last executing test programs: 5.56418845s ago: executing program 5 (id=7985): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80045b09, 0x0) 5.08499064s ago: executing program 1 (id=7989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008004000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 4.772182562s ago: executing program 1 (id=7993): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000380)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 4.195747203s ago: executing program 1 (id=7999): r0 = syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.790622633s ago: executing program 3 (id=8002): r0 = io_uring_setup(0x4822, &(0x7f0000000480)) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "750a65a3c93199cd485a10497ead5ac3e112baf740f0853a3660ea0ca01c5078a94a0bb37a8dbd611d75f7d309540c18a222bcb970c5d34d2369ea9659f976", 0x1}, 0x60) close_range(r0, 0xffffffffffffffff, 0x0) 3.51216149s ago: executing program 3 (id=8005): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x6da443c8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r0}, 0x20) 3.216314757s ago: executing program 3 (id=8008): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) 2.906193003s ago: executing program 4 (id=8010): userfaultfd(0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0) io_setup(0x1, &(0x7f00000005c0)=0x0) io_submit(r1, 0x1, &(0x7f0000001a40)=[&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2.858247937s ago: executing program 3 (id=8011): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000380)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 2.492742015s ago: executing program 4 (id=8014): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close(r0) 2.465234337s ago: executing program 5 (id=8015): r0 = syz_io_uring_setup(0xd3, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x87, 0x0, @fd_index=0x8, 0x8, 0x0, 0x4, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2.21026732s ago: executing program 3 (id=8017): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="1a", 0x1}, {&(0x7f0000000140)="fa791027e01b4d51411c754af98e6e4427d85564937fa989c20892b2cac8664dd5bc099f9664a31e", 0x28}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006573bb08ac051992da610200000109021b000100000000090400000103b80000090581"], 0x0) 2.081440138s ago: executing program 5 (id=8018): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 2.06044506s ago: executing program 0 (id=8019): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="00000000660654c14a41478524004e835311f68646ee18d9"], 0x38}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.946376758s ago: executing program 4 (id=8020): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000140)='asymmetric\x00', &(0x7f0000000440)=@chain) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0) 1.698415246s ago: executing program 4 (id=8022): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c6780820040000f87b8a64715675a1bdbcef549ba197fce47ddfdd753abd9501000000000000e8f200005700", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d735931001800007f004103ff0100"}}}}, 0x118) 1.649469294s ago: executing program 0 (id=8023): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) 1.472380116s ago: executing program 5 (id=8024): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) flock(r1, 0x8) 1.471310646s ago: executing program 2 (id=8025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r1, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [{0xffffffffffffff8f}, {0x4}]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1.453433025s ago: executing program 4 (id=8026): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000700)="df", 0x1, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x0) 1.309799162s ago: executing program 1 (id=8027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0xa, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20) 1.23450158s ago: executing program 4 (id=8028): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x2, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x41015500, 0x0) 1.068012322s ago: executing program 0 (id=8029): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000380)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(0x0, 0x0, 0x0, 0x0) 1.051252072s ago: executing program 2 (id=8030): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={0x0, 0x0, 0x0, r1}) 831.465964ms ago: executing program 1 (id=8031): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) rename(&(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='./file1\x00') 757.023265ms ago: executing program 5 (id=8032): r0 = openat$vmci(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={0x0, 0x0, 0xfffffffffffffca9}) 756.02082ms ago: executing program 2 (id=8033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 663.951589ms ago: executing program 0 (id=8034): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000000780)="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", 0x2000, &(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 444.887072ms ago: executing program 2 (id=8035): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00400020208000200000001000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 420.123402ms ago: executing program 0 (id=8036): r0 = socket(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000640), 0x4) 387.250193ms ago: executing program 5 (id=8037): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20002, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) 286.515274ms ago: executing program 2 (id=8038): r0 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) 104.31717ms ago: executing program 3 (id=8039): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00}-control\x00') 55.577356ms ago: executing program 1 (id=8040): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_emit_ethernet(0x3a, &(0x7f0000000600)={@multicast, @dev, @val, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x20}}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, '=.R', 0x0, "b09809"}}}}}}, 0x0) 55.379112ms ago: executing program 0 (id=8041): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x1a00001, &(0x7f0000000280)=ANY=[@ANYBLOB="63726561746f723dd592f1af2c696f636861727365743d69736f383835392d332c636f6465706167653d63703836312c000fa24b3fddc1642ef5a081eb095d2715c2ed4df1bdbd28f0b60de544f6fdad3ed7a04cd153b43fed0fb3435d2b10d92462cfbe97"], 0x5, 0x330, &(0x7f00000004c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=8042): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2700000000090000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000010850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) close(r0) kernel console output (not intermixed with test programs): : local softirq work is pending, handler #40!!! [ 983.719435][T17491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.759576][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7022'. [ 983.838698][T21201] netlink: 'syz.1.7020': attribute type 3 has an invalid length. [ 983.994495][T21203] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.7024'. [ 984.806881][T21221] loop1: detected capacity change from 0 to 512 [ 984.889720][T21221] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 984.948131][T21221] EXT4-fs (loop1): 1 truncate cleaned up [ 984.978568][T21221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 985.061079][T21228] netlink: 'syz.3.7034': attribute type 16 has an invalid length. [ 985.070120][T21228] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7034'. [ 985.080831][T21228] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.116908][T20687] udevd[20687]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 985.354275][T21234] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7037'. [ 985.363515][T11709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 986.177284][T21252] trusted_key: encrypted_key: keyword 'load' not allowed when called from .update method [ 986.236338][T21254] loop3: detected capacity change from 0 to 128 [ 986.646543][T21260] loop0: detected capacity change from 0 to 1024 [ 986.863002][ T53] hfsplus: b-tree write err: -5, ino 4 [ 986.926818][T21097] udevd[21097]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:0' failed: Read-only file system [ 986.956043][T21267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7053'. [ 986.996513][T21267] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7053'. [ 987.232120][T21270] loop3: detected capacity change from 0 to 256 [ 987.338230][T21270] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 987.488390][T21278] input: syz0 as /devices/virtual/input/input42 [ 988.155856][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7065'. [ 988.838829][T21303] loop1: detected capacity change from 0 to 512 [ 988.891805][T21303] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 988.946612][T21303] EXT4-fs (loop1): 1 truncate cleaned up [ 988.996317][T21303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.117591][T20687] udevd[20687]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 989.148601][ T29] audit: type=1800 audit(1726257934.790:181): pid=21303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7071" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 989.378791][T21315] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.7075'. [ 989.396979][T11709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 989.411070][T21315] netlink: 'syz.0.7075': attribute type 1 has an invalid length. [ 989.468249][T21315] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7075'. [ 990.023285][T21329] block nbd0: shutting down sockets [ 990.680385][T21345] loop0: detected capacity change from 0 to 128 [ 990.870232][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-label/SYZKALLER.tmp-b7:0' failed: Read-only file system [ 990.918913][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-uuid/1DE0-4C13.tmp-b7:0' failed: Read-only file system [ 991.173658][T21355] loop1: detected capacity change from 0 to 128 [ 991.299955][T21355] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 991.383453][T21355] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 991.470226][ T29] audit: type=1326 audit(1726257936.922:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb37def9 code=0x7ffc0000 [ 991.581938][ T29] audit: type=1326 audit(1726257936.922:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb37def9 code=0x7ffc0000 [ 991.684617][T21364] loop4: detected capacity change from 0 to 128 [ 991.691918][ T29] audit: type=1326 audit(1726257936.940:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7ff4bb37def9 code=0x7ffc0000 [ 991.787775][T21364] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 991.829250][ T29] audit: type=1326 audit(1726257936.940:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21359 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4bb37def9 code=0x7ffc0000 [ 991.864790][T21364] ext4 filesystem being mounted at /1042/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 992.260181][T20873] udevd[20873]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 992.342897][T21371] loop3: detected capacity change from 0 to 4096 [ 992.604737][T20687] udevd[20687]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 992.643282][ T7614] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 992.675305][T20687] udevd[20687]: symlink '../../loop3' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:3' failed: Read-only file system [ 993.054718][T21391] ax25_connect(): syz.4.7109 uses autobind, please contact jreuter@yaina.de [ 993.065298][T21392] loop0: detected capacity change from 0 to 512 [ 993.106033][T21392] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 993.178347][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 993.193456][T21392] EXT4-fs (loop0): 1 truncate cleaned up [ 993.221417][T21392] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 993.554405][T21392] fscrypt (loop0, inode 18): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS [ 993.839058][T20261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.027301][ T5293] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 994.292394][ T5293] usb 2-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 994.293858][T21417] overlayfs: workdir and upperdir must reside under the same mount [ 994.308787][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.350744][ T5293] usb 2-1: Product: syz [ 994.372589][ T5293] usb 2-1: Manufacturer: syz [ 994.394432][ T5293] usb 2-1: SerialNumber: syz [ 994.434511][ T5293] usb 2-1: config 0 descriptor?? [ 994.514765][ T5311] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 994.731117][ T5311] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 994.775224][ T5311] usb 1-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 994.793682][ T5293] kaweth 2-1:0.0: Firmware present in device. [ 994.817526][ T5311] usb 1-1: Manufacturer: syz [ 994.839580][ T5311] usb 1-1: config 0 descriptor?? [ 994.904019][T21429] loop4: detected capacity change from 0 to 512 [ 994.994509][ T5293] kaweth 2-1:0.0: Statistics collection: 0 [ 995.000442][ T5293] kaweth 2-1:0.0: Multicast filter limit: 0 [ 995.021897][T21429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 995.050685][ T5293] kaweth 2-1:0.0: MTU: 0 [ 995.053592][T20873] udevd[20873]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 995.054989][ T5293] kaweth 2-1:0.0: Read MAC address 00:00:00:00:00:00 [ 995.121683][T21429] ext4 filesystem being mounted at /1047/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 995.367967][ T5311] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 995.398406][ T7614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 995.434855][ T5293] kaweth 2-1:0.0: Error setting SOFS wait [ 995.487005][ T5293] kaweth 2-1:0.0: probe with driver kaweth failed with error -5 [ 995.543212][ T5293] usb 2-1: USB disconnect, device number 59 [ 995.809665][ T5311] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 995.836647][ T5292] usb 3-1: new low-speed USB device number 55 using dummy_hcd [ 995.848289][ T5311] gs_usb 1-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 995.876563][ T5311] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 995.917174][ T5311] usb 1-1: USB disconnect, device number 66 [ 996.091977][ T5292] usb 3-1: string descriptor 0 read error: -22 [ 996.100087][ T5292] usb 3-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 