last executing test programs: 3m49.168442321s ago: executing program 2 (id=371): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x204004, &(0x7f0000000000)=ANY=[], 0xfa, 0x19f, &(0x7f0000000c40)="$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") truncate(&(0x7f00000003c0)='./file2\x00', 0x1bfc) 3m48.77241176s ago: executing program 2 (id=378): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x3c, r0, {0xc3}}, './file1\x00'}) 3m48.568644529s ago: executing program 2 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 3m47.871771857s ago: executing program 2 (id=392): syz_mount_image$exfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)={[{@errors_remount}, {@keep_last_dots}, {@gid}, {@sys_tz}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@dmask}, {@discard}]}, 0x1, 0x152a, &(0x7f0000001ac0)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) 3m47.358001865s ago: executing program 2 (id=400): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3m46.822423984s ago: executing program 2 (id=404): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x24181, 0x0) 3m46.267717292s ago: executing program 32 (id=404): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x24181, 0x0) 2m45.892545806s ago: executing program 4 (id=1106): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x980001, 0x9, '\x00', @p_u8=0x0}}) 2m45.636852625s ago: executing program 4 (id=1110): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 2m45.439024315s ago: executing program 4 (id=1114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x15}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) 2m45.244290664s ago: executing program 4 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_VNI={0x8, 0x7, 0x1}]}, 0x24}}, 0x0) 2m44.905009633s ago: executing program 4 (id=1123): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m43.85626051s ago: executing program 4 (id=1139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="440000002000010000000000000000008100000000000000000000001400110076657468305f746f5f68737200"], 0x44}}, 0x20004000) 2m28.762770651s ago: executing program 33 (id=1139): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="440000002000010000000000000000008100000000000000000000001400110076657468305f746f5f68737200"], 0x44}}, 0x20004000) 2m14.185112274s ago: executing program 1 (id=1565): r0 = syz_open_dev$media(&(0x7f0000000040), 0x2a, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001040)={0x0, 0x3, 0x0, &(0x7f0000000b80)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m13.811641052s ago: executing program 1 (id=1569): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000001c0)="b9ff03076003008cb89e08ec86dd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m13.512017771s ago: executing program 1 (id=1572): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r0, 0x0, 0xa, 0x0, &(0x7f0000000080)) 2m13.251435651s ago: executing program 1 (id=1575): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000540)={[{@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@errors_remount}, {@errors_remount}, {@namecase}, {@errors_continue}]}, 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2m12.696558709s ago: executing program 1 (id=1580): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x20, 0x0, 0x8, {0x0, @empty}}}], 0x20}}], 0x1, 0x0) 2m12.163301797s ago: executing program 1 (id=1587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265"], 0x64}}, 0x0) 2m11.800439096s ago: executing program 34 (id=1587): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265"], 0x64}}, 0x0) 16.907429735s ago: executing program 3 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x30, 0x19, 0x1, 0x4, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @ILA_ATTR_HOOK_TYPE={0x5, 0x9, 0x1}}]}, 0x30}}, 0x0) 16.680054744s ago: executing program 3 (id=3118): mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0x5, 0x37, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3) 16.501532143s ago: executing program 3 (id=3120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x44}}, 0x0) 16.334813213s ago: executing program 3 (id=3122): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2c2, &(0x7f0000000c40)="$eJzs3dFLU28cx/GPzp+bE91+EEFB9VA3dTN0/QE1QiEaFOakugiOeVZjp03OGcYicjfRbX9EV1J33QXVZTfeRDfddydB0I0X0Yl2Nt102nQ6l75fIOe7830+nEc9yneC28qtFw/zWS+RtUrqjxj1SxWtSvE/VU1f7dhfrQfVqKILwz++nLp5+861VDo9MWXMZGr6YtIYM3rm3aMnr85+KA3PvBl9G9Zy/O7K9+TX5ePLJ1Z+TT/IeSbnmUKxZCwzWyyWrFnHNnM5L58w5oZjW55tcgXPdpv6Wac4P182VmFuJDrv2p5nrELZ5O2yKRVNyS0b676VK5hYImFGojraBtpYk1mamrJSW7b9UKuzLU+iJwy1Oum6qUrrZmapC3sCAAA9Zvv5P5j1t57/0zPBcdv5P1Sb/1+/lNqb/6XO5v9E0/zf19UvaI+rND36y/yPQ8F1U1a09vPbjPkfAAAAAAAAAAAAAAAAAAAAAIB/warvx3zfj9WP9Y+wpIik+uOD3if2xy6//5cOaLvYYw3/uBeRnOcLmYVMcAz6qaxycmRrTDH9rN4PNUE9eTU9MWaq4nrvLNbyiwuZkML1fF28Vf70/+NB3jTn/1O08fpJxXSs9fWTLfODOn+uIZ9QTJ/uqShHc9X7ej3/dNyYK9fTG/JD1XUAAAAAABwGCbNm0/P3ar+6IKLN/SC/g78PbHh+PaCT7bxEJQAAAAAA6JhXfpy3HMd2d1GEJXUQ30Hh9+37JfauCKkntrGhuCypB7bRrSIiKThjdhP/thZvK+W3sWZAUqefV6SLt9ZB/2YCAAAAsNfWh/4dhD4/28cdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw9LT7emD19Zta9cY28YbLhfRx7e0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCPndwAAAP//6bYmHA==") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 15.892532271s ago: executing program 3 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, &(0x7f0000000500)={0x0, 0x3938700}, 0x0, 0x0) 15.40345311s ago: executing program 3 (id=3131): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITHAW(r0, 0xc0045878) 15.025338868s ago: executing program 35 (id=3131): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FITHAW(r0, 0xc0045878) 5.548450738s ago: executing program 6 (id=3219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x201, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) 5.406435938s ago: executing program 6 (id=3222): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x0, 0x800, 0xb1ac, 0x1}, 0x20) 5.138417376s ago: executing program 6 (id=3224): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)={0x114, 0x1e, 0x1, 0x0, 0x0, "", [@nested={0x103, 0xe7, 0x0, 0x1, [@typed={0xd, 0x1, 0x0, 0x0, @binary="72dcce07c1ab4805e8"}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be"]}]}, 0x114}], 0x1}, 0x0) 4.624258055s ago: executing program 6 (id=3230): r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@nouser_xattr}, {@jqfmt_vfsv0}, {@four_active_logs}, {@data_flush}, {@heap}, {@nouser_xattr}, {@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@usrjquota={'usrjquota', 0x3d, 'noflush_merge'}}, {@noflush_merge}, {@noinline_data}, {@grpjquota={'grpjquota', 0x3d, '+~N~^\x05[\x1b=^\x00\x1e\xe1\x06\x86\xa2\xec\xc19lh\xa6\xb1\x84\xe2\x7f\xe0\x13\xa1HTx\x8ey\xd55:\x90\xe5 \x9b\xbc\xbe\x9d/\xacPN\xbed\xb0\x84\xd7\xfd\xff\xb6\x19U\x1e\xe5\xa9\x925Q\xe8&\xd8\x1d\x8c5\r\x96I\xc9\x0eq\x01\xd1;t$\xe0XVU\x1c\xbf\x84L\xd3\xf3\xf43\xd1\xb7\"\nn\f\xeby\x9d\xdf\xcb\\\xcc\xe6Zk\xe6\xf6]\xd9/\xe3\xc5k\x17\x04\xee'}}]}, 0x0, 0x550a, &(0x7f0000006200)="$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") ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4018f50b, &(0x7f0000000080)) 3.10895968s ago: executing program 7 (id=3245): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="00020c0000000c0002", @ANYBLOB="b81d36"], 0x0, 0x0, 0x0}, 0x0) 2.564968658s ago: executing program 6 (id=3248): syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000300)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60a1, &(0x7f00000076c0)="$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") lchown(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0) 2.436887848s ago: executing program 0 (id=3250): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x894a, &(0x7f0000001080)="8d557fd094c38f748ec33512ef3a") 1.768548396s ago: executing program 0 (id=3253): r0 = syz_open_dev$vim2m(&(0x7f0000003f80), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000003fc0)={0x2, @pix={0x8, 0x6, 0x42303159, 0x0, 0x1a01, 0x3, 0x0, 0x1, 0x1, 0x6, 0x2, 0x5}}) 1.534516925s ago: executing program 5 (id=3254): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xfffffffc, 0x0, 0x10000000, 0x1000000}}]}, {0x4}, {0xc}, {0xc, 0x4, {0x2}}}}]}]}, 0x60}}, 0x0) 1.533774535s ago: executing program 0 (id=3255): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x0, 0x9}) 1.317616614s ago: executing program 0 (id=3256): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) 1.252941404s ago: executing program 5 (id=3257): r0 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000001980)=ANY=[@ANYRES64=r0, @ANYRESHEX, @ANYRES64, @ANYRESDEC=r0, @ANYBLOB="1f8af95ef99748b126e356c139b1d8a76d16085bcdcd60cd623bf9a273d5bee044151c3090ae11baf532d34401e33ed08af6b8232de50a610eb5e48ee0fdc3a7da0c9dea2238781b13d124166b56b6663398fa85ae6506ee29337bd6"], 0x90) 1.226233944s ago: executing program 7 (id=3258): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x40187014, &(0x7f0000000040)={0x1}) 1.018390413s ago: executing program 5 (id=3259): mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc000, 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x0) 1.014249563s ago: executing program 0 (id=3260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000008700850000007b000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 952.973253ms ago: executing program 7 (id=3261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 783.454502ms ago: executing program 0 (id=3262): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000080)="00000000000000003b2bf39a88a8", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 733.926832ms ago: executing program 7 (id=3263): setresgid(0xee00, 0xee01, 0xffffffffffffffff) setregid(0xffffffffffffffff, 0x0) 728.680112ms ago: executing program 5 (id=3264): r0 = syz_io_uring_setup(0xff9, &(0x7f0000000040)={0x0, 0xfd03, 0xc0b}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 513.552901ms ago: executing program 7 (id=3265): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1008000, &(0x7f0000000400)={[{@nfs_export_on}, {@metacopy_on}]}) 410.915071ms ago: executing program 5 (id=3266): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000760021062abd70000000000007020000", @ANYRES32=0x0, @ANYBLOB="08000180"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x80}, 0x4008004) 288.541681ms ago: executing program 6 (id=3267): add_key$fscrypt_v1(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) 66.31686ms ago: executing program 7 (id=3268): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x1a, 0x2, 0x2, "0000000040030000000001000000000000809c00", 0x384c4150}) 0s ago: executing program 5 (id=3269): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000600), 0xef994ffd512353, 0x40000043, 0x0) kernel console output (not intermixed with test programs): bcdDevice=b6.d8 [ 205.678907][ T5646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.710212][ T5646] usb 6-1: Product: syz [ 205.727949][ T5646] usb 6-1: Manufacturer: syz [ 205.755090][ T5646] usb 6-1: SerialNumber: syz [ 205.777234][ T5646] usb 6-1: config 0 descriptor?? [ 205.817084][ T5646] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 205.841259][ T5646] usb 6-1: selecting invalid altsetting 1 [ 205.860184][ T5646] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 205.934939][ T5646] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 205.936956][ T8242] chnl_net:caif_netlink_parms(): no params data found [ 205.988510][ T5646] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 206.013308][ T5646] usb 6-1: media controller created [ 206.071808][ T8289] loop6: detected capacity change from 0 to 24 [ 206.095324][ T5646] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.131265][ T8289] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 206.158221][ T8289] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 206.187213][ T8289] VFS: Lookup of 'file0' in romfs loop6 would have caused loop [ 206.403824][ T5646] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 206.540707][ T4268] Bluetooth: hci2: command 0x0409 tx timeout [ 206.584242][ T5646] usb 6-1: USB disconnect, device number 5 [ 206.711988][ T8242] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.749808][ T8242] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.769875][ T8242] device bridge_slave_0 entered promiscuous mode [ 206.836729][ T8242] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.860602][ T8242] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.882212][ T8242] device bridge_slave_1 entered promiscuous mode [ 207.046140][ T8287] loop0: detected capacity change from 0 to 32768 [ 207.070300][ T8287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1616 (8287) [ 207.115811][ T8313] loop3: detected capacity change from 0 to 8 [ 207.190310][ T8287] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.247206][ T8287] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 207.250804][ T8242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.310848][ T8287] BTRFS info (device loop0): using free space tree [ 207.332712][ T8242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.683067][ T8287] BTRFS info (device loop0): enabling ssd optimizations [ 207.883959][ T8242] team0: Port device team_slave_0 added [ 207.921997][ T8242] team0: Port device team_slave_1 added [ 207.967313][ T4255] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 208.386809][ T8364] loop5: detected capacity change from 0 to 1024 [ 208.411580][ T8364] EXT4-fs: Ignoring removed orlov option [ 208.427152][ T8364] EXT4-fs: Ignoring removed oldalloc option [ 208.454372][ T8364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.494470][ T8364] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 208.514861][ T9] device hsr_slave_0 left promiscuous mode [ 208.540010][ T8364] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 208.552313][ T9] device hsr_slave_1 left promiscuous mode [ 208.585779][ T8364] EXT4-fs (loop5): invalid journal inode [ 208.585925][ T9] device bridge_slave_1 left promiscuous mode [ 208.610205][ T4268] Bluetooth: hci2: command 0x041b tx timeout [ 208.616461][ T8364] EXT4-fs (loop5): can't get journal size [ 208.674102][ T8364] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 208.689565][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.751632][ T9] device bridge_slave_0 left promiscuous mode [ 208.758123][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.796093][ T8371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1640'. [ 208.816518][ T9] device veth1_macvtap left promiscuous mode [ 208.823123][ T9] device veth0_macvtap left promiscuous mode [ 208.829278][ T9] device veth1_vlan left promiscuous mode [ 208.835443][ T9] device veth0_vlan left promiscuous mode [ 208.922971][ T5274] EXT4-fs (loop5): unmounting filesystem. [ 209.237240][ T8383] loop3: detected capacity change from 0 to 512 [ 209.246462][ T8383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 209.288415][ T8383] EXT4-fs (loop3): 1 truncate cleaned up [ 209.300451][ T8383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 209.510787][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 209.757079][ T8391] loop3: detected capacity change from 0 to 1024 [ 209.907274][ T8387] loop5: detected capacity change from 0 to 32768 [ 210.017080][ T8387] XFS (loop5): Mounting V5 Filesystem [ 210.033685][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1650'. [ 210.045046][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 210.054193][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 210.158256][ T8387] XFS (loop5): Ending clean mount [ 210.281642][ T5274] XFS (loop5): Unmounting Filesystem [ 210.562592][ T9] team0 (unregistering): Port device team_slave_1 removed [ 210.700367][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 210.708090][ T9] team0 (unregistering): Port device team_slave_0 removed [ 210.717536][ T8413] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 210.839092][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.914078][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.542598][ T9] bond0 (unregistering): Released all slaves [ 211.658609][ T8377] netlink: 'syz.0.1642': attribute type 10 has an invalid length. [ 211.670757][ T8377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1642'. [ 211.691287][ T8377] device ipvlan1 entered promiscuous mode [ 211.699933][ T8377] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 211.726541][ T8415] IPv6: sit1: Disabled Multicast RS [ 211.748412][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.766545][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.877436][ T8242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.899211][ T8242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.909778][ T8242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.943385][ T8242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.069915][ T8242] device hsr_slave_0 entered promiscuous mode [ 212.121730][ T8242] device hsr_slave_1 entered promiscuous mode [ 212.140351][ T126] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 212.158808][ T8242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.202611][ T8242] Cannot create hsr debugfs directory [ 212.351541][ T126] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.392868][ T126] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.447196][ T126] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 212.487863][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.540950][ T126] usb 6-1: config 0 descriptor?? [ 212.770455][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 212.796458][ T126] usb 6-1: USB disconnect, device number 6 [ 213.002028][ T8242] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 213.048053][ T8445] loop6: detected capacity change from 0 to 4096 [ 213.056324][ T8242] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 213.080602][ T8242] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 213.097661][ T8445] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 213.099447][ T6828] udevd[6828]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.133979][ T8242] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 213.213352][ T8445] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 213.247240][ T8445] ntfs3: loop6: Failed to load $Extend. [ 213.468108][ T8242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.561006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.571559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.602753][ T8242] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.642918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.660983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.710408][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.717572][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.772124][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.801065][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.819912][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.827103][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.909318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.981004][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.989901][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 214.071880][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 214.099814][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.141555][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 214.172698][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.181690][ T8480] loop6: detected capacity change from 0 to 1024 [ 214.196155][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 214.219517][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 214.232691][ T8485] loop0: detected capacity change from 0 to 64 [ 214.276329][ T8242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 214.321792][ T8480] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 214.347419][ T8488] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.355861][ T8480] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.412292][ T8242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 214.443422][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 214.453975][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 214.481283][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.673647][ T7744] EXT4-fs (loop6): unmounting filesystem. [ 214.950311][ T4294] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 215.042110][ T8511] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1692'. [ 215.140477][ T4294] usb 1-1: Using ep0 maxpacket: 16 [ 215.154010][ T4294] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 215.197597][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1694'. [ 215.204099][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.235595][ T8242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.253398][ T4294] usb 1-1: Product: syz [ 215.257632][ T4294] usb 1-1: Manufacturer: syz [ 215.266934][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.278150][ T4294] usb 1-1: SerialNumber: syz [ 215.286241][ T8524] loop3: detected capacity change from 0 to 128 [ 215.291205][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.316985][ T4294] usb 1-1: config 0 descriptor?? [ 215.363076][ T4294] visor 1-1:0.0: Sony Clie 3.5 converter detected [ 215.782768][ T4294] usb 1-1: clie_3_5_startup: get interface number failed: -71 [ 215.796832][ T4294] visor: probe of 1-1:0.0 failed with error -71 [ 215.844616][ T4294] usb 1-1: USB disconnect, device number 9 [ 216.299811][ T8553] loop3: detected capacity change from 0 to 2048 [ 216.387250][ T8559] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.471981][ T8553] NILFS (loop3): error -2 truncating bmap (ino=16) [ 216.506079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.535771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.614099][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.639177][ T8559] NILFS (loop3): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3) [ 216.649514][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.670355][ T8559] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=16) [ 216.708476][ T8242] device veth0_vlan entered promiscuous mode [ 216.742830][ T8559] Remounting filesystem read-only [ 216.749376][ T11] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 216.753819][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.765323][ T11] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 216.778325][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.789799][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.817053][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.841527][ T8242] device veth1_vlan entered promiscuous mode [ 216.858114][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 216.909182][ T11] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 216.943681][ T11] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 216.955348][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 216.976916][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.011755][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 217.019636][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.050362][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 217.054673][ T11] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.085170][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 217.100745][ T4257] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 217.115345][ T4257] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 217.141492][ T8242] device veth0_macvtap entered promiscuous mode [ 217.160207][ T4257] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 217.167855][ T4257] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 217.183843][ T8242] device veth1_macvtap entered promiscuous mode [ 217.226081][ T4257] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 217.245798][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.257456][ T4257] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 217.298327][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.344800][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.372889][ T8578] loop0: detected capacity change from 0 to 64 [ 217.408108][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.440862][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.500691][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.519577][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.546731][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.589908][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.642057][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 217.670339][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 217.710819][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 217.751166][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 217.783500][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.816926][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.844613][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.875003][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.923418][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.962881][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.993585][ T8242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.033682][ T8242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.060828][ T8242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.096035][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 218.110955][ T1119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 218.150385][ T8563] loop6: detected capacity change from 0 to 32768 [ 218.161193][ T8242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.206397][ T8563] gfs2: fsid=_dev_net_tun: Trying to join cluster "lock_nolock", "_dev_net_tun" [ 218.207080][ T8242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.271253][ T8242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.290430][ T8563] gfs2: fsid=_dev_net_tun: Now mounting FS (format 1801)... [ 218.328646][ T8242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.463321][ T8608] xt_TCPMSS: Only works on TCP SYN packets [ 218.467396][ T8563] gfs2: fsid=_dev_net_tun.0: journal 0 mapped with 16 extents in 0ms [ 218.557556][ T5128] gfs2: fsid=_dev_net_tun.0: jid=0, already locked for use [ 218.580007][ T5128] gfs2: fsid=_dev_net_tun.0: jid=0: Looking at journal... [ 218.598607][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.632289][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 218.650249][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.700722][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.791369][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.818489][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.821499][ T5128] gfs2: fsid=_dev_net_tun.0: jid=0: Journal head lookup took 241ms [ 218.871254][ T5128] gfs2: fsid=_dev_net_tun.0: jid=0: Done [ 218.879153][ T8563] gfs2: fsid=_dev_net_tun.0: first mount done, others may mount [ 218.907902][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 219.332007][ T8625] loop0: detected capacity change from 0 to 1024 [ 219.573692][ T33] hfsplus: b-tree write err: -5, ino 4 [ 220.069271][ T8655] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1733'. [ 220.480560][ T4667] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.685101][ T4667] usb 1-1: Using ep0 maxpacket: 8 [ 220.694478][ T4667] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 220.757253][ T4667] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 220.770654][ T8678] syz.3.1751 (8678): drop_caches: 0 [ 220.797337][ T4667] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 220.820986][ T8683] loop6: detected capacity change from 0 to 256 [ 220.827349][ T4667] usb 1-1: Product: syz [ 220.850205][ T4667] usb 1-1: Manufacturer: syz [ 220.856109][ T4667] usb 1-1: SerialNumber: syz [ 220.890539][ T8683] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 220.930758][ T8685] binder: 8684:8685 ioctl c018620c 0 returned -14 [ 221.084802][ T4667] usb 1-1: Invalid connection information received from device [ 221.297241][ T4667] usb 1-1: USB disconnect, device number 10 [ 222.057811][ T8726] loop5: detected capacity change from 0 to 256 [ 222.765158][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1775'. [ 222.807910][ T8710] loop6: detected capacity change from 0 to 32768 [ 223.580809][ T8778] loop7: detected capacity change from 0 to 64 [ 223.589640][ T8777] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.720955][ T8783] loop6: detected capacity change from 0 to 64 [ 224.060287][ T5646] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 224.262110][ T5646] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 224.278306][ T8802] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1798'. [ 224.290863][ T5646] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.331009][ T5646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.339779][ T5646] usb 6-1: Product: syz [ 224.392095][ T5646] usb 6-1: Manufacturer: syz [ 224.396761][ T5646] usb 6-1: SerialNumber: syz [ 224.432346][ T5646] usb 6-1: config 0 descriptor?? [ 224.480429][ T8807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 224.495572][ T8809] xt_limit: Overflow, try lower: 65536/2147483648 [ 224.904290][ T5128] usb 6-1: USB disconnect, device number 7 [ 226.173976][ T8868] overlayfs: bad mount option "redirect_dir=off:/" [ 226.496181][ T8881] netlink: 'syz.3.1830': attribute type 4 has an invalid length. [ 226.542008][ T8881] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1830'. [ 226.608590][ T8881] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 227.289819][ T8914] loop7: detected capacity change from 0 to 256 [ 227.317569][ T8914] exfat: Deprecated parameter 'namecase' [ 227.349430][ T8917] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1847'. [ 227.375452][ T8914] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 227.703024][ T8927] netlink: 'syz.7.1853': attribute type 2 has an invalid length. [ 227.828521][ T8934] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 228.148791][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1861'. [ 228.278785][ T8951] netlink: 'syz.7.1863': attribute type 15 has an invalid length. [ 228.286556][ T8949] gfs2: not a GFS2 filesystem [ 228.467092][ T8955] loop5: detected capacity change from 0 to 16 [ 228.525869][ T8955] erofs: (device loop5): mounted with root inode @ nid 36. [ 228.591151][ T8955] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 228.651065][ T8955] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 228.710622][ T8955] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 229.012688][ T5646] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.212246][ T5646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.230305][ T5646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 229.249186][ T5646] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 229.281863][ T5646] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.288449][ T8985] loop0: detected capacity change from 0 to 64 [ 229.332611][ T5646] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 229.381255][ T5646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.409747][ T5646] usb 4-1: Product: syz [ 229.419874][ T5646] usb 4-1: Manufacturer: syz [ 229.443370][ T5646] usb 4-1: SerialNumber: syz [ 229.455209][ T5646] usb 4-1: config 0 descriptor?? [ 229.486458][ T5646] redrat3 4-1:0.0: Couldn't find all endpoints [ 229.697108][ T5646] usb 4-1: USB disconnect, device number 5 [ 229.884200][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1889'. [ 229.966756][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1892'. [ 230.334220][ T9020] netlink: 'syz.5.1898': attribute type 1 has an invalid length. [ 230.402261][ T9020] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1898'. [ 230.566046][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1903'. [ 230.668802][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1903'. [ 230.685255][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1903'. [ 230.900157][ T9036] loop0: detected capacity change from 0 to 4096 [ 230.938598][ T9036] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 231.036095][ T9036] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 231.213974][ T9054] loop5: detected capacity change from 0 to 1024 [ 231.439263][ T9062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.448385][ T1119] hfsplus: b-tree write err: -5, ino 4 [ 231.499088][ T9063] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.559696][ T9065] netlink: 'syz.0.1917': attribute type 7 has an invalid length. [ 231.806317][ T9076] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 231.870392][ T9076] overlayfs: conflicting options: userxattr,redirect_dir=off [ 232.814724][ T9121] netlink: 1033 bytes leftover after parsing attributes in process `syz.5.1945'. [ 232.904321][ T9123] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1946'. [ 233.113624][ T9131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.120973][ T9131] IPv6: NLM_F_CREATE should be set when creating new route [ 233.128259][ T9131] IPv6: NLM_F_CREATE should be set when creating new route [ 233.349962][ T9141] loop7: detected capacity change from 0 to 8 [ 233.485600][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1958'. [ 233.766656][ T9157] loop5: detected capacity change from 0 to 256 [ 233.806333][ T9157] exfat: Deprecated parameter 'namecase' [ 233.840435][ T9157] exfat: Deprecated parameter 'namecase' [ 233.881532][ T9157] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 234.017856][ T9156] loop7: detected capacity change from 0 to 8192 [ 234.074554][ T9156] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 234.091621][ T9156] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 234.157968][ T9156] REISERFS (device loop7): using ordered data mode [ 234.212574][ T9156] reiserfs: using flush barriers [ 234.261892][ T9156] REISERFS warning (device loop7): sh-457 journal_init_dev: journal_init_dev: Cannot open './file0': -15 [ 234.311875][ T9156] REISERFS warning (device loop7): sh-462 journal_init: unable to initialize journal device [ 234.387253][ T9156] REISERFS warning (device loop7): sh-2022 reiserfs_fill_super: unable to initialize journal space [ 234.423459][ T9181] netlink: 'syz.6.1974': attribute type 21 has an invalid length. [ 234.443975][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1974'. [ 234.482308][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 234.482326][ T26] audit: type=1326 audit(1738017462.988:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ffc0000 [ 234.539446][ T26] audit: type=1326 audit(1738017462.988:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f7bc8b8cd29 code=0x7ffc0000 [ 234.664038][ T26] audit: type=1326 audit(1738017462.988:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9182 comm="syz.0.