last executing test programs: 2m29.535329302s ago: executing program 3 (id=769): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in=@rand_addr=0x64010102, @in=@remote, 0x0, 0x0, 0x0, 0x1}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x80}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'aegis128l-generic\x00'}, 0x0, 0x60}}]}, 0x13c}}, 0x0) 2m29.254358374s ago: executing program 3 (id=772): futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) 2m28.19225823s ago: executing program 3 (id=782): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000040)={0x60e4ad8f, 0x0, "f256ff5141a2c4847732eb158006fd12ce52de20d2df3345c6b45b8c11c0bf30"}) 2m27.837767826s ago: executing program 3 (id=788): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) map_shadow_stack(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1) 2m27.617084777s ago: executing program 3 (id=792): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0x1, 0x200, &(0x7f0000006140)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m26.54497119s ago: executing program 3 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000200000009d1440000800"], 0x34, 0x0) 2m11.437290685s ago: executing program 32 (id=807): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001000000", @ANYRES32=0x0, @ANYBLOB="040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000200000009d1440000800"], 0x34, 0x0) 4.006771289s ago: executing program 6 (id=2768): r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ppoll(&(0x7f0000000000)=[{r0, 0x419}], 0x1, &(0x7f00000000c0), 0x0, 0x0) 3.739234564s ago: executing program 6 (id=2773): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000), 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000680)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7492}}], 0x18}, 0x8004) 3.593480264s ago: executing program 5 (id=2775): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x1, 0x170bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.452877283s ago: executing program 6 (id=2778): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x6229, &(0x7f0000001080)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2.91450267s ago: executing program 5 (id=2786): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000071401"], 0x18}}, 0x0) 2.660081878s ago: executing program 5 (id=2791): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1.76910197s ago: executing program 2 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="000000000a00020000000000000000000800090009"], 0x30}}, 0x0) 1.675427064s ago: executing program 1 (id=2803): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0xd, 0xd}, {0x0, 0x4}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd7, 0xfc, 0x200, 0xa, 0x0, 0x0, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x4, 0x7, 0x10000d, 0x1, 0x4, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) 1.576814957s ago: executing program 4 (id=2804): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sync_file_range(0xffffffffffffffff, 0x6, 0x10000000000000, 0x2) 1.414343941s ago: executing program 0 (id=2805): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x0, 0x4}) 1.414143234s ago: executing program 1 (id=2806): r0 = socket$inet(0x2, 0x802, 0x1) connect$inet(r0, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) 1.396964999s ago: executing program 2 (id=2807): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000240)={[0xf]}, 0x8, 0x80000) 1.322364043s ago: executing program 6 (id=2808): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sockstat\x00') preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/117, 0x75}], 0x1, 0x0, 0x0) 1.282752668s ago: executing program 4 (id=2809): setuid(0xee01) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xffff7ffd}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.138392786s ago: executing program 1 (id=2810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000013c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x1c, 0x12, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x20050800) 1.077684288s ago: executing program 0 (id=2811): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001600), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001640)={0x6, @pix={0xf80, 0x0, 0x38414262, 0x6, 0x1, 0x10, 0x3, 0x4, 0x0, 0x3, 0x1, 0x7}}) 1.004993827s ago: executing program 2 (id=2812): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000780)=[{&(0x7f00000004c0)='5', 0x2b}], 0x1) 1.004234399s ago: executing program 4 (id=2813): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x7, 0x5, 0x2, 0x84080}) 809.072666ms ago: executing program 0 (id=2814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0}, 0x38) 808.343818ms ago: executing program 1 (id=2815): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)={0xb, {{0xa, 0x0, 0x0, @mcast2, 0x7e2}}, 0x1, 0x1, [{{0xa, 0xffdc, 0x3, @remote}}]}, 0x10c) 750.990493ms ago: executing program 5 (id=2816): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 684.616296ms ago: executing program 2 (id=2817): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x4000)=nil, 0x1000, 0xb, 0x8012, r0, 0x83000000) 683.95961ms ago: executing program 4 (id=2818): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x149f83, 0x11) sendfile(r0, r0, 0x0, 0xb) 557.714129ms ago: executing program 1 (id=2819): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)={0x14, 0x0, 0x5, 0x401, 0x0, 0x0, {0xe2a98880c93ed02, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40) 551.333032ms ago: executing program 0 (id=2820): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pivot_root(0x0, 0x0) 430.71033ms ago: executing program 5 (id=2821): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0x36, 0x0, &(0x7f0000000080)="f8ad48c5fce216efcc244f7f86ddb2af39bd6f6ef802e9c82739ed713b75d2054c479e63fc6c345b1ec8801f1c231a0aeeb9328cc4a4", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 430.088951ms ago: executing program 6 (id=2822): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0xc91, 0x2001) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000100)={0x81, 0x0, 0x1, 0x9, 0xc, {0x2400120, 0x9}, 0x1}) 350.028423ms ago: executing program 2 (id=2823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x7}]}], {0x14, 0x10}}, 0x78}}, 0x0) 302.019659ms ago: executing program 0 (id=2824): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000005500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="02030a0d6f1804"], 0x33fe0}}, 0x8040) 283.317293ms ago: executing program 4 (id=2825): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400192446b6f18b593a10562c84d8c033ed7afe7027243de829e0000000a2bc560322fc11270cc15860342259b394dfca00000f7f8900000020000000e42471283ec681", 0x48}], 0x1) 282.524343ms ago: executing program 1 (id=2826): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000180)=0x1, 0x4) 146.288723ms ago: executing program 6 (id=2827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}, 0x1, 0x6, 0x3, 0x0, 0x400, 0x5}, 0x20) 57.601412ms ago: executing program 2 (id=2828): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) semget$private(0x0, 0x6, 0x0) 56.842956ms ago: executing program 0 (id=2829): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x100000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 17.922888ms ago: executing program 5 (id=2830): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 0s ago: executing program 4 (id=2831): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000340)={0x2, 0x2, 0x5, 0x3, 0xffff910e}) kernel console output (not intermixed with test programs): 0 descriptor?? [ 169.715945][ T5897] cxacru 1-1:0.204: usbatm_usb_probe: bind failed: -19! [ 169.808733][ T8001] netlink: 6 bytes leftover after parsing attributes in process `syz.1.961'. [ 169.863957][ T8003] loop4: detected capacity change from 0 to 512 [ 169.930684][ T5833] usb 1-1: USB disconnect, device number 2 [ 169.978138][ T8003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.041678][ T8003] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.188478][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.225404][ T7988] loop5: detected capacity change from 0 to 32768 [ 170.253481][ T7988] XFS: ikeep mount option is deprecated. [ 170.321260][ T7988] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 170.540808][ T7988] XFS (loop5): Ending clean mount [ 170.607144][ T7988] XFS (loop5): Quotacheck needed: Please wait. [ 170.746274][ T7988] XFS (loop5): Quotacheck: Done. [ 170.911342][ T5846] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 171.163026][ T5897] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 171.425580][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 171.444749][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 171.492423][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 171.525566][ T5897] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 171.539923][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.568633][ T5897] usb 2-1: Product: syz [ 171.588707][ T5897] usb 2-1: Manufacturer: syz [ 171.615822][ T5897] usb 2-1: SerialNumber: syz [ 171.628603][ T5897] usb 2-1: config 0 descriptor?? [ 171.660034][ T8042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.692745][ T8042] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 171.704448][ T5897] usb 2-1: ucan: probing device on interface #0 [ 171.949018][ T8073] netlink: 'syz.0.992': attribute type 1 has an invalid length. [ 171.992725][ T8073] netlink: 'syz.0.992': attribute type 2 has an invalid length. [ 172.135399][ T5897] usb 2-1: ucan: failed to retrieve device info [ 172.162977][ T5897] usb 2-1: ucan: probe failed; try to update the device firmware [ 172.226054][ T5897] usb 2-1: USB disconnect, device number 6 [ 172.405552][ T8087] netlink: 68 bytes leftover after parsing attributes in process `syz.2.997'. [ 172.425097][ T8089] loop5: detected capacity change from 0 to 2048 [ 172.540105][ T8089] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.691062][ T8100] cifs: Unknown parameter 'no'aN[Gzob,er;%j [ 172.691062][ T8100] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<;8+`#' [ 172.765886][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.937192][ T8108] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 172.963020][ T8108] netlink: 'syz.1.1008': attribute type 2 has an invalid length. [ 173.240913][ T8120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1012'. [ 173.303841][ T8120] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1012'. [ 173.426563][ T8120] gretap1: entered promiscuous mode [ 173.431862][ T8120] gretap1: entered allmulticast mode [ 174.900032][ T8181] loop1: detected capacity change from 0 to 1024 [ 175.419405][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 175.430336][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 175.443941][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 175.456986][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 175.472963][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 175.503371][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.604338][ T8202] vxcan1 speed is unknown, defaulting to 1000 [ 175.656326][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 175.681274][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.728721][ T5899] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 175.765720][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.784244][ T5899] usb 1-1: Product: syz [ 175.788481][ T5899] usb 1-1: Manufacturer: syz [ 175.832769][ T5899] usb 1-1: SerialNumber: syz [ 175.856811][ T5899] usb 1-1: config 0 descriptor?? [ 175.897125][ T5899] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out. [ 175.961825][ T8216] netlink: 'syz.5.1058': attribute type 9 has an invalid length. [ 175.972095][ T8214] loop1: detected capacity change from 0 to 256 [ 176.123760][ T5898] usb 1-1: USB disconnect, device number 3 [ 176.774744][ T8239] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1070'. [ 176.841014][ T8235] loop2: detected capacity change from 0 to 4096 [ 176.896109][ T8235] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 177.135964][ T8235] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 177.172810][ T8235] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 177.401387][ T8202] chnl_net:caif_netlink_parms(): no params data found [ 177.492228][ T1144] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 177.508379][ T5850] Bluetooth: hci6: command tx timeout [ 177.526044][ T5829] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 177.557562][ T5829] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 177.565259][ T5829] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 177.582650][ T12] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 177.638440][ T8232] loop1: detected capacity change from 0 to 32768 [ 177.755732][ T8232] ERROR: (device loop1): diAllocAG: ipimap->i_size is wrong [ 177.755732][ T8232] [ 177.801931][ T8258] loop4: detected capacity change from 0 to 1764 [ 177.822942][ T8232] ERROR: (device loop1): remounting filesystem as read-only [ 177.889526][ T8232] ialloc: diAlloc returned -5! [ 177.897484][ T8258] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 177.999268][ T8237] loop5: detected capacity change from 0 to 32768 [ 178.090754][ T8237] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1069 (8237) [ 178.254528][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.270984][ T8237] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 178.308769][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.336919][ T8269] loop2: detected capacity change from 0 to 256 [ 178.344672][ T8237] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 178.383086][ T8202] bridge_slave_0: entered allmulticast mode [ 178.391230][ T8202] bridge_slave_0: entered promiscuous mode [ 178.394345][ T8237] BTRFS info (device loop5): using free-space-tree [ 178.461689][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.490163][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.509833][ T8202] bridge_slave_1: entered allmulticast mode [ 178.540084][ T8202] bridge_slave_1: entered promiscuous mode [ 178.589598][ T8269] FAT-fs (loop2): Directory bread(block 64) failed [ 178.662866][ T8269] FAT-fs (loop2): Directory bread(block 65) failed [ 178.669562][ T8269] FAT-fs (loop2): Directory bread(block 66) failed [ 178.712751][ T8269] FAT-fs (loop2): Directory bread(block 67) failed [ 178.719568][ T8269] FAT-fs (loop2): Directory bread(block 68) failed [ 178.762009][ T8269] FAT-fs (loop2): Directory bread(block 69) failed [ 178.853584][ T8269] FAT-fs (loop2): Directory bread(block 70) failed [ 178.889747][ T8269] FAT-fs (loop2): Directory bread(block 71) failed [ 178.901423][ T8294] netlink: 'syz.4.1087': attribute type 21 has an invalid length. [ 178.912905][ T8269] FAT-fs (loop2): Directory bread(block 72) failed [ 178.920049][ T8269] FAT-fs (loop2): Directory bread(block 73) failed [ 