996.118716][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.141689][ T5292] usb 3-1: config 0 descriptor?? [ 996.445591][ T5292] dvb-usb: found a 'Sony PlayTV' in cold state, will try to load a firmware [ 996.556738][ T5292] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 996.605896][ T5292] dib0700: firmware download failed at 7 with -22 [ 996.680905][ T5292] usb 3-1: USB disconnect, device number 55 [ 998.410333][T21483] 9pnet_virtio: no channels available for device syz [ 999.189506][T21494] loop4: detected capacity change from 0 to 4096 [ 999.230721][T21494] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 999.411145][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 999.485587][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:4' failed: Read-only file system [ 999.528007][T21494] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 999.663464][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7166'. [ 1000.179030][T21480] loop2: detected capacity change from 0 to 32768 [ 1000.323918][T21516] kernel read not supported for file /eth0 (pid: 21516 comm: syz.3.7172) [ 1000.367185][ T29] audit: type=1800 audit(1726257945.146:186): pid=21516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7172" name="eth0" dev="mqueue" ino=63940 res=0 errno=0 [ 1000.390757][T21520] loop4: detected capacity change from 0 to 512 [ 1000.470066][T21097] udevd[21097]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1000.608166][T21520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1000.621211][T21520] ext4 filesystem being mounted at /1057/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1000.787008][T20873] udevd[20873]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 1001.096855][ T29] audit: type=1326 audit(1726257945.820:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1001.207798][ T29] audit: type=1326 audit(1726257945.857:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1001.211182][ T7614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1001.271983][ T29] audit: type=1326 audit(1726257945.857:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1001.324997][T21537] loop0: detected capacity change from 0 to 256 [ 1001.344455][ T29] audit: type=1326 audit(1726257945.857:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa366b7df33 code=0x7ffc0000 [ 1001.479738][T21537] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 1001.514211][ T29] audit: type=1326 audit(1726257945.875:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa366b7c9df code=0x7ffc0000 [ 1001.628430][ T29] audit: type=1326 audit(1726257945.967:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa366b7df87 code=0x7ffc0000 [ 1001.729707][ T29] audit: type=1326 audit(1726257945.976:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa366b7c890 code=0x7ffc0000 [ 1001.769527][ T29] audit: type=1326 audit(1726257945.976:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa366b7cb8a code=0x7ffc0000 [ 1001.813343][ T29] audit: type=1326 audit(1726257946.041:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21529 comm="syz.5.7175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1002.178586][T21548] loop2: detected capacity change from 0 to 64 [ 1002.306238][T21097] udevd[21097]: symlink '../../loop2' '/dev/disk/by-label/unt.tmp-b7:2' failed: Read-only file system [ 1002.788780][T13846] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.981285][T13846] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.186844][T21560] loop0: detected capacity change from 0 to 128 [ 1003.239659][T21560] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1003.261289][T21560] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1003.375281][T13846] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.400315][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 1003.781256][T20261] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1003.785451][T13846] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.229604][T21582] loop4: detected capacity change from 0 to 256 [ 1004.482405][T21584] loop1: detected capacity change from 0 to 764 [ 1004.533906][T21584] ISOFS: unable to read i-node block [ 1004.699261][T13846] bridge_slave_1: left allmulticast mode [ 1004.726181][T13846] bridge_slave_1: left promiscuous mode [ 1004.766735][T13846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.800882][T13846] bridge_slave_0: left promiscuous mode [ 1004.815181][T13846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.007925][T19364] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1005.051370][T19364] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1005.094566][T19364] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1005.104767][T19364] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1005.124358][T19364] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1005.145209][T19364] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1005.272199][T13049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1005.328556][T13049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1005.347952][T13049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1005.369938][T13049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1005.387083][T13049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1005.401464][T13049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1006.161597][ T5289] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1006.405571][ T5289] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1006.421651][ T5289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1006.487077][ T5289] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1006.505854][ T5289] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1006.514252][ T5289] usb 1-1: Manufacturer: syz [ 1006.559943][ T5289] usb 1-1: config 0 descriptor?? [ 1006.674588][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1006.674616][ T29] audit: type=1326 audit(1726257950.970:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1006.762254][ T29] audit: type=1326 audit(1726257950.970:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1006.784620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1006.810980][ T5289] rc_core: IR keymap rc-hauppauge not found [ 1006.818292][ T5289] Registered IR keymap rc-empty [ 1006.851795][ T5289] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1006.865802][ T29] audit: type=1326 audit(1726257950.970:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1006.889252][ T5289] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input43 [ 1006.927713][ T29] audit: type=1326 audit(1726257951.007:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1006.950618][ C0] vkms_vblank_simulate: vblank timer overrun [ 1006.960887][ T29] audit: type=1326 audit(1726257951.007:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1006.983288][ C0] vkms_vblank_simulate: vblank timer overrun [ 1007.136597][ T29] audit: type=1326 audit(1726257951.025:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1007.143333][ T8] usb 1-1: USB disconnect, device number 67 [ 1007.243578][ T29] audit: type=1326 audit(1726257951.044:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1007.338890][ T29] audit: type=1326 audit(1726257951.044:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1007.423705][ T29] audit: type=1326 audit(1726257951.044:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1007.490428][ T29] audit: type=1326 audit(1726257951.044:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21620 comm="syz.5.7216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa366b7def9 code=0x7ffc0000 [ 1007.599836][T21618] loop1: detected capacity change from 0 to 32768 [ 1007.678605][T19364] Bluetooth: hci0: command tx timeout [ 1007.700823][T21618] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.7215 (21618) [ 1007.826621][T20687] udevd[20687]: symlink '../../loop1' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:1' failed: Read-only file system [ 1007.914183][T21618] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1007.973032][T21618] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1008.010218][T21618] BTRFS info (device loop1): using free-space-tree [ 1008.064765][T13846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.125543][T13846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.178564][T13846] bond0 (unregistering): Released all slaves [ 1008.326028][T21616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7213'. [ 1008.393172][T21616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.769904][T21645] binder: BC_ATTEMPT_ACQUIRE not supported [ 1008.806428][T21645] binder: 21641:21645 ioctl c0306201 20000480 returned -22 [ 1009.626266][T21664] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 1009.812825][T13846] hsr_slave_0: left promiscuous mode [ 1009.839335][T11709] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1009.942864][T19364] Bluetooth: hci0: command tx timeout [ 1009.943472][T13846] hsr_slave_1: left promiscuous mode [ 1010.127023][T13846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.134515][T13846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.239078][T13846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.267766][T13846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.286742][T21678] loop2: detected capacity change from 0 to 512 [ 1010.403784][T21678] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1010.480724][T13846] veth1_macvtap: left promiscuous mode [ 1010.493076][T13846] veth0_macvtap: left promiscuous mode [ 1010.506274][T13846] veth1_vlan: left promiscuous mode [ 1010.511943][T13846] veth0_vlan: left promiscuous mode [ 1010.639376][T21678] EXT4-fs (loop2): 1 truncate cleaned up [ 1010.658932][T21678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.700328][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1010.937500][T21678] EXT4-fs error (device loop2): ext4_generic_delete_entry:2677: inode #2: block 13: comm syz.2.7229: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1011.043384][T21678] EXT4-fs error (device loop2) in ext4_delete_entry:2749: Corrupt filesystem [ 1011.328546][T17491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.870738][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7235'. [ 1012.189332][T19364] Bluetooth: hci0: command tx timeout [ 1013.169269][T21703] loop2: detected capacity change from 0 to 32768 [ 1013.197166][T21703] XFS: ikeep mount option is deprecated. [ 1013.202906][T21703] XFS: noikeep mount option is deprecated. [ 1013.321943][T21703] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1013.334957][T21097] udevd[21097]: symlink '../../loop2' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:2' failed: Read-only file system [ 1013.506525][T13846] team0 (unregistering): Port device team_slave_1 removed [ 1013.511363][T21703] XFS (loop2): Ending clean mount [ 1013.674944][T21703] XFS (loop2): Quotacheck needed: Please wait. [ 1013.786562][T13846] team0 (unregistering): Port device team_slave_0 removed [ 1013.901936][T21703] XFS (loop2): Quotacheck: Done. [ 1014.174389][T17491] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1014.439419][T19364] Bluetooth: hci0: command tx timeout [ 1015.153040][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7223'. [ 1015.190148][T21669] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7223'. [ 1015.531150][T21727] loop0: detected capacity change from 0 to 128 [ 1015.543251][T21727] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 1015.666180][T21727] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1015.727172][T21727] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.7245: Directory block failed checksum [ 1016.009580][T21725] loop4: detected capacity change from 0 to 8192 [ 1016.078037][T20261] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1016.080029][T20873] udevd[20873]: symlink '../../loop0' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:0' failed: Read-only file system [ 1016.175522][T21725] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1016.212725][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/SYZKALLER.tmp-b7:4' failed: Read-only file system [ 1016.634590][T21744] loop1: detected capacity change from 0 to 256 [ 1016.684067][T21744] exfat: Deprecated parameter 'utf8' [ 1016.706188][T21744] exfat: Deprecated parameter 'utf8' [ 1016.808461][T21744] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1016.856792][T21590] chnl_net:caif_netlink_parms(): no params data found [ 1017.050481][T21742] loop0: detected capacity change from 0 to 4096 [ 1017.104635][T21742] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 1017.271351][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1017.282223][T21742] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 1017.334594][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:0' failed: Read-only file system [ 1017.732809][ T5292] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1018.004081][ T5292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.057457][ T5292] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.089972][ T5292] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 1018.099786][ T5292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.153958][ T5292] usb 6-1: config 0 descriptor?? [ 1018.906416][T21590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.949050][T21590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.956536][T21590] bridge_slave_0: entered allmulticast mode [ 1019.027344][T21590] bridge_slave_0: entered promiscuous mode [ 1019.179374][T21590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.202538][ T5292] corsair-psu 0003:1B1C:1C0C.008F: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0c] on usb-dummy_hcd.5-1/input0 [ 1019.229805][T21590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.284726][T21590] bridge_slave_1: entered allmulticast mode [ 1019.336350][ T5292] corsair-psu 0003:1B1C:1C0C.008F: unable to initialize device (-38) [ 1019.359367][T21590] bridge_slave_1: entered promiscuous mode [ 1019.383864][ T5292] corsair-psu 0003:1B1C:1C0C.008F: probe with driver corsair-psu failed with error -38 [ 1019.471361][ T5292] usb 6-1: USB disconnect, device number 38 [ 1019.571029][T21783] ax25_connect(): syz.2.7260 uses autobind, please contact jreuter@yaina.de [ 