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ffc0000 [ 235.539704][ T9219] Unsupported ieee802154 address type: 0 [ 235.545276][ T9227] loop7: detected capacity change from 0 to 64 [ 235.852055][ T9238] loop6: detected capacity change from 0 to 256 [ 235.859177][ T9238] exfat: Deprecated parameter 'namecase' [ 236.017613][ T9238] exfat: Deprecated parameter 'namecase' [ 236.059160][ T9238] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 236.842486][ T9262] loop7: detected capacity change from 0 to 4096 [ 236.925773][ T9270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 236.984696][ T9262] ntfs: volume version 3.1. [ 237.004899][ T9270] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2011'. [ 237.020244][ T9270] netlink: 'syz.3.2011': attribute type 3 has an invalid length. [ 237.086507][ T9270] netlink: 'syz.3.2011': attribute type 2 has an invalid length. [ 237.120251][ T9270] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2011'. [ 237.258286][ T9232] loop0: detected capacity change from 0 to 40427 [ 237.368511][ T9232] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 237.391601][ T9232] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 237.473572][ T9232] F2FS-fs (loop0): invalid crc value [ 237.517414][ T9232] F2FS-fs (loop0): Found nat_bits in checkpoint [ 237.564077][ T9292] loop7: detected capacity change from 0 to 512 [ 237.688751][ T9292] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 237.800765][ T9306] loop3: detected capacity change from 0 to 8 [ 237.811304][ T9292] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 237.847644][ T9232] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 237.877531][ T9232] F2FS-fs (loop0): Start checkpoint disabled! [ 237.908292][ T9306] SQUASHFS error: Failed to read block 0x1ec: -5 [ 237.956052][ T9306] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 237.986491][ T9232] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 238.001209][ T9232] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 238.041080][ T9232] F2FS-fs (loop0): switch discard_unit option is not allowed [ 238.070397][ T4662] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 238.133566][ T8242] EXT4-fs (loop7): unmounting filesystem. [ 238.280183][ T4662] usb 7-1: Using ep0 maxpacket: 8 [ 238.287462][ T4662] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 238.332817][ T4662] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.363186][ T4662] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.420589][ T4662] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 238.472834][ T4662] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 238.520216][ T4662] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 238.539318][ T9322] loop3: detected capacity change from 0 to 256 [ 238.545980][ T4662] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.578887][ T4662] usb 7-1: config 0 descriptor?? [ 238.587797][ T9322] exfat: Deprecated parameter 'namecase' [ 238.610347][ T9322] exfat: Deprecated parameter 'namecase' [ 238.622668][ T9307] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 238.648163][ T9322] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 238.835472][ T9332] netlink: 'syz.0.2028': attribute type 21 has an invalid length. [ 239.004898][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.014536][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.021871][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.028913][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.036967][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.044002][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.051649][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.058784][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.066599][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.073647][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.081430][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.089171][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.098267][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.105339][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.113417][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.121672][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.128658][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.135615][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.142607][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.149526][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.156507][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.163578][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.170750][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.177788][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.185337][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.193082][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.199936][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.207665][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.214824][ T4268] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 239.259307][ T4266] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 239.268735][ T126] usb 7-1: USB disconnect, device number 2 [ 239.922672][ T9360] loop3: detected capacity change from 0 to 64 [ 240.338755][ T9339] loop5: detected capacity change from 0 to 32768 [ 240.436912][ T9339] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.2035 (9339) [ 240.520191][ T9339] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 240.570496][ T9339] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 240.613468][ T9339] BTRFS info (device loop5): using free space tree [ 240.905587][ T9351] loop7: detected capacity change from 0 to 32768 [ 240.961141][ T9351] XFS: attr2 mount option is deprecated. [ 240.997536][ T9351] XFS: ikeep mount option is deprecated. [ 241.010498][ T9351] XFS: noikeep mount option is deprecated. [ 241.115650][ T9339] BTRFS info (device loop5): enabling ssd optimizations [ 241.155271][ T9418] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 241.215552][ T9351] XFS (loop7): Mounting V5 Filesystem [ 241.268989][ T9400] loop3: detected capacity change from 0 to 8192 [ 241.329130][ T9400] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 241.410403][ T9400] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 241.421376][ T9400] REISERFS (device loop3): using ordered data mode [ 241.434757][ T9400] reiserfs: using flush barriers [ 241.462427][ T9351] XFS (loop7): Ending clean mount [ 241.494357][ T9400] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 241.496218][ T9351] XFS (loop7): Quotacheck needed: Please wait. [ 241.566238][ T9400] REISERFS (device loop3): checking transaction log (loop3) [ 241.622969][ T9400] REISERFS (device loop3): Using rupasov hash to sort names [ 241.632967][ T9351] XFS (loop7): Quotacheck: Done. [ 241.690475][ T9400] REISERFS (device loop3): using 3.5.x disk format [ 241.697382][ T9400] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 241.764627][ T5274] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.800545][ T9400] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 241.877388][ T9400] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 241.921795][ T9400] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 242.282722][ T9447] netlink: 'syz.6.2062': attribute type 3 has an invalid length. [ 242.310939][ T8242] XFS (loop7): Unmounting Filesystem [ 242.591088][ T9458] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2063'. [ 242.620370][ T9458] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2063'. [ 242.700220][ T9458] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2063'. [ 242.756969][ T9458] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 243.668832][ T9493] loop6: detected capacity change from 0 to 8 [ 243.741519][ T9493] SQUASHFS error: Failed to read block 0x260685: -5 [ 243.748876][ T9493] SQUASHFS error: Unable to read metadata cache entry [260685] [ 243.846581][ T9493] SQUASHFS error: Unable to read directory block [260685:0] [ 244.341686][ T9521] loop7: detected capacity change from 0 to 64 [ 244.505313][ T26] audit: type=1800 audit(1738017473.008:2674): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2085" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 244.584021][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2088'. [ 244.611765][ T9525] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2088'. [ 244.761109][ T9531] xt_NFQUEUE: number of total queues is 0 [ 244.867143][ T9538] loop7: detected capacity change from 0 to 256 [ 244.923294][ T9538] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 244.999688][ T9538] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 245.072216][ T9538] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 245.287476][ T9552] tmpfs: Bad value for 'mpol' [ 245.578702][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2101'. [ 245.887820][ T9572] loop6: detected capacity change from 0 to 16 [ 245.948732][ T9572] erofs: (device loop6): mounted with root inode @ nid 36. [ 245.979434][ T9578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.177003][ T9584] netlink: 276 bytes leftover after parsing attributes in process `syz.3.2110'. [ 246.332686][ T9590] ERROR: device name not specified. [ 246.713611][ T9605] tmpfs: Bad value for 'mpol' [ 247.009158][ T9614] loop5: detected capacity change from 0 to 16 [ 247.300062][ T9574] loop7: detected capacity change from 0 to 32768 [ 247.324651][ T9623] loop6: detected capacity change from 0 to 1764 [ 247.376633][ T9633] netlink: 'syz.0.2128': attribute type 1 has an invalid length. [ 247.485456][ T9574] XFS (loop7): Mounting V5 Filesystem [ 247.585513][ T9639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2129'. [ 247.595838][ T9639] netlink: 'syz.5.2129': attribute type 2 has an invalid length. [ 247.604734][ T9639] netlink: 'syz.5.2129': attribute type 1 has an invalid length. [ 247.613099][ T9639] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2129'. [ 247.710308][ T9574] XFS (loop7): Ending clean mount [ 247.725818][ T9574] XFS (loop7): Quotacheck needed: Please wait. [ 247.873730][ T9574] XFS (loop7): Quotacheck: Done. [ 248.154178][ T8242] XFS (loop7): Unmounting Filesystem [ 248.588617][ T4667] kernel write not supported for file /651/net/sockstat (pid: 4667 comm: kworker/1:11) [ 248.655926][ T9643] loop3: detected capacity change from 0 to 32768 [ 249.338250][ T9688] loop5: detected capacity change from 0 to 4096 [ 249.614611][ T9701] loop7: detected capacity change from 0 to 64 [ 250.016528][ T4667] kernel write not supported for file /149/net/sockstat (pid: 4667 comm: kworker/1:11) [ 250.047954][ T9723] netlink: 'syz.5.2158': attribute type 2 has an invalid length. [ 250.210449][ T6667] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 250.260686][ T5646] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 250.289190][ T9730] xt_connbytes: Forcing CT accounting to be enabled [ 250.305424][ T9730] xt_bpf: check failed: parse error [ 250.400427][ T6667] usb 7-1: Using ep0 maxpacket: 32 [ 250.408249][ T6667] usb 7-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 250.453113][ T5646] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.460936][ T6667] usb 7-1: config 1 interface 0 has no altsetting 0 [ 250.476317][ T5646] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 250.506054][ T5646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.507276][ T6667] usb 7-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.40 [ 250.531212][ T6667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.539550][ T6667] usb 7-1: Product: syz [ 250.544782][ T6667] usb 7-1: Manufacturer: syz [ 250.547868][ T5646] usb 4-1: config 0 descriptor?? [ 250.555422][ T6667] usb 7-1: SerialNumber: syz [ 250.575374][ T5646] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 250.818289][ T4296] usb 4-1: USB disconnect, device number 6 [ 250.947480][ T5646] kernel write not supported for file /974/net/sockstat (pid: 5646 comm: kworker/0:17) [ 250.994651][ T6667] usbhid 7-1:1.0: can't add hid device: -71 [ 251.010450][ T6667] usbhid: probe of 7-1:1.0 failed with error -71 [ 251.048532][ T6667] usb 7-1: USB disconnect, device number 3 [ 251.510056][ T9770] No such timeout policy "syz1" [ 251.727297][ T9776] loop5: detected capacity change from 0 to 1024 [ 251.811615][ T5646] kernel write not supported for file /949/net/sockstat (pid: 5646 comm: kworker/0:17) [ 252.049140][ T9785] netlink: 'syz.6.2187': attribute type 20 has an invalid length. [ 252.078470][ T9788] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 252.244577][ T9762] loop0: detected capacity change from 0 to 32768 [ 252.288104][ T9762] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2176 (9762) [ 252.370954][ T9762] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 252.410571][ T9762] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 252.419352][ T9762] BTRFS info (device loop0): setting nodatasum [ 252.425304][ T9795] loop5: detected capacity change from 0 to 512 [ 252.450320][ T9762] BTRFS info (device loop0): force zlib compression, level 3 [ 252.458910][ T9762] BTRFS info (device loop0): metadata ratio 1 [ 252.522990][ T9795] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2191: casefold flag without casefold feature [ 252.530843][ T9762] BTRFS info (device loop0): enabling ssd optimizations [ 252.550477][ T9762] BTRFS info (device loop0): allowing degraded mounts [ 252.570237][ T9795] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2191: couldn't read orphan inode 15 (err -117) [ 252.578639][ T9762] BTRFS info (device loop0): using free space tree [ 252.595405][ T9795] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 252.792136][ T5274] EXT4-fs (loop5): unmounting filesystem. [ 253.013426][ T9786] loop3: detected capacity change from 0 to 32768 [ 253.040318][ T9786] XFS: attr2 mount option is deprecated. [ 253.051819][ T9786] XFS: ikeep mount option is deprecated. [ 253.098479][ T9786] XFS: noikeep mount option is deprecated. [ 253.242243][ T9786] XFS (loop3): Mounting V5 Filesystem [ 253.355323][ T9786] XFS (loop3): Ending clean mount [ 253.388656][ T9786] XFS (loop3): Quotacheck needed: Please wait. [ 253.422905][ T9835] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2199'. [ 253.431819][ T9792] loop6: detected capacity change from 0 to 32768 [ 253.449575][ T9835] netlink: 'syz.5.2199': attribute type 3 has an invalid length. [ 253.559432][ T9786] XFS (loop3): Quotacheck: Done. [ 253.614949][ T4255] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 254.158010][ T4257] XFS (loop3): Unmounting Filesystem [ 254.409028][ T4296] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 254.610317][ T4296] usb 6-1: Using ep0 maxpacket: 16 [ 254.627858][ T4296] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.675218][ T4296] usb 6-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 254.695656][ T4296] usb 6-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 254.729584][ T4296] usb 6-1: config 0 interface 0 has no altsetting 0 [ 254.761629][ T4296] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 254.791362][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.799486][ T4296] usb 6-1: Product: syz [ 254.818776][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2215'. [ 254.825030][ T4296] usb 6-1: Manufacturer: syz [ 254.850350][ T4296] usb 6-1: SerialNumber: syz [ 254.870633][ T4296] usb 6-1: config 0 descriptor?? [ 254.923544][ T4296] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11 [ 255.176802][ T4296] usb 6-1: USB disconnect, device number 8 [ 255.276099][ T9877] netlink: 'syz.6.2219': attribute type 1 has an invalid length. [ 255.306517][ T9877] netlink: 'syz.6.2219': attribute type 3 has an invalid length. [ 255.322218][ T9877] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2219'. [ 255.733188][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.739562][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.859601][ T9899] kAFS: unparsable volume name [ 256.155721][ T9910] netlink: del zone limit has 4 unknown bytes [ 256.351563][ T9912] loop5: detected capacity change from 0 to 4096 [ 256.387831][ T9912] ntfs3: loop5: ino=3, Correct links count -> 2. [ 256.431867][ T9912] ntfs3: loop5: Failed to load $Volume. [ 256.449076][ T9921] cgroup: Need name or subsystem set [ 256.581821][ T9923] netlink: 'syz.7.2242': attribute type 5 has an invalid length. [ 257.221917][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 257.528032][ T9962] loop0: detected capacity change from 0 to 64 [ 257.669988][ T9967] loop5: detected capacity change from 0 to 64 [ 258.176690][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2272'. [ 258.279177][ T9984] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.888150][T10015] loop5: detected capacity change from 0 to 64 [ 259.071978][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2290'. [ 259.092013][T10023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2291'. [ 259.982966][T10019] loop7: detected capacity change from 0 to 32768 [ 260.012193][T10019] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.2289 (10019) [ 260.127265][T10019] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.160460][T10019] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 260.185832][T10019] BTRFS info (device loop7): using free space tree [ 260.215126][T10056] overlayfs: failed to resolve './file0': -2 [ 260.474902][T10019] BTRFS info (device loop7): enabling ssd optimizations [ 260.508086][T10039] loop6: detected capacity change from 0 to 32768 [ 260.523961][T10039] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.2299 (10039) [ 260.553550][T10039] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.583171][T10039] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 260.614232][T10039] BTRFS info (device loop6): setting nodatasum [ 260.632004][T10039] BTRFS info (device loop6): force zlib compression, level 3 [ 260.676485][ T8242] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.701273][T10039] BTRFS info (device loop6): metadata ratio 1 [ 260.714014][T10039] BTRFS info (device loop6): enabling ssd optimizations [ 260.761739][T10039] BTRFS info (device loop6): allowing degraded mounts [ 260.820876][T10039] BTRFS info (device loop6): using free space tree [ 261.360284][T10116] x_tables: ip_tables: osf match: only valid for protocol 6 [ 261.561718][ T7744] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.957014][T10128] loop3: detected capacity change from 0 to 256 [ 262.012140][T10128] exfat: Deprecated parameter 'namecase' [ 262.017890][T10128] exfat: Deprecated parameter 'namecase' [ 262.096120][T10128] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d) [ 262.557634][T10149] loop3: detected capacity change from 0 to 256 [ 262.575480][T10149] exfat: Deprecated parameter 'utf8' [ 262.586745][T10149] exfat: Deprecated parameter 'namecase' [ 262.610287][T10149] exfat: Deprecated parameter 'utf8' [ 262.630943][T10149] exfat: Deprecated parameter 'utf8' [ 262.656114][T10149] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabc8c723, utbl_chksum : 0xe619d30d) [ 262.700175][ T5647] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 262.895113][ T5647] usb 7-1: Using ep0 maxpacket: 16 [ 262.904274][ T5647] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 262.953495][ T5647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.994747][ T5647] usb 7-1: config 0 descriptor?? [ 263.024595][ T5647] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 263.162696][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2343'. [ 263.208455][ T5647] usb 7-1: Detected FT232B [ 263.220311][T10165] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2343'. [ 263.238364][T10167] netlink: 'syz.3.2344': attribute type 32 has an invalid length. [ 263.378253][T10173] loop0: detected capacity change from 0 to 128 [ 263.415565][ T5647] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 263.419849][T10173] FAT-fs (loop0): Directory bread(block 3236) failed [ 263.441043][ T5647] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 263.450213][T10173] FAT-fs (loop0): Directory bread(block 3237) failed [ 263.468454][T10173] FAT-fs (loop0): Directory bread(block 3238) failed [ 263.479546][ T5647] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 263.488713][T10173] FAT-fs (loop0): Directory bread(block 3239) failed [ 263.519132][T10173] FAT-fs (loop0): Directory bread(block 3240) failed [ 263.537022][ T5647] usb 7-1: USB disconnect, device number 4 [ 263.545130][T10173] FAT-fs (loop0): Directory bread(block 3241) failed [ 263.568318][T10173] FAT-fs (loop0): Directory bread(block 3242) failed [ 263.598369][ T5647] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 263.619207][T10173] FAT-fs (loop0): Directory bread(block 3243) failed [ 263.661927][ T5647] ftdi_sio 7-1:0.0: device disconnected [ 263.695810][T10173] FAT-fs (loop0): Directory bread(block 3236) failed [ 263.720357][T10173] FAT-fs (loop0): Directory bread(block 3237) failed [ 264.034046][T10189] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2356'. [ 264.100418][T10189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 264.133496][T10194] loop7: detected capacity change from 0 to 8 [ 264.854445][T10218] libceph: resolve '. [ 264.854445][T10218] #)|.زf͹Dza×ïÅ2sˆoÖw¿úÕ?£'Ê%ÐKAq‰f»CÖê¨Âz¿e­Sb3L)Hyúo¤¶ÿÿÿÿÿÿÿ÷ǤÜYšM¤¨ìó¤h‡E$ [ 264.854445][T10218] ' (ret=-3): failed [ 264.996292][T10226] loop7: detected capacity change from 0 to 1024 [ 265.082593][T10228] netlink: 'syz.6.2374': attribute type 21 has an invalid length. [ 265.130569][T10228] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2374'. [ 265.285341][T10236] loop7: detected capacity change from 0 to 64 [ 265.408514][T10238] netlink: 'syz.3.2379': attribute type 6 has an invalid length. [ 265.950320][ T4667] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 266.096297][T10266] loop7: detected capacity change from 0 to 256 [ 266.135864][T10266] exFAT-fs (loop7): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 266.162142][ T4667] usb 7-1: config 0 has an invalid interface number: 229 but max is 0 [ 266.180739][ T4667] usb 7-1: config 0 has no interface number 0 [ 266.187066][ T4667] usb 7-1: config 0 interface 229 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 266.239679][ T4667] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 266.240293][ T5647] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 266.273106][ T4667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.311981][ T4667] usb 7-1: Product: syz [ 266.316209][ T4667] usb 7-1: Manufacturer: syz [ 266.341759][ T4667] usb 7-1: SerialNumber: syz [ 266.360035][ T4667] usb 7-1: config 0 descriptor?? [ 266.484397][ T5647] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 266.506021][ T5647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.542922][ T5647] usb 4-1: Product: syz [ 266.560458][ T5647] usb 4-1: Manufacturer: syz [ 266.575461][ T5647] usb 4-1: SerialNumber: syz [ 266.581585][ T4667] usb 7-1: USB disconnect, device number 5 [ 266.596716][ T5647] usb 4-1: config 0 descriptor?? [ 266.616803][ T5647] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 267.024951][ T5647] usb 4-1: USB disconnect, device number 7 [ 267.886860][T10317] loop0: detected capacity change from 0 to 512 [ 268.047269][T10317] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 268.058583][T10317] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.069224][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2423'. [ 268.069261][T10329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2423'. [ 268.362678][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 268.465948][T10342] misc userio: The device must be registered before sending interrupts [ 269.418627][T10378] loop5: detected capacity change from 0 to 256 [ 269.511109][T10378] FAT-fs (loop5): Directory bread(block 64) failed [ 269.544181][T10378] FAT-fs (loop5): Directory bread(block 65) failed [ 269.590365][T10378] FAT-fs (loop5): Directory bread(block 66) failed [ 269.596976][T10378] FAT-fs (loop5): Directory bread(block 67) failed [ 269.658387][T10378] FAT-fs (loop5): Directory bread(block 68) failed [ 269.680148][T10378] FAT-fs (loop5): Directory bread(block 69) failed [ 269.710344][T10378] FAT-fs (loop5): Directory bread(block 70) failed [ 269.716940][T10378] FAT-fs (loop5): Directory bread(block 71) failed [ 269.757338][T10378] FAT-fs (loop5): Directory bread(block 72) failed [ 269.778581][T10378] FAT-fs (loop5): Directory bread(block 73) failed [ 269.880622][T10358] loop3: detected capacity change from 0 to 32768 [ 269.968494][T10358] ERROR: (device loop3): dbAllocAG: Corrupt dmapctl page [ 269.968494][T10358] [ 270.027631][T10358] ERROR: (device loop3): remounting filesystem as read-only [ 270.302871][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2459'. [ 270.833332][T10420] loop6: detected capacity change from 0 to 512 [ 270.918410][T10420] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 270.927729][T10420] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.009053][ T7744] EXT4-fs (loop6): unmounting filesystem. [ 271.049238][T10432] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 271.319428][T10441] QAT: Device 192 not found [ 271.327635][T10442] loop7: detected capacity change from 0 to 256 [ 271.384768][T10442] UBIFS error (pid: 10442): cannot open "ubifs", error -22 [ 271.632704][T10451] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 271.659563][T10452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2479'. [ 271.813201][T10458] rdma_rxe: rxe creation allowed on top of a real device only [ 271.830266][ T4662] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 271.946726][T10464] loop0: detected capacity change from 0 to 64 [ 272.032072][ T4662] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 272.065832][ T4662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.073130][T10461] loop6: detected capacity change from 0 to 4096 [ 272.097621][ T4662] usb 4-1: config 0 descriptor?? [ 272.138244][ T4662] cp210x 4-1:0.0: cp210x converter detected [ 272.178013][T10469] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.219233][T10461] NILFS error (device loop6): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 272.269261][T10461] Remounting filesystem read-only [ 272.326114][T10471] xt_l2tp: invalid flags combination: 8 [ 272.342874][ T4662] usb 4-1: cp210x converter now attached to ttyUSB0 [ 272.564102][ T4300] usb 4-1: USB disconnect, device number 8 [ 272.583386][ T4300] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 272.620740][ T4300] cp210x 4-1:0.0: device disconnected [ 272.670309][T10480] xt_hashlimit: max too large, truncated to 1048576 [ 273.316487][T10497] loop5: detected capacity change from 0 to 4096 [ 273.383545][T10497] EXT4-fs (loop5): Test dummy encryption mode enabled [ 273.422502][T10497] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 273.441565][T10497] System zones: 0-5 [ 273.449066][T10497] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 273.687170][ T5274] EXT4-fs (loop5): unmounting filesystem. [ 273.729343][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2508'. [ 273.745989][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2508'. [ 273.757442][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2508'. [ 273.828724][T10510] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2508'. [ 273.922422][ T26] audit: type=1326 audit(1738017502.428:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 273.977911][ T26] audit: type=1326 audit(1738017502.428:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 274.077751][ T26] audit: type=1326 audit(1738017502.428:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 274.193303][ T26] audit: type=1326 audit(1738017502.428:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10513 comm="syz.3.2511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 274.256480][T10528] netlink: 'syz.5.2517': attribute type 30 has an invalid length. [ 274.426486][T10525] loop3: detected capacity change from 0 to 4096 [ 274.523566][T10525] ntfs: (device loop3): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 274.553826][T10525] ntfs: (device loop3): ntfs_read_locked_inode(): $DATA attribute is missing. [ 274.620338][T10525] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 274.656463][T10525] ntfs: (device loop3): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 274.708352][T10547] rdma_rxe: rxe creation allowed on top of a real device only [ 274.789828][T10525] ntfs: volume version 3.1. [ 274.945477][ T26] audit: type=1326 audit(1738017503.448:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.0.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ffc0000 [ 275.050675][ T26] audit: type=1326 audit(1738017503.478:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10554 comm="syz.0.2531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ffc0000 [ 275.748960][ T5647] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 275.944710][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2547'. [ 275.952311][ T5647] usb 7-1: config 0 has an invalid interface number: 124 but max is 0 [ 275.985451][ T5647] usb 7-1: config 0 has no interface number 0 [ 275.998993][ T5647] usb 7-1: config 0 interface 124 has no altsetting 0 [ 276.017432][ T5647] usb 7-1: New USB device found, idVendor=0403, idProduct=f06a, bcdDevice=32.00 [ 276.064745][ T5647] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.106510][ T5647] usb 7-1: Product: syz [ 276.120393][ T5647] usb 7-1: Manufacturer: syz [ 276.125049][ T5647] usb 7-1: SerialNumber: syz [ 276.176141][ T5647] usb 7-1: config 0 descriptor?? [ 276.187562][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2550'. [ 276.289511][T10596] loop3: detected capacity change from 0 to 1764 [ 276.423237][ T5647] ftdi_sio 7-1:0.124: FTDI USB Serial Device converter detected [ 276.448409][ T5647] usb 7-1: Detected FT233HP [ 276.467981][ T5647] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 276.511475][ T5647] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 276.527315][ T5647] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 276.580046][ T5647] usb 7-1: USB disconnect, device number 6 [ 276.630669][ T5647] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 276.671672][T10610] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 276.686587][ T5647] ftdi_sio 7-1:0.124: device disconnected [ 276.690445][T10610] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 276.710348][ T6665] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 276.729073][T10610] overlayfs: missing 'lowerdir' [ 276.905631][ T6665] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 276.926380][ T6665] usb 6-1: config 0 interface 0 has no altsetting 0 [ 276.957177][ T6665] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 277.001195][ T6665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.041402][ T6665] usb 6-1: Product: syz [ 277.045633][ T6665] usb 6-1: Manufacturer: syz [ 277.061248][ T6665] usb 6-1: SerialNumber: syz [ 277.098985][ T6665] usb 6-1: config 0 descriptor?? [ 277.137991][ T6665] usb 6-1: selecting invalid altsetting 0 [ 277.416403][ T5647] usb 6-1: USB disconnect, device number 9 [ 277.607743][T10606] loop0: detected capacity change from 0 to 40427 [ 