last executing test programs: 15m18.856207652s ago: executing program 32 (id=1621): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, 0xffffffffffffffff) 15m12.730585126s ago: executing program 33 (id=1705): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105500, &(0x7f0000000180)=@usbdevfs_disconnect={0x40002}) 14m58.525667714s ago: executing program 34 (id=1876): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x102) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000080)={0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m40.64988287s ago: executing program 3 (id=2852): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) 13m40.456914613s ago: executing program 3 (id=2853): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000200)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000000000000000005,namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c666d61736b3d30303030303030303030303030303030303030303031302c646973636172642c666d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d6575632d6a702c6572726f72733d636f6e74696e75652c616c6c6f775f7574696d653d30303030303030303030303030303030303134373037302c0092803b831534d131135366249e8a045ee656058ddf6f41400b01a0870e4c656ef6f11325a20c319fd81269acc3b77200feb4294a821f553876d64b4a41390c44492e6f79c4b09bbe8e5cb02585b919505651c34f3e21f9532204a0c936a1da6422edb1108cf73536e8fbe241e030f5b5e1d081994fbe8a093c44b63f3da6a8a46706b47fa3"], 0x1, 0x1528, &(0x7f00000037c0)="$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") mount$nfs(&(0x7f0000000380)=',\x8e\x9b\xca\x9b2(\x01\x00\x00\xf3\xa5..O\xb2\xe2{(`\xf0\xbc\xef\xb6\vN\xf8\xe2`\x95\xac\xe3p\xdd\xe2[\xf3mc\x7f?r\xd4(^\"\xe1\xfe\x16\x8dD\x1b\xf8\xc0\xe0\xd9\xbb\x00\xc6\xbaP\xf7\x8e\f\xb3q6\xb3\xf8S\xb4dnQ\xa5\xcf?\x9e\xd6\xbb\xd9R\x13\xbd\x82\x97\\\xdb\xf0\x18.7\xfb*/\x8ak[\xf4\xaa\x06\xc5g\xa5\f\xfa\xefgv\x19\v0H\x00\x88\xed\x00\xf6\xfd\xd2\xe6\x02 \x1e-\xaf(u\xdd\xbbv\xa9\'(\xecq\xf0Ju|,\xadw6\x81%\x87x)\x01E.\x8d\x97\xd9\f\xba-\xca\x9c\x82\x99\x91\x87\x96\x1f\x16\xce?\xaf\x87\x12\xeb&h\x80\x80\xd7\xaa\x97|\xa6\x84?\xc0\xab\xd7&\xb4\xc5\xa4L\xc1\x8e\xf8\x02j\xb9\xc3\xa9-a\xd3\x8b\x12\x118E\xb9\x1e\x83\xc7\xac\x86\xc3\xbe\a\r\xfb\x94\x14\x11\x12F\x06\xd0f\x9f\xf7:\xdfs\v\xdcE\x9a\t\xf2v\x8c\xd0\x9d<{', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) 13m39.929600941s ago: executing program 3 (id=2857): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b02300ffbfa30000000000000703000000feffff7a0af0ff2300000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13m39.557100947s ago: executing program 3 (id=2861): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000600)={[{@force}, {@nodecompose}, {@gid}, {@nls={'nls', 0x3d, 'macinuit'}}, {@gid}, {@type={'type', 0x3d, "1e4310ee"}}, {@nobarrier}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) 13m38.997900945s ago: executing program 3 (id=2864): r0 = syz_open_dev$vim2m(&(0x7f0000002a80), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x33424752, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x6}}) 13m38.117970959s ago: executing program 3 (id=2872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x1, 0xfc, 0x7}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xb4ba}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 13m37.36982641s ago: executing program 35 (id=2872): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xff, 0x1, 0xfc, 0x7}, [@RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xb4ba}}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 4m35.745811575s ago: executing program 8 (id=10191): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x400, 0x0, 0x7, 0x8, 0x8, 0xfffffffc}) 4m35.458093559s ago: executing program 8 (id=10196): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a8001600a400014003000000036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 4m35.140266744s ago: executing program 8 (id=10201): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x9, {0x2, 0x4e22, @local}}, 0x24) 4m34.916402727s ago: executing program 8 (id=10206): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000019c0)=ANY=[@ANYBLOB='allow_utime=00000000000000000000304,namecase=1,errors=remount-ro,umask=00000000000000000000020,fmask=00000000000000000000005,iocharset=cp1251,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000003,errors=continue,fmask=00000000000000000000005,allow_utime=0000000000000002\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152a, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 4m34.392655305s ago: executing program 8 (id=10213): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x3, 0x4f3, &(0x7f00000012c0)="$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") rmdir(&(0x7f0000000380)='./file0/../file0\x00') 4m33.813360984s ago: executing program 8 (id=10221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)={0x30, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40480d4) 4m33.363852011s ago: executing program 36 (id=10221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)={0x30, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40480d4) 3m1.984531165s ago: executing program 7 (id=11282): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x2b4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) 3m0.189978162s ago: executing program 7 (id=11302): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x219) 3m0.013281985s ago: executing program 7 (id=11307): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000180)='4\x00', 0x2) 2m59.534105082s ago: executing program 7 (id=11312): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@umask={'umask', 0x3d, 0xb}}, {@nodecompose}, {@nls={'nls', 0x3d, 'cp775'}}, {@uid}, {@type={'type', 0x3d, "0ff88dbf"}}, {@nobarrier}]}, 0x20, 0x6e7, &(0x7f00000006c0)="$eJzs3U1sHGf9B/DvrNcbbyq5bv9Jmz9CitWICBpI7CwlQUJqQAjlUEEkLr2axGmsOGlkuyiJEHGBwhFOKIceilA49IQ4IBVxQJQzEhL3XFEkDtwiDhjN7Ky963cnfmnD5yON55mZ5+X3/Hb28e460Qb4n3XxzQwvpsjFU2/cLo8fPujMPnzQudErJzmUpJE0u7sUN5Pi42658v/lybpcbDTOa48+ev/k/Q873aNmvVX1G5u1W7G0yQiL9ZbxJEP1foeaG/V3eZ3+7u2o62I57gtJTtR7OHBLayzupPk2nrfAJ929ZGh4nfNjyeEkI/XrgNSrQ2Ofw9t1O1rlAAAA4JNpaKsKzz/O47Qyuj/hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLOh6H5nYFFvjV55PEX9/f/fqatVWq2DDXcLX9zi+ntX9ykQAAAAAAAAANh9wyvF44/zOLcz2jteKqq/+b9SHRypfj6XdzKf6czldG5nKgtZyFwmk+HRvj5bt6cWFuYm17b8ZcqWS0tL9+qWZ5OMrWl5do/nDAAAAAAAAADPth/lYkYPOggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOhXJEPdXbUd6ZXH0mgmGUnSKustJn/slT/N/nTQAQAAAMDea9f70eI/3cJSUb3nf6l63z+Sd3IzC5nJQmYznSvVZwHdd/2Nvy12Zh8+6Nwot7Udf/2fO4qj6jHJUN7dYOSJqsbR5RYX8618N6cynkuZy0y+n6ksZDrjaZeTyFSKjLW7n16M9eIcjHeo7urCQCiXVsd2fNXxsSqSdq5mportdC63er01qhpFjvWN9vtWsipD75bZKV6vbTNHV/oer1/Un8vUlp7fZh97Y6ya+fByRibK3NfZeGH93Pfs8D5ZPdJkGsufQR1ZGaU8XD1SL+ff20nOD9f7Mtc/Hcz5btvhR2mrM3E2jfruS14azPmtz91/cbDxF/7+50vXGjevX7s6f2oPp7SnhnuF1Zno9GXi5c3vvjoTs2UmFrefieHVJ0aeYh67qFVno7uw1atleWKT1fKbVWkqr/Tdgm/nSqZzLhOZzPlM5Ks5m87AHXZ0IK/Nzo3BnFTPtcba9a29SfAnPt9X6WdbVN5fZV5e6Mtr/0o3Vl2rz1z4eSb6svTi5nffk/wWaH6mLpRj/Dh5/R+7OM+nM5CJem3uZaL3C2qDTPxqqfw5P3vz+ty1qVvbHO9kvS+ftu8Nrs2/furJPJXyfilX3GZ1VOWk3btfymv/txztYL5a9V9cuu0aa64dXb42ltHM5NsbPlNb9Wu4tT11r7287rVOde1Y37WBVzl5O7PVq5BVxvcnqwBs2+FXD7faj9p/bX/Q/kn7WvuNkW8cOn/os60M/6X5h6HfNn7T+Frxaj7IDzN60JECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCzYP7O3etTs7PTc3tYaD3hWGlsWefBc9vrMGPJ5mMVdaH1hDNt7lMyd6Pwr5FNs9HOHo3+uySb1Gk99RDF3j8E5Y28Kx32vjitOrM0tIPmzV6r9es0Mz+y0SN4aOVxz9j1qdl/Lw3UaafvKQM8484s3Lh1Zv7O3S/N3Jh6a/qt6Ztnz587f67zlckvn7k6Mzs90f150FECe2H+zt2hg44BAAAAAAAAAAAA2Jn6X/8vPPF/ZmhuUac1N7/+yMf3e6oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAp9TFNzO8mCKTE6cnyuOHDzqz5dYrr9RsJmkkKX6QFB8nF9LdMtbXXbHROK89+uj9k/c/7Kz01ezVb2zWbnsW6y3jSYbq/dYOrdPN2v4u9/W3+EThFcszLBN2opc4OGj/DQAA//8TYPQt") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 