1019.936130][T21590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.010838][T21590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.196742][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.237533][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.277107][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.333530][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.352076][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.395946][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.441890][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.461926][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.490136][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.503896][T21792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.511765][T21792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.560617][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.576945][ T5311] hid-generic 0000:0000:0000.0090: unknown main item tag 0x0 [ 1020.651693][ T5311] hid-generic 0000:0000:0000.0090: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1020.666020][T21590] team0: Port device team_slave_0 added [ 1020.722567][T21590] team0: Port device team_slave_1 added [ 1020.822602][T17543] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1021.019757][T21590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.048389][T21590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.081211][T17543] usb 3-1: Using ep0 maxpacket: 8 [ 1021.126308][T17543] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 1021.140062][T21802] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only [ 1021.145343][T17543] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.166942][T21590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.188817][T21802] overlayfs: fs on './file1' does not support file handles, falling back to index=off,nfs_export=off. [ 1021.200271][T17543] usb 3-1: config 135 has no interface number 0 [ 1021.206624][T17543] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1021.241227][T21803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7267'. [ 1021.249073][T21802] overlayfs: fs on './file1' does not support file handles, falling back to xino=off. [ 1021.266188][T17543] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1021.282747][T21590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.291733][T17543] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.300803][T21590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.330666][T21802] overlayfs: conflicting lowerdir path [ 1021.331589][T17543] usb 3-1: Product: syz [ 1021.350018][T17543] usb 3-1: Manufacturer: syz [ 1021.360358][T17543] usb 3-1: SerialNumber: syz [ 1021.381125][T21590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.430323][T17543] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 1021.436782][T17543] usb 3-1: No valid video chain found. [ 1021.678271][ T46] usb 3-1: USB disconnect, device number 56 [ 1021.771509][T21810] loop4: detected capacity change from 0 to 512 [ 1021.830544][T21810] EXT4-fs: Ignoring removed i_version option [ 1021.905786][T21810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1021.967629][T21590] hsr_slave_0: entered promiscuous mode [ 1021.998167][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1022.045041][T21810] EXT4-fs (loop4): 1 truncate cleaned up [ 1022.053234][T21810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1022.109353][T21590] hsr_slave_1: entered promiscuous mode [ 1022.363876][ T7614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1022.642460][T21829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7290'. [ 1022.783411][T21832] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7277'. [ 1022.798937][T21835] loop4: detected capacity change from 0 to 256 [ 1023.316099][T21840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.324759][T21840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.498677][T21848] loop4: detected capacity change from 0 to 128 [ 1024.025768][T21853] loop2: detected capacity change from 0 to 512 [ 1024.109355][T21853] EXT4-fs error (device loop2): ext4_validate_block_bitmap:431: comm syz.2.7286: bg 0: block 5: invalid block bitmap [ 1024.169044][T21853] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 1024.226612][T20873] udevd[20873]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1024.250588][T21853] EXT4-fs error (device loop2): ext4_free_branches:1027: inode #11: comm syz.2.7286: invalid indirect mapped block 3 (level 2) [ 1024.324934][T21853] EXT4-fs (loop2): 1 orphan inode deleted [ 1024.353845][T21853] EXT4-fs (loop2): 1 truncate cleaned up [ 1024.385849][T21853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.689006][T21853] EXT4-fs error (device loop2): empty_inline_dir:1831: inode #12: block 7: comm syz.2.7286: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 1024.799446][T21853] EXT4-fs warning (device loop2): empty_inline_dir:1834: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 1024.937559][T21871] Bluetooth: MGMT ver 1.23 [ 1025.096589][T17491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.718776][T21877] mkiss: ax0: crc mode is auto. [ 1026.953139][T21590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1027.027033][T21590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1027.140557][T21590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1027.243598][T21590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1027.317497][T21882] loop1: detected capacity change from 0 to 32768 [ 1027.442265][T21908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7305'. [ 1027.941352][T20687] udevd[20687]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system [ 1028.176284][T21590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.391684][T21590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.412416][T21924] loop0: detected capacity change from 0 to 256 [ 1028.460656][T21924] exfat: Deprecated parameter 'namecase' [ 1028.466506][T21924] exfat: Bad value for 'fmask' [ 1028.542447][T13846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.549773][T13846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.654064][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.661359][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.684153][T21924] loop0: detected capacity change from 0 to 512 [ 1028.828748][T21924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1028.929840][T21097] udevd[21097]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1028.935933][T21924] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1029.034819][T21924] EXT4-fs (loop0): 1 truncate cleaned up [ 1029.092764][T21924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1029.193376][T21097] udevd[21097]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1029.392227][T21097] udevd[21097]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1029.553451][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 1029.620574][T20261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.760239][T21949] syz.1.7321[21949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1029.760549][T21949] syz.1.7321[21949] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1030.630904][T21590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.760992][T21970] loop1: detected capacity change from 0 to 64 [ 1031.089957][T21975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7329'. [ 1031.126998][T21097] udevd[21097]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system [ 1031.268410][T21930] loop2: detected capacity change from 0 to 32768 [ 1031.326205][T21981] loop1: detected capacity change from 0 to 16 [ 1031.377992][T21590] veth0_vlan: entered promiscuous mode [ 1031.449767][T21981] erofs: (device loop1): mounted with root inode @ nid 36. [ 1031.522010][T21590] veth1_vlan: entered promiscuous mode [ 1031.581443][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:2' failed: Read-only file system [ 1031.660897][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1031.660923][ T29] audit: type=1800 audit(1726257974.026:214): pid=21981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7331" name="file0" dev="loop1" ino=49 res=0 errno=0 [ 1031.700054][T21097] udevd[21097]: symlink '../../loop1' '/dev/disk/by-uuid/b90ffb29-db69-4fbb-9730-eedcb9c04b39.tmp-b7:1' failed: Read-only file system [ 1031.799881][T21590] veth0_macvtap: entered promiscuous mode [ 1031.822811][T21989] loop0: detected capacity change from 0 to 64 [ 1031.872609][T21590] veth1_macvtap: entered promiscuous mode [ 1032.003825][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.080589][T21989] Trying to free block not in datazone [ 1032.088963][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.126198][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.168385][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.232516][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.282770][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.307979][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.338867][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.368144][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.407991][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.440984][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1032.477864][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.519854][T21590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.656840][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.740377][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.792397][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.839357][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.877418][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.919708][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1032.964087][T22008] loop1: detected capacity change from 0 to 512 [ 1032.972264][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1032.991769][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.022113][T22008] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 1033.031627][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.050396][T22008] EXT4-fs error (device loop1): ext4_free_branches:1027: inode #13: comm syz.1.7339: invalid indirect mapped block 2683928664 (level 1) [ 1033.067136][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.089096][T22008] EXT4-fs (loop1): Remounting filesystem read-only [ 1033.104103][T22008] EXT4-fs (loop1): 1 truncate cleaned up [ 1033.115969][T22008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.127302][T21590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1033.184951][T20687] udevd[20687]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1033.207678][T21590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1033.241084][T22008] EXT4-fs (loop1): Quota file not on filesystem root. Journaled quota will not work [ 1033.251150][T21590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.330755][T21590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.363759][T21590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.419210][T21590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.475160][T21590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.599236][T11709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1033.941808][T22025] loop0: detected capacity change from 0 to 1024 [ 1034.246494][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-label/untitled.tmp-b7:0' failed: Read-only file system [ 1034.265279][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.322580][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:0' failed: Read-only file system [ 1034.349439][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.579066][T13846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.613924][T22035] syz.0.7346[22035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1034.614208][T22035] syz.0.7346[22035] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1034.628569][T13846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.717756][T22037] loop2: detected capacity change from 0 to 512 [ 1034.760986][T22037] EXT4-fs: Ignoring removed i_version option [ 1034.804723][T22037] EXT4-fs: Ignoring removed nobh option [ 1034.862736][T22037] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1035.034323][T22037] EXT4-fs (loop2): 1 truncate cleaned up [ 1035.042580][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1035.102391][T22037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.899570][T17491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.355678][T22071] ip6t_REJECT: ECHOREPLY is not supported [ 1036.744794][T22078] loop2: detected capacity change from 0 to 2048 [ 1036.806196][T22083] Bluetooth: hci3: unsupported parameter 65535 [ 1036.843296][T22083] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1036.895143][T22078] EXT4-fs (loop2): #clusters per group too big: 20480 [ 1037.244464][T22091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7366'. [ 1037.300359][T22091] IPv6: NLM_F_CREATE should be specified when creating new route [ 1037.407772][T19364] Bluetooth: hci0: command tx timeout [ 1037.884235][ T5287] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1038.111687][ T5287] usb 2-1: Using ep0 maxpacket: 32 [ 1038.134557][ T5287] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1038.165479][T22109] loop2: detected capacity change from 0 to 512 [ 1038.172666][ T5287] usb 2-1: config 0 has no interface number 0 [ 1038.188297][ T5287] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.237806][ T5287] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.270454][T22109] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1038.298216][T22109] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1038.303883][ T5287] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1038.321918][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.349472][ T5287] usb 2-1: config 0 descriptor?? [ 1038.370733][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1038.425880][T22109] EXT4-fs error (device loop2): ext4_acquire_dquot:6846: comm syz.2.7374: Failed to acquire dquot type 1 [ 1038.630239][T22109] EXT4-fs (loop2): 1 truncate cleaned up [ 1038.665703][T22109] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1038.734113][T22109] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.771150][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7377'. [ 