last executing test programs: 2m36.787547357s ago: executing program 5 (id=1474): r0 = fsopen(&(0x7f0000000340)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2m36.310059727s ago: executing program 5 (id=1478): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setpgid(0x0, 0x0) 2m35.933648593s ago: executing program 5 (id=1482): pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) writev(r0, &(0x7f0000000f40)=[{&(0x7f00000009c0)='S', 0x1}], 0x1) 2m35.490828214s ago: executing program 5 (id=1484): r0 = fsopen(&(0x7f0000000500)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\x00', &(0x7f0000000140)="8d", 0x1) 2m35.117000341s ago: executing program 5 (id=1488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x439, 0x10000, 0x400000, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 2m34.591217744s ago: executing program 5 (id=1492): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 2m19.225299093s ago: executing program 32 (id=1492): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) 21.401251155s ago: executing program 2 (id=2428): r0 = socket(0x22, 0x2, 0x2) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000140)) 20.89870301s ago: executing program 2 (id=2434): unshare(0x22020400) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 20.426740668s ago: executing program 2 (id=2439): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000002cf1389d, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000440)={0x1, 0x0, {0x0, 0x0, 0x300e, 0x8, 0x2, 0x30fd0a3fb385013c}}) 19.910695852s ago: executing program 2 (id=2444): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xd) 19.442696438s ago: executing program 2 (id=2448): r0 = add_key$user(&(0x7f0000000100), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r0, 0xe000) 18.85183954s ago: executing program 2 (id=2453): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reconstruct_alloc,no_data_io,hash,\x00'], 0x1, 0x5927, &(0x7f0000009200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 6.664866718s ago: executing program 0 (id=2534): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001340)=@raw={'raw\x00', 0x3c1, 0x3, 0x1b78, 0x1918, 0xffffff80, 0x178, 0x0, 0x178, 0x1aa8, 0x22b, 0x258, 0x1aa8, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x18b8, 0x1918, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00'}}, @common=@unspec=@u32={{0x7e0}, {[{}, {[{}, {}, {}, {}, {}, {0x0, 0x1}]}, {}, {}, {}, {}, {[{}, {}, {}, {}, {}, {}, {0x1}]}]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}, [0xff, 0x0, 0xff, 0xffffff00], 0x4e21, 0x4e22, 0x4e23, 0x4e22, 0x7ff, 0x3, 0x7, 0x4, 0x5}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0x160, 0x190, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, @private1}}, @common=@ipv6header={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1bd8) 6.177556175s ago: executing program 0 (id=2537): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0xe4945d2eb074039d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) 5.719394605s ago: executing program 0 (id=2541): r0 = socket$kcm(0x25, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x141) 5.300432446s ago: executing program 4 (id=2544): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) 5.072033284s ago: executing program 0 (id=2546): socketpair(0x1d, 0x3, 0x0, &(0x7f00000002c0)={0x0, 0x0}) socketpair(0x2, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0}) 4.817175006s ago: executing program 3 (id=2548): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x88, &(0x7f0000000a40)={[{}, {@gid}, {@barrier}, {@uid}, {@force}, {@force}, {@nls={'nls', 0x3d, 'macgaelic'}}, {@part={'part', 0x3d, 0x6}}, {@force}]}, 0x41, 0x6e8, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) 4.763583099s ago: executing program 6 (id=2549): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000100)={0x2c, 0x1e, 0x709, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x36, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}]}, 0x2c}], 0x1}, 0x0) 4.378313444s ago: executing program 4 (id=2550): r0 = socket$pppl2tp(0x18, 0x1, 0x1) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000300, 0x0, 0x0) 4.21004495s ago: executing program 6 (id=2552): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/slabinfo\x00', 0x0, 0x0) lseek(r0, 0x800, 0x0) 3.989604617s ago: executing program 0 (id=2553): r0 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x0, &(0x7f00000001c0), 0x0, 0x9635, &(0x7f0000012cc0)="$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") ioctl$FITRIM(r0, 0x8040587f, &(0x7f0000000100)={0x4000000000000, 0x200000000000000, 0xa60000000000}) 3.988482036s ago: executing program 3 (id=2554): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readahead(r0, 0x9, 0x6) 3.85842896s ago: executing program 4 (id=2555): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x300}}]}, 0x154}}, 0x0) 3.358188457s ago: executing program 3 (id=2557): iopl(0x3) clock_gettime(0xa00, 0x0) 3.292966581s ago: executing program 4 (id=2558): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@rthdr={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}}], 0x1, 0x0) 2.874772068s ago: executing program 3 (id=2560): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x2, 0x17, 0x6, 0x6, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x4) 2.812045027s ago: executing program 4 (id=2561): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x6) 2.73167694s ago: executing program 1 (id=2562): r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x40084149, 0x0) 2.578404975s ago: executing program 33 (id=2453): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB='acl,direct_io,norecovery,fsck,journal_flush_disabled,noreTovery,btree_node_mem_ptr_optimization,reconstruct_alloc,no_data_io,hash,\x00'], 0x1, 0x5927, &(0x7f0000009200)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 2.450750278s ago: executing program 3 (id=2564): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f00000009c0)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYBLOB="0699126aeac613a8dbbcb13544636fd5bac9418d9758eca59541c21919680dad76067b29cade133842c0e8a3badf962ea068497b7df4ca8cebd34fbe2cb427a6a5f2495bb6fbfb6a0f763a91383ba740fdfe83795126a05a7cfc11cce3285d5f0f0935818a36bc15", @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYBLOB="e357362fd6e638e685906213819c4918a367bf325cb8a7dc896c98c58355bdad230058"], 0x1, 0x291, &(0x7f0000000280)="$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") mount$nfs(&(0x7f00000000c0)='Q.*', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 2.297704116s ago: executing program 4 (id=2565): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040ac052a0200000000000109022400010000000009040000010300020009210000f60122000009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="200108"], 0x0}) 2.279477005s ago: executing program 1 (id=2566): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x2c8, 0x3, 0x398, 0x0, 0x229, 0x240, 0x208, 0x4c000000, 0x300, 0x328, 0x328, 0x300, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x1e8, 0x208, 0x0, {0x0, 0x700}, [@common=@inet=@hashlimit2={{0x150}, {'veth1_to_team\x00', {0x0, 0x100000007, 0x0, 0x0, 0x0, 0x8000, 0xffff}}}, @common=@inet=@ecn={{0x28}, {0x11}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "41e9"}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) 1.970749718s ago: executing program 6 (id=2567): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getnexthop={0x20, 0x76, 0xd11, 0x0, 0x8000, {0x3}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) 1.736844087s ago: executing program 3 (id=2568): syz_mount_image$ocfs2(&(0x7f0000004480), &(0x7f00000044c0)='./file1\x00', 0x2800000, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f63616c616c6c6f633d31383434363734343037333730393535313630382c726573765f6c6576656c3d30303030303030303030303030303030303030322c6865617274626561743d6e6f6e652c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c6e6f696e74722c636f686572656e63793d66756c6c2c6e6f61636c2c636f686572656e63793d66756c6c2c646174613d6f7264657265642c00a6bbbf4f1c4504306b696ca03fb375edc4c5f0f579bf2195c3cc88165b8c279abaa84a848971253cb6e898fee96fa6"], 0x8, 0x4472, &(0x7f0000008c00)="$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") symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.538982111s ago: executing program 1 (id=2569): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0x211, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x37}}, 0x1c}}, 0x0) 1.351606357s ago: executing program 6 (id=2570): r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1.031949058s ago: executing program 1 (id=2571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_ID={0x8}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "ef"}]}], {0x14}}, 0xcc}}, 0x0) 849.082709ms ago: executing program 6 (id=2572): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0) 455.309605ms ago: executing program 1 (id=2573): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) 294.299779ms ago: executing program 6 (id=2574): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timerfd_gettime(0xffffffffffffffff, 0x0) 2.323787ms ago: executing program 0 (id=2575): r0 = openat$misdntimer(0xffffff9c, &(0x7f0000000580), 0x80000, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 0s ago: executing program 1 (id=2576): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) kernel console output (not intermixed with test programs): irectory bread(block 67) failed [ 143.433917][ T8183] FAT-fs (loop4): Directory bread(block 68) failed [ 143.446212][ T8183] FAT-fs (loop4): Directory bread(block 69) failed [ 143.453720][ T8183] FAT-fs (loop4): Directory bread(block 70) failed [ 143.460271][ T8183] FAT-fs (loop4): Directory bread(block 71) failed [ 143.497271][ T8197] netlink: 'syz.5.943': attribute type 1 has an invalid length. [ 143.516691][ T8183] FAT-fs (loop4): Directory bread(block 72) failed [ 143.551255][ T8183] FAT-fs (loop4): Directory bread(block 73) failed [ 143.668087][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.755076][ T8205] loop0: detected capacity change from 0 to 1024 [ 143.762745][ T8204] mmap: syz.5.947 (8204): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 143.852048][ T8205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.956615][ T8205] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: inode #11: comm syz.0.948: missing EA_INODE flag [ 144.007199][ T8205] EXT4-fs (loop0): Remounting filesystem read-only [ 144.014083][ T8205] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.175090][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.339916][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 144.848123][ T8247] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 144.862090][ T8241] loop2: detected capacity change from 0 to 4096 [ 144.910643][ T8241] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 145.065170][ T8241] ntfs3(loop2): ino=5, "/" directory corrupted [ 145.071783][ T8241] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 145.097329][ T8253] QAT: failed to copy from user cfg_data. [ 145.306666][ T8266] loop4: detected capacity change from 0 to 256 [ 145.390791][ T8271] loop2: detected capacity change from 0 to 512 [ 145.477956][ T8271] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.567813][ T8271] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 145.590811][ T8271] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 145.599624][ T8271] System zones: 0-1, 15-15, 18-18, 34-34 [ 145.605996][ T8271] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.612505][ T8271] __quota_error: 23 callbacks suppressed [ 145.612524][ T8271] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 145.627987][ T8271] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 145.642634][ T8271] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 145.663774][ T8271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.977: bg 0: block 40: padding at end of block bitmap is not set [ 145.712357][ T8271] EXT4-fs (loop2): Remounting filesystem read-only [ 145.733289][ T8271] EXT4-fs (loop2): 1 truncate cleaned up [ 145.754163][ T8271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 146.047917][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.058641][ T8298] loop3: detected capacity change from 0 to 1024 [ 146.146723][ T8298] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 146.321958][ T8312] loop2: detected capacity change from 0 to 64 [ 146.460230][ T8298] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.991: Invalid block bitmap block 0 in block_group 0 [ 146.544892][ T8298] Quota error (device loop3): write_blk: dquota write failed [ 146.602985][ T8298] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 146.663042][ T8298] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.991: Failed to acquire dquot type 0 [ 146.762395][ T8298] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz.3.991: Freeing blocks not in datazone - block = 0, count = 4096 [ 146.793946][ T8306] loop0: detected capacity change from 0 to 32768 [ 146.801424][ T8306] XFS: noikeep mount option is deprecated. [ 146.871800][ T8298] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.991: Invalid inode bitmap blk 0 in block_group 0 [ 146.887991][ T5913] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 146.897278][ T8298] EXT4-fs error (device loop3) in ext4_free_inode:360: Corrupt filesystem [ 146.898842][ T8298] EXT4-fs (loop3): 1 orphan inode deleted [ 146.906150][ T5913] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:8: Failed to release dquot type 0 [ 146.927016][ T8306] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 146.937056][ T8298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.052589][ T8306] XFS (loop0): Ending clean mount [ 147.060170][ T8306] XFS (loop0): Quotacheck needed: Please wait. [ 147.179610][ T8348] netlink: 'syz.2.1010': attribute type 4 has an invalid length. [ 147.223029][ T8348] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1010'. [ 147.322312][ T8306] XFS (loop0): Quotacheck: Done. [ 147.368030][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.400489][ T1147] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8 [ 147.422930][ T8355] loop1: detected capacity change from 0 to 256 [ 147.434766][ T8358] netlink: 'syz.5.1016': attribute type 32 has an invalid length. [ 147.455759][ T1147] EXT4-fs error (device loop3): ext4_release_dquot:6902: comm kworker/u8:6: Failed to release dquot type 0 [ 147.483926][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1016'. [ 147.531506][ T8362] openvswitch: netlink: Actions may not be safe on all matching packets [ 147.531982][ T8358] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 147.566654][ T8355] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xac9b7dd6, utbl_chksum : 0xe619d30d) [ 147.584597][ T5850] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 147.686300][ T8365] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 148.023587][ T8377] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1027'. [ 148.082085][ T8380] IPVS: Unknown mcast interface: pimreg0 [ 148.111322][ T8382] loop5: detected capacity change from 0 to 256 [ 148.201313][ T8382] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 148.232987][ T8382] FAT-fs (loop5): Filesystem has been set read-only [ 148.313259][ T8384] wg2: entered promiscuous mode [ 148.360883][ T8393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 148.365783][ T8384] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 148.386608][ T5844] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 148.407551][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1032'. [ 148.908173][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1041'. [ 149.046440][ T8401] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 149.093239][ T8403] netlink: 'syz.4.1037': attribute type 4 has an invalid length. [ 149.211130][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1048'. [ 149.220297][ T8421] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1048'. [ 149.508159][ T8430] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 149.676382][ T8432] loop3: detected capacity change from 0 to 4096 [ 149.693711][ T8432] EXT4-fs: Ignoring removed nobh option [ 149.709789][ T8439] netlink: 'syz.4.1055': attribute type 39 has an invalid length. [ 149.749470][ T8432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.816972][ T8439] veth0_macvtap: left promiscuous mode [ 149.821553][ T8432] Quota error (device loop3): find_block_dqentry: Quota for id 0 referenced but not present [ 149.833568][ T8432] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 149.848771][ T8432] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.1047: Failed to acquire dquot type 1 [ 149.947497][ T8451] openvswitch: netlink: Actions may not be safe on all matching packets [ 149.993004][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.139091][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.149920][ T25] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 150.159432][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.173728][ T25] usb 1-1: config 0 descriptor?? [ 150.230299][ T8459] loop1: detected capacity change from 0 to 256 [ 150.303898][ T8459] exfat: Deprecated parameter 'namecase' [ 150.388454][ T8464] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 150.422611][ T8459] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 150.450436][ T8463] loop3: detected capacity change from 0 to 2048 [ 150.459796][ T8464] Error parsing options; rc = [-22] [ 150.503906][ T8463] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 150.517602][ T8463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.533228][ T8459] syz.1.1065: attempt to access beyond end of device [ 150.533228][ T8459] loop1: rw=524288, sector=34359738488, nr_sectors = 1 limit=256 [ 150.559701][ T8459] syz.1.1065: attempt to access beyond end of device [ 150.559701][ T8459] loop1: rw=0, sector=34359738488, nr_sectors = 1 limit=256 [ 150.590576][ T25] usb 1-1: Cannot set MAC address [ 150.604325][ T25] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 150.620819][ T8465] loop4: detected capacity change from 0 to 4096 [ 150.624372][ T29] audit: type=1800 audit(1731318235.887:47): pid=8459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1065" name="file1" dev="loop1" ino=1048620 res=0 errno=0 [ 150.677699][ T25] usb 1-1: USB disconnect, device number 7 [ 150.681521][ T8465] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 151.169792][ T8456] loop5: detected capacity change from 0 to 32768 [ 151.231340][ T8456] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1063 (8456) [ 151.273086][ T8456] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.300808][ T8456] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 151.333262][ T8456] BTRFS info (device loop5): using free-space-tree [ 151.449143][ T8499] loop2: detected capacity change from 0 to 512 [ 151.578743][ T8499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.688849][ T8510] loop1: detected capacity change from 0 to 64 [ 151.711082][ T8510] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 151.748690][ T8499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.778304][ T8499] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.833166][ T5844] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.902152][ T8522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1087'. [ 151.999328][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.082884][ T5953] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 152.240694][ T8532] loop2: detected capacity change from 0 to 512 [ 152.254146][ T5953] usb 5-1: Using ep0 maxpacket: 16 [ 152.315346][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.330378][ T5953] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 152.382823][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.401590][ T8532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.472837][ T8544] loop0: detected capacity change from 0 to 1024 [ 152.484104][ T8532] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.496172][ T5953] usb 5-1: config 0 descriptor?? [ 152.557427][ T5953] gspca_main: spca501-2.14.0 probing 0000:0000 [ 152.689571][ T8532] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 152.725906][ T8532] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 152.744271][ T8532] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1091: Failed to acquire dquot type 0 [ 152.926053][ T5953] gspca_spca501: reg write: error -71 [ 152.932702][ T5953] spca501 5-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 152.956087][ T5953] spca501 5-1:0.0: probe with driver spca501 failed with error -22 [ 153.003357][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.028516][ T8550] loop5: detected capacity change from 0 to 4096 [ 153.038031][ T5953] usb 5-1: USB disconnect, device number 8 [ 153.093149][ T8550] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 153.204348][ T8560] loop0: detected capacity change from 0 to 256 [ 153.211544][ T8560] exfat: Deprecated parameter 'namecase' [ 153.294250][ T8562] loop3: detected capacity change from 0 to 512 [ 153.299056][ T8560] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 153.351631][ T8562] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 153.409049][ T8550] ntfs3(loop5): Failed to load $Extend (-22). [ 153.422506][ T8550] ntfs3(loop5): Failed to initialize $Extend. [ 153.434132][ T8562] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 153.593218][ T8562] EXT4-fs (loop3): 1 truncate cleaned up [ 153.599849][ T8562] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.721507][ T8562] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.1106: corrupted in-inode xattr: overlapping e_value [ 153.768619][ T8562] EXT4-fs (loop3): Remounting filesystem read-only [ 153.793674][ T8562] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1772: inode #15: comm syz.3.1106: unable to update i_inline_off [ 154.043027][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.441682][ T29] audit: type=1326 audit(1731318239.707:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042917e719 code=0x7ffc0000 [ 154.631462][ T8623] loop3: detected capacity change from 0 to 1024 [ 154.632003][ T29] audit: type=1326 audit(1731318239.897:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f042917e719 code=0x7ffc0000 [ 154.695308][ T8625] loop1: detected capacity change from 0 to 24 [ 154.701138][ T29] audit: type=1326 audit(1731318239.897:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042917e719 code=0x7ffc0000 [ 154.702251][ T8625] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 154.775404][ T29] audit: type=1326 audit(1731318239.897:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8610 comm="syz.2.1128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042917e719 code=0x7ffc0000 [ 154.781005][ T8623] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.817173][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'. [ 154.822457][ T8631] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 154.847711][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1137'. [ 154.859928][ T8625] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 154.867979][ T5953] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 155.032905][ T5953] usb 5-1: Using ep0 maxpacket: 8 [ 155.039961][ T5953] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 155.051645][ T5953] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.101969][ T8635] loop2: detected capacity change from 0 to 1024 [ 155.125235][ T5953] usb 5-1: config 0 has no interface number 0 [ 155.150549][ T5953] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0x3E, changing to 0xE [ 155.208877][ T5953] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 155.242111][ T5953] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 155.333487][ T5953] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.367445][ T5953] usb 5-1: config 0 interface 52 has no altsetting 0 [ 155.374355][ T5953] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 155.383736][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.405711][ T5953] usb 5-1: config 0 descriptor?? [ 155.763807][ T8657] netlink: 'syz.5.1150': attribute type 16 has an invalid length. [ 155.924973][ T25] usb 5-1: USB disconnect, device number 9 [ 156.250352][ T8669] loop5: detected capacity change from 0 to 4096 [ 156.531167][ T8681] loop3: detected capacity change from 0 to 512 [ 156.611698][ T8681] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.1163: iget: bad i_size value: -2594073385365405596 [ 156.711827][ T8661] loop1: detected capacity change from 0 to 32768 [ 156.730256][ T8681] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.1163: couldn't read orphan inode 17 (err -117) [ 156.753872][ T8689] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.1167'. [ 156.776176][ T8681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.886198][ T8681] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.1163: Logical block already allocated [ 156.947583][ T8694] loop5: detected capacity change from 0 to 2048 [ 157.143549][ T8703] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.177964][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.376723][ T8713] loop0: detected capacity change from 0 to 2048 [ 157.407807][ T8713] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.451975][ T8716] loop4: detected capacity change from 0 to 512 [ 157.473046][ T8716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.479300][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1181'. [ 157.589449][ T8716] EXT4-fs (loop4): orphan cleanup on readonly fs [ 157.701639][ T8716] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1180: bg 0: block 248: padding at end of block bitmap is not set [ 157.860159][ T8716] Quota error (device loop4): write_blk: dquota write failed [ 157.941561][ T8716] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 158.003274][ T8716] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.1180: Failed to acquire dquot type 1 [ 158.062541][ T8716] EXT4-fs (loop4): 1 truncate cleaned up [ 158.241787][ T8716] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.327100][ T8743] netlink: 'syz.0.1191': attribute type 10 has an invalid length. [ 158.359792][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1191'. [ 158.403796][ T8743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.419749][ T8716] ext4: Unexpected value for 'quota' [ 158.479943][ T8725] loop5: detected capacity change from 0 to 32768 [ 158.590647][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.778172][ T8764] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1203'. [ 158.912057][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1205'. [ 159.043289][ T5898] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 159.232715][ T5898] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.260530][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.268990][ T5898] usb 2-1: Product: syz [ 159.273344][ T5898] usb 2-1: Manufacturer: syz [ 159.278744][ T5898] usb 2-1: SerialNumber: syz [ 159.320525][ T5898] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.354651][ T963] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.381260][ T8788] loop2: detected capacity change from 0 to 1024 [ 159.576497][ T5898] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.737409][ T8794] loop0: detected capacity change from 0 to 4096 [ 159.815481][ T3503] hfsplus: b-tree write err: -5, ino 4 [ 159.882586][ T25] usb 2-1: USB disconnect, device number 4 [ 159.892370][ T8800] loop3: detected capacity change from 0 to 256 [ 159.912933][ T5898] usb 5-1: Using ep0 maxpacket: 16 [ 159.922118][ T8800] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 159.989483][ T8800] befs: Unrecognized mount option "umask=00000000000000000000005" or missing value [ 160.043936][ T8804] loop5: detected capacity change from 0 to 4096 [ 160.051196][ T8800] befs: (nullb0): cannot parse mount options [ 160.106909][ T5898] usb 5-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=46.8b [ 160.116304][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.163279][ T5898] usb 5-1: Product: syz [ 160.178399][ T8807] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.183810][ T5898] usb 5-1: Manufacturer: syz [ 160.214837][ T5898] usb 5-1: SerialNumber: syz [ 160.231686][ T5898] usb 5-1: config 0 descriptor?? [ 160.444894][ T5840] Bluetooth: hci1: unexpected cc 0x0c1a length: 3 > 1 [ 160.507350][ T963] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 160.520426][ T963] ath9k_htc: Failed to initialize the device [ 160.545940][ T25] usb 2-1: ath9k_htc: USB layer deinitialized [ 160.634545][ T8824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.775281][ T966] usb 5-1: USB disconnect, device number 10 [ 160.781755][ T966] f81534a_ctrl 5-1:0.0: failed to set register 0x116: -19 [ 160.818790][ T966] f81534a_ctrl 5-1:0.0: failed to enable ports: -19 [ 161.021087][ T8841] netlink: 766 bytes leftover after parsing attributes in process `syz.5.1239'. [ 161.567266][ T8870] xt_TPROXY: Can be used only with -p tcp or -p udp [ 162.115539][ T8886] loop4: detected capacity change from 0 to 32768 [ 162.202232][ T8886] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1260 (8886) [ 162.239911][ T8886] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 162.327218][ T8886] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 162.371838][ T8905] openvswitch: netlink: Message has 1 unknown bytes. [ 162.379131][ T8905] openvswitch: netlink: Actions may not be safe on all matching packets [ 162.390455][ T8886] BTRFS info (device loop4): disk space caching is enabled [ 162.505768][ T8886] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 162.686634][ T8921] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1275'. [ 162.932294][ T8886] BTRFS info (device loop4): rebuilding free space tree [ 162.957138][ T966] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.171768][ T8886] BTRFS info (device loop4): disabling free space tree [ 163.182982][ T8886] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 163.210105][ T8886] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 163.263000][ T8952] netlink: 'syz.5.1282': attribute type 2 has an invalid length. [ 163.265526][ T8955] loop2: detected capacity change from 0 to 256 [ 163.283372][ T966] usb 2-1: Using ep0 maxpacket: 32 [ 163.289866][ T8952] : entered promiscuous mode [ 163.324460][ T8955] exfat: Deprecated parameter 'utf8' [ 163.329984][ T8955] exfat: Deprecated parameter 'utf8' [ 163.350473][ T966] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 163.358969][ T8886] BTRFS info (device loop4): balance: start -f -sprofiles=system|metadata|single|raid0|raid1|dup|raid10|raid5|raid6|raid1c3|raid1c4|0xfffefffffffff800,devid=0,limit=5,limit=5..0,stripes=6..255 [ 163.373403][ T966] usb 2-1: config 0 has no interface number 0 [ 163.390059][ T966] usb 2-1: config 0 interface 12 has no altsetting 0 [ 163.433210][ T8955] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 163.434946][ T966] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 163.460635][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.463604][ T8959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1286'. [ 163.469340][ T8886] BTRFS info (device loop4): balance: ended with status: 0 [ 163.493156][ T966] usb 2-1: Product: syz [ 163.500490][ T966] usb 2-1: Manufacturer: syz [ 163.547151][ T966] usb 2-1: SerialNumber: syz [ 163.577096][ T966] usb 2-1: config 0 descriptor?? [ 163.724361][ T5841] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 163.917625][ T8968] netlink: 'syz.3.1291': attribute type 1 has an invalid length. [ 164.034370][ T966] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 164.061366][ T966] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 164.101839][ T966] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 164.134843][ T966] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 164.178850][ T966] usb 2-1: USB disconnect, device number 5 [ 164.505029][ T5840] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 164.522181][ T5840] Bluetooth: hci1: Injecting HCI hardware error event [ 164.531741][ T5840] Bluetooth: hci1: hardware error 0x00 [ 164.593359][ T8992] usb usb8: usbfs: process 8992 (syz.4.1302) did not claim interface 3 before use [ 164.744253][ T8998] loop4: detected capacity change from 0 to 256 [ 164.857279][ T9005] loop0: detected capacity change from 0 to 16 [ 164.882105][ T9005] erofs: (device loop0): mounted with root inode @ nid 36. [ 165.268703][ T9019] loop0: detected capacity change from 0 to 1024 [ 165.594524][ T9039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1321'. [ 165.613051][ T9038] netlink: 'syz.1.1324': attribute type 11 has an invalid length. [ 165.617131][ T5898] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.734566][ T9042] bridge0: entered allmulticast mode [ 165.740688][ T9042] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 