277.641565][T10606] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 277.649594][T10606] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 277.652776][T10632] sctp: [Deprecated]: syz.3.2567 (pid 10632) Use of int in maxseg socket option. [ 277.652776][T10632] Use struct sctp_assoc_value instead [ 277.666353][T10606] F2FS-fs (loop0): build fault injection attr: rate: 17008, type: 0x3ffff [ 277.712269][T10606] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x6 [ 277.741679][T10606] F2FS-fs (loop0): invalid crc value [ 277.788774][T10606] F2FS-fs (loop0): Found nat_bits in checkpoint [ 277.916275][T10637] loop6: detected capacity change from 0 to 4096 [ 277.922839][T10606] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 277.940340][T10606] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 277.974084][T10637] EXT4-fs (loop6): Test dummy encryption mode enabled [ 277.999673][T10637] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 278.024412][T10637] System zones: 0-5 [ 278.061775][T10637] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 278.145167][ T4255] syz-executor: attempt to access beyond end of device [ 278.145167][ T4255] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 278.351735][ T7744] EXT4-fs (loop6): unmounting filesystem. [ 278.784792][T10665] loop5: detected capacity change from 0 to 8 [ 278.834542][T10662] xt_CT: No such helper "syz0" [ 279.018794][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 279.018812][ T26] audit: type=1800 audit(1738017507.518:2686): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2580" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 279.036387][T10648] loop3: detected capacity change from 0 to 32768 [ 279.106336][T10670] loop0: detected capacity change from 0 to 1024 [ 279.124907][T10670] EXT4-fs: Ignoring removed i_version option [ 279.168518][T10670] EXT4-fs (loop0): Test dummy encryption mode enabled [ 279.206234][T10673] loop7: detected capacity change from 0 to 1024 [ 279.238572][T10670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 279.278550][T10673] hfsplus: keylen 65060 too large [ 279.662092][T10686] loop6: detected capacity change from 0 to 256 [ 279.731406][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 279.745750][T10686] FAT-fs (loop6): Directory bread(block 64) failed [ 279.760221][T10686] FAT-fs (loop6): Directory bread(block 65) failed [ 279.780804][T10686] FAT-fs (loop6): Directory bread(block 66) failed [ 279.823252][T10686] FAT-fs (loop6): Directory bread(block 67) failed [ 279.851531][T10686] FAT-fs (loop6): Directory bread(block 68) failed [ 279.875098][T10686] FAT-fs (loop6): Directory bread(block 69) failed [ 279.895582][T10686] FAT-fs (loop6): Directory bread(block 70) failed [ 279.915921][T10686] FAT-fs (loop6): Directory bread(block 71) failed [ 279.936144][T10686] FAT-fs (loop6): Directory bread(block 72) failed [ 279.959129][T10686] FAT-fs (loop6): Directory bread(block 73) failed [ 279.967988][T10690] loop3: detected capacity change from 0 to 4096 [ 280.011934][T10690] EXT4-fs (loop3): Test dummy encryption mode enabled [ 280.057476][T10690] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c018, mo2=0003] [ 280.075233][T10694] loop5: detected capacity change from 0 to 4096 [ 280.099581][T10690] System zones: 0-5 [ 280.124017][T10690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 280.408079][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 280.461605][ T5274] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 280.475395][ T5274] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 281.636462][T10737] loop3: detected capacity change from 0 to 8192 [ 281.717673][T10737] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 281.855231][T10737] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 281.896523][T10737] REISERFS (device loop3): using ordered data mode [ 281.926397][T10737] reiserfs: using flush barriers [ 281.960323][T10737] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 281.980614][ T4667] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 282.008215][T10737] REISERFS (device loop3): checking transaction log (loop3) [ 282.026161][T10763] loop6: detected capacity change from 0 to 128 [ 282.065734][T10737] REISERFS (device loop3): Using r5 hash to sort names [ 282.075906][T10763] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 282.090954][T10737] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "01777777777777777777777î§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒÏð D|ÙÊÞÔ«öWgéÛ½{XA¨Î>´LqQÞ·¸ùχ [ 282.090954][T10737] ðOÉQ±•Çý6ÿÛÐb" [ 282.110569][T10763] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 282.135314][T10760] loop5: detected capacity change from 0 to 4096 [ 282.180275][ T4667] usb 8-1: Using ep0 maxpacket: 8 [ 282.188202][ T4667] usb 8-1: unable to get BOS descriptor or descriptor too short [ 282.260285][ T4667] usb 8-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 282.287145][ T4667] usb 8-1: config 8 interface 0 has no altsetting 0 [ 282.321910][ T4667] usb 8-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 282.353900][ T4667] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.382843][ T4667] usb 8-1: Product: syz [ 282.387135][ T4667] usb 8-1: Manufacturer: syz [ 282.411647][ T4667] usb 8-1: SerialNumber: syz [ 282.457159][T10749] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 282.486368][T10766] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 282.530261][ T5647] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 282.681843][ T4667] usb 8-1: selecting invalid altsetting 0 [ 282.725981][ T5647] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 282.754753][ T4667] usb 8-1: USB disconnect, device number 2 [ 282.765379][ T5647] usb 7-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config [ 282.813219][ T5647] usb 7-1: config 0 has no interface number 0 [ 282.824909][ T4328] udevd[4328]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 282.872227][ T5647] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 218, changing to 7 [ 282.894073][ T5647] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 41584, setting to 1024 [ 282.946672][ T5647] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 282.994289][ T5647] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 283.024905][ T5647] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.049406][ T5647] usb 7-1: config 0 descriptor?? [ 283.106490][ T5647] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 283.322122][T10797] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 283.336005][ T11] usb 7-1: Failed to submit usb control message: -71 [ 283.344905][ T5644] usb 7-1: USB disconnect, device number 7 [ 283.356644][ T11] usb 7-1: unable to send the bmi data to the device: -71 [ 283.389077][ T11] usb 7-1: unable to get target info from device [ 283.408311][ T11] usb 7-1: could not get target info (-71) [ 283.430638][ T11] usb 7-1: could not probe fw (-71) [ 283.456526][T10795] xt_CT: No such helper "syz0" [ 283.755283][T10809] loop3: detected capacity change from 0 to 256 [ 284.001027][ T7744] EXT4-fs (loop6): unmounting filesystem. [ 284.711622][T10837] netlink: 'syz.5.2659': attribute type 30 has an invalid length. [ 284.945820][T10816] loop0: detected capacity change from 0 to 32768 [ 284.971925][T10816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.2649 (10816) [ 285.040651][T10816] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 285.081448][T10816] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 285.121052][T10816] BTRFS info (device loop0): enabling auto defrag [ 285.127565][T10816] BTRFS info (device loop0): doing ref verification [ 285.188742][T10816] BTRFS info (device loop0): use no compression [ 285.208979][T10816] BTRFS info (device loop0): force clearing of disk cache [ 285.226800][T10816] BTRFS info (device loop0): max_inline at 4096 [ 285.259387][T10816] BTRFS info (device loop0): metadata ratio 5 [ 285.289715][T10816] BTRFS info (device loop0): using free space tree [ 285.375080][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'. [ 285.538465][T10816] BTRFS info (device loop0): enabling ssd optimizations [ 285.551573][T10816] BTRFS info (device loop0): rebuilding free space tree [ 285.791862][ T4255] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 287.068840][T10917] hsr0: VLAN not yet supported [ 287.320974][T10928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2694'. [ 287.420398][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2696'. [ 287.711197][T10938] loop0: detected capacity change from 0 to 1024 [ 287.769273][T10944] SET target dimension over the limit! [ 288.196335][ T26] audit: type=1326 audit(1738017516.698:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.3.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 288.309518][ T26] audit: type=1326 audit(1738017516.728:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.3.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 288.429985][ T26] audit: type=1326 audit(1738017516.728:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.3.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 288.517836][ T26] audit: type=1326 audit(1738017516.728:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.3.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 288.551667][T10970] netlink: 5 bytes leftover after parsing attributes in process `syz.7.2716'. [ 288.563028][ T26] audit: type=1326 audit(1738017516.728:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10957 comm="syz.3.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 288.997391][T10988] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2725'. [ 289.016881][T10980] loop5: detected capacity change from 0 to 4096 [ 289.049678][T10980] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 289.317024][ T5274] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 289.344249][ T5274] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 289.375200][ T5274] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 289.524567][T11000] loop3: detected capacity change from 0 to 1024 [ 289.626925][T11000] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 289.643169][T11010] device netdevsim0 entered promiscuous mode [ 289.663300][T11010] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.709323][T11000] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 289.785236][T11000] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 289.810542][T11000] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.2733: Failed to acquire dquot type 1 [ 289.953397][T11016] loop7: detected capacity change from 0 to 1024 [ 290.046052][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 290.250823][T11026] xt_nfacct: accounting object `syz0' does not exists [ 290.700269][ T5646] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 290.720516][ T5639] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 290.835267][T11048] loop3: detected capacity change from 0 to 4096 [ 290.844621][T11048] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 290.862636][T11050] loop7: detected capacity change from 0 to 512 [ 290.879331][T11050] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 290.892133][ T5646] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 290.913388][ T5639] usb 7-1: not running at top speed; connect to a high speed hub [ 290.921803][ T5646] usb 6-1: config 0 has no interface number 0 [ 290.928494][ T5646] usb 6-1: config 0 interface 120 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 290.944283][ T5639] usb 7-1: config 95 has an invalid interface number: 1 but max is 0 [ 290.961440][ T5639] usb 7-1: config 95 has no interface number 0 [ 290.968560][ T5639] usb 7-1: config 95 interface 1 has no altsetting 0 [ 290.977570][ T5646] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 290.979362][T11050] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 290.989132][ T5646] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.009473][ T5639] usb 7-1: string descriptor 0 read error: -22 [ 291.019065][ T5646] usb 6-1: config 0 descriptor?? [ 291.036483][ T5639] usb 7-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 291.038063][T11050] Quota error (device loop7): do_check_range: Getting block 256 out of range 1-6 [ 291.046625][ T5639] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.055977][T11050] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 291.073552][T11050] EXT4-fs error (device loop7): ext4_acquire_dquot:6794: comm syz.7.2755: Failed to acquire dquot type 0 [ 291.191697][ T8242] EXT4-fs (loop7): unmounting filesystem. [ 291.278232][T11056] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 291.346851][ T5639] usb 6-1: USB disconnect, device number 10 [ 291.539145][ T5647] usb 7-1: USB disconnect, device number 8 [ 291.545774][T11064] Cannot find map_set index 0 as target [ 291.702809][T11068] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2763'. [ 291.996754][T11076] ieee802154 phy0 wpan0: encryption failed: -22 [ 292.320035][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2772'. [ 292.626380][T11099] loop6: detected capacity change from 0 to 4096 [ 292.651231][T11099] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 292.690307][ T126] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 292.881141][ T7744] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 292.898937][ T7744] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 292.910708][ T126] usb 6-1: Using ep0 maxpacket: 8 [ 292.919312][ T126] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 292.930445][ T7744] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 292.959553][ T126] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 292.979149][ T126] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 293.005758][ T126] usb 6-1: Product: syz [ 293.023712][ T126] usb 6-1: Manufacturer: syz [ 293.028382][ T126] usb 6-1: SerialNumber: syz [ 293.264689][ T126] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 293.280120][ T126] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 293.314430][ T126] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 293.448254][T11121] netlink: 'syz.0.2789': attribute type 10 has an invalid length. [ 293.476778][ T126] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 293.490267][ T126] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 293.530758][ T126] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 293.573518][ T126] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 293.601694][T11101] loop3: detected capacity change from 0 to 40427 [ 293.609219][ T126] usb 6-1: USB disconnect, device number 11 [ 293.617930][ T126] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 293.642745][T11101] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 293.655074][ T126] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 293.673364][T11101] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 293.708693][ T126] visor 6-1:1.0: device disconnected [ 293.734145][T11101] F2FS-fs (loop3): invalid crc value [ 293.777628][T11101] F2FS-fs (loop3): Found nat_bits in checkpoint [ 293.916876][ T26] audit: type=1326 audit(1738017522.418:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c33d8cd29 code=0x7ffc0000 [ 293.955369][T11101] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.006439][ T26] audit: type=1326 audit(1738017522.458:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8c33d8cd29 code=0x7ffc0000 [ 294.045348][T11135] loop0: detected capacity change from 0 to 256 [ 294.205945][ T4257] syz-executor: attempt to access beyond end of device [ 294.205945][ T4257] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 294.297608][ T26] audit: type=1326 audit(1738017522.798:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c33d8cd29 code=0x7ffc0000 [ 294.400284][ T26] audit: type=1326 audit(1738017522.798:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11138 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8c33dbf5e5 code=0x7ffc0000 [ 294.490269][ T26] audit: type=1326 audit(1738017522.858:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11131 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c33d8cd29 code=0x7ffc0000 [ 294.559644][T11142] netlink: 'syz.5.2799': attribute type 27 has an invalid length. [ 294.578200][ T26] audit: type=1326 audit(1738017522.948:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11138 comm="syz.7.2794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8c33d8cd29 code=0x7ffc0000 [ 295.198620][T11158] loop0: detected capacity change