last executing test programs: 2m27.941190539s ago: executing program 3 (id=6079): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2m26.375981906s ago: executing program 3 (id=6103): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8802) poll(&(0x7f0000000140)=[{r0, 0x1104}], 0x1, 0x10000) 2m26.236697261s ago: executing program 3 (id=6106): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$alg(r0, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis256-generic)\x00'}, 0x58) 2m26.074256378s ago: executing program 3 (id=6109): r0 = fsopen(&(0x7f00000001c0)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x6, 0x0, 0x0, 0x0) 2m25.914900725s ago: executing program 3 (id=6113): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m24.835693211s ago: executing program 3 (id=6133): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=0x0], 0xff, 0x213, &(0x7f0000000240)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 2m9.776266433s ago: executing program 32 (id=6133): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRES32=0x0], 0xff, 0x213, &(0x7f0000000240)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 1m6.288938812s ago: executing program 5 (id=7404): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27, 0x0, 0x3}, 0x6) 1m6.084061481s ago: executing program 5 (id=7406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000000800000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m5.840984721s ago: executing program 5 (id=7409): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x24040054) 1m5.663202529s ago: executing program 5 (id=7411): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@errors_continue}, {}]}, 0x1, 0x1524, &(0x7f0000007640)="$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") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0) 1m5.237151306s ago: executing program 5 (id=7418): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@loopback, 0x3503, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x0, 0x0, 0x1, 0x0, 0xabf, 0x1000000}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@multicast1, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x23c}}, 0x0) 1m4.638484942s ago: executing program 5 (id=7429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}}, 0x0) 1m4.250615158s ago: executing program 33 (id=7429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}]}, 0x60}}, 0x0) 38.282983687s ago: executing program 2 (id=7696): r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x80280) ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0xc41, 0x8, 0x19, 0x6752}}) 38.018451328s ago: executing program 2 (id=7701): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) geteuid() 37.655967003s ago: executing program 2 (id=7704): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1002, 0x0, 0x8012, r0, 0x83000000) 37.379070085s ago: executing program 2 (id=7707): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, 0x0, 0x0}, 0x20) 37.2485567s ago: executing program 2 (id=7709): r0 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r0, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) 36.977555812s ago: executing program 2 (id=7711): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 21.859282897s ago: executing program 34 (id=7711): rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2.757151312s ago: executing program 7 (id=8140): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}}) 2.477225214s ago: executing program 7 (id=8142): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x3e}) 2.193805476s ago: executing program 1 (id=8146): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000280)={0x5, 0x10001, 0x80000001}, 0xc) 2.163649507s ago: executing program 7 (id=8147): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) 1.921987568s ago: executing program 1 (id=8150): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x4}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) 1.847315831s ago: executing program 7 (id=8151): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x2, @pix={0x0, 0x0, 0x56595559}}) 1.722838956s ago: executing program 4 (id=8153): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001480)={0x2, 0x1, 0x0, "585b1362680a43be8cdf1b9a9f1db0f766e9b6df3b88d7970c1a6a0b84178e35"}) 1.645415429s ago: executing program 1 (id=8154): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xb3, &(0x7f0000000140), &(0x7f0000000080)=0x4) 1.574761752s ago: executing program 7 (id=8155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x28580, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xcb) 1.540112554s ago: executing program 4 (id=8156): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="298b", 0x2}], 0x1, &(0x7f00000006c0)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0xc, 0x208, 0x1, 0x5, 0x6, 0x1, 0x6}}], 0x48, 0x44004}, 0x804) 1.489876237s ago: executing program 6 (id=8157): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000080)) 1.465105057s ago: executing program 0 (id=8158): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x702, 0xe, 0x0, &(0x7f0000000080)="e860334470b8d480eb00c15286f9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.41503853s ago: executing program 7 (id=8159): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 1.336040543s ago: executing program 1 (id=8160): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) close_range(r0, 0xffffffffffffffff, 0x0) 1.298743105s ago: executing program 4 (id=8161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x4000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.228907257s ago: executing program 6 (id=8162): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sysinfo(&(0x7f00000003c0)=""/149) 1.121009612s ago: executing program 0 (id=8163): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 1.062999354s ago: executing program 6 (id=8164): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[@sndrcv={0x30, 0x84, 0x1, {0xa14, 0xfff7, 0x7, 0xb9, 0x968, 0xe, 0x5, 0x1}}, @dstaddrv4={0x18, 0x84, 0x7, @empty}], 0x48, 0x4008010}, 0x10) 1.012024017s ago: executing program 1 (id=8165): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0x2020) 889.600862ms ago: executing program 0 (id=8166): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000008000000000000000000000000ffff00000000be14144416000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 814.923195ms ago: executing program 6 (id=8167): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) 814.377695ms ago: executing program 1 (id=8168): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000180)={[{@utf8}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '862'}}, {@utf8no}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@utf8}, {@shortname_lower}]}, 0x82, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 745.503798ms ago: executing program 4 (id=8169): r0 = socket(0x15, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 575.018085ms ago: executing program 0 (id=8170): r0 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_RESUME(r0, 0x4147, 0x0) 481.625249ms ago: executing program 4 (id=8171): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)={0x30, 0x2, 0x2, 0xd07, 0x0, 0x0, {}, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'netbios-ns\x00'}]}, 0x30}}, 0x0) 480.500549ms ago: executing program 6 (id=8172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x90, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4c, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) 260.721859ms ago: executing program 0 (id=8173): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x101, 0x6, 0x2, {0xa, @sdr={0x32435750, 0x9}}, 0x10001}) 200.525191ms ago: executing program 4 (id=8174): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x10001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x40, 0x1, 0x2, "d557a8c04bde10000000009680000000000000000000000000000000000e00", 0x50323234}) 76.357446ms ago: executing program 6 (id=8175): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') write$tcp_mem(r0, 0x0, 0x0) 0s ago: executing program 0 (id=8176): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) close(r0) kernel console output (not intermixed with test programs): [ 494.208898][ T4405] buffer_io_error: 14 callbacks suppressed [ 494.208913][ T4405] Buffer I/O error on dev loop1, logical block 0, async page read [ 494.243569][T18213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.270265][T18213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.347400][T18213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.398290][ T47] Bluetooth: hci5: command 0x0409 tx timeout [ 494.565551][T18213] device hsr_slave_0 entered promiscuous mode [ 494.619403][T18213] device hsr_slave_1 entered promiscuous mode [ 494.694499][T18213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.703664][T18213] Cannot create hsr debugfs directory [ 494.739171][T18301] netlink: 'syz.1.6436': attribute type 1 has an invalid length. [ 494.935706][T18306] netlink: 'syz.2.6438': attribute type 10 has an invalid length. [ 494.967985][T18306] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6438'. [ 495.025412][T18306] batman_adv: batadv0: Interface deactivated: vlan1 [ 495.345218][T18325] printk: syz.1.6446 (18325): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 495.420977][T18306] batman_adv: batadv0: Removing interface: vlan1 [ 495.699387][T18321] netlink: 'syz.4.6445': attribute type 2 has an invalid length. [ 495.730537][T18321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6445'. [ 495.975706][T18341] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6455'. [ 496.064022][T18213] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 496.139009][T18213] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 496.186544][T18213] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 496.196632][T18213] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 496.221418][T18351] netlink: 'syz.0.6459': attribute type 20 has an invalid length. [ 496.225367][T18353] x_tables: duplicate entry at hook 1 [ 496.229309][T18351] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.317261][ T2309] pvrusb2: request_firmware fatal error with code=-110 [ 496.330339][ T2309] pvrusb2: Failure uploading firmware1 [ 496.335904][ T2309] pvrusb2: Device initialization was not successful. [ 496.343730][ T2309] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 496.355203][ T2309] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 496.365079][ T4329] pvrusb2: Device being rendered inoperable [ 496.470582][ T47] Bluetooth: hci5: command 0x041b tx timeout [ 496.485278][T18365] netlink: 'syz.0.6464': attribute type 3 has an invalid length. [ 496.494902][T18365] netlink: 'syz.0.6464': attribute type 1 has an invalid length. [ 496.637361][T18213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.683400][T18372] loop2: detected capacity change from 0 to 512 [ 496.731266][T18213] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.759897][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 496.810944][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 496.832719][T18372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 496.860472][T18372] ext4 filesystem being mounted at /1300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.924009][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 496.950686][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 496.987656][T15350] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.994892][T15350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.025951][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 497.062870][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 497.072459][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 497.086442][T15350] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.093688][T15350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.150823][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 497.181790][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 497.223558][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 497.271501][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 497.295226][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.361969][T18213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 497.392385][T18213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.425386][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.461317][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.486634][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.521593][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.552899][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.601283][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.611145][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.648442][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.850171][T18415] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.878842][T18415] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.886432][T18415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.519018][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 498.541316][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 498.550792][ T47] Bluetooth: hci5: command 0x040f tx timeout [ 498.586231][T18213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.260598][ T5070] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 499.441744][T18473] netlink: get zone limit has 4 unknown bytes [ 499.452327][ T5070] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.473500][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 499.490996][ T5070] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.496564][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 499.540406][ T5070] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 499.545436][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 499.573880][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 499.580334][ T5070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.592530][T18213] device veth0_vlan entered promiscuous mode [ 499.627150][T18213] device veth1_vlan entered promiscuous mode [ 499.634494][ T5070] usb 2-1: config 0 descriptor?? [ 499.656448][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 499.671273][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 499.738803][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 499.743035][T18481] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6513'. [ 499.749181][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 499.807372][T18213] device veth0_macvtap entered promiscuous mode [ 499.832657][T18213] device veth1_macvtap entered promiscuous mode [ 499.890585][ T5070] usb 2-1: USB disconnect, device number 30 [ 499.918152][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 499.937277][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.961169][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 499.981417][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.005428][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.036141][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.078805][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.100713][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 500.122781][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.137046][T18213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.146003][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 500.165202][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 500.181839][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 500.208209][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 