165.815005][ T5898] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.853610][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.884593][ T29] audit: type=1326 audit(1731318251.147:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9046 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8757e719 code=0x7ffc0000 [ 165.908318][ T5898] usb 1-1: too many endpoints for config 1 interface 0 altsetting 245: 148, using maximum allowed: 30 [ 165.960827][ T5898] usb 1-1: config 1 interface 0 altsetting 245 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 166.000972][ T29] audit: type=1326 audit(1731318251.147:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9046 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8757e719 code=0x7ffc0000 [ 166.003269][ T5898] usb 1-1: config 1 interface 0 has no altsetting 0 [ 166.092416][ T9051] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 166.102456][ T29] audit: type=1326 audit(1731318251.157:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9046 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f9c8757e719 code=0x7ffc0000 [ 166.125333][ T5898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 166.151659][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.193322][ T5898] usb 1-1: Product: syz [ 166.209329][ T29] audit: type=1326 audit(1731318251.157:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9046 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8757e719 code=0x7ffc0000 [ 166.213120][ T5898] usb 1-1: Manufacturer: syz [ 166.304190][ T5898] usb 1-1: SerialNumber: syz [ 166.349424][ T29] audit: type=1326 audit(1731318251.157:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9046 comm="syz.3.1328" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c8757e719 code=0x7ffc0000 [ 166.659281][ T9024] loop4: detected capacity change from 0 to 32768 [ 166.703783][ T9024] XFS: attr2 mount option is deprecated. [ 166.772172][ T9070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.776595][ T9060] loop2: detected capacity change from 0 to 32768 [ 166.834736][ T9077] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1341'. [ 166.927198][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 166.947531][ T5898] cdc_ether 1-1:1.0: skipping garbage [ 166.953664][ T5898] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 167.041728][ T5898] usb 1-1: USB disconnect, device number 8 [ 167.065537][ T9024] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.470830][ T9107] loop1: detected capacity change from 0 to 256 [ 167.499849][ T9060] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 167.678914][ T9024] XFS (loop4): Ending clean mount [ 167.726762][ T9060] XFS (loop2): Ending clean mount [ 167.735950][ T9060] XFS (loop2): Quotacheck needed: Please wait. [ 167.751776][ T9024] XFS (loop4): Quotacheck needed: Please wait. [ 167.841286][ T9125] netlink: 'syz.0.1360': attribute type 2 has an invalid length. [ 167.863410][ T9060] XFS (loop2): Quotacheck: Done. [ 167.906602][ T9125] netlink: 'syz.0.1360': attribute type 1 has an invalid length. [ 168.106522][ T9024] XFS (loop4): Quotacheck: Done. [ 168.328890][ T5839] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 168.355067][ T5841] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.572998][ T5899] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 168.702548][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1374'. [ 168.722222][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1374'. [ 168.758527][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1374'. [ 168.784693][ T5899] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 168.804542][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 168.834127][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 168.871023][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 168.963189][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 168.991028][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 169.006571][ T9158] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1365'. [ 169.025380][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 169.059703][ T9158] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1365'. [ 169.061777][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 169.101276][ T5899] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 169.122863][ T5899] usb 4-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 169.140023][ T9166] netlink: 'syz.0.1378': attribute type 1 has an invalid length. [ 169.178643][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.242050][ T9168] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 169.275825][ T5899] pwc: Logitech QuickCam detected (reserved ID). [ 169.282289][ T29] audit: type=1326 audit(1731318254.547:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a37e719 code=0x7ffc0000 [ 169.308178][ T5899] pwc: Warning: more than 1 configuration available. [ 169.346199][ T29] audit: type=1326 audit(1731318254.547:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a37e719 code=0x7ffc0000 [ 169.423445][ T9174] syz.2.1382 uses obsolete (PF_INET,SOCK_PACKET) [ 169.460448][ T29] audit: type=1326 audit(1731318254.567:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fb54a37e719 code=0x7ffc0000 [ 169.534118][ T29] audit: type=1326 audit(1731318254.567:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a37e719 code=0x7ffc0000 [ 169.662923][ T29] audit: type=1326 audit(1731318254.567:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9169 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54a37e719 code=0x7ffc0000 [ 169.712369][ T5899] pwc: send_video_command error -71 [ 169.723960][ T5899] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 169.762939][ T5899] Philips webcam 4-1:250.0: probe with driver Philips webcam failed with error -71 [ 169.823259][ T5899] usb 4-1: USB disconnect, device number 10 [ 169.890612][ T5898] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 169.964250][ T9184] loop0: detected capacity change from 0 to 8192 [ 170.011549][ T9194] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 170.125448][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 200, setting to 64 [ 170.137438][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.148868][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 64 [ 170.163109][ T966] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 170.190446][ T5898] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 170.231088][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.301767][ T5898] usb 6-1: config 0 descriptor?? [ 170.334173][ T966] usb 2-1: Using ep0 maxpacket: 16 [ 170.336465][ T9180] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 170.353288][ T9180] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 170.380644][ T966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 170.423333][ T966] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 170.482999][ T966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.491061][ T966] usb 2-1: Product: syz [ 170.502827][ T966] usb 2-1: Manufacturer: syz [ 170.507468][ T966] usb 2-1: SerialNumber: syz [ 170.523486][ T966] usb 2-1: config 0 descriptor?? [ 170.665181][ T5840] Bluetooth: hci6: Opcode 0x0c03 failed: -71 [ 170.666769][ T25] usb 6-1: USB disconnect, device number 5 [ 170.833321][ T966] usb 2-1: Unknown endpoint type found, address 0x06 [ 170.840067][ T966] usb 2-1: Not enough endpoints found in device, aborting! [ 171.041325][ T966] usb 2-1: USB disconnect, device number 6 [ 171.453010][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1415'. [ 171.543875][ T9244] loop3: detected capacity change from 0 to 764 [ 171.583529][ T9244] iso9660: Unknown parameter 'ÿÿÿÿÿ' [ 171.635700][ T9250] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1419'. [ 171.859770][ T9260] loop5: detected capacity change from 0 to 512 [ 171.866933][ T9260] EXT4-fs: Ignoring removed nobh option [ 172.144527][ T9264] loop0: detected capacity change from 0 to 32768 [ 172.163151][ T966] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 172.243584][ T9260] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.259622][ T9260] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.345618][ T966] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 172.354960][ T966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.369982][ T9260] EXT4-fs error (device loop5): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz.5.1426: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 172.400097][ T9277] loop4: detected capacity change from 0 to 4096 [ 172.435060][ T9277] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 172.443004][ T9264] JBD2: Ignoring recovery information on journal [ 172.552959][ T9260] EXT4-fs (loop5): Remounting filesystem read-only [ 172.561587][ T9260] EXT4-fs warning (device loop5): ext4_rename_delete:3733: inode #2: comm syz.5.1426: Deleting old file: nlink 4, error=-117 [ 172.567457][ T9277] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 172.584165][ T5898] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.608421][ T966] usb 2-1: config 0 descriptor?? [ 172.616070][ T9264] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 172.625997][ T966] usb 2-1: selecting invalid altsetting 1 [ 172.631811][ T966] flexcop_usb: set interface failed. [ 172.637569][ T966] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 172.735549][ T5844] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 172.753298][ T5898] usb 4-1: Using ep0 maxpacket: 16 [ 172.796963][ T5898] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 172.812858][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.873712][ T5898] usb 4-1: Product: syz [ 172.888197][ T5898] usb 4-1: Manufacturer: syz [ 172.918678][ T9264] syz.0.1424 (9264) used greatest stack depth: 17048 bytes left [ 172.919744][ T5904] usb 2-1: USB disconnect, device number 7 [ 172.943724][ T5898] usb 4-1: SerialNumber: syz [ 172.966474][ T5898] r8152-cfgselector 4-1: Unknown version 0x0000 [ 172.977664][ T5898] r8152-cfgselector 4-1: config 0 descriptor?? [ 172.996865][ T5850] ocfs2: Unmounting device (7,0) on (node local) [ 173.132918][ T963] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 173.337001][ T963] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.356875][ T963] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.382627][ T963] usb 5-1: Product: syz [ 173.396802][ T963] usb 5-1: Manufacturer: syz [ 173.421912][ T963] usb 5-1: SerialNumber: syz [ 173.431062][ T25] r8152-cfgselector 4-1: USB disconnect, device number 11 [ 173.447719][ T963] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.477138][ T9308] cgroup: Bad value for 'name' [ 173.495255][ T5845] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 173.945159][ T9325] loop0: detected capacity change from 0 to 256 [ 174.044742][ T9325] FAT-fs (loop0): Directory bread(block 64) failed [ 174.102953][ T9325] FAT-fs (loop0): Directory bread(block 65) failed [ 174.142339][ T9327] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.161003][ T9325] FAT-fs (loop0): Directory bread(block 66) failed [ 174.193094][ T9325] FAT-fs (loop0): Directory bread(block 67) failed [ 174.236537][ T9325] FAT-fs (loop0): Directory bread(block 68) failed [ 174.312513][ T9325] FAT-fs (loop0): Directory bread(block 69) failed [ 174.411768][ T9325] FAT-fs (loop0): Directory bread(block 70) failed [ 174.581083][ T9325] FAT-fs (loop0): Directory bread(block 71) failed [ 174.598365][ T9325] FAT-fs (loop0): Directory bread(block 72) failed [ 175.081908][ T9348] loop2: detected capacity change from 0 to 512 [ 175.306622][ T9325] FAT-fs (loop0): Directory bread(block 73) failed [ 175.331285][ T9348] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 175.403386][ T9348] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 175.412378][ T9348] System zones: 0-1, 15-15, 18-18, 34-34 [ 175.508457][ T9348] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.575644][ T9348] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 175.644058][ T9348] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 175.765488][ T9348] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 175.876397][ T9348] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.1463: bad orphan inode 16 [ 175.943044][ T9348] ext4_test_bit(bit=15, block=18) = 1 [ 176.007445][ T9348] is_bad_inode(inode)=0 [ 176.011663][ T9348] NEXT_ORPHAN(inode)=0 [ 176.097093][ T9348] max_ino=32 [ 176.100439][ T9348] i_nlink=2 [ 176.166587][ T9348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 176.404461][ T9366] loop4: detected capacity change from 0 to 16 [ 176.427171][ T9348] fscrypt (loop2, inode 16): Error -61 getting encryption context [ 176.469030][ T9366] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 176.711671][ T9366] cramfs: Error -3 while decompressing! [ 176.734125][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.792953][ T9366] cramfs: ffffffff9a50ca08(27)->ffff88805c71b000(4096) [ 176.799987][ T9366] cramfs: Error -3 while decompressing! [ 176.908146][ T9366] cramfs: ffffffff9a50ca08(27)->ffff88805c71b000(4096) [ 176.954942][ T29] audit: type=1800 audit(1731318262.227:62): pid=9366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1471" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 177.697015][ T9385] ɶƣ0GC¦: entered promiscuous mode [ 177.876846][ T9354] loop1: detected capacity change from 0 to 32768 [ 178.006797][ T9354] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 178.127297][ T9354] JBD2: Ignoring recovery information on journal [ 178.383710][ T9354] JBD2: journal reset failed [ 178.451949][ T9354] (syz.1.1465,9354,1):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 178.540425][ T9354] (syz.1.1465,9354,1):ocfs2_check_volume:2423 ERROR: ocfs2 journal load failed! -4 [ 180.330428][ T9432] loop2: detected capacity change from 0 to 512 [ 180.423981][ T9432] EXT4-fs (loop2): orphan cleanup on readonly fs [ 180.461341][ T9437] loop0: detected capacity change from 0 to 256 [ 180.502427][ T9432] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 180.600533][ T9432] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 180.696140][ T9432] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.1503: Failed to acquire dquot type 1 [ 180.742079][ T9437] FAT-fs (loop0): Directory bread(block 64) failed [ 180.794476][ T9437] FAT-fs (loop0): Directory bread(block 65) failed [ 180.801173][ T9437] FAT-fs (loop0): Directory bread(block 66) failed [ 180.842090][ T9432] EXT4-fs (loop2): 1 truncate cleaned up [ 180.899215][ T9437] FAT-fs (loop0): Directory bread(block 67) failed [ 180.953061][ T9437] FAT-fs (loop0): Directory bread(block 68) failed [ 181.012085][ T9437] FAT-fs (loop0): Directory bread(block 69) failed [ 181.063109][ T9437] FAT-fs (loop0): Directory bread(block 70) failed [ 181.069724][ T9437] FAT-fs (loop0): Directory bread(block 71) failed [ 181.173153][ T9437] FAT-fs (loop0): Directory bread(block 72) failed [ 181.179809][ T9437] FAT-fs (loop0): Directory bread(block 73) failed [ 181.513554][ T9452] xt_TPROXY: Can be used only with -p tcp or -p udp [ 181.604681][ T9454] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 181.672955][ T9454] overlayfs: missing 'lowerdir' [ 182.667321][ T9432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 182.704542][ T9469] geneve3: entered promiscuous mode [ 182.749581][ T9470] xt_hashlimit: max too large, truncated to 1048576 [ 182.782949][ T9469] geneve3: entered allmulticast mode [ 182.806324][ T9470] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 182.835450][ T9432] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 182.893536][ C0] sched: DL replenish lagged too much [ 183.065821][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.449848][ T9480] loop4: detected capacity change from 0 to 8 [ 183.777957][ T9480] SQUASHFS error: Failed to read block 0x6e6: -5 [ 183.834497][ T9480] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 183.912987][ T9480] SQUASHFS error: Unable to read directory block [631:26] [ 184.578127][ T9460] loop1: detected capacity change from 0 to 32768 [ 185.173875][ T9494] vivid-000: disconnect [ 185.211337][ T9493] vivid-000: reconnect [ 186.026689][ T9479] loop2: detected capacity change from 0 to 32768 [ 186.158182][ T9479] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.247179][ T9484] loop0: detected capacity change from 0 to 32768 [ 186.382931][ T966] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 186.634172][ T9479] XFS (loop2): Ending clean mount [ 186.663580][ T966] usb 4-1: Using ep0 maxpacket: 32 [ 186.723960][ T966] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=21.29 [ 186.782903][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.836021][ T966] usb 4-1: Product: syz [ 186.840245][ T966] usb 4-1: Manufacturer: syz [ 186.863046][ T5839] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 186.901936][ T966] usb 4-1: SerialNumber: syz [ 186.973899][ T966] usb 4-1: config 0 descriptor?? [ 187.063022][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'. [ 187.228928][ T5904] usb 4-1: USB disconnect, device number 12 [ 187.621622][ T9520] loop1: detected capacity change from 0 to 2048 [ 187.787548][ T9520] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.454170][ T9528] team0: Port device team_slave_0 removed [ 188.536065][ T9528] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 189.119934][ T29] audit: type=1326 audit(1731318274.387:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9542 comm="syz.3.1554" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c8757e719 code=0x0 [ 189.395185][ T9540] loop0: detected capacity change from 0 to 4096 [ 189.547308][ T9551] loop3: detected capacity change from 0 to 128 [ 189.568054][ T9540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.623660][ T9556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1559'. [ 190.009405][ T9555] loop1: detected capacity change from 0 to 4096 [ 190.043989][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.172612][ T9555] ntfs3(loop1): It is recommened to use chkdsk. [ 190.284582][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 190.350812][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 190.423216][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 190.509859][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00 [ 190.576381][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00 [ 190.613669][ T9568] netlink: 'syz.0.1563': attribute type 1 has an invalid length. [ 190.671651][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00 [ 190.737766][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00 [ 190.814435][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00 [ 190.891031][ T9555] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00 [ 191.116148][ T9577] netlink: 'syz.0.1569': attribute type 2 has an invalid length. [ 193.553153][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 193.592681][ T9579] loop3: detected capacity change from 0 to 32768 [ 193.643285][ T9579] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1570 (9579) [ 193.758297][ T9579] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 193.823570][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.829937][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.840810][ T25] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 193.900908][ T9579] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 193.925351][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.995799][ T25] usb 1-1: Product: syz [ 194.043503][ T25] usb 1-1: Manufacturer: syz [ 194.121560][ T25] usb 1-1: SerialNumber: syz [ 194.183687][ T25] r8152-cfgselector 1-1: Unknown version 0x0000 [ 194.220884][ T9579] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 194.253148][ T25] r8152-cfgselector 1-1: config 0 descriptor?? [ 194.308793][ T9587] loop1: detected capacity change from 0 to 32768 [ 194.376928][ T9579] BTRFS error (device loop3): open_ctree failed [ 194.483145][ T9587] [ 194.483145][ T9587] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 194.483145][ T9587] [ 194.710380][ T9587] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 194.710380][ T9587] [ 194.910622][ T25] r8152-cfgselector 1-1: USB disconnect, device number 9 [ 195.122446][ T33] read_mapping_page failed! [ 195.177429][ T33] ERROR: (device loop1): txCommit: [ 195.177429][ T33] [ 195.244466][ T33] jfs_write_inode: jfs_commit_inode failed! [ 195.310301][ T5836] [ 195.310301][ T5836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.310301][ T5836] [ 195.421547][ T966] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 195.468951][ T5836] [ 195.468951][ T5836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 195.468951][ T5836] [ 195.709931][ T966] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 195.791897][ T966] usb 4-1: config 0 has no interface number 0 [ 195.879711][ T966] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 195.951445][ T5145] Bluetooth: hci5: command 0x0405 tx timeout [ 195.957669][ T5145] Bluetooth: hci4: command 0x0406 tx timeout [ 195.965798][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 195.972886][ T5145] Bluetooth: hci0: command 0x0406 tx timeout [ 195.978924][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 196.071078][ T966] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 196.217760][ T9644] loop0: detected capacity change from 0 to 1024 [ 196.224537][ T966] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 196.339329][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.370005][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.389551][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.398441][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.413684][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.475646][ T5849] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 196.483384][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.493604][ T966] usb 4-1: Product: syz [ 196.525182][ T9644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.561781][ T966] usb 4-1: Manufacturer: syz [ 196.576107][ T9647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.633836][ T966] usb 4-1: SerialNumber: syz [ 196.671010][ T966] usb 4-1: config 0 descriptor?? [ 196.721044][ T9647] bond0: (slave rose0): Enslaving as an active interface with an up link [ 197.023611][ T966] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 197.114125][ T966] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 197.168761][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.293106][ T966] usb 4-1: USB disconnect, device number 13 [ 197.906508][ T9667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 197.964677][ T9670] loop1: detected capacity change from 0 to 16 [ 198.012657][ T9670] erofs: (device loop1): mounted with root inode @ nid 36. [ 198.146691][ T9670] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36 [ 198.585886][ T5849] Bluetooth: hci6: command tx timeout [ 198.687221][ T9682] netlink: 'syz.0.1607': attribute type 7 has an invalid length. [ 198.787664][ T9649] chnl_net:caif_netlink_parms(): no params data found [ 199.455318][ T9695] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1612'. [ 200.084428][ T9649] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.091605][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.238383][ T9649] bridge_slave_0: entered allmulticast mode [ 200.334362][ T9649] bridge_slave_0: entered promiscuous mode [ 200.455962][ T9649] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.506142][ T9712] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1618'. [ 200.553044][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.606413][ T9649] bridge_slave_1: entered allmulticast mode [ 200.623129][ T9712] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 200.675521][ T5849] Bluetooth: hci6: command tx timeout [ 200.703931][ T9649] bridge_slave_1: entered promiscuous mode [ 201.209952][ T9649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.346216][ T9649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.767551][ T9729] loop4: detected capacity change from 0 to 2048 [ 201.906874][ T9649] team0: Port device team_slave_0 added [ 201.913229][ T9729] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 202.034175][ T9649] team0: Port device team_slave_1 added [ 202.439223][ T29] audit: type=1326 audit(1731318287.707:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9737 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c9d7e719 code=0x7ffc0000 [ 202.648817][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.704528][ T29] audit: type=1326 audit(1731318287.707:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9737 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c9d7e719 code=0x7ffc0000 [ 202.762916][ T5849] Bluetooth: hci6: command tx timeout [ 202.792913][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.961731][ T29] audit: type=1326 audit(1731318287.747:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9737 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f77c9d7e719 code=0x7ffc0000 [ 203.080175][ T9649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.249019][ T29] audit: type=1326 audit(1731318287.747:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9737 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c9d7e719 code=0x7ffc0000 [ 203.276791][ T9649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.347171][ T9649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.532881][ T29] audit: type=1326 audit(1731318287.747:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9737 comm="syz.1.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77c9d7e719 code=0x7ffc0000 [ 203.576953][ T9749] loop4: detected capacity change from 0 to 1024 [ 203.654796][ T9649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.314923][ T9759] loop1: detected capacity change from 0 to 256 [ 204.413860][ T9649] hsr_slave_0: entered promiscuous mode [ 204.503809][ T9649] hsr_slave_1: entered promiscuous mode [ 204.580738][ T9649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.692255][ T9649] Cannot create hsr debugfs directory [ 204.823101][ T5849] Bluetooth: hci6: command tx timeout [ 205.200918][ T9772] loop0: detected capacity change from 0 to 16 [ 205.373779][ T9772] erofs: (device loop0): mounted with root inode @ nid 36. [ 205.390149][ T9774] loop1: detected capacity change from 0 to 512 [ 205.549884][ T9774] EXT4-fs: Ignoring removed oldalloc option [ 205.713741][ T9774] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 205.840580][ T9774] EXT4-fs (loop1): 1 truncate cleaned up [ 205.872017][ T9778] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 205.940450][ T9774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.963698][ T9778] /dev/nullb0: Can't open blockdev [ 206.008924][ T9780] loop4: detected capacity change from 0 to 2048 [ 206.179491][ T9780] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 206.417542][ T9791] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 206.428989][ T9780] syz.4.1643: attempt to access beyond end of device [ 206.428989][ T9780] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 206.574691][ T5836] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.900082][ T9649] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 207.135158][ T9649] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 207.213825][ T9804] kernel read not supported for file /  (pid: 9804 comm: syz.2.1650) [ 207.359630][ T9805] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1651'. [ 207.368868][ T29] audit: type=1800 audit(1731318292.627:69): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1650" name=200120 dev="mqueue" ino=20698 res=0 errno=0 [ 207.427760][ T9649] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 207.612180][ T9649] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.446110][ T9816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1654'. [ 209.237151][ T9649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.425084][ T9649] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.616301][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.623519][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.727930][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.735129][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.823518][ T9841] xt_TCPMSS: Only works on TCP SYN packets [ 211.171083][ T9849] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.180358][ T9866] tmpfs: Bad value for 'mpol' [ 211.233318][ T9849] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 211.387934][ T9849] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.428561][ T9871] loop1: detected capacity change from 0 to 8 [ 211.463095][ T9849] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 211.590784][ T9871] SQUASHFS error: Failed to read block 0x4e8: -5 [ 211.666046][ T29] audit: type=1800 audit(1731318296.937:70): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1677" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 211.714095][ T9849] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.793228][ T9849] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 211.826659][ T9649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.918010][ T9849] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.986618][ T9849] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 212.161908][ T9849] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 212.215920][ T9849] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 212.493045][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 212.724467][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 212.779827][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 212.867089][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.919692][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.009488][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 213.103034][ T25] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 213.192052][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 213.253079][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.317933][ T25] usb 1-1: config 0 descriptor?? [ 213.344426][ T9880] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 214.378181][ T9849] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 214.434070][ T9849] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 214.587134][ T9649] veth0_vlan: entered promiscuous mode [ 214.777191][ T9649] veth1_vlan: entered promiscuous mode [ 215.079354][ T25] usb 1-1: USB disconnect, device number 10 [ 215.087177][ T5849] Bluetooth: hci7: Opcode 0x0c03 failed: -19 [ 215.362070][ T9649] veth0_macvtap: entered promiscuous mode [ 215.456885][ T9917] loop2: detected capacity change from 0 to 512 [ 215.471889][ T9649] veth1_macvtap: entered promiscuous mode [ 215.589917][ T9917] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1689: corrupted in-inode xattr: invalid ea_ino [ 215.698354][ T9917] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.1689: couldn't read orphan inode 15 (err -117) [ 215.833964][ T9917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.980447][ T9917] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz.2.1689: deleted inode referenced: 15 [ 216.014559][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.107174][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.179629][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.231907][ T9928] xt_hashlimit: size too large, truncated to 1048576 [ 216.276382][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.298412][ T9928] xt_hashlimit: overflow, try lower: 0/0 [ 216.349766][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.408706][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.463856][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.518504][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.584681][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.651494][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.689496][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.740768][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.797883][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.808935][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.018515][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.115929][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.210887][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.296445][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.385159][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.453619][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.549936][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.637693][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.688626][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.762208][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.842611][ T9649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.921585][ T9649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.019704][ T9649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.145714][ T9649] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.282356][ T9649] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.370347][ T9649] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.462896][ T9649] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.478184][ T9964] loop2: detected capacity change from 0 to 512 [ 218.630868][ T9964] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 218.712996][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1704'. [ 218.733232][ T9964] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 218.806757][ T9967] xfrm1: entered promiscuous mode [ 218.812382][ T9967] xfrm1: entered allmulticast mode [ 218.828235][ T9964] EXT4-fs (loop2): 1 truncate cleaned up [ 218.905304][ T9964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.192032][ T9964] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 219.440125][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.507620][ T9979] loop4: detected capacity change from 0 to 16 [ 219.554450][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.604375][ T9979] erofs: (device loop4): mounted with root inode @ nid 36. [ 219.683979][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.772971][ T9983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1709'. [ 219.892988][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.927401][ T9985] loop1: detected capacity change from 0 to 256 [ 219.968293][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.427504][ T9985] FAT-fs (loop1): Directory bread(block 64) failed [ 220.475865][ T9985] FAT-fs (loop1): Directory bread(block 65) failed [ 220.485216][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1712'. [ 220.527808][ T9985] FAT-fs (loop1): Directory bread(block 66) failed [ 220.634763][ T9985] FAT-fs (loop1): Directory bread(block 67) failed [ 220.641459][ T9985] FAT-fs (loop1): Directory bread(block 68) failed [ 220.808363][ T9985] FAT-fs (loop1): Directory bread(block 69) failed [ 220.903793][ T9985] FAT-fs (loop1): Directory bread(block 70) failed [ 220.910392][ T9985] FAT-fs (loop1): Directory bread(block 71) failed [ 221.043210][ T9985] FAT-fs (loop1): Directory bread(block 72) failed [ 221.049883][ T9985] FAT-fs (loop1): Directory bread(block 73) failed [ 221.291576][T10002] netlink: 'syz.0.1715': attribute type 3 has an invalid length. [ 222.596553][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 222.831688][T10028] loop6: detected capacity change from 0 to 2048 [ 222.854912][T10031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'. [ 222.969563][T10031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'. [ 223.018295][T10033] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 223.032838][T10028] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.078435][T10031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1727'. [ 223.120516][T10033] netlink: 'syz.4.1728': attribute type 3 has an invalid length. [ 223.199366][T10033] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1728'. [ 223.220582][T10038] netlink: 'syz.2.1730': attribute type 1 has an invalid length. [ 223.315616][T10040] netlink: 'syz.0.1729': attribute type 11 has an invalid length. [ 223.332980][T10038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1730'. [ 223.919807][T10047] loop0: detected capacity change from 0 to 512 [ 224.063183][T10047] EXT4-fs: Ignoring removed orlov option [ 224.069399][T10047] EXT4-fs: Ignoring removed i_version option [ 224.253900][T10047] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.1733: Attempting to read directory block (0) that is past i_size (256) [ 224.493862][T10047] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 224.584093][T10047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.859769][T10047] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1733: bg 0: block 255: padding at end of block bitmap is not set [ 225.184990][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.168450][T10087] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1747'. [ 226.917254][T10102] lo speed is unknown, defaulting to 1000 [ 226.957885][T10051] loop2: detected capacity change from 0 to 32768 [ 226.972953][T10102] lo speed is unknown, defaulting to 1000 [ 227.006262][T10102] lo speed is unknown, defaulting to 1000 [ 227.197280][T10102] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 227.401037][T10109] netlink: 'syz.6.1756': attribute type 25 has an invalid length. [ 227.487483][T10109] netlink: 'syz.6.1756': attribute type 44 has an invalid length. [ 227.583176][T10102] lo speed is unknown, defaulting to 1000 [ 227.595810][T10102] lo speed is unknown, defaulting to 1000 [ 227.769106][T10102] lo speed is unknown, defaulting to 1000 [ 227.838115][T10102] lo speed is unknown, defaulting to 1000 [ 227.934324][T10102] lo speed is unknown, defaulting to 1000 [ 227.941203][T10102] lo speed is unknown, defaulting to 1000 [ 228.091154][T10102] lo speed is unknown, defaulting to 1000 [ 229.189031][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1768'. [ 229.974143][T10153] netlink: zone id is out of range [ 230.492095][T10160] netlink: 'syz.3.1777': attribute type 3 has an invalid length. [ 230.585219][T10160] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1777'. [ 230.786879][T10162] loop0: detected capacity change from 0 to 8 [ 231.061592][T10125] loop1: detected capacity change from 0 to 32768 [ 231.146157][T10125] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1761 (10125) [ 231.229054][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1780'. [ 231.530360][T10132] loop2: detected capacity change from 0 to 32768 [ 232.543182][T10187] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 233.070557][T10196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1795'. [ 233.134549][T10197] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1796'. [ 233.272967][T10197] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 233.281296][T10197] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 233.427399][T10202] loop0: detected capacity change from 0 to 1024 [ 233.655575][T10202] hfsplus: cannot replace xattr [ 234.876984][T10224] loop4: detected capacity change from 0 to 256 [ 235.003108][T10224] FAT-fs (loop4): Directory bread(block 1285) failed [ 235.606548][T10242] loop6: detected capacity change from 0 to 256 [ 235.770160][T10242] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.923675][T10247] xt_bpf: check failed: parse error [ 236.279573][T10253] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1818'. [ 236.734188][T10260] vcan1: entered promiscuous mode [ 236.739288][T10260] vcan1: entered allmulticast mode [ 237.000663][T10267] loop1: detected capacity change from 0 to 128 [ 237.228090][T10267] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.376823][T10267] ext4 filesystem being mounted at /306/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 237.926089][ T5904] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 238.109164][ T29] audit: type=1326 audit(1731318323.377:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10280 comm="syz.2.1829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f042917e719 code=0x0 [ 238.212879][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 238.258356][ T5904] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 238.337293][ T5904] usb 2-1: config 135 has an invalid descriptor of length 179, skipping remainder of the config [ 238.467067][ T5904] usb 2-1: config 135 has no interface number 0 [ 238.542897][ T5904] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.730138][ T5904] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 238.812896][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.892909][ T5904] usb 2-1: Product: syz [ 238.897141][ T5904] usb 2-1: Manufacturer: syz [ 238.901845][ T5904] usb 2-1: SerialNumber: syz [ 239.165316][T10292] loop0: detected capacity change from 0 to 4096 [ 239.246890][T10292] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 239.329962][ T5904] usb 2-1: USB disconnect, device number 8 [ 239.484613][T10292] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 239.560204][T10292] ntfs3(loop0): Failed to load $Extend (-22). [ 239.623107][T10292] ntfs3(loop0): Failed to initialize $Extend. [ 240.262452][ T5836] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.708949][T10316] loop2: detected capacity change from 0 to 1024 [ 240.852949][T10316] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 241.108749][T10316] hfsplus: filesystem is marked journaled, leaving read-only. [ 241.145778][T10327] loop4: detected capacity change from 0 to 256 [ 241.304168][ T966] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 241.356864][T10327] FAT-fs (loop4): Directory bread(block 64) failed [ 241.424342][T10327] FAT-fs (loop4): Directory bread(block 65) failed [ 241.462994][T10330] netlink: 'syz.6.1852': attribute type 21 has an invalid length. [ 241.496538][T10327] FAT-fs (loop4): Directory bread(block 66) failed [ 241.581734][T10327] FAT-fs (loop4): Directory bread(block 67) failed [ 241.615975][ T966] usb 4-1: Using ep0 maxpacket: 32 [ 241.633429][T10327] FAT-fs (loop4): Directory bread(block 68) failed [ 241.700124][ T966] usb 4-1: unable to get BOS descriptor or descriptor too short [ 241.714065][T10327] FAT-fs (loop4): Directory bread(block 69) failed [ 241.720737][T10327] FAT-fs (loop4): Directory bread(block 70) failed [ 241.766859][ T966] usb 4-1: config 255 has an invalid interface number: 81 but max is 0 [ 241.842860][ T966] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 241.884079][T10327] FAT-fs (loop4): Directory bread(block 71) failed [ 241.890811][T10327] FAT-fs (loop4): Directory bread(block 72) failed [ 241.952495][ T966] usb 4-1: config 255 has no interface number 0 [ 241.985224][T10327] FAT-fs (loop4): Directory bread(block 73) failed [ 242.005351][ T966] usb 4-1: config 255 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 242.122850][ T966] usb 4-1: config 255 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 242.223009][ T966] usb 4-1: config 255 interface 81 has no altsetting 0 [ 242.283477][ T966] usb 4-1: string descriptor 0 read error: -22 [ 242.326434][T10344] loop2: detected capacity change from 0 to 128 [ 242.333102][ T966] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 242.407713][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.490715][T10340] loop6: detected capacity change from 0 to 4096 [ 242.555957][ T966] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:255.81/input/input13 [ 242.587646][T10340] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 242.613041][T10346] loop0: detected capacity change from 0 to 256 [ 242.699986][T10346] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.847893][T10346] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 243.090794][T10340] ntfs3(loop6): failed to convert "c46c" to cp860 [ 243.174839][ T966] usb 4-1: USB disconnect, device number 14 [ 244.167489][T10366] loop2: detected capacity change from 0 to 256 [ 245.051148][T10384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1877'. [ 245.078127][T10386] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1878'. [ 245.161681][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1878'. [ 245.739222][T10398] loop6: detected capacity change from 0 to 8 [ 246.081946][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 246.090612][ T5899] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 246.342986][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 246.381388][T10411] binder: 10410:10411 ioctl c018620c 20000240 returned -22 [ 246.397713][ T25] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 246.407787][ T5899] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 246.463028][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.471296][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.545797][ T25] usb 4-1: Product: syz [ 246.550079][ T25] usb 4-1: Manufacturer: syz [ 246.562841][ T5899] usb 1-1: Product: syz [ 246.602981][ T5899] usb 1-1: Manufacturer: syz [ 246.607653][ T5899] usb 1-1: SerialNumber: syz [ 246.648030][ T25] usb 4-1: SerialNumber: syz [ 246.691956][ T5899] usb 1-1: config 0 descriptor?? [ 246.719860][ T25] r8152-cfgselector 4-1: Unknown version 0x0000 [ 246.775083][ T25] r8152-cfgselector 4-1: config 0 descriptor?? [ 247.016090][ T5899] hso 1-1:0.0: Failed to find BULK IN ep [ 247.116723][ T5899] usb-storage 1-1:0.0: USB Mass Storage device detected [ 247.349140][ T25] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 247.391321][T10426] netlink: 'syz.2.1896': attribute type 1 has an invalid length. [ 247.477365][ T5899] usb 1-1: USB disconnect, device number 11 [ 247.973720][T10434] netlink: 'syz.2.1901': attribute type 21 has an invalid length. [ 248.234435][T10440] netlink: 'syz.1.1903': attribute type 21 has an invalid length. [ 248.386893][T10441] loop0: detected capacity change from 0 to 2048 [ 248.474164][T10444] loop3: detected capacity change from 0 to 512 [ 248.542017][T10441] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 248.611063][T10444] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 248.670399][T10444] EXT4-fs (loop3): orphan cleanup on readonly fs [ 248.747845][T10444] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 248.928299][T10444] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 249.053019][T10444] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1905: bg 0: block 40: padding at end of block bitmap is not set [ 249.224114][T10444] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 249.297572][T10444] EXT4-fs (loop3): 1 truncate cleaned up [ 249.367134][T10444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.408929][T10461] xt_TCPMSS: Only works on TCP SYN packets [ 249.588848][T10463] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1914'. [ 249.608981][T10444] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.1905: bad symlink. [ 249.658632][T10463] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1914'. [ 249.953700][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.110612][T10467] nvme_fabrics: missing parameter 'transport=%s' [ 250.172935][T10467] nvme_fabrics: missing parameter 'nqn=%s' [ 250.514062][T10482] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 250.536682][T10481] netlink: 'syz.3.1919': attribute type 7 has an invalid length. [ 250.773473][T10475] loop1: detected capacity change from 0 to 4096 [ 250.862830][T10475] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 251.181855][T10492] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 251.782195][T10504] netlink: 'syz.4.1934': attribute type 3 has an invalid length. [ 251.869807][T10504] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1934'. [ 252.167711][T10509] loop0: detected capacity change from 0 to 1024 [ 252.434009][T10509] hfsplus: keylen 65060 too large [ 253.078962][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1945'. [ 253.179916][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1945'. [ 253.699748][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1951'. [ 253.806603][T10543] loop4: detected capacity change from 0 to 8 [ 253.814100][T10542] x_tables: duplicate entry at hook 2 [ 253.874136][T10543] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 254.313038][T10543] cramfs: Error -5 while decompressing! [ 254.318664][T10543] cramfs: ffffffff9a50ca08(26)->ffff888058abd000(4096) [ 254.343099][T10552] x_tables: ip_tables: osf match: only valid for protocol 6 [ 254.350951][T10553] process 'syz.1.1957' launched './file0' with NULL argv: empty string added [ 254.436191][T10543] cramfs: Error -3 while decompressing! [ 254.486386][T10543] cramfs: ffffffff9a50ca22(26)->ffff888079761000(4096) [ 254.586236][T10543] cramfs: Error -3 while decompressing! [ 254.662579][T10543] cramfs: ffffffff9a50ca3c(16)->ffff8880588e2000(4096) [ 254.838183][T10543] cramfs: Error -5 while decompressing! [ 254.969187][T10543] cramfs: ffffffff9a50ca08(26)->ffff888058abd000(4096) [ 254.969451][ T29] audit: type=1800 audit(1731318340.237:72): pid=10543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1953" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 255.242743][ C1] vkms_vblank_simulate: vblank timer overrun [ 255.254627][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.254694][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.482970][T10573] netlink: 'syz.2.1968': attribute