2m59.086352059s ago: executing program 7 (id=11318): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)={[{@shortname_winnt}, {@utf8no}, {@fat=@sys_immutable}, {@fat=@time_offset={'time_offset', 0x3d, 0x161}}, {@shortname_winnt}, {@fat=@tz_utc}, {@fat=@check_normal}, {@utf8no}, {@utf8}]}, 0xfd, 0x2c7, &(0x7f0000000480)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2m58.493413248s ago: executing program 7 (id=11326): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x1f40) 2m58.011072455s ago: executing program 37 (id=11326): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)=0x1f40) 2m35.390761003s ago: executing program 5 (id=11549): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@showexec}, {@shortname_winnt}, {@shortname_win95}, {@numtail}, {@rodir}, {@numtail}, {@shortname_mixed}, {@uni_xlateno}]}, 0x1, 0x26c, &(0x7f0000000340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) 2m34.95413285s ago: executing program 5 (id=11552): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) 2m34.711835773s ago: executing program 5 (id=11555): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x11, 0x2b6, &(0x7f0000000200)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 2m34.354457299s ago: executing program 5 (id=11558): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f0000000800)="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", 0x108) 2m33.978030224s ago: executing program 5 (id=11562): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="eae535d4c5cd41b584d3bdb8d3fb3e37666220165c8aec9c235bc9af137d4058a50551a5b228bbbcf6cd1275ef3732adfeaebdf711988cbe9d1da671f8bbaac371392e227f548006163fc9aaf3d55e97410ccacb7df3444c03ac4170da3fbc69ae1c8a590318a7a33a774debbcc54bb6d6025bc65458b94791d5a8bcd898b75cce569e2c6fd55928c5084aab22c8196fb436916cff76302fd8c4b69ca674271f5db630ffad103ad9286287759d0d5470d0b54f701a713e8803665b87799065f31bb0cff21d9c109c1fbfffb640facdacd569f158f694c34ffb4c405b186aa90e8be7b47c56e6e439ae953605d89c131c711ff56f0adb96e5ee0d269b4cfc9d089794f60bdd06e845b5ffdccfefee032ecfd92f6cba5920130f685e807f88de4a2e595ea37f39a92dcbaeb2de15dab62a5a199d4666578eb1707e88ebb0b98140fdb62d60005fd6721f18a2054b2ba2ed308813164f8dbc7e1d26a11a707adc6978a25cca2fca5d62e51794447f656b92f8372ebf98934a0bc057b901080da81ef02ccfa18a29c9b82c90fd38eb554b83428948f3608cd8fd5845bed25a0d96b146f09bd4cce20efc1ecc7bf64bd88e7a460b372a298cb776eb1d78cc334da71dc6056b2d1119cdad3af9092a42c184e9d487076399f0be65a442fdc06901089e6b5178ecb57aa4b98ff1f538696e8510551dbb5cbd36b125efa2a3e719f22b96eeec80a178dae9c894a7dd170419c33817baedfc132cde868a1c55192b9c8a332772fc40fed9f6fee1aea0e2001752caeb58afb55ea7c421cd0eb5e6ea301f8e2f6b68484849f5d3e7bd1b4aa865d2cd049dfc773bb4281f5f8dd2a3f1563c8cd3655dd9e391424151dadf7415afb242cb99b9b9541b6780beafc6a8c2c0bd109749dde1e8535040d8d2cda8393abaa6cdae24e13917e867d6d301f6f39619bcbd70acc747e093ef3c22f0b1a8b8a4d8bd11bc19c7102e11a8603d563507423c96d1653a42d02ff1ee390934927f037d2022cbbf86cb605e82e2b6e2c2fa1d523f72b47738f318836defed1f898271bdd4fcbe7863e5aa7c7e468d9bad908de3c6851c696df710da87771840f46e63fc4c3d5d9b13b663ed2fef2e56a8690cdee9e6ac0a9824c9fe458ad29614f9485f9c18caf2d5c229f24a220ab84daa26ddb2a0d4059b43e073b703148d82fe4d91ae24db7224df2ee4e10d596846466d6a62faa9da7d24f9dd1e3b5cc291f4840b6603d1173204a452a9b05a5efcf4f9e09c2a3c38f2fd49322e718ddc8278ea182a359043387705c0be61be7e62ba7bb85dfa0f24400f89087f78d84d2296844944d186fb55045eb016dd3d602c85211d7b19dbebe3247313283da5bcbba09a3a74c590fdce8cdbef49a73b11413a9df4aaefc356e94f838cef801ba2380d7e5fdc8865140311f071c82bc1482c2033b8ad70d08a5a71e1c949f93cd8743b0bd4eefdaf45f5246efcf800444c8e9b8c2a01b76b6eb4e0639ee7381971172c53e165f14946fb56896e40424a3b981d97b4b01504806d797bb9e3405a7326d2ba7bfa6efc923c4c68d0165aea2d80ae953c7e2ec6534d0da7c28bbe255d81097e84254ff7bd065caa84fa7455885e1b28ab7d6243d0f02903860049935a764ebfe5384bdf9ae0b71f1641e457780da2071a84937dd88d2e4aec7ddaab66e335887f555a724ad9692ee996521ccaa35e2358aea1ab6a8c9845af8af552520fdec7ecb635d230074aa532c3efe6677c79b1328451a779501eccb4c11750744cfce16ba2ced0fc6dd2b75a5ff1770f3851c93bcf8850adf496012d94b8dd6a00d1f9f0c96989979b89838a29875072e0b678a2a55338f21625165c350134d7cb9119ac4dcc77f13a153fe6819d1bdc6b357e93531a68813913daf65d2e62d4bd09da6bb16e8d686518f6faff70dc0804b4b6810117d8698a4d27f0482f9adf9be3aae179dbcad90ab1fbd6b1ba15cdc78ee7686bd15a8fe1cf5af00fcc0a6981a77ac5c3485518921a1b4ea90b02e0059c2c71850d517bddc12bd61a5571da765a34b53e5f06a2b8bb122bf9d642f1ad50a0eb7afe34ef6fd2474d25f314adbf276a895b80b8de6e31eaee5fe4544f4709bf6416f26ec52d517dd3a350cb68df6791dc671495e0f056de8b158095b32ec8b43f65b1f3110cf7da37d2383e99a5bd9a0e0d5684a5b15246170bd11909ef22ee740aa5556dbc0f9dacc8ce440c137bf0ec673651067ef1146004701376116986c49b10226141bea12f679c3f53eaea945b1bb92e6c922a85a2221f768ff4f1c188dc82f9e8d947e140f43c4950430f88a47fb15dcd8ef8491ff08d7b287b280eab99e44a7fba6d4fe20fcb2c2cfa1a6f4d59b51755e66a3d9a325a08a286185c2bdac8c8c2910ed3ff8e047f28b2bf1827e0829f8ec8459241300583f1880c96b2e405b253af5f7e9ee91e34c3fa2cd5c53a71bc3b4b1a5741c17a7b73c8e7d3e8ec9e51a90772b8eb38f23fcb9e07eff8b0f68d4f7d4d68bfb8fbc8d90be681166fe5ed220e3a425c65c0e678e8b7470a99d7fccc7a3be07189ee02e1f8c81549b0b8c0113ef602d10d5d2429e8b60fa5aaddd55cb86141609bae35c185c5ad743d0fb0a1244ba6d67755e46073f3d428926c0d9033f8180120deab78a4b42664e36b6723039457195bff897760ede28bf2661a95715dd20bc744ae2a06bcb12ef8b7a373f3a5557f20256446ba95d45b7810d68494f954d1802aa8986279adc368c2365168c0619bc8952ec6ac60840d9968302edb8809d36f6b0c83dc6941193fb8eb2adcef36db70cbe51fd533ee108eaedebc05ab363058feecfb51e294419695019d0ba50a660ecbe3fd1b43ac973141b7e4c423c062f63ad24468ca79740502716b10a823821429d53f34409cc0757587a5de21663c33a8b194c988a3c209cec76b9fc18805649d9cc109635271c968972f4328e561b562ad6c32a71b269718a303ae3635e5b06717152817a11589d3efa0f803d7bb560c08132827333ada867d1a870e2feb3a5e7851363fc333bb681018764aab63eb740978994f62ec3147d4d6a40e099ada0c50c1a5f6a8196549be226508055aef349c76af40596f6c9b7217423628bb6dc07d9382f6d4c87c962ec97bee6384ba3e2522b76ee8619093500a75bcc8fd0fb9bb5093650ec0ca9c867a22260e2668ecf46047e3df87f5d82d992a558e45fb852be616c030edf6aeeae70848403dc1166e6a16776e8660f90449f297224f667563850480f259f6a59039b1a3ea5488971b5e4bcbf380c527c937055dbf4f5a676bacc09f4dde33c50a1286f6024980df1064a9dc4b3f101b129fa1fc141e54f52d4b7322a0cb1c2567205016f5ede0794122fcaa2d11fa77f5fddb3a5f3c7b3d85f0cb6f32cd11d752f755687fb8d93d40711a4c8873ec7c794f0f781bb9c10f9df22fa8f40cca06a48c37e66ea4480fcdd686526be62915ebe36e0bdf7dafd3940f698469ecdc792ca6105a37499a19382247a85bb734e4ba325dd307be8444b5860f99f9dbc7aa28c26747c89041bde3c10c459406