loop1): Directory bread(block 65) failed [ 208.269835][T10207] FAT-fs (loop1): Directory bread(block 66) failed [ 208.291800][T10207] FAT-fs (loop1): Directory bread(block 67) failed [ 208.298505][T10207] FAT-fs (loop1): Directory bread(block 68) failed [ 208.333028][T10207] FAT-fs (loop1): Directory bread(block 69) failed [ 208.356970][T10207] FAT-fs (loop1): Directory bread(block 70) failed [ 208.367376][T10207] FAT-fs (loop1): Directory bread(block 71) failed [ 208.376762][T10207] FAT-fs (loop1): Directory bread(block 72) failed [ 208.384080][T10207] FAT-fs (loop1): Directory bread(block 73) failed [ 208.666256][T10224] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1952'. [ 209.121780][ T5874] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 209.320908][ T5874] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 209.339078][ T5874] usb 4-1: config 0 has no interface number 0 [ 209.345749][T10220] loop4: detected capacity change from 0 to 32768 [ 209.357835][ T5874] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 209.370617][ T5874] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.383600][T10220] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 209.392067][T10220] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 209.416426][T10220] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 209.418031][ T5874] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 209.461308][T10220] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 209.462012][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.511743][ T5874] usb 4-1: Product: syz [ 209.515965][ T5874] usb 4-1: Manufacturer: syz [ 209.546197][ T5874] usb 4-1: SerialNumber: syz [ 209.574171][ T5874] usb 4-1: config 0 descriptor?? [ 209.579993][T10232] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.591782][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 209.627562][ T5874] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 209.711294][ T5874] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 209.851588][ T27] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 209.860949][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.891194][ T27] usb 2-1: Product: syz [ 209.901326][ T27] usb 2-1: Manufacturer: syz [ 209.941787][ T27] usb 2-1: SerialNumber: syz [ 209.956953][ T27] usb 2-1: config 0 descriptor?? [ 209.978719][ T27] hub 2-1:0.0: bad descriptor, ignoring hub [ 209.987013][ T27] hub: probe of 2-1:0.0 failed with error -5 [ 210.012346][ T27] f81232 2-1:0.0: f81534a converter detected [ 210.045485][ T8] usb 4-1: USB disconnect, device number 10 [ 210.090829][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 210.123077][ T8] cyberjack 4-1:0.69: device disconnected [ 210.185153][ T27] usb 2-1: f81534a converter now attached to ttyUSB1 [ 210.277688][T10267] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 210.448496][T10273] loop4: detected capacity change from 0 to 512 [ 210.462227][ T5874] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.463950][T10273] EXT4-fs: Ignoring removed oldalloc option [ 210.480532][T10273] EXT4-fs: inline encryption not supported [ 210.486495][T10273] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.494509][T10273] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 210.504062][ T27] usb 2-1: USB disconnect, device number 8 [ 210.516346][ T27] f81534a ttyUSB1: f81534a converter now disconnected from ttyUSB1 [ 210.528028][ T27] f81232 2-1:0.0: device disconnected [ 210.550944][T10273] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1976: bg 0: block 64: padding at end of block bitmap is not set [ 210.576013][T10273] Quota error (device loop4): write_blk: dquota write failed [ 210.605333][T10273] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 210.657285][T10273] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1976: Failed to acquire dquot type 0 [ 210.673657][ T5874] usb 1-1: config index 0 descriptor too short (expected 65069, got 45) [ 210.679327][T10273] EXT4-fs (loop4): 1 truncate cleaned up [ 210.689460][ T5874] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 210.703782][T10273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.706429][ T5874] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 210.729753][ T5874] usb 1-1: config 0 has an invalid descriptor of length 177, skipping remainder of the config [ 210.740790][ T5874] usb 1-1: config 0 has no interfaces? [ 210.747129][ T5874] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 210.765666][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.780336][ T5874] usb 1-1: config 0 descriptor?? [ 210.788052][T10273] Quota error (device loop4): do_check_range: Getting block 144 out of range 0-5 [ 210.817936][T10282] loop3: detected capacity change from 0 to 128 [ 210.858578][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.871170][ T8718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.884391][T10282] FAT-fs (loop3): Filesystem has been set read-only [ 210.891265][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.900252][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.909902][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.919299][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.934378][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.945636][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.958631][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.970395][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 210.986624][T10282] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 211.009134][ T28] audit: type=1800 audit(1755784610.819:73): pid=10282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1979" name="file2" dev="loop3" ino=1048614 res=0 errno=0 [ 211.044802][ T965] usb 1-1: USB disconnect, device number 13 [ 211.257980][T10293] netlink: 'syz.1.1984': attribute type 10 has an invalid length. [ 211.286300][T10293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1984'. [ 211.376007][T10293] geneve0: entered promiscuous mode [ 211.385719][T10293] team0: Port device geneve0 added [ 211.416880][T10298] loop4: detected capacity change from 0 to 4096 [ 211.430040][T10298] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 211.467526][T10298] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 211.489168][T10298] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 211.515653][T10298] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 211.537264][T10298] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 211.570823][T10298] ntfs: volume version 3.1. [ 211.580939][T10298] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 211.956164][T10316] capability: warning: `syz.0.1996' uses 32-bit capabilities (legacy support in use) [ 212.142787][ T5874] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.365918][ T965] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 212.373871][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 212.386849][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 102, changing to 7 [ 212.405475][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 10030, setting to 1024 [ 212.422500][ T5874] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 212.441747][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.457688][ T5874] usb 5-1: Product: syz [ 212.461983][ T5874] usb 5-1: Manufacturer: syz [ 212.466877][ T5874] usb 5-1: SerialNumber: syz [ 212.480544][ T5874] usb 5-1: config 0 descriptor?? [ 212.490081][ T5874] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 212.499808][ T5874] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 212.581757][ T965] usb 4-1: Using ep0 maxpacket: 8 [ 212.589556][ T965] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 212.597775][ T965] usb 4-1: config 6 has no interface number 0 [ 212.603967][ T965] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 212.613863][ T965] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 212.625613][ T965] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 212.634942][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.643050][ T965] usb 4-1: Product: syz [ 212.647239][ T965] usb 4-1: Manufacturer: syz [ 212.651922][ T965] usb 4-1: SerialNumber: syz [ 212.662744][ T965] hso 4-1:6.2: Failed to find INT IN ep [ 212.754671][ T5874] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 212.831562][ T5874] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 212.841240][ T5874] em28xx 5-1:0.0: board has no eeprom [ 212.865013][ T27] usb 4-1: USB disconnect, device number 11 [ 212.922131][ T5874] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 212.929990][ T5874] em28xx 5-1:0.0: dvb set to isoc mode. [ 212.937197][ T965] em28xx 5-1:0.0: Binding DVB extension [ 212.952091][ T5874] usb 5-1: USB disconnect, device number 6 [ 212.976970][ T5874] em28xx 5-1:0.0: Disconnecting em28xx [ 213.010363][ T965] em28xx 5-1:0.0: Registering input extension [ 213.018502][ T5874] em28xx 5-1:0.0: Closing input extension [ 213.037644][ T5874] em28xx 5-1:0.0: Freeing device [ 213.700732][T10368] tmpfs: Bad value for 'mpol' [ 213.959188][T10381] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2026'. [ 214.226221][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2032'. [ 214.270585][T10394] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2033'. [ 214.306459][T10394] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.330758][T10394] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.366058][T10394] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.393848][T10394] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 214.724514][T10416] dlm: non-version read from control device 0 [ 215.422949][ T27] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 215.461510][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 215.479952][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2055'. [ 215.489969][T10438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2055'. [ 215.507366][T10438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2055'. [ 215.623580][ T27] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 215.632569][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.643231][ T27] usb 5-1: config 0 has no interface number 0 [ 215.649803][ T27] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 215.660829][ T27] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.684346][ T27] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 215.693931][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.711789][ T27] usb 5-1: Product: syz [ 215.716183][ T27] usb 5-1: Manufacturer: syz [ 215.720806][ T27] usb 5-1: SerialNumber: syz [ 215.760159][ T27] usb 5-1: config 0 descriptor?? [ 215.903615][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2062'. [ 215.917696][T10454] xfrm0: entered promiscuous mode [ 215.923121][T10454] xfrm0: entered allmulticast mode [ 216.011870][ T965] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 216.135671][T10465] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2068'. [ 216.194649][ T27] usb 5-1: USB disconnect, device number 7 [ 216.215231][ T965] usb 4-1: Using ep0 maxpacket: 8 [ 216.228368][ T965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.246239][ T965] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 216.258835][ T965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.274381][ T965] usb 4-1: Product: syz [ 216.281948][ T965] usb 4-1: Manufacturer: syz [ 216.288915][ T965] usb 4-1: SerialNumber: syz [ 216.302140][ T965] usb 4-1: config 0 descriptor?? [ 216.311091][ T965] cdc_phonet 4-1:0.0: skipping garbage [ 216.317430][ T965] cdc_phonet 4-1:0.0: invalid descriptor buffer length [ 216.328501][ T965] cdc_phonet: probe of 4-1:0.0 failed with error -22 [ 216.495588][T10480] __nla_validate_parse: 1 callbacks suppressed [ 216.495603][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 216.516392][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2075'. [ 216.544930][ T27] usb 4-1: USB disconnect, device number 12 [ 216.880950][T10498] geneve4: entered promiscuous mode [ 216.896415][T10498] geneve4: entered allmulticast mode [ 216.955260][T10500] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 216.980429][T10502] loop4: detected capacity change from 0 to 256 [ 217.007605][T10502] FAT-fs (loop4): Directory bread(block 64) failed [ 217.028211][T10502] FAT-fs (loop4): Directory bread(block 65) failed [ 217.051868][T10502] FAT-fs (loop4): Directory bread(block 66) failed [ 217.058464][T10502] FAT-fs (loop4): Directory bread(block 67) failed [ 217.082156][T10502] FAT-fs (loop4): Directory bread(block 68) failed [ 217.088821][T10502] FAT-fs (loop4): Directory bread(block 69) failed [ 217.115327][T10502] FAT-fs (loop4): Directory bread(block 70) failed [ 217.125932][T10502] FAT-fs (loop4): Directory bread(block 71) failed [ 217.132907][T10502] FAT-fs (loop4): Directory bread(block 72) failed [ 217.140079][T10502] FAT-fs (loop4): Directory bread(block 73) failed [ 218.358382][T10558] loop3: detected capacity change from 0 to 256 [ 218.432827][T10558] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a371bfb, utbl_chksum : 0xe619d30d) [ 218.904140][T10580] xt_hashlimit: invalid rate [ 219.048879][T10586] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073709510581) [ 219.071577][T10586] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 219.119110][T10590] vlan1: entered allmulticast mode [ 219.128593][T10590] veth0_vlan: entered allmulticast mode [ 219.299324][T10598] netlink: zone id is out of range [ 219.367650][T10598] netlink: set zone limit has 4 unknown bytes [ 219.469523][T10603] loop4: detected capacity change from 0 to 1024 [ 219.563996][ T8889] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 219.755440][T10614] loop4: detected capacity change from 0 to 256 [ 219.791802][T10616] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.801109][T10614] exfat: Deprecated parameter 'namecase' [ 219.834404][T10614] exfat: Deprecated parameter 'namecase' [ 219.915402][T10614] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 219.995359][T10614] overlay: filesystem on ./file0 not supported [ 220.389335][T10634] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 220.575326][T10640] netlink: 'syz.3.2155': attribute type 21 has an invalid length. [ 220.599513][T10640] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2155'. [ 220.713562][T10644] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 220.908658][T10652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2161'. [ 220.932043][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2161'. [ 221.174841][T10663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2165'. [ 221.339383][T10674] program syz.0.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.255101][ T5862] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 222.256483][T10695] loop4: detected capacity change from 0 to 32768 [ 222.265907][T10712] loop3: detected capacity change from 0 to 512 [ 222.278311][T10695] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.2182 (10695) [ 222.284386][T10712] EXT4-fs: Ignoring removed oldalloc option [ 222.297559][T10712] EXT4-fs: inline encryption not supported [ 222.305662][T10712] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.313680][T10712] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 222.338358][T10695] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 222.350610][T10695] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 222.377575][T10712] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2190: bg 0: block 64: padding at end of block bitmap is not set [ 222.395129][T10695] BTRFS info (device loop4): enabling auto defrag [ 222.403153][T10712] __quota_error: 10 callbacks suppressed [ 222.403167][T10712] Quota error (device loop3): write_blk: dquota write failed [ 222.407220][T10695] BTRFS info (device loop4): doing ref verification [ 222.409212][T10712] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 222.416569][T10695] BTRFS info (device loop4): use no compression [ 222.425583][T10712] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.2190: Failed to acquire dquot type 0 [ 222.440494][T10695] BTRFS info (device loop4): force clearing of disk cache [ 222.464353][T10695] BTRFS info (device loop4): turning on async discard [ 222.471399][T10695] BTRFS info (device loop4): max_inline at 4096 [ 222.471558][T10712] EXT4-fs (loop3): 1 truncate cleaned up [ 222.483589][ T5862] usb 1-1: Using ep0 maxpacket: 16 [ 222.490392][ T5862] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.501029][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 262, setting to 64 [ 222.507832][T10695] BTRFS info (device loop4): disabling free space tree [ 222.513062][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.530942][ T5862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.533322][T10712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.540782][ T5862] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.567798][ T5862] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.576961][ T5862] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.591812][ T5862] usb 1-1: Manufacturer: syz [ 222.598957][ T5862] usb 1-1: config 0 descriptor?? [ 222.677798][T10712] Quota error (device loop3): do_check_range: Getting block 144 out of range 0-5 [ 222.743012][T10695] BTRFS info (device loop4): enabling ssd optimizations [ 222.771407][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.797124][T10695] BTRFS info (device loop4): rebuilding free space tree [ 222.851834][ T5862] usb 1-1: USB disconnect, device number 14 [ 222.885544][T10695] BTRFS info (device loop4): disabling free space tree [ 222.893846][T10695] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 222.908012][T10695] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 223.193185][ T8718] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 223.458779][T10751] netlink: 'syz.1.2199': attribute type 29 has an invalid length. [ 223.500581][T10751] netlink: 'syz.1.2199': attribute type 29 has an invalid length. [ 223.738713][T10758] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2204'. [ 224.314398][T10780] loop1: detected capacity change from 0 to 2048 [ 224.337841][T10782] geneve2: entered promiscuous mode [ 224.354994][T10780] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 224.371903][T10782] geneve2: entered allmulticast mode [ 224.413590][T10780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.440407][T10786] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 224.548263][T10790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2217'. [ 224.895706][T10806] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 225.156130][T10815] loop1: detected capacity change from 0 to 4096 [ 225.176804][T10815] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 225.206993][T10815] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 225.230562][T10815] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 225.233979][T10819] geneve2: entered promiscuous mode [ 225.255893][T10815] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 225.269158][T10819] geneve2: entered allmulticast mode [ 225.276735][T10815] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 225.305110][T10815] ntfs: volume version 3.1. [ 225.329848][T10815] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 225.387414][T10815] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 225.461455][T10823] loop4: detected capacity change from 0 to 4096 [ 225.516326][T10823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.649346][ T8718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.962176][ T5874] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.140251][T10847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2253'. [ 226.171740][ T5874] usb 2-1: Using ep0 maxpacket: 8 [ 226.183720][T10847] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.196420][T10847] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.207370][ T5874] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 226.215968][T10847] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.224966][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.235528][ T5874] usb 2-1: config 0 has no interface number 0 [ 