500.224151][T18489] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6517'. [ 500.250148][T18489] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 500.283224][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.328544][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.357539][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.391696][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.402248][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.413629][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.430607][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.472229][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.488476][T18213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 500.525167][T18213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 500.537115][T18213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.549763][T18495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6520'. [ 500.569451][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 500.589827][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 500.606422][T18213] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.636952][ T47] Bluetooth: hci5: command 0x0419 tx timeout [ 500.647062][T18213] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.689059][T18213] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.760380][T18213] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.008893][T15360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.025856][T18515] netlink: 'syz.4.6531': attribute type 3 has an invalid length. [ 501.044303][T15360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.054510][T18515] netlink: 46 bytes leftover after parsing attributes in process `syz.4.6531'. [ 501.056218][T18517] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 501.111375][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 501.188385][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.203781][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.267087][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 501.344822][T18527] netlink: 'syz.1.6536': attribute type 1 has an invalid length. [ 501.368674][T18527] netlink: 220 bytes leftover after parsing attributes in process `syz.1.6536'. [ 501.433096][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.758001][T18541] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6542'. [ 502.367293][T18567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6554'. [ 503.376390][T18611] netlink: 'syz.0.6577': attribute type 10 has an invalid length. [ 503.417573][T18611] netlink: 55 bytes leftover after parsing attributes in process `syz.0.6577'. [ 503.417700][T18613] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.503871][T18615] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 504.349056][T18645] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 504.370307][T18645] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 504.389745][T18645] overlayfs: missing 'lowerdir' [ 504.666113][T18649] SET target dimension over the limit! [ 505.234038][T18661] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6602'. [ 505.382279][T18659] loop2: detected capacity change from 0 to 4096 [ 505.440591][T18659] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 506.245554][T18690] loop2: detected capacity change from 0 to 64 [ 506.318206][T18690] syz.2.6615: attempt to access beyond end of device [ 506.318206][T18690] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 506.407432][T18690] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 506.443173][T18690] syz.2.6615: attempt to access beyond end of device [ 506.443173][T18690] loop2: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 506.491639][T18690] Buffer I/O error on dev loop2, logical block 134217734, async page read [ 506.680456][ T5069] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 506.900784][ T5069] usb 2-1: Using ep0 maxpacket: 16 [ 506.908230][ T5069] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 506.934423][ T5069] usb 2-1: config 0 has no interface number 0 [ 506.978852][ T5069] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 506.994379][ T5069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.010266][ T5069] usb 2-1: Product: syz [ 507.021065][ T5069] usb 2-1: Manufacturer: syz [ 507.025828][ T5069] usb 2-1: SerialNumber: syz [ 507.044883][ T5069] usb 2-1: config 0 descriptor?? [ 507.080143][ T5069] hub 2-1:0.132: bad descriptor, ignoring hub [ 507.120283][ T5069] hub: probe of 2-1:0.132 failed with error -5 [ 507.149287][ T5069] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input20 [ 507.342520][T18730] ip6t_srh: unknown srh match flags 5294 [ 507.491249][ T5069] usb 2-1: USB disconnect, device number 31 [ 507.602419][T18739] loop5: detected capacity change from 0 to 2048 [ 507.652210][T18744] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 507.681649][T18737] loop2: detected capacity change from 0 to 4096 [ 507.709075][T18739] NILFS (loop5): error -2 truncating bmap (ino=16) [ 507.723789][T18737] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 507.769855][T18737] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 507.880020][T18737] ntfs3: loop2: no free space to extend mft [ 508.010959][T15361] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 508.050551][ T4267] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 508.056884][ T4267] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 508.081127][ T4267] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 508.091943][T15352] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 508.099161][ T4267] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 508.280137][T18754] loop1: detected capacity change from 0 to 256 [ 508.398621][T18754] FAT-fs (loop1): Directory bread(block 64) failed [ 508.415729][T18754] FAT-fs (loop1): Directory bread(block 65) failed [ 508.451098][T18754] FAT-fs (loop1): Directory bread(block 66) failed [ 508.457705][T18754] FAT-fs (loop1): Directory bread(block 67) failed [ 508.520571][T18754] FAT-fs (loop1): Directory bread(block 68) failed [ 508.527185][T18754] FAT-fs (loop1): Directory bread(block 69) failed [ 508.548733][T18754] FAT-fs (loop1): Directory bread(block 70) failed [ 508.560780][T18754] FAT-fs (loop1): Directory bread(block 71) failed [ 508.577996][T18754] FAT-fs (loop1): Directory bread(block 72) failed [ 508.628141][T18754] FAT-fs (loop1): Directory bread(block 73) failed [ 509.052533][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 509.052546][ T26] audit: type=1326 audit(1763754100.033:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc271d8f749 code=0x7ffc0000 [ 509.123337][T18784] loop5: detected capacity change from 0 to 2048 [ 509.158261][ T26] audit: type=1326 audit(1763754100.073:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc271d8f749 code=0x7ffc0000 [ 509.208801][ T26] audit: type=1326 audit(1763754100.073:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc271d8f783 code=0x7ffc0000 [ 509.263674][T18784] Alternate GPT is invalid, using primary GPT. [ 509.270066][T18784] loop5: p2 p3 p7 [ 509.305907][ T26] audit: type=1326 audit(1763754100.083:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc271d8e1ff code=0x7ffc0000 [ 509.376721][T18782] loop4: detected capacity change from 0 to 8192 [ 509.429268][ T26] audit: type=1326 audit(1763754100.103:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc271d8f7d7 code=0x7ffc0000 [ 509.500015][T18782] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 509.601680][T18782] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 509.621492][ T26] audit: type=1326 audit(1763754100.103:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc271d8df90 code=0x7ffc0000 [ 509.649189][T18782] REISERFS (device loop4): using ordered data mode [ 509.667203][T18782] reiserfs: using flush barriers [ 509.673951][ T26] audit: type=1326 audit(1763754100.103:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc271d8f34b code=0x7ffc0000 [ 509.704900][T18782] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 509.751081][ T26] audit: type=1326 audit(1763754100.173:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc271d8e3aa code=0x7ffc0000 [ 509.797810][T18782] REISERFS (device loop4): checking transaction log (loop4) [ 509.841007][T18782] REISERFS (device loop4): Using r5 hash to sort names [ 509.848947][T18805] loop2: detected capacity change from 0 to 512 [ 509.867015][ T26] audit: type=1326 audit(1763754100.173:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc271d8f34b code=0x7ffc0000 [ 509.907283][T18782] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 509.922391][T18805] EXT4-fs (loop2): orphan cleanup on readonly fs [ 509.942562][ T26] audit: type=1326 audit(1763754100.173:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18783 comm="syz.5.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc271d8f34b code=0x7ffc0000 [ 509.971761][ T4884] udevd[4884]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 509.979810][ T4489] udevd[4489]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 510.005135][ T4405] udevd[4405]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 510.056607][T18805] EXT4-fs warning (device loop2): ext4_xattr_inode_get:509: inode #11: comm syz.2.6673: EA inode hash validation failed [ 510.119055][T18805] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 510.138218][T18805] EXT4-fs (loop2): 1 orphan inode deleted [ 510.144418][T18805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 510.326057][ T4267] EXT4-fs (loop2): unmounting filesystem. [ 510.556030][T18821] loop5: detected capacity change from 0 to 512 [ 510.703278][T18828] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6683'. [ 510.822441][T18832] kernel read not supported for file /  (pid: 18832 comm: syz.1.6685) [ 511.127937][T18843] raw_sendmsg: syz.1.6690 forgot to set AF_INET. Fix it! [ 511.275624][T18850] loop2: detected capacity change from 0 to 1024 [ 511.344250][T18850] hfsplus: xattr searching failed [ 511.395862][T18848] loop4: detected capacity change from 0 to 4096 [ 511.457960][T15364] hfsplus: b-tree write err: -5, ino 4 [ 512.622106][T18855] loop1: detected capacity change from 0 to 32768 [ 512.732455][T18855] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 512.804287][T18898] ipt_rpfilter: unknown options [ 512.905158][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 513.105841][T18904] netlink: 'syz.5.6720': attribute type 4 has an invalid length. [ 513.367374][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6723'. [ 513.982861][T18892] loop2: detected capacity change from 0 to 32768 [ 514.450880][T18948] netlink: 'syz.5.6741': attribute type 2 has an invalid length. [ 514.472705][T18946] ipt_CLUSTERIP: Please specify destination IP [ 514.490542][T18948] netlink: 'syz.5.6741': attribute type 1 has an invalid length. [ 515.140437][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6748'. [ 515.176337][T18963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6748'. [ 516.059919][T18992] dns_resolver: Unsupported content type (240) [ 516.170526][ T5069] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 516.191831][T18970] loop2: detected capacity change from 0 to 32768 [ 516.252131][T18970] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 516.279905][T18970] (syz.2.6753,18970,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 516.304080][T18970] ocfs2: Unmounting device (7,2) on (node local) [ 516.363569][ T5069] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 516.384020][ T5069] usb 2-1: config 0 has no interface number 0 [ 516.413124][ T5069] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 516.430683][ T5069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.489574][ T5069] usb 2-1: Product: syz [ 516.499689][ T5069] usb 2-1: Manufacturer: syz [ 516.520043][ T5069] usb 2-1: SerialNumber: syz [ 516.536622][ T5069] usb 2-1: config 0 descriptor?? [ 516.554525][ T5069] hub 2-1:0.132: bad descriptor, ignoring hub [ 516.573707][ T5069] hub: probe of 2-1:0.132 failed with error -5 [ 516.606313][ T5069] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input22 [ 516.700639][T19008] netlink: 88 bytes leftover after parsing attributes in process `syz.0.6770'. [ 516.999315][T19018] netlink: 5 bytes leftover after parsing attributes in process `syz.0.6775'. [ 517.172258][ T4329] usb 2-1: USB disconnect, device number 32 [ 517.364305][T19028] loop4: detected capacity change from 0 to 256 [ 517.401048][T19028] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 517.567287][T19035] loop2: detected capacity change from 0 to 256 [ 517.639069][T19037] unsupported nlmsg_type 40 [ 517.646939][T19035] FAT-fs (loop2): Directory bread(block 64) failed [ 517.665221][T19035] FAT-fs (loop2): Directory bread(block 65) failed [ 517.710398][T19035] FAT-fs (loop2): Directory bread(block 66) failed [ 517.717022][T19035] FAT-fs (loop2): Directory bread(block 67) failed [ 517.777015][T19035] FAT-fs (loop2): Directory bread(block 68) failed [ 517.806357][T19035] FAT-fs (loop2): Directory bread(block 69) failed [ 517.818374][T19035] FAT-fs (loop2): Directory bread(block 70) failed [ 517.856300][T19035] FAT-fs (loop2): Directory bread(block 71) failed [ 517.874640][T19035] FAT-fs (loop2): Directory bread(block 72) failed [ 517.900375][T19035] FAT-fs (loop2): Directory bread(block 73) failed [ 518.130621][T19051] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 518.231234][T19055] netlink: 6 bytes leftover after parsing attributes in process `syz.5.6793'. [ 518.270749][T19055] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 518.318221][T19055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 518.563838][T19064] tmpfs: Bad value for 'mpol' [ 519.190696][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6809'. [ 519.268533][ T26] kauditd_printk_skb: 15 callbacks suppressed [ 519.268548][ T26] audit: type=1326 audit(1763754110.243:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19088 comm="syz.1.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 519.297365][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.410406][ T26] audit: type=1326 audit(1763754110.283:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19088 comm="syz.1.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 519.432781][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.520600][ T26] audit: type=1326 audit(1763754110.283:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19088 comm="syz.1.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 519.620803][ T26] audit: type=1326 audit(1763754110.283:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19088 comm="syz.1.6810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 520.731875][T19146] loop2: detected capacity change from 0 to 16 [ 520.741568][T19146] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 521.848181][T19189] loop4: detected capacity change from 0 to 128 [ 522.156446][T19200] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6865'. [ 522.180368][ T4329] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 522.372182][ T4329] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 522.434314][ T4329] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.460303][ T4329] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 522.482819][ T4329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.531481][ T4329] hub 3-1:4.0: USB hub found [ 522.641676][T19215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6872'. [ 522.708462][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6872'. [ 522.735640][ T4329] hub 3-1:4.0: 13 ports detected [ 522.741268][ T4329] usb 3-1: selecting invalid altsetting 1 [ 522.747045][ T4329] hub 3-1:4.0: Using single TT (err -22) [ 522.748617][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6872'. [ 522.773195][ T4329] hub 3-1:4.0: insufficient power available to use all downstream ports [ 522.893861][T19225] netlink: 'syz.1.6877': attribute type 3 has an invalid length. [ 522.902315][T19225] netlink: 766 bytes leftover after parsing attributes in process `syz.1.6877'. [ 522.942106][ T4329] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 522.948530][ T4329] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 522.993530][T19229] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 523.011005][ T4329] usb 3-1: USB disconnect, device number 25 [ 523.037527][T19229] Error parsing options; rc = [-22] [ 523.098447][T19233] xt_connbytes: Forcing CT accounting to be enabled [ 523.117877][T19233] xt_NFQUEUE: number of total queues is 0 [ 523.829515][ T26] audit: type=1326 audit(523.787:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19256 comm="syz.4.