786e10792078a52f4bcc32aff61b3f5798cb5dc2927f260f70a41d8e5fc38498b02d0053a86ae408d2efdc1aca9a8508ef9128dfd1fc6a92ba72f940ee469a3111e2cf6c28e77e5a206db6f09139db812fa4e4cfe33c8d184e4763bd8e54e0e473346215b8905d101463dd2ca855747c81c7ffd6c2625e0b59273a9516ec96a5cd8d9078c974980a16b6b87563986ba287821cd41f417792e42dd24e796e313b9cd943f1b9dd6ee35676ff4ad46dbd52db83abbc78f5dad11b6e7bd09a4ace8c246d0a52c36dcb1f0c6025f6ed2868f4b918b6e4e645c63689b7e7bc369dbe44725993b3b43f4572a7136b6e610adc161f45fc307c0937f2338ebc4fd571852b229b80ccd071e1a29c927f88b8b45efa503691758125d29463e742e2ef508babf30ae39ff8bb3a94cfee379f84348c002fdef77b410bee9f47f8119388b3fc159b409b9d9c9af97a4b75c38ca5fc0665cd975df293370de64714cefdd470c1d05a5d3e0f257182889d7a2d797ebf42d6935d1c6b5ef8cd1e2783cef3a316dbd4768510f26ee5b1c481bcac3e1608458d4b5ec6411cb3c921a131140440561931ca51b92231de91d1f950d992eec74c6500a6ecc9e8bc26eec367dba82720accd6dee234db88c132ec649baeef23a16ebb18c8e5b68b95aac984d8322a01b39636baf16911e458242730ea8b22c686bd01bc451e91c34f81fafe88485bbe97ec99299940ca897c3f802d080ecf8ca7e5032c728b8b33f162ab26a6805db239b88103c19ff8160a28268f8f7ac66593c67251fb0f3fa3004d5ad08107f48e0ecc1e4e910554f49ca72e3fd7e212d828fc3c0c40203e4642a3a372f36cfd13a037fd4dd107d6b386659b379c4c41813c8599cb71fd08e4b80f22dbb088d3d0257f30493b1c4d54201a00e049d998d291ecb659e65e2eed9776b367afc9b84b03957701bcbef289b0eea8e5722a63e1bd748d5af209c5ebff7df185d0d68e7ceabbf9a63bba55946cd3b52a09383fd9b9d2d956dc4e5af16986c5600dfd0db89e0e478420557d001c3716350c3e6ba0bbec1e5888435d296d8666f455d22205ea407a95eb60bc68a184e95ae3259f3783c594d3e550c018369df677ea11a37c757a3bd3c19eb257f5e228ad760562e431754a0c620004548962c3a4fb42d49259dafc1b9d365323fa2ace81876728a24f70b06e1198d5f863bfd00a04d5393b3adb15f4191d374c607c7ccb6b7ef84303454b6655392a23dccca41f55cb314a3bfbb637f57178cc9df4fe0645a8dc1ca0386d1fb0ff2cfc3e149991f97264d893fba0b013c027ce753c3e1f907a2988b1507eecd0e5e26368155ff5c55f616ffec31a613be450ee048955a46d68c272aa53f1db6ce199e2765f4be20933799d96f13b3a65f33cb60da1929023ff5d820172c423f83210a992264a37854033cd43c88129fabb5146367d2b748d84be96dc3a4ad95279ec7ed78dcb57056597a9f46a948708b0e9915b22f28216d94554db2082f4b9782a5802bf6700ef9017168a68304b6573f46c78a0a3be302e096b4f5b87313a2ef9a2b5f51956d9e315b08ee89a59aeec225227f3ece808c451e1103df7887f944138af1b93235bc93121fb84591d065d5f245c035c238a1c30d510be5db14725148919e8d57f1e3a36ead8be870e2505e3c9935c4461741c4a8dc4dff7e0e042167a7228bf218c9d8dd9c0be9e5ff4a79968d8f34cfc3206e0ade5889e9c5e44c918ed3755063d4148e7f1da9d2ce7aa45b9fc873f85cb92160b8a4d5b219884d0c43cc1194259ec4a6127887470d2fabbc1983b1bcc51e931f131d1238333c09740b43802fc5b1c01a942c5d08693b81e59429cb7d49f454f517cddc160d563a243182083008f2481e35312b4b35a2688468f18f4733f4b40d2f298c0b88ec2ad51e2efa509905233e3bbb9e172a1e697ab379f500c8c791aa97623bc8faa7f0468e02e6bc6f9bc40c75b4c01b92731fc371ad7c90928bead62a74580bb2d0aa1d8972fa857766ebe8aa00cd9eae79a591ea3e87a5ce636dc865b992c98a6fafe478973665936ad477558dac400fe179e86e6fef41aa074d0812f0c14f3992edb76358d02a2b763512ca9abc0940dd711670deb4d9abf196de9106efa5e1c14a673de86193908206ab9f72afd6ef1b05355f06ad0b9bc83750bb196654566b56e13e6e820d12bc34920b45c3"], 0xfd, 0x200, &(0x7f00000002c0)="$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") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m32.799956312s ago: executing program 5 (id=11578): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x10, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2m17.665743545s ago: executing program 38 (id=11578): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x10, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1m42.360234907s ago: executing program 9 (id=12186): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000330003010000000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) 1m42.015308963s ago: executing program 9 (id=12190): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m41.572395359s ago: executing program 9 (id=12197): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="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", 0x5c9}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f", 0xc9}, {&(0x7f0000000b00)="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", 0x194}, {&(0x7f0000001ec0)="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", 0x1dc}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a", 0x42}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x44000) 1m41.282129714s ago: executing program 9 (id=12201): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x847, &(0x7f0000000140)=ANY=[], 0xe0, 0xc33, &(0x7f0000000340)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 1m40.773098572s ago: executing program 9 (id=12208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x6, {0x2}, [@NDA_PROTOCOL={0x5, 0xc, 0x2}]}, 0x24}}, 0x0) 1m39.359048884s ago: executing program 9 (id=12224): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 1m38.772885152s ago: executing program 39 (id=12224): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 3.153236491s ago: executing program 2 (id=13276): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x8}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 2.790832516s ago: executing program 4 (id=13281): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.656169549s ago: executing program 2 (id=13282): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xe24) 2.393677942s ago: executing program 1 (id=13286): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x8000, 0x0, @mcast1, 0x46}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0)="80003792a88f13ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x7, @rand_addr=' \x01\x00', 0xb89}, 0x1c) 2.352155173s ago: executing program 2 (id=13287): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 2.346453953s ago: executing program 4 (id=13289): readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/130, 0x82}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) 2.092600447s ago: executing program 2 (id=13291): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x48, 0x7, 0xc, 0x80}, {0x50, 0x4, 0x76, 0xfffff034}, {0x6, 0x28, 0x3, 0x207}]}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 2.070013667s ago: executing program 1 (id=13292): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000200)=""/211, 0xd3) 2.056683698s ago: executing program 6 (id=13293): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001200970228bd70000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000010"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.817491592s ago: executing program 6 (id=13295): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0x4}, 0x1c) 1.674273874s ago: executing program 0 (id=13296): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x10000, 0xb, 0x5}}}}]}, 0x40}}, 0x4000010) 1.594950265s ago: executing program 6 (id=13297): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000200)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@noload}, {@nobarrier}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") chdir(&(0x7f0000000380)='./file0\x00') unlink(&(0x7f0000000080)='./file0\x00') 1.537185005s ago: executing program 1 (id=13298): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000840)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}, @cswp={0x58, 0x114, 0x7, {{0x7e, 0xb}, 0x0, 0x0, 0x7, 0x8, 0x10, 0x2, 0x30, 0xe1}}], 0x88, 0x20000081}, 0x0) 1.306167919s ago: executing program 4 (id=13299): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x2061, 0x1, {0x3}}) io_uring_enter(r0, 0x6e2, 0x0, 0xb, 0x0, 0x0) 1.286596459s ago: executing program 1 (id=13300): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x4000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x14400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) 1.150116822s ago: executing program 0 (id=13301): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 1.040028723s ago: executing program 2 (id=13302): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x1, "ac1ac0", 0x5}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) 952.976915ms ago: executing program 1 (id=13303): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001400010000000000000000000a000000", @ANYRES32, @ANYBLOB="14000100ff01000000000000000000000000000114000600c5000000c5"], 0x70}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) 916.762105ms ago: executing program 4 (id=13304): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080), &(0x7f0000000100)=0x2) 911.538025ms ago: executing program 0 (id=13305): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x161842, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x1, 0x8000000000000000, 0x4}) 822.558777ms ago: executing program 6 (id=13306): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x5374}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x6, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x1, 0x0, 0x9, 0x3, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x3, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x3, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x8000007, 0x2bf, 0x3, 0x200, 0xffff3441, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 727.766418ms ago: executing program 4 (id=13307): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @remote, 0x1}, 0x1c) sendto$inet(r0, &(0x7f0000000040)="0acd53ceb3250b6d2001001000000000e8439a8177b6b76c87b021c4858b1f2133d49624ad432c12", 0x28, 0x0, 0x0, 0x0) 661.985539ms ago: executing program 1 (id=13308): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@uni_xlate}, {@numtail}, {@utf8no}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001280)=""/4089, 0xff9) 656.133349ms ago: executing program 0 (id=13309): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0x689, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x2, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x881) 512.292741ms ago: executing program 6 (id=13310): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_STAB={0x4}]}, 0x38}}, 0x4000010) 401.595403ms ago: executing program 4 (id=13311): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000002380)=""/4094, 0xffe) 373.903574ms ago: executing program 0 (id=13312): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x125d, &(0x7f0000001080)) 287.784935ms ago: executing program 6 (id=13313): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r0, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1}, 0x8) write$rfkill(r0, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) 206.967396ms ago: executing program 2 (id=13314): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x40842, 0x21) pread64(r0, 0x0, 0x0, 0x8000000000cc0e) 0s ago: executing program 0 (id=13315): mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_clone(0x2800000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) kernel console output (not intermixed with test programs): 0 to 64 [ 984.367564][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 984.466508][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge4: link becomes ready [ 984.622573][ T5480] usb 3-1: USB disconnect, device number 7 [ 984.902820][T21213] udevd[21213]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 985.049963][ T5425] loop5: detected capacity change from 0 to 8 [ 985.292414][ T5425] SQUASHFS error: Failed to read block 0x106: -5 [ 985.729790][ T5451] loop6: detected capacity change from 0 to 4096 [ 985.767708][ T5451] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 985.895355][ T5469] loop4: detected capacity change from 0 to 8 [ 985.950725][ T26] audit: type=1800 audit(986.894:2590): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.11562" name="file2" dev="loop5" ino=6 res=0 errno=0 [ 985.996640][ T5469] SQUASHFS error: lzo decompression failed, data probably corrupt [ 986.032258][ T5469] SQUASHFS error: Failed to read block 0x144: -5 [ 986.038679][ T5469] SQUASHFS error: Unable to read metadata cache entry [142] [ 986.057715][ T5451] ntfs3: loop6: failed to convert "c46c" to cp950 [ 986.072123][ T5469] SQUASHFS error: Unable to read directory block [142:26] [ 986.658356][ T5512] xt_hashlimit: max too large, truncated to 1048576 [ 987.120455][ T5530] loop2: detected capacity change from 0 to 256 [ 987.188872][ T5530] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 987.417283][ T5545] netlink: 'syz.4.11592': attribute type 2 has an invalid length. [ 987.507648][ T5547] xt_TPROXY: Can be used only with -p tcp or -p udp [ 987.758951][ T5566] netlink: 'syz.9.11597': attribute type 1 has an invalid length. [ 987.831999][ T5566] netlink: 'syz.9.11597': attribute type 3 has an invalid length. [ 987.839933][ T5566] netlink: 224 bytes leftover after parsing attributes in process `syz.9.11597'. [ 988.408890][ T5597] loop6: detected capacity change from 0 to 2048 [ 988.446367][ T5597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 988.889695][ T5619] loop6: detected capacity change from 0 to 2048 [ 988.941279][ T5619] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 988.997469][ T5619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 989.366236][ T5649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11621'. [ 989.412001][ T5649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11621'. [ 989.929615][ T26] audit: type=1326 audit(990.874:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.2.11630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 990.052113][ T26] audit: type=1326 audit(990.924:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.2.11630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 990.073980][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.151977][ T26] audit: type=1326 audit(2000000000.000:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.2.11630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 990.174460][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.209134][ T5700] loop4: detected capacity change from 0 to 64 [ 990.215929][ T26] audit: type=1326 audit(2000000000.000:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5684 comm="syz.2.11630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 990.238367][ C1] vkms_vblank_simulate: vblank timer overrun [ 990.455126][ T5711] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 990.966485][ T5743] loop2: detected capacity change from 0 to 64 [ 991.100106][ T5749] tmpfs: Bad value for 'mpol' [ 991.351613][ T5753] loop9: detected capacity change from 0 to 4096 [ 991.391699][ T5753] ntfs3: loop9: Different NTFS' sector size (2048) and media sector size (512) [ 991.492587][ T5760] loop2: detected capacity change from 0 to 4096 [ 991.517906][ T5760] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 991.711160][ T5760] ntfs3: loop2: failed to convert "c46c" to cp950 [ 992.028384][ T5789] loop2: detected capacity change from 0 to 256 [ 992.598439][ T5811] loop9: detected capacity change from 0 to 4096 [ 992.633496][ T5811] ntfs: (device loop9): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 992.678929][ T5811] ntfs: (device loop9): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 992.712150][ T5826] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 992.758415][ T5811] ntfs: (device loop9): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 992.797458][ T5811] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 992.864176][ T5811] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 992.929892][ T5811] ntfs: volume version 3.1. [ 992.968308][ T5811] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 993.027684][ T5811] ntfs: (device loop9): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 993.059759][ T5811] ntfs: (device loop9): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 993.106127][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.112734][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.133451][ T5811] ntfs: (device loop9): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is corrupt. [ 993.211862][ T5811] ntfs: (device loop9): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 993.544928][ T5864] netlink: 'syz.9.11676': attribute type 4 has an invalid length. [ 993.571140][ T5864] netlink: 'syz.9.11676': attribute type 3 has an invalid length. [ 993.593102][ T5867] PKCS8: Unsupported PKCS#8 version [ 993.599554][ T5864] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11676'. [ 993.895089][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11681'. [ 993.984844][ T5885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11682'. [ 994.443621][ T5912] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 994.524911][ T5915] loop4: detected capacity change from 0 to 1024 [ 994.623006][ T5915] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 994.644186][ T5915] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #11: comm syz.4.11690: directory missing '.' [ 994.710858][ T5915] EXT4-fs (loop4): Remounting filesystem read-only [ 994.859466][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 994.876322][ T5937] program syz.6.11695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 994.912527][ T5937] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 995.012581][ T5929] loop2: detected capacity change from 0 to 4096 [ 995.047713][ T5945] loop4: detected capacity change from 0 to 1024 [ 995.058537][ T5929] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 995.189424][ T5955] IPv6: Can't replace route, no match found [ 996.174778][ T5994] loop4: detected capacity change from 0 to 4096 [ 996.198153][ T6002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11713'. [ 996.235112][ T6007] loop6: detected capacity change from 0 to 64 [ 996.275834][ T5994] ntfs: volume version 3.1. [ 996.558314][ T6016] loop9: detected capacity change from 0 to 512 [ 996.632866][ T6021] nftables ruleset with unbound chain [ 996.700754][ T6016] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 996.762358][ T6016] ext4 filesystem being mounted at /249/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 996.834381][T31289] EXT4-fs (loop9): unmounting filesystem. [ 996.895643][ T6035] netlink: 'syz.2.11719': attribute type 16 has an invalid length. [ 996.943952][ T6035] netlink: 'syz.2.11719': attribute type 17 has an invalid length. [ 997.013723][ T6035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 997.039841][ T6035] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 997.084262][ T6035] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 997.144690][ T6043] device ip6gretap2 entered promiscuous mode [ 997.541959][ T4666] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 997.662373][ T6080] program syz.6.11729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.742072][ T4666] usb 5-1: Using ep0 maxpacket: 32 [ 997.749707][ T4666] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 997.827924][ T4666] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 997.865108][ T4666] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 997.883115][ T4666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.921360][ T4666] hub 5-1:4.0: USB hub found [ 998.119762][ T4666] hub 5-1:4.0: 2 ports detected [ 998.127948][ T4666] usb 5-1: selecting invalid altsetting 1 [ 998.142746][ T4666] hub 5-1:4.0: Using single TT (err -22) [ 998.335942][ T4666] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 998.344765][ T4666] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 998.434274][ T4666] usb 5-1: USB disconnect, device number 43 [ 999.134144][ T6165] loop2: detected capacity change from 0 to 256 [ 999.222620][ T6165] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 999.282084][ T6165] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 999.322000][ T6165] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 999.381060][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 999.381075][ T26] audit: type=1800 audit(2000000009.390:2595): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11750" name="file1" dev="loop2" ino=1048802 res=0 errno=0 [ 999.924853][ T6206] netlink: 'syz.2.11761': attribute type 9 has an invalid length. [ 1000.274908][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11765'. [ 1000.314692][ T6224] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11765'. [ 1000.345227][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11765'. [ 1000.373302][ T6224] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11765'. [ 1000.428013][ T6224] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11765'. [ 1000.543862][ T6239] netlink: 'syz.4.11771': attribute type 21 has an invalid length. [ 1000.562577][ T6239] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11771'. [ 1001.197176][ T6271] loop2: detected capacity change from 0 to 2048 [ 1001.214798][ T6271] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1001.330500][ T6281] loop6: detected capacity change from 0 to 1024 [ 1002.392466][T31298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1002.408211][T31298] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1002.420958][T31298] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1002.432805][T31298] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1002.446051][T31298] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1002.453744][T31298] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1002.581948][ T4666] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1002.605916][ T6326] vxcan1 speed is unknown, defaulting to 1000 [ 1002.773817][ T4666] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1002.794119][ T4666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.830839][ T4666] usb 3-1: config 0 descriptor?? [ 1003.131155][ T6315] loop6: detected capacity change from 0 to 32768 [ 1003.243106][ T6315] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1003.257944][ T4666] ath6kl: Failed to submit usb control message: -71 [ 1003.268103][ T4666] ath6kl: unable to send the bmi data to the device: -71 [ 1003.291437][ T6315] (syz.6.11792,6315,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 1003.308505][ T4666] ath6kl: Unable to send get target info: -71 [ 1003.352970][ T6315] ocfs2: Unmounting device (7,6) on (node local) [ 1003.353623][ T4666] ath6kl: Failed to init ath6kl core: -71 [ 1003.672254][ T4666] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1003.716743][ T4666] usb 3-1: USB disconnect, device number 8 [ 1003.831074][ T6326] chnl_net:caif_netlink_parms(): no params data found [ 1004.415522][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.437507][ T6502] loop4: detected capacity change from 0 to 4096 [ 1004.461461][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.512648][ T6502] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1004.542011][T31298] Bluetooth: hci2: command 0x0409 tx timeout [ 1004.586011][ T6502] ntfs: (device loop4): check_mft_mirror(): $MFTMirr location mismatch. Run chkdsk. [ 1004.623996][ T6326] device bridge_slave_0 entered promiscuous mode [ 1004.633079][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.640215][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.672488][ T6502] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 1004.710976][ T6326] device bridge_slave_1 entered promiscuous mode [ 1004.737728][ T6564] netlink: 1020 bytes leftover after parsing attributes in process `syz.9.11812'. [ 1004.789756][ T6502] ntfs: volume version 3.1. [ 1004.915103][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.944701][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1005.180975][ T6627] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1005.192734][ T6326] team0: Port device team_slave_0 added [ 1005.259668][ T6326] team0: Port device team_slave_1 added [ 1005.426319][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11819'. [ 1005.515345][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.544840][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.579334][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.613124][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.620156][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1005.646126][ C0] vkms_vblank_simulate: vblank timer overrun [ 1005.842056][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.914832][ T6691] Cannot find add_set index 0 as target [ 1005.990865][ T6694] netlink: 96 bytes leftover after parsing attributes in process `syz.6.11826'. [ 1006.008289][ T6707] loop2: detected capacity change from 0 to 256 [ 1006.046632][ T6326] device hsr_slave_0 entered promiscuous mode [ 1006.093574][ T6326] device hsr_slave_1 entered promiscuous mode [ 1006.157931][ T6326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1006.191862][ T6326] Cannot create hsr debugfs directory [ 1006.622402][T31298] Bluetooth: hci2: command 0x041b tx timeout [ 1007.300096][ T6843] loop4: detected capacity change from 0 to 256 [ 1007.613361][ T6855] loop9: detected capacity change from 0 to 256 [ 1007.703037][ T6855] FAT-fs (loop9): Directory bread(block 64) failed [ 1007.709671][ T6855] FAT-fs (loop9): Directory bread(block 65) failed [ 1007.758640][ T6855] FAT-fs (loop9): Directory bread(block 66) failed [ 1007.781268][ T6855] FAT-fs (loop9): Directory bread(block 67) failed [ 1007.808880][ T6855] FAT-fs (loop9): Directory bread(block 68) failed [ 1007.846676][ T6855] FAT-fs (loop9): Directory bread(block 69) failed [ 1007.882509][ T6855] FAT-fs (loop9): Directory bread(block 70) failed [ 1007.928115][ T6855] FAT-fs (loop9): Directory bread(block 71) failed [ 1007.964258][ T6855] FAT-fs (loop9): Directory bread(block 72) failed [ 1007.970972][ T6855] FAT-fs (loop9): Directory bread(block 73) failed [ 1008.130942][ T6883] loop4: detected capacity change from 0 to 1764 [ 1008.702242][T31298] Bluetooth: hci2: command 0x040f tx timeout [ 1009.427847][ T26] audit: type=1326 audit(2000000019.430:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.9.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1009.484059][ T6326] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1009.514462][ T6326] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1009.522721][ T26] audit: type=1326 audit(2000000019.440:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.9.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1009.561578][ T6326] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1009.611549][ T26] audit: type=1326 audit(2000000019.440:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.9.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1009.644601][ T6326] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1009.707673][ T26] audit: type=1326 audit(2000000019.440:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6966 comm="syz.9.11862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1009.965692][ T6993] ieee802154 phy0 wpan0: encryption failed: -22 [ 1010.063036][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1010.142855][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1010.150923][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1010.216402][ T6326] 8021q: adding VLAN 0 to HW filter on device team0 [ 1010.273812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1010.322761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1010.331426][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.338657][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1010.473899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1010.564036][ T7007] netdevsim netdevsim6: Direct firmware load for ./file0 failed with error -2 [ 1010.580038][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1010.584611][ T7007] netdevsim netdevsim6: Falling back to sysfs fallback for: ./file0 [ 1010.597372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1010.620450][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.627723][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1010.658530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1010.702315][ T5757] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1010.721626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1010.759689][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1010.767026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1010.784834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1010.786830][T31298] Bluetooth: hci2: command 0x0419 tx timeout [ 1010.795123][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1010.818837][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1010.828499][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1010.900256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1010.905791][ T5757] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1010.923299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1010.924598][ T5757] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1010.949259][ T5757] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1010.949826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1010.960092][ T5757] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1010.998830][ T5757] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1011.004795][ T6326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1011.016322][ T5757] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.031641][ T6326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1011.050813][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1011.052218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1011.066347][ T5757] usb 10-1: config 0 descriptor?? [ 1011.083765][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1011.104842][ T7022] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1011.207999][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1011.226164][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1011.286818][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1011.302283][ T5757] hdpvr 10-1:0.0: firmware version 0x12 dated [ 1011.333383][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1011.340517][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1011.389123][ T7022] bond0 speed is unknown, defaulting to 1000 [ 1011.511866][ T5757] hdpvr 10-1:0.0: device init failed [ 1011.518996][ T5757] hdpvr: probe of 10-1:0.0 failed with error -12 [ 1011.542671][ T7060] loop2: detected capacity change from 0 to 512 [ 1011.549367][ T5757] usb 10-1: USB disconnect, device number 7 [ 1011.638203][ T7060] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1011.780466][ T7060] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 1011.822023][ T7060] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1011.848988][ T7060] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.11880: Failed to acquire dquot type 1 [ 1011.892222][ T7060] EXT4-fs (loop2): 1 truncate cleaned up [ 1011.920139][ T7060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1012.169721][ T3950] EXT4-fs (loop2): unmounting filesystem. [ 1012.303319][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1012.311663][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1012.370953][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1012.458395][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1012.483803][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1012.576762][ T7097] loop9: detected capacity change from 0 to 4096 [ 1012.621563][ T6326] device veth0_vlan entered promiscuous mode [ 1012.666025][ T7097] ntfs: (device loop9): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1012.689599][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1012.714281][ T7097] ntfs: (device loop9): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1012.730453][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1012.766124][ T7097] ntfs: (device loop9): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1012.797276][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1012.813051][ T7097] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1012.845794][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1012.877298][ T6326] device veth1_vlan entered promiscuous mode [ 1012.885236][ T7097] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1012.933464][ T7097] ntfs: volume version 3.1. [ 1012.990585][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1013.029780][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1013.077189][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1013.107570][ T7122] loop4: detected capacity change from 0 to 256 [ 1013.133341][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1013.156211][ T6326] device veth0_macvtap entered promiscuous mode [ 1013.183874][ T6326] device veth1_macvtap entered promiscuous mode [ 1013.264784][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.352066][ T7132] affs: No valid root block on device nbd6 [ 1013.371989][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.427809][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.472755][T31754] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1013.493485][T31754] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1013.525699][T31754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1013.572945][T31754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1013.615479][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.682827][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.714849][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.758466][T31754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1013.788548][T31754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1013.854629][ T6326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.905029][ T6326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.960195][ T6326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.997941][ T7161] loop2: detected capacity change from 0 to 256 [ 1014.022006][ T6326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.117626][ T7161] FAT-fs (loop2): Directory bread(block 64) failed [ 1014.157247][ T7161] FAT-fs (loop2): Directory bread(block 65) failed [ 1014.189765][ T7161] FAT-fs (loop2): Directory bread(block 66) failed [ 1014.264193][ T7161] FAT-fs (loop2): Directory bread(block 67) failed [ 1014.270900][ T7161] FAT-fs (loop2): Directory bread(block 68) failed [ 1014.336846][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.360014][ T7161] FAT-fs (loop2): Directory bread(block 69) failed [ 1014.379753][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.472910][ T7161] FAT-fs (loop2): Directory bread(block 70) failed [ 1014.479618][ T7161] FAT-fs (loop2): Directory bread(block 71) failed [ 1014.524845][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1014.555754][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.584446][ T7161] FAT-fs (loop2): Directory bread(block 72) failed [ 1014.599555][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.611466][ T7161] FAT-fs (loop2): Directory bread(block 73) failed [ 1014.676493][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1014.795375][ T7161] FAT-fs (loop2): Filesystem has been set read-only [ 1014.869566][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 1014.869582][ T26] audit: type=1800 audit(2000000024.870:2600): pid=7161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.11901" name="cpu.stat" dev="loop2" ino=1048809 res=0 errno=0 [ 1014.910267][ T7161] FAT-fs (loop2): error, invalid access to FAT (entry 0x00006c61) [ 1015.338313][ T7231] netlink: 140 bytes leftover after parsing attributes in process `syz.2.11913'. [ 1015.414602][ T7236] netlink: 1096 bytes leftover after parsing attributes in process `syz.4.11917'. [ 1016.172926][ T7280] loop4: detected capacity change from 0 to 164 [ 1016.304870][ T7280] ISOFS: unable to read i-node block [ 1016.310300][ T7280] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1016.455098][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11933'. [ 