179.029367][ T8202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.091547][ T8202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.216114][ T5846] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.582877][ T5850] Bluetooth: hci6: command tx timeout [ 179.608868][ T8310] openvswitch: netlink: Duplicate or invalid key (type 0). [ 179.691521][ T8310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.695256][ T8202] team0: Port device team_slave_0 added [ 179.758449][ T8202] team0: Port device team_slave_1 added [ 180.049824][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.089197][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.115263][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.184806][ T8202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.262825][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.311735][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.358213][ T5898] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 180.436033][ T8202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.584829][ T5898] usb 2-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config [ 180.629541][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 97, changing to 10 [ 180.686547][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 24677, setting to 1024 [ 180.721308][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.752449][ T8202] hsr_slave_0: entered promiscuous mode [ 180.780563][ T8202] hsr_slave_1: entered promiscuous mode [ 180.787562][ T5898] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 180.822660][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.853093][ T8202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.860798][ T8202] Cannot create hsr debugfs directory [ 180.878571][ T5898] usb 2-1: config 0 descriptor?? [ 181.146407][ T5898] ath6kl: Failed to submit usb control message: -71 [ 181.177872][ T5898] ath6kl: unable to send the bmi data to the device: -71 [ 181.217657][ T5898] ath6kl: Unable to send get target info: -71 [ 181.254498][ T5898] ath6kl: Failed to init ath6kl core: -71 [ 181.294555][ T5898] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 181.348599][ T5898] usb 2-1: USB disconnect, device number 7 [ 181.437978][ T8365] nfs4: Unexpected value for 'rdma' [ 181.513079][ T8369] tmpfs: Bad value for 'mpol' [ 181.523281][ T8363] loop0: detected capacity change from 0 to 4096 [ 181.664576][ T5850] Bluetooth: hci6: command tx timeout [ 181.681272][ T8371] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 181.747276][ T8363] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 181.767897][ T8373] loop2: detected capacity change from 0 to 512 [ 181.853206][ T8363] Remounting filesystem read-only [ 181.870339][ T30] audit: type=1326 audit(1747302572.392:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 181.927672][ T8373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.945678][ T30] audit: type=1326 audit(1747302572.392:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 182.003394][ T30] audit: type=1326 audit(1747302572.392:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 182.030271][ T8373] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.098487][ T30] audit: type=1326 audit(1747302572.392:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 182.123030][ T30] audit: type=1326 audit(1747302572.392:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8375 comm="syz.5.1126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 182.325337][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1130'. [ 182.363128][ T5829] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.396833][ T8202] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.438528][ T8202] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.562038][ T8202] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.623865][ T8396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1133'. [ 182.636868][ T8202] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.835862][ T8394] loop0: detected capacity change from 0 to 4096 [ 182.994428][ T8406] loop5: detected capacity change from 0 to 16 [ 183.020686][ T8406] erofs (device loop5): invalid checksum 0x31f875bb, 0x83168301 expected [ 183.076515][ T5962] udevd[5962]: incorrect erofs checksum on /dev/loop5 [ 183.181628][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.267782][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.358575][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.367202][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.437260][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.444502][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.704916][ T8202] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.742895][ T5850] Bluetooth: hci6: command tx timeout [ 184.124933][ T8442] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 184.258887][ T8442] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 184.316373][ T8442] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 184.611271][ T8458] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 184.717778][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.031046][ T8468] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 185.079534][ T8468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 185.404626][ T8482] loop1: detected capacity change from 0 to 1024 [ 185.504223][ T8482] process 'syz.1.1171' launched './file1' with NULL argv: empty string added [ 185.734183][ T53] hfsplus: b-tree write err: -5, ino 4 [ 185.801879][ T8495] loop5: detected capacity change from 0 to 16 [ 185.883313][ T8495] erofs (device loop5): mounted with root inode @ nid 36. [ 185.938556][ T8500] loop1: detected capacity change from 0 to 8 [ 185.946295][ T8202] veth0_vlan: entered promiscuous mode [ 185.999398][ T8202] veth1_vlan: entered promiscuous mode [ 186.043024][ T8500] SQUASHFS error: Failed to read block 0x6a4: -5 [ 186.097957][ T8500] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 186.148113][ T8500] SQUASHFS error: Unable to read inode 0x87 [ 186.200075][ T8202] veth0_macvtap: entered promiscuous mode [ 186.278341][ T8202] veth1_macvtap: entered promiscuous mode [ 186.337694][ T8511] netlink: 'syz.5.1184': attribute type 8 has an invalid length. [ 186.404414][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.423125][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.433232][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.507356][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.556566][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.592639][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.620894][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.667007][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.691166][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.714114][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.719385][ T8514] loop2: detected capacity change from 0 to 4096 [ 186.741200][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.783092][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 186.807949][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.857461][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.927742][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.961297][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 186.973637][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.991836][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.026578][ T5850] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 187.035385][ T5850] Bluetooth: hci5: Injecting HCI hardware error event [ 187.043587][ T5850] Bluetooth: hci5: hardware error 0x00 [ 187.050565][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.064673][ T24] usb 5-1: config 0 descriptor?? [ 187.070333][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.081700][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.092462][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.102881][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.122110][ T24] ums-realtek 5-1:0.0: USB Mass Storage device detected [ 187.130776][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.148253][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.159045][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.170426][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.181176][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.194114][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.215589][ T8202] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.245271][ T8202] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.255126][ T8202] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.282638][ T8202] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.334317][ T24] usb 5-1: USB disconnect, device number 5 [ 187.709207][ T8544] tipc: Trying to set illegal importance in message [ 187.724751][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.760529][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.882178][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.922733][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.059167][ T8520] loop0: detected capacity change from 0 to 32768 [ 188.177864][ T8520] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 188.363210][ T5830] (syz-executor,5830,1):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 76 [ 188.472914][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 189.424419][ T5850] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 189.593531][ T8606] loop6: detected capacity change from 0 to 128 [ 190.163006][ T5897] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 190.332600][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 190.409227][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.437902][ T8636] loop2: detected capacity change from 0 to 16 [ 190.446681][ T8636] erofs (device loop2): mounted with root inode @ nid 36. [ 190.462977][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.523960][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 190.571138][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.630506][ T5897] usb 2-1: config 0 descriptor?? [ 190.650236][ T5897] hub 2-1:0.0: USB hub found [ 190.657512][ T8589] loop4: detected capacity change from 0 to 32768 [ 190.684635][ T8589] XFS: noikeep mount option is deprecated. [ 190.811720][ T8589] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 190.860622][ T5897] hub 2-1:0.0: 2 ports detected [ 190.899619][ T8589] XFS (loop4): Ending clean mount [ 190.998944][ T8589] XFS (loop4): Quotacheck needed: Please wait. [ 191.068410][ T5897] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 191.118013][ T5897] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 191.166899][ T8589] XFS (loop4): Quotacheck: Done. [ 191.239377][ T5897] usbhid 2-1:0.0: can't add hid device: -71 [ 191.247660][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.314011][ T5897] usb 2-1: USB disconnect, device number 8 [ 191.376203][ T8668] dlm: Unknown command passed to DLM device : 11 [ 191.376203][ T8668] [ 191.464226][ T5832] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 192.004556][ T8682] loop6: detected capacity change from 0 to 1764 [ 192.121718][ T8682] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 192.302371][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1265'. [ 192.450649][ T8698] warning: `syz.2.1267' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 192.493430][ T47] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 192.732887][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 192.745960][ T47] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.774451][ T47] usb 2-1: config 179 has no interface number 0 [ 192.780826][ T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 192.797891][ T8710] binder: 8708:8710 ioctl 400c620e 200000000000 returned -22 [ 192.872668][ T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 192.932588][ T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.987176][ T47] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 193.001384][ T47] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 193.088809][ T47] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 193.094092][ T8719] loop4: detected capacity change from 0 to 8 [ 193.108577][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.136390][ T8691] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.473776][ T8727] __vm_enough_memory: pid: 8727, comm: syz.6.1281, bytes: 4503599627366400 not enough memory for the allocation [ 193.486890][ T8691] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 193.486952][ T8691] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 193.488949][ T8691] vhci_hcd vhci_hcd.0: Device attached [ 193.570392][ T8729] vhci_hcd: connection closed [ 193.594266][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.605642][ T64] vhci_hcd: stop threads [ 193.611249][ T64] vhci_hcd: release socket [ 193.622438][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.632939][ T5899] usb 2-1: USB disconnect, device number 9 [ 193.632941][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.653984][ T64] vhci_hcd: disconnect device [ 193.758618][ T8735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1284'. [ 193.834931][ T8738] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 194.353006][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 194.371124][ T8715] loop5: detected capacity change from 0 to 32768 [ 194.384163][ T8756] loop1: detected capacity change from 0 to 2048 [ 194.447647][ T8756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.532738][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 194.562241][ T5833] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 194.572858][ T5833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.584831][ T5833] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 194.606246][ T5833] usb 7-1: config 1 has no interface number 1 [ 194.612426][ T5833] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.627500][ T5833] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 110, changing to 7 [ 194.660974][ T5833] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 25974, setting to 1024 [ 194.697792][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.712440][ T5833] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.729604][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.753857][ T5833] usb 7-1: Product: syz [ 194.758328][ T5833] usb 7-1: Manufacturer: syz [ 194.794020][ T5833] usb 7-1: SerialNumber: syz [ 194.870333][ T8770] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1302'. [ 194.888680][ T8770] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1302'. [ 195.072990][ T5833] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor [ 195.081404][ T5833] usb 7-1: found format II with max.bitrate = 0, frame size=0 [ 195.139854][ T5833] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 195.242025][ T8780] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 195.263032][ T5833] usb 7-1: USB disconnect, device number 2 [ 195.341559][ T8786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.405675][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 196.554656][ T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 196.769000][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 196.795171][ T8839] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1334'. [ 196.801493][ T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 196.826528][ T8840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1333'. [ 196.860149][ T47] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 196.898782][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.909229][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1336'. [ 196.929279][ T47] usb 7-1: Product: syz [ 196.939444][ T8843] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1336'. [ 196.962593][ T47] usb 7-1: Manufacturer: syz [ 196.982580][ T47] usb 7-1: SerialNumber: syz [ 197.053981][ T47] usb 7-1: config 0 descriptor?? [ 197.413554][ T47] usb 7-1: USB disconnect, device number 3 [ 197.442784][ T8861] netlink: 'syz.2.1345': attribute type 1 has an invalid length. [ 197.493417][ T8861] netlink: 'syz.2.1345': attribute type 2 has an invalid length. [ 197.501255][ T8861] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'. [ 197.578147][ T6290] udevd[6290]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.712647][ T30] audit: type=1326 audit(1747302588.232:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 197.832762][ T30] audit: type=1326 audit(1747302588.232:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 197.897459][ T8876] openvswitch: netlink: Missing key (keys=40, expected=100) [ 197.924228][ T30] audit: type=1326 audit(1747302588.252:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 198.041898][ T30] audit: type=1326 audit(1747302588.252:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 198.158341][ T30] audit: type=1326 audit(1747302588.252:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8868 comm="syz.5.