last executing test programs: 2m40.150827669s ago: executing program 2 (id=2420): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000005000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000007a0000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000095000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x11b, &(0x7f0000000040)=""/212, 0x0, 0x8}, 0x21) 2m39.913434143s ago: executing program 2 (id=2423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) 2m39.396745513s ago: executing program 2 (id=2429): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x109400, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000400)={{0x800, 0x8}, {0x20, 0x3}, 0x5, 0x7}) 2m39.183092624s ago: executing program 2 (id=2432): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x8100000b, 0xfffffffffffffffd) 2m38.651379566s ago: executing program 2 (id=2438): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m37.561146903s ago: executing program 2 (id=2452): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 2m22.477849985s ago: executing program 32 (id=2452): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 1m18.219877887s ago: executing program 1 (id=3536): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 1m17.955677523s ago: executing program 1 (id=3540): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 1m17.687686739s ago: executing program 1 (id=3545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@allocspi={0x10c, 0x16, 0x401, 0x40000000, 0x0, {{{@in=@multicast1, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x4d3, 0x33}, @in=@rand_addr=0x64010100, {0x0, 0x0, 0x4}, {0x101, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x400}, 0x70bd2a, 0x3502, 0xa, 0x0, 0xff, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}, @mark={0xc, 0x15, {0x0, 0xfffff329}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 1m17.504249177s ago: executing program 1 (id=3549): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 1m16.962690841s ago: executing program 1 (id=3555): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_hci(r0, 0x0, 0x0) 1m16.05161743s ago: executing program 1 (id=3565): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xfe, &(0x7f0000000080), &(0x7f0000000280)=0x4) 1m15.585206326s ago: executing program 33 (id=3565): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xfe, &(0x7f0000000080), &(0x7f0000000280)=0x4) 1m15.578888386s ago: executing program 3 (id=3571): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000440)=ANY=[], 0xff, 0x5e2d, &(0x7f0000005d80)="$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") removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', 'trusted.overlay.nlink\x00'}) 1m14.21952969s ago: executing program 3 (id=3582): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r0, &(0x7f0000000480)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aefeef64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000280)="530600002412ffa0fe6d3209849043062c5e447528703d0000000000006f0c8e5307e7f79224d8add7c72199958427a0294d005a1e09d43bcc04666c08c51d8bf7c39ed6527cb827928b7f1bada2547322fff646c6a207b9", 0x58}], 0x2) 1m13.521647428s ago: executing program 3 (id=3588): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee20009058217", @ANYBLOB="f53f"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1m11.255066891s ago: executing program 3 (id=3605): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x20108c2, &(0x7f0000000e40)=ANY=[], 0xfe, 0x6231, &(0x7f0000003140)="$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") setxattr$security_capability(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) 1m9.830457851s ago: executing program 3 (id=3617): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r0, r0, r0}, &(0x7f0000000040)=""/40, 0x28, &(0x7f0000000000)={&(0x7f0000000280)={'rmd160-generic\x00'}}) 1m9.393073534s ago: executing program 3 (id=3622): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='-', 0x1}], 0x1) 54.200346576s ago: executing program 34 (id=3622): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)='-', 0x1}], 0x1) 3.693958587s ago: executing program 4 (id=4410): r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @p_u8=0x0}}) 3.417852045s ago: executing program 4 (id=4413): unshare(0x22020400) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 3.037424242s ago: executing program 4 (id=4417): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1100) 1.802612943s ago: executing program 0 (id=4437): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) ioctl$sock_ax25_SIOCADDRT(r0, 0x8916, 0x0) 1.709946192s ago: executing program 5 (id=4439): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x100048d, &(0x7f0000000280)=ANY=[], 0x1, 0x1c8, &(0x7f00000004c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) 1.555536018s ago: executing program 0 (id=4441): r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) 1.43035113s ago: executing program 0 (id=4443): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setstatus(r0, 0x408, 0x0) 1.275583015s ago: executing program 5 (id=4445): prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) syz_io_uring_setup(0x2deb, &(0x7f0000001600)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0) 1.201132892s ago: executing program 4 (id=4446): r0 = io_uring_setup(0x1a3d, &(0x7f0000000340)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000000)=[0x7405, 0xffff], 0x2) 1.198828373s ago: executing program 7 (id=4447): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, 0x0) 1.151239078s ago: executing program 0 (id=4448): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x107b, 0x4) 1.140174029s ago: executing program 6 (id=4449): r0 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r0, 0x88, 0x68, 0x0, 0xfffffffffffffc9a) 1.055814487s ago: executing program 5 (id=4450): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newroute={0x30, 0x18, 0x35f32a6dfa748ddd, 0x20, 0x200, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_NH_ID={0x8, 0x1e, 0x48c}, @RTA_MULTIPATH={0xc, 0x9, {0x3, 0x20, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x200408c0}, 0x0) 1.032979119s ago: executing program 7 (id=4451): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000040)={0x98f908}) 917.80212ms ago: executing program 4 (id=4452): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="022e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) 884.293994ms ago: executing program 6 (id=4453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) 883.728734ms ago: executing program 0 (id=4454): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000002c0)={0xa, 0x0, 0x6, {0x8000, 0x7fffffff, 0x506, 0xffffdff8}}) 778.186334ms ago: executing program 5 (id=4455): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_proto_private(r0, 0x89e4, &(0x7f0000000480)="845d3aba39") 777.633724ms ago: executing program 7 (id=4456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f00000037c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 626.194459ms ago: executing program 0 (id=4457): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1100) 625.455569ms ago: executing program 6 (id=4458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 625.362079ms ago: executing program 4 (id=4459): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100e1080, 0x0, 0x0, 0x0, 0x0, 0x0) 615.72755ms ago: executing program 7 (id=4460): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x148, 0x4c, 0x1a, 0x0, 0x73, 0x278, 0x258, 0x258, 0x278, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) 580.651993ms ago: executing program 5 (id=4461): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000003540)={[{@dmask={'dmask', 0x3d, 0x7}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x400005}}, {@sys_tz}, {@errors_remount}, {@discard}, {@keep_last_dots}, {@umask={'umask', 0x3d, 0x200}}, {@namecase}, {@namecase}]}, 0x1, 0x153b, &(0x7f0000001f80)="$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") mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 444.068537ms ago: executing program 6 (id=4462): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r0, 0xf, &(0x7f0000001900)={0x0, 0xffffffffffffffff}) 299.895701ms ago: executing program 6 (id=4463): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x2b}, @in6=@private0, {0x10000, 0x0, 0x2, 0x31}, {0x0, 0x200003, 0x7}, {0x40000, 0x2, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x10, 0x70}, [@coaddr={0x14, 0xe, @in=@local}]}, 0x104}}, 0x0) 299.403361ms ago: executing program 7 (id=4464): r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x101480) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000400)={0x0, 0xffffffffffffff80, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0}) 81.932762ms ago: executing program 5 (id=4465): r0 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_pktinfo(r0, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2) 9.73254ms ago: executing program 6 (id=4466): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x7, [0x1, 0x405, 0x2, 0x1, 0x1, 0x5, 0x0, 0x7ffe, 0x7, 0x10, 0xf9f, 0x2, 0x7, 0x3, 0xf, 0x6, 0x3, 0x232, 0x3, 0xcc, 0x7, 0xa67b, 0x8003, 0xc, 0x3, 0xff00, 0x4, 0x8, 0x0, 0x9, 0x4, 0x5, 0x8000, 0xf, 0xd4b, 0x5, 0x8, 0x3, 0xfff, 0xd, 0x10, 0x7, 0x5, 0x401, 0xffff, 0x0, 0x403, 0x402], 0x4}) 0s ago: executing program 7 (id=4467): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000800)=@v={0x93, 0x0, 0x90, 0x0, @generic}) kernel console output (not intermixed with test programs): n0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.373603][ T8974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.429296][T10415] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 288.456318][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.492157][ T8974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.519826][ T8974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.541937][ T8963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 288.597936][T10520] loop0: detected capacity change from 0 to 8 [ 288.609574][ T4283] Bluetooth: hci5: command 0x0419 tx timeout [ 288.621405][T10415] usb 2-1: config 0 has no interfaces? [ 288.627105][T10520] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 288.642439][T10415] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 288.659303][T10415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.679984][T10415] usb 2-1: Product: syz [ 288.684221][T10415] usb 2-1: Manufacturer: syz [ 288.688861][T10415] usb 2-1: SerialNumber: syz [ 288.710264][T10415] r8152-cfgselector 2-1: config 0 descriptor?? [ 288.929092][T10415] r8152-cfgselector 2-1: Unknown version 0x00d0 [ 289.142480][ T7] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 289.230163][T10534] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:0 [ 289.407588][T10540] loop3: detected capacity change from 0 to 512 [ 289.519448][T10540] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2767: casefold flag without casefold feature [ 289.540760][T10540] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2767: couldn't read orphan inode 15 (err -117) [ 289.559474][T10540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.640907][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 289.827172][T10553] loop1: detected capacity change from 0 to 128 [ 289.858381][T10553] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 289.883363][T10553] FAT-fs (loop1): Filesystem has been set read-only [ 290.173550][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2776'. [ 290.216570][T10560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2776'. [ 290.442514][T10568] loop1: detected capacity change from 0 to 512 [ 290.478282][T10568] EXT4-fs: Ignoring removed nobh option [ 290.545955][T10568] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #3: comm syz.1.2780: corrupted inode contents [ 290.709092][T10568] EXT4-fs error (device loop1): ext4_dirty_inode:6125: inode #3: comm syz.1.2780: mark_inode_dirty error [ 290.761901][T10568] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #3: comm syz.1.2780: corrupted inode contents [ 290.813933][T10568] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.2780: mark_inode_dirty error [ 290.892613][T10568] Quota error (device loop1): write_blk: dquota write failed [ 290.911446][T10568] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 290.911934][T10568] EXT4-fs error (device loop1): ext4_acquire_dquot:6816: comm syz.1.2780: Failed to acquire dquot type 0 [ 290.945485][T10568] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.2780: corrupted inode contents [ 290.946124][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2789'. [ 290.948164][T10568] EXT4-fs error (device loop1): ext4_dirty_inode:6125: inode #16: comm syz.1.2780: mark_inode_dirty error [ 290.948601][T10568] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.2780: corrupted inode contents [ 290.948943][T10568] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.2780: mark_inode_dirty error [ 290.949898][T10568] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.2780: corrupted inode contents [ 290.952939][T10568] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 290.953299][T10568] EXT4-fs error (device loop1): ext4_do_update_inode:5260: inode #16: comm syz.1.2780: corrupted inode contents [ 290.953638][T10568] EXT4-fs error (device loop1): ext4_truncate:4318: inode #16: comm syz.1.2780: mark_inode_dirty error [ 290.953959][T10568] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 290.963218][T10568] EXT4-fs (loop1): 1 truncate cleaned up [ 290.963254][T10568] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 290.964522][T10568] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.185357][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 291.525842][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2797'. [ 291.525919][T10604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.525932][T10604] IPv6: NLM_F_CREATE should be set when creating new route [ 291.525981][T10604] IPv6: NLM_F_CREATE should be set when creating new route [ 291.819299][T10615] loop1: detected capacity change from 0 to 736 [ 291.885569][T10615] rock: directory entry would overflow storage [ 291.885623][T10615] rock: sig=0x3b10, size=4, remaining=3 [ 292.185576][T10626] loop1: detected capacity change from 0 to 512 [ 292.254391][T10626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 292.372327][T10626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 292.385587][T10634] loop5: detected capacity change from 0 to 256 [ 292.400476][T10636] loop3: detected capacity change from 0 to 256 [ 292.410678][T10626] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 292.466708][T10636] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 292.681430][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 292.872681][T10640] loop0: detected capacity change from 0 to 4096 [ 292.953601][T10640] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 293.115793][T10640] ntfs3: loop0: failed to convert "c46c" to koi8-ru [ 293.290845][T10656] loop3: detected capacity change from 0 to 1024 [ 293.356238][T10656] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 293.374938][T10658] mac80211_hwsim hwsim3 ;: renamed from wlan0 [ 293.758614][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2827'. [ 293.806094][T10672] comedi comedi3: dt2814: I/O port conflict (0x20004f07,2) [ 294.019454][ T6303] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 294.150268][T10684] loop3: detected capacity change from 0 to 8 [ 294.211386][ T6303] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 294.239837][ T6303] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.284001][ T6303] usb 1-1: config 0 has no interface number 0 [ 294.307667][ T6303] usb 1-1: config 0 interface 4 has no altsetting 0 [ 294.334822][ T6303] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 294.379251][ T6303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.424767][ T6303] usb 1-1: config 0 descriptor?? [ 294.447482][ T6303] usb 1-1: selecting invalid altsetting 0 [ 294.674880][ T6303] usb 1-1: USB disconnect, device number 8 [ 