1038.916958][T22109] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1038.961801][T22109] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1038.994788][T22109] EXT4-fs error (device loop2): ext4_acquire_dquot:6846: comm syz.2.7374: Failed to acquire dquot type 1 [ 1039.046899][ T5287] uclogic 0003:28BD:0094.0091: pen parameters not found [ 1039.087030][ T5287] uclogic 0003:28BD:0094.0091: interface is invalid, ignoring [ 1039.317999][ T5287] usb 2-1: USB disconnect, device number 60 [ 1039.369215][T17491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1040.427817][T22158] loop4: detected capacity change from 0 to 64 [ 1040.533643][T21097] udevd[21097]: symlink '../../loop4' '/dev/disk/by-label/unt.tmp-b7:4' failed: Read-only file system [ 1040.759131][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/unt.tmp-b7:4' failed: Read-only file system [ 1040.818477][T22163] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1041.947893][T22183] netlink: 173 bytes leftover after parsing attributes in process `syz.5.7399'. [ 1042.251504][ T46] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1042.477845][ T5287] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1042.488668][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 1042.536669][ T46] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 1042.577110][ T46] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1042.609121][ T46] usb 2-1: config 135 has no interface number 0 [ 1042.615489][ T46] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.704071][ T46] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1042.705500][ T5287] usb 3-1: Using ep0 maxpacket: 16 [ 1042.728283][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.736338][ T46] usb 2-1: Product: syz [ 1042.762600][T22207] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1042.791707][ T5287] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 1042.791987][ T46] usb 2-1: Manufacturer: syz [ 1042.833883][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.842489][ T46] usb 2-1: SerialNumber: syz [ 1042.871457][ T5287] usb 3-1: Product: syz [ 1042.875724][ T5287] usb 3-1: Manufacturer: syz [ 1042.896617][ T5287] usb 3-1: SerialNumber: syz [ 1042.924735][ T46] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 1042.951146][ T5287] usb 3-1: config 0 descriptor?? [ 1042.954520][ T46] usb 2-1: No valid video chain found. [ 1043.148452][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1043.155775][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1043.268307][ T5287] usb 3-1: Cannot retrieve CPort count: -71 [ 1043.290535][ T5287] usb 3-1: Cannot retrieve CPort count: -71 [ 1043.323732][ T5287] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 1043.365352][ T5287] usb 3-1: USB disconnect, device number 57 [ 1043.422166][ T25] usb 2-1: USB disconnect, device number 61 [ 1044.268280][T22225] loop4: detected capacity change from 0 to 4096 [ 1044.485794][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1044.491020][T22231] loop3: detected capacity change from 0 to 4096 [ 1044.504182][ T29] audit: type=1800 audit(1726257985.878:215): pid=22225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7414" name="bus" dev="loop4" ino=24 res=0 errno=0 [ 1044.560795][T22231] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 1044.582669][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-uuid/275C1089492DF3B0.tmp-b7:4' failed: Read-only file system [ 1044.692133][T22231] ntfs3: loop3: Failed to load $Extend (-22). [ 1044.727342][T22231] ntfs3: loop3: Failed to initialize $Extend. [ 1044.774014][T22243] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7420'. [ 1044.825309][T21097] udevd[21097]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1044.864472][T21097] udevd[21097]: symlink '../../loop3' '/dev/disk/by-uuid/02AFA4DB32BB7E65.tmp-b7:3' failed: Read-only file system [ 1044.920838][T20687] udevd[20687]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1045.048829][T22247] netlink: 'syz.1.7422': attribute type 4 has an invalid length. [ 1045.245918][T22252] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1045.716536][T22261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7427'. [ 1045.716574][T22261] netem: invalid attributes len -24 [ 1046.892668][T22287] loop2: detected capacity change from 0 to 2048 [ 1046.939976][T22290] loop3: detected capacity change from 0 to 512 [ 1046.965340][T22290] EXT4-fs: Ignoring removed i_version option [ 1046.993893][T22287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.029444][T22290] EXT4-fs: Ignoring removed nobh option [ 1047.071708][T22290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1047.137024][T22290] EXT4-fs (loop3): 1 truncate cleaned up [ 1047.142221][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1047.226467][T22290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.302062][T21097] udevd[21097]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1047.495818][T22302] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1047.543679][T17491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.680616][T22306] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1047.680616][T22306] The task syz.4.7443 (22306) triggered the difference, watch for misbehavior. [ 1047.783218][T20687] udevd[20687]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1048.007253][T21590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.934349][T22325] loop3: detected capacity change from 0 to 1024 [ 1049.005937][T22325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1049.135055][T20687] udevd[20687]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 1049.361107][T22337] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1049.414398][T22301] loop0: detected capacity change from 0 to 32768 [ 1049.446903][T22301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7441 (22301) [ 1049.507963][T22301] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1049.563519][T22301] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1049.572293][T22301] BTRFS info (device loop0): using free-space-tree [ 1049.737605][T21097] udevd[21097]: symlink '../../loop0' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:0' failed: Read-only file system [ 1050.177437][T22362] loop4: detected capacity change from 0 to 1024 [ 1050.304829][T22362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.317626][T21590] EXT4-fs error (device loop3): ext4_lookup:1813: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1050.358978][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1050.371241][T21590] EXT4-fs error (device loop3): ext4_lookup:1813: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1050.405274][T22362] ext4 filesystem being mounted at /1123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.583989][ T29] audit: type=1800 audit(1726257991.499:216): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7460" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1050.675415][ T29] audit: type=1804 audit(1726257991.582:217): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7460" name="/newroot/1123/file1/file1" dev="loop4" ino=15 res=1 errno=0 [ 1050.789442][T20261] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1050.921795][ T7614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.037170][T22373] netlink: 296 bytes leftover after parsing attributes in process `syz.5.7463'. [ 1051.136823][T22373] unsupported nlmsg_type 40 [ 1051.214346][T21097] udevd[21097]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1051.669090][T21590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1052.132726][T22385] input: syz0 as /devices/virtual/input/input44 [ 1052.395862][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.224128][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.200850][T22410] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 1054.208512][T22410] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1054.255574][T22410] Error parsing options; rc = [-22] [ 1054.368584][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.895854][T13049] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1054.910147][T13049] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1054.950585][T13049] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1054.983172][T13049] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1055.001937][T13049] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1055.022704][T13049] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1055.082948][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.281425][T22424] loop4: detected capacity change from 0 to 1024 [ 1055.532022][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 1055.612225][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:4' failed: Read-only file system [ 1056.140921][ T52] bridge_slave_1: left allmulticast mode [ 1056.146639][ T52] bridge_slave_1: left promiscuous mode [ 1056.210847][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.382247][ T52] bridge_slave_0: left allmulticast mode [ 1056.387979][ T52] bridge_slave_0: left promiscuous mode [ 1056.440951][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.256008][T13049] Bluetooth: hci0: command tx timeout [ 1057.463489][T22452] loop2: detected capacity change from 0 to 2048 [ 1057.645286][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:2' failed: Read-only file system [ 1057.649207][T22455] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1057.829668][ T29] audit: type=1800 audit(1726257998.181:218): pid=22452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.7497" name="bus" dev="loop2" ino=2097152 res=0 errno=0 [ 1059.509447][T13049] Bluetooth: hci0: command tx timeout [ 1059.590446][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1059.645869][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1059.694256][ T52] bond0 (unregistering): Released all slaves [ 1060.438247][T22486] loop4: detected capacity change from 0 to 2048 [ 1060.582657][ T5287] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1060.598231][T22486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1060.619095][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/LinuxUDF.tmp-b7:4' failed: Read-only file system [ 1060.650064][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-uuid/1234567812345678.tmp-b7:4' failed: Read-only file system [ 1060.835088][ T5287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.858771][ T5287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1060.917867][ T5287] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x65, changing to 0x5 [ 1060.981421][ T5287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 4 [ 1061.070256][ T5287] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1061.079394][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.207701][ T5287] hub 3-1:1.0: bad descriptor, ignoring hub [ 1061.264416][ T5287] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1061.272465][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 1061.327971][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 1061.362717][ T5287] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1061.462587][ T5287] usb 3-1: USB disconnect, device number 58 [ 1061.498276][T22466] loop1: detected capacity change from 0 to 32768 [ 1061.558958][T22466] XFS: noikeep mount option is deprecated. [ 1061.636445][T22466] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop1": -EINTR [ 1061.763116][T13049] Bluetooth: hci0: command tx timeout [ 1061.766151][T22415] chnl_net:caif_netlink_parms(): no params data found [ 1061.909463][T21097] udevd[21097]: symlink '../../loop1' '/dev/disk/by-uuid/a2f82aab-77f8-4286-afd4-a8f747a74bab.tmp-b7:1' failed: Read-only file system [ 1061.947129][T22510] loop0: detected capacity change from 0 to 4096 [ 1062.005982][T22510] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1062.037553][T22510] NILFS (loop0): trying rollback from an earlier position [ 1062.119673][T22510] NILFS (loop0): recovery complete [ 1062.150064][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:0' failed: Read-only file system [ 1062.183073][T22514] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1062.315781][ T52] hsr_slave_0: left promiscuous mode [ 1062.424600][ T52] hsr_slave_1: left promiscuous mode [ 1062.489839][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.497489][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.584194][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.597332][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.906170][ T52] veth1_macvtap: left promiscuous mode [ 1062.974436][ T52] veth0_macvtap: left promiscuous mode [ 1062.982907][ T52] veth1_vlan: left promiscuous mode [ 1063.022860][ T52] veth0_vlan: left promiscuous mode [ 1064.016772][T13049] Bluetooth: hci0: command tx timeout [ 1064.129247][T22539] Attempt to restore checkpoint with obsolete wellknown handles [ 1064.660345][T22544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7530'. [ 1065.530205][ T52] team0 (unregistering): Port device team_slave_1 removed [ 1065.668495][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1067.088719][T22522] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7523'. [ 1067.603498][T22555] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.7535'. [ 1067.612706][T22555] netlink: 'syz.1.7535': attribute type 1 has an invalid length. [ 1067.621765][T22555] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7535'. [ 1068.422552][T22415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.490141][T22415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.538372][T22415] bridge_slave_0: entered allmulticast mode [ 1068.587256][T22415] bridge_slave_0: entered promiscuous mode [ 1068.654891][T22415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.715248][T22584] loop4: detected capacity change from 0 to 128 [ 1068.733795][T22415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.761755][T22415] bridge_slave_1: entered allmulticast mode [ 1068.897376][T22584] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1068.941247][T22415] bridge_slave_1: entered promiscuous mode [ 1069.025993][T22584] ext4 filesystem being mounted at /1142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1069.049287][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:4' failed: Read-only file system [ 1069.441644][ T7614] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1069.461596][T22415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.555185][T22415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.920275][T22603] netlink: 'syz.4.7550': attribute type 10 has an invalid length. [ 1069.964723][T22606] netlink: 'syz.4.7550': attribute type 10 has an invalid length. [ 1070.034606][T22415] team0: Port device team_slave_0 added [ 1070.107110][T22415] team0: Port device team_slave_1 added [ 1070.490045][T22415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.564013][T22415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.726434][T22415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.739228][T22618] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 1070.766164][T22618] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1070.800922][T22415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.807933][T22415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.833918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1070.871389][T22618] Error parsing options; rc = [-22] [ 1070.909376][T22622] loop4: detected capacity change from 0 to 256 [ 1070.917388][T22622] exfat: Bad value for 'fmask' [ 1070.929292][T22415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.252367][T22592] loop0: detected capacity change from 0 to 32768 [ 1071.328285][T22592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7545 (22592) [ 1071.496213][T22592] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1071.518321][T21097] udevd[21097]: symlink '../../loop0' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:0' failed: Read-only file system [ 1071.547201][T22592] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 1071.555706][T22592] BTRFS info (device loop0): using free-space-tree [ 1071.619361][T22415] hsr_slave_0: entered promiscuous mode [ 1071.718948][T22415] hsr_slave_1: entered promiscuous mode [ 1072.613458][T22659] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7566'. [ 1072.728720][T22662] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7566'. [ 1072.779079][T22665] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.7567'. [ 1072.873646][T20261] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1072.912289][T22659] : entered promiscuous mode [ 1073.207179][T22662] openvswitch: : Dropping previously announced user features [ 1074.390221][T22687] loop1: detected capacity change from 0 to 1024 [ 1074.508477][T22687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.563644][T20687] udevd[20687]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 1074.760405][T22698] vxcan1: tx address claim with different name [ 1074.781570][T22699] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1074.887371][T22701] loop2: detected capacity change from 0 to 2048 [ 1074.932467][T22701] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1075.355386][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-label/LinuxUDF.tmp-b7:2' failed: Read-only file system [ 1075.416181][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-uuid/1234567812345678.tmp-b7:2' failed: Read-only file system [ 1075.481149][T11709] EXT4-fs error (device loop1): ext4_lookup:1813: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1075.534127][T11709] EXT4-fs error (device loop1): ext4_lookup:1813: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1076.271044][T11709] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.518233][T20375] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.860973][T20375] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.081179][T20375] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.227696][T20375] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.561153][T22415] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1077.681451][T22415] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1077.741746][T22415] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1077.832733][T22415] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1078.294622][T20375] bridge_slave_1: left allmulticast mode [ 1078.312127][T20375] bridge_slave_1: left promiscuous mode [ 1078.336673][T20375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.434415][T20375] bridge_slave_0: left allmulticast mode [ 1078.442014][T20375] bridge_slave_0: left promiscuous mode [ 1078.465146][T20375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.952045][T19364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1079.015117][T19364] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1079.029547][T19364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1079.042410][T19364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1079.056581][T19364] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1079.064329][T19364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1079.290502][T22758] loop2: detected capacity change from 0 to 4096 [ 1079.384411][T22758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1079.558960][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1079.658700][T17491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.937146][T20687] udevd[20687]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1080.102565][T22769] netlink: 596 bytes leftover after parsing attributes in process `syz.2.7603'. [ 1081.128817][T20375]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1081.162819][T20375]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1081.189168][T20375]  (unregistering): Released all slaves [ 1081.353131][T19364] Bluetooth: hci4: command tx timeout [ 1081.551951][T20375] tipc: Disabling bearer [ 1081.569845][T20375] tipc: Disabling bearer [ 1081.615225][T20375] tipc: Left network mode [ 1081.801291][T20375] IPVS: stopping master sync thread 15205 ... [ 1081.876290][T20375] IPVS: stopping backup sync thread 18482 ... [ 1082.196744][T22804] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7613'. [ 1082.459069][T22807] loop2: detected capacity change from 0 to 8 [ 1083.333554][T20375] hsr_slave_0: left promiscuous mode [ 1083.435153][T20375] hsr_slave_1: left promiscuous mode [ 1083.490760][T20375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.507082][T20375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1083.620719][T19364] Bluetooth: hci4: command tx timeout [ 1083.690734][T20375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1083.699640][T20375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1083.874770][T20375] veth1_macvtap: left promiscuous mode [ 1083.899658][T20375] veth0_macvtap: left promiscuous mode [ 1083.905664][T20375] veth1_vlan: left promiscuous mode [ 1083.945374][T20375] veth0_vlan: left promiscuous mode [ 1085.858407][T19364] Bluetooth: hci4: command tx timeout [ 1086.246025][T22857] loop2: detected capacity change from 0 to 1024 [ 1086.400957][T22857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.467154][T20687] udevd[20687]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 1086.501612][T22857] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1086.806404][T17491] EXT4-fs error (device loop2): ext4_lookup:1813: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1086.860136][T17491] EXT4-fs error (device loop2): ext4_lookup:1813: inode #2: comm syz-executor: deleted inode referenced: 11 [ 1087.481236][T20375] team0 (unregistering): Port device team_slave_1 removed [ 1087.662340][T20375] team0 (unregistering): Port device team_slave_0 removed [ 1088.114789][T19364] Bluetooth: hci4: command tx timeout [ 1089.237351][T22415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.750982][T17491] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.938883][T22415] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.106033][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.113429][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.223609][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.230928][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.343205][T22754] chnl_net:caif_netlink_parms(): no params data found [ 1091.200545][T22916] loop4: detected capacity change from 0 to 512 [ 1091.345096][T22916] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1091.392074][T22754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.414974][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1091.429697][T22916] EXT4-fs error (device loop4): ext4_free_branches:1027: inode #13: comm syz.4.7642: invalid indirect mapped block 8 (level 2) [ 1091.451199][T22754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.458738][T22754] bridge_slave_0: entered allmulticast mode [ 1091.502058][T22754] bridge_slave_0: entered promiscuous mode [ 1091.526733][T22916] EXT4-fs (loop4): Remounting filesystem read-only [ 1091.533768][T22916] EXT4-fs (loop4): 1 truncate cleaned up [ 1091.559132][T22754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.590214][T22754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.597600][T22754] bridge_slave_1: entered allmulticast mode [ 1091.614061][T22916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.625272][T22754] bridge_slave_1: entered promiscuous mode [ 1091.852491][T22926] IPVS: sed: TCP 127.0.0.1:0 - no destination available [ 1091.861779][ T46] IPVS: starting estimator thread 0... [ 1091.982184][T22928] IPVS: using max 16 ests per chain, 38400 per kthread [ 1091.999988][ T7614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1092.050665][T22754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.159745][T22754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1092.238347][T20687] udevd[20687]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 1092.593342][ T1099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.698994][T13049] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1092.714167][T13049] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1092.728257][T13049] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1092.751204][T13049] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1092.772629][T13049] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1092.780704][T13049] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1093.230277][ T1099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.366441][T22754] team0: Port device team_slave_0 added [ 1093.500206][ T1099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.534158][T22754] team0: Port device team_slave_1 added [ 1093.763956][ T1099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.959423][T22754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.982673][T22754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.049131][T22754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.077857][T22754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.092771][T22754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.153167][T22754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.611525][T22754] hsr_slave_0: entered promiscuous mode [ 1094.651993][T22754] hsr_slave_1: entered promiscuous mode [ 1094.705539][T22754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1094.731415][T22754] Cannot create hsr debugfs directory [ 1094.757165][T22415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.059275][T13049] Bluetooth: hci5: command tx timeout [ 1095.214854][ T1099] bridge_slave_1: left allmulticast mode [ 1095.229693][ T1099] bridge_slave_1: left promiscuous mode [ 1095.235699][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.252205][ T8] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1095.263371][ T1099] bridge_slave_0: left allmulticast mode [ 1095.269117][ T1099] bridge_slave_0: left promiscuous mode [ 1095.276698][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.462919][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.479650][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1095.516025][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1095.533155][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1095.554770][ T8] usb 1-1: SerialNumber: syz [ 1095.820613][ T8] usb 1-1: 0:2 : does not exist [ 1095.839192][ T8] usb 1-1: unit 23 not found! [ 1095.943211][ T8] usb 1-1: USB disconnect, device number 68 [ 1096.091510][T20687] udevd[20687]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1096.566957][T22977] loop4: detected capacity change from 0 to 64 [ 1096.643540][ T29] audit: type=1800 audit(1726258034.012:219): pid=22977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7655" name="file1" dev="loop4" ino=22 res=0 errno=0 [ 1096.700587][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 1096.874695][T22979] loop0: detected capacity change from 0 to 256 [ 1096.916581][T22979] exfat: Deprecated parameter 'namecase' [ 1096.953709][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.962594][T22979] exfat: Deprecated parameter 'utf8' [ 1096.969259][T22979] exfat: Deprecated parameter 'namecase' [ 1096.984926][T22979] exfat: Deprecated parameter 'utf8' [ 1097.022572][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1097.075995][ T1099] bond0 (unregistering): Released all slaves [ 1097.113465][T22981] Bluetooth: MGMT ver 1.23 [ 1097.156655][T22979] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 1097.300103][T13049] Bluetooth: hci5: command tx timeout [ 1097.627680][ T1099] : left promiscuous mode [ 1098.017575][ T1099] tipc: Left network mode [ 1098.481710][T22934] chnl_net:caif_netlink_parms(): no params data found [ 1099.563391][T13049] Bluetooth: hci5: command tx timeout [ 1100.137703][ T1099] hsr_slave_0: left promiscuous mode [ 1100.162160][ T1099] hsr_slave_1: left promiscuous mode [ 1100.203263][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.210763][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.251028][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.268416][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.425619][ T1099] veth1_macvtap: left promiscuous mode [ 1100.444481][ T1099] veth0_macvtap: left promiscuous mode [ 1100.450380][ T1099] veth1_vlan: left promiscuous mode [ 1100.484666][ T1099] veth0_vlan: left promiscuous mode [ 1100.784834][T23037] loop4: detected capacity change from 0 to 64 [ 1100.900833][T20687] udevd[20687]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system [ 1100.951907][T13049] Bluetooth: hci0: command tx timeout [ 1101.813105][T13049] Bluetooth: hci5: command tx timeout [ 1102.623868][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 1102.803323][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 1104.046188][T23023] netlink: 