type 21 has an invalid length. [ 255.483041][T10573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1968'. [ 255.785955][T10580] No such timeout policy "syz0" [ 256.477860][T10592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1977'. [ 257.544368][T10616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1989'. [ 258.710672][T10636] loop4: detected capacity change from 0 to 512 [ 258.912438][T10636] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 259.007751][T10636] EXT4-fs (loop4): 1 truncate cleaned up [ 259.033856][T10642] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 259.070451][T10636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.327993][T10636] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.1999: Logical block already allocated [ 259.446747][ T5899] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 259.463005][T10636] EXT4-fs (loop4): Remounting filesystem read-only [ 259.709603][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.724423][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.779824][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 259.852451][T10607] loop3: detected capacity change from 0 to 32768 [ 259.912837][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.032413][T10607] ERROR: (device loop3): diAllocAG: ipimap->i_size is wrong [ 260.032413][T10607] [ 260.057626][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.146763][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.172387][T10607] ERROR: (device loop3): remounting filesystem as read-only [ 260.231368][T10607] ialloc: diAlloc returned -5! [ 260.273317][ T5899] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 260.395399][T10620] loop0: detected capacity change from 0 to 32768 [ 260.497877][T10620] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1991 (10620) [ 260.573302][ T5899] usb 2-1: USB disconnect, device number 9 [ 263.431362][T10658] loop4: detected capacity change from 0 to 32768 [ 263.551127][T10698] netlink: 'syz.3.2029': attribute type 1 has an invalid length. [ 263.578740][T10658] BTRFS: device /dev/loop4 (7:4) using temp-fsid a8706e18-408a-4f81-ac10-e9bd0ffcddd2 [ 263.641619][T10698] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2029'. [ 263.683714][T10658] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2009 (10658) [ 264.347422][T10667] loop6: detected capacity change from 0 to 32768 [ 264.477228][T10667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2015 (10667) [ 264.551181][ T29] audit: type=1326 audit(1731318349.797:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 264.806689][T10719] loop3: detected capacity change from 0 to 64 [ 264.832865][ T29] audit: type=1326 audit(1731318349.797:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 265.130535][ T29] audit: type=1326 audit(1731318349.867:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 265.281500][T10728] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2043'. [ 265.415790][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2043'. [ 265.432835][ T29] audit: type=1326 audit(1731318349.867:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 265.745855][ T29] audit: type=1326 audit(1731318349.877:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10714 comm="syz.0.2037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 265.994221][T10735] openvswitch: netlink: Unknown key attributes 2 [ 266.913709][ T5904] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 267.202926][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 267.253262][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.372565][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 267.478323][ T5904] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 267.649916][ T5904] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.752982][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.761056][ T5904] usb 2-1: Product: syz [ 267.790174][T10760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2059'. [ 267.883715][ T5904] usb 2-1: Manufacturer: syz [ 267.888385][ T5904] usb 2-1: SerialNumber: syz [ 268.063594][ T5904] cdc_ncm 2-1:1.0: invalid descriptor buffer length [ 268.151729][ T5904] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 268.253128][ T5904] cdc_ncm 2-1:1.0: bind() failure [ 268.336456][ T5904] usb 2-1: USB disconnect, device number 10 [ 268.498506][ T29] audit: type=1326 audit(1731318353.767:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.0.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 268.570330][T10770] loop6: detected capacity change from 0 to 1024 [ 268.655397][T10769] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 268.662804][T10769] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 268.742412][ T29] audit: type=1326 audit(1731318353.867:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.0.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f059798066a code=0x7ffc0000 [ 268.853407][T10770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.877802][T10769] vhci_hcd vhci_hcd.0: Device attached [ 269.052888][ T29] audit: type=1326 audit(1731318353.867:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.0.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f059797d0b0 code=0x7ffc0000 [ 269.092968][T10776] vhci_hcd: connection closed [ 269.116165][ T11] vhci_hcd: stop threads [ 269.221100][ T11] vhci_hcd: release socket [ 269.274089][T10770] EXT4-fs error (device loop6): ext4_generic_delete_entry:2680: inode #2: block 16: comm syz.6.2063: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 269.305384][ T11] vhci_hcd: disconnect device [ 269.314910][ T29] audit: type=1326 audit(1731318353.867:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.0.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f059797d1ff code=0x7ffc0000 [ 269.543300][ T29] audit: type=1326 audit(1731318354.347:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.0.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f059797d3aa code=0x7ffc0000 [ 269.572865][T10770] EXT4-fs error (device loop6) in ext4_delete_entry:2751: Corrupt filesystem [ 269.722865][T10770] EXT4-fs warning (device loop6): ext4_rename_delete:3733: inode #2: comm syz.6.2063: Deleting old file: nlink 1, error=-117 [ 269.833448][ T29] audit: type=1326 audit(1731318354.357:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.0.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 269.948652][T10793] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2072'. [ 269.958137][T10781] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 270.076585][T10793] netlink: 'syz.3.2072': attribute type 1 has an invalid length. [ 270.120016][ T29] audit: type=1326 audit(1731318354.357:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10767 comm="syz.0.2064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 270.198410][T10793] netlink: 'syz.3.2072': attribute type 2 has an invalid length. [ 270.237411][T10796] loop2: detected capacity change from 0 to 2048 [ 270.283080][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2072'. [ 270.322203][ T9649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.565217][ T5985] Alternate GPT is invalid, using primary GPT. [ 270.643030][ T5985] loop2: p1 p2 p3 [ 270.729182][T10796] Alternate GPT is invalid, using primary GPT. [ 270.829613][T10796] loop2: p1 p2 p3 [ 270.838706][ T29] audit: type=1326 audit(1731318356.107:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10806 comm="syz.6.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 270.874301][T10805] Unsupported ieee802154 address type: 0 [ 271.092013][ T29] audit: type=1326 audit(1731318356.107:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10806 comm="syz.6.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 271.413180][ T29] audit: type=1326 audit(1731318356.167:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10806 comm="syz.6.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 271.692964][ T29] audit: type=1326 audit(1731318356.167:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10806 comm="syz.6.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 271.971362][ T29] audit: type=1326 audit(1731318356.167:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10806 comm="syz.6.2077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 272.558061][ T6253] udevd[6253]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 272.588354][ T5900] udevd[5900]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 272.599022][ T5985] udevd[5985]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 273.123042][ T25] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 273.481742][ T25] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 273.544803][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.626664][ T25] usb 4-1: Product: syz [ 273.630881][ T25] usb 4-1: Manufacturer: syz [ 273.710547][ T25] usb 4-1: SerialNumber: syz [ 273.769846][T10862] loop6: detected capacity change from 0 to 128 [ 273.783818][ T25] usb 4-1: config 0 descriptor?? [ 274.124911][ T25] hso 4-1:0.0: Can't find BULK IN endpoint [ 274.131333][ T25] usb-storage 4-1:0.0: USB Mass Storage device detected [ 274.492924][ T25] usb 4-1: USB disconnect, device number 16 [ 274.508885][T10876] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2114'. [ 275.150900][T10885] /dev/nullb0: Can't open blockdev [ 275.265205][T10887] nfs: Unexpected value for 'acl' [ 275.541598][T10893] bridge2: entered promiscuous mode [ 276.348963][T10913] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 276.797164][T10922] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 276.917308][T10927] loop6: detected capacity change from 0 to 256 [ 277.975827][T10949] devtmpfs: Cannot enable quota on remount [ 279.403263][T10980] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (35) [ 280.214648][T10997] loop2: detected capacity change from 0 to 24 [ 280.803003][ T5904] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 281.027652][ T5904] usb 2-1: New USB device found, idVendor=05ac, idProduct=1203, bcdDevice=7b.0c [ 281.124265][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.193685][ T5904] usb 2-1: Product: syz [ 281.198187][ T5904] usb 2-1: Manufacturer: syz [ 281.282852][ T5904] usb 2-1: SerialNumber: syz [ 281.327120][ T5904] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 281.424066][ T5904] usb-storage 2-1:0.0: USB Mass Storage device detected [ 281.504537][ T5904] usb-storage 2-1:0.0: Quirks match for vid 05ac pid 1203: 10 [ 281.997907][ T5904] apple-mfi-fastcharge 2-1: USB disconnect, device number 11 [ 282.322582][T11047] loop4: detected capacity change from 0 to 64 [ 282.825255][T11054] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2199'. [ 282.982888][ T5901] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 283.262934][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 283.325134][ T5901] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 283.417412][ T5901] usb 4-1: config 0 has no interface number 0 [ 283.481030][ T5901] usb 4-1: config 0 interface 183 altsetting 218 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.500183][T11063] netlink: 'syz.2.2205': attribute type 1 has an invalid length. [ 283.641693][ T5901] usb 4-1: config 0 interface 183 has no altsetting 0 [ 283.748773][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 283.868943][ T5901] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 283.951289][ T5901] usb 4-1: Product: syz [ 283.992344][ T5901] usb 4-1: Manufacturer: syz [ 284.062517][ T5901] usb 4-1: SerialNumber: syz [ 284.106346][ T5901] usb 4-1: config 0 descriptor?? [ 284.194720][ T5901] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 284.420607][ T5901] gspca_zc3xx: reg_w_i err -71 [ 284.501583][ T5901] gspca_zc3xx 4-1:0.183: probe with driver gspca_zc3xx failed with error -71 [ 284.677729][ T5901] usb 4-1: USB disconnect, device number 17 [ 285.698521][T11094] loop1: detected capacity change from 0 to 256 [ 285.724702][T11096] loop6: detected capacity change from 0 to 16 [ 285.787478][T11096] erofs: (device loop6): mounted with root inode @ nid 36. [ 287.144556][T11126] loop6: detected capacity change from 0 to 512 [ 287.212522][T11126] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.322834][T11126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00fc01c, mo2=0002] [ 287.402919][T11126] System zones: 1-12 [ 287.479142][T11126] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.2236: Parent and EA inode have the same ino 15 [ 287.607592][T11126] EXT4-fs (loop6): 1 truncate cleaned up [ 287.667446][T11126] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.365600][ T9649] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.636997][T11152] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2250'. [ 288.856673][ T5901] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 288.956815][T11160] xt_nat: multiple ranges no longer supported [ 289.157267][ T5901] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 289.177322][T11165] loop3: detected capacity change from 0 to 64 [ 289.192838][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.244560][T11163] loop1: detected capacity change from 0 to 256 [ 289.251614][T11163] exfat: Deprecated parameter 'namecase' [ 289.272365][ T5901] usb 1-1: Product: syz [ 289.310001][ T5901] usb 1-1: Manufacturer: syz [ 289.344291][T11168] tipc: Trying to set illegal importance in message [ 289.372948][ T5901] usb 1-1: SerialNumber: syz [ 289.451535][T11163] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf794f3fa, utbl_chksum : 0xe619d30d) [ 289.549779][ T5901] usb 1-1: config 0 descriptor?? [ 289.836195][T11172] xt_l2tp: missing protocol rule (udp|l2tpip) [ 289.886893][ T5901] usb 1-1: USB disconnect, device number 12 [ 290.436024][T11180] loop3: detected capacity change from 0 to 1024 [ 290.443114][T11182] loop1: detected capacity change from 0 to 764 [ 290.521831][T11188] xt_hashlimit: max too large, truncated to 1048576 [ 290.872523][T11192] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (4) [ 291.133642][T11196] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.474546][T11206] openvswitch: netlink: Actions may not be safe on all matching packets [ 291.517625][T11204] netlink: 'syz.6.2275': attribute type 10 has an invalid length. [ 291.732655][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.794109][T11209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2277'. [ 291.831060][T11204] team0: Port device batadv0 added [ 292.971257][T11233] loop3: detected capacity change from 0 to 512 [ 293.077363][T11237] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 293.155441][T11233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.278058][T11233] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.747690][ T5854] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.767041][T11246] loop0: detected capacity change from 0 to 4096 [ 293.940916][T11252] loop2: detected capacity change from 0 to 256 [ 294.203147][T11254] netlink: 'syz.1.2298': attribute type 4 has an invalid length. [ 294.261751][T11254] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2298'. [ 294.363604][T11254] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 295.459202][T11245] loop6: detected capacity change from 0 to 32768 [ 295.558821][T11245] BTRFS: device /dev/loop6 (7:6) using temp-fsid f77afd9d-43de-49ea-ad17-ae49d46c48d0 [ 295.628738][T11272] Scaler: ================= START STATUS ================= [ 295.636799][T11245] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2293 (11245) [ 295.703016][T11272] Scaler: ================== END STATUS ================== [ 295.784197][T11245] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.886387][T11245] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 295.962934][T11245] BTRFS info (device loop6): using free-space-tree [ 296.295000][T11284] loop1: detected capacity change from 0 to 2048 [ 296.482839][T11303] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.496611][T11302] netlink: 'syz.4.2314': attribute type 3 has an invalid length. [ 296.592205][T11284] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 296.717614][ T9649] BTRFS info (device loop6): last unmount of filesystem f77afd9d-43de-49ea-ad17-ae49d46c48d0 [ 296.748352][T11284] Remounting filesystem read-only [ 297.724538][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2321'. [ 297.824255][T11318] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2321'. [ 297.833780][T11319] delete_channel: no stack [ 