226.242089][T10847] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.255779][ T5874] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 226.265275][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.274590][ T5874] usb 2-1: Product: syz [ 226.278959][ T5874] usb 2-1: Manufacturer: syz [ 226.284021][ T5874] usb 2-1: SerialNumber: syz [ 226.299795][ T5874] usb 2-1: config 0 descriptor?? [ 226.525089][ T5874] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 226.533860][ T5874] usb 2-1: No valid video chain found. [ 226.585302][T10849] loop3: detected capacity change from 0 to 32768 [ 226.613202][T10849] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2244 (10849) [ 226.632750][T10849] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 226.645118][T10849] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 226.655114][T10849] BTRFS info (device loop3): using free space tree [ 226.694340][T10849] BTRFS info (device loop3): enabling ssd optimizations [ 226.701519][T10849] BTRFS info (device loop3): auto enabling async discard [ 226.730215][ T965] usb 2-1: USB disconnect, device number 9 [ 226.848480][ T5780] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 227.368017][T10877] geneve3: entered promiscuous mode [ 227.380497][T10877] geneve3: entered allmulticast mode [ 227.838314][T10895] vlan1: entered allmulticast mode [ 227.849787][T10895] veth0_vlan: entered allmulticast mode [ 227.887299][T10899] netlink: 'syz.3.2263': attribute type 21 has an invalid length. [ 227.908856][T10899] netlink: 'syz.3.2263': attribute type 20 has an invalid length. [ 227.930074][T10899] IPv6: NLM_F_CREATE should be specified when creating new route [ 228.134071][T10905] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.336495][T10912] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 228.381729][T10912] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2269'. [ 229.349223][T10953] nvme_fabrics: unknown parameter or missing value 'Y' in ctrl creation request [ 229.557049][T10963] loop1: detected capacity change from 0 to 256 [ 229.644995][T10963] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 229.881012][T10947] loop4: detected capacity change from 0 to 32768 [ 229.931489][T10947] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2293 (10947) [ 229.982037][T10947] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 230.011836][T10947] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 230.021387][T10947] BTRFS info (device loop4): using free space tree [ 230.212758][T10947] BTRFS info (device loop4): enabling ssd optimizations [ 230.220072][T10947] BTRFS info (device loop4): auto enabling async discard [ 230.304628][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 230.427321][ T8718] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 230.541909][ T5874] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 230.751522][ T5874] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 230.760488][ T5874] usb 1-1: config 0 has no interface number 0 [ 230.792170][ T5874] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 230.831961][ T5874] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 230.868612][ T5874] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 230.888060][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.912033][ T5874] usb 1-1: Product: syz [ 230.916268][ T5874] usb 1-1: Manufacturer: syz [ 230.926496][T11012] loop4: detected capacity change from 0 to 256 [ 230.929847][ T5874] usb 1-1: SerialNumber: syz [ 230.953681][ T5874] usb 1-1: config 0 descriptor?? [ 230.972613][T11002] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 230.976412][T10986] loop1: detected capacity change from 0 to 40427 [ 230.985114][ T5874] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 231.013091][ T5874] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 231.040910][T10986] F2FS-fs (loop1): invalid crc value [ 231.050652][T11012] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 231.083697][T10986] F2FS-fs (loop1): Found nat_bits in checkpoint [ 231.337006][T10986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 231.496482][T10986] bio_check_eod: 8 callbacks suppressed [ 231.496524][T10986] syz.1.2302: attempt to access beyond end of device [ 231.496524][T10986] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 231.549509][ T27] usb 1-1: USB disconnect, device number 15 [ 231.584169][ T27] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 231.617004][ T27] cyberjack 1-1:0.69: device disconnected [ 232.005833][T11039] AppArmor: change_hat: Invalid input '' [ 232.640609][T11035] loop1: detected capacity change from 0 to 32768 [ 232.702591][T11035] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.2315 (11035) [ 232.730333][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 232.730347][ T28] audit: type=1326 audit(1755784632.539:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 232.774005][T11035] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 232.809461][T11035] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 232.818339][ T28] audit: type=1326 audit(1755784632.539:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 232.838894][T11035] BTRFS info (device loop1): using free space tree [ 232.850615][ T28] audit: type=1326 audit(1755784632.539:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 232.976554][ T28] audit: type=1326 audit(1755784632.539:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 233.041582][ T28] audit: type=1326 audit(1755784632.569:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 233.063998][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.072547][ T28] audit: type=1326 audit(1755784632.569:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 233.095062][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.101682][ T28] audit: type=1326 audit(1755784632.569:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 233.101843][T11035] BTRFS info (device loop1): enabling ssd optimizations [ 233.162259][T11035] BTRFS info (device loop1): auto enabling async discard [ 233.177569][T11074] loop3: detected capacity change from 0 to 4096 [ 233.192981][ T28] audit: type=1326 audit(1755784632.569:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 233.215329][ C0] vkms_vblank_simulate: vblank timer overrun [ 233.237509][ T28] audit: type=1326 audit(1755784632.569:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11054 comm="syz.4.