'syz.0.7670': attribute type 4 has an invalid length. [ 1104.162460][T22415] veth0_vlan: entered promiscuous mode [ 1104.484928][T23050] loop0: detected capacity change from 0 to 2048 [ 1104.552436][T23050] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1104.719270][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-label/LinuxUDF.tmp-b7:0' failed: Read-only file system [ 1104.781324][T20687] udevd[20687]: symlink '../../loop0' '/dev/disk/by-uuid/1234567812345678.tmp-b7:0' failed: Read-only file system [ 1104.909498][T22934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.927558][T22934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.934836][T22934] bridge_slave_0: entered allmulticast mode [ 1105.004928][T22934] bridge_slave_0: entered promiscuous mode [ 1105.048502][T22934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.055952][T22934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.102580][T23054] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7682'. [ 1105.144025][T22934] bridge_slave_1: entered allmulticast mode [ 1105.187843][T22934] bridge_slave_1: entered promiscuous mode [ 1105.461231][T20768] printk: udevd: 27 output lines suppressed due to ratelimiting [ 1105.608164][T22415] veth1_vlan: entered promiscuous mode [ 1105.675332][T22934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.703594][T22934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.262723][T22934] team0: Port device team_slave_0 added [ 1106.291309][T22934] team0: Port device team_slave_1 added [ 1106.363043][T22754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1106.561287][T23075] loop4: detected capacity change from 0 to 256 [ 1106.585192][T22754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1106.607903][T23075] vfat: Unknown parameter '' [ 1106.624526][T22754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1106.705367][T23075] loop4: detected capacity change from 0 to 1024 [ 1106.738548][T23075] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 1106.780851][T22754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1106.841715][T23075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1106.882054][T22934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.919836][T22934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.952144][T23075] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 1106.962920][T22934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.020652][T22934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.062671][T22934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.142807][T22934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.204760][ T7614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1107.368671][T22415] veth0_macvtap: entered promiscuous mode [ 1107.681264][T22415] veth1_macvtap: entered promiscuous mode [ 1107.730877][T23086] loop4: detected capacity change from 0 to 256 [ 1107.764150][T22934] hsr_slave_0: entered promiscuous mode [ 1107.809186][T22934] hsr_slave_1: entered promiscuous mode [ 1107.831622][T22934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.839273][T22934] Cannot create hsr debugfs directory [ 1108.095508][T22415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.122557][T22415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.136858][T22415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.158621][T22415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.182838][T22415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.201949][T22415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.231645][T22415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.251818][T22415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.268541][T22415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.477531][T22415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.497897][T22415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.510626][T22415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.521950][T22415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.532355][T22415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.552174][T22415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.563785][T22415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.575152][T22415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.598451][T22415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.641790][T23098] loop0: detected capacity change from 0 to 512 [ 1108.663517][T23098] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1108.735131][T23098] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #17: comm syz.0.7701: iget: bad i_size value: -6917529027641081756 [ 1108.767894][T23098] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.7701: couldn't read orphan inode 17 (err -117) [ 1108.773076][T22415] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.797861][T22415] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.809178][T22415] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.818134][T22415] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.819538][T23098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1109.276338][T20261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1109.709335][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1109.715796][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1109.796744][T22754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.826740][T20375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.884258][T20375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.101047][T22754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.239440][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.274065][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.306471][T13846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.313859][T13846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.424790][T13846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.432154][T13846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.545000][T22934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1110.592948][ T5287] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1110.627885][T22934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1110.699881][T22934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1110.758367][T22934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1110.802216][ T5287] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1110.849398][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.885435][ T5287] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.923637][ T5287] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1111.007822][ T5287] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 1111.026069][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.062024][ T5287] usb 1-1: config 0 descriptor?? [ 1111.278652][ T29] audit: type=1326 audit(1726258047.516:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23122 comm="syz.3.7709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9e2f7def9 code=0x0 [ 1111.523440][T22934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.627654][ T5287] uclogic 0003:5543:0003.0092: No inputs registered, leaving [ 1111.662765][T22934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.682745][ T5287] uclogic 0003:5543:0003.0092: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.0-1/input0 [ 1111.738152][T13846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.745707][T13846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.852840][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.860235][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.027070][ T25] usb 1-1: USB disconnect, device number 69 [ 1112.079223][T22754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.171876][T23131] loop8: detected capacity change from 0 to 6 [ 1112.187601][T23131] Dev loop8: unable to read RDB block 6 [ 1112.207130][T23131] loop8: unable to read partition table [ 1112.213291][T23131] loop8: partition table beyond EOD, truncated [ 1112.240675][T23131] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1112.240675][T23131] ) failed (rc=-5) [ 1112.649628][T22754] veth0_vlan: entered promiscuous mode [ 1112.722850][T22754] veth1_vlan: entered promiscuous mode [ 1112.962538][T22754] veth0_macvtap: entered promiscuous mode [ 1113.019498][T22754] veth1_macvtap: entered promiscuous mode [ 1113.155940][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.204093][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.213986][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.281253][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.317653][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.330741][T23151] loop0: detected capacity change from 0 to 16 [ 1113.355394][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.363102][T23151] erofs: (device loop0): mounted with root inode @ nid 36. [ 1113.365262][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.365296][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.422405][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1113.463707][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.509298][T22754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.560946][T23153] loop4: detected capacity change from 0 to 2048 [ 1113.586309][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.612284][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.634211][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.645909][T23153] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1113.647442][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.702192][T23153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1113.702207][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.743742][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.756234][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.766718][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.792030][T22754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.840155][T22754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.879538][T22754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.977112][T22754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.986253][T22754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.995056][T22754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.003842][T22754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.025857][T22934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1114.365614][T23165] loop4: detected capacity change from 0 to 512 [ 1114.484818][T23165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.597848][T23165] ext4 filesystem being mounted at /1199/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1114.623341][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.631218][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.722181][T23172] QAT: failed to copy from user cfg_data. [ 1114.845618][T23174] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1114.864051][T22934] veth0_vlan: entered promiscuous mode [ 1114.919178][T20375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.933970][ T7614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.938073][T20375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.031833][T22934] veth1_vlan: entered promiscuous mode [ 1115.117009][T23176] loop0: detected capacity change from 0 to 256 [ 1115.301427][T22934] veth0_macvtap: entered promiscuous mode [ 1115.386902][T22934] veth1_macvtap: entered promiscuous mode [ 1115.541256][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.590733][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.634616][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.663905][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.693291][T23186] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7734'. [ 1115.703484][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.728948][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.762925][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.782420][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.814785][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.842570][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.857610][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1115.868352][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1115.883486][T22934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1115.961857][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1115.992816][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.025831][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.081092][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.130331][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.174588][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.211809][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.253483][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.286411][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.330563][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.353259][T22934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1116.385859][T22934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1116.422710][T22934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.467335][T23196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7738'. [ 1116.580844][T22934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.608733][T22934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.641291][T22934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.677751][T22934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.717046][T23208] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7744'. [ 1117.313158][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.353322][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.506396][T23219] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.7750'. [ 1117.531179][T20375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.570379][T20375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.317274][T23241] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7758'. [ 1118.742156][ T46] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1119.009245][ T46] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1119.054492][ T46] usb 1-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 1119.073609][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.098942][ T46] usb 