last executing test programs: 7m18.668794418s ago: executing program 1 (id=1014): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x20, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7m18.430997931s ago: executing program 1 (id=1018): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xec, &(0x7f0000000000), &(0x7f0000000080)=0x4) 7m18.204696384s ago: executing program 1 (id=1023): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x541b, &(0x7f0000000100)) 7m17.918938859s ago: executing program 1 (id=1027): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 7m17.436102885s ago: executing program 1 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fefd, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f0000000580)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0xff7, &(0x7f0000002e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m17.004176702s ago: executing program 1 (id=1038): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000540)={0x0, 0x31384142}) 7m16.612321537s ago: executing program 32 (id=1038): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000540)={0x0, 0x31384142}) 4m38.732382863s ago: executing program 5 (id=3079): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 4m38.380006218s ago: executing program 5 (id=3084): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4004556e, &(0x7f0000000dc0)='syz1\x00') 4m38.130434472s ago: executing program 5 (id=3089): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) shmget$private(0x0, 0x10000, 0x800, &(0x7f0000ff0000/0x10000)=nil) 4m37.834146426s ago: executing program 5 (id=3095): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x847, &(0x7f0000000140)=ANY=[], 0xe0, 0xc33, &(0x7f0000000340)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwRFLqwBRJkFQjG2nBdNNFFwGKoousCLRGgRQNjKYIumRaF0g2XhRZdUW0sBEUXbBFgKwCFvfOGXFIkTYjihIlPY9N/WbunHPvOfeM75UFnXsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIj4vdcunjqdHnYrAIAH6fLoV0+dcf8HgCfKVf//DwAAAAAAAAAAAAAAB12KIp6OFHOX19J49b6jfqndf+v22PDI9tUOp6pmX1W+/KmfPnP23JdeGjrfzUvtmY+of799Nt4YvXqx8erszbn5qYWFqcnG2Ex7YnZyatd72Gv9rU5UJ6Bx881bk9evLzTOvHh208e3Bz8ceOrY4IWh508+1y07NjwyMrpRpN5bvnbPDenYaYbHoSjiZKR44Xs/Ta2IKGLv56L+YMd+q8NVJ05UnRgbHqk6Mt1uzSyWH17pnogiotFTqdk9R9uPRdT6H2gfdtaMWCqbXzb4RNm90bnWfOva9FTjSmt+sb3Ynp25kjqtLfvTiCLOp4jliFgduHt3/VFELVJ85+hauhYRfd3z8MVqYvDO7Sj2sY+7ULaz0R+xXDwCY3aADUQRr0eKn713PCbydaa61nwh4vUyfxDxTpmvRKTyi3Eu4oNtvkc8mmpRxJ+X439hLU1W14PudeXS1xpfmbk+21O2e135Je8Pd10pHtL94fCWfDAO+LWpHkW0qiv+Wrr33+wAAAAAAAAAAAAAAAAAcL8djiI+Eyle+7c/quYVRzUv/eiFod8f/P99PeWe/Zj9pIh4MSKWit3NyT2UJwZeSVdSeshziZ9k9Sjij/P8v2897MYAAAAAAAAAAAAAAAAAAAA80Yr4SaR4+f3jaTl61xRvz9xoXG1dm+6sCttd+7e7Zvr6+vp6I3WymXM851LO5ZwrOVdzRpHr52zmHM+5lHM550rO1ZzRl+vnbOYcz7mUcznnSs7VnFHL9XM2c47nXMq5nHMl52rOOCBr9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE6KKOIXkeLb31hLkSKiGTEenVwZeNitAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKA6mI70eKxh8072yrRUSq/u04Xv5yLpqHyvxkNIfKfCWaF3O2qqw1v/UQ2s/e9KcifhwpBurv3hnwPP79nXd3vgbxzjc33n221sm+7oeDHw48dezohaGRX3t2p9dpuwacuNSeuXW7MTY8MjLas7mWj/7Jnm2D+bjF/ek6EbHw1ttvtqanp+bv/UX5FdhD9UfoRao9hj2tH4xmHMgXUTsQzXg4fecJUN7/P4gUv/3+v3dv+J37fz3+X+fdnTt8/PxPNu7/L2/d0S7v/7Wt9fL9v7ynb3f/f7pn28v5dyP9tYj64s25/mMR9YW33j7Zvtm6MXVjaubcqVNfHhr68tlT/Yci6tfb01M9r+7L6QIAAAAAAAAAAAAAAAB4cFIRvxspWj9eS42IuF3N1xq8MPT8yef6oq+ab7Vp3vYbo1cvNl6dvTk3P7WwMDXZGJtpT8xOTu32cPVqutfY8Mi+dOZjHd7n9h+uvzo799Z8+8YfLm77+ZH6xWsLi/Otie0/jsNRRDR7t5yoGjw2PFI1errdmqmqXtl2Mv0vrz8V8R+RYuJcI30+b8vz/7fO8N80/39p6472af7/J3q2lcdMqYifR4rf+otn4/NVO4/EXecsl/ubSHHi/OdyuThUluu2ofNcgc7MwLLs/0SKf/jF5rLd+ZBPb5Q9vesT+4gox/9opPj+n303fj1v2/z8h+3H/8jWHe3T+D/Ts+3IpucV7Lnr5PE/GSleefrd+I287aOe/9F99sbxXPjO8zn2afw/1bNtMB/3N+9P1wEAAAAAAAAAAB5p/amIv40UPxyppZfytt38/b/JrTvap7//9emebZP3Z72ij32x55MKAAAAAAdEfyriJ5HixuK7d+ZQb57/3TP/83c25n8Opy2fVn/O9yvVcwPu55//9RrMxx3fe7cBAAAAAAAAAAAAAAAAAADgQEmpiJfyeurj1Xz+yR3XU1+JFK/91wu5XDpWluuuAz9Y/Vq/PDtz8uL09OxEa7F1bXqqMTrXmpgq6z4TKdb++nO5blGtr95db76zxvvGWuzzkWLk77plO2uxd9cmf2aj7Omy7CcixX/+/eay3XWsP7VR9kxZ9q8ixdf/afuyxzbKni3LfjdS/OjrjW7ZI2XZ7vNRP71R9sWJ2WIfRgUAAAAAAAAAAAAAAAAAAIAnTX8q4k8jxX/fXL4zlz+v/9/f87byzjd71vvf4na1zv9gtf7/Tq/vZf3/6rkCSzsdFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHk8ping7UsxdXksrA+X7jvql9syt22PDI9tXO5yqmn1V+fKnfvrM2XNfemnofDc/uv799pl4Y/Tqxcarszfn5qcWFqYmG2Mz7YnZyald72Gv9bc6UZ2Axs03b01ev77QOPPi2U0f3x78cOCpY4MXhp4/+Vy37NjwyMhoT5la/z0f/S5ph+2Hooi/jBQvfO+n6YcDEUXs/Vx8zHdnvx2uOnGi6sTY8EjVkel2a2ax/PBK90QUEY2eSs3uOXoAY7EnzYilsvllg0+U3Ruda823rk1PNa605hfbi+3ZmSup09qyP40o4nyKWI6I1YG7d9cfRbwZKb5zdC3980BEX/c8fPHy6FdPndm5HcU+9nEXynY2+iOWi0dgzA6wgSjiHyPFz947Hv8yEFGLzk98IeL1Mn8Q8U50xjuVX4xzER9s8z3i0VSLIv63HP8La+m9gfJ60L2uXPpa4ysz12d7ynavK4/8/eFBOuDXpnoU8aPqir+W/tV/1wAAAAAAAAAAAAAAAAAHSBG/Gilefv94quYH35lT3J650bjaujbdmdbXnfvXnTO9vr6+3kidbOYcz7mUcznnSs7VnFHk+jmbZdbX18fz+6WcyzlXcq7mjL5cP2cz53jOpZzLOVdyruaMWq6fs5lzPOdSzuWcKzlXc8YBmbsHAAAAAAAAAAAAAAAAAAA8XorqnxTf/sZaWh/orC89Hp1csR7oY+//AgAA///j0/g8") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 4m37.337909263s ago: executing program 5 (id=3104): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') preadv(r0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000080)=""/63, 0x3f}], 0x2, 0x0, 0x0) 4m36.652074703s ago: executing program 5 (id=3113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) 4m36.255827799s ago: executing program 33 (id=3113): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x31, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0xfa665a81a6d02b4d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) 4m11.999374843s ago: executing program 0 (id=3365): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3594], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x3a, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d5003aff010000001400000500243209880bd320d98a61a90021e9bf", 0x0, 0x401, 0x44000000, 0xfffffffffffffe85, 0xa6, &(0x7f00000011c0)="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", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd, 0x2}, 0x25) 4m11.752830867s ago: executing program 0 (id=3369): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x4, 0x12b, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x0) 4m11.428041822s ago: executing program 0 (id=3374): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x400443c8, 0x20000002) 4m11.123844226s ago: executing program 0 (id=3379): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f00000004c0)={[{@codepage={'codepage', 0x3d, 'cp775'}}, {@umask={'umask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}]}, 0x4, 0x33e, &(0x7f0000000540)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 4m10.727905782s ago: executing program 0 (id=3385): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2f, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xdb, 0x4, 0x0, 0xfffff7fc, 0x4, 0x0, 0x9, 0x47, [0xfffffffc, 0x80]}}) 4m10.188130579s ago: executing program 0 (id=3393): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x200001d0) 4m9.731356036s ago: executing program 34 (id=3393): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0) write$FUSE_DIRENT(r0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x200001d0) 2m29.342764374s ago: executing program 6 (id=4643): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) 2m29.145357057s ago: executing program 6 (id=4646): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x0, 0x720d, 0x148, 0xd0, 0x148, 0x178, 0x240, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x0, 0x0, 0x0, 0x7], 0x2}, {0xffffffffffffffff, [0x5, 0xb2cc575b459b5b35, 0x4, 0x2, 0x0, 0x6]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x3, 0x7}, {0x1, 0x0, 0x2}, {0x1, 0xff, 0x3}, 0x2, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 2m29.000097629s ago: executing program 6 (id=4647): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xe8, &(0x7f0000010140), &(0x7f00000001c0)=0x4) 2m28.669755734s ago: executing program 6 (id=4653): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) tee(r0, r1, 0x2000, 0x0) 2m28.442531167s ago: executing program 6 (id=4658): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0xfd, 0x200, &(0x7f00000002c0)="$eJzskr9rFEEUx7+zO3fuaUIOORBFEDVoLJLbbDT+KBRsDCoIohADgsfdJS5u/JE90DsOXKsUNoIiJIiFIElhIf4DLqiN2CgEuxBJnSKFjSSsvNm3mwnY28ynuO/NvLfvve/M3A4fhDsAbK5360AZhEQF338JSAAHhNpCw07VYb3MWuT4BSvVmPUP6+bJzvgEIPxDy6NWvKdxUJTRU/n9dQV19N3E6deX3v24WnixtHvt7UfKv3i9/QHiaKPvzav3z87P9ary4saEXseO9887VAjA843x5RW5165ktfxoiVoXkPFyEsKddwAMfR6cO+v2PrW4Ztju3KkFQXMmPPfEwppq9XO9W6c/twAkBPsbA6DnkP1FzqG9fRK4BsBGkudIbFFtTd+vhu3OoD9dm2pONe963sioe9x1T3jVST9ouvQLcDf1OZ8gSI8BoGsq0QhCxXdRbINzdmI7VIfmivK496XE45fQrRe1qxs4jHRb65fZylQgZluOmgPKKlk+Ajrah5HQdvtVFQllbAwCNi+GpTZf2stRgaFP94LGLMgbf7YAmdcYXkUhX3j6YuRU5hCzrP3YujFigXWVNXvR2UuVqoLF73kgAop4VGu1kiR5jMUeXPmWRmhvxivm/8qRfmDUtWxvN3fG/setGAwGg8FgMBgMBsN/4m8AAAD//4Hjlpw=") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m27.327993323s ago: executing program 6 (id=4672): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0x0, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x5, 0xfc, 0x18, 0x0, 0x1, 0x0, 0x9}}, {0x4}}]}]}, 0x68}}, 0x0) 2m12.256286656s ago: executing program 35 (id=4672): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, {0x0, 0xc}, {}, {0x0, 0xffe0}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x5, 0xfc, 0x18, 0x0, 0x1, 0x0, 0x9}}, {0x4}}]}]}, 0x68}}, 0x0) 1m27.1477845s ago: executing program 8 (id=5518): r0 = syz_open_dev$video4linux(&(0x7f0000000c00), 0xa00000001, 0x101803) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x101, 0x0, 0x1011, 0x7, 0x6, 0x0, 0x2}}) 1m26.919894544s ago: executing program 8 (id=5522): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001540)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x11}]}, 0x18}}, 0x0) 1m26.672153777s ago: executing program 8 (id=5527): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="5bc3bdfa", 0xe0) 1m26.49737311s ago: executing program 8 (id=5530): r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'team0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "fee2fa56da4c0115de5c6e8092a0ca450c728d9d0a9baec6b7f0eaecadc4f2af", "071ef7b36dcae4adae9f1759ace17e2b58206cd0111b7b47532033e76f46d9e6", "36be62652c877cb473543986108be8931a40a30fc0131f17cb3061883a4508c6", "738ce94c7cb97b71fb28d388dfd8910c4c20e8cd7b4e0f082ef36daf1e6a2b35", "fb092ee104b9a15bfbb46727702f83b5a9a5a44a5d3cc73e7d73cd4ab1532ace", "e8a94e62436146d05a2e6598"}}) 1m26.373414302s ago: executing program 8 (id=5532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) 1m26.284279713s ago: executing program 8 (id=5534): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1m11.126758166s ago: executing program 36 (id=5534): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noauto_da_alloc}, {@jqfmt_vfsold}, {@noquota}, {@norecovery}, {}]}, 0x1, 0x4be, &(0x7f0000000540)="$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") quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 1.91467854s ago: executing program 4 (id=6543): r0 = io_uring_setup(0x5575, &(0x7f0000000040)={0x0, 0x2802, 0x100, 0x3, 0x99}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0xf, &(0x7f0000000540)={0x1000, 0x0, 0x0, 0x0, 0x20000000}, 0x20) 1.704251173s ago: executing program 4 (id=6546): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.519660096s ago: executing program 4 (id=6549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x1c, 0x18, 0x611, 0x0, 0x0, {0x2, 0x80, 0x0, 0x0, 0xfc, 0x4, 0x0, 0x9}}, 0x1c}}, 0x0) 1.471874757s ago: executing program 2 (id=6551): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000000150001"], 0x14}}, 0x0) 1.337639709s ago: executing program 7 (id=6553): r0 = syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1000005, &(0x7f0000000e40)=ANY=[], 0x0, 0x1df, &(0x7f0000000ac0)="$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") getdents64(r0, &(0x7f0000000640)=""/231, 0xe7) 1.28022757s ago: executing program 2 (id=6555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x10}]}}}]}, 0x40}}, 0x0) 1.210506991s ago: executing program 4 (id=6556): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000140)={0x4, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00905, 0xbeb, '\x00', @string=0x0}}) 1.180377332s ago: executing program 3 (id=6557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010f00010900030073797a32000000000c00024000000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.067102103s ago: executing program 9 (id=6558): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ee000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x18c800) 1.012714744s ago: executing program 2 (id=6559): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xc, 0xc}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}}, 0x0) 941.496805ms ago: executing program 3 (id=6560): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x20, 0xfffffffffffffffc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 930.612225ms ago: executing program 4 (id=6561): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f0000000080)) 876.523056ms ago: executing program 7 (id=6562): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 840.852337ms ago: executing program 9 (id=6563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "e46dcdd8978c019900021c3f708772f727"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 731.319248ms ago: executing program 3 (id=6564): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000004e0025000307f4f900230444a8836990b91d9587801925000a04f57f08000100", 0x24) 720.866109ms ago: executing program 4 (id=6565): r0 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000d2", @ANYRES16=r0], 0x0) 656.975729ms ago: executing program 2 (id=6566): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, 0x0, &(0x7f00000004c0)) 622.20377ms ago: executing program 7 (id=6567): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}}], 0x1, 0x21) 599.40361ms ago: executing program 9 (id=6568): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, 0x0) 487.763182ms ago: executing program 2 (id=6569): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 475.335272ms ago: executing program 3 (id=6570): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) fcntl$addseals(r0, 0x409, 0x0) 445.098013ms ago: executing program 7 (id=6571): r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1276, 0x0) 375.185154ms ago: executing program 9 (id=6572): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@deltfilter={0x38, 0x2d, 0x1, 0x0, 0x0, {}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x0) 325.237344ms ago: executing program 3 (id=6573): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000080)='setgroups\x00') 215.715066ms ago: executing program 9 (id=6574): r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7, 0x11, r0, 0xa2255000) 201.727026ms ago: executing program 2 (id=6575): r0 = syz_open_dev$vcsa(&(0x7f0000001ec0), 0x6, 0x40) finit_module(r0, 0x0, 0x1) 168.062807ms ago: executing program 7 (id=6576): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000500030004"], 0x48}}, 0x0) 131.892218ms ago: executing program 3 (id=6577): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x8001, 0x3, 0x50323234, 0x4, 0x9, [{0x10, 0x2}, {0x5, 0x9}, {0x3, 0x8}, {0xf5c8, 0x8099}, {0x9a, 0x800}, {0x3ff, 0x2}, {0x409, 0x3}, {0x2, 0xfffffe6f}], 0x5, 0x3, 0x1, 0x2, 0x7}}) 15.786289ms ago: executing program 9 (id=6578): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xa, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) 0s ago: executing program 7 (id=6579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x70}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x4, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}, @IFLA_MASTER, @IFLA_EVENT={0x0, 0x2c, 0x5}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 531.730980][ T4774] usb 5-1: config 220 has no interface number 2 [ 531.745206][ T4774] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 531.797625][ T4774] usb 5-1: config 220 interface 0 has no altsetting 0 [ 531.804472][ T4774] usb 5-1: config 220 interface 76 has no altsetting 0 [ 531.853835][ T4774] usb 5-1: config 220 interface 1 has no altsetting 0 [ 531.887390][ T4774] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 531.895527][T16707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5044'. [ 531.940560][ T4774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.959271][ T4774] usb 5-1: Product: syz [ 531.969049][ T4774] usb 5-1: Manufacturer: syz [ 531.990126][ T4774] usb 5-1: SerialNumber: syz [ 532.000412][T16713] loop7: detected capacity change from 0 to 164 [ 532.075304][T16713] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 532.205917][ T26] audit: type=1326 audit(1749663502.775:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.8.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 532.240636][ T4774] usb 5-1: selecting invalid altsetting 0 [ 532.268191][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5049'. [ 532.285632][ T4774] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 532.286281][ T26] audit: type=1326 audit(1749663502.805:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.8.