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f602438ebe9 code=0x7ffc0000 [ 233.428572][T11074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.570339][ T5783] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 233.757326][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.150183][T11109] loop3: detected capacity change from 0 to 256 [ 234.222800][T11109] exfat: Deprecated parameter 'namecase' [ 234.266059][T11109] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d) [ 234.393524][T11112] loop4: detected capacity change from 0 to 4096 [ 234.566519][T11114] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.716138][T11112] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.' [ 234.788741][T11112] Remounting filesystem read-only [ 235.208964][ T28] audit: type=1326 audit(1755784635.009:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11136 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d98ebe9 code=0x7ffc0000 [ 235.509441][T11144] loop1: detected capacity change from 0 to 4096 [ 235.533561][T11144] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 235.717701][T11158] loop3: detected capacity change from 0 to 1024 [ 235.856993][T11158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.897213][T11158] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.936885][T11158] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 235.987715][T11165] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2371'. [ 236.013325][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.513676][ T5874] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 236.608950][T11193] loop4: detected capacity change from 0 to 47 [ 236.744801][ T5874] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 236.790748][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.821065][ T5874] usb 4-1: config 0 descriptor?? [ 236.834968][ T5874] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 236.873859][T11201] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2388'. [ 236.897152][T11201] unsupported nlmsg_type 40 [ 237.268012][ T5874] gp8psk: usb out operation failed. [ 237.292748][ T5874] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 237.331284][ T5874] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 237.369501][ T5874] usb 4-1: USB disconnect, device number 13 [ 237.429733][T11219] loop1: detected capacity change from 0 to 64 [ 237.556542][T11219] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 237.707387][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2400'. [ 237.732304][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2400'. [ 237.958911][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2402'. [ 238.249256][T11243] xt_TCPMSS: Only works on TCP SYN packets [ 238.261997][ T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 238.387711][T11247] batadv1: entered promiscuous mode [ 238.475301][ T23] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 238.501710][ T23] usb 2-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 61 [ 238.521696][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.541808][ T23] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 73, using maximum allowed: 30 [ 238.561938][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 73 [ 238.621799][ T23] usb 2-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 238.631020][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.673219][ T23] usb 2-1: config 0 descriptor?? [ 238.692622][ T23] usb-storage 2-1:0.0: USB Mass Storage device detected [ 238.716983][ T23] usb-storage 2-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 238.747571][T11257] comedi comedi0: dt2815: I/O port conflict (0x3,2) [ 238.797790][T11241] loop4: detected capacity change from 0 to 32768 [ 238.996675][ T27] usb 2-1: USB disconnect, device number 10 [ 239.746514][T11295] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2434'. [ 239.927188][T11309] binfmt_misc: register: failed to install interpreter file ./file0 [ 240.216750][T11324] batadv1: entered promiscuous mode [ 240.439311][T11338] loop3: detected capacity change from 0 to 512 [ 240.523393][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2448'. [ 240.523709][T11338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.552165][T11338] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.782075][T11318] loop1: detected capacity change from 0 to 32768 [ 240.813285][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.821798][ T965] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 240.830930][T11318] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 240.841106][T11318] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 240.857464][T11318] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 240.952868][T11318] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 241.001793][ T965] usb 5-1: Using ep0 maxpacket: 32 [ 241.053413][ T965] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.097388][ T965] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 241.116242][ T965] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 241.149339][ T965] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 241.172240][ T965] usb 5-1: config 128 has no interface number 0 [ 241.178830][ T965] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 170, changing to 11 [ 241.184332][T11375] loop3: detected capacity change from 0 to 64 [ 241.201206][ T965] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 42744, setting to 1024 [ 241.220447][ T965] usb 5-1: config 128 interface 127 has no altsetting 0 [ 241.232788][ T965] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 241.259569][ T965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.283247][ T965] usb 5-1: Product: syz [ 241.287502][ T965] usb 5-1: Manufacturer: syz [ 241.293195][ T965] usb 5-1: SerialNumber: syz [ 241.334281][T11347] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 241.360587][T11379] wg1: entered promiscuous mode [ 241.392288][T11379] wg1: entered allmulticast mode [ 241.515960][T11388] batadv1: entered promiscuous mode [ 241.639619][ T965] usb 5-1: USB disconnect, device number 8 [ 241.705340][ T8889] udevd[8889]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.055591][T11434] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2469'. [ 242.492122][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 242.712794][ T23] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 242.740772][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.767979][ T23] usb 2-1: config 0 descriptor?? [ 242.920698][T11492] loop4: detected capacity change from 0 to 164 [ 242.986991][T11492] Unable to read rock-ridge attributes [ 243.008632][ T23] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 243.022166][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 243.212401][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 243.212415][ T28] audit: type=1326 audit(1755784643.019:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d98ebe9 code=0x7ffc0000 [ 243.246060][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 243.257082][ T28] audit: type=1326 audit(1755784643.029:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d98ebe9 code=0x7ffc0000 [ 243.308378][ T23] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 243.331118][ T28] audit: type=1326 audit(1755784643.069:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f940d98ebe9 code=0x7ffc0000 [ 243.350564][ T23] [drm] Initialized udl on minor 2 [ 243.396272][ T23] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 243.401109][ T28] audit: type=1326 audit(1755784643.069:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d98ebe9 code=0x7ffc0000 [ 243.444512][ T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 243.468925][ T27] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 243.496044][ T28] audit: type=1326 audit(1755784643.069:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.3.2494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940d98ebe9 code=0x7ffc0000 [ 243.511318][ T23] usb 2-1: USB disconnect, device number 11 [ 243.543392][ T27] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 243.588995][ T27] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 243.934990][T11556] loop3: detected capacity change from 0 to 64 [ 243.961625][T11556] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 244.386162][T11584] netlink: get zone limit has 4 unknown bytes [ 244.956236][T11637] loop1: detected capacity change from 0 to 256 [ 245.132264][T11637] FAT-fs (loop1): Directory bread(block 64) failed [ 245.171088][T11637] FAT-fs (loop1): Directory bread(block 65) failed [ 245.191035][T11637] FAT-fs (loop1): Directory bread(block 66) failed [ 245.212183][T11637] FAT-fs (loop1): Directory bread(block 67) failed [ 245.229870][T11637] FAT-fs (loop1): Directory bread(block 68) failed [ 245.257454][T11637] FAT-fs (loop1): Directory bread(block 69) failed [ 245.277343][T11655] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2532'. [ 245.280951][T11637] FAT-fs (loop1): Directory bread(block 70) failed [ 245.333706][T11637] FAT-fs (loop1): Directory bread(block 71) failed [ 245.340395][T11637] FAT-fs (loop1): Directory bread(block 72) failed [ 245.368739][T11637] FAT-fs (loop1): Directory bread(block 73) failed [ 245.526487][T11667] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2536'. [ 245.721025][T11678] loop4: detected capacity change from 0 to 64 [ 245.966982][T11692] ipt_rpfilter: unknown options [ 246.273829][T11707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 246.307211][T11707] netlink: 660 bytes leftover after parsing attributes in process `syz.3.2548'. [ 247.111404][T11758] netlink: 'syz.1.2566': attribute type 1 has an invalid length. [ 247.542629][T11785] netlink: 'syz.3.2576': attribute type 10 has an invalid length. [ 247.581818][T11785] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2576'. [ 247.598036][T11785] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 247.765317][T11798] netlink: 'syz.3.2580': attribute type 2 has an invalid length. [ 247.793794][T11795] : entered promiscuous mode [ 247.821421][T11798] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2580'. [ 248.198106][T11827] loop1: detected capacity change from 0 to 256 [ 248.232482][T11830] netlink: 'syz.3.2591': attribute type 3 has an invalid length. [ 248.977374][T11883] loop1: detected capacity change from 0 to 512 [ 249.249640][T11883] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 249.374506][T11883] EXT4-fs (loop1): Remounting filesystem read-only [ 249.422377][T11883] EXT4-fs (loop1): 1 truncate cleaned up [ 249.429242][T11883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.608484][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.638960][T11855] loop3: detected capacity change from 0 to 32768 [ 249.721768][T11855] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 249.721768][T11855] [ 249.759418][T11921] (unnamed net_device) (uninitialized): up delay (2) is not a multiple of miimon (100), value rounded to 0 ms [ 249.802489][T11921] (unnamed net_device) (uninitialized): down delay (2036) is not a multiple of miimon (100), value rounded to 2000 ms [ 249.923660][T11933] : entered promiscuous mode [ 250.127212][T11973] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2616'. [ 251.412236][ T5874] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 251.480828][T12062] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2646'. [ 251.494147][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2646'. [ 251.584439][T12066] misc userio: No port type given on /dev/userio [ 251.637723][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 251.662781][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 251.680611][ T5874] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 251.721710][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.740036][ T5874] usb 1-1: config 0 descriptor?? [ 251.972053][ T5874] ath6kl: Failed to submit usb control message: -71 [ 251.978788][ T5874] ath6kl: unable to send the bmi data to the device: -71 [ 251.997890][ T5874] ath6kl: Unable to send get target info: -71 [ 252.013080][ T5874] ath6kl: Failed to init ath6kl core: -71 [ 252.024190][ T5874] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 252.046186][ T5874] usb 1-1: USB disconnect, device number 16 [ 252.062414][T12097] xt_cgroup: invalid path, errno=-2 [ 252.385689][T12117] devtmpfs: Unknown parameter 'GPL' [ 252.721294][T12140] netlink: 'syz.1.2668': attribute type 32 has an invalid length. [ 253.380388][T12177] netlink: 'syz.3.2681': attribute type 21 has an invalid length. [ 253.651139][T12149] loop4: detected capacity change from 0 to 40427 [ 253.709143][T12149] F2FS-fs (loop4): invalid crc value [ 253.726825][T12149] F2FS-fs (loop4): Found nat_bits in checkpoint [ 253.811825][T12149] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 254.163187][T12213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 254.417869][T12230] netlink: 'syz.3.2696': attribute type 15 has an invalid length. [ 254.730961][T12254] vivid-006: disconnect [ 254.738809][T12253] vivid-006: reconnect [ 255.914245][T12331] loop1: detected capacity change from 0 to 4096 [ 255.948522][T12331] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 255.962471][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962547][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.083333][T12331] ntfs3: loop1: Failed to initialize $Extend/$Reparse. [ 256.238446][ T5783] ntfs3: loop1: ino=1a, ntfs_sync_fs failed, -22. [ 256.717134][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2743'. [ 256.804555][ T28] audit: type=1400 audit(1755784656.619:92): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=3A3A0AE10CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A552C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12386 