1-1: config 0 descriptor?? [ 1119.122165][ T46] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1119.463701][T23268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7769'. [ 1119.467335][ T46] usb 1-1: USB disconnect, device number 70 [ 1119.555110][T23272] loop4: detected capacity change from 0 to 2048 [ 1119.615403][T23272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1119.696337][T23272] ext4 filesystem being mounted at /1212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1119.882165][T23272] fs-verity (loop4, inode 13): Unknown hash algorithm number: 0 [ 1120.053234][ T7614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1121.353373][T23305] loop3: detected capacity change from 0 to 2048 [ 1121.468837][T23305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.504935][T23308] loop4: detected capacity change from 0 to 4096 [ 1121.522347][T23308] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1121.533170][T23305] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1121.735303][ T29] audit: type=1800 audit(1726258057.170:221): pid=23305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7788" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 1121.783937][T23305] fs-verity: sha512 using implementation "sha512-avx2" [ 1121.936870][T23305] fs-verity (loop3, inode 13): Error -22 reading file data [ 1121.944268][T23305] fs-verity (loop3, inode 13): Error -22 building Merkle tree [ 1121.957945][ T8] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1122.143454][T23320] netlink: 184 bytes leftover after parsing attributes in process `syz.1.7795'. [ 1122.183613][T23320] netlink: 'syz.1.7795': attribute type 1 has an invalid length. [ 1122.202772][T22415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.217920][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 1122.251497][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1122.311714][ T8] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1122.333384][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.369490][ T8] usb 1-1: Product: syz [ 1122.373719][ T8] usb 1-1: Manufacturer: syz [ 1122.378346][ T8] usb 1-1: SerialNumber: syz [ 1122.451831][ T8] usb 1-1: config 0 descriptor?? [ 1122.493943][ T8] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1122.534122][ T8] usb 1-1: selecting invalid altsetting 1 [ 1122.563542][T23326] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1122.570121][T23326] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1122.650521][T23335] loop1: detected capacity change from 0 to 512 [ 1122.660045][T23326] vhci_hcd vhci_hcd.0: Device attached [ 1122.698239][T23330] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 1122.704835][T23330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1122.729742][T23335] EXT4-fs: Ignoring removed oldalloc option [ 1122.759717][ T8] gspca_stk014: reg_r err -71 [ 1122.762023][T23335] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1122.780175][ T8] stk014 1-1:0.0: probe with driver stk014 failed with error -71 [ 1122.813733][T23338] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 1122.820319][T23338] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1122.830456][ T8] usb 1-1: USB disconnect, device number 71 [ 1122.857656][T23335] EXT4-fs (loop1): 1 truncate cleaned up [ 1122.865878][T23335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1122.913526][ T5292] vhci_hcd: vhci_device speed not set [ 1122.933086][T23330] vhci_hcd vhci_hcd.0: Device attached [ 1123.030671][ T5292] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 1123.037100][T23338] vhci_hcd vhci_hcd.0: Device attached [ 1123.065455][T23326] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(8) [ 1123.072253][T23326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1123.126708][T23335] EXT4-fs error (device loop1): mb_free_blocks:1945: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1123.153315][T23326] vhci_hcd vhci_hcd.0: Device attached [ 1123.188375][T23328] vhci_hcd: connection reset by peer [ 1123.193786][T23337] vhci_hcd: connection closed [ 1123.194108][T23340] vhci_hcd: connection closed [ 1123.199081][T23347] vhci_hcd: connection closed [ 1123.216181][T13846] vhci_hcd: stop threads [ 1123.247931][T13846] vhci_hcd: release socket [ 1123.266842][T13846] vhci_hcd: disconnect device [ 1123.292614][T13846] vhci_hcd: stop threads [ 1123.303395][T13846] vhci_hcd: release socket [ 1123.321260][T13846] vhci_hcd: disconnect device [ 1123.345446][T13846] vhci_hcd: stop threads [ 1123.349834][T13846] vhci_hcd: release socket [ 1123.365327][T13846] vhci_hcd: disconnect device [ 1123.386981][T13846] vhci_hcd: stop threads [ 1123.399510][T13846] vhci_hcd: release socket [ 1123.407827][T13846] vhci_hcd: disconnect device [ 1123.485081][T22754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.721095][T23358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7805'. [ 1124.767469][T23350] loop3: detected capacity change from 0 to 32768 [ 1125.268884][T23389] CUSE: unknown device info "ts_offset" [ 1125.285641][T23389] CUSE: DEVNAME unspecified [ 1125.634802][T23401] loop0: detected capacity change from 0 to 128 [ 1126.002129][T23406] FAT-fs (loop0): error, corrupted directory (invalid i_start) [ 1126.013093][T23406] FAT-fs (loop0): Filesystem has been set read-only [ 1126.023383][T23409] Context (ID=0x0) not attached to queue pair (handle=0x1:0x0) [ 1126.285281][ T29] audit: type=1400 audit(1726258061.370:222): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=23411 comm="syz.1.7832" [ 1126.960207][T23429] loop0: detected capacity change from 0 to 2048 [ 1127.140841][T23429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1127.284693][T23441] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7842'. [ 1127.589704][T20261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1127.937681][T23456] loop2: detected capacity change from 0 to 2048 [ 1128.024119][T23456] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 1128.084562][T23456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.236273][T23462] loop1: detected capacity change from 0 to 2048 [ 1128.332704][T23462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.371847][T23462] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.619663][ T5292] vhci_hcd: vhci_device speed not set [ 1128.770156][T22754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.883215][ T25] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1129.088837][T23484] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7861'. [ 1129.134894][T23488] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1129.162924][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 1129.190576][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1129.260409][ T25] usb 6-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1129.269720][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.335032][ T25] usb 6-1: config 0 descriptor?? [ 1129.355091][ T25] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1129.999966][T23504] loop3: detected capacity change from 0 to 2048 [ 1130.039975][ T46] usb 6-1: USB disconnect, device number 39 [ 1130.043730][T23504] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 1130.105497][T23504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1130.331664][T23514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7874'. [ 1130.565915][T23518] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1130.771971][T23524] ptrace attach of "./syz-executor exec"[22415] was attempted by "./syz-executor exec"[23524] [ 1130.929213][T15133] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1131.079720][T23528] vxcan1: tx address claim with dest, not broadcast [ 1131.158167][T15133] usb 2-1: Using ep0 maxpacket: 8 [ 1131.161107][T15133] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.205420][T15133] usb 2-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 1131.241158][T15133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.241208][T15133] usb 2-1: Product: syz [ 1131.241240][T15133] usb 2-1: Manufacturer: syz [ 1131.241274][T15133] usb 2-1: SerialNumber: syz [ 1131.264184][T15133] usb 2-1: config 0 descriptor?? [ 1131.281808][T15133] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 1131.331079][T15133] usb 2-1: selecting invalid altsetting 1 [ 1131.583996][T15133] gspca_stk014: reg_r err -71 [ 1131.588977][T15133] stk014 2-1:0.0: probe with driver stk014 failed with error -71 [ 1131.628171][T15133] usb 2-1: USB disconnect, device number 62 [ 1132.036830][T23549] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1132.043422][T23549] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1132.084764][T23549] vhci_hcd vhci_hcd.0: Device attached [ 1132.131235][T23552] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 1132.137831][T23552] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1132.200004][T23552] vhci_hcd vhci_hcd.0: Device attached [ 1132.223908][T23549] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 1132.230495][T23549] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1132.282189][T23549] vhci_hcd vhci_hcd.0: Device attached [ 1132.342230][T23552] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(8) [ 1132.348822][T23552] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1132.413004][T23552] vhci_hcd vhci_hcd.0: Device attached [ 1132.450747][T23565] vhci_hcd: connection closed [ 1132.475542][ T1099] vhci_hcd: stop threads [ 1132.502248][ T1099] vhci_hcd: release socket [ 1132.503303][T23550] vhci_hcd: connection closed [ 1132.506844][ T1099] vhci_hcd: disconnect device [ 1132.506864][T23557] vhci_hcd: connection closed [ 1132.507168][T23553] vhci_hcd: connection closed [ 1132.540264][ T1099] vhci_hcd: stop threads [ 1132.583645][ T1099] vhci_hcd: release socket [ 1132.617952][ T1099] vhci_hcd: disconnect device [ 1132.634180][ T1099] vhci_hcd: stop threads [ 1132.638463][ T1099] vhci_hcd: release socket [ 1132.673151][ T1099] vhci_hcd: disconnect device [ 1132.683148][ T1099] vhci_hcd: stop threads [ 1132.700281][ T1099] vhci_hcd: release socket [ 1132.716133][ T1099] vhci_hcd: disconnect device [ 1134.274012][T23607] netlink: 'syz.3.7915': attribute type 4 has an invalid length. [ 1134.412855][T23610] loop4: detected capacity change from 0 to 128 [ 1134.820439][T23618] FAT-fs (loop4): error, corrupted directory (invalid i_start) [ 1134.860617][T23618] FAT-fs (loop4): Filesystem has been set read-only [ 1135.220388][T23628] netlink: 'syz.4.7923': attribute type 1 has an invalid length. [ 1135.511784][T15133] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1135.639673][ T5292] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1135.674316][T23599] loop2: detected capacity change from 0 to 32768 [ 1135.739345][T15133] usb 4-1: Using ep0 maxpacket: 32 [ 1135.753062][T15133] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1135.794264][T15133] usb 4-1: config 11 has an invalid interface number: 181 but max is 1 [ 1135.814675][T15133] usb 4-1: config 11 has an invalid interface number: 2 but max is 1 [ 1135.823000][T15133] usb 4-1: config 11 has no interface number 0 [ 1135.851259][T15133] usb 4-1: config 11 has no interface number 1 [ 1135.857576][T15133] usb 4-1: config 11 interface 181 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1135.880933][ T5292] usb 1-1: Using ep0 maxpacket: 8 [ 1135.891344][T15133] usb 4-1: config 11 interface 181 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 1135.928115][T15133] usb 4-1: string descriptor 0 read error: -22 [ 1135.933198][ T5292] usb 1-1: New USB device found, idVendor=2001, idProduct=3c1a, bcdDevice=62.2f [ 1135.955941][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.963989][ T5292] usb 1-1: Product: syz [ 1135.964313][T15133] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=da.27 [ 1135.968379][ T5292] usb 1-1: Manufacturer: syz [ 1135.968414][ T5292] usb 1-1: SerialNumber: syz [ 1135.993129][ T5292] usb 1-1: config 0 descriptor?? [ 1136.032694][T15133] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.073152][T15133] snd-usb-audio 4-1:11.181: probe with driver snd-usb-audio failed with error -22 [ 1136.381550][ T5292] usb 1-1: USB disconnect, device number 72 [ 1136.525656][ T5288] usb 4-1: USB disconnect, device number 59 [ 1136.630709][T23644] netlink: 'syz.2.7929': attribute type 2 has an invalid length. [ 1136.647877][T23644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7929'. [ 1136.659412][T23644] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 1136.886231][T23648] loop2: detected capacity change from 0 to 64 [ 1136.987919][T23648] syz.2.7934: attempt to access beyond end of device [ 1136.987919][T23648] loop2: rw=34817, sector=39, nr_sectors = 30 limit=64 [ 1137.017580][T23648] syz.2.7934: attempt to access beyond end of device [ 1137.017580][T23648] loop2: rw=34817, sector=72, nr_sectors = 2 limit=64 [ 1137.072712][ T5292] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1137.088686][T23648] syz.2.7934: attempt to access beyond end of device [ 1137.088686][T23648] loop2: rw=34817, sector=76, nr_sectors = 500 limit=64 [ 1137.285552][ T5292] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 1137.312404][ T5292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.333836][ T5292] usb 1-1: Product: syz [ 1137.338048][ T5292] usb 1-1: Manufacturer: syz [ 1137.354409][ T5292] usb 1-1: SerialNumber: syz [ 1137.375184][ T5292] usb 1-1: config 0 descriptor?? [ 1137.664677][ T5292] int51x1 1-1:0.0: probe with driver int51x1 failed with error -22 [ 1137.732786][T23106] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1137.957784][T23106] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1137.981685][T23106] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.015974][T22027] usb 1-1: USB disconnect, device number 73 [ 1138.016200][T23659] loop3: detected capacity change from 0 to 256 [ 1138.036297][T23106] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1138.059639][T23106] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.085156][T23106] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1138.097011][T23659] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1138.111646][T23106] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1138.124507][T23106] usb 3-1: Product: syz [ 1138.128713][T23106] usb 3-1: Manufacturer: syz [ 1138.136761][T23659] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 