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 532.292052][ T4774] usb 5-1: No valid video chain found. [ 532.416975][ T26] audit: type=1326 audit(1749663502.805:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.8.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 532.434032][ T4774] usb 5-1: selecting invalid altsetting 0 [ 532.496427][ T4774] usbtest: probe of 5-1:220.1 failed with error -22 [ 532.539707][ T26] audit: type=1326 audit(1749663502.805:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16714 comm="syz.8.5048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 532.556758][ T4774] usb 5-1: USB disconnect, device number 28 [ 532.613714][ T26] audit: type=1400 audit(1749663502.885:146): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=16718 comm="syz.2.5050" [ 532.935187][ T5566] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 532.990503][T16743] overlayfs: missing 'lowerdir' [ 533.135046][ T5566] usb 8-1: Using ep0 maxpacket: 32 [ 533.142185][ T5566] usb 8-1: config 0 has an invalid interface number: 16 but max is 0 [ 533.160794][ T5566] usb 8-1: config 0 has no interface number 0 [ 533.188755][ T5566] usb 8-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 533.211253][ T5566] usb 8-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 26159, setting to 1024 [ 533.252577][ T5566] usb 8-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 533.282300][ T5566] usb 8-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 533.323831][ T5566] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.348466][ T5566] usb 8-1: Product: syz [ 533.380568][ T5566] usb 8-1: Manufacturer: syz [ 533.392712][ T5566] usb 8-1: SerialNumber: syz [ 533.420442][ T5566] usb 8-1: config 0 descriptor?? [ 533.437737][T16729] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 533.454696][T16729] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 533.477773][T16756] loop2: detected capacity change from 0 to 256 [ 533.521255][T16756] exfat: Deprecated parameter 'utf8' [ 533.599965][T16756] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d) [ 533.759668][ T4560] usb 8-1: USB disconnect, device number 12 [ 534.080643][T16768] loop2: detected capacity change from 0 to 1024 [ 534.330957][T16776] loop3: detected capacity change from 0 to 764 [ 534.610164][T16780] loop8: detected capacity change from 0 to 1024 [ 534.656040][T16780] EXT4-fs: Ignoring removed oldalloc option [ 534.662073][T16780] EXT4-fs: Ignoring removed orlov option [ 534.802941][T16780] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 535.009440][T16364] EXT4-fs (loop8): unmounting filesystem. [ 535.098089][T16798] netlink: 'syz.7.5087': attribute type 11 has an invalid length. [ 535.156206][T16798] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5087'. [ 535.442000][T16807] netlink: 'syz.2.5093': attribute type 7 has an invalid length. [ 535.479764][T16807] netlink: 'syz.2.5093': attribute type 8 has an invalid length. [ 535.584005][T16811] loop7: detected capacity change from 0 to 4096 [ 536.300065][T16836] loop3: detected capacity change from 0 to 128 [ 536.421854][T16836] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 536.581243][T16844] ieee802154 phy0 wpan0: encryption failed: -22 [ 536.641141][ T4257] sysv_free_block: flc_count > flc_size [ 536.685049][ T4257] sysv_free_block: flc_count > flc_size [ 536.703324][ T4257] sysv_free_block: flc_count > flc_size [ 536.720239][ T4257] sysv_free_block: flc_count > flc_size [ 536.745128][ T4257] sysv_free_block: flc_count > flc_size [ 536.753024][ T4257] sysv_free_block: flc_count > flc_size [ 536.763157][ T4257] sysv_free_block: flc_count > flc_size [ 536.781341][ T4257] sysv_free_block: flc_count > flc_size [ 536.797623][ T4257] sysv_free_block: flc_count > flc_size [ 536.807013][ T4466] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 536.817888][ T4257] sysv_free_block: flc_count > flc_size [ 536.849872][ T4257] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 537.004477][T16855] loop4: detected capacity change from 0 to 1764 [ 537.016369][ T4466] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 537.064674][ T4466] usb 3-1: config 0 interface 0 has no altsetting 0 [ 537.107103][ T4466] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 537.145542][ T4466] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.173257][ T4466] usb 3-1: Product: syz [ 537.180356][ T4466] usb 3-1: Manufacturer: syz [ 537.198148][ T4466] usb 3-1: SerialNumber: syz [ 537.219348][ T4466] usb 3-1: config 0 descriptor?? [ 537.252921][ T4466] usb 3-1: selecting invalid altsetting 0 [ 537.455586][ T4466] usb 3-1: USB disconnect, device number 31 [ 537.521983][ T4498] udevd[4498]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.530677][T16868] loop7: detected capacity change from 0 to 1764 [ 537.668923][T16868] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 537.973431][T16881] loop8: detected capacity change from 0 to 256 [ 538.384883][ T4562] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 538.580741][T16897] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5136'. [ 538.601504][ T4562] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.623044][ T4562] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 538.641334][ T4562] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 538.653535][T16897] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 538.676860][ T4562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.693864][ T4562] usb 4-1: config 0 descriptor?? [ 538.706440][T16901] loop4: detected capacity change from 0 to 1024 [ 538.796706][T16903] loop7: detected capacity change from 0 to 512 [ 538.853867][T16903] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 538.920579][ T40] hfsplus: b-tree write err: -5, ino 4 [ 538.965172][T16903] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2195: inode #15: comm syz.7.5138: corrupted in-inode xattr [ 539.029862][ T26] audit: type=1326 audit(1749663509.596:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16908 comm="syz.8.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 539.035603][T16903] EXT4-fs (loop7): Remounting filesystem read-only [ 539.093522][T16910] loop4: detected capacity change from 0 to 2048 [ 539.112184][ T26] audit: type=1326 audit(1749663509.596:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16908 comm="syz.8.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 539.122599][T16903] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.5138: couldn't read orphan inode 15 (err -117) [ 539.148976][ T4562] Bluetooth: Can't get version to change to load ram patch err [ 539.163667][ T4562] Bluetooth: Loading patch file failed [ 539.184946][ T4562] ath3k: probe of 4-1:0.0 failed with error -71 [ 539.191990][T16914] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 539.200803][ T4562] usb 4-1: USB disconnect, device number 32 [ 539.223925][ T26] audit: type=1326 audit(1749663509.626:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16908 comm="syz.8.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 539.274675][T16903] EXT4-fs (loop7): Remounting filesystem read-only [ 539.281933][T16903] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 539.338552][ T26] audit: type=1326 audit(1749663509.626:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16908 comm="syz.8.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 539.429660][T16914] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 539.431286][ T26] audit: type=1326 audit(1749663509.626:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16908 comm="syz.8.5140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2627f8e929 code=0x7ffc0000 [ 539.518854][T16914] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 539.583344][T16914] Remounting filesystem read-only [ 539.602330][ T4254] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 539.660213][T12754] EXT4-fs (loop7): unmounting filesystem. [ 539.764493][ T4562] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 539.821715][ T26] audit: type=1326 audit(1749663510.386:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16923 comm="syz.7.5147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f58e929 code=0x0 [ 539.843601][ C1] vkms_vblank_simulate: vblank timer overrun [ 540.009564][ T4562] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 540.028327][ T4562] usb 3-1: config 0 has no interface number 0 [ 540.056421][ T4562] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 540.091499][ T4562] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 540.145211][ T4562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.172581][ T4562] usb 3-1: config 0 descriptor?? [ 540.209149][ T4562] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input25 [ 540.410255][T16942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5156'. [ 540.502100][ T4562] usb 3-1: USB disconnect, device number 32 [ 540.964360][ T4559] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 541.154177][ T4300] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 541.164132][ T4559] usb 8-1: Using ep0 maxpacket: 16 [ 541.179763][ T4559] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.203191][ T4559] usb 8-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=36.cd [ 541.220531][ T4559] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.231682][ T4559] usb 8-1: Product: syz [ 541.236227][ T4559] usb 8-1: Manufacturer: syz [ 541.241098][ T4559] usb 8-1: SerialNumber: syz [ 541.271326][ T4559] usb 8-1: config 0 descriptor?? [ 541.311418][ T4559] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 541.328421][ T4559] command write [95] error -22 [ 541.367773][ T4300] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 541.397273][ T4300] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.435108][ T4300] usb 5-1: config 0 descriptor?? [ 541.570260][ T4774] usb 8-1: USB disconnect, device number 13 [ 541.659157][T16977] CIFS: VFS: Malformed UNC in devname [ 541.760302][T16979] loop8: detected capacity change from 0 to 764 [ 541.862838][ T4300] [drm:udl_init] *ERROR* Selecting channel failed [ 541.897730][ T4300] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 541.914007][ T4300] [drm] Initialized udl on minor 2 [ 541.928628][ T4300] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 541.968517][ T4300] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 542.012912][ T4300] usb 5-1: USB disconnect, device number 29 [ 542.321652][T16995] loop7: detected capacity change from 0 to 1024 [ 542.602608][ T40] hfsplus: b-tree write err: -5, ino 4 [ 542.766585][T17009] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5189'. [ 542.857386][T17009] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5189'. [ 542.892234][T17005] loop2: detected capacity change from 0 to 4096 [ 542.899962][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5189'. [ 542.934160][T17005] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 542.964283][T17009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5189'. [ 542.993117][T17005] ntfs3: loop2: mft corrupted [ 542.999448][T17005] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 543.023781][T17005] ntfs3: loop2: Failed to load $MFT. [ 543.502388][T17032] netlink: 'syz.4.5199': attribute type 1 has an invalid length. [ 543.519360][T17033] netlink: 'syz.7.5201': attribute type 1 has an invalid length. [ 543.544394][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5201'. [ 543.732924][T17038] netlink: 'syz.4.5202': attribute type 10 has an invalid length. [ 543.740979][ T4300] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 543.784320][T17038] device bridge0 left promiscuous mode [ 543.956360][ T4300] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 543.986372][ T4300] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.013105][ T4300] usb 9-1: config 0 descriptor?? [ 544.455444][ T4300] [drm:udl_init] *ERROR* Selecting channel failed [ 544.491425][ T4300] [drm] Initialized udl 0.0.1 20120220 for 9-1:0.0 on minor 2 [ 544.517735][T17061] loop7: detected capacity change from 0 to 256 [ 544.540017][ T4300] [drm] Initialized udl on minor 2 [ 544.546680][ T4300] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 544.585503][ T4300] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 544.626354][ T4300] usb 9-1: USB disconnect, device number 2 [ 544.808100][T17070] netlink: 'syz.2.5219': attribute type 10 has an invalid length. [ 544.897914][T17070] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 544.945188][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 545.377164][ T52] block nbd2: Attempted send on invalid socket [ 545.383930][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 545.499636][T17056] loop4: detected capacity change from 0 to 32768 [ 545.722739][T17056] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 545.974522][ T4254] ocfs2: Unmounting device (7,4) on (node local) [ 546.157368][T17107] loop4: detected capacity change from 0 to 256 [ 546.193766][ T4466] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 546.261844][T17107] FAT-fs (loop4): Directory bread(block 64) failed [ 546.273729][T17107] FAT-fs (loop4): Directory bread(block 65) failed [ 546.315503][T17107] FAT-fs (loop4): Directory bread(block 66) failed [ 546.322116][T17107] FAT-fs (loop4): Directory bread(block 67) failed [ 546.385871][ T4466] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 546.420937][T17107] FAT-fs (loop4): Directory bread(block 68) failed [ 546.428677][ T4466] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.445318][T17107] FAT-fs (loop4): Directory bread(block 69) failed [ 546.452009][T17107] FAT-fs (loop4): Directory bread(block 70) failed [ 546.477340][ T4466] usb 9-1: config 0 descriptor?? [ 546.503687][T17107] FAT-fs (loop4): Directory bread(block 71) failed [ 546.545919][T17107] FAT-fs (loop4): Directory bread(block 72) failed [ 546.552616][T17107] FAT-fs (loop4): Directory bread(block 73) failed [ 546.718501][ T4466] [drm] vendor descriptor length:25 data:25 5f 00 00 00 00 00 00 00 00 00 [ 546.743814][ T4466] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 546.774295][ T26] audit: type=1800 audit(1749663517.347:153): pid=17107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5233" name="file1" dev="loop4" ino=1048684 res=0 errno=0 [ 546.934711][ T4466] [drm:udl_init] *ERROR* Selecting channel failed [ 546.973610][ T4466] [drm] Initialized udl 0.0.1 20120220 for 9-1:0.0 on minor 2 [ 546.990277][ T4466] [drm] Initialized udl on minor 2 [ 547.002418][ T4466] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 547.052131][ T4466] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 547.090638][ T4466] usb 9-1: USB disconnect, device number 3 [ 547.280974][T17135] loop3: detected capacity change from 0 to 512 [ 547.299963][T17135] EXT4-fs: Ignoring removed i_version option [ 547.371819][T17135] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 547.408037][T17135] ext4 filesystem being mounted at /1088/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.587796][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 548.072243][T17156] netlink: 'syz.7.5255': attribute type 10 has an invalid length. [ 548.089893][T17156] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.097536][T17156] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.100274][T17133] loop2: detected capacity change from 0 to 32768 [ 548.157360][T17133] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 548.174026][T17156] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.181187][T17156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.190458][T17156] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.197670][T17156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.236049][T17156] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 548.333182][T17160] 9pnet_fd: p9_fd_create_tcp (17160): problem connecting socket to 127.0.0.1 [ 548.684154][T17168] loop7: detected capacity change from 0 to 2048 [ 548.791975][T17176] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 548.877873][T17168] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 548.973488][T17168] Remounting filesystem read-only [ 549.306499][T17187] loop8: detected capacity change from 0 to 4096 [ 549.307603][ T4559] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 549.322063][T17187] ntfs3: loop8: Different NTFS' sector size (4096) and media sector size (512) [ 549.482040][T17187] ntfs3: loop8: failed to convert "c46c" to euc-jp [ 549.503562][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5276'. [ 549.520101][ T4559] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 549.542982][ T4559] usb 5-1: config 0 interface 0 has no altsetting 0 [ 549.548878][T17198] netlink: 33 bytes leftover after parsing attributes in process `syz.7.5276'. [ 549.562664][ T4559] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 549.589111][ T4559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.593273][T17198] netlink: 33 bytes leftover after parsing attributes in process `syz.7.5276'. [ 549.629107][ T4559] usb 5-1: Product: syz [ 549.653504][T17198] netlink: 'syz.7.5276': attribute type 6 has an invalid length. [ 549.655726][ T4559] usb 5-1: Manufacturer: syz [ 549.690781][ T4559] usb 5-1: SerialNumber: syz [ 549.713018][ T4559] usb 5-1: config 0 descriptor?? [ 549.741698][ T4559] usb 5-1: selecting invalid altsetting 0 [ 550.074971][ T4562] usb 5-1: USB disconnect, device number 30 [ 550.252111][T17219] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5288'. [ 551.187833][T17213] loop8: detected capacity change from 0 to 32768 [ 551.296978][T17213] XFS (loop8): Mounting V5 Filesystem [ 551.505410][T17213] XFS (loop8): Ending clean mount [ 551.517114][T17271] xt_l2tp: v2 sid > 0xffff: 262144 [ 551.855805][T17280] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5313'. [ 551.883104][T16364] XFS (loop8): Unmounting Filesystem [ 552.028312][T17286] libceph: resolve '. [ 552.028312][T17286] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 552.028312][T17286] ' (ret=-3): failed [ 552.166125][T17289] netlink: 'syz.2.5318': attribute type 4 has an invalid length. [ 552.382164][ T26] audit: type=1326 audit(1749663522.938:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17294 comm="syz.7.