comm="syz.4.2744" [ 257.291601][T12419] usb usb8: usbfs: process 12419 (syz.0.2756) did not claim interface 0 before use [ 257.360994][T12423] netlink: 'syz.1.2757': attribute type 2 has an invalid length. [ 257.395853][T12423] netlink: 'syz.1.2757': attribute type 8 has an invalid length. [ 257.416133][T12423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2757'. [ 257.440280][T12426] netlink: 'syz.4.2758': attribute type 2 has an invalid length. [ 257.449414][T12429] loop3: detected capacity change from 0 to 256 [ 257.497358][T12429] MINIX-fs: mounting file system with errors, running fsck is recommended [ 257.689802][T12439] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2763'. [ 257.821188][T12445] netlink: 'syz.4.2764': attribute type 10 has an invalid length. [ 257.834991][T12445] syz_tun: entered promiscuous mode [ 257.869714][T12454] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2767'. [ 257.871059][T12445] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 257.879807][T12454] unsupported nla_type 65024 [ 258.184439][T12471] loop4: detected capacity change from 0 to 16 [ 258.212561][T12471] erofs: (device loop4): mounted with root inode @ nid 36. [ 258.252176][T12471] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 258.277492][T12471] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 258.540031][T12492] binfmt_misc: register: failed to install interpreter file ./bus [ 258.611888][T12500] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2781'. [ 258.640476][T12500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2781'. [ 258.693832][T12504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.418598][T12505] loop1: detected capacity change from 0 to 32768 [ 259.439498][T12505] [ 259.439498][T12505] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.439498][T12505] [ 259.486861][T12505] JFS: metapage_get_blocks failed [ 259.532647][T12505] ERROR: (device loop1): release_metapage: metapage_write_one() failed [ 259.532647][T12505] [ 259.567539][T12505] ERROR: (device loop1): diWrite: ixpxd invalid [ 259.567539][T12505] [ 259.583761][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2798'. [ 259.606832][T12505] ERROR: (device loop1): txCommit: [ 259.606832][T12505] [ 259.698994][ T5783] [ 259.698994][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.698994][ T5783] [ 259.731997][ T5783] [ 259.731997][ T5783] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 259.731997][ T5783] [ 260.431311][T12597] delete_channel: no stack [ 260.841771][ T785] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 261.043469][ T785] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 261.059298][ T785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.073026][ T785] usb 1-1: config 0 descriptor?? [ 261.080362][ T785] cp210x 1-1:0.0: cp210x converter detected [ 261.231992][T12649] xt_connbytes: Forcing CT accounting to be enabled [ 261.328064][ T785] usb 1-1: cp210x converter now attached to ttyUSB0 [ 261.572145][ T5862] usb 1-1: USB disconnect, device number 17 [ 261.598331][ T5862] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 261.635959][ T5862] cp210x 1-1:0.0: device disconnected [ 261.772554][T12687] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2836'. [ 261.796634][T12688] comedi comedi3: board detection failed [ 261.990126][T12694] ALSA: mixer_oss: invalid OSS volume ';ʸgԊ8\>Pxi9 h~)V' [ 262.028295][T12694] ALSA: mixer_oss: invalid OSS volume '*bbX-]OF{T0pc' [ 262.072170][T12694] ALSA: mixer_oss: invalid OSS volume 'gI"4-Z' [ 262.107127][T12694] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 262.132806][T12694] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 262.158880][T12694] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 262.181765][T12694] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 262.211268][T12694] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 262.251266][T12694] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 262.288014][T12694] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 262.306675][T12694] ALSA: mixer_oss: invalid OSS volume '[' [ 262.321927][T12694] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 262.336877][T12694] ALSA: mixer_oss: invalid OSS volume '$ /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.931292][ T29] task:syz-executor state:D stack:21736 pid:5787 ppid:1 flags:0x00004004 [ 305.948119][ T29] Call Trace: [ 305.954985][ T29] [ 305.959946][ T29] __schedule+0x14d2/0x44d0 [ 305.964663][ T29] ? asan.module_dtor+0x20/0x20 [ 305.969550][ T29] ? mark_lock+0x94/0x320 [ 305.974067][ T29] ? lock_chain_count+0x20/0x20 [ 305.978943][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 305.985047][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 305.990473][ T29] schedule+0xbd/0x170 [ 305.994924][ T29] io_schedule+0x80/0xd0 [ 305.999198][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 306.004618][ T29] ? folio_wait_bit+0x30/0x30 [ 306.009323][ T29] ? filemap_get_entry+0x35c/0x3c0 [ 306.015965][ T29] ? _compound_head+0x120/0x120 [ 306.020862][ T29] ? find_lock_entries+0xc38/0xfe0 [ 306.026104][ T29] __filemap_get_folio+0xbc/0xbc0 [ 306.031164][ T29] truncate_inode_pages_range+0x40a/0xf00 [ 306.038511][ T29] ? mapping_evict_folio+0x510/0x510 [ 306.046982][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 306.052344][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.057570][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 306.066039][ T29] evict+0x499/0x870 [ 306.069982][ T29] ? proc_nr_inodes+0x230/0x230 [ 306.074964][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 306.080182][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 306.085607][ T29] evict_inodes+0x5fe/0x690 [ 306.090133][ T29] ? clear_inode+0x150/0x150 [ 306.094838][ T29] generic_shutdown_super+0x97/0x2b0 [ 306.100164][ T29] kill_block_super+0x44/0x90 [ 306.105026][ T29] deactivate_locked_super+0x97/0x100 [ 306.110601][ T29] cleanup_mnt+0x429/0x4c0 [ 306.115277][ T29] task_work_run+0x1ce/0x250 [ 306.119901][ T29] ? task_work_cancel+0x240/0x240 [ 306.125128][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 306.130634][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 306.136030][ T29] exit_to_user_mode_prepare+0xb1/0x140 [ 306.141594][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 306.147193][ T29] do_syscall_64+0x61/0xb0 [ 306.151621][ T29] ? clear_bhb_loop+0x40/0x90 [ 306.156386][ T29] ? clear_bhb_loop+0x40/0x90 [ 306.161074][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.167055][ T29] RIP: 0033:0x7f7d9d58ff17 [ 306.171497][ T29] RSP: 002b:00007ffdeae39d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 306.180058][ T29] RAX: 0000000000000000 RBX: 00007f7d9d611c05 RCX: 00007f7d9d58ff17 [ 306.188173][ T29] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdeae39e20 [ 306.196704][ T29] RBP: 00007ffdeae39e20 R08: 0000000000000000 R09: 0000000000000000 [ 306.205217][ T29] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdeae3aeb0 [ 306.215650][ T29] R13: 00007f7d9d611c05 R14: 00000000000248b1 R15: 00007ffdeae3aef0 [ 306.224096][ T29] [ 306.227190][ T29] [ 306.227190][ T29] Showing all locks held in the system: [ 306.236073][ T29] 1 lock held by khungtaskd/29: [ 306.240949][ T29] #0: ffffffff8cd2fbe0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 306.251002][ T29] 2 locks held by getty/5545: [ 306.255776][ T29] #0: ffff88814c7cb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 306.265615][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 306.275898][ T29] 1 lock held by syz-executor/5787: [ 306.281193][ T29] #0: ffff888079aaa0e0 (&type->s_umount_key#80){+.