1138.153692][T23106] cdc_wdm 3-1:1.0: skipping garbage [ 1138.173514][T23659] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 1138.176669][T23106] cdc_wdm 3-1:1.0: skipping garbage [ 1138.201205][T23659] UDF-fs: Scanning with blocksize 512 failed [ 1138.212741][T23106] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1138.222118][T23659] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1138.229693][T23106] cdc_wdm 3-1:1.0: Unknown control protocol [ 1138.269158][T23659] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1138.293435][T23663] misc userio: Can't change port type on an already running userio instance [ 1138.375768][ T29] audit: type=1800 audit(1726258072.529:223): pid=23659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7939" name="file2" dev="loop3" ino=58 res=0 errno=0 [ 1138.550420][T23667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7943'. [ 1138.576189][T23106] usb 3-1: USB disconnect, device number 59 [ 1138.818379][T23669] bridge_slave_1: left allmulticast mode [ 1138.835375][T23669] bridge_slave_1: left promiscuous mode [ 1138.849143][T23669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.067024][T23673] loop3: detected capacity change from 0 to 4096 [ 1139.248090][T23682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1139.579809][T23689] vcan0: entered allmulticast mode [ 1140.768448][ T5292] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1141.001285][ T5292] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1141.031188][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.047774][ T5288] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1141.051203][ T5292] usb 2-1: config 0 descriptor?? [ 1141.085937][ T5292] cp210x 2-1:0.0: cp210x converter detected [ 1141.217816][T23728] skbuff: bad partial csum: csum=65504/2 headroom=176 headlen=65534 [ 1141.257198][ T5288] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1141.281736][ T5288] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.305356][ T5288] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1141.335628][ T5288] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.364282][ T5288] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1141.390083][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1141.407113][ T5288] usb 4-1: Product: syz [ 1141.425142][ T5288] usb 4-1: Manufacturer: syz [ 1141.449931][ T5288] cdc_wdm 4-1:1.0: skipping garbage [ 1141.455202][ T5288] cdc_wdm 4-1:1.0: skipping garbage [ 1141.486731][ T5288] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1141.499949][ T5288] cdc_wdm 4-1:1.0: Unknown control protocol [ 1141.587521][ T5292] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1141.632120][ T5292] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1141.826074][ T5288] usb 4-1: USB disconnect, device number 60 [ 1141.976627][ T5292] usb 2-1: USB disconnect, device number 63 [ 1141.995925][ T5292] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1142.034156][ T5292] cp210x 2-1:0.0: device disconnected [ 1142.067451][T23734] loop0: detected capacity change from 0 to 2048 [ 1142.094654][T23734] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1142.103348][T23734] NILFS (loop0): trying rollback from an earlier position [ 1142.131671][T23734] NILFS (loop0): recovery complete [ 1142.145331][T23736] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1142.254756][T23734] NILFS error (device loop0): nilfs_readdir: zero-length directory entry [ 1142.358730][T23734] Remounting filesystem read-only [ 1142.505046][T23742] No such timeout policy "syz0" [ 1142.754645][T23747] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1143.510527][T23758] netlink: 'syz.1.7987': attribute type 2 has an invalid length. [ 1143.811744][ T8] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1143.872427][ T5288] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1144.054315][ T8] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1144.074843][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.092254][ T5288] usb 6-1: Using ep0 maxpacket: 8 [ 1144.118716][ T8] usb 3-1: Product: syz [ 1144.124190][ T5288] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1144.156527][ T8] usb 3-1: Manufacturer: syz [ 1144.161678][ T8] usb 3-1: SerialNumber: syz [ 1144.167254][ T5288] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1144.211404][ T5288] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1144.226194][ T8] usb 3-1: config 0 descriptor?? [ 1144.263066][ T5288] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1144.308878][ T5288] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1144.340791][ T5288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1144.662947][T23787] loop0: detected capacity change from 0 to 128 [ 1144.774884][ T5288] usb 6-1: GET_CAPABILITIES returned 0 [ 1144.780478][ T5288] usbtmc 6-1:16.0: can't read capabilities [ 1144.809606][T23106] usb 3-1: USB disconnect, device number 60 [ 1145.187796][ T25] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1145.202067][T23797] loop0: detected capacity change from 0 to 256 [ 1145.280539][T23799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8004'. [ 1145.404596][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1145.433091][ T25] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 1145.457395][ T25] usb 2-1: config 150 has no interface number 0 [ 1145.480673][ T25] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1145.487691][ T25] usb 2-1: config 150 interface 1 has no altsetting 0 [ 1145.535585][ T25] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1145.548618][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.560662][ T25] usb 2-1: Product: syz [ 1145.565429][ T25] usb 2-1: Manufacturer: syz [ 1145.565760][ T5288] usb 6-1: USB disconnect, device number 40 [ 1145.570186][ T25] usb 2-1: SerialNumber: syz [ 1145.873158][ T25] xr_serial 2-1:150.204: xr_serial converter detected [ 1146.177630][T23816] loop0: detected capacity change from 0 to 512 [ 1146.307360][T23816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.389240][T23816] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1146.473743][T23816] netlink: 'syz.0.8012': attribute type 16 has an invalid length. [ 1146.499564][T23816] netlink: 'syz.0.8012': attribute type 3 has an invalid length. [ 1146.541095][T23816] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.8012'. [ 1146.559316][ T25] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1146.573390][ T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1146.625313][ T25] usb 2-1: USB disconnect, device number 64 [ 1146.655252][ T25] xr_serial 2-1:150.204: device disconnected [ 1146.730544][T20261] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1147.082654][ T5288] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1147.303021][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 1147.333347][ T5288] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.364265][ T5288] usb 4-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 1147.373781][ T5288] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1147.395357][ T5288] usb 4-1: Manufacturer: syz [ 1147.422044][ T5288] usb 4-1: config 0 descriptor?? [ 1147.697075][ T5288] appledisplay 4-1:0.0: Error while getting initial brightness: -71 [ 1147.760039][ T5288] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -71 [ 1147.820775][ T5288] usb 4-1: USB disconnect, device number 61 [ 1148.124303][T23859] loop1: detected capacity change from 0 to 512 [ 1148.155658][T23859] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1148.233418][T23859] EXT4-fs (loop1): 1 orphan inode deleted [ 1148.239354][T23859] EXT4-fs (loop1): 1 truncate cleaned up [ 1148.249389][T23859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1148.373454][T23859] EXT4-fs (loop1): shut down requested (0) [ 1148.424542][T23870] EXT4-fs error (device loop1): ext4_lookup:1811: inode #15: comm syz.1.8031: iget: bad extra_isize 46 (inode size 256) [ 1148.471273][T23870] EXT4-fs (loop1): Remounting filesystem read-only [ 1148.611700][T23875] netlink: 'syz.2.8038': attribute type 1 has an invalid length. [ 1148.627869][T23875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8038'. [ 1148.700624][T22754] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.816666][T23106] ------------[ cut here ]------------ [ 1148.824206][T23106] WARNING: CPU: 0 PID: 23106 at kernel/rcu/sync.c:177 rcu_sync_dtor+0x128/0x180 [ 1148.834179][T23106] Modules linked in: [ 1148.838273][T23106] CPU: 0 UID: 0 PID: 23106 Comm: kworker/0:6 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 1148.850085][T23106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1148.860928][T23106] Workqueue: events destroy_super_work [ 1148.866466][T23106] RIP: 0010:rcu_sync_dtor+0x128/0x180 [ 1148.872169][T23106] Code: 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 04 3c 03 7e 3f 8b 03 85 c0 74 9b 90 0f 0b 90 eb 95 90 <0f> 0b 90 e9 10 ff ff ff 90 0f 0b 90 e9 4c ff ff ff 48 89 df e8 df [ 1148.892158][T23106] RSP: 0018:ffffc90002fcfc60 EFLAGS: 00010246 [ 1148.898276][T23106] RAX: 0000000000000002 RBX: ffff888027f2e350 RCX: ffffffff81fb3bf2 [ 1148.906409][T23106] RDX: 0000000000000000 RSI: ffffffff8bb0ef00 RDI: ffff888027f2e350 [ 1148.914494][T23106] RBP: ffff888027f2e3b8 R08: 0000000000000005 R09: 0000000000000001 [ 1148.922553][T23106] R10: 000000000000020b R11: 0000000000000000 R12: ffff888027f2e000 [ 1148.928114][T23879] loop0: detected capacity change from 0 to 64 [ 1148.930606][T23106] R13: 000000000000020b R14: ffffffff8dc6c684 R15: ffff88801ac90000 [ 1148.944848][T23106] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 1148.953917][T23106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1148.961544][T23106] CR2: 00007f394f8656c0 CR3: 000000006a7c4000 CR4: 0000000000350ef0 [ 1148.970327][T23106] Call Trace: [ 1148.973641][T23106] [ 1148.976617][T23106] ? show_regs+0x8c/0xa0 [ 1148.981055][T23106] ? __warn+0xe5/0x3c0 [ 1148.985195][T23106] ? rcu_sync_dtor+0x128/0x180 [ 1148.990123][T23106] ? report_bug+0x3c0/0x580 [ 1148.994708][T23106] ? handle_bug+0x3d/0x70 [ 1148.999124][T23106] ? exc_invalid_op+0x17/0x50 [ 1149.003953][T23106] ? asm_exc_invalid_op+0x1a/0x20 [ 1149.009053][T23106] ? destroy_super_work+0xa2/0x150 [ 1149.014328][T23106] ? rcu_sync_dtor+0x128/0x180 [ 1149.019159][T23106] percpu_free_rwsem+0x33/0xa0 [ 1149.024071][T23106] destroy_super_work+0xe3/0x150 [ 1149.029086][T23106] process_one_work+0x9c8/0x1b40 [ 1149.034203][T23106] ? __pfx_lock_acquire+0x10/0x10 [ 1149.039300][T23106] ? __pfx_process_one_work+0x10/0x10 [ 1149.045271][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.051022][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.056765][T23106] ? assign_work+0x1a0/0x250 [ 1149.061433][T23106] worker_thread+0x6c8/0xf00 [ 1149.066181][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.072695][T23106] ? __kthread_parkme+0x148/0x220 [ 1149.078484][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.084188][T23106] ? __pfx_worker_thread+0x10/0x10 [ 1149.089486][T23106] kthread+0x2c4/0x3a0 [ 1149.093619][T23106] ? _raw_spin_unlock_irq+0x23/0x50 [ 1149.098932][T23106] ? __pfx_kthread+0x10/0x10 [ 1149.103616][T23106] ret_from_fork+0x48/0x80 [ 1149.108115][T23106] ? __pfx_kthread+0x10/0x10 [ 1149.112889][T23106] ret_from_fork_asm+0x1a/0x30 [ 1149.117746][T23106] [ 1149.120867][T23106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1149.128179][T23106] CPU: 0 UID: 0 PID: 23106 Comm: kworker/0:6 Not tainted 6.11.0-rc7-syzkaller-00097-g196145c606d0 #0 [ 1149.139073][T23106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1149.149165][T23106] Workqueue: events destroy_super_work [ 1149.154702][T23106] Call Trace: [ 1149.158005][T23106] [ 1149.160963][T23106] dump_stack_lvl+0x3d/0x1f0 [ 1149.165612][T23106] panic+0x6dc/0x7c0 [ 1149.169571][T23106] ? __pfx_panic+0x10/0x10 [ 1149.174047][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.179738][T23106] ? show_trace_log_lvl+0x363/0x500 [ 1149.185030][T23106] ? check_panic_on_warn+0x1f/0xb0 [ 1149.190211][T23106] ? rcu_sync_dtor+0x128/0x180 [ 1149.195029][T23106] check_panic_on_warn+0xab/0xb0 [ 1149.200054][T23106] __warn+0xf1/0x3c0 [ 1149.204014][T23106] ? rcu_sync_dtor+0x128/0x180 [ 1149.208846][T23106] report_bug+0x3c0/0x580 [ 1149.213239][T23106] handle_bug+0x3d/0x70 [ 1149.217444][T23106] exc_invalid_op+0x17/0x50 [ 1149.222000][T23106] asm_exc_invalid_op+0x1a/0x20 [ 1149.226920][T23106] RIP: 0010:rcu_sync_dtor+0x128/0x180 [ 1149.232443][T23106] Code: 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 0f b6 04 02 84 c0 74 04 3c 03 7e 3f 8b 03 85 c0 74 9b 90 0f 0b 90 eb 95 90 <0f> 0b 90 e9 10 ff ff ff 90 0f 0b 90 e9 4c ff ff ff 48 89 df e8 df [ 1149.252111][T23106] RSP: 0018:ffffc90002fcfc60 EFLAGS: 00010246 [ 1149.258217][T23106] RAX: 0000000000000002 RBX: ffff888027f2e350 RCX: ffffffff81fb3bf2 [ 1149.266219][T23106] RDX: 0000000000000000 RSI: ffffffff8bb0ef00 RDI: ffff888027f2e350 [ 1149.274222][T23106] RBP: ffff888027f2e3b8 R08: 0000000000000005 R09: 0000000000000001 [ 1149.282219][T23106] R10: 000000000000020b R11: 0000000000000000 R12: ffff888027f2e000 [ 1149.290300][T23106] R13: 000000000000020b R14: ffffffff8dc6c684 R15: ffff88801ac90000 [ 1149.298320][T23106] ? destroy_super_work+0xa2/0x150 [ 1149.303509][T23106] percpu_free_rwsem+0x33/0xa0 [ 1149.308317][T23106] destroy_super_work+0xe3/0x150 [ 1149.313310][T23106] process_one_work+0x9c8/0x1b40 [ 1149.318411][T23106] ? __pfx_lock_acquire+0x10/0x10 [ 1149.323487][T23106] ? __pfx_process_one_work+0x10/0x10 [ 1149.328914][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.334599][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.340359][T23106] ? assign_work+0x1a0/0x250 [ 1149.345001][T23106] worker_thread+0x6c8/0xf00 [ 1149.349663][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.355511][T23106] ? __kthread_parkme+0x148/0x220 [ 1149.360582][T23106] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1149.366268][T23106] ? __pfx_worker_thread+0x10/0x10 [ 1149.371526][T23106] kthread+0x2c4/0x3a0 [ 1149.375634][T23106] ? _raw_spin_unlock_irq+0x23/0x50 [ 1149.380965][T23106] ? __pfx_kthread+0x10/0x10 [ 1149.385599][T23106] ret_from_fork+0x48/0x80 [ 1149.390067][T23106] ? __pfx_kthread+0x10/0x10 [ 1149.394694][T23106] ret_from_fork_asm+0x1a/0x30 [ 1149.399529][T23106] [ 1149.402802][T23106] Kernel Offset: disabled [ 1149.407312][T23106] Rebooting in 86400 seconds..