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f58e929 code=0x7ffc0000 [ 552.512226][ T26] audit: type=1326 audit(1749663522.978:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17294 comm="syz.7.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1c1f58e929 code=0x7ffc0000 [ 552.589924][ T26] audit: type=1326 audit(1749663522.978:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17294 comm="syz.7.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f58e929 code=0x7ffc0000 [ 553.073435][T17313] loop7: detected capacity change from 0 to 4096 [ 553.224777][ T4386] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 553.345978][T17313] NILFS (loop7): device size too small [ 553.532601][T17331] device vlan0 entered promiscuous mode [ 553.615926][T17335] loop2: detected capacity change from 0 to 8 [ 553.645511][T17335] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 554.127801][T17354] loop3: detected capacity change from 0 to 256 [ 554.157402][T17354] exfat: Deprecated parameter 'namecase' [ 554.180179][T17354] exfat: Deprecated parameter 'namecase' [ 554.226174][T17354] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5c96c44, utbl_chksum : 0xe619d30d) [ 554.400774][T17359] loop4: detected capacity change from 0 to 512 [ 554.432897][T17363] binder: 17362:17363 ioctl c018620c 200000001180 returned -22 [ 554.614319][T17371] loop2: detected capacity change from 0 to 16 [ 554.634169][T17371] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 554.639951][T17359] EXT4-fs (loop4): 1 orphan inode deleted [ 554.660556][ T4304] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 554.672303][T17371] cramfs: Error -3 while decompressing! [ 554.699566][T17359] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 554.702791][T17371] cramfs: ffffffff96b50428(453)->ffff88803224c000(4096) [ 554.716843][ T4304] EXT4-fs error (device loop4): ext4_release_dquot:6850: comm kworker/u4:5: Failed to release dquot type 1 [ 554.753393][T17359] ext4 filesystem being mounted at /1106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.014332][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 556.431572][T17430] Cannot find del_set index 65534 as target [ 556.635399][T17438] loop3: detected capacity change from 0 to 64 [ 556.698537][T17438] syz.3.5388: attempt to access beyond end of device [ 556.698537][T17438] loop3: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 556.784454][T17438] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 557.068444][T17454] device netdevsim0 entered promiscuous mode [ 557.116156][T17454] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 557.249567][T17458] loop4: detected capacity change from 0 to 2048 [ 557.284274][T17458] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 557.457780][T17470] loop7: detected capacity change from 0 to 64 [ 558.083044][T17488] tmpfs: Bad value for 'mpol' [ 558.338147][T17497] loop8: detected capacity change from 0 to 164 [ 558.421663][T17497] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 558.428234][T17500] loop7: detected capacity change from 0 to 256 [ 558.512582][T17500] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 559.086172][T17515] ptrace attach of "./syz-executor exec"[16364] was attempted by ""[17515] [ 559.380883][T17530] loop7: detected capacity change from 0 to 64 [ 559.588270][T17532] usb usb8: usbfs: process 17532 (syz.8.5434) did not claim interface 0 before use [ 559.795720][T17541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5438'. [ 559.869351][T17546] netlink: 'syz.8.5441': attribute type 2 has an invalid length. [ 560.412828][ T4300] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 560.461721][T17567] loop4: detected capacity change from 0 to 256 [ 560.484478][T17569] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5452'. [ 560.622884][ T4300] usb 9-1: Using ep0 maxpacket: 32 [ 560.630371][ T4300] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 560.675804][ T4300] usb 9-1: config 0 has no interface number 0 [ 560.682050][ T4300] usb 9-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 560.737426][ T4300] usb 9-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 560.773731][ T26] audit: type=1326 audit(1749663531.347:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 560.787833][ T4300] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 560.824056][ T26] audit: type=1326 audit(1749663531.347:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 560.842752][ T4300] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.874841][ T4300] usb 9-1: Product: syz [ 560.879070][ T4300] usb 9-1: Manufacturer: syz [ 560.942776][ T4300] usb 9-1: SerialNumber: syz [ 560.950725][ T26] audit: type=1326 audit(1749663531.347:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 560.959798][ T4300] usb 9-1: config 0 descriptor?? [ 560.973275][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.050004][ T26] audit: type=1326 audit(1749663531.347:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 561.060666][ T4300] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 561.072382][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.080043][T17583] loop2: detected capacity change from 0 to 1024 [ 561.111608][T17583] EXT4-fs: Ignoring removed orlov option [ 561.147077][ T26] audit: type=1326 audit(1749663531.347:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17574 comm="syz.2.5455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 561.169534][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.239126][ T4300] usb 9-1: qt2_setup_urbs - submit read urb failed -90 [ 561.249227][T17583] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 561.251659][ T4300] quatech2: probe of 9-1:0.51 failed with error -90 [ 561.376277][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 561.515175][ T4300] usb 9-1: USB disconnect, device number 4 [ 561.726483][T17607] loop7: detected capacity change from 0 to 2048 [ 561.801273][T17607] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 561.865188][T17607] syz.7.5469: attempt to access beyond end of device [ 561.865188][T17607] loop7: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 561.880933][T17614] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 561.996989][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.005125][T17609] loop2: detected capacity change from 0 to 4096 [ 562.027243][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.051784][T17609] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 562.132599][T17607] Remounting filesystem read-only [ 562.139230][T17609] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 562.173457][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.204382][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.260320][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.297973][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.329660][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.351977][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.414766][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.481957][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.505681][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.512038][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.542140][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.567300][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.589681][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.633381][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.706896][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.752888][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.794710][T17639] Invalid ELF header magic: != ELF [ 562.806812][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.853548][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.890536][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 562.894361][T17643] netlink: 'syz.2.5486': attribute type 29 has an invalid length. [ 562.940898][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 562.981258][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 563.022583][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 563.093012][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 563.121967][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 563.159550][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 563.232401][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 563.259938][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 563.301164][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 563.321422][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 563.340029][T17655] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 563.352518][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 563.373737][T17607] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 563.391665][T17607] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 563.412305][ T26] audit: type=1800 audit(1749663533.977:162): pid=17607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.5469" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 563.490684][T17607] syz.7.5469 (17607) used greatest stack depth: 18240 bytes left [ 563.528841][T17659] loop2: detected capacity change from 0 to 1024 [ 563.590858][T17659] EXT4-fs: Ignoring removed oldalloc option [ 563.630210][T17659] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 563.749157][T17659] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 563.814768][T17659] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 563.880496][T17659] fscrypt (loop2, inode 15): Error -61 getting encryption context [ 564.004253][T17678] loop8: detected capacity change from 0 to 512 [ 564.062148][T17678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 564.074484][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 564.163027][T17678] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 564.207405][T17678] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 564.401087][T17689] loop2: detected capacity change from 0 to 1024 [ 564.408987][T16364] EXT4-fs (loop8): unmounting filesystem. [ 564.746552][ T75] hfsplus: b-tree write err: -5, ino 4 [ 564.858797][T17705] No such timeout policy "syz1" [ 565.124607][T17712] loop4: detected capacity change from 0 to 8 [ 565.250313][T17712] SQUASHFS error: Failed to read block 0x1ea: -5 [ 565.272862][T17712] SQUASHFS error: Unable to read metadata cache entry [1e8] [ 565.732901][ T4559] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 565.842933][ T4300] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 565.908714][T17745] loop8: detected capacity change from 0 to 512 [ 565.933579][T17745] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 565.953037][ T4559] usb 4-1: Using ep0 maxpacket: 16 [ 565.967928][ T4559] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 566.001784][ T4559] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 566.020292][ T4559] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.028986][ T4559] usb 4-1: Product: syz [ 566.034479][ T4559] usb 4-1: Manufacturer: syz [ 566.039315][ T4559] usb 4-1: SerialNumber: syz [ 566.048208][ T4559] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 566.056939][ T4300] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 566.068402][ T4300] usb 8-1: config 0 has no interface number 0 [ 566.074872][ T4300] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 566.087846][T17745] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 566.097857][T17745] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.111215][ T4300] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 566.125631][ T4300] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.144313][ T4300] usb 8-1: Product: syz [ 566.148576][ T4300] usb 8-1: Manufacturer: syz [ 566.157381][ T4300] usb 8-1: SerialNumber: syz [ 566.164397][ T4300] usb 8-1: config 0 descriptor?? [ 566.190571][ T4300] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 566.258100][ T4300] usb 4-1: USB disconnect, device number 33 [ 566.383463][ C0] yurex 8-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 566.420745][T17757] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.607733][ T4300] usb 8-1: USB disconnect, device number 14 [ 566.622179][ T4300] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 567.405075][T17793] loop3: detected capacity change from 0 to 64 [ 567.692161][T17798] xt_connbytes: Forcing CT accounting to be enabled [ 567.726889][T17798] xt_NFQUEUE: number of total queues is 0 [ 568.160907][T17812] device netdevsim0 left promiscuous mode [ 568.193143][T17812] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 568.226331][T17815] loop7: detected capacity change from 0 to 512 [ 568.273949][T17815] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 568.291366][T17815] ext4 filesystem being mounted at /419/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 568.367165][T17815] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 568.373665][T17820] loop3: detected capacity change from 0 to 4096 [ 568.386438][T17820] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 568.434482][T17815] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 568.444398][T17815] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.5567: Failed to acquire dquot type 0 [ 568.508561][T17820] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 568.516962][T17820] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 568.553039][T17820] ntfs3: loop3: ntfs_set_state r=3 failed, -22. [ 568.649538][T12754] EXT4-fs (loop7): unmounting filesystem. [ 568.708402][ T40] ntfs3: loop3: ntfs3_write_inode r=3 failed, -22. [ 568.715916][ T4257] ntfs3: loop3: ntfs_evict_inode r=3 failed, -22. [ 569.377455][T17844] device bridge3 entered promiscuous mode [ 569.639466][T17854] device netdevsim0 left promiscuous mode [ 569.655349][T17854] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 569.794192][T17858] loop2: detected capacity change from 0 to 512 [ 569.801348][T17858] EXT4-fs: Ignoring removed i_version option [ 569.874112][T17858] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 569.889492][T17858] ext4 filesystem being mounted at /1248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.923245][T17866] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.932298][T17866] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.941416][T17866] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 569.951030][T17866] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.110324][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 570.348480][T17880] loop7: detected capacity change from 0 to 512 [ 570.380327][T17880] EXT4-fs: Ignoring removed bh option [ 570.433566][T17880] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 570.505109][T17880] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 570.623687][T17880] EXT4-fs (loop7): 1 truncate cleaned up [ 570.629418][T17880] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 570.665281][T17889] loop2: detected capacity change from 0 to 256 [ 570.688038][T17889] exfat: Deprecated parameter 'utf8' [ 570.694046][T17889] exfat: Deprecated parameter 'utf8' [ 570.724710][T17892] loop3: detected capacity change from 0 to 1764 [ 570.736324][T12754] EXT4-fs (loop7): unmounting filesystem. [ 570.801208][T17889] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 570.854693][T17892] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 571.057162][T17894] loop7: detected capacity change from 0 to 4096 [ 571.107773][T17900] netlink: 'syz.3.5607': attribute type 4 has an invalid length. [ 571.122826][T17900] netlink: 'syz.3.5607': attribute type 3 has an invalid length. [ 571.144580][T17900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5607'. [ 571.146057][T17894] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 571.190052][T17894] ntfs3: loop7: Failed to load $Extend. [ 571.853049][ T4558] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 572.042808][ T4558] usb 5-1: Using ep0 maxpacket: 8 [ 572.059117][ T4558] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 572.078662][ T4558] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.099464][ T4558] usb 5-1: Product: syz [ 572.104049][ T4558] usb 5-1: Manufacturer: syz [ 572.113678][ T4558] usb 5-1: SerialNumber: syz [ 572.133770][ T4558] usb 5-1: config 0 descriptor?? [ 572.143773][ T4558] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 572.559828][ T4558] radio-usb-si4713: probe of 5-1:0.0 failed with error -71 [ 572.588091][ T4558] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 572.622074][ T4558] usb 5-1: USB disconnect, device number 31 [ 572.784226][T17926] loop2: detected capacity change from 0 to 32768 [ 572.806809][T17926] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.5619 (17926) [ 572.834751][T17926] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 572.872983][T17926] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 572.892201][T17926] BTRFS info (device loop2): disabling tree log [ 572.923219][T17926] BTRFS info (device loop2): enabling auto defrag [ 572.934134][T17926] BTRFS info (device loop2): max_inline at 0 [ 572.944750][T17926] BTRFS info (device loop2): using free space tree [ 573.208505][T17926] BTRFS info (device loop2): enabling ssd optimizations [ 573.246183][T17926] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 573.407561][T17977] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5634'. [ 573.920721][T17959] loop7: detected capacity change from 0 to 32768 [ 574.011462][T17959] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 574.184381][T12754] ocfs2: Unmounting device (7,7) on (node local) [ 574.517860][T17981] loop4: detected capacity change from 0 to 32768 [ 574.633781][T18005] loop3: detected capacity change from 0 to 64 [ 574.746194][T17981] XFS (loop4): Mounting V5 Filesystem [ 574.878240][T17981] XFS (loop4): Ending clean mount [ 575.163609][ T4254] XFS (loop4): Unmounting Filesystem [ 575.584367][T18036] ipt_CLUSTERIP: bad local_nodes[1] 0 [ 575.638024][T18040] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5659'. [ 575.664848][T18040] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5659'. [ 576.051406][T18050] loop4: detected capacity change from 0 to 4096 [ 576.112922][ T4559] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 576.142536][T18055] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 576.189838][T18053] loop3: detected capacity change from 0 to 4096 [ 576.269384][T18053] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 576.313576][T18053] ntfs3: loop3: Failed to load $Extend. [ 576.323047][ T4559] usb 3-1: Using ep0 maxpacket: 16 [ 576.357180][ T4559] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 576.398489][ T4559] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 576.418269][ T4559] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.472925][ T4559] usb 3-1: Product: syz [ 576.481394][ T4559] usb 3-1: Manufacturer: syz [ 576.501420][ T4559] usb 3-1: SerialNumber: syz [ 576.547011][ T4559] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 576.678129][T18066] loop4: detected capacity change from 0 to 256 [ 576.753793][T18066] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 576.793760][ T4300] usb 3-1: USB disconnect, device number 33 [ 577.347463][T18080] loop7: detected capacity change from 0 to 8192 [ 577.370642][T18080] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 577.392528][T18080] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 577.403476][T18080] REISERFS (device loop7): using ordered data mode [ 577.410037][T18080] reiserfs: using flush barriers [ 577.431694][T18080] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 577.453928][T18080] REISERFS (device loop7): checking transaction log (loop7) [ 577.476407][T18080] REISERFS (device loop7): Using r5 hash to sort names [ 577.503327][T18080] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 577.565302][T18080] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 577.708648][T18080] REISERFS warning (device loop7): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 578.818581][T18119] ip6t_REJECT: ECHOREPLY is not supported [ 578.835624][T18093] loop2: detected capacity change from 0 to 32768 [ 578.897364][T18093] read_mapping_page failed! [ 578.910877][T18123] loop4: detected capacity change from 0 to 512 [ 578.943713][T18123] EXT4-fs: Ignoring removed mblk_io_submit option [ 579.035725][T18123] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 579.105156][T18123] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.5698: attempt to clear invalid blocks 2 len 1 [ 579.125986][T18131] netlink: 'syz.7.5703': attribute type 27 has an invalid length. [ 579.173453][T18123] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 579.198482][T18123] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5698: invalid indirect mapped block 1819239214 (level 0) [ 579.227240][T18123] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5698: invalid indirect mapped block 1819239214 (level 1) [ 579.255528][T18123] EXT4-fs (loop4): 1 truncate cleaned up [ 579.261259][T18123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 579.351770][T18123] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 579.368223][T18135] ufs: Invalid option: "Ûàßä0…(áeêªLüêd9(@ ûŸÀ8ìL´)uH\dKzLVÚÁR<%ï5rÆŒËze ~I2~ [ 579.368223][T18135] r0Rpyëhå:ã‰ÝèÖY³‡ [ 579.368223][T18135] òO©÷‰\›z«Y" or missing value [ 579.457896][T18135] ufs: wrong mount options [ 579.489961][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 579.689011][T18138] loop2: detected capacity change from 0 to 4096 [ 579.783331][T18138] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 579.820393][T18147] loop4: detected capacity change from 0 to 16 [ 579.865884][T18147] erofs: (device loop4): mounted with root inode @ nid 36. [ 579.889023][T18138] ntfs3: loop2: Failed to load $Extend. [ 580.024817][T18151] overlayfs: missing 'lowerdir' [ 580.270580][ T26] audit: type=1326 audit(1749663550.837:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.3.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3401b8e929 code=0x7ffc0000 [ 580.327023][T18157] loop2: detected capacity change from 0 to 2048 [ 580.336932][ T26] audit: type=1326 audit(1749663550.837:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.3.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f3401b8e929 code=0x7ffc0000 [ 580.372397][T18157] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 580.453396][ T26] audit: type=1326 audit(1749663550.837:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.3.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3401b8e929 code=0x7ffc0000 [ 580.490302][T18162] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 580.490571][T18157] syz.2.5714: attempt to access beyond end of device [ 580.490571][T18157] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 580.543466][ T26] audit: type=1326 audit(1749663550.837:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18155 comm="syz.3.5716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3401b8e929 code=0x7ffc0000 [ 580.715220][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 580.783474][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 580.822876][T18157] Remounting filesystem read-only [ 580.838941][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 580.859869][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 580.902873][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 580.953361][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 580.979966][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.021239][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.059905][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.073022][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.142575][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.202143][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.256357][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.306051][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.352010][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.373552][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.418848][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.451777][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.503095][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.522867][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.572395][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.613021][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.643580][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.669801][T18170] loop7: detected capacity change from 0 to 32768 [ 581.676504][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.707228][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.732347][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.747663][ T4269] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 581.760630][ T4269] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 581.770754][ T4269] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 581.779833][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.790862][T18170] [ 581.790862][T18170] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 581.790862][T18170] [ 581.802967][ T4269] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 581.810754][ T4269] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 581.818523][ T4269] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 581.863018][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.880718][T18185] vxcan1 speed is unknown, defaulting to 1000 [ 581.899117][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 581.936093][T18170] [ 581.936093][T18170] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 581.936093][T18170] [ 581.951073][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 581.970732][T18157] NILFS (loop2): bad btree node (ino=16, blocknr=15): level = 93, flags = 0x6, nchildren = 9 [ 582.032455][T18170] [ 582.032455][T18170] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 582.032455][T18170] [ 582.036566][T18157] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 582.063122][ T26] audit: type=1800 audit(1749663552.637:167): pid=18157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5714" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 582.090687][ T106] [ 582.090687][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 582.090687][ T106] [ 582.223610][ T4304] [ 582.223610][ T4304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 582.223610][ T4304] [ 582.284698][ T4304] [ 582.284698][ T4304] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 582.284698][ T4304] [ 582.334951][ T107] [ 582.334951][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 582.334951][ T107] [ 582.367957][T12754] [ 582.367957][T12754] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 582.367957][T12754] [ 582.389224][T12754] [ 582.389224][T12754] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 582.389224][T12754] [ 582.636462][T18182] loop4: detected capacity change from 0 to 32768 [ 582.665690][T18182] XFS: ikeep mount option is deprecated. [ 582.717110][T18185] chnl_net:caif_netlink_parms(): no params data found [ 582.807190][T18182] XFS (loop4): Mounting V5 Filesystem [ 582.905389][T18182] XFS (loop4): Ending clean mount [ 582.990126][T18182] XFS (loop4): Quotacheck needed: Please wait. [ 583.016217][T18210] loop2: detected capacity change from 0 to 1024 [ 583.154936][T18182] XFS (loop4): Quotacheck: Done. [ 583.264739][T18217] loop7: detected capacity change from 0 to 16 [ 583.294163][T18185] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.301318][T18185] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.329344][T18217] erofs: (device loop7): mounted with root inode @ nid 36. [ 583.341142][T18185] device bridge_slave_0 entered promiscuous mode [ 583.358319][T18185] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.395490][ T4254] XFS (loop4): Unmounting Filesystem [ 583.442957][T18185] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.451762][T18185] device bridge_slave_1 entered promiscuous mode [ 583.744421][T18185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.773279][T18185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.863016][ T4255] Bluetooth: hci6: command 0x0409 tx timeout [ 583.946745][T18185] team0: Port device team_slave_0 added [ 583.992015][T18185] team0: Port device team_slave_1 added [ 584.098120][T18185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.113302][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.190679][T18185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.229967][T18185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.272319][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.382366][T18185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.517767][T18185] device hsr_slave_0 entered promiscuous mode [ 584.545587][T18185] device hsr_slave_1 entered promiscuous mode [ 584.578605][T18185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.598293][T18185] Cannot create hsr debugfs directory [ 584.691234][T18246] loop3: detected capacity change from 0 to 256 [ 584.772265][T18246] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 584.803715][T18246] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 584.957680][T18231] loop4: detected capacity change from 0 to 32768 [ 585.096704][T18231] XFS (loop4): Mounting V5 Filesystem [ 585.283541][T18231] XFS (loop4): Ending clean mount [ 585.333783][T18231] XFS (loop4): Quotacheck needed: Please wait. [ 585.408244][T18231] XFS (loop4): Quotacheck: Done. [ 585.470804][T18242] loop7: detected capacity change from 0 to 32768 [ 585.526389][T18265] loop3: detected capacity change from 0 to 16 [ 585.567008][T18265] erofs: (device loop3): mounted with root inode @ nid 36. [ 585.588097][T18185] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 585.616159][ T4254] XFS (loop4): Unmounting Filesystem [ 585.646703][T18185] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 585.693840][T18185] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 585.753811][T18185] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 585.953060][ T4255] Bluetooth: hci6: command 0x041b tx timeout [ 586.241247][T18185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.322167][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 586.353809][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 586.386702][T18185] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.426367][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.458530][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.484672][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.491820][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.532109][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 586.594240][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 586.643369][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.666270][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.673478][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.701034][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 586.711494][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 586.744544][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 586.781230][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 586.809584][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 586.875988][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 586.915527][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 586.949704][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 586.963892][T18267] loop2: detected capacity change from 0 to 32768 [ 586.982290][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.054259][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 587.073086][T18267] XFS (loop2): Mounting V5 Filesystem [ 587.099048][T18283] loop3: detected capacity change from 0 to 8192 [ 587.118367][T18283] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 587.131813][T18283] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 587.141767][T18283] REISERFS (device loop3): using ordered data mode [ 587.148525][T18283] reiserfs: using flush barriers [ 587.150237][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.175015][T18283] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 587.214377][T18267] XFS (loop2): Ending clean mount [ 587.224222][T18185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.249879][T18267] XFS (loop2): Quotacheck needed: Please wait. [ 587.254011][T18283] REISERFS (device loop3): checking transaction log (loop3) [ 587.374826][T18283] REISERFS (device loop3): Using r5 hash to sort names [ 587.404844][T18283] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 587.427229][T18267] XFS (loop2): Quotacheck: Done. [ 587.506266][T18283] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 587.536979][T18275] loop7: detected capacity change from 0 to 32768 [ 587.599913][T18275] [ 587.599913][T18275] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 587.599913][T18275] [ 587.642382][T18283] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 587.665740][ T4252] XFS (loop2): Unmounting Filesystem [ 587.699721][T18275] jfs_lookup: dtSearch returned -5 [ 