295.001763][T10712] loop1: detected capacity change from 0 to 256 [ 295.189403][ T6303] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 295.247491][T10720] loop3: detected capacity change from 0 to 8 [ 295.362854][T10720] SQUASHFS error: Failed to read block 0x63a: -5 [ 295.385365][ T6303] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.405035][ T6303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.419264][T10720] SQUASHFS error: Unable to read metadata cache entry [638] [ 295.437016][ T6303] usb 5-1: Product: syz [ 295.446906][T10720] SQUASHFS error: Unable to read directory block [26067d:0] [ 295.457785][ T6303] usb 5-1: Manufacturer: syz [ 295.469330][ T6303] usb 5-1: SerialNumber: syz [ 295.498912][ T6303] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 295.606178][ T4267] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 296.083200][ T6300] usb 5-1: USB disconnect, device number 5 [ 296.100642][T10742] loop5: detected capacity change from 0 to 736 [ 296.568093][T10760] kAFS: unable to lookup cell '.,' [ 296.689332][ T4267] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 296.697152][ T4267] ath9k_htc: Failed to initialize the device [ 296.745055][ T6300] usb 5-1: ath9k_htc: USB layer deinitialized [ 296.874683][T10768] loop0: detected capacity change from 0 to 256 [ 296.898223][T10770] befs: (nbd1): No write support. Marking filesystem read-only [ 296.926683][ T1150] block nbd1: Attempted send on invalid socket [ 296.933048][ T1150] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 296.942613][T10770] befs: (nbd1): unable to read superblock [ 297.027273][T10768] FAT-fs (loop0): Directory bread(block 64) failed [ 297.078079][T10774] netlink: 'syz.3.2880': attribute type 24 has an invalid length. [ 297.080112][T10768] FAT-fs (loop0): Directory bread(block 65) failed [ 297.158276][T10768] FAT-fs (loop0): Directory bread(block 66) failed [ 297.189502][T10768] FAT-fs (loop0): Directory bread(block 67) failed [ 297.196233][T10768] FAT-fs (loop0): Directory bread(block 68) failed [ 297.249731][T10768] FAT-fs (loop0): Directory bread(block 69) failed [ 297.256474][T10768] FAT-fs (loop0): Directory bread(block 70) failed [ 297.273844][T10768] FAT-fs (loop0): Directory bread(block 71) failed [ 297.311498][T10768] FAT-fs (loop0): Directory bread(block 72) failed [ 297.318137][T10768] FAT-fs (loop0): Directory bread(block 73) failed [ 298.244423][T10811] device ip6erspan0 entered promiscuous mode [ 298.332240][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2901'. [ 298.384038][T10815] i2c i2c-0: Invalid block write size 34 [ 298.458355][T10819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.516244][T10819] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.073249][T10834] loop5: detected capacity change from 0 to 4096 [ 299.110069][T10834] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 299.194963][T10834] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 299.235908][T10834] ntfs3: loop5: mft corrupted [ 299.260420][T10834] ntfs3: loop5: Failed to load $Extend. [ 299.308321][T10845] loop0: detected capacity change from 0 to 1764 [ 300.142624][T10870] loop1: detected capacity change from 0 to 128 [ 300.182330][T10870] FAT-fs (loop1): bogus number of reserved sectors [ 300.188915][T10870] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 300.259864][T10870] FAT-fs (loop1): Can't find a valid FAT filesystem [ 300.317295][T10870] loop1: detected capacity change from 0 to 128 [ 300.412676][ T4382] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 300.599282][ T4341] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 300.632097][T10882] netlink: 'syz.0.2935': attribute type 5 has an invalid length. [ 300.799391][ T4341] usb 4-1: Using ep0 maxpacket: 8 [ 300.806635][ T4341] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 300.826881][ T4341] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 300.850119][ T4341] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 300.909222][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.935279][ T4341] usb 4-1: Product: syz [ 300.959429][ T4341] usb 4-1: Manufacturer: syz [ 300.964182][ T4341] usb 4-1: SerialNumber: syz [ 300.986868][T10862] loop5: detected capacity change from 0 to 32768 [ 300.990840][ T4341] usb 4-1: config 0 descriptor?? [ 301.123982][T10862] XFS (loop5): Mounting V5 Filesystem [ 301.133877][T10903] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2942'. [ 301.220742][T10862] XFS (loop5): Ending clean mount [ 301.363509][T10300] XFS (loop5): Unmounting Filesystem [ 301.448646][ T6300] usb 4-1: USB disconnect, device number 15 [ 301.515675][T10912] nftables ruleset with unbound chain [ 302.669486][ T4341] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 302.701177][T10922] loop5: detected capacity change from 0 to 32768 [ 302.746133][T10950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2964'. [ 302.798262][T10922] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 302.859371][ T4341] usb 1-1: Using ep0 maxpacket: 8 [ 302.866985][ T4341] usb 1-1: config 1 has an invalid interface number: 128 but max is 1 [ 302.880912][ T4341] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.891976][ T4341] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.901963][ T4341] usb 1-1: config 1 has no interface number 0 [ 302.908244][ T4341] usb 1-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.933232][ T4341] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.952756][ T4341] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.969205][ T4341] usb 1-1: Product: syz [ 302.970903][T10922] (syz.5.2946,10922,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 302.979553][ T4341] usb 1-1: Manufacturer: syz [ 303.012179][ T4341] usb 1-1: SerialNumber: syz [ 303.059596][ T4341] cdc_wdm 1-1:1.128: skipping garbage [ 303.065045][ T4341] cdc_wdm 1-1:1.128: invalid descriptor buffer length [ 303.069178][T10922] (syz.5.2946,10922,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 303.122931][ T4341] cdc_wdm: probe of 1-1:1.128 failed with error -22 [ 303.140115][T10922] (syz.5.2946,10922,0):ocfs2_mknod:298 ERROR: status = -2 [ 303.158312][T10922] (syz.5.2946,10922,0):ocfs2_mknod:502 ERROR: status = -2 [ 303.172653][T10922] (syz.5.2946,10922,0):ocfs2_mkdir:659 ERROR: status = -2 [ 303.306096][T10300] ocfs2: Unmounting device (7,5) on (node local) [ 303.315566][ T4341] usb 1-1: USB disconnect, device number 9 [ 303.673298][T10415] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 303.711235][T10948] loop3: detected capacity change from 0 to 32768 [ 303.729918][T10948] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.2963 (10948) [ 303.762457][T10948] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 303.790422][T10948] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 303.817320][T10948] BTRFS info (device loop3): enabling auto defrag [ 303.837489][T10948] BTRFS info (device loop3): doing ref verification [ 303.867833][T10948] BTRFS info (device loop3): use no compression [ 303.879607][T10415] usb 2-1: Using ep0 maxpacket: 32 [ 303.894183][T10415] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 303.901687][T10948] BTRFS info (device loop3): force clearing of disk cache [ 303.908082][T10415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.941629][T10948] BTRFS info (device loop3): max_inline at 4096 [ 303.959293][T10948] BTRFS info (device loop3): disabling free space tree [ 303.974538][T10415] usb 2-1: config 0 descriptor?? [ 304.001129][T10415] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 304.149253][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 304.207410][ T26] audit: type=1326 audit(1760890305.299:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 304.318241][T10948] BTRFS info (device loop3): enabling ssd optimizations [ 304.335218][ T26] audit: type=1326 audit(1760890305.339:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 304.335390][T10948] BTRFS info (device loop3): rebuilding free space tree [ 304.371727][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 304.401376][T10415] gspca_vc032x: reg_w err -71 [ 304.406160][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.439794][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 304.449946][T10948] BTRFS info (device loop3): disabling free space tree [ 304.456961][T10948] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 304.475954][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.484512][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.498045][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.504014][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.515190][ T7] usb 5-1: Product: syz [ 304.519727][T10948] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 304.536181][ T26] audit: type=1326 audit(1760890305.339:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 304.536494][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.569227][ T7] usb 5-1: Manufacturer: syz [ 304.573929][ T7] usb 5-1: SerialNumber: syz [ 304.592659][ T7] r8152-cfgselector 5-1: config 0 descriptor?? [ 304.621226][ T26] audit: type=1326 audit(1760890305.339:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 304.621881][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.691725][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.697148][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.702777][ T26] audit: type=1326 audit(1760890305.339:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10993 comm="syz.5.2979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 304.744979][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.756729][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.764507][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.784329][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.791671][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.797540][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.807636][T11010] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 304.812797][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.827255][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.835443][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.852186][T10415] gspca_vc032x: I2c Bus Busy Wait 00 [ 304.868896][T10415] gspca_vc032x: Unknown sensor... [ 304.883214][T10415] vc032x: probe of 2-1:0.0 failed with error -22 [ 304.959356][T10415] usb 2-1: USB disconnect, device number 10 [ 305.085858][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 305.130356][ T7] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 305.447723][T11026] loop0: detected capacity change from 0 to 2048 [ 305.511753][T11026] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 305.546619][T11029] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 305.607392][ T4268] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 305.867764][T11034] netlink: 'syz.4.2995': attribute type 2 has an invalid length. [ 305.912792][T11034] netlink: 'syz.4.2995': attribute type 11 has an invalid length. [ 305.955189][T11034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2995'. [ 307.038266][T11074] netlink: 'syz.1.3013': attribute type 10 has an invalid length. [ 307.064571][T11074] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3013'. [ 307.081314][T11074] bridge0: port 4(dummy0) entered blocking state [ 307.088084][T11074] bridge0: port 4(dummy0) entered disabled state [ 307.113516][T11074] device dummy0 entered promiscuous mode [ 307.121134][T11074] bridge0: port 4(dummy0) entered blocking state [ 307.127607][T11074] bridge0: port 4(dummy0) entered forwarding state [ 307.355200][T11086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3019'. [ 307.377040][T11088] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 307.383745][T11086] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3019'. [ 307.398999][T11088] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 307.417580][T11088] comedi comedi1: 8255: I/O port conflict (0x16,4) [ 307.449051][T11088] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 307.498351][T11088] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 307.524544][T11088] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 307.564130][T11088] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 307.585290][T11088] comedi comedi1: 8255: I/O port conflict (0xfd,4) [ 307.612719][T11088] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 307.659571][T11088] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 307.860262][T11106] ieee802154 phy0 wpan0: encryption failed: -90 [ 308.045470][T11112] netlink: 'syz.0.3030': attribute type 6 has an invalid length. [ 308.121130][T11113] ALSA: mixer_oss: invalid OSS volume 'u' [ 308.300145][T11124] loop0: detected capacity change from 0 to 256 [ 308.672742][T11134] tmpfs: Bad value for 'nr_inodes' [ 308.872346][T11139] affs: No valid root block on device nbd4 [ 308.956995][T11140] loop5: detected capacity change from 0 to 4096 [ 309.209512][T10409] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 309.298626][T11123] loop3: detected capacity change from 0 to 32768 [ 309.315450][T11148] loop0: detected capacity change from 0 to 4096 [ 309.395126][T11123] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 309.410524][T10409] usb 2-1: Using ep0 maxpacket: 32 [ 309.418536][T10409] usb 2-1: unable to get BOS descriptor or descriptor too short [ 309.460278][T10409] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 309.466936][T11148] ntfs: volume version 3.1. [ 309.490345][T10409] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 309.500682][T11123] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 309.516051][T10409] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.534545][T10409] usb 2-1: Product: syz [ 309.538779][T10409] usb 2-1: Manufacturer: syz [ 309.559514][T10409] usb 2-1: SerialNumber: syz [ 309.614257][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 309.793415][T10409] usb 2-1: Invalid number of CPorts: 0 [ 309.798970][T10409] es2_ap_driver: probe of 2-1:7.0 failed with error -22 [ 310.053313][T10409] usb 2-1: USB disconnect, device number 11 [ 310.388351][T11152] loop5: detected capacity change from 0 to 32768 [ 310.407424][T11152] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.3049 (11152) [ 310.492962][T11152] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 310.526569][T11152] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 310.565929][T11152] BTRFS info (device loop5): enabling auto defrag [ 310.594666][T11152] BTRFS info (device loop5): doing ref verification [ 310.645412][T11152] BTRFS info (device loop5): use no compression [ 310.667156][T11152] BTRFS info (device loop5): force clearing of disk cache [ 310.702426][T11152] BTRFS info (device loop5): max_inline at 4096 [ 310.708772][T11152] BTRFS info (device loop5): disabling free space tree [ 310.979459][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3066'. [ 311.154408][T11210] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 311.178885][T11210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.215288][T11152] BTRFS info (device loop5): enabling ssd optimizations [ 311.225872][T11152] BTRFS info (device loop5): rebuilding free space tree [ 311.285704][T11152] BTRFS info (device loop5): disabling free space tree [ 311.303547][T11152] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 311.339424][T11152] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 311.677267][T10300] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 312.069584][T11195] loop3: detected capacity change from 0 to 32768 [ 312.149775][T11195] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 312.209089][T11195] (syz.3.3068,11195,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=16, inode=65, rec_len=16, name_len=64 [ 312.339233][T11195] (syz.3.3068,11195,1):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 312.385126][T11195] (syz.3.3068,11195,1):ocfs2_mknod:298 ERROR: status = -2 [ 312.419383][T11195] (syz.3.3068,11195,1):ocfs2_mknod:502 ERROR: status = -2 [ 312.426590][T11195] (syz.3.3068,11195,1):ocfs2_mkdir:659 ERROR: status = -2 [ 312.686324][ T4268] ocfs2: Unmounting device (7,3) on (node local) [ 313.016993][T11258] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3090'. [ 313.316898][T11267] loop5: detected capacity change from 0 to 64 [ 313.903553][T11249] loop0: detected capacity change from 0 to 32768 [ 314.496310][T11300] dlm: Unknown command passed to DLM device : 0 [ 314.496310][T11300] [ 314.979021][T11315] loop3: detected capacity change from 0 to 512 [ 315.121884][T11315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 315.143824][T11293] loop0: detected capacity change from 0 to 32768 [ 315.151366][T11315] ext4 filesystem being mounted at /612/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.170052][T11293] (syz.0.3108,11293,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 315.220961][T11322] loop1: detected capacity change from 0 to 4096 [ 315.316218][T11293] (syz.0.3108,11293,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 315.358004][T11315] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #12: comm syz.3.3119: corrupted xattr block 6 [ 315.445745][T11293] JBD2: Ignoring recovery information on journal [ 315.479452][T11329] futex_wake_op: syz.4.3124 tries to shift op by -1; fix this program [ 315.602909][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 315.610303][T11293] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 315.740108][T11293] ocfs2: Unmounting device (7,0) on (node local) [ 315.931681][T11340] IPVS: length: 120 != 24 [ 316.157069][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3132'. [ 316.294932][ T26] audit: type=1326 audit(1760890317.389:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 316.339979][ T26] audit: type=1326 audit(1760890317.389:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 316.362267][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.467026][ T26] audit: type=1326 audit(1760890317.389:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 316.569436][ T26] audit: type=1326 audit(1760890317.389:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11349 comm="syz.5.3135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 317.157192][T11380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3149'. [ 317.178688][T11380] netlink: 'syz.5.3149': attribute type 3 has an invalid length. [ 317.189249][ T4341] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 317.207737][T11380] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3149'. [ 317.237086][T11380] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3149'. [ 317.331559][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.337935][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.380984][ T4341] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 317.399206][ T4341] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 317.425153][T11362] loop0: detected capacity change from 0 to 32768 [ 317.431923][ T4341] usb 2-1: config 220 has no interface number 2 [ 317.448797][ T4341] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 317.473414][ T4341] usb 2-1: config 220 interface 0 has no altsetting 0 [ 317.489480][T11362] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 317.499222][ T4341] usb 2-1: config 220 interface 76 has no altsetting 0 [ 317.506148][ T4341] usb 2-1: config 220 interface 1 has no altsetting 0 [ 317.527952][T11362] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 317.530137][ T4341] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 317.546190][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.554689][ T4341] usb 2-1: Product: syz [ 317.559537][ T4341] usb 2-1: Manufacturer: syz [ 317.564204][ T4341] usb 2-1: SerialNumber: syz [ 317.630206][ T4266] ocfs2: Unmounting device (7,0) on (node local) [ 317.797949][ T4341] usb 2-1: selecting invalid altsetting 0 [ 317.814626][ T4341] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 317.840482][ T4341] usb 2-1: No valid video chain found. [ 317.885468][ T4341] usb 2-1: selecting invalid altsetting 0 [ 317.903888][ T4341] usbtest: probe of 2-1:220.1 failed with error -22 [ 317.953534][ T4341] usb 2-1: USB disconnect, device number 12 [ 318.321505][T11411] openvswitch: netlink: Message has 4 unknown bytes. [ 319.480722][T11450] loop5: detected capacity change from 0 to 4096 [ 320.165119][T11475] loop0: detected capacity change from 0 to 512 [ 320.285042][ T26] audit: type=1326 audit(1760890321.379:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf8efc9 code=0x7ffc0000 [ 320.309499][T11475] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 320.318765][T11475] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.345930][T11475] EXT4-fs error (device loop0): ext4_xattr_block_get:546: inode #12: comm syz.0.3193: corrupted xattr block 6 [ 320.403559][T11441] loop3: detected capacity change from 0 to 32768 [ 320.457567][ T26] audit: type=1326 audit(1760890321.409:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f55fcf8efc9 code=0x7ffc0000 [ 320.479820][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.606248][ T26] audit: type=1326 audit(1760890321.409:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.3195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55fcf8efc9 code=0x7ffc0000 [ 320.621231][T11441] XFS (loop3): Mounting V5 Filesystem [ 320.628613][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.674021][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 320.880163][T11441] XFS (loop3): Ending clean mount [ 320.920225][T11441] XFS (loop3): Quotacheck needed: Please wait. [ 321.043698][T11441] XFS (loop3): Quotacheck: Done. [ 321.254198][ T4268] XFS (loop3): Unmounting Filesystem [ 321.443800][T11518] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 321.537221][T11520] loop5: detected capacity change from 0 to 512 [ 321.543766][T11518] CIFS mount error: No usable UNC path provided in device string! [ 321.543766][T11518] [ 321.592726][T11518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 321.670996][T11520] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 321.691200][T11527] loop1: detected capacity change from 0 to 256 [ 321.731779][T11527] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 321.785367][T11520] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.902132][T11520] EXT4-fs error (device loop5): ext4_xattr_block_get:546: inode #12: comm syz.5.3211: corrupted xattr block 6 [ 322.070881][T10300] EXT4-fs (loop5): unmounting filesystem. [ 322.232441][T11538] xt_cgroup: invalid path, errno=-2 [ 322.421606][T11546] xt_recent: Unsupported userspace flags (000000de) [ 322.572852][T11554] loop5: detected capacity change from 0 to 2048 [ 322.626420][T11554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 323.197868][T11570] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 323.337671][T11576] loop1: detected capacity change from 0 to 8 [ 323.515466][T11552] loop0: detected capacity change from 0 to 32768 [ 323.530162][T11576] SQUASHFS error: Unable to read inode 0xe3 [ 323.569474][T11552] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.3223 (11552) [ 323.593187][T11582] netlink: 'syz.4.3239': attribute type 15 has an invalid length. [ 323.622541][T11582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3239'. [ 323.645476][T11552] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 323.658296][T11583] netlink: 193 bytes leftover after parsing attributes in process `syz.3.3240'. [ 323.733450][T11552] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 323.777477][T11552] BTRFS info (device loop0): force zlib compression, level 3 [ 323.848778][T11552] BTRFS info (device loop0): force clearing of disk cache [ 323.878166][T11552] BTRFS info (device loop0): setting nodatasum [ 323.920265][T11552] BTRFS info (device loop0): allowing degraded mounts [ 323.927206][T11552] BTRFS info (device loop0): enabling disk space caching [ 323.999535][T11552] BTRFS info (device loop0): disk space caching is enabled [ 324.054458][T11588] loop1: detected capacity change from 0 to 4096 [ 324.068687][T11588] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 324.146227][T11588] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 324.294969][T11588] ntfs: volume version 3.1. [ 324.367152][T11552] BTRFS info (device loop0): rebuilding free space tree [ 324.390060][ T4880] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 324.468422][T11588] ntfs: (device loop1): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode. [ 324.484776][T11588] ntfs: (device loop1): ntfs_lookup(): Failed to convert name to Unicode. [ 324.505999][T11552] BTRFS info (device loop0): disabling free space tree [ 324.539353][T11552] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 324.549872][T11552] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 324.601044][ T4880] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 324.624787][ T4880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.666772][ T4880] usb 5-1: config 0 descriptor?? [ 324.695105][T11624] xt_policy: output policy not valid in PREROUTING and INPUT [ 324.936683][ T4266] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 325.110045][ T4880] [drm:udl_init] *ERROR* Selecting channel failed [ 325.146970][ T4880] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 325.194329][ T4880] [drm] Initialized udl on minor 2 [ 325.206276][ T4880] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 325.238201][ T4880] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 325.255749][ T4880] usb 5-1: USB disconnect, device number 7 [ 325.459329][ T6298] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 325.478892][T11643] loop1: detected capacity change from 0 to 256 [ 325.536593][T10407] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 325.538504][T11643] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 325.557145][T10407] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 325.617997][T10407] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 325.653439][ T6298] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 325.695066][ T6298] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.744136][ T6298] usb 6-1: Product: syz [ 325.748363][ T6298] usb 6-1: Manufacturer: syz [ 325.804879][ T6298] usb 6-1: SerialNumber: syz [ 325.838580][ T6298] usb 6-1: config 0 descriptor?? [ 325.867015][ T6298] i2c-tiny-usb 6-1:0.0: version 6d.cc found at bus 006 address 002 [ 326.132527][T11658] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3266'. [ 326.290437][ T6298] (null): failure reading functionality [ 326.309591][ T6298] i2c i2c-1: failure reading functionality [ 326.330077][ T6298] i2c i2c-1: connected i2c-tiny-usb device [ 326.348477][ T6298] usb 6-1: USB disconnect, device number 2 [ 326.488158][T11671] netlink: 'syz.3.3273': attribute type 1 has an invalid length. [ 326.690655][ T4341] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 326.901576][ T4341] usb 5-1: Using ep0 maxpacket: 32 [ 326.908797][ T4341] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 326.929695][ T4341] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.966794][ T4341] usb 5-1: config 0 has no interface number 0 [ 326.979264][ T4341] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 327.007161][ T4341] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 327.043436][ T4341] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.059889][ T4341] usb 5-1: Product: syz [ 327.064290][ T4341] usb 5-1: Manufacturer: syz [ 327.068924][ T4341] usb 5-1: SerialNumber: syz [ 327.130183][ T4341] usb 5-1: config 0 descriptor?? [ 327.143246][ T4341] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 327.151567][ T4341] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 327.310238][T11693] loop1: detected capacity change from 0 to 4096 [ 327.343051][ T4341] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 327.359439][ T4341] usbhid 5-1:0.35: couldn't find an input interrupt endpoint [ 327.546054][ T4264] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 327.580006][ T4341] usb 5-1: USB disconnect, device number 8 [ 327.603416][ T4264] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 327.730511][ T26] audit: type=1326 audit(1760890328.829:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 327.752889][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.852292][ T26] audit: type=1326 audit(1760890328.829:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 327.942554][ T26] audit: type=1326 audit(1760890328.889:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 327.961285][T11713] loop0: detected capacity change from 0 to 512 [ 328.003989][ T26] audit: type=1326 audit(1760890328.889:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 328.023944][T11718] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 328.027407][ T26] audit: type=1326 audit(1760890328.889:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11706 comm="syz.5.3290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 328.156964][T11713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 328.205750][T11723] loop3: detected capacity change from 0 to 4096 [ 328.225337][T11723] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 328.237649][T11713] ext4 filesystem being mounted at /682/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.435984][T11729] loop1: detected capacity change from 0 to 2048 [ 328.447064][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 328.453771][T11723] ntfs3: Couldn't remount rw because journal is not replayed. Please umount/remount instead [ 328.453771][T11723] [ 328.486570][T11729] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 328.624313][T11732] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.730315][T11729] NILFS error (device loop1): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 328.772392][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3302'. [ 328.845744][T11738] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3302'. [ 328.865619][T11729] Remounting filesystem read-only [ 328.877400][T11729] NILFS error (device loop1): nilfs_readdir: bad page in #2 [ 329.420886][ T26] audit: type=1400 audit(1760890330.519:87): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=11757 comm="syz.3.3312" [ 329.645648][T11769] loop3: detected capacity change from 0 to 512 [ 329.701205][T11769] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 329.749260][T11769] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 329.760986][T11769] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3317: Corrupt directory, running e2fsck is recommended [ 329.824038][T11774] netlink: 1096 bytes leftover after parsing attributes in process `syz.1.3318'. [ 329.837118][T11769] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 329.849071][T11769] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2196: inode #15: comm syz.3.3317: corrupted in-inode xattr [ 329.863375][T11769] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.3317: couldn't read orphan inode 15 (err -117) [ 329.875944][T11769] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 329.976294][T11769] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 330.035279][T11769] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 330.064723][T11769] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.3317: Corrupt directory, running e2fsck is recommended [ 330.187888][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 331.893122][T11849] IPv6: Can't replace route, no match found [ 332.011922][T11855] device ip6gretap1 entered promiscuous mode [ 332.513790][T11867] loop5: detected capacity change from 0 to 4096 [ 332.587511][T11875] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 332.664227][T11842] loop3: detected capacity change from 0 to 32768 [ 332.780688][T11842] (syz.3.3349,11842,0):ocfs2_init_local_system_inodes:492 ERROR: status=-22, sysfile=7, slot=0 [ 332.811446][T11842] (syz.3.3349,11842,0):ocfs2_init_local_system_inodes:501 ERROR: status = -22 [ 332.859577][T11842] (syz.3.3349,11842,0):ocfs2_mount_volume:1815 ERROR: status = -22 [ 332.942973][T11842] (syz.3.3349,11842,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 333.274445][T11892] netlink: 