from 0 to 2048 [ 295.263448][T11158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 295.620185][ T6665] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 295.798545][T11176] loop0: detected capacity change from 0 to 512 [ 295.807042][T11176] ext4: Unknown parameter 'noacl' [ 295.823950][ T6665] usb 6-1: config 0 has an invalid interface number: 207 but max is 0 [ 295.846931][ T6665] usb 6-1: config 0 has no interface number 0 [ 295.882281][ T6665] usb 6-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 295.883972][ T6828] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.930243][ T6665] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.964311][ T6665] usb 6-1: Product: syz [ 295.968545][ T6665] usb 6-1: Manufacturer: syz [ 295.983613][ T6665] usb 6-1: SerialNumber: syz [ 296.017043][ T6665] usb 6-1: config 0 descriptor?? [ 296.041773][ T6665] qmi_wwan 6-1:0.207: bogus CDC Union: master=0, slave=1 [ 296.243863][ T6665] qmi_wwan: probe of 6-1:0.207 failed with error -22 [ 296.454539][ T6667] usb 6-1: USB disconnect, device number 12 [ 296.504468][T11189] loop3: detected capacity change from 0 to 256 [ 296.650871][T11194] netlink: 'syz.0.2822': attribute type 3 has an invalid length. [ 296.761866][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2824'. [ 296.784231][T11197] netlink: 'syz.6.2824': attribute type 1 has an invalid length. [ 296.993922][T11203] loop3: detected capacity change from 0 to 1024 [ 297.004270][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2827'. [ 297.034960][T11203] EXT4-fs: Ignoring removed nobh option [ 297.096251][T11203] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz.3.2826: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 297.112957][T11208] netlink: 'syz.0.2828': attribute type 11 has an invalid length. [ 297.153095][T11208] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2828'. [ 297.157708][T11203] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2826: couldn't read orphan inode 11 (err -117) [ 297.185263][T11210] ipt_REJECT: TCP_RESET invalid for non-tcp [ 297.216807][T11203] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.297181][T11214] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 297.351010][T11203] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.2826: Invalid block bitmap block 0 in block_group 0 [ 297.381093][T11216] netlink: 'syz.5.2833': attribute type 1 has an invalid length. [ 297.412222][T11203] Quota error (device loop3): write_blk: dquota write failed [ 297.470369][T11203] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 297.503913][T11203] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.2826: Failed to acquire dquot type 0 [ 297.517494][T11220] loop0: detected capacity change from 0 to 64 [ 297.525635][T11219] loop6: detected capacity change from 0 to 256 [ 297.832207][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 298.147621][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.198424][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.265294][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.316982][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.353526][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.378169][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.394782][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.409576][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.590042][T11254] netlink: 'syz.5.2851': attribute type 6 has an invalid length. [ 299.252413][T11250] loop3: detected capacity change from 0 to 32768 [ 299.307900][T11250] __jfs_setxattr: xattr_size = 74, new_size = 12820 [ 299.784117][T11288] netlink: 'syz.6.2865': attribute type 3 has an invalid length. [ 299.845049][ T5647] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 300.030259][ T5647] usb 4-1: Using ep0 maxpacket: 8 [ 300.047365][ T5647] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 300.098426][ T5647] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 300.163523][ T5647] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 300.180190][ T5647] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.192811][ T5647] usb 4-1: Product: syz [ 300.197075][ T5647] usb 4-1: Manufacturer: syz [ 300.202372][ T5647] usb 4-1: SerialNumber: syz [ 300.209910][ T5647] usb 4-1: config 0 descriptor?? [ 300.660544][ T126] usb 4-1: USB disconnect, device number 9 [ 300.755587][ T26] audit: type=1326 audit(1738017529.258:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a798cd29 code=0x7ffc0000 [ 300.816289][ T26] audit: type=1326 audit(1738017529.298:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f05a798cd29 code=0x7ffc0000 [ 300.888568][T11344] loop7: detected capacity change from 0 to 256 [ 300.916096][ T26] audit: type=1326 audit(1738017529.418:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a798cd29 code=0x7ffc0000 [ 301.001580][ T26] audit: type=1326 audit(1738017529.468:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a798cd29 code=0x7ffc0000 [ 301.097157][ T26] audit: type=1326 audit(1738017529.478:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f05a79bf5e5 code=0x7ffc0000 [ 301.146079][ T26] audit: type=1326 audit(1738017529.628:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11346 comm="syz.5.2873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f05a798cd29 code=0x7ffc0000 [ 301.629662][T11366] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2884'. [ 302.240963][ T26] audit: type=1326 audit(1738017530.748:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.3.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 302.336448][ T26] audit: type=1326 audit(1738017530.778:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.3.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 302.494112][ T26] audit: type=1326 audit(1738017530.998:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.3.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 302.568864][ T26] audit: type=1326 audit(1738017531.038:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11384 comm="syz.3.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f213178cd29 code=0x7ffc0000 [ 303.111735][T11404] netlink: 'syz.7.2902': attribute type 1 has an invalid length. [ 303.151372][T11404] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2902'. [ 303.263027][T11408] [U] [ 303.266393][T11408] [U] [ 303.269130][T11408] [U] [ 303.271887][T11408] [U] [ 303.342626][T11408] [U] [ 303.345395][T11408] [U] [ 303.348130][T11408] [U] [ 303.350856][T11408] [U] [ 303.369686][T11408] [U] [ 303.372486][T11408] [U] [ 303.375234][T11408] [U] [ 303.385478][T11393] loop0: detected capacity change from 0 to 32768 [ 303.427210][T11407] [U] [ 303.431643][T11393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2896 (11393) [ 303.440713][T11410] loop7: detected capacity change from 0 to 764 [ 303.481253][T11410] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 303.556780][T11393] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 303.570655][T11410] Symlink component flag not implemented [ 303.576326][T11410] Symlink component flag not implemented [ 303.590462][T11393] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 303.626729][T11410] Symlink component flag not implemented (128) [ 303.634652][T11393] BTRFS info (device loop0): using free space tree [ 303.650330][T11410] Symlink component flag not implemented (122) [ 304.010337][T11393] BTRFS info (device loop0): enabling ssd optimizations [ 304.039267][T11444] QAT: failed to copy from user cfg_data. [ 304.356517][ T4255] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 304.582485][T11456] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2922'. [ 304.841389][T11462] loop6: detected capacity change from 0 to 1024 [ 304.992926][T11462] hfsplus: trying to free free bnode 0(1) [ 305.071943][T11466] netlink: 'syz.5.2926': attribute type 21 has an invalid length. [ 305.116211][T11466] netlink: 160 bytes leftover after parsing attributes in process `syz.5.2926'. [ 305.258792][T11330] hfsplus: b-tree write err: -5, ino 4 [ 305.948717][T11494] loop0: detected capacity change from 0 to 16 [ 306.016407][T11494] virtio-fs: tag <(null)> not found [ 306.091966][T11496] loop6: detected capacity change from 0 to 64 [ 306.973528][T11525] loop3: detected capacity change from 0 to 256 [ 307.748121][T11548] mmap: syz.0.2965 (11548): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 308.167167][T11562] loop5: detected capacity change from 0 to 512 [ 308.221967][T11562] EXT4-fs: Ignoring removed mblk_io_submit option [ 308.276075][T11562] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 308.401015][T11562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c128, mo2=0002] [ 308.409882][T11562] System zones: 1-12 [ 308.430013][T11562] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2186: inode #15: comm syz.5.2973: corrupted in-inode xattr [ 308.469937][T11562] EXT4-fs (loop5): Remounting filesystem read-only [ 308.476942][T11562] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2973: couldn't read orphan inode 15 (err -117) [ 308.499323][T11562] EXT4-fs (loop5): Remounting filesystem read-only [ 308.515506][T11562] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 308.802149][ T5274] EXT4-fs (loop5): unmounting filesystem. [ 308.932347][T11584] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.984468][T11586] xt_hashlimit: invalid rate [ 309.276096][T11593] loop6: detected capacity change from 0 to 1024 [ 309.283225][T11594] xt_TCPMSS: Only works on TCP SYN packets [ 309.365451][T11593] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 309.397970][T11600] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2990'. [ 309.538782][ T7744] EXT4-fs (loop6): unmounting filesystem. [ 309.814449][T11610] loop5: detected capacity change from 0 to 256 [ 309.867081][T11610] exfat: Deprecated parameter 'namecase' [ 309.914835][T11610] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 309.964223][T11614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2998'. [ 309.978642][T11616] loop6: detected capacity change from 0 to 64 [ 311.011427][T11643] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3010'. [ 311.085849][T11644] loop3: detected capacity change from 0 to 4096 [ 311.143893][T11644] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 311.291360][T11644] ntfs3: loop3: failed to convert "c46c" to cp852 [ 311.559413][T11652] loop0: detected capacity change from 0 to 512 [ 311.610744][T11652] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 311.804901][T11652] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #17: comm syz.0.3015: iget: bad i_size value: -6917529027641081756 [ 311.827976][T11636] loop5: detected capacity change from 0 to 32768 [ 311.904050][T11652] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.3015: couldn't read orphan inode 17 (err -117) [ 311.933615][T11636] (syz.5.3008,11636,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 311.957535][T11652] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 311.989453][T11636] (syz.5.3008,11636,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 312.107601][T11636] JBD2: Ignoring recovery information on journal [ 312.153880][ T4255] EXT4-fs (loop0): unmounting filesystem. [ 312.224394][T11636] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 312.233634][T11673] loop6: detected capacity change from 0 to 2048 [ 312.328544][T11676] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 312.403597][T11673] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 312.436897][T11673] Remounting filesystem read-only [ 312.481021][T11673] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 312.500537][T11673] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 312.531040][T11673] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 312.619953][T11673] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 312.647329][T11673] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 312.684670][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 312.684686][ T26] audit: type=1800 audit(1738017541.188:2710): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3023" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 312.726444][T11687] loop7: detected capacity change from 0 to 256 [ 312.865634][ T5274] ocfs2: Unmounting device (7,5) on (node local) [ 314.148581][T11737] loop3: detected capacity change from 0 to 1024 [ 314.193923][T11739] loop6: detected capacity change from 0 to 256 [ 314.239549][T11737] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 314.351480][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 314.715003][T11750] loop6: detected capacity change from 0 to 4096 [ 315.097855][T11732] loop5: detected capacity change from 0 to 32768 [ 315.168970][T11767] loop7: detected capacity change from 0 to 128 [ 315.183536][T11767] hpfs: bad mount options. [ 315.235942][T11732] XFS (loop5): Mounting V5 Filesystem [ 315.266761][ T4504] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 315.378397][T11732] XFS (loop5): Ending clean mount [ 315.391793][T11767] loop7: detected capacity change from 0 to 2048 [ 315.408936][T11732] XFS (loop5): Quotacheck needed: Please wait. [ 315.436109][T11767] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 315.492171][ T6828] udevd[6828]: incorrect nilfs2 checksum on /dev/loop7 [ 315.510551][T11732] XFS (loop5): Quotacheck: Done. [ 315.516667][T11783] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.528142][T11767] NILFS (loop7): error -116 getting root inode [ 315.648286][ T5274] XFS (loop5): Unmounting Filesystem [ 315.882565][T11790] loop7: detected capacity change from 0 to 8 [ 315.993157][T11790] SQUASHFS error: Unable to read inode 0xa7 [ 316.004665][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3076'. [ 316.100175][T11793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3076'. [ 316.186589][T11794] loop3: detected capacity change from 0 to 4096 [ 316.220340][T11794] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 316.945942][T11822] netlink: 'syz.3.3089': attribute type 2 has an invalid length. [ 316.986089][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3089'. [ 317.172502][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.178865][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.270266][T11834] bond0: Error: Cannot enslave bond to itself. [ 317.418748][T11840] netlink: 'syz.0.3098': attribute type 11 has an invalid length. [ 317.877313][T11860] loop5: detected capacity change from 0 to 16 [ 317.892785][T11860] erofs: (device loop5): mounted with root inode @ nid 36. [ 318.172229][T11867] loop7: detected capacity change from 0 to 2048 [ 318.220875][T11873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3114'. [ 318.246706][T11874] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 318.295733][T11867] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.326938][T11867] Remounting filesystem read-only [ 318.336617][T11867] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.359755][T11867] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.399959][T11867] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.441149][T11867] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.470375][T11867] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 318.490901][ T26] audit: type=1800 audit(1738017546.998:2711): pid=11867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3110" name="file2" dev="loop7" ino=16 res=0 errno=0 [ 318.680264][ T126] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 318.845484][T11888] loop3: detected capacity change from 0 to 128 [ 318.867240][T11891] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3121'. [ 318.880126][ T126] usb 7-1: Using ep0 maxpacket: 16 [ 318.889226][ T126] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.904626][T11888] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 318.925677][T11891] netlink: 'syz.7.3121': attribute type 2 has an invalid length. [ 318.936247][ T126] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.955222][T11888] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 318.962011][ T126] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.993873][ T126] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.020173][ T126] usb 7-1: Product: syz [ 319.034646][ T126] usb 7-1: Manufacturer: syz [ 319.039310][ T126] usb 7-1: SerialNumber: syz [ 319.177405][ T4257] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 319.227142][ T4257] FAT-fs (loop3): Filesystem has been set read-only [ 319.235147][ T4257] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 