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35ed8f749 code=0x7ffc0000 [ 523.847272][T19259] netlink: 25 bytes leftover after parsing attributes in process `syz.5.6893'. [ 523.872627][ T26] audit: type=1326 audit(523.787:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19256 comm="syz.4.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7ff35ed8f749 code=0x7ffc0000 [ 523.959761][ T26] audit: type=1326 audit(523.787:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19256 comm="syz.4.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35ed8f749 code=0x7ffc0000 [ 524.030805][ T26] audit: type=1326 audit(523.787:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19256 comm="syz.4.6894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35ed8f749 code=0x7ffc0000 [ 524.613669][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6908'. [ 524.746349][T19289] netlink: set zone limit has 4 unknown bytes [ 525.050548][ T4329] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 525.230298][ T4329] usb 1-1: Using ep0 maxpacket: 32 [ 525.237879][ T4329] usb 1-1: unable to get BOS descriptor or descriptor too short [ 525.278807][ T4329] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 525.318827][ T4329] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 525.359846][ T4329] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 525.395516][ T4329] usb 1-1: config 128 has no interface number 0 [ 525.422427][ T4329] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 525.474488][ T4329] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.511895][ T4329] usb 1-1: config 128 interface 127 has no altsetting 0 [ 525.552547][ T4329] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 525.583238][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.614984][ T4329] usb 1-1: Product: syz [ 525.619288][ T4329] usb 1-1: Manufacturer: syz [ 525.624404][ T26] audit: type=1326 audit(525.577:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.5.6927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc271d8f749 code=0x7ffc0000 [ 525.651351][ T4329] usb 1-1: SerialNumber: syz [ 525.676116][ T26] audit: type=1326 audit(525.587:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.5.6927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc271d8f749 code=0x7ffc0000 [ 525.697798][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.724787][ T5062] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 525.767684][ T26] audit: type=1326 audit(525.587:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19324 comm="syz.5.6927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc271d8f749 code=0x7ffc0000 [ 525.920353][ T5062] usb 2-1: Using ep0 maxpacket: 32 [ 525.925868][ T4329] usb 1-1: USB disconnect, device number 26 [ 525.938767][ T5062] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 525.974430][ T5062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.024087][ T5062] usb 2-1: Product: syz [ 526.028374][ T5062] usb 2-1: Manufacturer: syz [ 526.037440][ T5062] usb 2-1: SerialNumber: syz [ 526.056032][ T5062] usb 2-1: config 0 descriptor?? [ 526.151166][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 526.279429][ T5062] f81534a_ctrl 2-1:0.0: failed to set register 0x116: -5 [ 526.290271][ T5062] f81534a_ctrl 2-1:0.0: failed to enable ports: -5 [ 526.296894][ T5062] f81534a_ctrl: probe of 2-1:0.0 failed with error -5 [ 526.355289][ T5062] usb 2-1: USB disconnect, device number 33 [ 526.540475][ T4329] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 526.735207][ T4329] usb 3-1: Using ep0 maxpacket: 32 [ 526.749108][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 526.776795][ T4329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 526.800089][ T4329] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 526.814979][ T4329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.833529][ T4329] usb 3-1: Product: syz [ 526.837773][ T4329] usb 3-1: Manufacturer: syz [ 526.855967][ T4329] usb 3-1: SerialNumber: syz [ 526.879472][ T4329] usb 3-1: config 0 descriptor?? [ 526.914950][ T4329] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23 [ 527.025926][T19370] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 527.139767][T19374] netlink: 'syz.4.6949': attribute type 4 has an invalid length. [ 527.191988][ T5069] usb 3-1: USB disconnect, device number 26 [ 527.217230][T19374] device veth1_macvtap left promiscuous mode [ 528.115188][T19410] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.778974][T19436] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6979'. [ 528.819753][T19436] device bridge4 entered promiscuous mode [ 528.966422][T19444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6983'. [ 529.470379][ T26] audit: type=1326 audit(529.427:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.0.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca638f749 code=0x7ffc0000 [ 529.589288][ T26] audit: type=1326 audit(529.447:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.0.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f7ca638f749 code=0x7ffc0000 [ 529.611201][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.704528][ T26] audit: type=1326 audit(529.447:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.0.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca638f749 code=0x7ffc0000 [ 529.814213][ T26] audit: type=1326 audit(529.447:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19463 comm="syz.0.6993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ca638f749 code=0x7ffc0000 [ 530.807515][T19514] loop1: detected capacity change from 0 to 1024 [ 530.913704][T19514] EXT4-fs: Ignoring removed orlov option [ 530.919434][T19514] EXT4-fs: Ignoring removed nomblk_io_submit option [ 531.080621][T19514] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 531.399016][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 531.738661][T19543] overlayfs: conflicting options: userxattr,redirect_dir=on [ 532.519027][T19576] loop5: detected capacity change from 0 to 1024 [ 532.724710][T19585] netlink: 772 bytes leftover after parsing attributes in process `syz.1.7052'. [ 533.041303][T19563] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 533.634625][T19620] loop5: detected capacity change from 0 to 256 [ 533.717284][T19620] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 533.732246][T19624] netlink: 'syz.0.7072': attribute type 10 has an invalid length. [ 533.754633][T19626] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 533.782022][T19624] team0: Port device wlan1 added [ 533.963966][T19620] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 533.970051][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7076'. [ 533.993392][T19620] exFAT-fs (loop5): Filesystem has been set read-only [ 534.214973][T19639] loop2: detected capacity change from 0 to 764 [ 534.283942][T19639] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 535.140724][ T4329] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 535.261606][T19679] loop4: detected capacity change from 0 to 164 [ 535.330433][ T4329] usb 1-1: Using ep0 maxpacket: 32 [ 535.338675][ T4329] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 535.364161][ T4329] usb 1-1: config 0 has no interface number 0 [ 535.391031][ T4329] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 535.418918][ T4329] usb 1-1: config 0 interface 1 has no altsetting 0 [ 535.438799][ T4329] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 535.450424][ T4321] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 535.470842][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.478911][ T4329] usb 1-1: Product: syz [ 535.492703][ T4329] usb 1-1: Manufacturer: syz [ 535.497371][ T4329] usb 1-1: SerialNumber: syz [ 535.520938][ T4329] usb 1-1: config 0 descriptor?? [ 535.623711][T19663] 9pnet_fd: p9_fd_create_tcp (19663): problem connecting socket to 127.0.0.1 [ 535.640426][ T4321] usb 6-1: Using ep0 maxpacket: 16 [ 535.649646][ T4321] usb 6-1: config 0 has no interfaces? [ 535.660862][ T4321] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 535.695702][ T4321] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.720862][ T4321] usb 6-1: Product: syz [ 535.730493][ T4321] usb 6-1: Manufacturer: syz [ 535.738965][ T4329] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 535.760606][ T4321] usb 6-1: SerialNumber: syz [ 535.769442][ T4329] cx231xx 1-1:0.1: Failed to read PCB config [ 535.780685][ T4321] r8152-cfgselector 6-1: config 0 descriptor?? [ 535.810318][ T4329] cx231xx: probe of 1-1:0.1 failed with error -71 [ 535.834478][ T4329] usb 1-1: USB disconnect, device number 27 [ 535.935929][T19693] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7105'. [ 536.032595][ T4321] usbip-host 6-1: 6-1 is not in match_busid table... skip! [ 536.087356][T15350] usb 6-1: config 0 descriptor?? [ 536.239688][T15350] usb 6-1: can't set config #0, error -71 [ 536.248591][ T5070] usb 6-1: USB disconnect, device number 2 [ 536.819542][T19722] loop1: detected capacity change from 0 to 2048 [ 536.847027][T19722] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 537.115983][ T26] audit: type=1326 audit(537.077:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19733 comm="syz.1.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 537.200327][ T26] audit: type=1326 audit(537.117:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19733 comm="syz.1.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 537.306402][ T26] audit: type=1326 audit(537.117:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19733 comm="syz.1.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 537.408226][T19741] loop4: detected capacity change from 0 to 256 [ 537.414778][ T26] audit: type=1326 audit(537.117:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19733 comm="syz.1.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 537.499872][T19741] FAT-fs (loop4): Directory bread(block 64) failed [ 537.524495][T19741] FAT-fs (loop4): Directory bread(block 65) failed [ 537.549137][T19741] FAT-fs (loop4): Directory bread(block 66) failed [ 537.572240][T19741] FAT-fs (loop4): Directory bread(block 67) failed [ 537.578929][T19741] FAT-fs (loop4): Directory bread(block 68) failed [ 537.624236][T19741] FAT-fs (loop4): Directory bread(block 69) failed [ 537.650641][T19741] FAT-fs (loop4): Directory bread(block 70) failed [ 537.657288][T19741] FAT-fs (loop4): Directory bread(block 71) failed [ 537.700504][T19741] FAT-fs (loop4): Directory bread(block 72) failed [ 537.726896][T19741] FAT-fs (loop4): Directory bread(block 73) failed [ 537.966650][T19758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7135'. [ 538.010545][T19761] binder: 19759:19761 ioctl 400c620e 0 returned -14 [ 538.017441][T19758] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7135'. [ 538.874021][T19796] netlink: 'syz.5.7154': attribute type 10 has an invalid length. [ 539.230807][T19809] netlink: 'syz.1.7159': attribute type 2 has an invalid length. [ 539.764022][T19830] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7171'. [ 540.445723][T19854] sp0: Synchronizing with TNC [ 540.727935][T19870] program syz.5.7191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 541.185453][T19888] 9pnet_fd: p9_fd_create_tcp (19888): problem connecting socket to 127.0.0.1 [ 541.896664][T19910] loop1: detected capacity change from 0 to 2048 [ 541.935882][T19910] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 542.012431][T19874] loop4: detected capacity change from 0 to 40427 [ 542.112761][T19874] F2FS-fs (loop4): Found nat_bits in checkpoint [ 542.347770][T19874] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 542.667387][ T4274] syz-executor: attempt to access beyond end of device [ 542.667387][ T4274] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 543.426509][T19922] loop5: detected capacity change from 0 to 40427 [ 543.453500][T19922] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 543.481526][T19922] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 543.610090][T19922] F2FS-fs (loop5): Found nat_bits in checkpoint [ 543.620715][T19959] loop4: detected capacity change from 0 to 1024 [ 543.765715][T19959] syz.4.7224: attempt to access beyond end of device [ 543.765715][T19959] loop4: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 543.822687][T19922] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 543.851022][T19959] Buffer I/O error on dev loop4, logical block 100663296, async page read [ 543.859837][T19922] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 543.879753][T19959] hfsplus: unable to mark blocks free: error -5 [ 543.890515][T19959] hfsplus: can't free extent [ 543.957256][T19966] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (aio_iiro_16) [ 544.482321][T19977] overlayfs: missing 'lowerdir' [ 544.820594][T19987] netlink: 'syz.4.7245': attribute type 1 has an invalid length. [ 544.828395][T19987] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7245'. [ 544.850213][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7247'. [ 546.022999][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7268'. [ 546.050455][T20035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7268'. [ 546.273168][T20041] loop4: detected capacity change from 0 to 2048 [ 546.309170][T20041] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 546.974796][T20066] loop2: detected capacity change from 0 to 256 [ 547.031529][T20066] exfat: Deprecated parameter 'utf8' [ 547.081941][T20066] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 547.190710][T20075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 547.580305][ T4329] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 547.817659][T20098] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7299'. [ 547.820425][ T4329] usb 2-1: Using ep0 maxpacket: 32 [ 547.869257][ T4329] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 547.887698][ T4329] usb 2-1: config 0 has no interface number 0 [ 547.904352][ T4329] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 547.935488][ T4329] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 547.971168][ T4329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.979245][ T4329] usb 2-1: Product: syz [ 548.030366][ T4329] usb 2-1: Manufacturer: syz [ 548.035054][ T4329] usb 2-1: SerialNumber: syz [ 548.059277][ T4329] usb 2-1: config 0 descriptor?? [ 548.072510][T20108] loop5: detected capacity change from 0 to 256 [ 548.081318][T20079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.306238][T20079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 548.533604][ T4329] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 548.550468][ T4329] asix: probe of 2-1:0.188 failed with error -71 [ 548.602060][ T4329] usb 2-1: USB disconnect, device number 34 [ 548.750529][ T5062] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 548.950272][ T5062] usb 1-1: Using ep0 maxpacket: 16 [ 548.957456][ T5062] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 548.983316][ T5062] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.003936][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7318'. [ 549.013417][ T5062] usb 1-1: config 0 has no interface number 0 [ 549.019783][T20137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.042615][ T5062] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 549.060299][ T5062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.079183][ T5062] usb 1-1: Product: syz [ 549.109607][ T5062] usb 1-1: Manufacturer: syz [ 549.126489][ T5062] usb 1-1: SerialNumber: syz [ 549.152752][ T5062] usb 1-1: config 0 descriptor?? [ 549.183614][ T5062] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 549.212679][ T5062] usb 1-1: No valid video chain found. [ 549.231740][T20139] netlink: 'syz.4.7319': attribute type 3 has an invalid length. [ 549.260029][T20139] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7319'. [ 549.386739][ T5062] usb 1-1: USB disconnect, device number 28 [ 549.481557][T20128] loop2: detected capacity change from 0 to 32768 [ 549.536575][T20128] (syz.2.7314,20128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 549.580642][T20128] (syz.2.7314,20128,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 549.638678][T20153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7326'. [ 549.654866][T20128] JBD2: Ignoring recovery information on journal [ 549.743925][T20128] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 549.883605][T20128] ocfs2: Unmounting device (7,2) on (node local) [ 550.029609][T20162] netlink: 'syz.5.7329': attribute type 10 has an invalid length. [ 550.060480][T20162] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7329'. [ 550.139474][T20162] team0: Port device geneve0 added [ 550.355246][T20169] SET target dimension over the limit! [ 550.857841][T20187] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 551.069056][T20197] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7345'. [ 551.356809][T20212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7352'. [ 551.387233][T20212] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7352'. [ 551.532575][T20209] loop1: detected capacity change from 0 to 4096 [ 551.910952][ T4321] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 552.100469][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 552.109333][ T4321] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.125254][ T4321] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.135631][ T4321] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 552.189985][ T4321] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 552.209873][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 552.230112][ T4321] usb 5-1: Product: syz [ 552.270725][ T4321] usb 5-1: Manufacturer: syz [ 552.275397][ T4321] usb 5-1: SerialNumber: syz [ 552.319489][ T4321] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input25 [ 552.348121][T20236] netlink: 'syz.2.7366': attribute type 2 has an invalid length. [ 552.565895][ T4321] usb 5-1: USB disconnect, device number 28 [ 552.609602][ T4321] appletouch 5-1:1.0: input: appletouch disconnected [ 552.797948][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7370'. [ 552.816311][T20245] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7370'. [ 552.997102][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7371'. [ 553.168789][T20253] loop2: detected capacity change from 0 to 4096 [ 553.250656][T20256] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 553.319656][T20253] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 553.587914][T20267] netlink: 'syz.5.7380': attribute type 3 has an invalid length. [ 553.618336][T20267] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7380'. [ 553.631560][T20270] netlink: 'syz.2.7382': attribute type 10 has an invalid length. [ 553.680678][T20270] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7382'. [ 553.774577][T20270] device geneve0 entered promiscuous mode [ 553.813505][T20270] team0: Port device geneve0 added [ 554.725725][T20305] netlink: 'syz.5.7399': attribute type 1 has an invalid length. [ 554.806766][T20307] loop2: detected capacity change from 0 to 256 [ 554.874403][T20307] FAT-fs (loop2): Directory bread(block 64) failed [ 554.881293][T20307] FAT-fs (loop2): Directory bread(block 65) failed [ 554.888063][T20307] FAT-fs (loop2): Directory bread(block 66) failed [ 554.942465][T20307] FAT-fs (loop2): Directory bread(block 67) failed [ 554.987538][T20307] FAT-fs (loop2): Directory bread(block 68) failed [ 555.031904][T20307] FAT-fs (loop2): Directory bread(block 69) failed [ 555.038663][T20307] FAT-fs (loop2): Directory bread(block 70) failed [ 555.100954][T20307] FAT-fs (loop2): Directory bread(block 71) failed [ 555.107644][T20307] FAT-fs (loop2): Directory bread(block 72) failed [ 555.144205][T20307] FAT-fs (loop2): Directory bread(block 73) failed [ 555.353236][T20325] netlink: 'syz.4.7408': attribute type 11 has an invalid length. [ 555.353261][T20325] netlink: 'syz.4.7408': attribute type 2 has an invalid length. [ 555.559716][T20329] loop5: detected capacity change from 0 to 256 [ 555.580599][T20329] exfat: Deprecated parameter 'namecase' [ 555.658180][T20329] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 555.902497][T20341] netlink: 'syz.1.7416': attribute type 9 has an invalid length. [ 556.342217][T20358] loop2: detected capacity change from 0 to 256 [ 556.426134][T20358] FAT-fs (loop2): Directory bread(block 64) failed [ 556.500431][T20358] FAT-fs (loop2): Directory bread(block 65) failed [ 556.507206][T20358] FAT-fs (loop2): Directory bread(block 66) failed [ 556.560508][T20358] FAT-fs (loop2): Directory bread(block 67) failed [ 556.567240][T20358] FAT-fs (loop2): Directory bread(block 68) failed [ 556.597864][T20363] netlink: 'syz.1.7426': attribute type 1 has an invalid length. [ 556.608511][T20358] FAT-fs (loop2): Directory bread(block 69) failed [ 556.640680][T20358] FAT-fs (loop2): Directory bread(block 70) failed [ 556.652027][T20358] FAT-fs (loop2): Directory bread(block 71) failed [ 556.679674][T20358] FAT-fs (loop2): Directory bread(block 72) failed [ 556.697667][T15361] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.710506][T20358] FAT-fs (loop2): Directory bread(block 73) failed [ 557.014728][T15361] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.142418][T15361] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.188191][T20375] overlayfs: unrecognized mount option "\" or missing value [ 557.250367][ T4344] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 557.266761][T15361] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.450470][ T4344] usb 5-1: Using ep0 maxpacket: 32 [ 557.460770][ T4344] usb 5-1: config 4 has an invalid interface number: 128 but max is 0 [ 557.499648][ T4344] usb 5-1: config 4 has no interface number 0 [ 557.532568][ T4344] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.577453][ T4344] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.624117][ T4344] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 557.641018][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.681244][ T4344] hub 5-1:4.128: USB hub found [ 557.703343][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.715741][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.725880][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.753315][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.765568][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 557.773502][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.882728][T20394] loop2: detected capacity change from 0 to 16 [ 557.889199][ T4344] hub 5-1:4.128: 2 ports detected [ 557.894476][ T4344] hub 5-1:4.128: Using single TT (err -22) [ 557.950975][T20394] erofs: (device loop2): mounted with root inode @ nid 36. [ 557.998364][T20394] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 558.078571][T20394] erofs: (device loop2): z_erofs_do_map_blocks: inconsistent algorithmtype 0 for nid 36 [ 558.094536][ T4344] hub 5-1:4.128: hub_hub_status failed (err = -71) [ 558.114059][ T4344] hub 5-1:4.128: config failed, can't get hub status (err -71) [ 558.125958][T20394] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 558.191030][ T4344] usb 5-1: USB disconnect, device number 29 [ 559.255940][T20386] chnl_net:caif_netlink_parms(): no params data found [ 559.497859][ T26] audit: type=1326 audit(559.457:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35ed8f749 code=0x7ffc0000 [ 559.605371][ T26] audit: type=1326 audit(559.497:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7ff35ed8f749 code=0x7ffc0000 [ 559.787379][ T26] audit: type=1326 audit(559.497:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35ed8f749 code=0x7ffc0000 [ 559.809240][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.825180][ T26] audit: type=1326 audit(559.497:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20439 comm="syz.4.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35ed8f749 code=0x7ffc0000 [ 559.846950][ C1] vkms_vblank_simulate: vblank timer overrun [ 559.850648][ T4277] Bluetooth: hci5: command 0x0409 tx timeout [ 560.162855][T20386] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.180430][T20386] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.188898][T20386] device bridge_slave_0 entered promiscuous mode [ 560.244081][T20386] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.260744][T20386] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.292374][T20386] device bridge_slave_1 entered promiscuous mode [ 560.755818][T20386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.775161][T20478] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7475'. [ 560.869541][T20386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.000069][T15361] device hsr_slave_0 left promiscuous mode [ 561.024212][T15361] device hsr_slave_1 left promiscuous mode [ 561.065554][T15361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.090151][T15361] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.168521][T15361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.181570][T20495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7482'. [ 561.204839][T15361] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.239507][T15361] device bridge_slave_1 left promiscuous mode [ 561.263350][T15361] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.425881][T15361] device bridge_slave_0 left promiscuous mode [ 561.437804][T20501] overlayfs: missing 'lowerdir' [ 561.441141][T15361] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.657021][T15361] device veth1_macvtap left promiscuous mode [ 561.674860][T15361] device veth0_macvtap left promiscuous mode [ 561.690737][T15361] device veth1_vlan left promiscuous mode [ 561.712280][T15361] device veth0_vlan left promiscuous mode [ 561.910303][ T4277] Bluetooth: hci5: command 0x041b tx timeout [ 562.108466][T20530] CIFS: VFS: Malformed UNC in devname [ 562.876532][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.047553][T15361] team0 (unregistering): Port device geneve0 removed [ 563.675176][T20568] loop1: detected capacity change from 0 to 64 [ 563.988788][T20570] loop1: detected capacity change from 0 to 4096 [ 564.000625][ T4277] Bluetooth: hci5: command 0x040f tx timeout [ 564.009656][T20570] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 564.124763][T15361] team0 (unregistering): Port device team_slave_1 removed [ 564.293027][T15361] team0 (unregistering): Port device team_slave_0 removed [ 564.447335][T15361] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.601323][T15361] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.695238][T20578] loop1: detected capacity change from 0 to 1024 [ 565.455499][T20584] loop1: detected capacity change from 0 to 32768 [ 565.550537][T20584] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 565.599263][T20584] (syz.1.7520,20584,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 565.645684][T20584] (syz.1.7520,20584,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 565.673893][T20584] (syz.1.7520,20584,1):ocfs2_mknod:298 ERROR: status = -2 [ 565.721267][T20584] (syz.1.7520,20584,1):ocfs2_mknod:502 ERROR: status = -2 [ 565.728489][T20584] (syz.1.7520,20584,1):ocfs2_mkdir:659 ERROR: status = -2 [ 565.815373][T15361] bond0 (unregistering): Released all slaves [ 565.823642][ T4265] ocfs2: Unmounting device (7,1) on (node local) [ 565.960742][T20541] netlink: 'syz.0.7499': attribute type 21 has an invalid length. [ 565.968759][T20541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7499'. [ 566.058576][T20564] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 566.074870][ T4277] Bluetooth: hci5: command 0x0419 tx timeout [ 566.139099][T20386] team0: Port device team_slave_0 added [ 566.195704][T15352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 566.231123][T15352] bridge0: port 3(team0) entered blocking state [ 566.237533][T15352] bridge0: port 3(team0) entered listening state [ 566.271449][T20386] team0: Port device team_slave_1 added [ 566.478535][T20386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.500570][T20386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.629409][T20386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.716493][T20386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.745852][T20386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.829361][T20386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.008688][T20386] device hsr_slave_0 entered promiscuous mode [ 567.041954][T20386] device hsr_slave_1 entered promiscuous mode [ 567.068244][T20616] usb usb8: usbfs: process 20616 (syz.4.7532) did not claim interface 8 before use [ 567.078021][T20386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 567.100945][T20386] Cannot create hsr debugfs directory [ 567.494573][T20595] block device autoloading is deprecated and will be removed. [ 567.508197][T20624] block device autoloading is deprecated and will be removed. [ 567.527193][T20595] loop0: detected capacity change from 0 to 32768 [ 567.641245][T20595] XFS (loop0): Mounting V5 Filesystem [ 567.695542][T20386] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 567.722512][T20386] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 567.753314][T20386] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 567.779104][T20595] XFS (loop0): Ending clean mount [ 567.781133][T20386] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 567.808272][T20595] XFS (loop0): Quotacheck needed: Please wait. [ 568.023522][T20386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.060926][T20595] XFS (loop0): Quotacheck: Done. [ 568.131895][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.165363][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.214381][T20386] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.263173][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 568.280430][T20659] netlink: 248 bytes leftover after parsing attributes in process `syz.1.7543'. [ 568.298673][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.329017][T15364] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.336255][T15364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.382376][ T4266] XFS (loop0): Unmounting Filesystem [ 