297.841867][T11313] loop4: detected capacity change from 0 to 4096 [ 297.911854][T11313] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 297.962514][T11318] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2321'. [ 298.037828][T11321] netlink: 'syz.2.2323': attribute type 10 has an invalid length. [ 298.415735][T11321] team0: Port device geneve1 added [ 298.653805][T11327] loop1: detected capacity change from 0 to 256 [ 298.840358][T11327] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 299.536848][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 299.726815][T11345] netlink: 'syz.4.2332': attribute type 9 has an invalid length. [ 299.779439][T11345] netlink: 'syz.4.2332': attribute type 7 has an invalid length. [ 299.872280][T11345] netlink: 'syz.4.2332': attribute type 8 has an invalid length. [ 300.463029][T11354] loop1: detected capacity change from 0 to 64 [ 302.147977][T11339] loop2: detected capacity change from 0 to 32768 [ 302.321544][T11388] loop0: detected capacity change from 0 to 512 [ 302.445135][T11388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.543619][T11388] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.751461][T11388] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 302.859890][T11388] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 302.963283][T11388] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.2355: Failed to acquire dquot type 1 [ 303.059435][T11405] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2362'. [ 303.480186][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.605656][T11414] loop6: detected capacity change from 0 to 512 [ 303.665325][T11413] netlink: 'syz.4.2366': attribute type 21 has an invalid length. [ 303.745913][T11413] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2366'. [ 304.709602][T11408] syz.2.2359 (11408): drop_caches: 2 [ 305.330510][T11433] loop3: detected capacity change from 0 to 4096 [ 305.482929][T11433] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 305.726869][ T29] audit: type=1326 audit(1731318390.997:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042917e719 code=0x7ffc0000 [ 305.824200][T11433] ntfs3(loop3): failed to convert "c46c" to cp861 [ 305.953745][ T29] audit: type=1326 audit(1731318391.047:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f042917e719 code=0x7ffc0000 [ 306.181646][ T29] audit: type=1326 audit(1731318391.047:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042917e719 code=0x7ffc0000 [ 306.391115][ T29] audit: type=1326 audit(1731318391.047:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.2.2382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f042917e719 code=0x7ffc0000 [ 307.023016][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 307.263667][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 307.298729][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 172, changing to 11 [ 307.381411][ T25] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 307.448165][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.502909][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.557324][ T25] usb 3-1: Product: syz [ 307.599911][ T25] usb 3-1: Manufacturer: syz [ 307.625047][ T25] usb 3-1: SerialNumber: syz [ 307.673081][ T5901] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 307.937146][ T5901] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.012643][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 308.028074][ T25] cdc_ncm 3-1:1.0: bind() failure [ 308.115251][ T5901] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 308.133399][ T25] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 308.165251][ T25] cdc_ncm 3-1:1.1: bind() failure [ 308.203711][ T5901] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 308.292810][ T25] usb 3-1: USB disconnect, device number 8 [ 308.342198][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 308.378595][ T5901] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 308.454359][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.563337][T11471] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 308.572578][ T5901] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 308.835953][T11484] loop6: detected capacity change from 0 to 256 [ 308.898124][T11457] loop1: detected capacity change from 0 to 32768 [ 308.924314][T11484] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 308.971067][ T5901] usb 4-1: USB disconnect, device number 18 [ 309.071416][T11457] JBD2: Ignoring recovery information on journal [ 309.350893][T11457] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 309.913744][ T5836] ocfs2: Unmounting device (7,1) on (node local) [ 310.136583][T11497] loop0: detected capacity change from 0 to 4096 [ 310.183067][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 310.226899][T11497] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 310.448258][T11497] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 310.832224][T11513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2415'. [ 310.917075][ T5850] ntfs3(loop0): ino=1a, ntfs_sync_fs failed, -22. [ 312.858202][ T5901] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 313.112972][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 313.167644][ T5901] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 313.261898][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.353966][ T5901] usb 1-1: config 0 descriptor?? [ 313.423088][T11566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2440'. [ 313.641339][ T5901] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 313.784306][ T5901] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 313.866571][ T5901] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 313.931250][ T5901] usb 1-1: media controller created [ 314.043064][T11576] netlink: 'syz.1.2445': attribute type 13 has an invalid length. [ 314.106431][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.265092][ T5901] az6027: usb out operation failed. (-71) [ 314.374294][ T5901] az6027: usb out operation failed. (-71) [ 314.380081][ T5901] stb0899_attach: Driver disabled by Kconfig [ 314.502851][ T5901] az6027: no front-end attached [ 314.502851][ T5901] [ 314.593097][ T5901] az6027: usb out operation failed. (-71) [ 314.598883][ T5901] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 314.743300][ T5901] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 314.863757][ T5901] dvb-usb: schedule remote query interval to 400 msecs. [ 314.870760][ T5901] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 315.093087][ T5901] usb 1-1: USB disconnect, device number 13 [ 315.247200][T11598] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 315.570413][ T5901] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 315.583418][T11602] 9pnet_fd: p9_fd_create_unix (11602): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 315.905413][ T29] audit: type=1326 audit(1731318401.167:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 316.131208][ T29] audit: type=1326 audit(1731318401.167:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 316.363212][ T29] audit: type=1326 audit(1731318401.217:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 316.538112][ T29] audit: type=1326 audit(1731318401.230:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 316.581947][T11614] loop4: detected capacity change from 0 to 256 [ 316.679670][T11614] FAT-fs (loop4): Directory bread(block 64) failed [ 316.722421][ T25] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 316.731328][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.744791][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.758791][T11614] FAT-fs (loop4): Directory bread(block 65) failed [ 316.809029][ T29] audit: type=1326 audit(1731318401.230:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11606 comm="syz.0.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f059797e719 code=0x7ffc0000 [ 316.859470][T11614] FAT-fs (loop4): Directory bread(block 66) failed [ 316.888519][T11614] FAT-fs (loop4): Directory bread(block 67) failed [ 316.934491][T11614] FAT-fs (loop4): Directory bread(block 68) failed [ 316.971751][T11614] FAT-fs (loop4): Directory bread(block 69) failed [ 317.014769][ T25] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 317.048031][T11614] FAT-fs (loop4): Directory bread(block 70) failed [ 317.054615][T11614] FAT-fs (loop4): Directory bread(block 71) failed [ 317.062035][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.079784][T11579] loop6: detected capacity change from 0 to 32768 [ 317.101443][ T25] usb 2-1: Product: syz [ 317.105642][ T25] usb 2-1: Manufacturer: syz [ 317.110249][ T25] usb 2-1: SerialNumber: syz [ 317.144940][T11614] FAT-fs (loop4): Directory bread(block 72) failed [ 317.178507][T11579] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 317.178642][T11579] (syz.6.2447,11579,1):ocfs2_initialize_super:2281 ERROR: status = -12 [ 317.221839][T11614] FAT-fs (loop4): Directory bread(block 73) failed [ 317.265506][ T25] r8152-cfgselector 2-1: Unknown version 0x0000 [ 317.307097][ T25] r8152-cfgselector 2-1: config 0 descriptor?? [ 317.319774][T11579] (syz.6.2447,11579,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 317.530256][T11593] loop2: detected capacity change from 0 to 32768 [ 317.794510][T11627] loop0: detected capacity change from 0 to 1024 [ 317.891341][ T5901] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 318.105210][T11627] hfsplus: xattr search failed [ 318.149942][T11593] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 318.312517][T11593] bcachefs (loop2): recovering from clean shutdown, journal seq 0 [ 318.369499][T11593] bcachefs (loop2): Version upgrade required: [ 318.369499][T11593] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 318.369499][T11593] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 318.369499][T11593] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 319.137084][T11593] bcachefs (loop2): dropping and reconstructing all alloc info [ 319.199262][T11593] bcachefs (loop2): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 319.297692][T11645] loop1: detected capacity change from 0 to 256 [ 319.366058][T11593] bcachefs (loop2): bch2_fs_recovery(): error EINTR [ 319.413802][T11593] bcachefs (loop2): bch2_fs_start(): error starting filesystem EINTR [ 319.492559][T11593] bcachefs (loop2): shutting down [ 319.735419][T11593] bcachefs (loop2): shutdown complete [ 320.564157][T11662] Cannot find add_set index 0 as target [ 320.904327][ T25] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 321.198659][T11634] loop4: detected capacity change from 0 to 32768 [ 321.208370][ T25] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 321.272715][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.299219][T11634] BTRFS: device /dev/loop4 (7:4) using temp-fsid c2ae54f6-5ba0-4952-b17c-9c5c5be03aeb [ 321.335681][ T25] usb 2-1: config 0 has no interface number 0 [ 321.370224][T11634] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2470 (11634) [ 321.391847][T11675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2489'. [ 321.402969][ T25] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 321.459674][T11675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2489'. [ 321.496161][ T25] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 321.510321][T11634] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 321.570122][ T25] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.599404][T11634] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 321.668350][T11634] BTRFS info (device loop4): using free-space-tree [ 321.703131][ T25] usb 2-1: config 0 interface 52 has no altsetting 0 [ 321.782417][ T25] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 321.847266][ T25] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 321.864718][T11686] loop3: detected capacity change from 0 to 64 [ 321.911125][ T25] usb 2-1: Product: syz [ 321.961453][ T25] usb 2-1: Manufacturer: syz [ 322.011832][ T25] usb 2-1: SerialNumber: syz [ 322.017928][T11686] Bad inode number on dev loop3: 6 is out of range [ 322.062416][ T25] usb 2-1: config 0 descriptor?? [ 322.202261][T11634] BTRFS error (device loop4): open_ctree failed [ 322.435045][ T25] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 322.518708][ T25] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 322.681285][ T25] usb 2-1: USB disconnect, device number 13 [ 322.767770][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2497'. [ 323.842905][T11723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2506'. [ 324.338914][T11730] tmpfs: Bad value for 'mpol' [ 325.623609][T11756] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.778153][T11763] loop3: detected capacity change from 0 to 8 [ 326.066618][T11763] SQUASHFS error: Failed to read block 0x2fc: -5 [ 326.144838][T11763] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 326.202410][T11763] SQUASHFS error: Unable to read directory block [247:26] [ 326.298790][T11770] loop0: detected capacity change from 0 to 64 [ 326.344050][T11770] hfs: uid requires an argument [ 326.418872][T11770] hfs: unable to parse mount options [ 326.940338][T11779] netlink: 'syz.3.2531': attribute type 1 has an invalid length. [ 327.031183][T11779] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2531'. [ 327.751693][ T29] audit: type=1326 audit(1731318412.075:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.6.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 327.967394][T11799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.989802][ T29] audit: type=1326 audit(1731318412.140:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.6.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 328.206258][T11801] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.2543'. [ 328.242670][ T29] audit: type=1326 audit(1731318412.168:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.6.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 328.477434][ T29] audit: type=1326 audit(1731318412.168:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11794 comm="syz.6.2540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28f6b7e719 code=0x7ffc0000 [ 328.756091][T11812] xt_TCPMSS: Only works on TCP SYN packets [ 328.836703][T11807] can: request_module (can-proto-0) failed. [ 328.904256][T11815] loop3: detected capacity change from 0 to 1024 [ 329.444951][ T78] hfsplus: b-tree write err: -5, ino 4 [ 331.214435][T11846] loop3: detected capacity change from 0 to 128 [ 331.426779][T11850] xt_ecn: cannot match TCP bits for non-tcp packets [ 332.456335][T11825] loop0: detected capacity change from 0 to 32768 [ 332.638539][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 332.649487][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 332.701809][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 332.710982][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 332.720066][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 332.727676][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 332.808618][T11825] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 332.899131][T11825] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR [ 332.899642][T11825] XFS (loop0): log mount failed [ 333.015292][T11861] lo speed is unknown, defaulting to 1000 [ 333.378703][ T30] INFO: task syz.5.1492:9408 blocked for more than 143 seconds. [ 333.388100][ T30] Not tainted 6.12.0-rc7-syzkaller #0 [ 333.394020][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.523914][ T30] task:syz.5.1492 state:D stack:24984 pid:9408 tgid:9407 ppid:5844 flags:0x00004004 [ 333.623369][ T30] Call Trace: [ 333.649736][ T30] [ 333.672474][ T30] __schedule+0x184f/0x4c30 [ 333.703689][ T30] ? __pfx___schedule+0x10/0x10 [ 333.737645][ T30] ? __blk_flush_plug+0x449/0x500 [ 333.780774][ T30] ? __pfx_lock_release+0x10/0x10 [ 333.816455][ T30] ? __blk_flush_plug+0x449/0x500 [ 333.848780][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 333.901545][ T30] ? rq_wait_inc_below+0x19e/0x240 [ 333.951710][ T30] ? schedule+0x90/0x320 [ 333.968093][ T30] schedule+0x14b/0x320 [ 334.001681][ T30] io_schedule+0x8d/0x110 [ 334.035077][ T30] rq_qos_wait+0x2ff/0x420 [ 334.073184][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 334.119966][ T30] ? __pfx_wbt_cleanup_cb+0x10/0x10 [ 334.157007][ T30] ? __pfx_rq_qos_wait+0x10/0x10 [ 334.185113][ T30] ? __pfx_rq_qos_wake_function+0x10/0x10 [ 334.213532][T11861] chnl_net:caif_netlink_parms(): no params data found [ 334.246892][ T30] ? __pfx_wbt_inflight_cb+0x10/0x10 [ 334.266462][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.296297][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.337886][ T30] wbt_wait+0x373/0x5b0 [ 334.367834][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 334.394907][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.426397][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.456390][T11854] loop3: detected capacity change from 0 to 32768 [ 334.463166][ T30] ? __pfx_wbt_wait+0x10/0x10 [ 334.489917][ T30] __rq_qos_throttle+0x6a/0xb0 [ 334.521930][ T30] blk_mq_submit_bio+0x700/0x2500 [ 334.537757][T11854] JBD2: Ignoring recovery information on journal [ 334.577031][ T30] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 334.608292][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.685389][ T30] __submit_bio+0x1c1/0x560 [ 334.710563][ T30] ? __pfx___submit_bio+0x10/0x10 [ 334.732902][ T30] ? blk_add_trace_bio+0x2c/0x2f0 [ 334.755269][T11854] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 334.772032][ T30] ? blk_add_trace_bio+0x1e6/0x2f0 [ 334.783253][ T30] submit_bio_noacct_nocheck+0x579/0xe30 [ 334.802720][ T30] ? __pfx___might_resched+0x10/0x10 [ 334.820738][ T30] ? __pfx_lock_release+0x10/0x10 [ 334.843088][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 334.875972][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.898891][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.920122][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 334.936048][ T30] ? submit_bio_noacct+0xd62/0x1910 [ 334.955455][ T30] bio_chain_and_submit+0xed/0x130 [ 334.976973][ T30] __blkdev_issue_zero_pages+0x218/0x290 [ 334.989837][ T30] blkdev_issue_zeroout+0x5e1/0x7e0 [ 334.995916][ T30] ? __pfx_blkdev_issue_zeroout+0x10/0x10 [ 335.012845][ T30] ? __pfx_truncate_bdev_range+0x10/0x10 [ 335.021359][ T5849] Bluetooth: hci7: command tx timeout [ 335.033571][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.041953][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.053990][ T30] ? truncate_bdev_range+0xef/0x100 [ 335.060841][ T30] blkdev_common_ioctl+0x1cf5/0x2480 [ 335.075640][ T30] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 335.081429][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 335.109924][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 335.118520][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.138183][ T30] ? file_to_blk_mode+0xcc/0x140 [ 335.147840][ T30] blkdev_ioctl+0x4ca/0x6a0 [ 335.152770][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 335.157953][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 335.174645][ T30] ? __pfx_blkdev_ioctl+0x10/0x10 [ 335.179835][ T30] __se_sys_ioctl+0xfb/0x170 [ 335.185659][ T30] do_syscall_64+0xf3/0x230 [ 335.190395][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.206633][ T30] RIP: 0033:0x7fdd56b7e719 [ 335.213452][ T30] RSP: 002b:00007fdd54ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 335.235399][ T30] RAX: ffffffffffffffda RBX: 00007fdd56d35f80 RCX: 00007fdd56b7e719 [ 335.254036][ T30] RDX: 0000000020000240 RSI: 000000000000127f RDI: 0000000000000003 [ 335.274460][ T30] RBP: 00007fdd56bf139e R08: 0000000000000000 R09: 0000000000000000 [ 335.292081][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.306612][ T30] R13: 0000000000000000 R14: 00007fdd56d35f80 R15: 00007ffffe5464d8 [ 335.322680][ T30] [ 335.334939][ T30] [ 335.334939][ T30] Showing all locks held in the system: [ 335.419193][ T5854] ocfs2: Unmounting device (7,3) on (node local) [ 335.425910][ T30] 1 lock held by khungtaskd/30: [ 335.438174][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 335.494122][ T30] 3 locks held by kworker/u8:2/33: [ 335.541788][ T30] 5 locks held by kworker/u8:3/52: [ 335.560795][ T30] 4 locks held by kworker/0:2/963: [ 335.585716][ T30] 2 locks held by kworker/u8:7/3503: [ 335.622993][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.657191][ T30] #1: ffffc9000c14fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.699940][ T30] 2 locks held by getty/5589: [ 335.724791][ T30] #0: ffff888030f3e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 335.756836][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 335.796573][ T30] 2 locks held by kworker/0:3/5845: [ 335.815912][ T30] 2 locks held by kworker/u8:8/5913: [ 335.832048][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 335.868815][ T30] #1: ffffc900031efd00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 335.904377][ T30] 3 locks held by kworker/0:8/5953: [ 335.925738][ T30] 1 lock held by syz.5.1492/9408: [ 335.935685][ T30] #0: ffff888148c8abc0 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_common_ioctl+0x150b/0x2480 [ 335.954272][ T30] 3 locks held by syz.2.2453/11593: [ 335.959580][ T30] #0: ffffffff8f060808 (bio_slab_lock){+.+.}-{3:3}, at: bioset_exit+0x42f/0x650 [ 335.982285][ T30] #1: ffffffff8e7d1d90 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x3e/0x160 [ 336.010434][ T30] #2: ffffffff8ea1fc38 (slab_mutex){+.+.}-{3:3}, at: kmem_cache_destroy+0x4c/0x160 [ 336.027943][ T30] 2 locks held by syz-executor/11861: [ 336.042110][ T30] #0: ffffffff8fcd3948 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 336.062064][ T30] #1: ffffffff8e93d338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 336.103468][ T30] [ 336.110525][ T30] ============================================= [ 336.110525][ T30] [ 336.136975][ T30] NMI backtrace for cpu 1 [ 336.141358][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 336.150231][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 336.160306][ T30] Call Trace: [ 336.163608][ T30] [ 336.166556][ T30] dump_stack_lvl+0x241/0x360 [ 336.171275][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.176511][ T30] ? __pfx__printk+0x10/0x10 [ 336.181145][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 336.186128][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.191712][ T30] ? _printk+0xd5/0x120 [ 336.195903][ T30] ? __pfx__printk+0x10/0x10 [ 336.200524][ T30] ? __wake_up_klogd+0xcc/0x110 [ 336.205569][ T30] ? __pfx__printk+0x10/0x10 [ 336.210200][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.215869][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 336.220941][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 336.226960][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 336.232982][ T30] watchdog+0xff4/0x1040 [ 336.237261][ T30] ? watchdog+0x1ea/0x1040 [ 336.241805][ T30] ? __pfx_watchdog+0x10/0x10 [ 336.246518][ T30] kthread+0x2f2/0x390 [ 336.250609][ T30] ? __pfx_watchdog+0x10/0x10 [ 336.255322][ T30] ? __pfx_kthread+0x10/0x10 [ 336.259938][ T30] ret_from_fork+0x4d/0x80 [ 336.264390][ T30] ? __pfx_kthread+0x10/0x10 [ 336.269004][ T30] ret_from_fork_asm+0x1a/0x30 [ 336.273818][ T30] [ 336.277822][ T30] Sending NMI from CPU 1 to CPUs 0: [ 336.283331][ C0] NMI backtrace for cpu 0 [ 336.283346][ C0] CPU: 0 UID: 0 PID: 5953 Comm: kworker/0:8 Not tainted 6.12.0-rc7-syzkaller #0 [ 336.283371][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 336.283386][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 336.283425][ C0] RIP: 0010:validate_chain+0x1b9/0x5920 [ 336.283454][ C0] Code: b8 eb 83 b5 80 46 86 c8 61 49 0f af c6 48 c1 e8 2d 48 8d 1c c5 40 d7 e3 93 48 89 d8 48 c1 e8 03 48 89 44 24 68 42 80 3c 20 00 <74> 08 48 89 df e8 7d a3 8d 00 48 89 5c 24 48 48 8b 1b 48 85 db 74 [ 336.283474][ C0] RSP: 0018:ffffc90000007200 EFLAGS: 00000046 [ 336.283494][ C0] RAX: 1ffffffff27d0f62 RBX: ffffffff93e87b10 RCX: ffffffff8171005e [ 336.283512][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942cd988 [ 336.283528][ C0] RBP: ffffc90000007500 R08: ffffffff942cd98f R09: 1ffffffff2859b31 [ 336.283545][ C0] R10: dffffc0000000000 R11: fffffbfff2859b32 R12: dffffc0000000000 [ 336.283563][ C0] R13: ffff88801ebb8b50 R14: 89efc53e7d403899 R15: ffff88801ebb8b50 [ 336.283584][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 336.283608][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.283625][ C0] CR2: 000055557cda9808 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 336.283644][ C0] Call Trace: [ 336.283652][ C0] [ 336.283661][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 336.283696][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 336.283732][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 336.283774][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 336.283806][ C0] ? nmi_handle+0x151/0x5a0 [ 336.283830][ C0] ? nmi_handle+0x2a/0x5a0 [ 336.283854][ C0] ? validate_chain+0x1b9/0x5920 [ 336.283879][ C0] ? default_do_nmi+0x63/0x160 [ 336.283915][ C0] ? exc_nmi+0x123/0x1f0 [ 336.283948][ C0] ? end_repeat_nmi+0xf/0x53 [ 336.283980][ C0] ? validate_chain+0x11e/0x5920 [ 336.284005][ C0] ? validate_chain+0x1b9/0x5920 [ 336.284031][ C0] ? validate_chain+0x1b9/0x5920 [ 336.284057][ C0] ? validate_chain+0x1b9/0x5920 [ 336.284082][ C0] [ 336.284090][ C0] [ 336.284099][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284131][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284167][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284197][ C0] ? validate_chain+0x11e/0x5920 [ 336.284222][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284252][ C0] ? __pfx_validate_chain+0x10/0x10 [ 336.284280][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284311][ C0] ? __pfx_validate_chain+0x10/0x10 [ 336.284337][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284367][ C0] ? validate_chain+0x11e/0x5920 [ 336.284393][ C0] ? __pfx_validate_chain+0x10/0x10 [ 336.284417][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284447][ C0] ? get_stack_info_noinstr+0x1a/0x130 [ 336.284481][ C0] ? deref_stack_reg+0x17c/0x210 [ 336.284504][ C0] ? __asan_memset+0x23/0x50 [ 336.284539][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284569][ C0] ? unwind_next_frame+0x193b/0x22d0 [ 336.284612][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284641][ C0] ? mark_lock+0x9a/0x360 [ 336.284662][ C0] ? __pfx_validate_chain+0x10/0x10 [ 336.284689][ C0] __lock_acquire+0x1384/0x2050 [ 336.284731][ C0] lock_acquire+0x1ed/0x550 [ 336.284764][ C0] ? usb_anchor_urb+0x2a/0x240 [ 336.284800][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 336.284836][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284869][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.284903][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 336.284929][ C0] ? usb_anchor_urb+0x2a/0x240 [ 336.284959][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 336.284989][ C0] usb_anchor_urb+0x2a/0x240 [ 336.285022][ C0] ath9k_hif_usb_reg_in_cb+0x4c1/0x6e0 [ 336.285056][ C0] ? kcov_remote_start+0x97/0x7d0 [ 336.285089][ C0] __usb_hcd_giveback_urb+0x42e/0x6e0 [ 336.285118][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 336.285145][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.285177][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 336.285206][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.285240][ C0] dummy_timer+0x856/0x4620 [ 336.285274][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.285308][ C0] ? debug_object_deactivate+0x2d5/0x390 [ 336.285343][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.285386][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 336.285422][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 336.285455][ C0] __hrtimer_run_queues+0x59d/0xd50 [ 336.285479][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 336.285519][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 336.285543][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.285573][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 336.285612][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 336.285639][ C0] handle_softirqs+0x2c7/0x980 [ 336.285673][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 336.285705][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 336.285737][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.285767][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 336.285805][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 336.285835][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 336.285868][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.285900][ C0] irq_exit_rcu+0x9/0x30 [ 336.285929][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 336.285954][ C0] [ 336.285962][ C0] [ 336.285971][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.285999][ C0] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 336.286031][ C0] Code: 8c e8 14 19 70 0a 65 66 8b 05 24 5a ac 7e 66 85 c0 75 5d bf 01 00 00 00 e8 2d b2 0b 00 e8 18 23 45 00 fb 65 8b 05 e8 59 ac 7e <85> c0 75 05 e8 a7 38 a9 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 336.286050][ C0] RSP: 0018:ffffc90003d875a0 EFLAGS: 00000286 [ 336.286069][ C0] RAX: 0000000080000000 RBX: 1ffff920007b0eb8 RCX: ffffffff8170bfaa [ 336.286087][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0acaa0 RDI: ffffffff8c610a20 [ 336.286105][ C0] RBP: ffffc90003d87650 R08: ffffffff942cd8f7 R09: 1ffffffff2859b1e [ 336.286123][ C0] R10: dffffc0000000000 R11: fffffbfff2859b1f R12: dffffc0000000000 [ 336.286141][ C0] R13: 1ffff920007b0ebc R14: ffffc90003d875e0 R15: 0000000000000201 [ 336.286162][ C0] ? mark_lock+0x9a/0x360 [ 336.286188][ C0] ? wg_packet_encrypt_worker+0x1561/0x1610 [ 336.286224][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 336.286254][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.286286][ C0] ? wg_packet_encrypt_worker+0x12a6/0x1610 [ 336.286324][ C0] wg_packet_encrypt_worker+0x1561/0x1610 [ 336.286371][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 336.286445][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.286475][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 336.286512][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 336.286552][ C0] ? process_scheduled_works+0x976/0x1850 [ 336.286585][ C0] process_scheduled_works+0xa65/0x1850 [ 336.286634][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 336.286670][ C0] ? assign_work+0x364/0x3d0 [ 336.286703][ C0] worker_thread+0x870/0xd30 [ 336.286737][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.286769][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 336.286798][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 336.286825][ C0] ? __kthread_parkme+0x169/0x1d0 [ 336.286861][ C0] ? __pfx_worker_thread+0x10/0x10 [ 336.286893][ C0] kthread+0x2f2/0x390 [ 336.286915][ C0] ? __pfx_worker_thread+0x10/0x10 [ 336.286947][ C0] ? __pfx_kthread+0x10/0x10 [ 336.286969][ C0] ret_from_fork+0x4d/0x80 [ 336.287002][ C0] ? __pfx_kthread+0x10/0x10 [ 336.287024][ C0] ret_from_fork_asm+0x1a/0x30 [ 336.287065][ C0] [ 337.084587][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 337.091491][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller #0 [ 337.100274][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 337.110348][ T30] Call Trace: [ 337.113648][ T30] [ 337.116595][ T30] dump_stack_lvl+0x241/0x360 [ 337.121397][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.126631][ T30] ? __pfx__printk+0x10/0x10 [ 337.131247][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 337.137447][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.143114][ T30] ? vscnprintf+0x5d/0x90 [ 337.147484][ T30] panic+0x349/0x880 [ 337.151404][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.157070][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 337.163267][ T30] ? __pfx_panic+0x10/0x10 [ 337.167733][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 337.173168][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.178835][ T30] ? __irq_work_queue_local+0x137/0x410 [ 337.184424][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.190091][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 337.195508][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 337.201724][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 337.207929][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 337.213598][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 337.219889][ T30] watchdog+0x1033/0x1040 [ 337.224254][ T30] ? watchdog+0x1ea/0x1040 [ 337.228706][ T30] ? __pfx_watchdog+0x10/0x10 [ 337.233415][ T30] kthread+0x2f2/0x390 [ 337.237594][ T30] ? __pfx_watchdog+0x10/0x10 [ 337.242323][ T30] ? __pfx_kthread+0x10/0x10 [ 337.246936][ T30] ret_from_fork+0x4d/0x80 [ 337.251384][ T30] ? __pfx_kthread+0x10/0x10 [ 337.255992][ T30] ret_from_fork_asm+0x1a/0x30 [ 337.260811][ T30] [ 337.265042][ T30] Kernel Offset: disabled [ 337.269364][ T30] Rebooting in 86400 seconds..