587.893999][T12754] [ 587.893999][T12754] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 587.893999][T12754] [ 587.967340][T12754] [ 587.967340][T12754] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 587.967340][T12754] [ 588.025136][ T4255] Bluetooth: hci6: command 0x040f tx timeout [ 588.438957][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.462067][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 588.506723][T18185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.663744][T18314] ntfs3: nbd4: try to read out of volume at offset 0x0 [ 589.122798][ T4299] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 589.317532][ T4299] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 589.352763][ T4299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.381263][ T4299] usb 4-1: Product: syz [ 589.402980][ T4299] usb 4-1: Manufacturer: syz [ 589.407645][ T4299] usb 4-1: SerialNumber: syz [ 589.439979][ T4299] usb 4-1: config 0 descriptor?? [ 589.664501][ T4299] int51x1: probe of 4-1:0.0 failed with error -22 [ 589.791991][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 589.841703][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 589.896771][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 589.905156][ T4466] usb 4-1: USB disconnect, device number 34 [ 589.941652][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 589.986390][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 590.004974][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 590.043202][T18185] device veth0_vlan entered promiscuous mode [ 590.099469][T18185] device veth1_vlan entered promiscuous mode [ 590.113157][ T4255] Bluetooth: hci6: command 0x0419 tx timeout [ 590.166689][T18364] netlink: 'syz.4.5794': attribute type 1 has an invalid length. [ 590.174651][T18362] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5793'. [ 590.205906][T18362] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5793'. [ 590.244450][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 590.264354][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 590.283068][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 590.304144][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 590.336817][T18185] device veth0_macvtap entered promiscuous mode [ 590.386463][T18185] device veth1_macvtap entered promiscuous mode [ 590.449937][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.481017][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.508813][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.530155][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.576419][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.621333][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.644183][T18185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.653831][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 590.678904][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 590.729973][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 590.764272][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 590.797076][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.832823][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.862912][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.891700][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.891959][T18385] loop3: detected capacity change from 0 to 512 [ 590.916442][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.948151][T18385] EXT4-fs: Ignoring removed mblk_io_submit option [ 590.948347][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.006460][T18185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.021907][T18385] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 591.043828][T18389] loop2: detected capacity change from 0 to 64 [ 591.054864][T18185] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.064670][T18185] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.073844][T18185] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.082855][T18185] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.090517][T18385] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.5804: attempt to clear invalid blocks 2 len 1 [ 591.103871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 591.116512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 591.134500][T18385] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 591.163291][T18385] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5804: invalid indirect mapped block 1819239214 (level 0) [ 591.264408][T18385] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.5804: invalid indirect mapped block 1819239214 (level 1) [ 591.346113][T18385] EXT4-fs (loop3): 1 truncate cleaned up [ 591.356158][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.376156][T18385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 591.392415][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.453823][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 591.454108][T18391] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5806'. [ 591.494563][T11906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.503988][T11906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.580883][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 591.589251][T18385] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 591.687309][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 591.931773][T18403] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5811'. [ 592.066049][T18407] loop4: detected capacity change from 0 to 128 [ 592.067277][T18379] loop7: detected capacity change from 0 to 32768 [ 592.342160][T18379] XFS (loop7): Mounting V5 Filesystem [ 592.553716][T18379] XFS (loop7): Ending clean mount [ 592.702218][T18433] netlink: 'syz.2.5822': attribute type 5 has an invalid length. [ 592.739579][T18433] device ip6erspan0 entered promiscuous mode [ 592.851397][T12754] XFS (loop7): Unmounting Filesystem [ 593.070825][T18445] device netdevsim0 entered promiscuous mode [ 593.144847][T18445] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 593.359882][T18441] loop9: detected capacity change from 0 to 8192 [ 593.471623][T18441] loop9: p1 < > p2 < > p4 < > [ 593.493879][T18441] loop9: partition table partially beyond EOD, truncated [ 593.515331][T18453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5833'. [ 593.534308][T18441] loop9: p4 start 524845 is beyond EOD, truncated [ 594.047626][T18469] loop7: detected capacity change from 0 to 256 [ 594.136292][ T4386] udevd[4386]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 594.150383][ T4494] udevd[4494]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 594.468425][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5846'. [ 594.667302][T18487] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 594.708920][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5851'. [ 594.782027][T18491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5851'. [ 594.813022][T18491] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5851'. [ 595.101720][T18501] netlink: 'syz.9.5856': attribute type 3 has an invalid length. [ 595.117522][T18504] loop2: detected capacity change from 0 to 256 [ 595.138679][T18499] loop3: detected capacity change from 0 to 2048 [ 595.173676][T18504] exfat: Deprecated parameter 'utf8' [ 595.216046][T18504] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 595.612616][T18511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'. [ 595.859930][T18490] loop7: detected capacity change from 0 to 32768 [ 595.899666][T18490] XFS: ikeep mount option is deprecated. [ 596.027942][T18490] XFS (loop7): Mounting V5 Filesystem [ 596.187158][T18490] XFS (loop7): Ending clean mount [ 596.209436][T18541] loop4: detected capacity change from 0 to 256 [ 596.216998][T18541] exfat: Deprecated parameter 'namecase' [ 596.254701][T18490] XFS (loop7): Quotacheck needed: Please wait. [ 596.262664][T18541] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 596.448603][T18490] XFS (loop7): Quotacheck: Done. [ 596.740235][T12754] XFS (loop7): Unmounting Filesystem [ 596.871445][T18556] loop4: detected capacity change from 0 to 256 [ 597.913655][T18581] loop2: detected capacity change from 0 to 256 [ 597.971328][T18584] device xfrm0 entered promiscuous mode [ 598.010432][T18586] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5894'. [ 598.052458][T18586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5894'. [ 598.082986][T18586] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5894'. [ 598.347863][T18596] netlink: 'syz.3.5898': attribute type 5 has an invalid length. [ 598.699997][T18606] loop7: detected capacity change from 0 to 8 [ 598.717586][T18606] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 598.739466][ T4386] udevd[4386]: incorrect cramfs checksum on /dev/loop7 [ 598.760701][T18606] cramfs: Error -3 while decompressing! [ 598.792838][T18606] cramfs: ffffffff96b4c568(26)->ffff88804fad5000(4096) [ 598.804050][T18565] loop4: detected capacity change from 0 to 40427 [ 598.820330][T18606] cramfs: Error -3 while decompressing! [ 598.841384][T18604] loop9: detected capacity change from 0 to 4096 [ 598.862972][T18606] cramfs: ffffffff96b4c582(26)->ffff88804fad6000(4096) [ 598.869610][T18565] F2FS-fs (loop4): invalid crc value [ 598.870072][T18606] cramfs: Error -3 while decompressing! [ 598.891350][ T4386] udevd[4386]: incorrect cramfs checksum on /dev/loop7 [ 598.903635][T18604] ntfs: (device loop9): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 598.934954][T18606] cramfs: ffffffff96b4c59c(16)->ffff88804c3c9000(4096) [ 598.948179][T18606] cramfs: Error -3 while decompressing! [ 598.959209][T18606] cramfs: ffffffff96b4c568(26)->ffff88804fad5000(4096) [ 598.961301][T18565] F2FS-fs (loop4): Found nat_bits in checkpoint [ 599.004292][T18604] ntfs: (device loop9): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 599.033812][T18604] ntfs: (device loop9): ntfs_read_locked_inode(): $DATA attribute is missing. [ 599.103283][T18604] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 599.151254][T18604] ntfs: (device loop9): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 599.158982][T18565] F2FS-fs (loop4): Start checkpoint disabled! [ 599.251327][T18565] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 599.283343][T18604] ntfs: volume version 3.1. [ 599.328855][T18617] loop2: detected capacity change from 0 to 2048 [ 599.357400][T18620] loop7: detected capacity change from 0 to 512 [ 599.371071][T18604] ntfs: (device loop9): ntfs_nlstoucs(): Name is too long (maximum length for a name on NTFS is 255 Unicode characters. [ 599.394568][T18620] EXT4-fs: Ignoring removed nomblk_io_submit option [ 599.430856][T18620] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 599.558308][T18620] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 599.623622][T18620] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 599.668315][T18620] EXT4-fs (loop7): 1 truncate cleaned up [ 599.678569][T18620] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 599.726525][T18626] cgroup: Invalid name [ 599.983465][T12754] EXT4-fs (loop7): unmounting filesystem. [ 600.176692][T18636] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5917'. [ 600.292903][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5918'. [ 600.872978][T18660] loop7: detected capacity change from 0 to 256 [ 600.880180][T18660] exfat: Deprecated parameter 'utf8' [ 600.968446][T18660] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 601.392169][T18673] netlink: 'syz.7.5935': attribute type 2 has an invalid length. [ 601.456056][T18676] loop3: detected capacity change from 0 to 128 [ 601.459575][T18674] loop4: detected capacity change from 0 to 2048 [ 601.502346][T18676] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 601.535215][T18674] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 601.580183][ T26] audit: type=1800 audit(1749663572.147:168): pid=18676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5937" name="file2" dev="loop3" ino=1048700 res=0 errno=0 [ 601.610780][T18676] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 601.618269][T18674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 601.668439][T18676] FAT-fs (loop3): Filesystem has been set read-only [ 601.732118][T18648] loop2: detected capacity change from 0 to 32768 [ 601.804661][T18648] XFS: ikeep mount option is deprecated. [ 601.996295][T18648] XFS (loop2): Mounting V5 Filesystem [ 602.127927][T18648] XFS (loop2): Ending clean mount [ 602.137741][T18648] XFS (loop2): Quotacheck needed: Please wait. [ 602.288014][T18648] XFS (loop2): Quotacheck: Done. [ 602.445870][ T4252] XFS (loop2): Unmounting Filesystem [ 602.518847][T18701] loop7: detected capacity change from 0 to 4096 [ 602.636566][T18701] ntfs: (device loop7): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match. Run ntfsfix or chkdsk. [ 602.673218][T18701] ntfs: (device loop7): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 602.799594][T18701] ntfs: volume version 3.1. [ 602.824880][T18701] ntfs: (device loop7): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 602.834965][T18714] netlink: 'syz.3.5952': attribute type 4 has an invalid length. [ 602.870086][T18714] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5952'. [ 602.900077][T18714] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 603.429995][T18730] netlink: 'syz.4.5958': attribute type 1 has an invalid length. [ 603.639613][T18736] loop9: detected capacity change from 0 to 8 [ 603.765526][T18739] netlink: 'syz.4.5963': attribute type 32 has an invalid length. [ 604.420422][T18728] loop7: detected capacity change from 0 to 32768 [ 604.550123][T18728] CIFS mount error: No usable UNC path provided in device string! [ 604.550123][T18728] [ 604.612557][T18728] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 605.796796][T18802] loop2: detected capacity change from 0 to 4096 [ 605.924951][T18802] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 606.229042][T18820] loop4: detected capacity change from 0 to 256 [ 606.395535][T18823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6004'. [ 606.962829][ T4562] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 607.124680][T18854] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 607.134433][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6017'. [ 607.183017][ T4562] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 607.199322][ T4562] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.235456][ T4562] usb 8-1: config 0 descriptor?? [ 607.242799][ T5566] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 607.254348][ T4562] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 607.301725][T18859] loop2: detected capacity change from 0 to 512 [ 607.313695][T18859] EXT4-fs: Ignoring removed nomblk_io_submit option [ 607.337238][T18859] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 607.413060][T18859] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 607.433124][ T5566] usb 10-1: Using ep0 maxpacket: 16 [ 607.444775][ T5566] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 607.454366][ T5566] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.463374][ T5566] usb 10-1: Product: syz [ 607.467976][ T5566] usb 10-1: Manufacturer: syz [ 607.473052][ T5566] usb 10-1: SerialNumber: syz [ 607.479735][T18859] EXT4-fs (loop2): 1 truncate cleaned up [ 607.480989][ T5566] usb 10-1: config 0 descriptor?? [ 607.491078][T18859] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 607.501965][ T5566] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 607.656244][ T4562] gp8psk: usb in 128 operation failed. [ 607.662637][ T4562] gp8psk: usb in 137 operation failed. [ 607.678771][ T4562] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 607.691513][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 607.708693][ T4299] usb 10-1: USB disconnect, device number 2 [ 607.709975][ T4562] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 607.783336][ T4562] usb 8-1: USB disconnect, device number 15 [ 608.573042][ T4300] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 608.614168][T18896] loop2: detected capacity change from 0 to 512 [ 608.721707][T18896] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.6039: bad orphan inode 11862016 [ 608.740083][T18896] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 608.751581][T18896] ext4 filesystem being mounted at /1345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.762849][ T4300] usb 5-1: Using ep0 maxpacket: 16 [ 608.773714][ T4300] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 608.863777][ T4300] usb 5-1: config 0 has no interface number 0 [ 608.908970][ T4300] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 608.947299][ T4300] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 608.963765][ T4300] usb 5-1: config 0 interface 41 has no altsetting 0 [ 609.004210][ T4300] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 609.004606][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 609.033204][ T4300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.081495][ T4300] usb 5-1: Product: syz [ 609.101751][ T4300] usb 5-1: Manufacturer: syz [ 609.113233][ T4300] usb 5-1: SerialNumber: syz [ 609.117930][T18915] netlink: 'syz.7.6048': attribute type 3 has an invalid length. [ 609.127411][ T4300] usb 5-1: config 0 descriptor?? [ 609.143018][T18915] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6048'. [ 609.153336][T18887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.161193][T18887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 609.370987][T18921] netlink: 'syz.9.6049': attribute type 1 has an invalid length. [ 609.382453][T18921] netlink: 'syz.9.6049': attribute type 2 has an invalid length. [ 609.435808][ T4300] CoreChips: probe of 5-1:0.41 failed with error -71 [ 609.464213][ T4300] usb 5-1: USB disconnect, device number 32 [ 610.377941][T18955] loop2: detected capacity change from 0 to 2048 [ 610.522904][T18960] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 610.597127][T18955] syz.2.6066: attempt to access beyond end of device [ 610.597127][T18955] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 610.604536][T18966] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:0 [ 610.622460][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 610.622477][ T26] audit: type=1326 audit(1749663581.187:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.9.