568.412546][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.432930][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 568.461236][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 568.489013][T15364] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.496258][T15364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.568828][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 568.623906][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 568.661370][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 568.680405][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 568.711575][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 568.743596][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 568.784914][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 568.851657][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 568.873918][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 568.908932][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 568.930726][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 568.942447][T20671] loop1: detected capacity change from 0 to 4096 [ 568.946219][T20386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 568.977548][T20671] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 569.134015][T20671] ntfs3: loop1: failed to convert "c46c" to cp1251 [ 569.218038][T20661] loop2: detected capacity change from 0 to 32768 [ 569.288459][T20678] x_tables: duplicate underflow at hook 4 [ 569.323613][T20661] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 569.389272][T20661] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 569.598253][ T4267] ocfs2: Unmounting device (7,2) on (node local) [ 569.888564][T20692] loop2: detected capacity change from 0 to 2048 [ 569.957506][T20692] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 570.240629][T15352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 570.260738][T15352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 570.292278][T20386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.615893][T20713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7545'. [ 570.759340][T20719] netlink: 'syz.2.7562': attribute type 27 has an invalid length. [ 570.791416][T20719] netlink: 'syz.2.7562': attribute type 3 has an invalid length. [ 570.830715][T20719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7562'. [ 571.090514][ T4375] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 571.292195][ T4375] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 571.310656][ T4375] usb 5-1: config 0 has no interface number 0 [ 571.328980][ T4375] usb 5-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 571.373125][ T4375] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 571.410538][ T4375] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.489944][ T4375] usb 5-1: Product: syz [ 571.500102][ T4375] usb 5-1: Manufacturer: syz [ 571.530961][ T4375] usb 5-1: SerialNumber: syz [ 571.572651][ T4375] usb 5-1: config 0 descriptor?? [ 571.800560][ T4375] usb 5-1: USB disconnect, device number 30 [ 571.881674][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 571.899249][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 571.979315][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 572.002568][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 572.015572][T20386] device veth0_vlan entered promiscuous mode [ 572.028053][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 572.043354][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 572.066866][T20386] device veth1_vlan entered promiscuous mode [ 572.144032][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 572.179385][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 572.199769][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 572.222564][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 572.264119][T20386] device veth0_macvtap entered promiscuous mode [ 572.294007][T20386] device veth1_macvtap entered promiscuous mode [ 572.306504][T20762] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7577'. [ 572.360062][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.417103][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.453419][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.500303][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.530424][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.578509][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.617495][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.654041][ T4405] udevd[4405]: inotify_add_watch(7, /dev/nbd4p5, 10) failed: No such file or directory [ 572.675519][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.726549][T20386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.783572][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 572.799587][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 572.847775][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.889135][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 572.906452][T20783] loop4: detected capacity change from 0 to 512 [ 572.932239][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.955087][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.987296][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.019696][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.053359][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.054764][T20783] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 573.064037][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.064129][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.064148][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.064160][T20386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.064173][T20386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.065966][T20386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.300526][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 573.329862][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 573.386910][T20386] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.420291][T20386] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.440317][ T4344] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 573.490057][T20386] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.526513][T20386] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.652780][ T4344] usb 5-1: unable to get BOS descriptor or descriptor too short [ 573.681491][ T4344] usb 5-1: not running at top speed; connect to a high speed hub [ 573.694212][ T4344] usb 5-1: config 1 has an invalid descriptor of length 252, skipping remainder of the config [ 573.751425][ T4344] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 573.823695][ T4344] usb 5-1: too many endpoints for config 1 interface 1 altsetting 143: 86, using maximum allowed: 30 [ 573.856085][T15348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.911384][T15348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.930761][ T4344] usb 5-1: config 1 interface 1 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 573.969578][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 573.990875][T15350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.000062][ T4344] usb 5-1: config 1 interface 1 has no altsetting 0 [ 574.054472][ T4344] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 574.060824][T15350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.095641][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 574.123540][T15348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 574.158252][ T4344] usb 5-1: Product: syz [ 574.184153][ T4344] usb 5-1: Manufacturer: syz [ 574.188835][ T4344] usb 5-1: SerialNumber: syz [ 574.237087][T20783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 574.472023][ T4344] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 574.523957][ T4344] usb 5-1: USB disconnect, device number 31 [ 574.908818][T20829] loop1: detected capacity change from 0 to 4096 [ 574.941671][T20829] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 575.046492][T20829] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 575.136752][ T4274] EXT4-fs (loop4): unmounting filesystem. [ 575.410773][T20847] loop4: detected capacity change from 0 to 256 [ 575.438444][T20847] exfat: Deprecated parameter 'namecase' [ 575.507557][T20847] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe697, utbl_chksum : 0xe619d30d) [ 575.841353][T20822] loop0: detected capacity change from 0 to 32768 [ 575.882035][T20822] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.7598 (20822) [ 576.032937][T20822] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 576.046879][T20860] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 576.090568][T20822] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 576.099931][T20822] BTRFS info (device loop0): using free space tree [ 576.512319][T20822] BTRFS info (device loop0): enabling ssd optimizations [ 576.710650][T20893] netlink: 'syz.6.7616': attribute type 39 has an invalid length. [ 576.737566][ T4266] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 576.805331][T20848] loop1: detected capacity change from 0 to 32768 [ 576.884394][T20848] jfs_lookup: dtSearch returned -5 [ 576.933091][T20895] loop4: detected capacity change from 0 to 2048 [ 577.061739][T20901] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 577.133952][T20895] NILFS error (device loop4): nilfs_lookup: deleted inode referenced: 15 [ 577.173708][T20895] Remounting filesystem read-only [ 577.396145][ T4405] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 9 /dev/loop0 scanned by udevd (4405) [ 577.626175][T20916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 577.633540][T20916] IPv6: NLM_F_CREATE should be set when creating new route [ 577.990886][T20926] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 578.314807][T20935] netlink: 'syz.6.7631': attribute type 74 has an invalid length. [ 578.688512][T20951] [U] [ 578.691304][T20951] [U] [ 578.694034][T20951] [U] [ 578.696764][T20951] [U] [ 578.808901][T20951] [U] [ 578.811688][T20951] [U] [ 578.814426][T20951] [U] [ 578.817178][T20951] [U] [ 578.902947][T20951] [U] [ 578.905737][T20951] [U] [ 578.908475][T20951] [U] [ 578.946820][T20949] [U] [ 579.936381][T20985] loop4: detected capacity change from 0 to 4096 [ 579.968394][T20985] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 580.039469][T20993] loop6: detected capacity change from 0 to 764 [ 580.140707][T20993] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 580.577705][ T26] audit: type=1326 audit(580.537:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21009 comm="syz.1.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 580.701426][ T26] audit: type=1326 audit(580.597:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21009 comm="syz.1.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 580.820331][ T26] audit: type=1326 audit(580.597:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21009 comm="syz.1.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 580.917506][T21022] netlink: 'syz.1.7664': attribute type 10 has an invalid length. [ 580.930657][ T26] audit: type=1326 audit(580.597:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21009 comm="syz.1.7659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 580.989463][T21022] device syz_tun entered promiscuous mode [ 581.041518][ T26] audit: type=1326 audit(580.737:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.2.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262e78f749 code=0x7ffc0000 [ 581.067167][T21022] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 581.170411][ T26] audit: type=1326 audit(580.737:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.2.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262e78f749 code=0x7ffc0000 [ 581.242927][ T26] audit: type=1326 audit(580.767:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.2.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f262e78f749 code=0x7ffc0000 [ 581.357823][ T26] audit: type=1326 audit(580.767:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.2.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262e78f749 code=0x7ffc0000 [ 581.430350][ C1] bridge0: port 3(team0) entered learning state [ 581.473009][ T26] audit: type=1326 audit(580.767:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21014 comm="syz.2.7661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f262e78f749 code=0x7ffc0000 [ 582.257319][T21062] loop1: detected capacity change from 0 to 4096 [ 582.320501][T21062] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 582.522420][T21062] ntfs3: loop1: failed to convert "c46c" to macroman [ 583.212072][T21099] loop4: detected capacity change from 0 to 4096 [ 583.241669][T21099] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 583.394948][T21099] ntfs: volume version 3.1. [ 583.538299][T21111] loop1: detected capacity change from 0 to 512 [ 583.567977][T21111] EXT4-fs: Ignoring removed mblk_io_submit option [ 583.606356][T21111] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 583.666412][T21111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0102] [ 583.710470][T21111] System zones: 1-12 [ 583.715891][T21111] EXT4-fs (loop1): orphan cleanup on readonly fs [ 583.803589][T21111] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7702: invalid indirect mapped block 12 (level 1) [ 583.866778][T21111] EXT4-fs (loop1): Remounting filesystem read-only [ 583.929498][T21111] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.7702: invalid indirect mapped block 2 (level 2) [ 584.066648][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.090709][T21111] EXT4-fs (loop1): Remounting filesystem read-only [ 584.105245][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.113368][T21111] EXT4-fs (loop1): 1 truncate cleaned up [ 584.119086][T21111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 584.133849][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.182231][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.225636][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.287249][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.325503][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 584.353930][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.384082][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.412034][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.439867][T21127] netlink: 'syz.4.7708': attribute type 3 has an invalid length. [ 584.643721][T21144] loop6: detected capacity change from 0 to 2048 [ 584.779273][T21144] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 584.886377][T21144] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 585.038568][T20386] EXT4-fs (loop6): unmounting filesystem. [ 585.582425][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7731'. [ 585.818702][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7736'. [ 585.993609][T21198] cgroup: name respecified [ 586.270306][ T4344] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 586.464282][ T4344] usb 5-1: Using ep0 maxpacket: 32 [ 586.481277][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 586.518239][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 586.552887][ T4344] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 586.570404][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.580546][ T4321] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 586.595709][ T4344] usb 5-1: Product: syz [ 586.600051][ T4344] usb 5-1: Manufacturer: syz [ 586.605702][ T4344] usb 5-1: SerialNumber: syz [ 586.625216][ T4344] usb 5-1: config 0 descriptor?? [ 586.647976][ T4344] usb 5-1: no audio