+.}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 306.291498][ T29] [ 306.294587][ T29] ============================================= [ 306.294587][ T29] [ 306.304928][ T29] NMI backtrace for cpu 0 [ 306.309276][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 306.317161][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.327207][ T29] Call Trace: [ 306.330482][ T29] [ 306.333406][ T29] dump_stack_lvl+0x16c/0x230 [ 306.338081][ T29] ? show_regs_print_info+0x20/0x20 [ 306.343271][ T29] ? load_image+0x3b0/0x3b0 [ 306.347818][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 306.353181][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 306.359322][ T29] ? _printk+0xd0/0x110 [ 306.363492][ T29] ? load_image+0x3b0/0x3b0 [ 306.367994][ T29] ? load_image+0x3b0/0x3b0 [ 306.372501][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 306.378576][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 306.384641][ T29] watchdog+0xf41/0xf80 [ 306.388883][ T29] ? watchdog+0x1e1/0xf80 [ 306.393207][ T29] kthread+0x2fa/0x390 [ 306.397265][ T29] ? hungtask_pm_notify+0x90/0x90 [ 306.402301][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.406895][ T29] ret_from_fork+0x48/0x80 [ 306.411387][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.415964][ T29] ret_from_fork_asm+0x11/0x20 [ 306.420730][ T29] [ 306.424055][ T29] Sending NMI from CPU 0 to CPUs 1: [ 306.429350][ C1] NMI backtrace for cpu 1 [ 306.429364][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.102-syzkaller #0 [ 306.429379][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.429389][ C1] RIP: 0010:lock_release+0x0/0x8b0 [ 306.429411][ C1] Code: 03 38 c1 0f 8c 1b fa ff ff 48 89 df e8 e9 51 75 00 e9 0e fa ff ff bb 2f 00 00 00 e9 24 fa ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 306.429424][ C1] RSP: 0018:ffffc900001f0c90 EFLAGS: 00000082 [ 306.429437][ C1] RAX: 3bcfe2db5338ce00 RBX: ffff8880b8f3c440 RCX: 3bcfe2db5338ce00 [ 306.429449][ C1] RDX: 0000000000000000 RSI: ffffffff815c0fb5 RDI: ffff8880b8f3c458 [ 306.429460][ C1] RBP: ffff88802f651e00 R08: ffffffff8e4a882f R09: 1ffffffff1c95105 [ 306.429471][ C1] R10: dffffc0000000000 R11: fffffbfff1c95106 R12: ffff8880b8f3c440 [ 306.429482][ C1] R13: dffffc0000000000 R14: 1ffff110171e7a33 R15: dffffc0000000000 [ 306.429494][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 306.429507][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.429517][ C1] CR2: 00007f940db84198 CR3: 000000002149a000 CR4: 00000000003506e0 [ 306.429531][ C1] Call Trace: [ 306.429542][ C1] [ 306.429548][ C1] _raw_spin_unlock+0x16/0x40 [ 306.429570][ C1] try_to_wake_up+0x6e5/0x1140 [ 306.429596][ C1] hrtimer_wakeup+0x4e/0x60 [ 306.429612][ C1] __hrtimer_run_queues+0x51e/0xc40 [ 306.429631][ C1] ? __remove_hrtimer+0x470/0x470 [ 306.429651][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 306.429665][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 306.429686][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 306.429714][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 306.429734][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 306.429754][ C1] [ 306.429758][ C1] [ 306.429763][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 306.429785][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 306.429804][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d e3 e6 3a 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 306.429816][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 306.429828][ C1] RAX: 3bcfe2db5338ce00 RBX: ffffffff8161914b RCX: 3bcfe2db5338ce00 [ 306.429839][ C1] RDX: 0000000000000001 RSI: ffffffff8aaab9c0 RDI: ffffffff8afc66c0 [ 306.429850][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36d4b R09: 1ffff110171e6da9 [ 306.429861][ C1] R10: dffffc0000000000 R11: ffffed10171e6daa R12: ffffffff8e4a8828 [ 306.429872][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037cb780 [ 306.429884][ C1] ? do_idle+0x1eb/0x510 [ 306.429904][ C1] default_idle+0x13/0x20 [ 306.429923][ C1] default_idle_call+0x6c/0xa0 [ 306.429942][ C1] do_idle+0x1eb/0x510 [ 306.429957][ C1] ? lock_chain_count+0x20/0x20 [ 306.429974][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 306.429989][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 306.430009][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 306.430028][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 306.430048][ C1] ? _raw_spin_unlock+0x40/0x40 [ 306.430071][ C1] cpu_startup_entry+0x43/0x60 [ 306.430087][ C1] start_secondary+0xee/0xf0 [ 306.430101][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 306.430128][ C1] [ 306.441334][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 306.441347][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted 6.6.102-syzkaller #0 [ 306.441363][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 306.441373][ T29] Call Trace: [ 306.441380][ T29] [ 306.441386][ T29] dump_stack_lvl+0x16c/0x230 [ 306.441412][ T29] ? show_regs_print_info+0x20/0x20 [ 306.441430][ T29] ? load_image+0x3b0/0x3b0 [ 306.441461][ T29] panic+0x2c0/0x710 [ 306.441481][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 306.441502][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 306.441522][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 306.441543][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 306.441567][ T29] watchdog+0xf80/0xf80 [ 306.441587][ T29] ? watchdog+0x1e1/0xf80 [ 306.441611][ T29] kthread+0x2fa/0x390 [ 306.441630][ T29] ? hungtask_pm_notify+0x90/0x90 [ 306.441649][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.441663][ T29] ret_from_fork+0x48/0x80 [ 306.441679][ T29] ? kthread_blkcg+0xd0/0xd0 [ 306.441695][ T29] ret_from_fork_asm+0x11/0x20 [ 306.441725][ T29] [ 306.444192][ T29] Kernel Offset: disabled [ 306.870927][ T29] Rebooting in 86400 seconds..