319.282856][ T126] usb 7-1: 0:2 : does not exist [ 319.334508][ T126] usb 7-1: USB disconnect, device number 9 [ 319.433837][T11882] loop5: detected capacity change from 0 to 32768 [ 319.461065][T11882] XFS: ikeep mount option is deprecated. [ 319.572234][ T6828] udevd[6828]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 319.604638][T11882] XFS (loop5): Mounting V5 Filesystem [ 319.749480][T11330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.809044][T11882] XFS (loop5): Ending clean mount [ 319.845386][T11882] XFS (loop5): Quotacheck needed: Please wait. [ 319.873296][T11330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.967048][T11882] XFS (loop5): Quotacheck: Done. [ 320.083771][T11330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.108072][ T26] audit: type=1326 audit(1738017548.608:2712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 320.165834][T11920] loop6: detected capacity change from 0 to 128 [ 320.170353][ T26] audit: type=1326 audit(1738017548.608:2713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 320.194556][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.230503][T11920] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 320.281100][ T5274] XFS (loop5): Unmounting Filesystem [ 320.301238][ T26] audit: type=1326 audit(1738017548.608:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 320.368366][T11330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.372603][T11920] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 320.417240][T11920] FAT-fs (loop6): Filesystem has been set read-only [ 320.424494][ T26] audit: type=1326 audit(1738017548.608:2715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 320.470408][ T26] audit: type=1326 audit(1738017548.608:2716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 320.501392][T11922] loop7: detected capacity change from 0 to 2048 [ 320.559859][T11922] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 320.564675][ T26] audit: type=1326 audit(1738017548.608:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 320.760208][ T26] audit: type=1326 audit(1738017548.608:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 320.873630][ T26] audit: type=1326 audit(1738017548.608:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 320.896181][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.008800][ T26] audit: type=1326 audit(1738017548.608:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11915 comm="syz.0.3134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bc8b8cd29 code=0x7ff00000 [ 321.031415][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.155936][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 321.167268][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 321.179238][ T4266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.192259][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 321.201229][ T4266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 321.209751][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.228659][ T4268] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 321.236248][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 321.245594][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 321.263736][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 321.271610][ T4268] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 321.278977][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 321.375664][T11929] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 322.588407][T11930] chnl_net:caif_netlink_parms(): no params data found [ 323.130192][T11993] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3163'. [ 323.330404][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 323.386592][T12012] loop0: detected capacity change from 0 to 1764 [ 323.409464][T12014] loop7: detected capacity change from 0 to 1024 [ 323.487058][T11930] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.538651][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.559013][T11930] device bridge_slave_0 entered promiscuous mode [ 323.664310][T11930] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.710169][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.719039][T11930] device bridge_slave_1 entered promiscuous mode [ 324.080542][T12028] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 324.155460][T12032] loop0: detected capacity change from 0 to 256 [ 324.180881][T11930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.182886][T12028] CIFS mount error: No usable UNC path provided in device string! [ 324.182886][T12028] [ 324.229515][T11930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.230525][T12028] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 324.366794][T11330] device hsr_slave_0 left promiscuous mode [ 324.416672][T11330] device hsr_slave_1 left promiscuous mode [ 324.426787][T11330] device bridge_slave_1 left promiscuous mode [ 324.452110][T11330] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.467021][T12040] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3181'. [ 324.487713][T11330] device bridge_slave_0 left promiscuous mode [ 324.507386][T11330] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.701464][T11330] device veth1_macvtap left promiscuous mode [ 324.707584][T11330] device veth0_macvtap left promiscuous mode [ 324.748918][T11330] device veth1_vlan left promiscuous mode [ 324.763216][T11330] device veth0_vlan left promiscuous mode [ 324.957497][T12022] loop7: detected capacity change from 0 to 32768 [ 324.999913][T12022] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.3174 (12022) [ 325.064740][T12022] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.101875][T12022] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 325.138602][T12022] BTRFS info (device loop7): using free space tree [ 325.199629][T12054] loop5: detected capacity change from 0 to 4096 [ 325.254701][T12063] loop6: detected capacity change from 0 to 256 [ 325.416405][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 325.488153][T12022] BTRFS info (device loop7): enabling ssd optimizations [ 325.700556][ T8242] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 325.934217][T12090] No such timeout policy "syz1" [ 326.852522][ T126] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 326.865201][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 326.865217][ T26] audit: type=1326 audit(1738017555.368:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318cd29 code=0x7ffc0000 [ 326.867743][T12115] syz.6.3206 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 326.874366][ T26] audit: type=1326 audit(1738017555.368:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f0db318cd29 code=0x7ffc0000 [ 326.936497][ T26] audit: type=1326 audit(1738017555.428:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318cd29 code=0x7ffc0000 [ 326.970528][ T26] audit: type=1326 audit(1738017555.428:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12114 comm="syz.6.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0db318cd29 code=0x7ffc0000 [ 327.061286][ T126] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 327.077549][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.085841][ T126] usb 6-1: Product: syz [ 327.091278][ T126] usb 6-1: Manufacturer: syz [ 327.096076][ T126] usb 6-1: SerialNumber: syz [ 327.121346][ T126] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 327.185484][ T126] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 327.307223][T11330] team0 (unregistering): Port device team_slave_1 removed [ 327.373137][T11330] team0 (unregistering): Port device team_slave_0 removed [ 327.469954][T11330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.490159][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 327.592383][T11330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.616290][ T5646] usb 6-1: USB disconnect, device number 13 [ 328.220365][ T126] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 328.238845][ T126] ath9k_htc: Failed to initialize the device [ 328.245714][ T5646] usb 6-1: ath9k_htc: USB layer deinitialized [ 328.595605][T12127] loop5: detected capacity change from 0 to 4096 [ 328.646586][T12128] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 328.673305][T11330] bond0 (unregistering): Released all slaves [ 328.712657][T12127] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 328.744284][T12127] Remounting filesystem read-only [ 328.795171][ T5274] NILFS (loop5): discard dirty page: offset=0, ino=6 [ 328.810193][ T5274] NILFS (loop5): discard dirty block: blocknr=23, size=4096 [ 328.817726][ T5274] NILFS (loop5): discard dirty page: offset=4096, ino=6 [ 328.825101][ T5274] NILFS (loop5): discard dirty block: blocknr=24, size=4096 [ 328.834640][T11930] team0: Port device team_slave_0 added [ 328.842016][ T5274] NILFS (loop5): discard dirty page: offset=8192, ino=6 [ 328.849099][ T5274] NILFS (loop5): discard dirty block: blocknr=25, size=4096 [ 328.858086][ T5274] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 328.872940][ T5274] NILFS (loop5): discard dirty page: offset=0, ino=3 [ 328.879685][ T5274] NILFS (loop5): discard dirty block: blocknr=28, size=4096 [ 328.887318][ T5274] NILFS (loop5): discard dirty page: offset=4096, ino=3 [ 328.895222][ T5274] NILFS (loop5): discard dirty block: blocknr=29, size=4096 [ 328.903881][ T5274] NILFS (loop5): discard dirty page: offset=270336, ino=3 [ 328.905746][T12050] netlink: 'syz.0.3184': attribute type 10 has an invalid length. [ 328.911736][ T5274] NILFS (loop5): discard dirty block: blocknr=0, size=4096 [ 329.011151][T12050] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.040395][T12118] netlink: 'syz.6.3207': attribute type 30 has an invalid length. [ 329.042389][T12130] loop5: detected capacity change from 0 to 64 [ 329.092288][T11930] team0: Port device team_slave_1 added [ 329.301119][T11930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.318379][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.415236][T12142] vivid-000: disconnect [ 329.430673][T12141] vivid-000: reconnect [ 329.465050][T11930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.537145][T12139] loop0: detected capacity change from 0 to 4096 [ 329.545066][T11930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.570460][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 329.590025][T11930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.593568][T12139] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 329.647601][T11930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.782080][T12139] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 329.820013][T11930] device hsr_slave_0 entered promiscuous mode [ 329.874464][T12139] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 329.890748][T11930] device hsr_slave_1 entered promiscuous mode [ 329.899979][T11930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.929662][T12139] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 329.943506][T11930] Cannot create hsr debugfs directory [ 330.028560][T12139] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 330.075306][T12139] ntfs: volume version 3.1. [ 330.092352][T12139] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 330.105587][T12158] netlink: 'syz.6.3224': attribute type 1 has an invalid length. [ 330.190147][T12158] netlink: 220 bytes leftover after parsing attributes in process `syz.6.3224'. [ 330.199257][T12158] NCSI netlink: No device for ifindex 130997362 [ 330.647406][T11930] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 330.701272][T11930] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 330.761219][T11930] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.796657][T11930] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.908518][T12185] netlink: 'syz.0.3233': attribute type 6 has an invalid length. [ 331.179247][T11930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.248367][T11330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 331.298217][T11330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.327985][T12193] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3236'. [ 331.352165][T12193] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3236'. [ 331.393942][T11930] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.405577][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 331.471741][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.518529][T11326] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.525912][T11326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.581679][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 331.613232][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 331.659876][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.689642][T11326] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.696862][T11326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.740863][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 331.831403][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 331.854678][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 331.919844][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 331.959704][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 331.985619][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 332.002986][T12174] loop6: detected capacity change from 0 to 40427 [ 332.011147][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 332.032248][T12174] F2FS-fs (loop6): invalid crc value [ 332.037622][T12174] F2FS-fs (loop6): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root [ 332.065470][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 332.101160][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 332.118276][T11930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.147490][T12174] F2FS-fs (loop6): Found nat_bits in checkpoint [ 332.178677][T11930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 332.199343][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 332.228300][T11326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 332.265050][T12174] F2FS-fs (loop6): Cannot turn on quotas: -2 on 0 [ 332.279054][T12174] F2FS-fs (loop6): Cannot turn on quotas: -2 on 1 [ 332.299568][T12174] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 332.420285][ T4294] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 332.644012][ T4294] usb 8-1: Using ep0 maxpacket: 32 [ 332.659538][ T4294] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.703858][T12237] loop5: detected capacity change from 0 to 64 [ 332.710269][ T4294] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.730240][ T4294] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 332.749655][ T4294] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.811230][ T4294] hub 8-1:4.0: USB hub found [ 332.853730][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.875629][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.912796][T11930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.012865][ T4294] hub 8-1:4.0: 2 ports detected [ 333.017825][ T4294] usb 8-1: selecting invalid altsetting 1 [ 333.040210][ T4294] hub 8-1:4.0: Using single TT (err -22) [ 333.235463][ T4294] hub 8-1:4.0: hub_hub_status failed (err = -71) [ 333.270211][ T4294] hub 8-1:4.0: config failed, can't get hub status (err -71) [ 333.361359][ T4294] usb 8-1: USB disconnect, device number 3 [ 333.986166][T11320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 334.011941][T11320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.151186][T11320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 334.168383][T11320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.206949][T11320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.250596][T11320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.274892][T11930] device veth0_vlan entered promiscuous mode [ 334.360777][T11930] device veth1_vlan entered promiscuous mode [ 334.476836][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 334.521508][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.528073][T12252] loop6: detected capacity change from 0 to 32768 [ 334.552367][T11930] device veth0_macvtap entered promiscuous mode [ 334.593976][T11930] device veth1_macvtap entered promiscuous mode [ 334.625451][T12252] jfs_lookup: iget failed on inum 32 [ 334.645178][T12252] jfs_lookup: iget failed on inum 32 [ 334.672587][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.720018][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.743517][T12291] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 