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 198.628605][ T8902] netlink: 'syz.4.1365': attribute type 21 has an invalid length. [ 198.671321][ T8906] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 198.695548][ T8902] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1365'. [ 199.196378][ T8923] loop6: detected capacity change from 0 to 1024 [ 199.427646][ T53] hfsplus: b-tree write err: -5, ino 4 [ 199.560517][ T8900] loop1: detected capacity change from 0 to 32768 [ 199.583291][ T8900] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1364 (8900) [ 199.650546][ T8900] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 199.711688][ T8900] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 199.772931][ T8900] BTRFS info (device loop1): disk space caching is enabled [ 199.780527][ T8900] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 200.002677][ T47] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 200.114139][ T8900] BTRFS info (device loop1): rebuilding free space tree [ 200.172602][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 200.213110][ T47] usb 7-1: unable to get BOS descriptor or descriptor too short [ 200.258606][ T8900] BTRFS info (device loop1): disabling free space tree [ 200.262948][ T47] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 200.297027][ T47] usb 7-1: config 7 has no interface number 0 [ 200.298976][ T8900] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 200.333054][ T47] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 200.351092][ T8963] loop4: detected capacity change from 0 to 4096 [ 200.360762][ T8900] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 200.376134][ T47] usb 7-1: config 7 interface 187 has no altsetting 0 [ 200.406164][ T47] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 200.426306][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.472302][ T47] usb 7-1: Product: syz [ 200.499920][ T47] usb 7-1: Manufacturer: syz [ 200.533428][ T47] usb 7-1: SerialNumber: syz [ 200.546704][ T8941] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 200.597998][ T8900] BTRFS info (device loop1): balance: start -susage=0..0,devid=0,drange=0..70368744177664,limit=4294967293..81917 [ 200.711068][ T8900] BTRFS info (device loop1): balance: ended with status: 0 [ 200.714364][ T8974] loop0: detected capacity change from 0 to 2048 [ 200.760221][ T8977] lo: entered allmulticast mode [ 200.798570][ T8977] netlink: 'syz.5.1393': attribute type 8 has an invalid length. [ 200.845136][ T8974] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 200.849652][ T47] usb 7-1: Limiting number of CPorts to U8_MAX [ 200.872727][ T8977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.905884][ T47] usb 7-1: Unknown endpoint type found, address 0x07 [ 200.920040][ T47] usb 7-1: Not enough endpoints found in device, aborting! [ 200.944093][ T5827] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 201.004858][ T8983] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 201.062040][ T5899] usb 7-1: USB disconnect, device number 4 [ 201.521439][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 201.837152][ T9006] loop6: detected capacity change from 0 to 256 [ 201.954412][ T9010] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 201.959262][ T9006] FAT-fs (loop6): Directory bread(block 64) failed [ 202.007960][ T9006] FAT-fs (loop6): Directory bread(block 65) failed [ 202.078666][ T9006] FAT-fs (loop6): Directory bread(block 66) failed [ 202.120762][ T9006] FAT-fs (loop6): Directory bread(block 67) failed [ 202.151666][ T9006] FAT-fs (loop6): Directory bread(block 68) failed [ 202.166830][ T9012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.209604][ T9006] FAT-fs (loop6): Directory bread(block 69) failed [ 202.242929][ T9006] FAT-fs (loop6): Directory bread(block 70) failed [ 202.269586][ T9006] FAT-fs (loop6): Directory bread(block 71) failed [ 202.323051][ T9006] FAT-fs (loop6): Directory bread(block 72) failed [ 202.362736][ T9006] FAT-fs (loop6): Directory bread(block 73) failed [ 202.731541][ T9024] loop1: detected capacity change from 0 to 4096 [ 203.372098][ T8998] loop2: detected capacity change from 0 to 32768 [ 203.445068][ T8998] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 203.912734][ T8998] XFS (loop2): Ending clean mount [ 204.301466][ T9080] netlink: 'syz.6.1439': attribute type 5 has an invalid length. [ 204.366127][ T5829] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 204.395290][ T9080] ip6erspan0: entered promiscuous mode [ 204.648382][ T9089] sctp: [Deprecated]: syz.5.1445 (pid 9089) Use of int in max_burst socket option deprecated. [ 204.648382][ T9089] Use struct sctp_assoc_value instead [ 204.986999][ T9101] loop5: detected capacity change from 0 to 16 [ 205.091359][ T9101] erofs (device loop5): mounted with root inode @ nid 36. [ 205.516013][ T9112] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 205.522789][ T9117] xt_TPROXY: Can be used only with -p tcp or -p udp [ 205.978264][ T9093] loop0: detected capacity change from 0 to 32768 [ 206.030278][ T9093] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1447 (9093) [ 206.155740][ T9093] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 206.202699][ T9093] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 206.219862][ T9093] BTRFS info (device loop0): using free-space-tree [ 206.484079][ T9160] loop1: detected capacity change from 0 to 256 [ 206.565568][ T9165] loop4: detected capacity change from 0 to 64 [ 206.643170][ T9165] hfs: unable to locate alternate MDB [ 206.649072][ T9165] hfs: continuing without an alternate MDB [ 206.738505][ T9165] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 206.920747][ T5830] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 207.041143][ T9178] ip6t_srh: unknown srh match flags 5294 [ 207.744972][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1491'. [ 208.197198][ T9213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1480'. [ 208.225122][ T9213] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1480'. [ 208.568631][ T9229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1504'. [ 209.081905][ T9241] loop6: detected capacity change from 0 to 4096 [ 209.172557][ T9241] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 209.356187][ T9260] loop5: detected capacity change from 0 to 512 [ 209.405895][ T9241] ntfs3(loop6): ino=19, mi_enum_attr [ 209.434268][ T9241] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 209.467906][ T9260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.517477][ T9263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.549828][ T9260] fscrypt (loop5, inode 2): Error -61 getting encryption context [ 209.579746][ T9241] ntfs3(loop6): failed to convert "c46c" to cp864 [ 209.624454][ T9241] ntfs3(loop6): ino=20, mi_enum_attr [ 209.652201][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.412643][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1534'. [ 211.025581][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 211.031733][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 211.039464][ T5136] Bluetooth: hci2: command 0x0406 tx timeout [ 211.048348][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 211.443025][ T47] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 211.621553][ T9286] loop4: detected capacity change from 0 to 32768 [ 211.642589][ T47] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 211.695381][ T47] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 211.710631][ T9286] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 211.729602][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.737941][ T47] usb 1-1: Product: syz [ 211.742281][ T47] usb 1-1: Manufacturer: syz [ 211.748081][ T47] usb 1-1: SerialNumber: syz [ 211.763268][ T47] usb 1-1: config 0 descriptor?? [ 211.780182][ T47] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 211.783436][ T9327] qrtr: Invalid version 0 [ 211.792353][ T47] usb 1-1: Detected FT232R [ 211.821148][ T9296] loop2: detected capacity change from 0 to 32768 [ 211.865911][ T9296] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1536 (9296) [ 211.936013][ T9286] XFS (loop4): Ending clean mount [ 211.997537][ T9296] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.028351][ T9286] XFS (loop4): Quotacheck needed: Please wait. [ 212.039515][ T9296] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 212.048876][ T30] audit: type=1326 audit(1747302602.562:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.6.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d8b8e969 code=0x7ffc0000 [ 212.102252][ T9296] BTRFS info (device loop2): disk space caching is enabled [ 212.153893][ T9286] XFS (loop4): Quotacheck: Done. [ 212.160005][ T9296] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 212.182602][ T30] audit: type=1326 audit(1747302602.562:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.6.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d8b8e969 code=0x7ffc0000 [ 212.205811][ T47] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 212.206498][ T30] audit: type=1326 audit(1747302602.602:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.6.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc5d8b8e969 code=0x7ffc0000 [ 212.246129][ T30] audit: type=1326 audit(1747302602.602:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.6.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d8b8e969 code=0x7ffc0000 [ 212.268888][ T30] audit: type=1326 audit(1747302602.602:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz.6.1550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5d8b8e969 code=0x7ffc0000 [ 212.309123][ T47] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 212.338145][ T47] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 212.354619][ T5832] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 212.413235][ T47] usb 1-1: USB disconnect, device number 4 [ 212.436282][ T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 212.490860][ T9308] loop1: detected capacity change from 0 to 32768 [ 212.541576][ T47] ftdi_sio 1-1:0.0: device disconnected [ 212.668797][ T9296] BTRFS info (device loop2): rebuilding free space tree [ 212.853008][ T9296] BTRFS info (device loop2): disabling free space tree [ 212.901267][ T9296] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 212.957748][ T9296] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 213.232739][ T9365] netlink: 'syz.5.1560': attribute type 1 has an invalid length. [ 213.295236][ T9365] netlink: 15 bytes leftover after parsing attributes in process `syz.5.1560'. [ 213.449041][ T9372] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1562'. [ 213.695968][ T5829] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 213.734073][ T30] audit: type=1326 audit(1747302604.262:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 213.877463][ T30] audit: type=1326 audit(1747302604.292:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 213.912809][ T9383] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1568'. [ 214.018184][ T9387] loop5: detected capacity change from 0 to 16 [ 214.042625][ T30] audit: type=1326 audit(1747302604.292:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 214.135751][ T9387] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 214.157923][ T30] audit: type=1326 audit(1747302604.292:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9380 comm="syz.1.