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a758e929 code=0x7ffc0000 [ 610.701834][T18955] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 610.713200][ T26] audit: type=1326 audit(1749663581.227:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.9.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fc0a758e929 code=0x7ffc0000 [ 610.773369][T18955] syz.2.6066: attempt to access beyond end of device [ 610.773369][T18955] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048 [ 610.838803][T18955] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15) [ 610.846823][ T26] audit: type=1326 audit(1749663581.227:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.9.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a758e929 code=0x7ffc0000 [ 610.860457][T18955] NILFS (loop2): error -5 truncating bmap (ino=16) [ 610.927136][ T26] audit: type=1326 audit(1749663581.227:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18964 comm="syz.9.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0a758e929 code=0x7ffc0000 [ 611.340639][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6083'. [ 611.415560][T18990] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6082'. [ 611.527553][T18992] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 611.563067][T18997] loop4: detected capacity change from 0 to 1024 [ 611.667989][T18997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 611.735908][T18997] EXT4-fs error (device loop4): ext4_get_first_dir_block:3605: inode #11: comm syz.4.6085: directory missing '..' [ 611.981884][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 612.173924][T19015] loop3: detected capacity change from 0 to 512 [ 612.242937][T19015] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2768: inode #11: comm syz.3.6094: corrupted xattr block 95 [ 612.311960][T19015] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.6094: bg 0: block 7: invalid block bitmap [ 612.330189][T19015] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 612.343237][T19015] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2934: inode #11: comm syz.3.6094: corrupted xattr block 95 [ 612.432201][T19000] loop7: detected capacity change from 0 to 32768 [ 612.459909][T19015] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 612.490697][T19015] EXT4-fs (loop3): 1 orphan inode deleted [ 612.499890][T19015] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 612.554426][T19000] ERROR: (device loop7): dbAlloc: unable to allocate blocks [ 612.554426][T19000] [ 612.643074][T19000] jfs_create: dtInsert returned -EIO [ 612.649337][T19000] ERROR: (device loop7): jfs_create: [ 612.649337][T19000] [ 612.744018][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 613.014042][T19038] loop7: detected capacity change from 0 to 8 [ 613.072997][T19038] SQUASHFS error: Failed to read block 0x2d7: -5 [ 613.123035][T19038] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 613.367674][T19049] netlink: 'syz.2.6110': attribute type 10 has an invalid length. [ 613.422949][T19049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6110'. [ 613.480583][T19049] device virt_wifi0 entered promiscuous mode [ 613.488791][T19053] netlink: 'syz.4.6111': attribute type 3 has an invalid length. [ 613.496923][ T4300] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 613.520392][T19049] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 613.525332][T19053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6111'. [ 613.695214][ T4300] usb 4-1: config index 0 descriptor too short (expected 3133, got 61) [ 613.734844][ T4300] usb 4-1: config 0 has an invalid interface number: 156 but max is 1 [ 613.765781][ T4300] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.807114][ T4300] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 613.820566][ T4300] usb 4-1: config 0 has no interface number 0 [ 613.831998][ T4300] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 613.872867][ T4300] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 613.901054][ T4300] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 613.923526][ T4300] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 613.942916][ T4300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.963269][ T4300] usb 4-1: config 0 descriptor?? [ 613.979136][ T4300] gspca_main: spca561-2.14.0 probing abcd:cdee [ 614.020709][T19068] bridge0: port 1(netdevsim0) entered blocking state [ 614.079641][T19068] bridge0: port 1(netdevsim0) entered disabled state [ 614.153111][T19068] device netdevsim0 entered promiscuous mode [ 614.174461][ T4300] spca561: probe of 4-1:0.156 failed with error -22 [ 614.185123][ T4300] usb 4-1: MIDIStreaming interface descriptor not found [ 614.187542][T19073] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6123'. [ 614.206930][ T4300] usb 4-1: USB disconnect, device number 35 [ 614.220107][T19073] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6123'. [ 614.232836][ T4559] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 614.453010][ T4559] usb 8-1: Using ep0 maxpacket: 8 [ 614.460831][ T4559] usb 8-1: unable to get BOS descriptor or descriptor too short [ 614.488817][ T4559] usb 8-1: config 4 has an invalid interface number: 147 but max is 0 [ 614.501270][ T4559] usb 8-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 614.511599][ T4559] usb 8-1: config 4 has no interface number 0 [ 614.533739][ T4559] usb 8-1: string descriptor 0 read error: -22 [ 614.540035][ T4559] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 614.562433][ T4559] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.586494][ T4559] usb 8-1: Found UVC 0.02 device (04f2:b746) [ 614.619907][ T4559] usb 8-1: No valid video chain found. [ 614.648875][ T4362] udevd[4362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 614.663948][T19085] usb usb9: usbfs: process 19085 (syz.4.6129) did not claim interface 0 before use [ 614.685990][T19087] netlink: 'syz.9.6128': attribute type 3 has an invalid length. [ 614.717479][T19088] loop2: detected capacity change from 0 to 256 [ 614.749101][T19088] exfat: Deprecated parameter 'namecase' [ 614.757167][T19087] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6128'. [ 614.825308][T19088] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 614.842770][ T4300] usb 8-1: USB disconnect, device number 16 [ 615.129910][T19099] loop2: detected capacity change from 0 to 256 [ 615.182561][T19099] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 615.208142][ T4559] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 615.403038][ T4559] usb 5-1: Using ep0 maxpacket: 16 [ 615.410500][ T4559] usb 5-1: config 0 has an invalid interface number: 99 but max is 0 [ 615.449444][ T4559] usb 5-1: config 0 has no interface number 0 [ 615.469759][ T4559] usb 5-1: config 0 interface 99 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 615.495220][ T4559] usb 5-1: config 0 interface 99 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 615.534758][ T4559] usb 5-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=63.0c [ 615.569345][ T4559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.607426][ T4559] usb 5-1: Product: syz [ 615.611657][ T4559] usb 5-1: Manufacturer: syz [ 615.619835][ T4559] usb 5-1: SerialNumber: syz [ 615.641979][ T4559] usb 5-1: config 0 descriptor?? [ 615.661108][T19090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 615.679814][T19090] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 615.707691][ T4559] usbtest 5-1:0.99: usb test device [ 615.715972][ T4559] usbtest 5-1:0.99: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 615.772990][ T5214] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 615.921171][ T4559] usb 5-1: USB disconnect, device number 33 [ 615.939121][T19119] netlink: 'syz.3.6142': attribute type 3 has an invalid length. [ 615.972922][ T5214] usb 3-1: Using ep0 maxpacket: 16 [ 615.984574][ T5214] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 616.014000][ T5214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.052163][ T5214] usb 3-1: config 0 descriptor?? [ 616.064799][T19094] loop9: detected capacity change from 0 to 40427 [ 616.079874][ T5214] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 616.134060][T19094] F2FS-fs (loop9): invalid crc value [ 616.176831][T19094] F2FS-fs (loop9): Found nat_bits in checkpoint [ 616.313101][T19094] F2FS-fs (loop9): Start checkpoint disabled! [ 616.358525][T19094] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 616.497633][ T5214] gspca_sonixj: reg_r err -71 [ 616.504691][ T5214] sonixj: probe of 3-1:0.0 failed with error -71 [ 616.525653][ T5214] usb 3-1: USB disconnect, device number 34 [ 617.348546][T19149] loop9: detected capacity change from 0 to 2048 [ 617.379662][T19124] loop7: detected capacity change from 0 to 32768 [ 617.416856][T19149] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 617.451985][T19124] ERROR: (device loop7): dbAlloc: the hint is outside the map [ 617.451985][T19124] [ 617.466365][ T26] audit: type=1326 audit(1749663588.037:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.2.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 617.495735][T19124] ERROR: (device loop7): remounting filesystem as read-only [ 617.503302][T19149] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.592772][ T26] audit: type=1326 audit(1749663588.037:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.2.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 617.765401][ T26] audit: type=1326 audit(1749663588.037:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.2.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 617.888029][ T26] audit: type=1326 audit(1749663588.037:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19151 comm="syz.2.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6d6b8e929 code=0x7ffc0000 [ 618.123561][ T26] audit: type=1326 audit(1749663588.697:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19167 comm="syz.7.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f58e929 code=0x7ffc0000 [ 618.183002][ T5214] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 618.184545][ T26] audit: type=1326 audit(1749663588.717:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19167 comm="syz.7.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f58e929 code=0x7ffc0000 [ 618.292965][ T26] audit: type=1326 audit(1749663588.717:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19167 comm="syz.7.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f1c1f58e929 code=0x7ffc0000 [ 618.392311][ T26] audit: type=1326 audit(1749663588.717:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19167 comm="syz.7.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f58e929 code=0x7ffc0000 [ 618.402881][ T5214] usb 10-1: Using ep0 maxpacket: 16 [ 618.456199][ T5214] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.482775][ T26] audit: type=1326 audit(1749663588.717:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19167 comm="syz.7.6166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c1f58e929 code=0x7ffc0000 [ 618.511011][ T5214] usb 10-1: config 0 has no interfaces? [ 618.535185][ T5214] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 618.578903][ T5214] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.591781][ T5214] usb 10-1: Product: syz [ 618.602565][ T5214] usb 10-1: Manufacturer: syz [ 618.611680][ T5214] usb 10-1: SerialNumber: syz [ 618.668692][ T5214] r8152-cfgselector 10-1: config 0 descriptor?? [ 618.779700][T19180] loop7: detected capacity change from 0 to 4096 [ 618.827022][T19180] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 618.851546][T19158] loop2: detected capacity change from 0 to 32768 [ 618.896979][ T5214] usbip-host 10-1: 10-1 is not in match_busid table... skip! [ 618.968934][T19180] ntfs3: loop7: failed to convert "c46c" to iso8859-15 [ 619.117019][ T5214] usb 10-1: USB disconnect, device number 3 [ 619.958813][T19205] netlink: 312 bytes leftover after parsing attributes in process `syz.3.6184'. [ 620.319203][T19220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6191'. [ 620.671362][T19230] loop2: detected capacity change from 0 to 2048 [ 620.738374][T19230] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 620.794892][T19230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 620.886330][T19240] bridge0: port 3(netdevsim0) entered blocking state [ 620.914864][T19240] bridge0: port 3(netdevsim0) entered disabled state [ 620.958155][T19240] device netdevsim0 entered promiscuous mode [ 621.032510][T19240] bridge0: port 3(netdevsim0) entered blocking state [ 621.040316][T19240] bridge0: port 3(netdevsim0) entered forwarding state [ 621.459316][T19260] loop4: detected capacity change from 0 to 512 [ 621.560904][T19260] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 621.583082][T19260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 621.592099][T19260] System zones: 0-1, 15-15, 18-18, 34-34 [ 621.623578][T19266] netlink: 'syz.2.6215': attribute type 11 has an invalid length. [ 621.631721][T19266] netlink: 216 bytes leftover after parsing attributes in process `syz.2.6215'. [ 621.655832][T19260] EXT4-fs (loop4): orphan cleanup on readonly fs [ 621.662377][T19260] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 621.742058][T19260] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 621.792811][T19260] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 621.836004][T19260] EXT4-fs (loop4): 1 truncate cleaned up [ 621.841722][T19260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 621.897427][T19274] loop9: detected capacity change from 0 to 4096 [ 621.952069][T19274] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 621.984048][T19260] fscrypt (loop4, inode 16): Error -61 getting encryption context [ 622.155650][T19274] ntfs3: loop9: failed to convert "c46c" to cp864 [ 622.700263][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 623.377579][T19313] xt_TPROXY: Can be used only with -p tcp or -p udp [ 623.601334][T19319] kernel profiling enabled (shift: 8) [ 623.695928][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6234'. [ 623.804673][T19290] loop2: detected capacity change from 0 to 32768 [ 623.842430][T19290] [ 623.842430][T19290] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 623.842430][T19290] [ 623.948394][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.954996][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.048292][ T4304] read_mapping_page failed! [ 624.062179][ T4304] ERROR: (device loop2): txCommit: [ 624.062179][ T4304] [ 624.139498][ T4304] ERROR: (device loop2): remounting filesystem as read-only [ 624.165470][ T4304] jfs_write_inode: jfs_commit_inode failed! [ 624.193074][ T4252] [ 624.193074][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 624.193074][ T4252] [ 624.215007][ T4252] [ 624.215007][ T4252] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 624.215007][ T4252] [ 624.480444][T19341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6241'. [ 624.726518][T19316] loop9: detected capacity change from 0 to 32768 [ 624.821903][T19316] ERROR: (device loop9): dbAlloc: the hint is outside the map [ 624.821903][T19316] [ 624.847322][T19348] loop4: detected capacity change from 0 to 64 [ 624.882295][T19316] ERROR: (device loop9): remounting filesystem as read-only [ 625.325641][T19362] netlink: 'syz.7.6250': attribute type 12 has an invalid length. [ 625.400470][T19365] device geneve4 entered promiscuous mode [ 625.596840][T19361] loop3: detected capacity change from 0 to 4096 [ 625.615521][T19371] IPv6: syztnl0: Disabled Multicast RS [ 625.622034][T19367] loop2: detected capacity change from 0 to 4096 [ 625.663878][T19367] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 625.672458][T19361] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 625.787766][T19361] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 625.847234][T19367] ntfs3: loop2: failed to convert "c46c" to iso8859-15 [ 626.193502][T19383] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 626.430375][T19372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 626.560867][T19394] xt_nfacct: accounting object `syz1' does not exists [ 627.376064][T19420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6271'. [ 627.429846][T19413] loop3: detected capacity change from 0 to 4096 [ 627.471700][T19413] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 627.672266][T19413] ntfs3: loop3: failed to convert "c46c" to iso8859-15 [ 627.975059][T19436] netlink: 'syz.3.6280': attribute type 11 has an invalid length. [ 628.002853][T19436] netlink: 216 bytes leftover after parsing attributes in process `syz.3.6280'. [ 628.256111][T19442] loop9: detected capacity change from 0 to 2048 [ 628.263307][T19444] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6285'. [ 628.328778][T19442] UDF-fs: error (device loop9): udf_process_sequence: Primary Volume Descriptor not found! [ 628.396765][T19442] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.405655][T19449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6286'. [ 628.951572][T19466] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.6293'. [ 629.002967][T19466] netlink: zone id is out of range [ 629.034406][T19466] netlink: del zone limit has 4 unknown bytes [ 629.134700][T19472] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 629.190791][T19472] overlayfs: overlapping lowerdir path [ 629.253344][T19475] loop3: detected capacity change from 0 to 64 [ 629.722272][T19492] loop9: detected capacity change from 0 to 64 [ 630.542916][T19515] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6312'. [ 630.551951][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6312'. [ 630.606511][T19517] xt_TCPMSS: Only works on TCP SYN packets [ 630.737896][T19520] netlink: 'syz.4.6315': attribute type 11 has an invalid length. [ 630.776736][T19520] netlink: 216 bytes leftover after parsing attributes in process `syz.4.6315'. [ 631.017708][T19529] loop7: detected capacity change from 0 to 512 [ 631.034238][T19530] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6319'. [ 631.177365][T19529] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 631.187921][T19529] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 631.218926][T19529] System zones: 0-1, 15-15, 18-18, 34-34 [ 631.240343][T19529] EXT4-fs (loop7): orphan cleanup on readonly fs [ 631.248015][T19529] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 631.258310][T19529] EXT4-fs warning (device loop7): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 631.273528][T19529] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 631.281690][T19529] EXT4-fs error (device loop7): ext4_orphan_get:1426: comm syz.7.6318: bad orphan inode 16 [ 631.363048][T19529] ext4_test_bit(bit=15, block=18) = 1 [ 631.392806][T19529] is_bad_inode(inode)=0 [ 631.417527][T19529] NEXT_ORPHAN(inode)=0 [ 631.421661][T19529] max_ino=32 [ 631.445868][T19529] i_nlink=2 [ 631.456064][T19529] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 631.674116][T19547] netlink: 'syz.4.6325': attribute type 2 has an invalid length. [ 631.712541][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6325'. [ 631.713378][T12754] EXT4-fs (loop7): unmounting filesystem. [ 631.722126][T19550] loop3: detected capacity change from 0 to 128 [ 631.857498][T19550] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0002] [ 631.893434][T19550] System zones: 1-3, 19-19, 35-36 [ 631.933749][T19550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 631.952317][T19558] net veth1_virt_wifi ÿÿÿ: renamed from virt_wifi0 [ 632.024277][T19550] ext4 filesystem being mounted at /1354/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 632.129263][T19550] EXT4-fs warning (device loop3): ext4_group_extend:1899: can't read last block, resize aborted [ 632.357280][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 632.723823][T19580] loop2: detected capacity change from 0 to 1024 [ 632.734536][T19582] netlink: 'syz.9.6336': attribute type 11 has an invalid length. [ 632.765268][T19580] EXT4-fs: inline encryption not supported [ 632.798261][T19580] EXT4-fs: Ignoring removed i_version option [ 632.804800][T19582] netlink: 216 bytes leftover after parsing attributes in process `syz.9.6336'. [ 632.867920][T19580] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 2: comm syz.2.6337: lblock 2 mapped to illegal pblock 2 (length 1) [ 632.898108][T19580] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 632.982953][T19580] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 48: comm syz.2.6337: lblock 0 mapped to illegal pblock 48 (length 1) [ 633.133541][T19580] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 633.176301][T19580] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.6337: Failed to acquire dquot type 0 [ 633.245990][T19580] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 633.291658][T19574] loop7: detected capacity change from 0 to 32768 [ 633.346041][T19580] EXT4-fs error (device loop2): ext4_evict_inode:279: inode #11: comm syz.2.6337: mark_inode_dirty error [ 633.407023][T19580] EXT4-fs warning (device loop2): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 633.447044][T19574] XFS (loop7): Mounting V5 Filesystem [ 633.465644][T19580] EXT4-fs (loop2): 1 orphan inode deleted [ 633.471550][T19580] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 633.493426][ T40] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 633.591376][T19613] loop4: detected capacity change from 0 to 16 [ 633.602296][T19614] MTD: Couldn't look up '': -22 [ 633.618332][ T40] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 633.624099][T19613] erofs: (device loop4): mounted with root inode @ nid 36. [ 633.638401][T19574] XFS (loop7): Ending clean mount [ 633.656659][T19574] XFS (loop7): Quotacheck needed: Please wait. [ 633.682908][ T40] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:2: Failed to release dquot type 0 [ 633.753925][T19580] EXT4-fs (loop2): unmounting filesystem. [ 633.776893][T19580] EXT4-fs error (device loop2): __ext4_get_inode_loc:4507: comm syz.2.6337: Invalid inode table block 1 in block_group 0 [ 633.779719][T19613] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 633.809509][T19574] XFS (loop7): Quotacheck: Done. [ 633.816974][T19613] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 633.867549][T19613] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 633.890521][T19580] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5914: Corrupt filesystem [ 633.921180][T19613] syz.4.6346: attempt to access beyond end of device [ 633.921180][T19613] loop4: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 633.951383][T19580] EXT4-fs error (device loop2): ext4_quota_off:7120: inode #3: comm syz.2.6337: mark_inode_dirty error [ 633.973835][T12754] XFS (loop7): Unmounting Filesystem [ 633.976173][T19613] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 634.021680][ T26] audit: type=1800 audit(1749663604.587:182): pid=19613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.6346" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 634.292275][T19626] loop9: detected capacity change from 0 to 512 [ 634.402362][T19626] EXT4-fs: inline encryption not supported [ 634.642859][T19626] EXT4-fs (loop9): 1 truncate cleaned up [ 634.673126][T19626] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 634.984016][T18185] EXT4-fs (loop9): unmounting filesystem. [ 635.516862][T19673] netlink: 'syz.2.6368': attribute type 21 has an invalid length. [ 635.535424][T19673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6368'. [ 635.912886][T19684] program syz.7.6371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 635.971406][T19689] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6374'. [ 636.310706][T19698] xt_TCPMSS: Only works on TCP SYN packets [ 636.880251][T19722] loop7: detected capacity change from 0 to 256 [ 637.021349][T19722] FAT-fs (loop7): Directory bread(block 64) failed [ 637.062965][T19722] FAT-fs (loop7): Directory bread(block 65) failed [ 637.069656][T19722] FAT-fs (loop7): Directory bread(block 66) failed [ 637.126121][T19722] FAT-fs (loop7): Directory bread(block 67) failed [ 637.174642][T19722] FAT-fs (loop7): Directory bread(block 68) failed [ 637.181822][T19722] FAT-fs (loop7): Directory bread(block 69) failed [ 637.186845][T19733] loop3: detected capacity change from 0 to 16 [ 637.217144][T19733] erofs: (device loop3): mounted with root inode @ nid 36. [ 637.228642][T19722] FAT-fs (loop7): Directory bread(block 70) failed [ 637.273108][T19722] FAT-fs (loop7): Directory bread(block 71) failed [ 637.279802][T19722] FAT-fs (loop7): Directory bread(block 72) failed [ 637.281910][T19733] erofs: (device loop3): init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 637.343830][T19722] FAT-fs (loop7): Directory bread(block 73) failed [ 637.727116][T19744] QAT: failed to copy from user cfg_data. [ 637.815106][T19747] loop4: detected capacity change from 0 to 128 [ 637.896966][T19751] loop9: detected capacity change from 0 to 256 [ 638.002278][T19755] loop7: detected capacity change from 0 to 512 [ 638.030858][T19751] FAT-fs (loop9): Directory bread(block 64) failed [ 638.092876][T19751] FAT-fs (loop9): Directory bread(block 65) failed [ 638.099596][T19751] FAT-fs (loop9): Directory bread(block 66) failed [ 638.123477][T19755] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 638.202944][T19751] FAT-fs (loop9): Directory bread(block 67) failed [ 638.209639][T19751] FAT-fs (loop9): Directory bread(block 68) failed [ 638.263574][T19755] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 638.289617][T19751] FAT-fs (loop9): Directory bread(block 69) failed [ 638.310152][T19755] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.6399: Failed to acquire dquot type 1 [ 638.325937][T19751] FAT-fs (loop9): Directory bread(block 70) failed [ 638.332546][T19751] FAT-fs (loop9): Directory bread(block 71) failed [ 638.371920][T19755] EXT4-fs (loop7): 1 truncate cleaned up [ 638.393507][T19751] FAT-fs (loop9): Directory bread(block 72) failed [ 638.400120][T19751] FAT-fs (loop9): Directory bread(block 73) failed [ 638.430535][T19755] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 638.462984][T19755] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.781609][T12754] EXT4-fs (loop7): unmounting filesystem. [ 639.152187][T19788] loop9: detected capacity change from 0 to 512 [ 639.181857][T19784] loop7: detected capacity change from 0 to 4096 [ 639.218592][T19788] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 639.254142][T19794] loop3: detected capacity change from 0 to 16 [ 639.351140][T19794] erofs: (device loop3): mounted with root inode @ nid 36. [ 639.359612][T19788] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 639.387838][T19788] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.407932][T19784] ntfs3: loop7: ino=5, "/" directory corrupted [ 639.435024][T19794] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 639.465091][T19784] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 639.481930][T19794] erofs: (device loop3): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 639.504569][T19794] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 639.573700][T19794] syz.3.6415: attempt to access beyond end of device [ 639.573700][T19794] loop3: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 639.593625][T19800] loop4: detected capacity change from 0 to 256 [ 639.663711][T19794] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 639.676106][T18185] EXT4-fs (loop9): unmounting filesystem. [ 639.682034][T19800] FAT-fs (loop4): Directory bread(block 64) failed [ 639.709235][T19800] FAT-fs (loop4): Directory bread(block 65) failed [ 639.719563][ T26] audit: type=1800 audit(1749663610.277:183): pid=19794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6415" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 639.762931][T19800] FAT-fs (loop4): Directory bread(block 66) failed [ 639.769528][T19800] FAT-fs (loop4): Directory bread(block 67) failed [ 639.830374][T19800] FAT-fs (loop4): Directory bread(block 68) failed [ 639.857216][T19800] FAT-fs (loop4): Directory bread(block 69) failed [ 639.871941][T19800] FAT-fs (loop4): Directory bread(block 70) failed [ 639.942183][T19800] FAT-fs (loop4): Directory bread(block 71) failed [ 640.013094][T19800] FAT-fs (loop4): Directory bread(block 72) failed [ 640.091038][T19800] FAT-fs (loop4): Directory bread(block 73) failed [ 640.191990][T19812] loop3: detected capacity change from 0 to 764 [ 640.277732][T19816] loop7: detected capacity change from 0 to 512 [ 640.289383][T19812] rock: directory entry would overflow storage [ 640.307410][T19812] rock: sig=0x4654, size=5, remaining=4 [ 640.353624][T19816] EXT4-fs: inline encryption not supported [ 640.459522][T19816] EXT4-fs (loop7): 1 truncate cleaned up [ 640.527889][T19816] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 640.888645][T12754] EXT4-fs (loop7): unmounting filesystem. [ 640.917914][T19834] netlink: 'syz.9.6430': attribute type 10 has an invalid length. [ 640.972894][T19834] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6430'. [ 640.981912][T19834] device batadv0 entered promiscuous mode [ 641.006386][T19837] syz.2.6429 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 641.033465][T19834] bridge0: port 3(batadv0) entered blocking state [ 641.035567][T19840] loop3: detected capacity change from 0 to 256 [ 641.043353][T19834] bridge0: port 3(batadv0) entered disabled state [ 641.103833][T19840] FAT-fs (loop3): Directory bread(block 64) failed [ 641.110477][T19840] FAT-fs (loop3): Directory bread(block 65) failed [ 641.128037][T19834] bridge0: port 3(batadv0) entered blocking state [ 641.134658][T19834] bridge0: port 3(batadv0) entered forwarding state [ 641.162461][T19840] FAT-fs (loop3): Directory bread(block 66) failed [ 641.173385][T19840] FAT-fs (loop3): Directory bread(block 67) failed [ 641.180067][T19840] FAT-fs (loop3): Directory bread(block 68) failed [ 641.212927][T19840] FAT-fs (loop3): Directory bread(block 69) failed [ 641.240209][T19840] FAT-fs (loop3): Directory bread(block 70) failed [ 641.277927][T19840] FAT-fs (loop3): Directory bread(block 71) failed [ 641.298902][ T7224] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 641.305397][T19840] FAT-fs (loop3): Directory bread(block 72) failed [ 641.309256][ T7224] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 641.372960][T19840] FAT-fs (loop3): Directory bread(block 73) failed [ 641.578741][T19856] raw_sendmsg: syz.2.6438 forgot to set AF_INET. Fix it! [ 642.472082][T19887] loop2: detected capacity change from 0 to 16 [ 642.525360][T19887] erofs: (device loop2): mounted with root inode @ nid 36. [ 642.579477][T19887] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 642.613488][T19891] loop3: detected capacity change from 0 to 256 [ 642.626156][T19887] erofs: (device loop2): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 642.651976][T19887] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 89 [ 642.677455][T19891] FAT-fs (loop3): Directory bread(block 64) failed [ 642.692936][T19891] FAT-fs (loop3): Directory bread(block 65) failed [ 642.705760][T19887] syz.2.6451: attempt to access beyond end of device [ 642.705760][T19887] loop2: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 642.735025][T19891] FAT-fs (loop3): Directory bread(block 66) failed [ 642.792403][T19891] FAT-fs (loop3): Directory bread(block 67) failed [ 642.800063][T19887] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 642.803365][T19891] FAT-fs (loop3): Directory bread(block 68) failed [ 642.819077][ T26] audit: type=1800 audit(1749663613.387:184): pid=19887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6451" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 642.845364][T19891] FAT-fs (loop3): Directory bread(block 69) failed [ 642.870282][T19891] FAT-fs (loop3): Directory bread(block 70) failed [ 642.892843][T19891] FAT-fs (loop3): Directory bread(block 71) failed [ 642.903076][ T4560] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 642.931213][T19891] FAT-fs (loop3): Directory bread(block 72) failed [ 642.969272][T19891] FAT-fs (loop3): Directory bread(block 73) failed [ 643.092815][ T4560] usb 10-1: Using ep0 maxpacket: 8 [ 643.100466][ T4560] usb 10-1: config 32 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 643.143463][ T4560] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 643.182783][ T4560] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.434521][T19912] netlink: 'syz.7.6462': attribute type 2 has an invalid length. [ 643.443536][ T4560] usb 10-1: string descriptor 0 read error: -71 [ 643.448072][T19908] loop2: detected capacity change from 0 to 2048 [ 643.458442][ T4560] hub 10-1:32.0: bad descriptor, ignoring hub [ 643.486645][ T4560] hub: probe of 10-1:32.0 failed with error -5 [ 643.573473][ T4560] usb 10-1: USB disconnect, device number 4 [ 643.603526][T19914] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 643.813727][ T4386] udevd[4386]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.042115][T19928] libceph: resolve '400' (ret=-3): failed [ 644.052030][T19930] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 644.094759][T19930] overlayfs: conflicting options: userxattr,redirect_dir=off [ 645.521579][T19936] loop9: detected capacity change from 0 to 32768 [ 645.670043][T19936] XFS (loop9): Mounting V5 Filesystem [ 645.783098][ T4560] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 645.799429][T19936] XFS (loop9): Ending clean mount [ 645.819821][T19990] loop4: detected capacity change from 0 to 2048 [ 645.885415][T19936] XFS (loop9): Quotacheck needed: Please wait. [ 645.912804][T19990] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 645.972791][ T4560] usb 8-1: Using ep0 maxpacket: 8 [ 645.990256][ T4560] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 646.024761][ T4560] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 646.034205][T19999] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 646.068128][ T4560] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 646.071336][T19936] XFS (loop9): Quotacheck: Done. [ 646.132759][ T4560] usb 8-1: Product: syz [ 646.139893][ T4560] usb 8-1: Manufacturer: syz [ 646.172770][ T4560] usb 8-1: SerialNumber: syz [ 646.333252][T18185] XFS (loop9): Unmounting Filesystem [ 646.371970][T19954] loop3: detected capacity change from 0 to 40427 [ 646.390004][ T4560] usb 8-1: Invalid connection information received from device [ 646.448465][T19954] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 646.497712][T19954] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 646.512849][ T4269] Bluetooth: hci5: command 0x0406 tx timeout [ 646.537469][T19954] F2FS-fs (loop3): invalid crc value [ 646.617960][ T4560] usb 8-1: USB disconnect, device number 17 [ 646.672238][T19954] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 646.703340][T20011] binder: 20008:20011 ioctl c018620c 200000000700 returned -22 [ 646.917850][T19954] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 646.960360][T19954] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 647.274340][T20023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6498'. [ 647.325054][T20023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6498'. [ 647.584167][T20028] loop9: detected capacity change from 0 to 1024 [ 648.072301][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6507'. [ 648.275413][T20052] loop9: detected capacity change from 0 to 256 [ 648.304921][T20052] exfat: Deprecated parameter 'namecase' [ 648.373225][T20052] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 648.873609][T20073] netlink: 'syz.2.6518': attribute type 2 has an invalid length. [ 648.995402][T20078] loop9: detected capacity change from 0 to 16 [ 649.003922][T20078] erofs: (device loop9): mounted with root inode @ nid 36. [ 649.223563][ T26] audit: type=1326 audit(1749663619.797:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a238e929 code=0x7ffc0000 [ 649.307534][ T26] audit: type=1326 audit(1749663619.817:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f72a238e929 code=0x7ffc0000 [ 649.419554][ T26] audit: type=1326 audit(1749663619.817:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a238e929 code=0x7ffc0000 [ 649.524745][ T26] audit: type=1326 audit(1749663619.817:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20085 comm="syz.4.6524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a238e929 code=0x7ffc0000 [ 649.775896][T20103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6533'. [ 649.845445][T20106] loop3: detected capacity change from 0 to 256 [ 650.926768][T20150] loop7: detected capacity change from 0 to 16 [ 650.965030][T20150] erofs: (device loop7): mounted with root inode @ nid 36. [ 651.033353][T20150] erofs: (device loop7): erofs_fill_dentries: bogus dirent @ nid 36 [ 651.320356][T20163] device vlan0 entered promiscuous mode [ 651.502896][T20170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6564'. [ 651.787460][ T4559] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 651.993019][ T4559] usb 5-1: Using ep0 maxpacket: 16 [ 652.005279][ T4559] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 652.059099][ T4559] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.104371][ T27] INFO: task syz-executor:12033 blocked for more than 143 seconds. [ 652.112556][ T27] Not tainted 6.1.141-syzkaller #0 [ 652.130668][ T4559] usb 5-1: Product: syz [ 652.135145][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.142718][ T4559] usb 5-1: Manufacturer: syz [ 652.148469][ T4559] usb 5-1: SerialNumber: syz [ 652.175367][ T27] task:syz-executor state:D stack:22144 pid:12033 ppid:1 flags:0x00004004 [ 652.203793][ T4559] usb 5-1: config 0 descriptor?? [ 652.213908][ T27] Call Trace: [ 652.227507][ T27] [ 652.238077][T20200] netlink: 'syz.7.6579': attribute type 3 has an invalid length. [ 652.241879][ T4559] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 652.254256][ T27] __schedule+0x10e9/0x40d0 [ 652.275726][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 652.289174][T20200] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 652.307027][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 652.323148][ T27] ? lock_chain_count+0x20/0x20 [ 652.328076][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 652.340850][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 652.348628][ T27] schedule+0xb9/0x180 [ 652.370818][ T27] io_schedule+0x7c/0xd0 [ 652.382197][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 652.401284][ T27] ? folio_wait_bit+0x30/0x30 [ 652.406228][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 652.412616][ T27] ? folio_mapping+0x1ba/0x4d0 [ 652.417747][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 652.430944][ T27] ? mapping_evict_folio+0x520/0x520 [ 652.436499][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 652.442534][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 652.447895][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 652.453178][ T27] evict+0x498/0x870 [ 652.457106][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 652.462062][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 652.467391][ T27] ? _raw_spin_unlock+0x24/0x40 [ 652.472292][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 652.477554][ T27] evict_inodes+0x604/0x690 [ 652.482072][ T27] ? clear_inode+0x150/0x150 [ 652.486810][ T27] ? dput+0x1c9/0x1d0 [ 652.490819][ T27] ? sync_filesystem+0x103/0x220 [ 652.496124][ T27] generic_shutdown_super+0x93/0x340 [ 652.501461][ T27] kill_block_super+0x7c/0xe0 [ 652.506460][ T27] deactivate_locked_super+0x93/0xf0 [ 652.511962][ T27] cleanup_mnt+0x463/0x4f0 [ 652.516474][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 652.521706][ T27] task_work_run+0x1ca/0x250 [ 652.526450][ T27] ? task_work_cancel+0x230/0x230 [ 652.531513][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 652.537100][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 652.542413][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 652.548071][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 652.553606][ T27] do_syscall_64+0x58/0xa0 [ 652.558048][ T27] ? clear_bhb_loop+0x60/0xb0 [ 652.563111][ T27] ? clear_bhb_loop+0x60/0xb0 [ 652.567812][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 652.574057][ T27] RIP: 0033:0x7f7e6818fc57 [ 652.578512][ T27] RSP: 002b:00007ffeb91e9d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 652.587307][ T27] RAX: 0000000000000000 RBX: 00007f7e68210925 RCX: 00007f7e6818fc57 [ 652.596490][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb91e9e20 [ 652.604828][ T27] RBP: 00007ffeb91e9e20 R08: 0000000000000000 R09: 0000000000000000 [ 652.613703][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb91eaeb0 [ 652.621848][ T27] R13: 00007f7e68210925 R14: 000000000007b34a R15: 00007ffeb91eaef0 [ 652.629937][ T27] [ 652.633487][ T27] [ 652.633487][ T27] Showing all locks held in the system: [ 652.641252][ T27] 1 lock held by rcu_tasks_kthre/12: [ 652.653488][ T27] #0: ffffffff8c92b430 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 652.664310][ T27] 1 lock held by rcu_tasks_trace/13: [ 652.669697][ T27] #0: ffffffff8c92bc50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 652.680774][ T27] 1 lock held by khungtaskd/27: [ 652.685867][ T27] #0: ffffffff8c92aaa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 652.696141][ T27] 3 locks held by kworker/u4:2/40: [ 652.701760][ T27] 2 locks held by getty/4016: [ 652.706591][ T27] #0: ffff88807f550098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 652.716640][ T27] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 652.727167][ T27] 4 locks held by udevd/4386: [ 652.731892][ T27] #0: ffff8880318e9c30 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 652.740924][ T27] #1: ffff888058e4ac88 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3b0 [ 652.750727][ T27] #2: ffff8880334ac008 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3b0 [ 652.760322][ T27] #3: ffff88805887d190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x16c/0x320 [ 652.769530][ T27] 6 locks held by kworker/0:11/4559: [ 652.774932][ T27] #0: ffff8881446b3538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 652.785940][ T27] #1: ffffc90004cafd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 652.797335][ T27] #2: ffff888027b55190 (&dev->mutex){....}-{3:3}, at: hub_event+0x185/0x5210 [ 652.807371][ T27] #3: ffff88805887d190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 652.816805][ T27] #4: ffff888025047118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x460 [ 652.826414][ T27] #5: ffffffff8c930640 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x600 [ 652.836545][ T27] 1 lock held by syz-executor/12033: [ 652.842142][ T27] #0: ffff888078e6a0e0 (&type->s_umount_key#97){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 652.852893][ T27] 1 lock held by syz.8.5534/17745: [ 652.858174][ T27] #0: ffff888078e6a0e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 652.871850][ T27] 2 locks held by dhcpcd/20203: [ 652.876942][ T27] #0: ffff888037544130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xce0 [ 652.886827][ T27] #1: ffffffff8c930778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 652.898402][ T27] [ 652.900961][ T27] ============================================= [ 652.900961][ T27] [ 652.912428][ T27] NMI backtrace for cpu 1 [ 652.916814][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 652.924747][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 652.930258][ T4559] usb 5-1: USB disconnect, device number 34 [ 652.934815][ T27] Call Trace: [ 652.934831][ T27] [ 652.934840][ T27] dump_stack_lvl+0x168/0x22e [ 652.934871][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 652.934903][ T27] ? show_regs_print_info+0x12/0x12 [ 652.962331][ T27] ? load_image+0x3b0/0x3b0 [ 652.966865][ T27] ? vprintk_emit+0x571/0x680 [ 652.971567][ T27] ? printk_sprint+0x460/0x460 [ 652.976351][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 652.981304][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 652.987486][ T27] ? _printk+0xcc/0x110 [ 652.991679][ T27] ? load_image+0x3b0/0x3b0 [ 652.996217][ T27] ? load_image+0x3b0/0x3b0 [ 653.000758][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 653.006869][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 653.012883][ T27] watchdog+0xeee/0xf30 [ 653.017090][ T27] ? watchdog+0x1ed/0xf30 [ 653.021451][ T27] kthread+0x29d/0x330 [ 653.025538][ T27] ? hungtask_pm_notify+0x40/0x40 [ 653.030587][ T27] ? kthread_blkcg+0xd0/0xd0 [ 653.035281][ T27] ret_from_fork+0x1f/0x30 [ 653.039716][ T27] [ 653.042798][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.049720][ T27] Sending NMI from CPU 1 to CPUs 0: [ 653.055270][ C0] NMI backtrace for cpu 0 [ 653.055285][ C0] CPU: 0 PID: 4386 Comm: udevd Not tainted 6.1.141-syzkaller #0 [ 653.055300][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.055309][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 653.055334][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 653.055347][ C0] RSP: 0018:ffffc90004917148 EFLAGS: 00000202 [ 653.055362][ C0] RAX: 0000000000000000 RBX: ffffc90004917288 RCX: 0000000000000000 [ 653.055372][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900049172e8 [ 653.055383][ C0] RBP: ffffffff8e7cb53c R08: dffffc0000000000 R09: ffffc900049172d8 [ 653.055394][ C0] R10: fffff52000922e5d R11: 1ffff92000922e5b R12: 1ffff92000922e52 [ 653.055405][ C0] R13: dffffc0000000000 R14: ffffc900049172d8 R15: ffffc900049172bd [ 653.055416][ C0] FS: 00007f045ca41880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 653.055430][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.055441][ C0] CR2: 0000001b2dc16ff8 CR3: 000000007e96a000 CR4: 00000000003506f0 [ 653.055457][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 653.055466][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 653.055475][ C0] Call Trace: [ 653.055481][ C0] [ 653.055486][ C0] unwind_next_frame+0xb8a/0x20b0 [ 653.055507][ C0] ? __unwind_start+0xee/0x740 [ 653.055526][ C0] __unwind_start+0x5bb/0x740 [ 653.055542][ C0] ? stack_trace_save+0xe0/0xe0 [ 653.055558][ C0] arch_stack_walk+0xda/0x140 [ 653.055576][ C0] ? arch_stack_walk+0xda/0x140 [ 653.055593][ C0] stack_trace_save+0x98/0xe0 [ 653.055609][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 653.055626][ C0] ? mark_lock+0x94/0x320 [ 653.055647][ C0] kasan_save_stack+0x3a/0x60 [ 653.055688][ C0] ? __phys_addr+0xb6/0x170 [ 653.055706][ C0] __kasan_record_aux_stack+0xb2/0xc0 [ 653.055721][ C0] ? __d_free_external+0x60/0x60 [ 653.055737][ C0] call_rcu+0x14b/0x970 [ 653.055758][ C0] ? __dentry_kill+0x4e7/0x650 [ 653.055774][ C0] ? rcu_force_quiescent_state+0x230/0x230 [ 653.055794][ C0] ? __rwlock_init+0x140/0x140 [ 653.055813][ C0] ? iput+0x768/0x980 [ 653.055829][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 653.055850][ C0] __dentry_kill+0x4ef/0x650 [ 653.055866][ C0] dentry_kill+0xb8/0x290 [ 653.055879][ C0] ? dput+0x37/0x1d0 [ 653.055892][ C0] dput+0xfa/0x1d0 [ 653.055905][ C0] lookup_fast+0x318/0x4d0 [ 653.055922][ C0] ? inode_permission+0xef/0x480 [ 653.055935][ C0] ? bpf_lsm_inode_permission+0x5/0x10 [ 653.055955][ C0] ? security_inode_permission+0xac/0xf0 [ 653.055975][ C0] link_path_walk+0x5f2/0xe50 [ 653.055999][ C0] ? handle_lookup_down+0x130/0x130 [ 653.056016][ C0] ? percpu_counter_add_batch+0x13b/0x160 [ 653.056034][ C0] path_openat+0x276/0x2e70 [ 653.056058][ C0] ? do_sys_openat2+0xcf/0x490 [ 653.056076][ C0] ? __x64_sys_openat+0x135/0x160 [ 653.056094][ C0] ? do_syscall_64+0x4c/0xa0 [ 653.056115][ C0] ? do_filp_open+0x3c0/0x3c0 [ 653.056147][ C0] do_filp_open+0x1c1/0x3c0 [ 653.056163][ C0] ? vfs_tmpfile+0x480/0x480 [ 653.056188][ C0] ? _raw_spin_unlock+0x24/0x40 [ 653.056208][ C0] ? alloc_fd+0x58f/0x630 [ 653.056231][ C0] do_sys_openat2+0x142/0x490 [ 653.056250][ C0] ? __x64_sys_recvmsg+0x202/0x2b0 [ 653.056271][ C0] ? do_sys_open+0xe0/0xe0 [ 653.056290][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 653.056309][ C0] ? lock_chain_count+0x20/0x20 [ 653.056329][ C0] __x64_sys_openat+0x135/0x160 [ 653.056350][ C0] do_syscall_64+0x4c/0xa0 [ 653.056366][ C0] ? clear_bhb_loop+0x60/0xb0 [ 653.056379][ C0] ? clear_bhb_loop+0x60/0xb0 [ 653.056393][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 653.056414][ C0] RIP: 0033:0x7f045c2a7407 [ 653.056426][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 653.056438][ C0] RSP: 002b:00007ffd254906e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 653.056453][ C0] RAX: ffffffffffffffda RBX: 00007f045ca41880 RCX: 00007f045c2a7407 [ 653.056464][ C0] RDX: 0000000000080000 RSI: 00007ffd25490860 RDI: ffffffffffffff9c [ 653.056474][ C0] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 653.056483][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00005631c26a37f5 [ 653.056492][ C0] R13: 00005631c26a37f5 R14: 0000000000000001 R15: 00005631c26be140 [ 653.056509][ C0] [ 653.513187][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 653.520088][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.141-syzkaller #0 [ 653.528012][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.538187][ T27] Call Trace: [ 653.541495][ T27] [ 653.544451][ T27] dump_stack_lvl+0x168/0x22e [ 653.549169][ T27] ? memcpy+0x3c/0x60 [ 653.553200][ T27] ? show_regs_print_info+0x12/0x12 [ 653.558416][ T27] ? load_image+0x3b0/0x3b0 [ 653.562918][ T27] panic+0x2c9/0x710 [ 653.566820][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 653.572468][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 653.577077][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 653.582639][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 653.588899][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 653.595158][ T27] watchdog+0xf2d/0xf30 [ 653.599324][ T27] ? watchdog+0x1ed/0xf30 [ 653.603662][ T27] kthread+0x29d/0x330 [ 653.607746][ T27] ? hungtask_pm_notify+0x40/0x40 [ 653.612779][ T27] ? kthread_blkcg+0xd0/0xd0 [ 653.617379][ T27] ret_from_fork+0x1f/0x30 [ 653.621904][ T27] [ 653.625208][ T27] Kernel Offset: disabled [ 653.629542][ T27] Rebooting in 86400 seconds..