'syz.3.3371': attribute type 32 has an invalid length. [ 333.576132][T11897] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3373'. [ 334.621310][T11886] loop0: detected capacity change from 0 to 32768 [ 334.699610][T11886] gfs2: fsid=__"_z#˱1 I3wʂX9: Trying to join cluster "lock_nolock", "__"_z#˱1 I3wʂX9" [ 334.781203][T11886] gfs2: fsid=__"_z#˱1 I3wʂX9: Now mounting FS (format 1801)... [ 334.839372][T11886] gfs2: fsid=__"_z#˱1 I3wʂX9.0: no journals! [ 335.573504][T11957] loop3: detected capacity change from 0 to 256 [ 336.347302][T11985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3417'. [ 336.399980][T11987] xt_bpf: check failed: parse error [ 336.647929][T11997] loop0: detected capacity change from 0 to 16 [ 336.681302][T11997] erofs: (device loop0): mounted with root inode @ nid 36. [ 336.723066][T11997] erofs: (device loop0): z_erofs_readahead: readahead error at page 2 @ nid 9895604650073 [ 336.775854][ T4283] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[8192] [ 336.786921][T11997] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[4096] [ 336.830475][ T26] audit: type=1800 audit(1760890337.919:88): pid=11997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3423" name="file3" dev="loop0" ino=9895604650073 res=0 errno=0 [ 337.058946][T12011] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3429'. [ 337.123072][T12015] netlink: 'syz.4.3431': attribute type 19 has an invalid length. [ 337.188895][T12018] loop5: detected capacity change from 0 to 256 [ 337.191589][T12019] loop3: detected capacity change from 0 to 256 [ 337.266270][T12019] FAT-fs (loop3): Directory bread(block 64) failed [ 337.283382][T12019] FAT-fs (loop3): Directory bread(block 65) failed [ 337.316443][T12018] loop5: Can't mount, would change RO state [ 337.322083][T12019] FAT-fs (loop3): Directory bread(block 66) failed [ 337.362611][T12019] FAT-fs (loop3): Directory bread(block 67) failed [ 337.382819][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3436'. [ 337.394352][T12019] FAT-fs (loop3): Directory bread(block 68) failed [ 337.434334][T12019] FAT-fs (loop3): Directory bread(block 69) failed [ 337.469287][T12019] FAT-fs (loop3): Directory bread(block 70) failed [ 337.505084][T12019] FAT-fs (loop3): Directory bread(block 71) failed [ 337.527898][T12019] FAT-fs (loop3): Directory bread(block 72) failed [ 337.560844][T12019] FAT-fs (loop3): Directory bread(block 73) failed [ 337.963031][T12041] loop5: detected capacity change from 0 to 128 [ 338.293588][T12052] netlink: 'syz.5.3450': attribute type 1 has an invalid length. [ 338.538615][T12063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3456'. [ 338.672173][T12063] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3456'. [ 339.032796][T12079] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.214506][T12085] loop0: detected capacity change from 0 to 1024 [ 339.320208][T12085] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 339.590129][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 340.106539][T12121] loop0: detected capacity change from 0 to 764 [ 340.734708][T12148] netlink: 'syz.5.3497': attribute type 21 has an invalid length. [ 340.810433][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3498'. [ 341.213636][T12165] cgroup: subsys name conflicts with all [ 341.222067][T12169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 341.576343][T12181] loop1: detected capacity change from 0 to 2048 [ 341.597049][T12181] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 341.665399][T12184] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.729240][ T4341] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 341.787543][T12181] NILFS (loop1): error -2 truncating bmap (ino=16) [ 341.908719][T12181] syz.1.3511 (12181) used greatest stack depth: 19848 bytes left [ 341.930527][ T4341] usb 6-1: Using ep0 maxpacket: 32 [ 341.939946][ T4341] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 341.964743][T12192] loop3: detected capacity change from 0 to 512 [ 341.989202][ T4341] usb 6-1: config 0 has no interface number 0 [ 341.995478][ T4341] usb 6-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 342.039623][ T4341] usb 6-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 342.093745][T12192] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 342.104234][ T4341] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 342.109454][T12192] ext4 filesystem being mounted at /691/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.137719][ T4341] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.157542][T12199] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8) [ 342.183879][ T4341] usb 6-1: Product: syz [ 342.188222][ T4341] usb 6-1: Manufacturer: syz [ 342.208476][ T4341] usb 6-1: SerialNumber: syz [ 342.223580][T12192] Quota error (device loop3): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 342.246852][ T4341] usb 6-1: config 0 descriptor?? [ 342.273923][ T4341] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 342.278398][T12192] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 342.341027][T12192] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.3517: Failed to acquire dquot type 0 [ 342.475672][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 342.475802][ T4341] usb 6-1: qt2_setup_urbs - submit read urb failed -90 [ 342.507602][ T4341] quatech2: probe of 6-1:0.51 failed with error -90 [ 342.714486][ T4880] usb 6-1: USB disconnect, device number 3 [ 342.797176][T12212] loop0: detected capacity change from 0 to 4096 [ 342.828447][T12212] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 342.884102][T12212] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 342.903920][T12212] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 342.954996][T12212] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 342.990506][T12212] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 343.056664][T12212] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 343.076852][T12212] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5). [ 343.156187][T12212] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 343.207355][T12212] ntfs: volume version 3.1. [ 343.637685][T12234] loop3: detected capacity change from 0 to 64 [ 343.656941][T12235] netlink: 'syz.0.3537': attribute type 3 has an invalid length. [ 344.314913][T12255] loop1: detected capacity change from 0 to 1024 [ 344.421293][T12255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 344.506301][T12263] loop5: detected capacity change from 0 to 256 [ 344.560407][T12265] 9p: Unknown access argument z: -22 [ 344.692772][T12263] FAT-fs (loop5): Directory bread(block 64) failed [ 344.725844][T12263] FAT-fs (loop5): Directory bread(block 65) failed [ 344.756731][T12263] FAT-fs (loop5): Directory bread(block 66) failed [ 344.779690][T12263] FAT-fs (loop5): Directory bread(block 67) failed [ 344.824825][T12263] FAT-fs (loop5): Directory bread(block 68) failed [ 344.844849][T12263] FAT-fs (loop5): Directory bread(block 69) failed [ 344.875297][T12263] FAT-fs (loop5): Directory bread(block 70) failed [ 344.887445][ T4264] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 344.899733][T12263] FAT-fs (loop5): Directory bread(block 71) failed [ 344.906398][T12263] FAT-fs (loop5): Directory bread(block 72) failed [ 344.929244][T12263] FAT-fs (loop5): Directory bread(block 73) failed [ 344.939723][ T4264] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz-executor: deleted inode referenced: 11 [ 345.056188][T12247] loop3: detected capacity change from 0 to 32768 [ 345.169822][T12247] (syz.3.3543,12247,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 345.206279][T12247] (syz.3.3543,12247,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 345.293916][T12247] JBD2: Ignoring recovery information on journal [ 345.508241][ T4264] EXT4-fs (loop1): unmounting filesystem. [ 345.564689][T12247] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 345.657947][T12247] ocfs2: Unmounting device (7,3) on (node local) [ 345.888660][T12292] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 346.045237][ T8983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.238799][ T8983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.442828][ T8983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.448592][T12302] loop5: detected capacity change from 0 to 4096 [ 346.571826][ T8983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.035354][T12314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3578'. [ 347.082675][ T8983] device .*! left promiscuous mode [ 347.146924][T12313] loop5: detected capacity change from 0 to 4096 [ 347.188418][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 347.199755][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 347.208994][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 347.238613][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 347.252971][ T4277] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 347.266002][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 347.307898][T12313] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 347.395384][T12298] loop3: detected capacity change from 0 to 32768 [ 347.538804][T10300] EXT4-fs (loop5): unmounting filesystem. [ 347.824582][T12318] lo speed is unknown, defaulting to 1000 [ 348.507685][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3591'. [ 348.543070][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3591'. [ 348.589231][ T6296] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 348.779172][ T6296] usb 4-1: Using ep0 maxpacket: 32 [ 348.791831][ T6296] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 348.835437][ T6296] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 348.875950][ T6296] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 348.926128][ T6296] usb 4-1: config 1 has no interface number 0 [ 348.949283][ T6296] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.998782][ T6296] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024 [ 349.036406][ T6296] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 349.073215][ T6296] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 349.101170][ T6296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.143091][T12345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.148964][T12318] chnl_net:caif_netlink_parms(): no params data found [ 349.157476][ T6296] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 349.329664][ T4277] Bluetooth: hci0: command 0x0409 tx timeout [ 349.381752][T12345] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.438184][ T6296] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 349.706357][T10414] usb 4-1: USB disconnect, device number 16 [ 349.731550][T10414] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 350.227824][T12318] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.261195][T12318] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.294121][T12318] device bridge_slave_0 entered promiscuous mode [ 350.321956][T12318] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.331379][T12318] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.391917][T12318] device bridge_slave_1 entered promiscuous mode [ 350.907744][T12318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.920465][T12401] loop0: detected capacity change from 0 to 2048 [ 350.942332][T12401] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 350.987197][T12401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.998934][T12318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.059034][ T8983] device hsr_slave_0 left promiscuous mode [ 351.106721][ T8983] device hsr_slave_1 left promiscuous mode [ 351.175803][ T8983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.198528][ T8983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.236658][ T8983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.257407][ T8983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.308957][ T8983] device dummy0 left promiscuous mode [ 351.346455][ T8983] bridge0: port 4(dummy0) entered disabled state [ 351.386349][ T8983] bridge0: port 3(batadv0) entered disabled state [ 351.409278][ T4277] Bluetooth: hci0: command 0x041b tx timeout [ 351.484549][ T8983] device bridge_slave_1 left promiscuous mode [ 351.498409][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.541750][ T8983] device bridge_slave_0 left promiscuous mode [ 351.548099][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.606045][T12393] loop3: detected capacity change from 0 to 32768 [ 351.673195][ T8983] device veth0_macvtap left promiscuous mode [ 351.690366][ T8983] device veth1_vlan left promiscuous mode [ 351.698723][ T8983] device veth0_vlan left promiscuous mode [ 351.703581][T12393] __jfs_setxattr: xattr_size = 72, new_size = 12051 [ 352.393776][ T8983] bond1 (unregistering): Released all slaves [ 352.884447][T12448] loop5: detected capacity change from 0 to 256 [ 352.902845][T12448] exfat: Deprecated parameter 'utf8' [ 352.931195][T12448] exfat: Deprecated parameter 'utf8' [ 352.982562][T12448] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 353.109580][T12448] overlayfs: filesystem on './file0' not supported [ 353.407205][T12459] tmpfs: Bad value for 'mpol' [ 353.509454][ T4277] Bluetooth: hci0: command 0x040f tx timeout [ 353.541540][T12461] loop5: detected capacity change from 0 to 4096 [ 353.555442][T12461] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 353.662993][T12461] ntfs3: loop5: failed to convert "c46c" to iso8859-5 [ 353.799893][T12465] xt_hashlimit: overflow, try lower: 5/0 [ 353.912559][T12467] autofs4:pid:12467:autofs_fill_super: called with bogus options [ 353.987048][ T8983] device team_slave_1 left promiscuous mode [ 354.007040][ T8983] team0 (unregistering): Port device team_slave_1 removed [ 354.098804][ T8983] device team_slave_0 left promiscuous mode [ 354.117948][ T8983] team0 (unregistering): Port device team_slave_0 removed [ 354.277416][ T8983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.304347][T12475] loop5: detected capacity change from 0 to 1024 [ 354.389345][ T41] hfsplus: b-tree write err: -5, ino 4 [ 354.395949][ T8983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.836592][T12479] loop5: detected capacity change from 0 to 32768 [ 354.912607][T12479] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt [ 354.912607][T12479] [ 354.941198][T12479] ERROR: (device loop5): remounting filesystem as read-only [ 354.948786][T12479] jfs_lookup: dtSearch returned -5 [ 355.437698][ T8983] bond0 (unregistering): Released all slaves [ 355.498607][T12481] loop5: detected capacity change from 0 to 32768 [ 355.522716][T12481] XFS (loop5): Mounting V5 Filesystem [ 355.579301][ T4277] Bluetooth: hci0: command 0x0419 tx timeout [ 355.684815][T12481] XFS (loop5): Ending clean mount [ 355.693021][T12318] team0: Port device team_slave_0 added [ 355.743926][T12318] team0: Port device team_slave_1 added [ 355.763660][T12491] usb usb8: usbfs: process 12491 (syz.0.3643) did not claim interface 0 before use [ 355.859887][T10300] XFS (loop5): Unmounting Filesystem [ 355.891957][T12318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.899000][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.059376][T12318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.095170][T12318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.132917][T12318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.259210][T12318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.287207][T12501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.445816][T12318] device hsr_slave_0 entered promiscuous mode [ 356.490216][T12318] device hsr_slave_1 entered promiscuous mode [ 356.609346][T12508] netlink: 'syz.5.3645': attribute type 3 has an invalid length. [ 357.183706][T12318] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.212860][T12318] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.240211][T12318] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.258784][T12318] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.579824][T12318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.623298][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 357.651878][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 357.680313][T12318] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.740062][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 357.768936][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 357.796917][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.804127][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.874811][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 357.883131][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 357.883145][ T26] audit: type=1326 audit(1760890358.969:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.5.