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 214.449050][ T9397] loop0: detected capacity change from 0 to 256 [ 214.556447][ T9397] syz.0.1573: attempt to access beyond end of device [ 214.556447][ T9397] loop0: rw=2051, sector=256, nr_sectors = 32 limit=256 [ 214.724995][ T9405] loop6: detected capacity change from 0 to 2048 [ 214.822657][ T9405] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 214.982299][ T9415] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 215.631297][ T9436] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 215.811456][ T9434] loop5: detected capacity change from 0 to 4096 [ 215.852633][ T9434] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 215.971015][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1599'. [ 216.017361][ T9434] ntfs3(loop5): ino=19, mi_enum_attr [ 216.031367][ T9446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1599'. [ 216.072960][ T9446] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1599'. [ 216.116579][ T9434] ntfs3(loop5): failed to convert "c46c" to maciceland [ 216.149431][ T9434] ntfs3(loop5): ino=20, mi_enum_attr [ 216.236697][ T9454] loop0: detected capacity change from 0 to 256 [ 216.273935][ T9454] exfat: Deprecated parameter 'namecase' [ 216.379367][ T9454] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 216.663169][ T9464] SET target dimension over the limit! [ 216.809748][ T9470] loop0: detected capacity change from 0 to 256 [ 216.866726][ T9470] exfat: Deprecated parameter 'namecase' [ 216.875899][ T9471] loop4: detected capacity change from 0 to 1024 [ 216.965654][ T9470] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 217.131727][ T13] hfsplus: b-tree write err: -5, ino 4 [ 217.580994][ T9450] loop6: detected capacity change from 0 to 32768 [ 217.619713][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1620'. [ 217.660707][ T9492] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1620'. [ 217.873801][ T9509] loop0: detected capacity change from 0 to 256 [ 217.924984][ T9450] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 218.088996][ T9450] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 218.088996][ T9450] allowing incompatible features above 0.0: (unknown version) [ 218.204286][ T9450] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 218.259700][ T9450] bcachefs (loop6): Version upgrade required: [ 218.259700][ T9450] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 218.259700][ T9450] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.25: extent_flags [ 218.259700][ T9450] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 218.373386][ T9450] bcachefs (loop6): dropping and reconstructing all alloc info [ 218.433890][ T9450] bcachefs (loop6): accounting_read... done [ 218.493471][ T9450] bcachefs (loop6): alloc_read... done [ 218.525740][ T9450] bcachefs (loop6): snapshots_read... done [ 218.553493][ T9450] bcachefs (loop6): done starting filesystem [ 218.806450][ T8202] bcachefs (loop6): shutting down [ 219.054256][ T8202] bcachefs (loop6): shutdown complete [ 219.219579][ T30] audit: type=1326 audit(1747302609.742:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 219.289204][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 219.339583][ T30] audit: type=1326 audit(1747302609.792:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 219.410234][ T30] audit: type=1326 audit(1747302609.792:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 219.522603][ T30] audit: type=1326 audit(1747302609.792:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9539 comm="syz.2.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 219.748178][ T9520] loop5: detected capacity change from 0 to 32768 [ 219.891720][ T9526] loop1: detected capacity change from 0 to 32768 [ 219.957216][ T30] audit: type=1326 audit(1747302610.472:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9555 comm="syz.2.1651" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06cb18e969 code=0x0 [ 220.103017][ T9526] JBD2: Ignoring recovery information on journal [ 220.226065][ T9563] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1654'. [ 220.268570][ T9526] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 220.479319][ T9526] OCFS2: ERROR (device loop1): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total [ 220.533582][ T9574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 220.567514][ T9526] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 220.582726][ T9574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1658'. [ 220.591826][ T9526] OCFS2: File system is now read-only. [ 220.615565][ T9526] (syz.1.1633,9526,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30 [ 220.663329][ T9526] (syz.1.1633,9526,1):ocfs2_claim_metadata:2088 ERROR: status = -30 [ 220.671424][ T9526] (syz.1.1633,9526,1):ocfs2_claim_metadata:2101 ERROR: status = -30 [ 220.731445][ T9526] (syz.1.1633,9526,1):ocfs2_dx_dir_attach_index:2328 ERROR: status = -30 [ 220.792553][ T9526] (syz.1.1633,9526,1):ocfs2_expand_inline_dir:3021 ERROR: status = -30 [ 220.852448][ T9526] (syz.1.1633,9526,1):ocfs2_extend_dir:3203 ERROR: status = -30 [ 220.861340][ T9526] (syz.1.1633,9526,1):ocfs2_prepare_dir_for_insert:4308 ERROR: status = -30 [ 220.934501][ T9526] (syz.1.1633,9526,1):ocfs2_mknod:298 ERROR: status = -30 [ 220.952606][ T9526] (syz.1.1633,9526,1):ocfs2_mknod:502 ERROR: status = -30 [ 220.959770][ T9526] (syz.1.1633,9526,1):ocfs2_mkdir:658 ERROR: status = -30 [ 220.967840][ T9580] loop2: detected capacity change from 0 to 4096 [ 220.974746][ T9584] loop5: detected capacity change from 0 to 64 [ 220.990235][ T9580] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 221.042182][ T9586] netlink: 'syz.0.1664': attribute type 1 has an invalid length. [ 221.088429][ T9586] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1664'. [ 221.140640][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 221.154062][ T9580] ntfs3(loop2): ino=19, mi_enum_attr [ 221.208061][ T9526] syz.1.1633 (9526) used greatest stack depth: 19064 bytes left [ 221.246426][ T9580] ntfs3(loop2): failed to convert "c46c" to cp936 [ 221.274545][ T5827] ocfs2: Unmounting device (7,1) on (node local) [ 221.283228][ T9580] ntfs3(loop2): ino=20, mi_enum_attr [ 221.676167][ T9594] netlink: 'syz.4.1669': attribute type 1 has an invalid length. [ 221.709225][ T9594] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1669'. [ 222.008560][ T9604] loop4: detected capacity change from 0 to 128 [ 222.043684][ T9604] EXT4-fs: inline encryption not supported [ 222.156950][ T9604] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.178380][ T9604] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.299079][ T9604] EXT4-fs error (device loop4): ext4_validate_block_bitmap:423: comm syz.4.1674: bg 0: bad block bitmap checksum [ 222.527529][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.541081][ T9620] loop2: detected capacity change from 0 to 64 [ 222.764491][ T9626] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.056231][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1685'. [ 223.081853][ T9633] loop0: detected capacity change from 0 to 764 [ 223.109405][ T9633] rock: directory entry would overflow storage [ 223.143335][ T9633] rock: sig=0x4654, size=5, remaining=4 [ 223.537000][ T9653] openvswitch: netlink: Actions may not be safe on all matching packets [ 223.832027][ T30] audit: type=1800 audit(1747302614.352:49): pid=9648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.5.1693" name="/" dev="sockfs" ino=20457 res=0 errno=0 [ 223.911884][ T9665] loop0: detected capacity change from 0 to 256 [ 223.968514][ T9668] loop2: detected capacity change from 0 to 256 [ 224.008778][ T9668] exfat: Deprecated parameter 'namecase' [ 224.045475][ T9668] exfat: Deprecated parameter 'utf8' [ 224.091064][ T9668] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 224.091469][ T9665] FAT-fs (loop0): Directory bread(block 64) failed [ 224.138766][ T9665] FAT-fs (loop0): Directory bread(block 65) failed [ 224.170844][ T9676] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1706'. [ 224.182853][ T9665] FAT-fs (loop0): Directory bread(block 66) failed [ 224.211403][ T9665] FAT-fs (loop0): Directory bread(block 67) failed [ 224.238891][ T9665] FAT-fs (loop0): Directory bread(block 68) failed [ 224.261554][ T9665] FAT-fs (loop0): Directory bread(block 69) failed [ 224.274175][ T9665] FAT-fs (loop0): Directory bread(block 70) failed [ 224.281117][ T9665] FAT-fs (loop0): Directory bread(block 71) failed [ 224.289088][ T9665] FAT-fs (loop0): Directory bread(block 72) failed [ 224.296195][ T9665] FAT-fs (loop0): Directory bread(block 73) failed [ 224.682880][ T9690] openvswitch: netlink: Actions may not be safe on all matching packets [ 225.126123][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 225.457276][ T9716] netlink: 'syz.5.1725': attribute type 10 has an invalid length. [ 225.920429][ T9726] loop6: detected capacity change from 0 to 4096 [ 226.006054][ T9726] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 226.200818][ T9746] cgroup: none used incorrectly [ 226.242603][ T9726] ntfs3(loop6): ino=19, mi_enum_attr [ 226.250275][ T9726] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 226.392785][ T9726] ntfs3(loop6): failed to convert "c46c" to iso8859-15 [ 226.430366][ T9726] ntfs3(loop6): ino=20, mi_enum_attr [ 226.476593][ T9726] ntfs3(loop6): ino=1b, mi_enum_attr [ 227.144239][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 227.336767][ T10] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 227.346133][ T10] usb 5-1: config 0 has no interface number 0 [ 227.352303][ T10] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 227.399057][ T9789] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1761'. [ 227.409764][ T10] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.465336][ T10] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 227.504801][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.532535][ T10] usb 5-1: Product: syz [ 227.536750][ T10] usb 5-1: Manufacturer: syz [ 227.541383][ T10] usb 5-1: SerialNumber: syz [ 227.659749][ T10] usb 5-1: config 0 descriptor?? [ 227.679903][ T9774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 227.717991][ T10] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 227.758605][ T10] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 228.195122][ T10] usb 5-1: USB disconnect, device number 6 [ 228.246804][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 228.289009][ T10] cyberjack 5-1:0.69: device disconnected [ 228.407398][ T9777] loop0: detected capacity change from 0 to 32768 [ 228.428398][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1776'. [ 228.483969][ T9777] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 228.552672][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 228.654747][ T9777] XFS (loop0): Ending clean mount [ 228.677283][ T9777] XFS (loop0): Quotacheck needed: Please wait. [ 228.743787][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 228.778385][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.831031][ T9777] XFS (loop0): Quotacheck: Done. [ 228.841448][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 228.889311][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 228.922746][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.969789][ T24] usb 2-1: Product: syz [ 229.003984][ T24] usb 2-1: Manufacturer: syz [ 229.034519][ T24] usb 2-1: SerialNumber: syz [ 229.065730][ T24] usb 2-1: config 0 descriptor?? [ 229.135006][ T5830] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 229.302402][ T24] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device: [ 229.308621][ T9846] loop6: detected capacity change from 0 to 512 [ 229.344963][ T24] ea af d9 87 ad fc c9 53 [ 229.377222][ T24] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 229.399001][ T9846] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 229.467866][ T9846] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002] [ 229.476398][ T9846] System zones: 1-12 [ 229.480628][ T9846] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 229.504578][ T47] usb 2-1: USB disconnect, device number 10 [ 229.515553][ T9846] EXT4-fs (loop6): Skipping orphan cleanup due to unknown ROCOMPAT features [ 229.612180][ T9846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 229.672146][ T9846] EXT4-fs (loop6): couldn't mount RDWR because of unsupported optional features (80) [ 229.842650][ T8202] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.854698][ T9856] xt_recent: Unsupported userspace flags (000000de) [ 230.304060][ T9873] loop5: detected capacity change from 0 to 512 [ 230.474799][ T9873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.552754][ T9873] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 230.623793][ T9873] EXT4-fs error (device loop5): ext4_empty_dir:3086: inode #12: block 32: comm syz.5.1798: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 230.726784][ T9873] EXT4-fs warning (device loop5): ext4_empty_dir:3088: inode #12: comm syz.5.1798: directory missing '.' [ 230.917401][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.998751][ T30] audit: type=1326 audit(1747302621.502:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9894 comm="syz.6.1809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5d8b8e969 code=0x0 [ 231.080810][ T9897] loop2: detected capacity change from 0 to 1024 [ 231.510416][ T9907] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1816'. [ 231.594763][ T9907] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357164673) [ 231.626400][ T9907] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 231.686242][ T9882] loop1: detected capacity change from 0 to 32768 [ 231.997792][ T9924] loop2: detected capacity change from 0 to 256 [ 232.697334][ T9946] loop0: detected capacity change from 0 to 64 [ 233.200291][ T9911] loop4: detected capacity change from 0 to 32768 [ 233.268232][ T9911] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1817 (9911) [ 233.382669][ T9911] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 233.433051][ T9911] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.459740][ T9911] BTRFS info (device loop4): disk space caching is enabled [ 233.486300][ T9911] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 233.608230][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1842'. [ 233.621413][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1842'. [ 233.896406][ T9911] BTRFS info (device loop4): rebuilding free space tree [ 233.913463][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1844'. [ 233.976529][ T9991] tc_dump_action: action bad kind [ 234.026693][ T9911] BTRFS info (device loop4): disabling free space tree [ 234.049565][ T9911] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 234.080222][ T9911] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.234639][ T9911] BTRFS info (device loop4): balance: start -susage=0..0,devid=0,drange=0..70368744177664,limit=4294967293..81917 [ 234.282690][ T9911] BTRFS info (device loop4): balance: ended with status: 0 [ 234.442162][T10006] x_tables: ip_tables: osf match: only valid for protocol 6 [ 234.562863][ T5832] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 234.580820][ T9959] loop2: detected capacity change from 0 to 32768 [ 234.673416][ T9959] (syz.2.1836,9959,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.694519][ T9959] (syz.2.1836,9959,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 234.895081][ T9959] JBD2: Ignoring recovery information on journal [ 235.150073][ T9959] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 235.358373][T10027] syz.4.1859 uses old SIOCAX25GETINFO [ 235.358764][T10024] raw_sendmsg: syz.6.1858 forgot to set AF_INET. Fix it! [ 235.449776][ T9996] loop1: detected capacity change from 0 to 32768 [ 235.548589][ T9996] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1846 (9996) [ 235.600869][ T5829] ocfs2: Unmounting device (7,2) on (node local) [ 235.699598][ T9996] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 235.744463][ T9996] BTRFS info (device loop1): using crc32c (crc32c-x86_64) checksum algorithm [ 235.811677][ T9996] BTRFS info (device loop1): using free-space-tree [ 236.583154][ T5827] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 236.763645][T10072] loop2: detected capacity change from 0 to 2048 [ 236.924194][T10072] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 237.009035][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1881'. [ 237.294254][T10082] loop5: detected capacity change from 0 to 4096 [ 237.372689][ T5897] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 237.459152][T10097] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 237.572578][ T5897] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 237.581366][T10082] NILFS (loop5): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 237.608456][ T5897] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.693079][ T5897] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 237.726559][ T5897] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 237.772920][ T5897] usb 1-1: Manufacturer: syz [ 237.826970][ T5897] usb 1-1: config 0 descriptor?? [ 237.829767][T10100] loop2: detected capacity change from 0 to 4096 [ 237.937665][T10100] ntfs3(loop2): It is recommened to use chkdsk. [ 237.953923][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 237.961873][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 238.020993][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 238.051068][T10108] loop4: detected capacity change from 0 to 164 [ 238.088201][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00 [ 238.148395][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00 [ 238.213386][ T5897] rc_core: IR keymap rc-hauppauge not found [ 238.223344][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00 [ 238.252682][ T5897] Registered IR keymap rc-empty [ 238.273917][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00 [ 238.328588][ T5897] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 238.330824][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00 [ 238.371933][ T5897] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 238.476480][T10100] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00 [ 238.508306][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 238.522329][T10117] netlink: 'syz.6.1895': attribute type 1 has an invalid length. [ 238.566239][ T5897] usb 1-1: USB disconnect, device number 5 [ 238.605814][T10121] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 238.667477][T10121] overlayfs: conflicting options: metacopy=off,verity=require [ 239.112619][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 239.181834][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1903'. [ 239.315046][ T10] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 239.340689][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.353905][T10135] loop4: detected capacity change from 0 to 2048 [ 239.385329][ T10] usb 7-1: Product: syz [ 239.389584][ T10] usb 7-1: Manufacturer: syz [ 239.401928][ T10] usb 7-1: SerialNumber: syz [ 239.422031][ T10] usb 7-1: config 0 descriptor?? [ 239.462232][T10142] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 239.481675][T10135] NILFS (loop4): failed to count free inodes: err=-34 [ 239.484883][ T10] ch341 7-1:0.0: ch341-uart converter detected [ 239.696554][ T10] usb 7-1: failed to receive control message: -71 [ 239.723092][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 239.789672][ T10] usb 7-1: USB disconnect, device number 5 [ 239.886391][ T10] ch341 7-1:0.0: device disconnected [ 241.893545][T10234] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1952'. [ 241.953130][T10235] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1953'. [ 241.991074][T10230] loop1: detected capacity change from 0 to 4096 [ 242.091711][T10230] EXT4-fs (loop1): Test dummy encryption mode enabled [ 242.236910][T10230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.590909][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.805299][T10265] loop5: detected capacity change from 0 to 512 [ 242.869956][T10265] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.879295][T10268] ieee802154 phy0 wpan0: encryption failed: -90 [ 242.986552][T10276] loop2: detected capacity change from 0 to 256 [ 243.015312][T10279] loop0: detected capacity change from 0 to 16 [ 243.035100][T10265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.070884][T10265] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.094103][T10276] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.194452][T10276] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.300946][T10279] erofs (device loop0): mounted with root inode @ nid 36. [ 243.315743][ T30] audit: type=1326 audit(1747302633.832:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 243.411256][T10279] syz.0.1973: attempt to access beyond end of device [ 243.411256][T10279] loop0: rw=0, sector=103079215104, nr_sectors = 8 limit=16 [ 243.436017][ T30] audit: type=1326 audit(1747302633.832:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 243.487728][ T30] audit: type=1326 audit(1747302633.842:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f987e190887 code=0x7ffc0000 [ 243.497914][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.554435][ T30] audit: type=1326 audit(1747302633.842:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f987e1907fc code=0x7ffc0000 [ 243.576765][ T30] audit: type=1326 audit(1747302633.842:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f987e190734 code=0x7ffc0000 [ 243.599115][ T30] audit: type=1326 audit(1747302633.842:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f987e190734 code=0x7ffc0000 [ 243.621563][ T30] audit: type=1326 audit(1747302633.842:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f987e18d5ca code=0x7ffc0000 [ 243.715197][ T30] audit: type=1326 audit(1747302633.842:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 243.851920][ T30] audit: type=1326 audit(1747302633.842:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10281 comm="syz.4.1974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 243.900585][T10294] loop1: detected capacity change from 0 to 1024 [ 244.137200][ T53] hfsplus: b-tree write err: -5, ino 4 [ 244.179826][T10296] loop5: detected capacity change from 0 to 4096 [ 244.247606][T10296] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 244.432766][T10296] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 244.534397][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 244.613187][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 244.651989][T10322] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 244.844547][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 244.890483][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.932037][ T10] usb 2-1: config 0 descriptor?? [ 245.174821][ T10] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 245.212165][ T10] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 245.286857][T10332] loop6: detected capacity change from 0 to 8192 [ 245.321454][T10332] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 245.359689][T10344] loop5: detected capacity change from 0 to 1024 [ 245.370383][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 245.376873][ T30] audit: type=1326 audit(1747302635.902:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.4.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 245.450762][T10332] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000001) [ 245.524426][T10332] FAT-fs (loop6): Filesystem has been set read-only [ 245.626417][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 245.661203][ T10] [drm] Initialized udl on minor 2 [ 245.704443][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 245.796100][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 245.883980][ T10] usb 2-1: USB disconnect, device number 11 [ 245.903072][ T5899] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 245.944574][ T5899] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 246.527941][T10377] loop1: detected capacity change from 0 to 128 [ 246.588068][T10377] EXT4-fs (loop1): Test dummy encryption mode enabled [ 246.661958][T10377] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.789948][T10377] ext4 filesystem being mounted at /351/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.914372][T10398] loop6: detected capacity change from 0 to 24 [ 246.962771][T10398] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 247.006921][T10398] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 247.072458][ T5827] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.246889][T10397] loop4: detected capacity change from 0 to 4096 [ 247.330193][T10397] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 247.461082][T10397] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 248.423012][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 248.460583][T10396] loop2: detected capacity change from 0 to 32768 [ 248.478075][T10434] loop1: detected capacity change from 0 to 4096 [ 248.511349][T10434] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 248.596443][T10443] loop0: detected capacity change from 0 to 256 [ 248.631105][T10396] jfs_strtoUCS: char2uni returned -22. [ 248.637139][T10443] exfat: Deprecated parameter 'namecase' [ 248.637324][T10443] exfat: Deprecated parameter 'namecase' [ 248.651395][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 248.685377][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.698837][T10396] charset = cp949, char = 0xd4 [ 248.699389][T10434] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 248.742338][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 248.782537][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.824459][ T24] usb 6-1: config 0 descriptor?? [ 248.857243][T10443] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 248.886569][T10447] loop6: detected capacity change from 0 to 1024 [ 248.907486][T10447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.918327][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 248.925652][ T64] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 248.932634][ T5827] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 248.942122][T10445] loop4: detected capacity change from 0 to 4096 [ 248.953763][T10445] EXT4-fs: Ignoring removed nobh option [ 248.959341][T10445] EXT4-fs: Ignoring removed i_version option [ 248.983690][ T5827] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 248.990806][ T5827] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 249.041041][T10445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.114767][ T12] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 249.150071][T10447] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.237643][T10445] __quota_error: 4 callbacks suppressed [ 249.237675][T10445] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 249.274958][ T24] gspca_vc032x: reg_w err -71 [ 249.279872][ T24] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 249.296400][ T24] usb 6-1: USB disconnect, device number 6 [ 249.310556][T10445] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 249.329321][T10445] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.2051: Failed to acquire dquot type 1 [ 249.658218][ T8202] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.685962][ T5832] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.746058][T10461] netlink: 'syz.1.2057': attribute type 1 has an invalid length. [ 249.992881][T10469] loop6: detected capacity change from 0 to 128 [ 250.044425][T10469] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.054629][T10469] ext4 filesystem being mounted at /126/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.112076][T10469] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 1029 (only 1 groups) [ 250.268605][ T8202] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.467611][T10484] loop5: detected capacity change from 0 to 64 [ 250.907495][T10498] ip6gretap2: entered allmulticast mode [ 251.219385][T10510] loop5: detected capacity change from 0 to 16 [ 251.272676][T10510] erofs (device loop5): mounted with root inode @ nid 36. [ 251.482780][ T5899] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 251.706281][ T5899] usb 3-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb [ 251.722639][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.730725][ T5899] usb 3-1: Product: syz [ 251.778553][ T5899] usb 3-1: Manufacturer: syz [ 251.797945][ T5899] usb 3-1: SerialNumber: syz [ 251.815785][ T5899] usb 3-1: config 0 descriptor?? [ 251.832152][ T5899] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 252.021677][T10540] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2093'. [ 252.050076][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 252.072691][T10540] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2093'. [ 252.082002][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2094'. [ 252.237589][ T5899] gspca_sn9c2028: read1 error -71 [ 252.266374][ T5899] gspca_sn9c2028: read1 error -71 [ 252.271597][ T5899] sn9c2028 3-1:0.0: probe with driver sn9c2028 failed with error -71 [ 252.319756][ T5899] usb 3-1: USB disconnect, device number 4 [ 252.636147][T10559] netlink: 'syz.5.2103': attribute type 10 has an invalid length. [ 252.675311][T10559] netlink: 392 bytes leftover after parsing attributes in process `syz.5.2103'. [ 253.180788][T10581] sctp: [Deprecated]: syz.0.2115 (pid 10581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.180788][T10581] Use struct sctp_sack_info instead [ 253.248684][T10587] netlink: 616 bytes leftover after parsing attributes in process `syz.5.2117'. [ 253.924759][T10615] loop2: detected capacity change from 0 to 16 [ 253.966767][T10618] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 253.980030][T10618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2132'. [ 254.133356][T10618] team0: Port device geneve0 added [ 254.703202][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2147'. [ 254.895614][T10651] loop1: detected capacity change from 0 to 4096 [ 254.952943][T10653] tc_dump_action: action bad kind [ 254.988440][T10658] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.028971][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.035591][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.060501][T10651] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=104, inode=16, rec_len=27928, name_len=9 [ 255.257952][T10651] Remounting filesystem read-only [ 255.372848][T10663] xt_TCPMSS: Only works on TCP SYN packets [ 256.118717][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2167'. [ 256.169584][ T30] audit: type=1326 audit(1747302646.692:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 256.172594][T10692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2167'. [ 256.291212][ T30] audit: type=1326 audit(1747302646.722:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 256.353011][ T30] audit: type=1326 audit(1747302646.762:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 