or video endpoints found [ 586.688534][T21223] loop1: detected capacity change from 0 to 4096 [ 586.728712][T21224] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 586.779122][ T4321] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.790570][T21223] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 586.802258][ T4321] usb 7-1: config 0 interface 0 has no altsetting 0 [ 586.813223][ T4321] usb 7-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 586.838684][ T4321] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.845348][T21223] Remounting filesystem read-only [ 586.883774][ T4321] usb 7-1: Product: syz [ 586.889751][ T5059] usb 5-1: USB disconnect, device number 32 [ 586.893408][ T4321] usb 7-1: Manufacturer: syz [ 586.907143][ T4321] usb 7-1: SerialNumber: syz [ 586.921621][ T4321] usb 7-1: config 0 descriptor?? [ 586.937180][ T4321] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 586.986037][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 587.010957][ T4321] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 587.024395][ T4321] usb 7-1: media controller created [ 587.059704][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.236654][ T4321] DVB: Unable to find symbol tda10046_attach() [ 587.243279][ T4321] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 587.260610][ T4321] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 587.478236][ T4321] dvb_usb_m920x: probe of 7-1:0.0 failed with error -71 [ 587.494280][ T4321] usb 7-1: USB disconnect, device number 2 [ 588.363670][T21268] SET target dimension over the limit! [ 588.686066][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7777'. [ 588.714852][T21280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7777'. [ 588.742714][T21284] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 588.822638][T21286] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7780'. [ 589.322498][T21307] loop6: detected capacity change from 0 to 64 [ 589.425373][T21307] MINIX-fs: file system does not have enough zmap blocks allocated. Refusing to mount. [ 589.468183][T21307] MINIX-fs: bad superblock or unable to read bitmaps [ 590.048805][T21334] validate_nla: 39 callbacks suppressed [ 590.048826][T21334] netlink: 'syz.4.7800': attribute type 3 has an invalid length. [ 590.131152][T21337] loop6: detected capacity change from 0 to 512 [ 590.207659][T21337] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 590.393653][T21351] loop1: detected capacity change from 0 to 16 [ 590.407465][T21351] erofs: (device loop1): mounted with root inode @ nid 36. [ 590.429007][T21351] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 590.429181][T21351] erofs: (device loop1): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 590.445455][T21351] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 590.445636][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 590.445649][ T26] audit: type=1800 audit(590.407:207): pid=21351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7805" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 590.481614][T20386] EXT4-fs (loop6): unmounting filesystem. [ 590.809193][T21362] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 590.836054][T21364] netlink: 'syz.1.7813': attribute type 3 has an invalid length. [ 590.845793][T21364] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7813'. [ 591.062922][T21372] netlink: 129384 bytes leftover after parsing attributes in process `syz.6.7816'. [ 591.455080][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7825'. [ 591.740415][ T4344] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 591.930442][ T4344] usb 2-1: Using ep0 maxpacket: 16 [ 591.940965][ T4344] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=dd.d4 [ 591.990334][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.000620][ T4344] usb 2-1: Product: syz [ 592.004849][ T4344] usb 2-1: Manufacturer: syz [ 592.050334][ T4344] usb 2-1: SerialNumber: syz [ 592.062536][ T4344] usb 2-1: config 0 descriptor?? [ 592.111015][ T4344] usb_ehset_test: probe of 2-1:0.0 failed with error -32 [ 592.258136][T21410] loop4: detected capacity change from 0 to 4096 [ 592.299777][ T4344] usb 2-1: USB disconnect, device number 35 [ 592.329096][T21410] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 592.364523][T21410] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 592.410375][T21410] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 592.452745][T21410] ntfs: volume version 3.1. [ 592.678842][T21429] loop6: detected capacity change from 0 to 8 [ 592.741272][T21429] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 592.776376][ T4274] ntfs: (device loop4): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 592.777945][ T4489] udevd[4489]: incorrect cramfs checksum on /dev/loop6 [ 592.827839][T21433] loop0: detected capacity change from 0 to 16 [ 592.881297][ T4489] udevd[4489]: incorrect cramfs checksum on /dev/loop6 [ 592.896219][T21433] erofs: (device loop0): mounted with root inode @ nid 36. [ 593.530361][ T4344] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 593.676114][ T5909] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 593.720659][ T4344] usb 1-1: Using ep0 maxpacket: 8 [ 593.733118][ T4344] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 593.760108][ T4344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.800310][ T4344] usb 1-1: Product: syz [ 593.804561][ T4344] usb 1-1: Manufacturer: syz [ 593.809208][ T4344] usb 1-1: SerialNumber: syz [ 593.844930][ T4344] usb 1-1: config 0 descriptor?? [ 593.874613][ T4344] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 593.884296][ T5909] usb 5-1: Using ep0 maxpacket: 16 [ 593.898689][ T5909] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 593.908298][ T4344] dvb-usb: bulk message failed: -22 (2/0) [ 593.926559][ T5909] usb 5-1: config 0 has no interface number 0 [ 593.934466][ T4344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 593.962435][ T5909] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=34.12 [ 593.980418][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.988744][ T4344] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 594.010294][ T4344] usb 1-1: media controller created [ 594.020616][ T5909] usb 5-1: Product: syz [ 594.024846][ T5909] usb 5-1: Manufacturer: syz [ 594.029485][ T5909] usb 5-1: SerialNumber: syz [ 594.048339][ T4344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 594.082720][ T5909] usb 5-1: config 0 descriptor?? [ 594.124795][ T4344] dvb-usb: bulk message failed: -22 (1/0) [ 594.143649][ T4344] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 594.178382][ T4344] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 594.229035][ T4344] dvb-usb: schedule remote query interval to 50 msecs. [ 594.245830][ T4344] dvb-usb: bulk message failed: -22 (2/0) [ 594.259838][ T4344] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 594.301846][ T4344] usb 1-1: USB disconnect, device number 29 [ 594.341329][ T5059] usb 5-1: USB disconnect, device number 33 [ 594.409511][ T4344] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 594.493513][T21478] loop1: detected capacity change from 0 to 256 [ 594.523852][T21478] exfat: Deprecated parameter 'utf8' [ 594.529259][T21478] exfat: Deprecated parameter 'namecase' [ 594.554855][T21464] loop6: detected capacity change from 0 to 32768 [ 594.571737][T21478] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x8fca712e, utbl_chksum : 0xe619d30d) [ 594.623908][T21464] ERROR: (device loop6): diAllocBit: iag inconsistent [ 594.623908][T21464] [ 594.687212][T21464] ERROR: (device loop6): remounting filesystem as read-only [ 594.716191][T21464] ialloc: diAlloc returned -5! [ 594.960559][T21486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7861'. [ 595.196292][T21493] loop6: detected capacity change from 0 to 1024 [ 595.859742][T21505] loop4: detected capacity change from 0 to 4096 [ 595.905687][T21505] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 596.258776][T21528] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7877'. [ 596.790257][ C1] bridge0: port 3(team0) entered forwarding state [ 596.796774][ C1] bridge0: topology change detected, propagating [ 596.818884][T21547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7886'. [ 596.930540][T21551] netlink: 'syz.1.7897': attribute type 10 has an invalid length. [ 596.959771][T21555] loop4: detected capacity change from 0 to 16 [ 596.981081][T21555] erofs: (device loop4): mounted with root inode @ nid 36. [ 597.011486][T21555] erofs: (device loop4): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 597.048288][T21555] erofs: (device loop4): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 597.108047][T21555] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 597.139135][ T26] audit: type=1800 audit(597.097:208): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7887" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 598.043250][T21594] loop0: detected capacity change from 0 to 16 [ 598.092979][T21594] erofs: (device loop0): mounted with root inode @ nid 36. [ 598.141393][T21594] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 598.197706][T21594] erofs: (device loop0): z_erofs_readahead: readahead error at page 1 @ nid 89 [ 598.242034][T21594] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 598.277898][ T26] audit: type=1800 audit(598.237:209): pid=21594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7904" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 598.738579][T21616] netlink: 'syz.1.7912': attribute type 10 has an invalid length. [ 598.826614][T21616] team0: Device hsr_slave_0 failed to register rx_handler [ 598.896322][T21592] loop4: detected capacity change from 0 to 32768 [ 599.042725][T21592] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 599.183076][T21592] OCFS2: ERROR (device loop4): int ocfs2_validate_xattr_block(struct super_block *, struct buffer_head *): Extended attribute block #2304 has bad signature [ 599.257508][T21592] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 599.352411][T21592] OCFS2: Returning error to the calling process. [ 599.411112][T21634] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7920'. [ 599.421756][T21592] (syz.4.7905,21592,0):ocfs2_xattr_block_find:2835 ERROR: status = -5 [ 599.598482][ T4274] ocfs2: Unmounting device (7,4) on (node local) [ 599.740595][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7923'. [ 599.765596][T21646] loop1: detected capacity change from 0 to 256 [ 599.899004][T21646] FAT-fs (loop1): Directory bread(block 64) failed [ 599.921070][T21646] FAT-fs (loop1): Directory bread(block 65) failed [ 599.950436][T21646] FAT-fs (loop1): Directory bread(block 66) failed [ 599.957053][T21646] FAT-fs (loop1): Directory bread(block 67) failed [ 599.998222][T21646] FAT-fs (loop1): Directory bread(block 68) failed [ 600.025815][T21646] FAT-fs (loop1): Directory bread(block 69) failed [ 600.050368][T10834] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 600.056365][T21646] FAT-fs (loop1): Directory bread(block 70) failed [ 600.090484][T21646] FAT-fs (loop1): Directory bread(block 71) failed [ 600.110493][T21646] FAT-fs (loop1): Directory bread(block 72) failed [ 600.128041][T21646] FAT-fs (loop1): Directory bread(block 73) failed [ 600.250336][T10834] usb 1-1: Using ep0 maxpacket: 8 [ 600.257418][T10834] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 600.290600][T10834] usb 1-1: config 0 has no interface number 0 [ 600.322292][T10834] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 600.341685][T10834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.349753][T10834] usb 1-1: Product: syz [ 600.418345][T10834] usb 1-1: Manufacturer: syz [ 600.425677][T10834] usb 1-1: SerialNumber: syz [ 600.432357][T10834] usb 1-1: config 0 descriptor?? [ 600.459050][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 600.480517][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 600.504835][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 600.513340][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 600.524650][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 600.535226][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 600.643984][T10834] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 600.670480][T10834] usb 1-1: No valid video chain found. [ 600.682343][T10834] usb 1-1: USB disconnect, device number 30 [ 601.211302][T21657] chnl_net:caif_netlink_parms(): no params data found [ 601.234498][T21687] loop4: detected capacity change from 0 to 128 [ 601.302025][T21687] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 601.349322][T21687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 601.634087][T21657] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.641489][T21699] loop0: detected capacity change from 0 to 256 [ 601.658192][T21657] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.658349][T21697] loop1: detected capacity change from 0 to 8192 [ 601.700429][T21657] device bridge_slave_0 entered promiscuous mode [ 601.709664][T21699] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d) [ 601.733814][T21657] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.778481][T21657] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.816129][T21657] device bridge_slave_1 entered promiscuous mode [ 601.997494][T21657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.086189][T21657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.108816][ T26] audit: type=1326 audit(602.067:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.7947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 602.214958][ T26] audit: type=1326 audit(602.107:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.7947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 602.287976][T21657] team0: Port device team_slave_0 added [ 602.335467][T21657] team0: Port device team_slave_1 added [ 602.370537][ T26] audit: type=1326 audit(602.107:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.7947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 602.396962][T21720] netlink: 'syz.1.7951': attribute type 2 has an invalid length. [ 602.469440][ T26] audit: type=1326 audit(602.117:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.7947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 602.539746][T21657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 602.560252][T21657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.600534][ T26] audit: type=1326 audit(602.117:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.7947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 602.640783][ T47] Bluetooth: hci6: command 0x0409 tx timeout [ 602.685271][T21657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 602.698018][ T26] audit: type=1326 audit(602.117:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.7947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 602.757844][T21657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 602.769350][T21657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.820614][ T26] audit: type=1326 audit(602.117:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.7947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 602.820934][T21657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.899993][ T26] audit: type=1326 audit(602.117:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21711 comm="syz.1.7947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fda5898f749 code=0x7ffc0000 [ 602.922570][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7954'. [ 603.080985][T21736] loop1: detected capacity change from 0 to 2048 [ 