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 357.934538][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 357.961853][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.969048][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.999174][ T26] audit: type=1326 audit(1760890358.989:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.5.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 358.047116][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.085932][ T26] audit: type=1326 audit(1760890358.989:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.5.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 358.101574][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.144257][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 358.179516][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.202425][ T26] audit: type=1326 audit(1760890358.989:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12552 comm="syz.5.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 358.216978][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.280204][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.300284][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.335283][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.360193][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.380624][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.389042][T12557] loop5: detected capacity change from 0 to 4096 [ 358.406055][T12560] SET target dimension over the limit! [ 358.414831][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.481172][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.518837][T12318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.580099][T12557] ntfs3: loop5: ino=5, "/" directory corrupted [ 358.587023][T12557] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 359.520470][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.528084][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.566225][T12318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.634913][ T6296] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 359.833165][ T6296] usb 1-1: Using ep0 maxpacket: 16 [ 359.848122][ T6296] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 359.888040][ T6296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.918419][ T6296] usb 1-1: Product: syz [ 359.931662][T12575] loop5: detected capacity change from 0 to 32768 [ 359.938949][ T6296] usb 1-1: Manufacturer: syz [ 359.949195][ T6296] usb 1-1: SerialNumber: syz [ 359.974754][ T6296] usb 1-1: config 0 descriptor?? [ 359.980785][T12575] (syz.5.3672,12575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 360.019072][ T6296] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 360.041145][ T6296] usb 1-1: Detected FT232H [ 360.045679][T12575] (syz.5.3672,12575,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 360.120308][T12575] JBD2: Ignoring recovery information on journal [ 360.269704][T12575] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 360.377835][T12575] ocfs2: Unmounting device (7,5) on (node local) [ 360.418699][ T6296] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 360.436530][ T6296] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 360.485021][ T6296] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 360.514766][ T6296] usb 1-1: USB disconnect, device number 10 [ 360.557759][ T6296] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 360.595201][ T6296] ftdi_sio 1-1:0.0: device disconnected [ 360.742951][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.778465][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.812780][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.832025][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.848439][T12318] device veth0_vlan entered promiscuous mode [ 360.867366][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.876266][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.898619][T12318] device veth1_vlan entered promiscuous mode [ 360.964620][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 360.982735][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 361.028022][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.050461][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.082808][T12318] device veth0_macvtap entered promiscuous mode [ 361.122740][T12318] device veth1_macvtap entered promiscuous mode [ 361.210056][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.230980][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.261429][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.309845][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.379205][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.421065][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.476265][T12318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.516296][T12637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.584419][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 361.605197][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.620692][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 361.634391][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 361.658075][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.684907][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.736842][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.765136][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.790563][T12318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.839156][T12318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.885167][T12318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.905050][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 361.929903][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 361.956139][T12318] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.011134][T12318] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.049143][T12318] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.057997][T12318] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.111193][T12655] netlink: 'syz.4.3695': attribute type 9 has an invalid length. [ 362.339366][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.347882][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.424447][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 362.520879][ T4365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.538635][ T4365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.565113][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 363.234427][T12691] kAFS: unable to lookup cell '\/' [ 363.574245][T12699] loop6: detected capacity change from 0 to 4096 [ 363.633591][T12699] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 364.145030][T12726] loop0: detected capacity change from 0 to 64 [ 365.275190][T12759] loop0: detected capacity change from 0 to 256 [ 365.449828][T12759] FAT-fs (loop0): Directory bread(block 64) failed [ 365.489298][T12759] FAT-fs (loop0): Directory bread(block 65) failed [ 365.496102][T12759] FAT-fs (loop0): Directory bread(block 66) failed [ 365.526546][T12759] FAT-fs (loop0): Directory bread(block 67) failed [ 365.526626][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3738'. [ 365.542697][T12759] FAT-fs (loop0): Directory bread(block 68) failed [ 365.560527][T12759] FAT-fs (loop0): Directory bread(block 69) failed [ 365.603371][T12769] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3740'. [ 365.604947][T12759] FAT-fs (loop0): Directory bread(block 70) failed [ 365.623789][T12769] tc_dump_action: action bad kind [ 365.649381][T12759] FAT-fs (loop0): Directory bread(block 71) failed [ 365.656098][T12759] FAT-fs (loop0): Directory bread(block 72) failed [ 365.670455][T12759] FAT-fs (loop0): Directory bread(block 73) failed [ 365.786092][T12759] syz.0.3736: attempt to access beyond end of device [ 365.786092][T12759] loop0: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 365.864560][T12777] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.872277][T12777] IPv6: NLM_F_CREATE should be set when creating new route [ 365.879604][T12777] IPv6: NLM_F_CREATE should be set when creating new route [ 366.497746][ T26] audit: type=1326 audit(1760890367.589:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.5.3751" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x0 [ 366.685204][T12804] netlink: 'syz.6.3752': attribute type 1 has an invalid length. [ 366.852111][ T26] audit: type=1326 audit(1760890367.949:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 366.915517][ T26] audit: type=1326 audit(1760890367.979:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 367.016252][ T26] audit: type=1326 audit(1760890367.979:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 367.119459][ T26] audit: type=1326 audit(1760890367.979:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12808 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 367.401027][T12828] netlink: 'syz.0.3765': attribute type 27 has an invalid length. [ 367.423989][T12828] netlink: 'syz.0.3765': attribute type 3 has an invalid length. [ 367.458223][T12828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3765'. [ 368.182942][T12854] netlink: 'syz.0.3773': attribute type 49 has an invalid length. [ 368.456640][T12862] loop6: detected capacity change from 0 to 256 [ 368.478330][ T4283] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 368.490839][ T4283] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 368.499483][ T4283] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 368.526525][T12862] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 368.547374][ T4283] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 368.547717][T12862] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 368.565559][ T4280] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 368.574310][ T4280] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 368.612790][T12862] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x712be3da, utbl_chksum : 0xe619d30d) [ 368.688317][T12834] loop5: detected capacity change from 0 to 32768 [ 368.717027][T12861] lo speed is unknown, defaulting to 1000 [ 368.738750][T12862] exFAT-fs (loop6): hint_cluster is invalid (8454146) [ 368.772535][T12862] exFAT-fs (loop6): error, failed to bmap (inode : ffff888071eca1e0 iblock : 8, err : -5) [ 368.779894][T12834] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3766 (12834) [ 368.872355][T12862] exFAT-fs (loop6): Filesystem has been set read-only [ 368.909493][T12834] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.936826][T12862] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00810001) [ 368.974835][T12834] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 368.988088][T12862] exFAT-fs (loop6): error, invalid access to FAT (entry 0x00810001) [ 369.011719][ T8968] kworker/u4:13: attempt to access beyond end of device [ 369.011719][ T8968] loop6: rw=1048577, sector=67633281, nr_sectors = 1 limit=256 [ 369.058182][T12834] BTRFS info (device loop5): using free space tree [ 369.084019][ T8968] Buffer I/O error on dev loop6, logical block 67633281, lost async page write [ 369.119393][ T8968] kworker/u4:13: attempt to access beyond end of device [ 369.119393][ T8968] loop6: rw=1048577, sector=67633282, nr_sectors = 1 limit=256 [ 369.226206][ T8968] Buffer I/O error on dev loop6, logical block 67633282, lost async page write [ 369.246209][ T8968] kworker/u4:13: attempt to access beyond end of device [ 369.246209][ T8968] loop6: rw=1048577, sector=67633283, nr_sectors = 1 limit=256 [ 369.266502][ T8968] Buffer I/O error on dev loop6, logical block 67633283, lost async page write [ 369.346479][ T8968] kworker/u4:13: attempt to access beyond end of device [ 369.346479][ T8968] loop6: rw=1048577, sector=67633284, nr_sectors = 1 limit=256 [ 369.361935][ T8968] Buffer I/O error on dev loop6, logical block 67633284, lost async page write [ 369.371257][ T8968] kworker/u4:13: attempt to access beyond end of device [ 369.371257][ T8968] loop6: rw=1048577, sector=67633285, nr_sectors = 1 limit=256 [ 369.493901][T12898] loop0: detected capacity change from 0 to 256 [ 369.514210][T12861] chnl_net:caif_netlink_parms(): no params data found [ 369.522312][T12834] BTRFS info (device loop5): enabling ssd optimizations [ 369.528290][ T8968] Buffer I/O error on dev loop6, logical block 67633285, lost async page write [ 369.538423][ T8968] kworker/u4:13: attempt to access beyond end of device [ 369.538423][ T8968] loop6: rw=1048577, sector=67633286, nr_sectors = 1 limit=256 [ 369.629157][ T8968] Buffer I/O error on dev loop6, logical block 67633286, lost async page write [ 369.638210][ T8968] kworker/u4:13: attempt to access beyond end of device [ 369.638210][ T8968] loop6: rw=1048577, sector=67633287, nr_sectors = 1 limit=256 [ 369.750696][ T8968] Buffer I/O error on dev loop6, logical block 67633287, lost async page write [ 369.842857][T10300] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 369.958775][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.005687][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.050349][T12861] device bridge_slave_0 entered promiscuous mode [ 370.109588][T12861] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.116883][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.135846][T12861] device bridge_slave_1 entered promiscuous mode [ 370.395125][ T4382] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (4382) [ 370.516035][T12918] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.561266][T12918] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.609278][ T4277] Bluetooth: hci6: command 0x0409 tx timeout [ 370.632658][T12861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.721497][T12861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.798569][T12933] xt_l2tp: missing protocol rule (udp|l2tpip) [ 370.846431][T12934] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 370.971092][T12861] team0: Port device team_slave_0 added [ 371.025251][T12861] team0: Port device team_slave_1 added [ 371.187490][T12861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.203083][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.238080][T12861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.294272][T12861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.332556][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.465910][T12861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.624500][T12861] device hsr_slave_0 entered promiscuous mode [ 371.693762][T12861] device hsr_slave_1 entered promiscuous mode [ 371.738927][T12861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.759655][T12861] Cannot create hsr debugfs directory [ 371.765251][T12957] netlink: 'syz.6.3803': attribute type 7 has an invalid length. [ 372.081273][T12967] dlm: no locking on control device [ 372.177404][T12938] loop5: detected capacity change from 0 to 32768 [ 372.331653][T12861] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 372.381249][T12938] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 372.469420][T12861] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 372.511903][T12861] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 372.571101][T12978] loop0: detected capacity change from 0 to 2048 [ 372.587739][T12861] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 372.616963][T12978] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 372.689665][ T4277] Bluetooth: hci6: command 0x041b tx timeout [ 372.735523][T10300] ocfs2: Unmounting device (7,5) on (node local) [ 373.016437][T12861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.069832][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.077809][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.125523][T12861] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.161588][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.203494][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.233205][ T8968] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.240442][ T8968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.299919][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.343444][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.363266][ T8968] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.386147][T13009] loop0: detected capacity change from 0 to 512 [ 373.404398][ T8968] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.411600][ T8968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.486909][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.511228][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.599749][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 373.628642][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 373.655544][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 373.693524][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 373.723641][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 373.734206][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 373.780175][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 373.796206][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 373.836210][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 373.847022][T12861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 374.413062][ T26] audit: type=1400 audit(1760890375.509:98): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=13041 comm="syz.4.3834" [ 374.435935][T13045] openvswitch: netlink: EtherType 0 is less than min 600 [ 374.770647][ T4277] Bluetooth: hci6: command 0x040f tx timeout [ 374.848024][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 374.875627][ T8983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 374.915866][T12861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.953347][T13058] lo speed is unknown, defaulting to 1000 [ 375.197371][ T26] audit: type=1400 audit(1760890376.289:99): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=13067 comm="syz.4.3846" [ 375.942202][T13098] netlink: 'syz.6.3858': attribute type 2 has an invalid length. [ 375.953582][T13093] loop5: detected capacity change from 0 to 2048 [ 376.050391][T13093] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 376.059026][T13093] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.097535][T13093] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.3855: bg 0: block 345: padding at end of block bitmap is not set [ 376.126705][T13093] EXT4-fs (loop5): Remounting filesystem read-only [ 376.297287][T10300] EXT4-fs (loop5): unmounting filesystem. [ 376.600686][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.662812][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.686014][T13124] nfs: Unknown parameter 'ntext' [ 376.708252][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.764630][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.810387][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.839655][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.849554][ T4277] Bluetooth: hci6: command 0x0419 tx timeout [ 376.875995][T12861] device veth0_vlan entered promiscuous mode [ 376.984344][T12861] device veth1_vlan entered promiscuous mode [ 377.087723][T13136] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.130139][T13136] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.137393][T13136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.231498][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3874'. [ 377.232749][T12861] device veth0_macvtap entered promiscuous mode [ 377.319191][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 377.328329][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 377.346170][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.364200][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.390449][T12861] device veth1_macvtap entered promiscuous mode [ 377.410120][T13143] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3875'. [ 377.446516][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 377.470997][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 377.557417][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.590141][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.622383][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.644479][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.696279][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.717214][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.727491][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.747047][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.770680][T12861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.798489][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 377.855821][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 377.897142][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.927811][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.952722][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.958891][T13153] loop6: detected capacity change from 0 to 8192 [ 377.983658][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.005165][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.028451][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.050167][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.076764][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.102293][T12861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.127436][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 378.145373][ T8965] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 378.181532][T12861] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.223748][T12861] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.265319][T12861] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.319175][T12861] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.596246][ T8983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.631308][ T8983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.736933][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 378.758014][ T8974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.779443][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.785829][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.808798][ T8974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.938588][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 379.021534][T13181] loop5: detected capacity change from 0 to 256 [ 379.105291][T13181] FAT-fs (loop5): Directory bread(block 64) failed [ 379.139688][T13181] FAT-fs (loop5): Directory bread(block 65) failed [ 379.146428][T13181] FAT-fs (loop5): Directory bread(block 66) failed [ 379.199274][T13181] FAT-fs (loop5): Directory bread(block 67) failed [ 379.252392][T13181] FAT-fs (loop5): Directory bread(block 68) failed [ 379.314507][T13181] FAT-fs (loop5): Directory bread(block 69) failed [ 379.356332][T13181] FAT-fs (loop5): Directory bread(block 70) failed [ 379.415138][T13181] FAT-fs (loop5): Directory bread(block 71) failed [ 379.449538][T13181] FAT-fs (loop5): Directory bread(block 72) failed [ 379.456239][T13181] FAT-fs (loop5): Directory bread(block 73) failed [ 379.612653][T13202] cgroup: none used incorrectly [ 380.189743][T13220] loop6: detected capacity change from 0 to 256 [ 380.197100][T13220] exfat: Deprecated parameter 'namecase' [ 380.268790][T13220] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 381.369213][ T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 381.476545][T13264] netlink: 'syz.5.3928': attribute type 21 has an invalid length. [ 381.505039][T13264] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3928'. [ 381.519428][T13264] netlink: 'syz.5.3928': attribute type 5 has an invalid length. [ 381.534019][T13264] netlink: 'syz.5.3928': attribute type 6 has an invalid length. [ 381.545334][T13264] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3928'. [ 381.561349][ T7] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.584625][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.623298][ T7] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 381.678696][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 381.707467][ T7] usb 7-1: SerialNumber: syz [ 381.833325][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3933'. [ 381.887265][T13276] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3933'. [ 381.947962][ T7] usb 7-1: 0:2 : does not exist [ 381.966522][ T7] usb 7-1: unit 5 not found! [ 382.039691][ T7] usb 7-1: USB disconnect, device number 2 [ 382.296059][T13290] comedi comedi3: Minor 20263 is invalid! [ 382.340923][ T4382] udevd[4382]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.222959][T13327] loop7: detected capacity change from 0 to 256 [ 383.246599][T13325] loop0: detected capacity change from 0 to 2048 [ 383.304799][T13327] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad258, utbl_chksum : 0xe619d30d) [ 383.319713][T13325] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 383.407796][T13331] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 384.051392][T13347] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3963'. [ 384.419263][ T4880] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 384.645712][ T4880] usb 5-1: Using ep0 maxpacket: 16 [ 384.653479][ T4880] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 384.681760][ T4880] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 384.700272][T13369] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 384.714399][ T4880] usb 5-1: config 0 has no interface number 0 [ 384.755270][ T4880] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 384.795318][ T4880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.819135][ T4880] usb 5-1: Product: syz [ 384.823372][ T4880] usb 5-1: Manufacturer: syz [ 384.865595][ T4880] usb 5-1: SerialNumber: syz [ 384.886054][ T4880] usb 5-1: config 0 descriptor?? [ 384.888609][T13334] loop6: detected capacity change from 0 to 40427 [ 384.927305][T13334] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 384.969337][T13334] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 385.085967][T13334] F2FS-fs (loop6): Found nat_bits in checkpoint [ 385.111718][ T4880] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 385.129595][ T4880] usb 5-1: No valid video chain found. [ 385.155233][ T26] audit: type=1326 audit(1760890386.249:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.5.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 385.186931][ T4880] usb 5-1: USB disconnect, device number 9 [ 385.278180][ T26] audit: type=1326 audit(1760890386.249:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.5.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 385.364880][T13334] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 385.389440][ T26] audit: type=1326 audit(1760890386.269:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.5.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 385.411811][ C1] vkms_vblank_simulate: vblank timer overrun [ 385.419380][T13334] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 385.480132][ T26] audit: type=1326 audit(1760890386.269:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.5.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 385.543141][T13334] fscrypt (loop6, inode 3): Error -61 getting encryption context [ 385.569539][ T26] audit: type=1326 audit(1760890386.269:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13381 comm="syz.5.3974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ef2b8efc9 code=0x7ffc0000 [ 386.146909][T13414] netlink: 'syz.5.3986': attribute type 13 has an invalid length. [ 386.340239][T13417] x_tables: duplicate entry at hook 3 [ 386.674284][T13428] netlink: 'syz.4.3992': attribute type 10 has an invalid length. [ 386.727128][T13428] team0: Cannot enslave team device to itself [ 386.987913][T13441] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 387.564263][ T6303] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 387.727080][T13471] loop0: detected capacity change from 0 to 22 [ 387.750125][T13471] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 387.777460][T13471] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 387.779270][ T6303] usb 5-1: Using ep0 maxpacket: 16 [ 387.856544][ T6303] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 387.888008][ T6303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.931063][ T6303] usb 5-1: Product: syz [ 387.935676][ T6303] usb 5-1: Manufacturer: syz [ 387.955612][ T6303] usb 5-1: SerialNumber: syz [ 387.988414][ T6303] usb 5-1: config 0 descriptor?? [ 388.009548][ T6303] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 388.219875][ T6298] usb 5-1: USB disconnect, device number 10 [ 388.320543][ T6303] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 388.386895][T13459] loop6: detected capacity change from 0 to 32768 [ 388.459330][T13459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.4005 (13459) [ 388.495035][T13459] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 388.509189][ T6303] usb 6-1: Using ep0 maxpacket: 16 [ 388.518767][ T6303] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 388.529354][ T6303] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.536145][T13459] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 388.539193][ T6303] usb 6-1: Product: syz [ 388.559142][ T6303] usb 6-1: Manufacturer: syz [ 388.563941][ T6303] usb 6-1: SerialNumber: syz [ 388.571930][T13459] BTRFS info (device loop6): enabling auto defrag [ 388.575144][ T6303] usb 6-1: config 0 descriptor?? [ 388.616375][T13459] BTRFS info (device loop6): use no compression [ 388.650095][T13459] BTRFS info (device loop6): force clearing of disk cache [ 388.657300][T13459] BTRFS info (device loop6): turning on flush-on-commit [ 388.705308][T13459] BTRFS info (device loop6): max_inline at 57 [ 388.725943][T13459] BTRFS info (device loop6): disabling free space tree [ 388.809380][ T6303] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 388.820123][ T6303] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 388.887582][T13506] delete_channel: no stack [ 388.991355][T13459] BTRFS info (device loop6): enabling ssd optimizations [ 388.999408][T13459] BTRFS info (device loop6): rebuilding free space tree [ 389.028248][ T6303] usb 6-1: USB disconnect, device number 4 [ 389.063772][T13459] BTRFS info (device loop6): disabling free space tree [ 389.079347][T13459] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 389.089053][T13459] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 389.513783][T12318] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 389.515165][T13538] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4025'. [ 389.644638][T13542] netlink: 160 bytes leftover after parsing attributes in process `syz.7.4028'. [ 390.855194][T13572] loop7: detected capacity change from 0 to 4096 [ 391.028406][T13572] ntfs3: loop7: ino=5, "/" directory corrupted [ 391.185189][T13589] mkiss: ax0: crc mode is auto. [ 391.862116][T13617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4057'. [ 391.935126][T13614] lo speed is unknown, defaulting to 1000 [ 392.267797][T13653] loop0: detected capacity change from 0 to 1764 [ 392.346088][T13653] gfs2: Unexpected value for 'discard' [ 393.299267][ T4333] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 393.349539][T13714] netlink: 'syz.7.4077': attribute type 1 has an invalid length. [ 393.489607][ T4333] usb 6-1: Using ep0 maxpacket: 32 [ 393.497186][ T4333] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.546480][ T4333] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.568710][T13724] loop0: detected capacity change from 0 to 512 [ 