256.376148][ T30] audit: type=1326 audit(1747302646.762:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 256.404618][ T30] audit: type=1326 audit(1747302646.762:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10694 comm="syz.5.2169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 256.686772][T10714] xt_hashlimit: size too large, truncated to 1048576 [ 256.707595][T10714] xt_hashlimit: max too large, truncated to 1048576 [ 256.992196][ T30] audit: type=1326 audit(1747302647.502:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 257.103259][ T30] audit: type=1326 audit(1747302647.502:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 257.211221][T10736] SET target dimension over the limit! [ 257.222682][ T30] audit: type=1326 audit(1747302647.552:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 257.367386][ T30] audit: type=1326 audit(1747302647.662:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 257.523762][ T30] audit: type=1326 audit(1747302647.662:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10724 comm="syz.5.2185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44c478e969 code=0x7ffc0000 [ 257.891192][T10754] QAT: Stopping all acceleration devices. [ 257.942176][T10759] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.351811][T10762] 8021q: adding VLAN 0 to HW filter on device bond2 [ 258.555399][T10776] netlink: 'syz.4.2208': attribute type 32 has an invalid length. [ 258.903313][T10787] loop4: detected capacity change from 0 to 256 [ 258.948457][T10787] exfat: Deprecated parameter 'namecase' [ 258.982885][T10789] __nla_validate_parse: 1 callbacks suppressed [ 258.982910][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2214'. [ 259.014396][T10787] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 259.981226][T10824] netlink: 270 bytes leftover after parsing attributes in process `syz.0.2228'. [ 260.103388][T10829] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 260.241631][T10829] CIFS mount error: No usable UNC path provided in device string! [ 260.241631][T10829] [ 260.326463][T10829] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 260.379897][T10769] loop5: detected capacity change from 0 to 32768 [ 260.455290][T10837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 260.638253][T10839] loop1: detected capacity change from 0 to 1024 [ 260.774791][T10839] hfsplus: xattr searching failed [ 260.963654][ T2955] hfsplus: b-tree write err: -5, ino 4 [ 261.460655][T10816] loop4: detected capacity change from 0 to 32768 [ 261.520538][T10863] loop1: detected capacity change from 0 to 128 [ 261.601358][T10863] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 262.548359][T10890] loop2: detected capacity change from 0 to 512 [ 262.642320][T10890] EXT4-fs: Invalid want_extra_isize 7 [ 262.888248][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.990402][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.496729][T10916] loop4: detected capacity change from 0 to 512 [ 263.543112][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 263.599846][T10919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 263.611267][T10916] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 263.664778][T10916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 263.720030][T10916] EXT4-fs (loop4): orphan cleanup on readonly fs [ 263.730406][T10916] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2265: bg 0: block 361: padding at end of block bitmap is not set [ 263.802648][T10916] EXT4-fs (loop4): Remounting filesystem read-only [ 263.849899][T10930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2271'. [ 263.857913][T10916] EXT4-fs (loop4): 1 truncate cleaned up [ 263.909221][T10916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 263.912122][T10930] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2271'. [ 264.036890][T10916] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 264.209533][T10940] loop0: detected capacity change from 0 to 1024 [ 264.612853][T10953] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2279'. [ 264.621920][T10953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2279'. [ 264.661850][ T47] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 264.707109][T10947] loop1: detected capacity change from 0 to 4096 [ 264.742693][T10953] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2279'. [ 264.882847][ T47] usb 7-1: Using ep0 maxpacket: 32 [ 264.893902][ T47] usb 7-1: config 0 has an invalid interface number: 74 but max is 1 [ 264.902081][ T47] usb 7-1: config 0 has an invalid interface number: 253 but max is 1 [ 264.992749][ T47] usb 7-1: config 0 has no interface number 0 [ 265.042574][ T47] usb 7-1: config 0 has no interface number 1 [ 265.052138][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'. [ 265.117863][ T47] usb 7-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 265.137773][ T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.172590][ T47] usb 7-1: Product: syz [ 265.176857][ T47] usb 7-1: Manufacturer: syz [ 265.222364][ T47] usb 7-1: SerialNumber: syz [ 265.246262][ T47] usb 7-1: config 0 descriptor?? [ 265.658812][ T5899] usb 7-1: USB disconnect, device number 6 [ 266.687400][T11019] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.027785][T11033] loop6: detected capacity change from 0 to 256 [ 267.087870][T11033] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.133270][T11038] loop0: detected capacity change from 0 to 256 [ 267.160587][T11033] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 267.593826][T11047] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2323'. [ 267.639394][T11047] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2323'. [ 267.737817][ T5898] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 267.942604][ T5898] usb 6-1: Using ep0 maxpacket: 8 [ 267.963406][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2328'. [ 267.966765][ T5898] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 268.021666][ T5898] usb 6-1: config 0 has no interface number 0 [ 268.052769][ T5898] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.113330][ T5898] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 268.182592][ T5898] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 268.217169][ T5898] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 268.243159][T11070] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2334'. [ 268.260826][ T5898] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.337162][ T5898] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 268.346870][ T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 268.391536][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.430933][ T5898] usb 6-1: Product: syz [ 268.462035][ T5898] usb 6-1: Manufacturer: syz [ 268.502680][ T5898] usb 6-1: SerialNumber: syz [ 268.542689][ T10] usb 7-1: config index 0 descriptor too short (expected 63506, got 18) [ 268.556661][ T5898] usb 6-1: config 0 descriptor?? [ 268.598871][ T10] usb 7-1: New USB device found, idVendor=0830, idProduct=0060, bcdDevice=13.2b [ 268.635037][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.676192][ T10] usb 7-1: Product: syz [ 268.680499][ T10] usb 7-1: Manufacturer: syz [ 268.707453][ T10] usb 7-1: SerialNumber: syz [ 268.899034][ T5898] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 268.998363][ T10] visor 7-1:1.0: Handspring Visor / Palm OS converter detected [ 269.080821][ T10] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 269.166643][ T10] usb 7-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 269.238768][ T10] usb 7-1: USB disconnect, device number 7 [ 269.286323][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 269.350654][ T5833] usb 6-1: USB disconnect, device number 7 [ 269.393318][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 269.441644][ T10] visor 7-1:1.0: device disconnected [ 269.496796][T11101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2344'. [ 269.544209][T11101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2344'. [ 269.557472][T11103] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 270.222875][ T10] IPVS: starting estimator thread 0... [ 270.332879][T11123] IPVS: using max 24 ests per chain, 57600 per kthread [ 270.482089][T11132] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2355'. [ 270.535566][T11132] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2355'. [ 270.553208][T11135] mac80211_hwsim hwsim7 : renamed from wlan1 (while UP) [ 271.093440][T11142] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.161587][T11142] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 271.182323][T11152] loop4: detected capacity change from 0 to 128 [ 271.247378][T11152] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 271.357123][T11108] loop0: detected capacity change from 0 to 32768 [ 271.397644][T11152] ext4 filesystem being mounted at /420/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 271.426341][T11108] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2347 (11108) [ 271.500452][T11152] EXT4-fs warning (device loop4): verify_group_input:156: Last group not full [ 271.615877][T11108] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.694554][T11108] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 271.782240][ T5832] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 271.812797][T11108] BTRFS info (device loop0): using free-space-tree [ 271.822952][T11164] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 272.250229][T11193] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 272.556605][ T5830] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 272.616551][T11205] netlink: 'syz.1.2378': attribute type 1 has an invalid length. [ 272.659290][T11205] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2378'. [ 273.115883][T11219] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2384'. [ 273.506154][T11235] loop2: detected capacity change from 0 to 128 [ 273.798483][T11242] netlink: 'syz.4.2393': attribute type 2 has an invalid length. [ 273.865441][T11248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2395'. [ 273.945414][T11248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2395'. [ 274.038791][T11242] : entered promiscuous mode [ 274.344284][ T5898] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 274.405866][T11262] loop6: detected capacity change from 0 to 128 [ 274.442984][T11262] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 274.520107][T11262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 274.542661][ T5898] usb 3-1: Using ep0 maxpacket: 16 [ 274.612378][ T5898] usb 3-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=62.ba [ 274.643037][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.651125][ T5898] usb 3-1: Product: syz [ 274.705774][ T5898] usb 3-1: Manufacturer: syz [ 274.710470][ T5898] usb 3-1: SerialNumber: syz [ 274.727397][T11273] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2407'. [ 274.764836][ T5898] usb 3-1: config 0 descriptor?? [ 275.039231][ T5898] snd-usb-hiface 3-1:0.0: probe with driver snd-usb-hiface failed with error -22 [ 275.163397][T11286] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 275.238210][ T5898] usb 3-1: USB disconnect, device number 5 [ 275.264921][T11286] overlayfs: missing 'lowerdir' [ 275.884967][T11309] loop4: detected capacity change from 0 to 64 [ 276.296927][T11321] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2427'. [ 276.349998][T11325] tmpfs: Bad value for 'mpol' [ 276.541686][T11289] loop1: detected capacity change from 0 to 32768 [ 276.610229][T11289] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2414 (11289) [ 276.698068][T11289] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 276.749316][T11289] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 276.815186][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2437'. [ 276.826570][T11289] BTRFS info (device loop1): using free-space-tree [ 276.872873][T11340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2437'. [ 276.927621][T11340] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2437'. [ 277.032714][T11340] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2437'. [ 277.159763][T11340] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2437'. [ 277.170373][T11350] loop0: detected capacity change from 0 to 1764 [ 277.191820][T11360] loop2: detected capacity change from 0 to 4096 [ 277.226257][T11360] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 277.252774][T11289] BTRFS info (device loop1): rebuilding free space tree [ 277.287248][T11350] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 277.618278][ T5827] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 277.884562][T11381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2450'. [ 278.337756][T11389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 278.380158][T11389] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 278.962717][ T5898] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 279.040818][T11413] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 279.125403][T11413] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 279.142628][ T5898] usb 3-1: Using ep0 maxpacket: 8 [ 279.192659][ T5898] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 279.218694][ T5898] usb 3-1: config 179 has no interface number 0 [ 279.241307][ T5898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 279.291011][T11419] netlink: 'syz.6.2467': attribute type 1 has an invalid length. [ 279.299132][ T5898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 279.320974][T11421] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.349131][ T5898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 279.408082][ T5898] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 279.444292][ T5898] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 279.446270][T11383] loop0: detected capacity change from 0 to 32768 [ 279.503617][ T5898] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 279.539295][T11425] xt_hashlimit: size too large, truncated to 1048576 [ 279.551087][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.603759][T11403] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 279.611312][ T30] audit: type=1400 audit(1747302670.132:75): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=11428 comm="syz.6.2472" [ 279.692821][T11383] ialloc: diAlloc returned -5! [ 279.872869][ T5898] usb 3-1: USB disconnect, device number 6 [ 279.878772][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 279.878826][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 279.919403][ T30] audit: type=1326 audit(1747302670.432:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 280.028369][ T30] audit: type=1326 audit(1747302670.432:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 280.050743][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.057588][ T30] audit: type=1326 