603.110016][T21736] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 603.137484][T21657] device hsr_slave_0 entered promiscuous mode [ 603.151237][T21736] NILFS (loop1): mounting unchecked fs [ 603.201917][T21736] NILFS (loop1): recovery complete [ 603.208174][T21657] device hsr_slave_1 entered promiscuous mode [ 603.253457][T21657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.263386][T21745] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 603.276227][ T4405] udevd[4405]: incorrect nilfs2 checksum on /dev/loop1 [ 603.280473][T21657] Cannot create hsr debugfs directory [ 603.549428][ T5909] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 603.746905][T21758] loop4: detected capacity change from 0 to 1764 [ 604.066382][T21770] comedi comedi0: Minor 3 specified more than once! [ 604.073502][T10834] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 604.159490][T21657] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 604.221224][T21657] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 604.266909][T21657] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 604.280578][T10834] usb 7-1: Using ep0 maxpacket: 8 [ 604.289023][T10834] usb 7-1: config 0 has an invalid interface number: 193 but max is 1 [ 604.318745][T10834] usb 7-1: config 0 has an invalid interface number: 4 but max is 1 [ 604.337634][T10834] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.360008][T21780] loop0: detected capacity change from 0 to 2048 [ 604.366684][T10834] usb 7-1: config 0 has no interface number 0 [ 604.381871][T10834] usb 7-1: config 0 has no interface number 1 [ 604.393543][T21782] netlink: 'syz.4.7973': attribute type 1 has an invalid length. [ 604.402053][T10834] usb 7-1: config 0 interface 193 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.416375][T21782] netlink: 'syz.4.7973': attribute type 12 has an invalid length. [ 604.427265][T21780] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 604.438124][T10834] usb 7-1: config 0 interface 4 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 604.449468][T21782] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7973'. [ 604.460891][T21780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 604.470068][T10834] usb 7-1: config 0 interface 4 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 604.512258][T10834] usb 7-1: config 0 interface 193 has no altsetting 0 [ 604.519222][T10834] usb 7-1: config 0 interface 4 has no altsetting 0 [ 604.559651][T21657] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 604.576987][T10834] usb 7-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=7d.6a [ 604.620797][T10834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.650545][T10834] usb 7-1: Product: syz [ 604.654794][T10834] usb 7-1: Manufacturer: syz [ 604.659540][T10834] usb 7-1: SerialNumber: syz [ 604.710601][ T47] Bluetooth: hci6: command 0x041b tx timeout [ 604.721371][T10834] usb 7-1: config 0 descriptor?? [ 604.951608][T10834] usb 7-1: unknown interface protocol 0x4f, assuming v1 [ 604.959056][T10834] usb 7-1: 193:2 : does not exist [ 604.979631][T10834] usb 7-1: unknown interface protocol 0x5, assuming v1 [ 604.998676][T21657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.020302][T10834] usb 7-1: 4:2 : does not exist [ 605.068916][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 605.099243][T10834] usb 7-1: USB disconnect, device number 3 [ 605.109886][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.169863][T21657] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.258327][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 605.284750][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.319487][T15360] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.326874][T15360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.375270][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.406244][ T4405] udevd[4405]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.193/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.423344][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.477600][T15360] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.485140][T15360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.547770][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 605.583385][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 605.645088][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 605.681715][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 605.729513][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 605.751759][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 605.802167][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 605.826376][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 605.879203][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 605.931879][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 605.965021][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.011207][T15364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.056424][T21657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.119717][T21832] delete_channel: no stack [ 606.149384][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7990'. [ 606.386238][T21841] loop6: detected capacity change from 0 to 8 [ 606.500416][T21841] SQUASHFS error: Failed to read block 0x636: -5 [ 606.531661][T21841] SQUASHFS error: Unable to read metadata cache entry [634] [ 606.562940][T21841] SQUASHFS error: Unable to read metadata cache entry [634] [ 606.622823][T21841] SQUASHFS error: Unable to read directory block [629:0] [ 606.791128][ T47] Bluetooth: hci6: command 0x040f tx timeout [ 607.048084][T21657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.096206][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 607.111163][T15360] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.217267][T21862] loop0: detected capacity change from 0 to 4096 [ 607.285579][T21862] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 607.368175][T21862] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 607.433323][T21862] ntfs3: loop0: Failed to load $Extend. [ 607.717865][T21884] loop1: detected capacity change from 0 to 512 [ 607.778962][T21884] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.8006: bad orphan inode 13 [ 607.830446][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 607.844633][T21884] ext4_test_bit(bit=12, block=4) = 1 [ 607.850007][T21884] is_bad_inode(inode)=0 [ 607.866352][T21891] loop4: detected capacity change from 0 to 2048 [ 607.887667][T21891] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 607.911324][T21884] NEXT_ORPHAN(inode)=0 [ 607.915749][T21884] max_ino=32 [ 607.963293][T21884] i_nlink=1 [ 607.966889][T21884] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 608.038149][T21884] EXT4-fs warning (device loop1): dx_probe:833: inode #2: comm syz.1.8006: Unrecognised inode hash code 20 [ 608.119389][T21884] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.8006: Corrupt directory, running e2fsck is recommended [ 608.384835][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 608.570011][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 608.601200][T15350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 608.655667][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 608.678950][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 608.727887][T21657] device veth0_vlan entered promiscuous mode [ 608.737608][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 608.755180][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 608.770456][T10834] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 608.784050][T21657] device veth1_vlan entered promiscuous mode [ 608.877174][ T47] Bluetooth: hci6: command 0x0419 tx timeout [ 608.880691][ T4329] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 608.962023][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 608.973318][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 608.992032][T10834] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.020647][T10834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.029964][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.051479][T15358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.063558][T10834] usb 1-1: config 0 descriptor?? [ 609.083229][T21657] device veth0_macvtap entered promiscuous mode [ 609.114398][T21657] device veth1_macvtap entered promiscuous mode [ 609.121326][ T4329] usb 5-1: Using ep0 maxpacket: 8 [ 609.128262][ T4329] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 609.157775][ T4329] usb 5-1: config 2 has no interface number 0 [ 609.178049][ T4329] usb 5-1: config 2 interface 31 has no altsetting 0 [ 609.207828][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.232074][ T4329] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 609.253126][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.263977][ T4329] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.285194][T10834] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 609.291105][ T4329] usb 5-1: Product: syz [ 609.301165][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.306761][T10834] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 609.330921][ T4329] usb 5-1: Manufacturer: syz [ 609.335629][ T4329] usb 5-1: SerialNumber: syz [ 609.385205][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.416246][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.437846][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.465080][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.497748][T10834] [drm:udl_init] *ERROR* Selecting channel failed [ 609.519799][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.538353][T10834] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 609.558449][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.569638][T10834] [drm] Initialized udl on minor 2 [ 609.577669][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.597530][T21657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.623957][T10834] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 609.643002][T10834] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 609.655293][ T5066] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 609.668162][T10834] usb 1-1: USB disconnect, device number 31 [ 609.682180][ T5066] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 609.689135][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.710417][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.739356][ T5066] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 609.741967][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.788705][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.819482][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.840314][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.859497][ T4329] ch9200: probe of 5-1:2.31 failed with error -22 [ 609.885592][T21937] loop6: detected capacity change from 0 to 4096 [ 609.886735][ T4329] usb 5-1: USB disconnect, device number 34 [ 609.908773][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.929243][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.951738][T21937] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c118, mo2=0002] [ 609.970241][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.979127][T21937] System zones: 0-5 [ 609.987789][T21937] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 610.010511][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.020607][T21657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 610.031551][T21657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 610.043342][T21657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 610.057055][T21657] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.066116][T21657] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.075788][T21657] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.085738][T21657] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.133875][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 610.148889][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.157831][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.164567][T20386] EXT4-fs (loop6): unmounting filesystem. [ 610.167507][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.193144][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.204391][T15354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.400815][T21944] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8029'. [ 610.448372][T15364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.467468][T15364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.498396][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 610.595958][T15358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.648860][T15358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.674133][T15361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 610.783069][T21953] loop0: detected capacity change from 0 to 1024 [ 610.988853][T21953] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 611.016595][T21953] hfsplus: xattr searching failed [ 611.058827][ T26] audit: type=1400 audit(611.017:218): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=21963 comm="syz.4.8037" [ 611.252405][ T26] audit: type=1326 audit(611.217:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.7.8040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd009d8f749 code=0x7ffc0000 [ 611.311595][T21972] netlink: 'syz.4.8041': attribute type 1 has an invalid length. [ 611.319498][T21972] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8041'. [ 611.349462][ T26] audit: type=1326 audit(611.217:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.7.8040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fd009d8f749 code=0x7ffc0000 [ 611.450476][ T26] audit: type=1326 audit(611.217:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.7.8040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd009d8f749 code=0x7ffc0000 [ 611.459531][T21976] loop0: detected capacity change from 0 to 1024 [ 611.544745][T21978] loop7: detected capacity change from 0 to 64 [ 611.567553][T21976] hfsplus: catalog name length corrupted [ 611.590928][ T26] audit: type=1326 audit(611.217:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21969 comm="syz.7.8040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd009d8f749 code=0x7ffc0000 [ 611.833682][T15358] hfsplus: b-tree write err: -5, ino 4 [ 611.914746][T21987] loop6: detected capacity change from 0 to 256 [ 612.035259][T21987] FAT-fs (loop6): Directory bread(block 64) failed [ 612.089864][T21987] FAT-fs (loop6): Directory bread(block 65) failed [ 612.129654][T21987] FAT-fs (loop6): Directory bread(block 66) failed [ 612.170984][T21987] FAT-fs (loop6): Directory bread(block 67) failed [ 612.181511][T21987] FAT-fs (loop6): Directory bread(block 68) failed [ 612.188126][T21987] FAT-fs (loop6): Directory bread(block 69) failed [ 612.279491][T21987] FAT-fs (loop6): Directory bread(block 70) failed [ 612.299852][T21987] FAT-fs (loop6): Directory bread(block 71) failed [ 612.303209][T21998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8054'. [ 612.340704][T21987] FAT-fs (loop6): Directory bread(block 72) failed [ 612.347426][T21987] FAT-fs (loop6): Directory bread(block 73) failed [ 612.558424][T22006] netlink: 45 bytes leftover after parsing attributes in process `syz.0.8057'. [ 612.942503][T22020] loop6: detected capacity change from 0 to 512 [ 613.062080][T22020] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 613.371719][T20386] EXT4-fs (loop6): unmounting filesystem. [ 613.449088][T22039] x_tables: unsorted underflow at hook 3 [ 613.508600][T22042] sctp: [Deprecated]: syz.1.8075 (pid 22042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 613.508600][T22042] Use struct sctp_sack_info instead [ 613.931798][T22058] netlink: 'syz.7.8081': attribute type 4 has an invalid length. [ 613.939625][T22058] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.8081'. [ 614.203070][T22070] xt_ecn: cannot match TCP bits for non-tcp packets [ 614.308141][T22074] loop4: detected capacity change from 0 to 2048 [ 614.398080][T22074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 614.456173][T22080] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 614.561138][T22080] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 614.700579][ T4329] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 614.892303][ T4329] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 614.912389][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.943176][ T4329] usb 1-1: config 0 descriptor?? [ 614.963607][ T4329] cp210x 1-1:0.0: cp210x converter detected [ 615.330335][ T4321] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 615.358122][ T4329] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 615.371905][ T4329] cp210x 1-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 615.400005][ T4329] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 615.422054][ T4329] usb 1-1: cp210x converter now attached to ttyUSB0 [ 615.430685][T22084] loop6: detected capacity change from 0 to 32768 [ 615.440981][ T4329] usb 1-1: USB disconnect, device number 32 [ 615.500776][ T4329] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 615.536742][ T4329] cp210x 1-1:0.0: device disconnected [ 615.550330][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 615.557944][ T4321] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 615.602450][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.623091][T22114] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8106'. [ 615.648804][T22084] XFS (loop6): Mounting V5 Filesystem [ 615.655435][ T4321] usb 5-1: config 0 descriptor?? [ 615.672333][ T4321] gspca_main: sq930x-2.14.0 probing 041e:403c [ 615.700431][T22084] XFS (loop6): Ending clean mount [ 615.712914][T22084] XFS (loop6): Quotacheck needed: Please wait. [ 615.886012][ T4321] gspca_sq930x: reg_r 001f failed -71 [ 615.891635][ T4321] sq930x: probe of 5-1:0.0 failed with error -71 [ 615.924863][T22084] XFS (loop6): Quotacheck: Done. [ 615.963348][ T4321] usb 5-1: USB disconnect, device number 35 [ 615.990790][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 616.122243][T20386] XFS (loop6): Unmounting Filesystem [ 616.376527][T22129] CIFS mount error: No usable UNC path provided in device string! [ 616.376527][T22129] [ 616.440320][T22129] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 616.818702][T22121] loop1: detected capacity change from 0 to 32768 [ 616.892133][T22121] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 12 [ 617.943670][T22171] loop4: detected capacity change from 0 to 2048 [ 618.014064][T22171] Alternate GPT is invalid, using primary GPT. [ 618.026889][T22171] loop4: p1 p2 p3 [ 618.210455][T10834] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 618.412285][T10834] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 618.432178][T10834] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 618.478739][T10834] usb 1-1: config 0 has no interface number 0 [ 618.503809][T10834] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 618.508923][ T4489] udevd[4489]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 618.536359][ T4374] udevd[4374]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 618.554223][T10834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.575183][ T4405] udevd[4405]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 618.609999][T10834] usb 1-1: Product: syz [ 618.624792][T10834] usb 1-1: Manufacturer: syz [ 618.642476][T10834] usb 1-1: SerialNumber: syz [ 618.652092][T10834] usb 1-1: config 0 descriptor?? [ 618.717658][ T4405] udevd[4405]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 618.745207][ T4374] udevd[4374]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 618.759882][ T4873] udevd[4873]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 619.075955][T10834] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 619.090609][T10834] usb 1-1: No valid video chain found. [ 619.118219][T10834] usb 1-1: USB disconnect, device number 33 [ 619.311969][T22214] netlink: 'syz.1.8150': attribute type 1 has an invalid length. [ 619.407439][T22217] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 619.847139][T22237] lo speed is unknown, defaulting to 1000 [ 619.931692][T22237] lo speed is unknown, defaulting to 1000 [ 619.952842][T22237] lo speed is unknown, defaulting to 1000 [ 620.406851][T22253] loop1: detected capacity change from 0 to 256 [ 620.448743][T22237] infiniband syz2: set active [ 620.456507][ T4321] lo speed is unknown, defaulting to 1000 [ 620.488653][T22237] infiniband syz2: added lo [ 620.530615][T22253] FAT-fs (loop1): Directory bread(block 64) failed [ 620.556846][T22253] FAT-fs (loop1): Directory bread(block 65) failed [ 620.597434][T22253] FAT-fs (loop1): Directory bread(block 66) failed [ 620.621560][T22237] RDS/IB: syz2: added [ 620.625720][T22237] smc: adding ib device syz2 with port count 1 [ 620.644636][T22253] FAT-fs (loop1): Directory bread(block 67) failed [ 620.651797][T22237] smc: ib device syz2 port 1 has pnetid [ 620.657829][ T4321] lo speed is unknown, defaulting to 1000 [ 620.670724][T22237] lo speed is unknown, defaulting to 1000 [ 620.760528][T22253] FAT-fs (loop1): Directory bread(block 68) failed [ 620.767235][T22253] FAT-fs (loop1): Directory bread(block 69) failed [ 620.783707][T22253] FAT-fs (loop1): Directory bread(block 70) failed [ 620.826396][T22253] FAT-fs (loop1): Directory bread(block 71) failed [ 620.868511][T22253] FAT-fs (loop1): Directory bread(block 72) failed [ 620.900309][T22253] FAT-fs (loop1): Directory bread(block 73) failed [ 621.114637][ T27] INFO: task syz-executor:4279 blocked for more than 143 seconds. [ 621.128357][ T27] Not tainted syzkaller #0 [ 621.154200][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 621.163497][T22237] lo speed is unknown, defaulting to 1000 [ 621.177382][ T27] task:syz-executor state:D stack:21768 pid:4279 ppid:1 flags:0x00004004 [ 621.206093][ T27] Call Trace: [ 621.216358][ T27] [ 621.237460][ T27] __schedule+0x10ec/0x40b0 [ 621.270967][ T27] ? __sched_text_start+0x8/0x8 [ 621.275915][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 621.297783][ T27] ? lock_chain_count+0x20/0x20 [ 621.322861][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 621.328092][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 621.338065][ T27] schedule+0xb9/0x180 [ 621.344480][ T27] io_schedule+0x7c/0xd0 [ 621.349396][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 621.366695][ T27] ? folio_wait_bit+0x30/0x30 [ 621.376873][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 621.390033][ T27] ? folio_mapping+0x1ba/0x4d0 [ 621.398318][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 621.411719][ T27] ? mapping_evict_folio+0x520/0x520 [ 621.419654][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 621.432083][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 621.437472][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 621.442456][T22237] lo speed is unknown, defaulting to 1000 [ 621.450868][ T27] evict+0x498/0x870 [ 621.454950][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 621.459938][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 621.466130][ T27] ? _raw_spin_unlock+0x24/0x40 [ 621.471419][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 621.476779][ T27] evict_inodes+0x604/0x690 [ 621.483262][ T27] ? clear_inode+0x150/0x150 [ 621.487998][ T27] ? dput+0x1c9/0x1d0 [ 621.492465][ T27] ? sync_filesystem+0x103/0x220 [ 621.497550][ T27] generic_shutdown_super+0x93/0x340 [ 621.508377][ T27] kill_block_super+0x7c/0xe0 [ 621.520344][ T27] deactivate_locked_super+0x93/0xf0 [ 621.525818][ T27] cleanup_mnt+0x463/0x4f0 [ 621.538379][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 621.545144][ T27] task_work_run+0x1ca/0x250 [ 621.550010][ T27] ? task_work_cancel+0x230/0x230 [ 621.563623][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 621.573008][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 621.578473][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 621.589934][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 621.602366][ T27] do_syscall_64+0x58/0xa0 [ 621.607072][ T27] ? clear_bhb_loop+0x60/0xb0 [ 621.607352][T22237] lo speed is unknown, defaulting to 1000 [ 621.612631][ T27] ? clear_bhb_loop+0x60/0xb0 [ 621.623349][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 621.629430][ T27] RIP: 0033:0x7f01d0d90a77 [ 621.634385][ T27] RSP: 002b:00007ffcd02433c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 621.643392][ T27] RAX: 0000000000000000 RBX: 00007f01d0e13d7d RCX: 00007f01d0d90a77 [ 621.652018][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcd0243480 [ 621.660443][ T27] RBP: 00007ffcd0243480 R08: 0000000000000000 R09: 0000000000000000 [ 621.668592][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcd0244510 [ 621.678640][ T27] R13: 00007f01d0e13d7d R14: 00000000000743e7 R15: 00007ffcd0244550 [ 621.687064][ T27] [ 621.698769][ T27] [ 621.698769][ T27] Showing all locks held in the system: [ 621.707575][ T27] 1 lock held by rcu_tasks_kthre/12: [ 621.736392][ T27] #0: ffffffff8cb2b630 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 621.763772][ T27] 1 lock held by rcu_tasks_trace/13: [ 621.769257][ T27] #0: ffffffff8cb2be50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 621.790491][ T27] 1 lock held by khungtaskd/27: [ 621.796540][ T27] #0: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 621.817055][ T27] 2 locks held by getty/4028: [ 621.821334][T22237] lo speed is unknown, defaulting to 1000 [ 621.827807][ T27] #0: ffff88802fea7098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 621.838567][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 621.849342][ T27] 1 lock held by syz-executor/4279: [ 621.854932][ T27] #0: ffff8880570a40e0 (&type->s_umount_key#73){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 621.874493][ T27] 1 lock held by syz.2.7711/21130: [ 621.879762][ T27] #0: ffff8880570a40e0 (&type->s_umount_key#73){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 621.892691][ T27] 5 locks held by syz.7.8159/22237: [ 621.898150][ T27] [ 621.900889][ T27] ============================================= [ 621.900889][ T27] [ 621.909950][ T27] NMI backtrace for cpu 0 [ 621.914356][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 621.921594][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 621.931694][ T27] Call Trace: [ 621.935096][ T27] [ 621.938076][ T27] dump_stack_lvl+0x168/0x22e [ 621.942800][ T27] ? irq_work_queue+0xbf/0x140 [ 621.947611][ T27] ? show_regs_print_info+0x12/0x12 [ 621.952861][ T27] ? load_image+0x3b0/0x3b0 [ 621.957421][ T27] ? vprintk_emit+0x571/0x680 [ 621.962152][ T27] ? printk_sprint+0x460/0x460 [ 621.966982][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 621.971985][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 621.978179][ T27] ? _printk+0xcc/0x110 [ 621.982393][ T27] ? load_image+0x3b0/0x3b0 [ 621.986955][ T27] ? load_image+0x3b0/0x3b0 [ 621.991603][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 621.997712][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 622.003749][ T27] watchdog+0xeee/0xf30 [ 622.007962][ T27] ? watchdog+0x1ed/0xf30 [ 622.012349][ T27] kthread+0x29d/0x330 [ 622.016468][ T27] ? hungtask_pm_notify+0x40/0x40 [ 622.018378][T22237] lo speed is unknown, defaulting to 1000 [ 622.021599][ T27] ? kthread_blkcg+0xd0/0xd0 [ 622.021636][ T27] ret_from_fork+0x1f/0x30 [ 622.021675][ T27] [ 622.021742][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.022664][ T27] Sending NMI from CPU 0 to CPUs 1: [ 622.051348][ C1] NMI backtrace for cpu 1 [ 622.051361][ C1] CPU: 1 PID: 15350 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 622.051378][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.051388][ C1] Workqueue: 0x0 (phy29) [ 622.051411][ C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x10 [ 622.051441][ C1] Code: 48 89 da e8 12 de f4 ff 48 8b 74 24 30 48 c7 c7 e0 f7 de 8a e8 01 de f4 ff e8 ba 8b ff ff eb a8 e8 35 ea ff ff 0f 1f 44 00 00 <48> 89 fe 48 c7 c7 60 f7 de 8a e9 e1 fe ff ff 00 eb 1e 0f 1f 00 48 [ 622.051455][ C1] RSP: 0018:ffffc9001bd4fa58 EFLAGS: 00000086 [ 622.051476][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffffffff81631100 [ 622.051487][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8a8c1700 [ 622.051498][ C1] RBP: ffffc9001bd4fb80 R08: dffffc0000000000 R09: fffffbfff215c449 [ 622.051511][ C1] R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: 0000000000000001 [ 622.051523][ C1] R13: 1ffff920037a9f58 R14: 0000000000000046 R15: dffffc0000000000 [ 622.051536][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 622.051550][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.051561][ C1] CR2: 00007fda58bb6ad8 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 622.051576][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 622.051586][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 622.051597][ C1] Call Trace: [ 622.051602][ C1] [ 622.051607][ C1] lock_acquire+0x1c4/0x490 [ 622.051635][ C1] ? read_lock_is_recursive+0x10/0x10 [ 622.051659][ C1] ? __schedule+0x10ba/0x40b0 [ 622.051681][ C1] ? __lock_acquire+0x7c50/0x7c50 [ 622.051704][ C1] finish_task_switch+0x19f/0x8f0 [ 622.051725][ C1] ? finish_task_switch+0x18a/0x8f0 [ 622.051749][ C1] __schedule+0x10f4/0x40b0 [ 622.051768][ C1] ? pwq_dec_nr_in_flight+0x1e1/0x450 [ 622.051794][ C1] ? __sched_text_start+0x8/0x8 [ 622.051812][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 622.051836][ C1] ? lock_chain_count+0x20/0x20 [ 622.051856][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 622.051882][ C1] ? wq_worker_sleeping+0x60/0x280 [ 622.051908][ C1] schedule+0xb9/0x180 [ 622.051926][ C1] worker_thread+0xef6/0x1250 [ 622.051955][ C1] kthread+0x29d/0x330 [ 622.051978][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 622.051995][ C1] ? kthread_blkcg+0xd0/0xd0 [ 622.052019][ C1] ret_from_fork+0x1f/0x30 [ 622.052047][ C1] [ 622.300467][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.311013][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 622.318090][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 622.325409][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 622.332134][T22237] lo speed is unknown, defaulting to 1000 [ 622.341321][ T27] Call Trace: [ 622.344715][ T27] [ 622.347672][ T27] dump_stack_lvl+0x168/0x22e [ 622.352388][ T27] ? memcpy+0x3c/0x60 [ 622.356410][ T27] ? show_regs_print_info+0x12/0x12 [ 622.361647][ T27] ? load_image+0x3b0/0x3b0 [ 622.366208][ T27] panic+0x2c9/0x710 [ 622.370141][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 622.375826][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 622.380370][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 622.386034][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 622.392267][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 622.398485][ T27] watchdog+0xf2d/0xf30 [ 622.402700][ T27] ? watchdog+0x1ed/0xf30 [ 622.407071][ T27] kthread+0x29d/0x330 [ 622.411199][ T27] ? hungtask_pm_notify+0x40/0x40 [ 622.416286][ T27] ? kthread_blkcg+0xd0/0xd0 [ 622.420927][ T27] ret_from_fork+0x1f/0x30 [ 622.425411][ T27] [ 622.428723][ T27] Kernel Offset: disabled [ 622.433063][ T27] Rebooting in 86400 seconds..