393.581734][ T4333] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 393.609130][ T4333] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 393.635430][ T4333] usb 6-1: Product: syz [ 393.643515][ T4333] usb 6-1: Manufacturer: syz [ 393.685564][ T4333] hub 6-1:4.0: USB hub found [ 393.846047][T13724] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 393.888958][T13724] ext4 filesystem being mounted at /861/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.910010][ T4333] hub 6-1:4.0: 2 ports detected [ 394.116043][ T4333] hub 6-1:4.0: hub_hub_status failed (err = -71) [ 394.130992][ T4266] EXT4-fs (loop0): unmounting filesystem. [ 394.131705][ T4333] hub 6-1:4.0: config failed, can't get hub status (err -71) [ 394.241038][ T4333] usb 6-1: USB disconnect, device number 5 [ 395.188946][T13842] netlink: 'syz.7.4097': attribute type 30 has an invalid length. [ 395.229172][T13842] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4097'. [ 395.276087][T13842] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 395.329467][T13842] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 396.270502][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4111'. [ 396.534193][T13845] loop5: detected capacity change from 0 to 32768 [ 396.566553][T13900] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4114'. [ 396.616612][T13906] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 396.665438][T13845] ea_get: invalid extended attribute [ 396.685256][T13845] ffff888071d62830: 04 00 00 00 .... [ 397.124598][T13933] Timeout policy `syz1' can only be used by L3 protocol number 34824 [ 397.279151][T10404] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 397.480634][T10404] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 397.510586][T10404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.538996][T10404] usb 5-1: Product: syz [ 397.543827][T10404] usb 5-1: Manufacturer: syz [ 397.548468][T10404] usb 5-1: SerialNumber: syz [ 397.623665][T10404] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 397.672699][T10409] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 397.798576][T13967] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4131'. [ 398.102257][ T6303] usb 5-1: USB disconnect, device number 11 [ 398.302174][T13992] netlink: 'syz.6.4137': attribute type 2 has an invalid length. [ 398.329206][T13992] netlink: 'syz.6.4137': attribute type 1 has an invalid length. [ 398.357791][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4137'. [ 398.748421][T14011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4141'. [ 398.769425][T10409] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 398.776480][T10409] ath9k_htc: Failed to initialize the device [ 398.824436][ T6303] usb 5-1: ath9k_htc: USB layer deinitialized [ 398.831706][T14013] 9pnet_fd: Insufficient options for proto=fd [ 399.093320][T14031] autofs4:pid:14031:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(31.1), cmd(0xc018937e) [ 399.195885][T14031] autofs4:pid:14031:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 399.883306][T14078] netlink: 'syz.5.4159': attribute type 21 has an invalid length. [ 399.932887][T14078] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4159'. [ 400.452547][T14110] loop5: detected capacity change from 0 to 64 [ 400.501305][T14110] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 400.579423][T14110] hfs: filesystem is marked locked, mounting read-only. [ 400.689367][ T4333] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 400.889176][ T4333] usb 8-1: Using ep0 maxpacket: 16 [ 400.898663][ T4333] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 400.957540][ T4333] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 400.969034][ T4333] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.020244][ T4333] usb 8-1: Product: syz [ 401.024549][ T4333] usb 8-1: Manufacturer: syz [ 401.046522][ T4333] usb 8-1: SerialNumber: syz [ 401.071843][ T4333] usb 8-1: config 0 descriptor?? [ 401.085594][ T4333] hub 8-1:0.0: bad descriptor, ignoring hub [ 401.093497][ T4333] hub: probe of 8-1:0.0 failed with error -5 [ 401.136560][T14148] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4178'. [ 401.160532][ T4333] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input18 [ 401.233634][T14155] loop6: detected capacity change from 0 to 512 [ 401.372754][T14155] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 401.458317][T14155] EXT4-fs error (device loop6): ext4_get_first_dir_block:3583: inode #12: comm syz.6.4179: Directory block failed checksum [ 401.561721][T14172] loop5: detected capacity change from 0 to 64 [ 401.651259][T12318] EXT4-fs (loop6): unmounting filesystem. [ 401.709308][ T4333] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 401.903492][ T4333] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 401.920506][ T4333] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 401.962431][ T4333] usb 1-1: config 220 has no interface number 2 [ 402.002934][ T4333] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 402.023826][ T4333] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 402.047543][ T4333] usb 1-1: config 220 interface 0 has no altsetting 0 [ 402.080954][ T4333] usb 1-1: config 220 interface 76 has no altsetting 0 [ 402.088384][ T4333] usb 1-1: config 220 interface 1 has no altsetting 0 [ 402.110659][ T4333] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 402.129357][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.152186][ T4333] usb 1-1: Product: syz [ 402.156426][ T4333] usb 1-1: Manufacturer: syz [ 402.203434][T14196] loop6: detected capacity change from 0 to 1024 [ 402.212309][ T4333] usb 1-1: SerialNumber: syz [ 402.276064][T14196] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 402.308657][T14196] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.412718][T14196] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 402.434200][T14196] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.4187: inode #1536: comm syz.6.4187: iget: illegal inode # [ 402.477272][ T4333] usb 1-1: selecting invalid altsetting 0 [ 402.490356][ T4333] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 402.496878][T14196] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.4187: error while reading EA inode 1536 err=-117 [ 402.519422][ T4333] usb 1-1: No valid video chain found. [ 402.557070][ T4333] usb 1-1: selecting invalid altsetting 0 [ 402.568976][T14196] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.4187: inode #1536: comm syz.6.4187: iget: illegal inode # [ 402.588049][ T4333] usbtest: probe of 1-1:220.1 failed with error -22 [ 402.595867][T14196] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.4187: error while reading EA inode 1536 err=-117 [ 402.622415][ T4333] usb 1-1: USB disconnect, device number 11 [ 402.772831][T12318] EXT4-fs (loop6): unmounting filesystem. [ 402.792793][T14233] netlink: 'syz.4.4193': attribute type 5 has an invalid length. [ 402.850519][T14233] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4193'. [ 403.041728][T14251] loop6: detected capacity change from 0 to 64 [ 405.169385][ T7] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 405.275427][T14380] ipt_CLUSTERIP: unknown mode 3 [ 405.371949][ T7] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 405.396509][ T7] usb 5-1: config 0 has no interface number 0 [ 405.425852][ T7] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 405.466206][ T7] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 405.511706][ T7] usb 5-1: config 0 interface 255 has no altsetting 0 [ 405.518604][ T7] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 405.555537][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.580530][ T7] usb 5-1: config 0 descriptor?? [ 405.592810][ T7] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 405.772441][T14413] loop6: detected capacity change from 0 to 256 [ 405.793425][ T6298] usb 8-1: USB disconnect, device number 2 [ 405.811372][T14413] exfat: Deprecated parameter 'utf8' [ 405.828259][T14413] exfat: Deprecated parameter 'namecase' [ 405.835034][ T6296] usb 5-1: USB disconnect, device number 12 [ 405.836640][T14413] exfat: Deprecated parameter 'utf8' [ 405.898778][T14413] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 406.272494][T14447] netlink: 'syz.0.4254': attribute type 21 has an invalid length. [ 406.301004][T14448] loop7: detected capacity change from 0 to 512 [ 406.412792][T14448] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 406.459285][ T4277] Bluetooth: hci5: command 0x0406 tx timeout [ 406.480138][T14448] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 406.525492][T12861] EXT4-fs (loop7): unmounting filesystem. [ 406.672758][T14465] netlink: 'syz.4.4257': attribute type 1 has an invalid length. [ 406.961394][T14431] loop5: detected capacity change from 0 to 40427 [ 406.993382][T14431] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 407.008343][T14431] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 407.036330][T14431] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x3ffff [ 407.098815][T14431] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x5 [ 407.206559][T14431] F2FS-fs (loop5): invalid crc value [ 407.244670][T14494] loop7: detected capacity change from 0 to 512 [ 407.280663][T14431] F2FS-fs (loop5): Found nat_bits in checkpoint [ 407.379823][T14494] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 407.397117][T14494] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.510098][T14431] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 407.514654][T14494] EXT4-fs error (device loop7): ext4_xattr_block_get:546: inode #15: comm syz.7.4266: corrupted xattr block 33 [ 407.517215][T14431] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 407.739932][T14512] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.775166][T12861] EXT4-fs (loop7): unmounting filesystem. [ 407.870367][T10300] syz-executor: attempt to access beyond end of device [ 407.870367][T10300] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 407.897199][T14514] device bond1 entered promiscuous mode [ 407.943249][T14514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.070857][T14558] loop0: detected capacity change from 0 to 256 [ 408.105866][T14558] exfat: Deprecated parameter 'utf8' [ 408.123595][T14558] exfat: Deprecated parameter 'namecase' [ 408.157730][T14558] exfat: Deprecated parameter 'utf8' [ 408.220430][T14558] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4b823b56, utbl_chksum : 0xe619d30d) [ 408.879183][ T6298] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 408.999225][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 409.090951][ T6298] usb 1-1: unable to get BOS descriptor or descriptor too short [ 409.137147][ T6298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 409.168772][ T6298] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.212766][ T6298] usb 1-1: config 1 interface 0 has no altsetting 1 [ 409.234083][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 409.236359][ T6298] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 409.245745][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.269306][ T6298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.278171][ T6298] usb 1-1: Product: syz [ 409.289808][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.305301][ T6298] usb 1-1: Manufacturer: syz [ 409.307415][ T7] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 409.323343][ T6298] usb 1-1: SerialNumber: syz [ 409.347668][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.354236][ T6298] smsusb:smsusb_probe: board id=8, interface number 0 [ 409.396909][ T7] usb 6-1: config 0 descriptor?? [ 409.415534][ T7] hub 6-1:0.0: USB hub found [ 409.566933][ T6298] smsusb:smsusb_probe: Device initialized with return code -19 [ 409.617451][ T7] hub 6-1:0.0: config failed, can't read hub descriptor (err -90) [ 409.707143][T14627] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4291'. [ 409.796029][ T6298] usb 1-1: USB disconnect, device number 12 [ 409.828068][ T7] usbhid 6-1:0.0: can't add hid device: -71 [ 409.838788][ T7] usbhid: probe of 6-1:0.0 failed with error -71 [ 409.902276][ T7] usb 6-1: USB disconnect, device number 6 [ 411.229372][T14717] Cannot find del_set index 1 as target [ 411.448457][T14731] comedi comedi0: fl512: I/O port conflict (0x4f27,16) [ 411.801842][ T4280] Bluetooth: hci5: Invalid handle: 0x7e53 > 0x0eff [ 412.173918][T14773] kAFS: unable to lookup cell ' [ 412.173918][T14773] $)-.ײfYǝa2s [ 412.173918][T14773] ' [ 412.641477][T14744] comedi comedi0: reset error (fatal) [ 412.779536][ T7] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 412.981309][ T7] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 413.016173][ T7] usb 1-1: config 0 has no interface number 0 [ 413.034403][ T7] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 413.064449][ T7] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 413.078587][ T7] usb 1-1: config 0 interface 255 has no altsetting 0 [ 413.109805][ T7] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 413.118944][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.170791][ T7] usb 1-1: config 0 descriptor?? [ 413.217929][ T7] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 413.263483][T14830] x_tables: ip_tables: osf match: only valid for protocol 6 [ 413.425415][ T7] usb 1-1: USB disconnect, device number 13 [ 413.631821][T14856] loop6: detected capacity change from 0 to 1024 [ 413.723997][T14856] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 413.987522][T12318] EXT4-fs (loop6): unmounting filesystem. [ 413.994130][T14874] loop7: detected capacity change from 0 to 8 [ 414.044579][T14874] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 415.237003][ T26] audit: type=1326 audit(1760890416.329:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14940 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 415.320678][ T26] audit: type=1326 audit(1760890416.329:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14940 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 415.397034][ T26] audit: type=1326 audit(1760890416.329:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14940 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 415.475679][ T26] audit: type=1326 audit(1760890416.329:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14940 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 415.530923][ T26] audit: type=1326 audit(1760890416.329:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14940 comm="syz.0.4379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907f58efc9 code=0x7ffc0000 [ 415.647995][T14902] loop6: detected capacity change from 0 to 32768 [ 415.719899][T14902] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 415.798305][T14902] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 415.868048][T14902] (syz.6.4367,14902,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9 [ 415.934810][T14902] (syz.6.4367,14902,0):ocfs2_prepare_dir_for_insert:4311 ERROR: status = -2 [ 416.006958][T14902] (syz.6.4367,14902,0):ocfs2_mknod:298 ERROR: status = -2 [ 416.037172][T14902] (syz.6.4367,14902,0):ocfs2_mknod:502 ERROR: status = -2 [ 416.113117][T14974] netlink: 'syz.5.4388': attribute type 9 has an invalid length. [ 416.216189][T12318] ocfs2: Unmounting device (7,6) on (node local) [ 416.666302][T14944] loop7: detected capacity change from 0 to 32768 [ 416.847659][T14944] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 416.889163][T14944] XFS (loop7): Mounting V5 Filesystem [ 416.985913][T14944] XFS (loop7): Ending clean mount [ 417.072183][T14944] XFS (loop7): Quotacheck needed: Please wait. [ 417.152607][T14944] XFS (loop7): Quotacheck: Done. [ 417.354033][T15029] loop6: detected capacity change from 0 to 128 [ 417.364846][T12861] XFS (loop7): Unmounting Filesystem [ 417.432599][T15029] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 417.465120][T15029] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 417.735719][T12318] EXT4-fs (loop6): unmounting filesystem. [ 417.757161][T15031] loop5: detected capacity change from 0 to 8192 [ 417.880907][T15031] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 417.934208][T15031] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 417.967729][T15031] REISERFS (device loop5): using ordered data mode [ 417.996682][T15031] reiserfs: using flush barriers [ 418.029267][T15031] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 418.115990][T15031] REISERFS (device loop5): checking transaction log (loop5) [ 418.137279][T15031] REISERFS (device loop5): Using r5 hash to sort names [ 418.157182][T15031] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 418.493260][T15075] loop0: detected capacity change from 0 to 22 [ 418.502712][T15076] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 418.533671][T15076] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 418.534940][T15075] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 418.601641][T15075] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 418.833458][T15094] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4419'. [ 418.931406][T15099] xt_ecn: cannot match TCP bits for non-tcp packets [ 419.049206][ T6298] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 419.243135][ T6298] usb 5-1: Using ep0 maxpacket: 16 [ 419.259336][T15118] netlink: 'syz.5.4427': attribute type 9 has an invalid length. [ 419.263865][ T6298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 419.277369][T15118] netlink: 'syz.5.4427': attribute type 6 has an invalid length. [ 419.299578][ T6298] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 419.364020][ T6298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.407259][ T6298] usb 5-1: Product: syz [ 419.417423][ T6298] usb 5-1: Manufacturer: syz [ 419.447782][ T6298] usb 5-1: SerialNumber: syz [ 419.456201][T15126] loop7: detected capacity change from 0 to 512 [ 419.476064][ T6298] usb 5-1: config 0 descriptor?? [ 419.496466][T15126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 419.520892][ T6298] hub 5-1:0.0: bad descriptor, ignoring hub [ 419.547176][ T6298] hub: probe of 5-1:0.0 failed with error -5 [ 419.566450][ T6298] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 419.615396][T15126] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 419.653923][T15126] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.955646][T12861] EXT4-fs (loop7): unmounting filesystem. [ 420.080734][T15171] loop5: detected capacity change from 0 to 8 [ 420.216067][T15171] SQUASHFS error: lzo decompression failed, data probably corrupt [ 420.244513][T15171] SQUASHFS error: Failed to read block 0x0: -5 [ 420.284365][T15171] SQUASHFS error: lzo decompression failed, data probably corrupt [ 420.302826][T15171] SQUASHFS error: Failed to read block 0x0: -5 [ 420.328666][ T26] audit: type=1800 audit(1760890421.419:110): pid=15171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4439" name="file2" dev="loop5" ino=3 res=0 errno=0 [ 420.906249][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4453'. [ 421.270584][T15244] xt_l2tp: missing protocol rule (udp|l2tpip) [ 421.290696][T15242] loop5: detected capacity change from 0 to 256 [ 421.334753][T15242] exfat: Deprecated parameter 'namecase' [ 421.370063][T15240] lo speed is unknown, defaulting to 1000 [ 421.379338][T15242] exfat: Deprecated parameter 'namecase' [ 421.387272][T15242] exfat: Deprecated parameter 'namecase' [ 421.410551][T15242] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 421.439233][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 421.464755][T15242] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 421.639441][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 421.649760][ T27] INFO: task syz-executor:4279 blocked for more than 143 seconds. [ 421.655619][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 421.679372][ T27] Not tainted syzkaller #0 [ 421.704982][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 421.710759][ T7] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 421.736890][ T27] task:syz-executor state:D stack:22048 pid:4279 ppid:1 flags:0x00004004 [ 421.761430][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.776868][ T27] Call Trace: [ 421.779124][ T7] usb 1-1: Product: syz [ 421.793615][ T27] [ 421.804268][ T7] usb 1-1: Manufacturer: syz [ 421.805819][ T27] __schedule+0x10ec/0x40b0 [ 421.808983][ T7] usb 1-1: SerialNumber: syz [ 421.834831][ T27] ? __sched_text_start+0x8/0x8 [ 421.837022][ T7] usb 1-1: config 0 descriptor?? [ 421.848853][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 421.867772][ T27] ? lock_chain_count+0x20/0x20 [ 421.870054][ T7] hub 1-1:0.0: bad descriptor, ignoring hub [ 421.883044][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 421.909351][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 421.919556][ T7] hub: probe of 1-1:0.0 failed with error -5 [ 421.945957][ T27] schedule+0xb9/0x180 [ 421.957002][ T27] io_schedule+0x7c/0xd0 [ 421.965861][ T7] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 421.980688][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 421.986659][ T27] ? folio_wait_bit+0x30/0x30 [ 421.992237][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 422.016775][ T27] ? folio_mapping+0x1ba/0x4d0 [ 422.038043][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 422.051461][ T27] ? mapping_evict_folio+0x520/0x520 [ 422.056840][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 422.073924][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 422.084094][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 422.090143][ T27] evict+0x498/0x870 [ 422.094616][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 422.119470][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 422.125090][ T27] ? _raw_spin_unlock+0x24/0x40 [ 422.130990][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 422.136282][ T27] evict_inodes+0x604/0x690 [ 422.142469][ T27] ? clear_inode+0x150/0x150 [ 422.147215][ T27] ? dput+0x1c9/0x1d0 [ 422.151389][ T27] ? sync_filesystem+0x103/0x220 [ 422.156374][ T27] generic_shutdown_super+0x93/0x340 [ 422.161788][ T27] kill_block_super+0x7c/0xe0 [ 422.166499][ T27] deactivate_locked_super+0x93/0xf0 [ 422.172023][ T27] cleanup_mnt+0x463/0x4f0 [ 422.176622][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 422.182475][ T27] task_work_run+0x1ca/0x250 [ 422.187127][ T27] ? task_work_cancel+0x230/0x230 [ 422.192256][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 422.198418][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 422.204737][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 422.210531][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 422.216041][ T27] do_syscall_64+0x58/0xa0 [ 422.220879][ T27] ? clear_bhb_loop+0x60/0xb0 [ 422.225603][ T27] ? clear_bhb_loop+0x60/0xb0 [ 422.231691][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.237643][ T27] RIP: 0033:0x7f42613902f7 [ 422.245243][ T27] RSP: 002b:00007ffff4170f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 422.254333][ T27] RAX: 0000000000000000 RBX: 00007f4261411d7d RCX: 00007f42613902f7 [ 422.262512][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff4171040 [ 422.270639][ T27] RBP: 00007ffff4171040 R08: 0000000000000000 R09: 0000000000000000 [ 422.278641][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffff41720d0 [ 422.286729][ T27] R13: 00007f4261411d7d R14: 000000000004073a R15: 00007ffff4172110 [ 422.294841][ T27] [ 422.298249][ T27] [ 422.298249][ T27] Showing all locks held in the system: [ 422.306811][ T27] 1 lock held by rcu_tasks_kthre/12: [ 422.312205][ T27] #0: ffffffff8cb2b630 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 422.323582][ T27] 1 lock held by rcu_tasks_trace/13: [ 422.328984][ T27] #0: ffffffff8cb2be50 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 422.340531][ T27] 1 lock held by khungtaskd/27: [ 422.345511][ T27] #0: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 422.356402][ T27] 4 locks held by kworker/u4:2/41: [ 422.361740][ T27] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 422.372282][ T27] #1: ffffc90000b27d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 422.382395][ T27] #2: ffffffff8dd34b90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 422.391906][ T27] #3: ffffffff8cb30978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x346/0x830 [ 422.403481][ T27] 1 lock held by acpid/3622: [ 422.408103][ T27] #0: ffff88801d292110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_open+0x2d2/0x5b0 [ 422.417316][ T27] 2 locks held by getty/4028: [ 422.422055][ T27] #0: ffff88802fc0d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 422.431923][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 422.442139][ T27] 1 lock held by syz-executor/4279: [ 422.447362][ T27] #0: ffff8880276e80e0 (&type->s_umount_key#50){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 422.457715][ T27] 3 locks held by udevd/4394: [ 422.462516][ T27] #0: ffff88801d292110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_open+0x2d2/0x5b0 [ 422.471840][ T27] #1: ffff88801d2962c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_open_device+0x4e/0x2e0 [ 422.482453][ T27] #2: ffff888027b874f8 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_resume+0x269/0x1c80 [ 422.493368][ T27] 1 lock held by udevd/5847: [ 422.497998][ T27] #0: ffffffff8cb30978 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 422.510030][ T27] 2 locks held by kworker/1:13/6296: [ 422.515355][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 422.526046][ T27] #1: ffffc90003c9fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 422.537862][ T27] 4 locks held by kworker/1:20/6303: [ 422.543751][ T27] #0: ffff888143afc538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 422.554695][ T27] #1: ffffc9000498fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 422.566298][ T27] #2: ffff888027b84190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0 [ 422.575344][ T27] #3: ffff888027b874f8 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x6a9/0x54e0 [ 422.585450][ T27] 2 locks held by kworker/0:16/10409: [ 422.591031][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 422.601662][ T27] #1: ffffc90003417d00 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 422.615056][ T27] 2 locks held by syz.3.3622/12438: [ 422.620386][ T27] #0: ffff88801e648d68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 422.629760][ T27] #1: ffff8880783c4460 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x232/0x410 [ 422.638773][ T27] 1 lock held by syz.0.4457/15229: [ 422.644018][ T27] #0: ffff8880b8e3aad8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 422.654084][ T27] 3 locks held by syz.0.4457/15234: [ 422.659359][ T27] #0: ffff8880294c9158 (&mousedev->mutex/1){+.+.}-{3:3}, at: mixdev_open_devices+0x27/0x2e0 [ 422.669680][ T27] #1: ffff888072ac2158 (&mousedev->mutex#2){+.+.}-{3:3}, at: mixdev_open_devices+0xd0/0x2e0 [ 422.680767][ T27] #2: ffff88801d2962c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_open_device+0x4e/0x2e0 [ 422.694569][ T27] [ 422.714214][ T27] ============================================= [ 422.714214][ T27] [ 422.724077][ T27] NMI backtrace for cpu 0 [ 422.728478][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 422.735707][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.745781][ T27] Call Trace: [ 422.749076][ T27] [ 422.752035][ T27] dump_stack_lvl+0x168/0x22e [ 422.756741][ T27] ? irq_work_queue+0xb8/0x140 [ 422.761525][ T27] ? show_regs_print_info+0x12/0x12 [ 422.766738][ T27] ? load_image+0x3b0/0x3b0 [ 422.771264][ T27] ? vprintk_emit+0x571/0x680 [ 422.775971][ T27] ? printk_sprint+0x460/0x460 [ 422.780765][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 422.785729][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 422.791903][ T27] ? _printk+0xcc/0x110 [ 422.796107][ T27] ? load_image+0x3b0/0x3b0 [ 422.800640][ T27] ? load_image+0x3b0/0x3b0 [ 422.805177][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 422.811262][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 422.817336][ T27] watchdog+0xeee/0xf30 [ 422.821534][ T27] ? watchdog+0x1ed/0xf30 [ 422.825888][ T27] kthread+0x29d/0x330 [ 422.829980][ T27] ? hungtask_pm_notify+0x40/0x40 [ 422.835025][ T27] ? kthread_blkcg+0xd0/0xd0 [ 422.839641][ T27] ret_from_fork+0x1f/0x30 [ 422.844132][ T27] [ 422.848029][ T27] Sending NMI from CPU 0 to CPUs 1: [ 422.853615][ C1] NMI backtrace for cpu 1 [ 422.853625][ C1] CPU: 1 PID: 8983 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 422.853642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.853653][ C1] Workqueue: bat_events batadv_nc_worker [ 422.853682][ C1] RIP: 0010:mark_lock+0x9c/0x320 [ 422.853707][ C1] Code: 89 c7 41 81 e7 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 40 22 ae 90 be 08 00 00 00 e8 3c 54 6d 00 4c 0f a3 3d 34 73 4a 0f <73> 10 4b 8d 04 7f c1 e0 06 4c 8d b8 00 a1 46 90 eb 24 48 c7 c0 40 [ 422.853729][ C1] RSP: 0018:ffffc9000d8af800 EFLAGS: 00000057 [ 422.853743][ C1] RAX: 0000000000000001 RBX: ffff888029b60000 RCX: ffffffff8163af04 [ 422.853755][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90ae2240 [ 422.853766][ C1] RBP: 0000000000000009 R08: dffffc0000000000 R09: fffffbfff215c449 [ 422.853778][ C1] R10: fffffbfff215c449 R11: 1ffffffff215c448 R12: 0000000000000200 [ 422.853790][ C1] R13: dffffc0000000000 R14: ffff888029b60b30 R15: 000000000000002c [ 422.853803][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 422.853817][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 422.853830][ C1] CR2: 0000001b2f517ff8 CR3: 000000007e01e000 CR4: 00000000003506e0 [ 422.853844][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 422.853854][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 422.853864][ C1] Call Trace: [ 422.853869][ C1] [ 422.853877][ C1] __lock_acquire+0xd6f/0x7c50 [ 422.853903][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 422.853931][ C1] ? verify_lock_unused+0x140/0x140 [ 422.853956][ C1] ? verify_lock_unused+0x140/0x140 [ 422.853985][ C1] lock_acquire+0x1b4/0x490 [ 422.854005][ C1] ? batadv_nc_worker+0xce/0x600 [ 422.854035][ C1] ? read_lock_is_recursive+0x10/0x10 [ 422.854057][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 422.854082][ C1] ? batadv_nc_worker+0xce/0x600 [ 422.854107][ C1] batadv_nc_worker+0xeb/0x600 [ 422.854138][ C1] ? batadv_nc_worker+0xce/0x600 [ 422.854165][ C1] ? process_one_work+0x7a1/0x1160 [ 422.854183][ C1] process_one_work+0x898/0x1160 [ 422.854206][ C1] ? worker_detach_from_pool+0x240/0x240 [ 422.854226][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 422.854251][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 422.854277][ C1] ? kthread_data+0x4b/0xc0 [ 422.854301][ C1] worker_thread+0xaa2/0x1250 [ 422.854326][ C1] ? __kthread_parkme+0x162/0x1c0 [ 422.854351][ C1] kthread+0x29d/0x330 [ 422.854374][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 422.854393][ C1] ? kthread_blkcg+0xd0/0xd0 [ 422.854417][ C1] ret_from_fork+0x1f/0x30 [ 422.854446][ C1] [ 422.864045][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 422.864062][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 422.864085][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 422.864100][ T27] Call Trace: [ 422.864108][ T27] [ 422.864116][ T27] dump_stack_lvl+0x168/0x22e [ 422.864154][ T27] ? memcpy+0x3c/0x60 [ 422.864190][ T27] ? show_regs_print_info+0x12/0x12 [ 422.864217][ T27] ? load_image+0x3b0/0x3b0 [ 422.864265][ T27] panic+0x2c9/0x710 [ 422.864295][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 422.864328][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 422.864363][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 422.864401][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 422.864432][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 422.864462][ T27] watchdog+0xf2d/0xf30 [ 422.864495][ T27] ? watchdog+0x1ed/0xf30 [ 422.864525][ T27] kthread+0x29d/0x330 [ 422.864559][ T27] ? hungtask_pm_notify+0x40/0x40 [ 422.864584][ T27] ? kthread_blkcg+0xd0/0xd0 [ 422.864619][ T27] ret_from_fork+0x1f/0x30 [ 422.864664][ T27] [ 422.871347][ T27] Kernel Offset: disabled [ 423.233950][ T27] Rebooting in 86400 seconds..