audit(1747302670.472:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 280.132890][ T30] audit: type=1326 audit(1747302670.492:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987e18e969 code=0x7ffc0000 [ 280.155198][ C0] vkms_vblank_simulate: vblank timer overrun [ 280.350191][T11439] loop5: detected capacity change from 0 to 4096 [ 280.391975][T11445] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2481'. [ 280.454103][T11445] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2481'. [ 280.479046][T11439] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 280.540969][T11439] ntfs3(loop5): Failed to initialize $Extend/$ObjId. [ 280.627117][T11439] ntfs3(loop5): ino=1e, "file1" attr_set_size [ 280.684684][ T5898] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 280.883259][ T5898] usb 2-1: Using ep0 maxpacket: 32 [ 280.929028][ T5898] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a [ 280.958811][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.996300][ T5898] usb 2-1: Product: syz [ 281.000595][ T5898] usb 2-1: Manufacturer: syz [ 281.058679][ T5898] usb 2-1: SerialNumber: syz [ 281.120640][ T5898] usb 2-1: config 0 descriptor?? [ 281.249990][T11473] loop5: detected capacity change from 0 to 16 [ 281.308355][T11473] erofs (device loop5): mounted with root inode @ nid 36. [ 281.404694][ T47] usb 2-1: USB disconnect, device number 12 [ 282.143057][T11500] loop6: detected capacity change from 0 to 1764 [ 282.415580][T11516] Cannot find add_set index 4 as target [ 282.622917][ T5833] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 282.707364][T11526] netlink: 'syz.0.2519': attribute type 11 has an invalid length. [ 282.792666][T11526] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2519'. [ 282.828464][ T5833] usb 5-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 282.848112][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.944302][ T5833] usb 5-1: config 0 descriptor?? [ 282.996435][ T5833] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 283.194575][ T5181] bcm5974 5-1:0.0: could not read from device [ 283.286711][ T5833] usb 5-1: USB disconnect, device number 7 [ 283.336963][ T5181] bcm5974 5-1:0.0: could not read from device [ 283.367758][ T5181] bcm5974 5-1:0.0: could not read from device [ 283.434131][ T6019] bcm5974 5-1:0.0: could not read from device [ 283.519769][ T5181] bcm5974 5-1:0.0: could not read from device [ 283.707007][ T6019] udevd[6019]: Error opening device "/dev/input/event4": No such device [ 283.750532][ T6019] udevd[6019]: Unable to EVIOCGABS device "/dev/input/event4" [ 283.810139][ T6019] udevd[6019]: Unable to EVIOCGABS device "/dev/input/event4" [ 283.839772][ T6019] udevd[6019]: Unable to EVIOCGABS device "/dev/input/event4" [ 283.909194][ T6019] udevd[6019]: Unable to EVIOCGABS device "/dev/input/event4" [ 284.017225][T11571] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2540'. [ 284.243993][ T5853] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 284.494402][T11588] loop5: detected capacity change from 0 to 764 [ 285.072830][T11612] netlink: 'syz.4.2562': attribute type 1 has an invalid length. [ 285.136079][T11612] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2562'. [ 285.372826][ T6978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 285.563100][ T6978] usb 6-1: Using ep0 maxpacket: 8 [ 285.590455][ T6978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 285.692597][ T6978] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 285.693211][T11634] x_tables: duplicate underflow at hook 4 [ 285.701723][ T6978] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 285.701770][ T6978] usb 6-1: Product: syz [ 285.701799][ T6978] usb 6-1: Manufacturer: syz [ 285.701820][ T6978] usb 6-1: SerialNumber: syz [ 285.820648][T11638] netlink: 'syz.0.2575': attribute type 5 has an invalid length. [ 285.858238][T11636] loop6: detected capacity change from 0 to 1024 [ 285.921140][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2574'. [ 285.938846][T11636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.998589][T11645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.069946][ T6978] usb 6-1: palm_os_3_probe - error -71 getting connection information [ 286.084196][T11636] EXT4-fs warning (device loop6): ext4_rmdir:3185: inode #11: comm syz.6.2573: empty directory 'file1' has too many links (111) [ 286.113619][ T6978] visor 6-1:1.0: probe with driver visor failed with error -71 [ 286.254414][ T6978] usb 6-1: USB disconnect, device number 8 [ 286.431735][ T8202] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.772871][T11662] netlink: 'syz.6.2583': attribute type 2 has an invalid length. [ 286.792884][T11662] netlink: 244 bytes leftover after parsing attributes in process `syz.6.2583'. [ 286.812408][T11664] loop2: detected capacity change from 0 to 2048 [ 286.859629][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 286.915971][T11672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 286.950965][ T5962] Alternate GPT is invalid, using primary GPT. [ 286.980280][ T5962] loop2: p1 p2 p3 [ 287.049615][T11664] Alternate GPT is invalid, using primary GPT. [ 287.092889][T11664] loop2: p1 p2 p3 [ 287.660808][T11680] loop6: detected capacity change from 0 to 2048 [ 287.672706][T11688] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2596'. [ 287.709137][T11680] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.869074][T11696] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.947001][T11680] NILFS error (device loop6): nilfs_check_folio: size of directory #2 is not a multiple of chunk size [ 288.009089][T11699] loop1: detected capacity change from 0 to 1024 [ 288.028378][T11680] Remounting filesystem read-only [ 288.127185][ T7543] udevd[7543]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 288.149783][T10323] udevd[10323]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 288.167460][ T6019] udevd[6019]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 288.198342][T11701] bridge3: entered promiscuous mode [ 288.208148][T11705] tmpfs: Bad value for 'mpol' [ 288.232635][T11701] bridge3: entered allmulticast mode [ 288.261946][T11699] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.336617][ T7543] udevd[7543]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 288.369120][ T5895] udevd[5895]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 288.487189][T11669] loop5: detected capacity change from 0 to 32768 [ 288.512047][T11699] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2599: missing EA_INODE flag [ 288.557367][T11669] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2588 (11669) [ 288.681222][T11669] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 288.737520][T11699] EXT4-fs (loop1): Remounting filesystem read-only [ 288.750478][T11669] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 288.832615][T11669] BTRFS info (device loop5): using free-space-tree [ 288.839805][T11699] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 289.011189][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.077848][T11738] loop6: detected capacity change from 0 to 256 [ 289.164020][T11738] exfat: Deprecated parameter 'utf8' [ 289.218158][T11738] exfat: Deprecated parameter 'utf8' [ 289.256320][T11738] exfat: Deprecated parameter 'utf8' [ 289.325627][T11748] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2612'. [ 289.389124][T11738] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 289.392603][T11748] IPv6: NLM_F_CREATE should be specified when creating new route [ 289.546586][ T5846] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 289.651389][T11755] loop4: detected capacity change from 0 to 16 [ 289.676411][T11738] exFAT-fs (loop6): error, exfat_zeroed_cluster: out of range(sect:224 len:8) [ 289.733181][T11755] erofs (device loop4): mounted with root inode @ nid 36. [ 289.754771][T11738] exFAT-fs (loop6): Filesystem has been set read-only [ 290.521720][T11773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.692591][ T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 290.898786][ T47] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 290.928012][T11751] loop0: detected capacity change from 0 to 32768 [ 290.938956][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.002561][ T47] usb 3-1: Product: syz [ 291.006821][ T47] usb 3-1: Manufacturer: syz [ 291.052251][ T47] usb 3-1: SerialNumber: syz [ 291.057747][T11751] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 291.077757][ T47] usb 3-1: config 0 descriptor?? [ 291.117994][T11751] (syz.0.2613,11751,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 291.189424][T11793] Invalid ELF header magic: != ELF [ 291.214613][T11751] (syz.0.2613,11751,1):ocfs2_prepare_dir_for_insert:4294 ERROR: status = -2 [ 291.275876][T11751] (syz.0.2613,11751,1):ocfs2_mknod:298 ERROR: status = -2 [ 291.305311][T11751] (syz.0.2613,11751,1):ocfs2_mknod:502 ERROR: status = -2 [ 291.382915][ T47] int51x1 3-1:0.0: probe with driver int51x1 failed with error -22 [ 291.431214][T11794] loop4: detected capacity change from 0 to 4096 [ 291.470929][ T5830] ocfs2: Unmounting device (7,0) on (node local) [ 291.484233][T11794] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 291.585264][ T24] usb 3-1: USB disconnect, device number 7 [ 291.664452][T11802] loop5: detected capacity change from 0 to 256 [ 291.712388][T11794] ntfs3(loop4): ino=5, "/" indx_read [ 291.816220][T11802] FAT-fs (loop5): Directory bread(block 64) failed [ 291.827906][T11802] FAT-fs (loop5): Directory bread(block 65) failed [ 291.856902][T11802] FAT-fs (loop5): Directory bread(block 66) failed [ 291.924644][T11802] FAT-fs (loop5): Directory bread(block 67) failed [ 291.952679][T11802] FAT-fs (loop5): Directory bread(block 68) failed [ 291.959295][T11802] FAT-fs (loop5): Directory bread(block 69) failed [ 292.018529][T11802] FAT-fs (loop5): Directory bread(block 70) failed [ 292.035862][T11802] FAT-fs (loop5): Directory bread(block 71) failed [ 292.062981][T11802] FAT-fs (loop5): Directory bread(block 72) failed [ 292.069548][T11802] FAT-fs (loop5): Directory bread(block 73) failed [ 292.863490][T11833] program syz.0.2649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.887534][T11835] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2650'. [ 292.898034][T11830] loop4: detected capacity change from 0 to 4096 [ 292.930794][T11830] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 292.982763][T11838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2653'. [ 293.137915][T11830] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 293.181201][T11844] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2656'. [ 293.858714][T11860] loop6: detected capacity change from 0 to 512 [ 293.980013][T11864] loop5: detected capacity change from 0 to 512 [ 294.027894][T11860] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.2663: attempt to clear invalid blocks 2 len 1 [ 294.102782][T11870] binder: BC_ATTEMPT_ACQUIRE not supported [ 294.108706][T11870] binder: 11866:11870 ioctl c0306201 200000000540 returned -22 [ 294.148710][T11860] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 294.188603][T11842] loop2: detected capacity change from 0 to 32768 [ 294.197804][T11864] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2666: bad orphan inode 13 [ 294.232032][T11860] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2663: invalid indirect mapped block 1819239214 (level 0) [ 294.350457][T11842] ea_get: invalid extended attribute [ 294.357346][T11864] ext4_test_bit(bit=12, block=4) = 1 [ 294.369114][T11860] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.2663: invalid indirect mapped block 1819239214 (level 1) [ 294.384406][T11864] is_bad_inode(inode)=0 [ 294.388584][T11864] NEXT_ORPHAN(inode)=0 [ 294.427705][T11864] max_ino=32 [ 294.454831][T11875] netlink: 'syz.4.2669': attribute type 10 has an invalid length. [ 294.458110][T11864] i_nlink=1 [ 294.466350][T11860] EXT4-fs (loop6): 1 truncate cleaned up [ 294.497128][T11875] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 294.498215][T11864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.520189][T11860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.642719][T11860] EXT4-fs warning (device loop6): dx_probe:803: inode #2: comm syz.6.2663: Unrecognised inode hash code 20 [ 294.701055][T11860] EXT4-fs warning (device loop6): dx_probe:936: inode #2: comm syz.6.2663: Corrupt directory, running e2fsck is recommended [ 294.752142][T11864] EXT4-fs warning (device loop5): dx_probe:803: inode #2: comm syz.5.2666: Unrecognised inode hash code 20 [ 294.822835][T11864] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.2666: Corrupt directory, running e2fsck is recommended [ 294.860896][T11864] EXT4-fs warning (device loop5): dx_probe:803: inode #2: comm syz.5.2666: Unrecognised inode hash code 20 [ 294.891603][T11864] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.2666: Corrupt directory, running e2fsck is recommended [ 294.985052][ T8202] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.034249][T11883] loop1: detected capacity change from 0 to 512 [ 295.082096][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.203228][T11883] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2674: bad orphan inode 13 [ 295.299568][T11883] ext4_test_bit(bit=12, block=4) = 1 [ 295.330099][T11883] is_bad_inode(inode)=0 [ 295.370686][T11883] NEXT_ORPHAN(inode)=0 [ 295.385432][T11883] max_ino=32 [ 295.388741][T11883] i_nlink=1 [ 295.420193][T11883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.702603][T11901] netlink: 'syz.5.2682': attribute type 10 has an invalid length. [ 295.784488][T11904] netlink: 'syz.4.2684': attribute type 10 has an invalid length. [ 295.856247][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.908383][T11901] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 295.994689][T11904] veth0_macvtap: left promiscuous mode [ 296.069474][T11904] batman_adv: batadv0: Adding interface: macvtap0 [ 296.090687][T11906] loop2: detected capacity change from 0 to 8192 [ 296.104537][T11904] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.155705][T11906] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.162947][T11910] netlink: 'syz.1.2686': attribute type 2 has an invalid length. [ 296.176477][T11904] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 296.837855][T11932] loop5: detected capacity change from 0 to 16 [ 296.877921][T11896] loop0: detected capacity change from 0 to 32768 [ 296.929467][T11932] erofs (device loop5): mounted with root inode @ nid 36. [ 296.987019][T11896] (syz.0.2680,11896,0):ocfs2_verify_heartbeat:839 ERROR: Heartbeat has to be started to mount a read-write clustered device. [ 297.043726][T11896] (syz.0.2680,11896,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 297.166816][T11896] exFAT-fs (loop0): invalid boot record signature [ 297.225979][T11896] exFAT-fs (loop0): failed to read boot sector [ 