334.764720][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.777944][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.790220][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.812013][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.832451][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.847065][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.858310][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.876290][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.892104][T11930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.959850][T11322] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 335.001720][T11322] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 335.041134][T11322] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 335.082819][T11322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 335.091772][ T28] INFO: task syz-executor:4250 blocked for more than 143 seconds. [ 335.124467][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.126231][ T28] Not tainted 6.1.127-syzkaller #0 [ 335.159752][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.182890][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 335.199743][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.212538][ T28] task:syz-executor state:D stack:20448 pid:4250 ppid:1 flags:0x00004004 [ 335.250589][ T28] Call Trace: [ 335.253530][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.253914][ T28] [ 335.253932][ T28] __schedule+0x143f/0x4570 [ 335.308975][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.363969][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.382686][ T28] ? release_firmware_map_entry+0x186/0x186 [ 335.388667][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 335.420231][ T28] ? print_irqtrace_events+0x210/0x210 [ 335.420739][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.425753][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 335.425794][ T28] schedule+0xbf/0x180 [ 335.475511][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.500154][ T28] io_schedule+0x88/0x100 [ 335.513190][T11930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.526505][T11930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.539948][T11930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.545081][ T28] folio_wait_bit_common+0x878/0x1290 [ 335.556212][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 335.571580][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 335.590538][ T28] ? folio_wait_bit+0x20/0x20 [ 335.607967][ T28] ? find_get_entries+0x188/0x710 [ 335.616943][T11930] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.625752][ T28] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 335.657978][ T28] ? __lock_acquire+0x125b/0x1f80 [ 335.664250][T11930] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.680297][ T28] truncate_inode_pages_range+0xbb5/0x1340 [ 335.686228][ T28] ? read_lock_is_recursive+0x10/0x10 [ 335.705088][T11930] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.715148][ T28] ? mapping_evict_folio+0x5b0/0x5b0 [ 335.720916][T11930] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.730595][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 335.736786][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 335.750868][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 335.756158][ T28] evict+0x53c/0x930 [ 335.767404][ T28] ? proc_nr_inodes+0x310/0x310 [ 335.773943][ T28] ? do_raw_spin_unlock+0x137/0x8a0 [ 335.779324][ T28] evict_inodes+0x668/0x700 [ 335.789324][ T28] ? clear_inode+0x150/0x150 [ 335.797298][ T28] ? sync_filesystem+0x103/0x220 [ 335.807088][ T28] generic_shutdown_super+0x94/0x340 [ 335.815498][ T28] kill_block_super+0x7a/0xe0 [ 335.824820][ T28] deactivate_locked_super+0xa0/0x110 [ 335.832797][ T28] cleanup_mnt+0x490/0x520 [ 335.837424][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 335.848071][ T28] task_work_run+0x246/0x300 [ 335.856623][ T28] ? task_work_cancel+0x2e0/0x2e0 [ 335.868992][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 335.879754][ T28] exit_to_user_mode_loop+0xde/0x100 [ 335.885315][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 335.891155][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 335.896753][ T28] do_syscall_64+0x47/0xb0 [ 335.902114][ T28] ? clear_bhb_loop+0x45/0xa0 [ 335.906869][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 335.913183][ T28] RIP: 0033:0x7f3e1758e057 [ 335.917635][ T28] RSP: 002b:00007ffcafafba58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 335.926143][ T28] RAX: 0000000000000000 RBX: 00007f3e1760e08c RCX: 00007f3e1758e057 [ 335.934279][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcafafbb10 [ 335.942451][ T28] RBP: 00007ffcafafbb10 R08: 0000000000000000 R09: 0000000000000000 [ 335.951081][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcafafcb90 [ 335.959646][ T28] R13: 00007f3e1760e08c R14: 00007ffcafafcbd0 R15: 00000000000000f9 [ 335.967837][ T28] [ 335.971425][ T28] [ 335.971425][ T28] Showing all locks held in the system: [ 335.979174][ T28] 1 lock held by rcu_tasks_kthre/12: [ 335.986336][ T28] #0: ffffffff8d32b290 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 335.997529][ T28] 1 lock held by rcu_tasks_trace/13: [ 336.002929][ T28] #0: ffffffff8d32ba90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 336.014215][ T28] 3 locks held by kworker/1:1/27: [ 336.019283][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 336.029940][ T28] #1: ffffc90000a3fd20 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 336.042394][ T28] #2: ffff888071a45240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2cd/0x4120 [ 336.057255][ T28] 1 lock held by khungtaskd/28: [ 336.062920][ T28] #0: ffffffff8d32b0c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 336.073023][ T28] 1 lock held by klogd/3613: [ 336.077645][ T28] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 336.087847][ T28] 1 lock held by dhcpcd/3918: [ 336.092613][ T28] #0: ffffffff8e50bd28 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x12e/0x6c0 [ 336.102430][ T28] 2 locks held by getty/4006: [ 336.107132][ T28] #0: ffff88814d12c098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 336.117049][ T28] #1: ffffc9000326b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 336.127365][ T28] 2 locks held by syz-executor/4240: [ 336.132748][ T28] #0: ffff8880b8e3a9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 336.142854][ T28] #1: ffff8880b8e27788 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x383/0x790 [ 336.154376][ T28] 1 lock held by syz-executor/4250: [ 336.159980][ T28] #0: ffff888079cac0e0 (&type->s_umount_key#75){+.+.}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 336.170548][ T28] 2 locks held by kworker/0:9/4329: [ 336.175771][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 336.186245][ T28] #1: ffffc90004067d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 336.197770][ T28] 3 locks held by kworker/1:11/4667: [ 336.203198][ T28] #0: ffff888030247938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 336.215033][ T28] #1: ffffc90004e1fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 336.227706][ T28] #2: ffffffff8e50bd28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 336.237331][ T28] 3 locks held by kworker/0:17/5646: [ 336.242783][ T28] #0: ffff888030247938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 336.253844][ T28] #1: ffffc9000493fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 336.266866][ T28] #2: ffffffff8e50bd28 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 336.276437][ T28] 3 locks held by syz-executor/11930: [ 336.282628][ T28] #0: ffffffff8e50bd28 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 336.292450][ T28] #1: ffff8880296813e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x224/0x410 [ 336.302241][ T28] #2: ffffffff8d3306b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 336.313229][ T28] [ 336.315606][ T28] ============================================= [ 336.315606][ T28] [ 336.336465][ T28] NMI backtrace for cpu 1 [ 336.340849][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0 [ 336.348791][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 336.358890][ T28] Call Trace: [ 336.362323][ T28] [ 336.365297][ T28] dump_stack_lvl+0x1e3/0x2cb [ 336.370041][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 336.375562][ T28] ? panic+0x764/0x764 [ 336.379680][ T28] ? vprintk_emit+0x622/0x740 [ 336.384416][ T28] ? printk_sprint+0x490/0x490 [ 336.386951][T11930] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 336.389221][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 336.389257][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 336.407083][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 336.413280][ T28] ? _printk+0xd1/0x111 [ 336.417481][ T28] ? panic+0x764/0x764 [ 336.421600][ T28] ? __wake_up_klogd+0xcc/0x100 [ 336.426505][ T28] ? panic+0x764/0x764 [ 336.430630][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 336.436745][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 336.442865][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 336.448896][ T28] watchdog+0xf88/0xfd0 [ 336.453118][ T28] ? watchdog+0x1f8/0xfd0 [ 336.457505][ T28] kthread+0x28d/0x320 [ 336.461610][ T28] ? hungtask_pm_notify+0x50/0x50 [ 336.466685][ T28] ? kthread_blkcg+0xd0/0xd0 [ 336.467921][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.471391][ T28] ret_from_fork+0x1f/0x30 [ 336.471437][ T28] [ 336.472482][ T28] Sending NMI from CPU 1 to CPUs 0: [ 336.492820][ C0] NMI backtrace for cpu 0 [ 336.492844][ C0] CPU: 0 PID: 3918 Comm: dhcpcd Not tainted 6.1.127-syzkaller #0 [ 336.492861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 336.492871][ C0] RIP: 0010:skb_put+0x4b/0x1f0 [ 336.492902][ C0] Code: e9 f8 48 8d bb d0 00 00 00 48 89 f8 48 c1 e8 03 42 80 3c 30 00 74 05 e8 a3 61 41 f9 4c 8b bb d0 00 00 00 4c 8d a3 c8 00 00 00 <4c> 89 e0 4c 89 24 24 49 c1 ec 03 43 0f b6 04 34 84 c0 0f 85 e3 00 [ 336.492917][ C0] RSP: 0018:ffffc900037370d0 EFLAGS: 00000246 [ 336.492932][ C0] RAX: 1ffff1100b4601d2 RBX: ffff88805a300dc0 RCX: ffff888031109dc0 [ 336.492945][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88805a300e90 [ 336.492956][ C0] RBP: 0000000000000cec R08: ffffffff846c3a3c R09: ffff888024e091d4 [ 336.492968][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805a300e88 [ 336.492980][ C0] R13: 0000000000000004 R14: dffffc0000000000 R15: ffff888024e08000 [ 336.492992][ C0] FS: 00007f870f6b3740(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 336.493007][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.493019][ C0] CR2: 00007fff0ca87058 CR3: 0000000020b81000 CR4: 00000000003506f0 [ 336.493034][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 336.493043][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 336.493054][ C0] Call Trace: [ 336.493059][ C0] [ 336.493064][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 336.493082][ C0] ? read_lock_is_recursive+0x10/0x10 [ 336.493117][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 336.493134][ C0] ? nmi_handle+0x25/0x440 [ 336.493168][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 336.493184][ C0] ? nmi_handle+0x12e/0x440 [ 336.493210][ C0] ? nmi_handle+0x25/0x440 [ 336.493235][ C0] ? skb_put+0x4b/0x1f0 [ 336.493258][ C0] ? default_do_nmi+0x62/0x150 [ 336.493277][ C0] ? exc_nmi+0xa8/0x100 [ 336.493293][ C0] ? end_repeat_nmi+0x16/0x31 [ 336.493312][ C0] ? nla_put+0xac/0x1e0 [ 336.493334][ C0] ? skb_put+0x4b/0x1f0 [ 336.493359][ C0] ? skb_put+0x4b/0x1f0 [ 336.493384][ C0] ? skb_put+0x4b/0x1f0 [ 336.493408][ C0] [ 336.493413][ C0] [ 336.493421][ C0] nla_put+0xc3/0x1e0 [ 336.493442][ C0] rtnl_fill_link_af+0x15c/0x410 [ 336.493473][ C0] rtnl_fill_ifinfo+0x1d55/0x2090 [ 336.493499][ C0] ? if_nlmsg_size+0x800/0x800 [ 336.493521][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 336.493542][ C0] ? unwind_next_frame+0x1a3f/0x2220 [ 336.493560][ C0] ? deref_stack_reg+0xc1/0x210 [ 336.493579][ C0] ? preempt_count_add+0x8f/0x180 [ 336.493601][ C0] ? 0xffffffffa0003b40 [ 336.493614][ C0] ? 0xffffffffa0003b40 [ 336.493626][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 336.493644][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 336.493668][ C0] ? kernel_text_address+0x9f/0xd0 [ 336.493691][ C0] ? __kernel_text_address+0x9/0x40 [ 336.493713][ C0] ? unwind_get_return_address+0x49/0x80 [ 336.493735][ C0] rtnl_dump_ifinfo+0xbb0/0x1350 [ 336.493769][ C0] ? rtnl_getlink+0xbe0/0xbe0 [ 336.493794][ C0] ? kasan_set_track+0x60/0x70 [ 336.493808][ C0] ? kasan_set_track+0x4b/0x70 [ 336.493822][ C0] ? __kasan_kmalloc+0x97/0xb0 [ 336.493837][ C0] ? __kmalloc_node_track_caller+0xb1/0x220 [ 336.493857][ C0] ? __alloc_skb+0x135/0x670 [ 336.493878][ C0] ? netlink_dump+0x1fb/0xca0 [ 336.493902][ C0] ? netlink_recvmsg+0x6ca/0x1180 [ 336.493926][ C0] ? ____sys_recvmsg+0x285/0x530 [ 336.493951][ C0] ? __sys_recvmsg+0x2e9/0x3d0 [ 336.493975][ C0] ? do_syscall_64+0x3b/0xb0 [ 336.493988][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.494039][ C0] ? __kmalloc_node_track_caller+0xe1/0x220 [ 336.494062][ C0] ? __alloc_skb+0x419/0x670 [ 336.494086][ C0] netlink_dump+0x5a2/0xca0 [ 336.494122][ C0] ? netlink_lookup+0x200/0x200 [ 336.494144][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 336.494167][ C0] ? kmem_cache_free+0x292/0x510 [ 336.494188][ C0] ? netlink_recvmsg+0x61a/0x1180 [ 336.494214][ C0] netlink_recvmsg+0x6ca/0x1180 [ 336.494244][ C0] ? netlink_sendmsg+0xd60/0xd60 [ 336.494270][ C0] ? _copy_from_user+0x109/0x170 [ 336.494295][ C0] ? aa_af_perm+0x350/0x350 [ 336.494319][ C0] ? iovec_from_user+0x2f2/0x380 [ 336.494345][ C0] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 336.494368][ C0] ? security_socket_recvmsg+0x86/0xb0 [ 336.494390][ C0] ? netlink_sendmsg+0xd60/0xd60 [ 336.494413][ C0] ____sys_recvmsg+0x285/0x530 [ 336.494443][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 336.494479][ C0] __sys_recvmsg+0x2e9/0x3d0 [ 336.494506][ C0] ? ____sys_recvmsg+0x530/0x530 [ 336.494540][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 336.494572][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 336.494593][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 336.494612][ C0] ? syscall_enter_from_user_mode+0x2e/0x230 [ 336.494635][ C0] do_syscall_64+0x3b/0xb0 [ 336.494648][ C0] ? clear_bhb_loop+0x45/0xa0 [ 336.494665][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 336.494690][ C0] RIP: 0033:0x7f870f78b91e [ 336.494703][ C0] Code: ff 89 ef 48 89 04 24 e8 4f 57 f9 ff 48 8b 04 24 48 83 c4 30 5d c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 21 b8 2f 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 70 48 8b 15 db c4 0c 00 f7 d8 64 89 02 48 83 [ 336.494717][ C0] RSP: 002b:00007ffde49385a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 336.494733][ C0] RAX: ffffffffffffffda RBX: 00007ffde49396d0 RCX: 00007f870f78b91e [ 336.494745][ C0] RDX: 0000000000000000 RSI: 00007ffde49395f0 RDI: 000000000000002a [ 336.494756][ C0] RBP: 00007ffde4939660 R08: 0000000000000000 R09: 0000000000000000 [ 336.494766][ C0] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000b8c [ 336.494776][ C0] R13: 00007ffde49395d4 R14: 00007ffde49395f0 R15: 00007ffde49395e0 [ 336.494797][ C0] [ 336.497481][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.501275][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 336.501294][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.127-syzkaller #0 [ 336.501320][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 336.501333][ T28] Call Trace: [ 336.501353][ T28] [ 336.501362][ T28] dump_stack_lvl+0x1e3/0x2cb [ 336.501407][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 336.501443][ T28] ? panic+0x764/0x764 [ 336.501473][ T28] ? vscnprintf+0x59/0x80 [ 336.501503][ T28] panic+0x318/0x764 [ 336.501530][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 336.501555][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 336.501586][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 336.501607][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 336.501633][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 336.501658][ T28] watchdog+0xfc7/0xfd0 [ 336.501695][ T28] ? watchdog+0x1f8/0xfd0 [ 336.501729][ T28] kthread+0x28d/0x320 [ 336.501748][ T28] ? hungtask_pm_notify+0x50/0x50 [ 336.501776][ T28] ? kthread_blkcg+0xd0/0xd0 [ 336.501799][ T28] ret_from_fork+0x1f/0x30 [ 336.501842][ T28] [ 336.502215][ T28] Kernel Offset: disabled [ 337.181310][ T28] Rebooting in 86400 seconds..