297.298705][T11896] exFAT-fs (loop0): failed to recognize exfat type [ 298.038586][T11956] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 298.062580][ T5850] Bluetooth: hci6: command 0x0406 tx timeout [ 299.120295][T11990] ip6gretap1: entered promiscuous mode [ 299.161384][T11948] loop5: detected capacity change from 0 to 40427 [ 299.269475][T11948] F2FS-fs (loop5): invalid crc value [ 299.805358][T11948] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 300.001301][T12023] loop6: detected capacity change from 0 to 512 [ 300.036995][T12025] loop1: detected capacity change from 0 to 128 [ 300.112186][T12025] befs: (loop1): invalid magic header [ 300.210870][T12023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.312069][T12023] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.385659][T12030] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 300.486225][T12023] EXT4-fs error (device loop6): ext4_xattr_block_get:593: inode #15: comm syz.6.2740: corrupted xattr block 19: overlapping e_value [ 300.490351][T12030] EXT4-fs (loop6): Remounting filesystem read-only [ 300.774758][T12048] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2753'. [ 300.799920][ T8202] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.909396][T12053] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2756'. [ 301.285642][T12062] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 301.371693][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2762'. [ 301.639067][T12074] autofs4:pid:12074:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 301.687357][T12076] netlink: 'syz.5.2746': attribute type 21 has an invalid length. [ 301.790789][T12076] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2746'. [ 302.269425][T12096] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 302.772803][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2786'. [ 302.881157][T12121] NILFS (nbd0): device size too small [ 303.095717][ T30] audit: type=1326 audit(1747302693.622:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 303.206381][ T30] audit: type=1326 audit(1747302693.622:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 303.304569][ T30] audit: type=1326 audit(1747302693.622:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 303.326912][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.439890][ T30] audit: type=1326 audit(1747302693.622:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 303.569066][ T30] audit: type=1326 audit(1747302693.622:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12128 comm="syz.1.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33d998e969 code=0x7ffc0000 [ 303.591420][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.605642][T12101] loop6: detected capacity change from 0 to 32768 [ 303.646904][T12101] [ 303.646904][T12101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.646904][T12101] [ 303.716608][T12144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2798'. [ 303.743731][T12101] [ 303.743731][T12101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.743731][T12101] [ 303.796461][T12101] [ 303.796461][T12101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.796461][T12101] [ 303.837744][T12101] [ 303.837744][T12101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.837744][T12101] [ 303.856771][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2800'. [ 303.897162][T12101] [ 303.897162][T12101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.897162][T12101] [ 303.929721][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2800'. [ 303.956282][T12101] [ 303.956282][T12101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.956282][T12101] [ 303.973132][T12147] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2800'. [ 304.029969][T12101] [ 304.029969][T12101] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.029969][T12101] [ 304.135802][ T114] [ 304.135802][ T114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.135802][ T114] [ 304.269757][ T8202] [ 304.269757][ T8202] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.269757][ T8202] [ 304.320654][ T30] audit: type=1326 audit(1747302694.832:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 304.342964][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.358492][ T8202] [ 304.358492][ T8202] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 304.358492][ T8202] [ 304.455603][ T30] audit: type=1326 audit(1747302694.832:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 304.477919][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.605211][ T30] audit: type=1326 audit(1747302694.882:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 304.627527][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.755698][ T30] audit: type=1326 audit(1747302694.882:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 304.873748][ T30] audit: type=1326 audit(1747302694.882:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.2.2807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06cb18e969 code=0x7ffc0000 [ 305.582956][ T31] INFO: task syz-executor:5828 blocked for more than 143 seconds. [ 305.622789][ T31] Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 [ 305.630523][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 305.694104][ T31] task:syz-executor state:D stack:22184 pid:5828 tgid:5828 ppid:1 task_flags:0x400140 flags:0x00004006 [ 305.764363][ T31] Call Trace: [ 305.773371][ T31] [ 305.785408][ T31] __schedule+0x16e2/0x4cd0 [ 305.804178][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.829669][ T31] ? schedule+0x165/0x360 [ 305.837574][ T31] ? __lock_acquire+0xaac/0xd20 [ 305.846005][ T31] ? __pfx___schedule+0x10/0x10 [ 305.850950][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 305.857411][ T31] ? schedule+0x91/0x360 [ 305.861712][ T31] schedule+0x165/0x360 [ 305.875978][ T31] io_schedule+0x81/0xe0 [ 305.880342][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 305.889509][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 305.899093][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 305.931193][ T31] ? folios_put_refs+0x559/0x640 [ 305.936729][ T31] ? __pfx_find_lock_entries+0x10/0x10 [ 305.945400][ T31] __filemap_get_folio+0x139/0xaf0 [ 305.950619][ T31] truncate_inode_pages_range+0x3ed/0xda0 [ 305.956767][ T31] ? evict+0x847/0x9c0 [ 305.962652][ T31] ? evict_inodes+0x636/0x6c0 [ 305.967544][ T31] ? generic_shutdown_super+0x9a/0x2c0 [ 305.981166][ T31] ? kill_block_super+0x44/0x90 [ 305.986669][ T31] ? deactivate_locked_super+0xbc/0x130 [ 305.992335][ T31] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 306.003835][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.010003][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.022214][ T31] ? __lock_acquire+0xaac/0xd20 [ 306.028677][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.037397][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.044062][ T31] evict+0x517/0x9c0 [ 306.048010][ T31] ? __pfx_evict+0x10/0x10 [ 306.052909][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.058581][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.071130][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 306.076476][ T31] evict_inodes+0x636/0x6c0 [ 306.081136][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.093201][ T31] ? __pfx_evict_inodes+0x10/0x10 [ 306.098307][ T31] generic_shutdown_super+0x9a/0x2c0 [ 306.103943][ T31] kill_block_super+0x44/0x90 [ 306.108925][ T31] deactivate_locked_super+0xbc/0x130 [ 306.117656][ T31] cleanup_mnt+0x425/0x4c0 [ 306.122128][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.129015][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.134402][ T31] task_work_run+0x1d4/0x260 [ 306.139163][ T31] ? __pfx_task_work_run+0x10/0x10 [ 306.144578][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.150386][ T31] resume_user_mode_work+0x5e/0x80 [ 306.155706][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 306.161308][ T31] do_syscall_64+0x103/0x210 [ 306.166288][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.171971][ T31] ? exc_page_fault+0x91/0x110 [ 306.176858][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.183141][ T31] RIP: 0033:0x7f1ea838fc97 [ 306.187601][ T31] RSP: 002b:00007ffc7424a418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 306.196517][ T31] RAX: 0000000000000000 RBX: 00007f1ea841089d RCX: 00007f1ea838fc97 [ 306.204610][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7424a4d0 [ 306.212811][ T31] RBP: 00007ffc7424a4d0 R08: 0000000000000000 R09: 0000000000000000 [ 306.222160][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7424b560 [ 306.238722][ T31] R13: 00007f1ea841089d R14: 0000000000026cb4 R15: 00007ffc7424b5a0 [ 306.246855][ T31] [ 306.250100][ T31] [ 306.250100][ T31] Showing all locks held in the system: [ 306.261426][ T31] 1 lock held by khungtaskd/31: [ 306.266602][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 306.276616][ T31] 2 locks held by getty/5590: [ 306.281428][ T31] #0: ffff88814d6650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 306.291355][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 306.301697][ T31] 1 lock held by syz-executor/5828: [ 306.307596][ T31] #0: ffff88807d4f80e0 (&type->s_umount_key#58){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 306.317961][ T31] [ 306.321621][ T31] ============================================= [ 306.321621][ T31] [ 306.333146][ T31] NMI backtrace for cpu 1 [ 306.333167][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 306.333197][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.333212][ T31] Call Trace: [ 306.333221][ T31] [ 306.333231][ T31] dump_stack_lvl+0x189/0x250 [ 306.333271][ T31] ? __wake_up_klogd+0xd9/0x110 [ 306.333302][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.333334][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.333371][ T31] ? __pfx__printk+0x10/0x10 [ 306.333411][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 306.333440][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 306.333463][ T31] ? _printk+0xcf/0x120 [ 306.333493][ T31] ? __pfx__printk+0x10/0x10 [ 306.333520][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 306.333549][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 306.333580][ T31] watchdog+0xfee/0x1030 [ 306.333615][ T31] ? watchdog+0x1de/0x1030 [ 306.333657][ T31] kthread+0x711/0x8a0 [ 306.333691][ T31] ? __pfx_watchdog+0x10/0x10 [ 306.333722][ T31] ? __pfx_kthread+0x10/0x10 [ 306.333752][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.333782][ T31] ? __pfx_kthread+0x10/0x10 [ 306.333810][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.333838][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.333866][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.333897][ T31] ? __pfx_kthread+0x10/0x10 [ 306.333927][ T31] ret_from_fork+0x4e/0x80 [ 306.333952][ T31] ? __pfx_kthread+0x10/0x10 [ 306.333982][ T31] ret_from_fork_asm+0x1a/0x30 [ 306.334023][ T31] [ 306.334032][ T31] Sending NMI from CPU 1 to CPUs 0: [ 306.507158][ C0] NMI backtrace for cpu 0 [ 306.507177][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 306.507204][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.507218][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 306.507250][ C0] Code: ee fd b9 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 cf 11 00 f3 0f 1e fa fb f4 c3 fd b9 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 306.507268][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 00000286 [ 306.507288][ C0] RAX: dde0f2c833d69300 RBX: ffffffff81977128 RCX: dde0f2c833d69300 [ 306.507305][ C0] RDX: 0000000000000001 RSI: ffffffff8d74c4b4 RDI: ffffffff8bc1d9a0 [ 306.507320][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 306.507337][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7efd70 [ 306.507354][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 306.507371][ C0] FS: 0000000000000000(0000) GS:ffff8881260c7000(0000) knlGS:0000000000000000 [ 306.507389][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 306.507405][ C0] CR2: 00007f44c497d2d8 CR3: 0000000031970000 CR4: 0000000000350ef0 [ 306.507422][ C0] Call Trace: [ 306.507430][ C0] [ 306.507439][ C0] default_idle+0x13/0x20 [ 306.507469][ C0] default_idle_call+0x74/0xb0 [ 306.507502][ C0] do_idle+0x1e8/0x510 [ 306.507525][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.507553][ C0] ? __pfx_do_idle+0x10/0x10 [ 306.507572][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 306.507597][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.507625][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 306.507650][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 306.507682][ C0] cpu_startup_entry+0x44/0x60 [ 306.507703][ C0] rest_init+0x2de/0x300 [ 306.507735][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 306.507760][ C0] start_kernel+0x470/0x4f0 [ 306.507793][ C0] x86_64_start_reservations+0x2a/0x30 [ 306.507814][ C0] x86_64_start_kernel+0x66/0x70 [ 306.507839][ C0] common_startup_64+0x13e/0x147 [ 306.507883][ C0] [ 306.513442][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 306.513464][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00093-g546bce579204 #0 PREEMPT(full) [ 306.513494][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 306.513511][ T31] Call Trace: [ 306.513521][ T31] [ 306.513532][ T31] dump_stack_lvl+0x99/0x250 [ 306.513574][ T31] ? __asan_memcpy+0x40/0x70 [ 306.513603][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.513639][ T31] ? __pfx__printk+0x10/0x10 [ 306.513674][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.513708][ T31] panic+0x2db/0x790 [ 306.513744][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.513779][ T31] ? __pfx_panic+0x10/0x10 [ 306.513813][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.513841][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 306.513879][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.513908][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 306.513939][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 306.513969][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.514003][ T31] watchdog+0x102d/0x1030 [ 306.514040][ T31] ? watchdog+0x1de/0x1030 [ 306.514087][ T31] kthread+0x711/0x8a0 [ 306.514123][ T31] ? __pfx_watchdog+0x10/0x10 [ 306.514155][ T31] ? __pfx_kthread+0x10/0x10 [ 306.514186][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.514216][ T31] ? __pfx_kthread+0x10/0x10 [ 306.514252][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 306.514280][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 306.514313][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.514344][ T31] ? __pfx_kthread+0x10/0x10 [ 306.514375][ T31] ret_from_fork+0x4e/0x80 [ 306.514401][ T31] ? __pfx_kthread+0x10/0x10 [ 306.514432][ T31] ret_from_fork_asm+0x1a/0x30 [ 306.514474][ T31] [ 306.902870][ T31] Kernel Offset: disabled [ 306.907190][ T31] Rebooting in 86400 seconds..