1016.531928][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11933'. [ 1016.852394][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11938'. [ 1017.788355][ T7361] loop2: detected capacity change from 0 to 1024 [ 1018.309022][ T7389] dlm: Unknown command passed to DLM device : 0 [ 1018.309022][ T7389] [ 1018.377929][ T7397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11959'. [ 1018.419101][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11961'. [ 1018.837213][ T26] audit: type=1326 audit(2000000028.840:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.11968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1018.931875][ T26] audit: type=1326 audit(2000000028.880:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.11968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1019.029058][ T26] audit: type=1326 audit(2000000028.880:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.11968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1019.109919][ T7432] UBIFS error (pid: 7432): cannot open "./file0", error -22 [ 1019.130115][ T26] audit: type=1326 audit(2000000028.880:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.11968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1019.228498][ T26] audit: type=1326 audit(2000000028.880:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7419 comm="syz.6.11968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1019.785253][ T7454] loop9: detected capacity change from 0 to 4096 [ 1019.848853][ T7454] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 1020.092003][ T7484] netlink: 'syz.6.11986': attribute type 1 has an invalid length. [ 1020.234888][ T7490] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1020.311846][ T4347] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1020.345793][ T7495] loop4: detected capacity change from 0 to 8 [ 1020.522996][ T4347] usb 2-1: Using ep0 maxpacket: 16 [ 1020.539907][ T4347] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 1020.589049][ T4347] usb 2-1: config 0 has no interface number 0 [ 1020.607045][ T4347] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 1020.630582][ T4347] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1020.641483][ T4347] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 1020.698505][ T4347] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 1020.712161][ T4666] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1020.724792][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.770624][ T4347] usb 2-1: Product: syz [ 1020.792887][ T4347] usb 2-1: Manufacturer: syz [ 1020.807545][ T4347] usb 2-1: SerialNumber: syz [ 1020.835056][ T4347] usb 2-1: config 0 descriptor?? [ 1020.840789][ T7480] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1020.922046][ T4666] usb 5-1: Using ep0 maxpacket: 8 [ 1020.929433][ T4666] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1020.951930][ T4666] usb 5-1: config 0 has an invalid descriptor of length 190, skipping remainder of the config [ 1021.022322][ T4666] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 1021.052308][ T4666] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.077476][ T4347] usb 2-1: USB disconnect, device number 5 [ 1021.144803][ T4666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1021.181885][ T4666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.200211][ T4666] usb 5-1: Product: syz [ 1021.219512][ T4666] usb 5-1: Manufacturer: syz [ 1021.231875][ T4666] usb 5-1: SerialNumber: syz [ 1021.264148][ T4666] usb 5-1: config 0 descriptor?? [ 1021.285576][ T4666] cdc_ncm 5-1:0.0: skipping garbage [ 1021.316209][ T4666] cdc_ncm 5-1:0.0: CDC Union missing and no IAD found [ 1021.344601][ T4666] cdc_ncm 5-1:0.0: bind() failure [ 1021.522983][ T4676] usb 5-1: USB disconnect, device number 44 [ 1022.067697][ T7593] loop1: detected capacity change from 0 to 64 [ 1022.435124][ T26] audit: type=1326 audit(2000000032.440:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.9.12015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1022.484443][ T7616] loop6: detected capacity change from 0 to 256 [ 1022.533298][ T26] audit: type=1326 audit(2000000032.500:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.9.12015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1022.594618][ T7616] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1022.692021][ T26] audit: type=1326 audit(2000000032.500:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.9.12015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1022.814788][ T26] audit: type=1326 audit(2000000032.500:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.9.12015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1022.820157][ T7633] netlink: 'syz.1.12019': attribute type 3 has an invalid length. [ 1022.905230][ T26] audit: type=1326 audit(2000000032.500:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.9.12015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db658e929 code=0x7ffc0000 [ 1022.984508][ T7642] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12020'. [ 1023.052216][ T7633] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12019'. [ 1023.158172][ T7651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1023.531276][ T7668] ADFS-fs (nullb0): unrecognised mount option "arrier" or missing value [ 1023.627095][ T7679] loop4: detected capacity change from 0 to 8 [ 1023.673101][ T7679] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1023.754275][ T7679] cramfs: Error -3 while decompressing! [ 1023.759908][ T7679] cramfs: ffffffff96d711a8(26)->ffff88807f0c0000(4096) [ 1023.819945][ T7679] cramfs: Error -5 while decompressing! [ 1023.892276][ T7679] cramfs: ffffffff96d711c2(26)->ffff888034c58000(4096) [ 1023.899360][ T7679] cramfs: Error -3 while decompressing! [ 1023.923361][ T7690] sp0: Synchronizing with TNC [ 1023.962112][ T7679] cramfs: ffffffff96d711a8(26)->ffff88807f0c0000(4096) [ 1023.969220][ T26] audit: type=1800 audit(2000000033.970:2611): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12031" name="file2" dev="loop4" ino=348 res=0 errno=0 [ 1024.013086][ T7689] [U] è [ 1024.377507][ T7716] loop4: detected capacity change from 0 to 256 [ 1024.467298][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12041'. [ 1024.754960][ T7741] loop4: detected capacity change from 0 to 512 [ 1024.804063][ T4676] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1024.927425][ T7741] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1024.952118][ T7741] ext4 filesystem being mounted at /2431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1025.015248][ T4676] usb 10-1: config 0 has no interfaces? [ 1025.033198][ T4676] usb 10-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1025.068855][ T4676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.118732][ T4676] usb 10-1: Product: syz [ 1025.142047][ T4676] usb 10-1: Manufacturer: syz [ 1025.148207][ T7741] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.12044: bg 0: block 18: invalid block bitmap [ 1025.165334][ T4676] usb 10-1: SerialNumber: syz [ 1025.220546][ T7741] Quota error (device loop4): write_blk: dquota write failed [ 1025.222643][ T4676] r8152-cfgselector 10-1: config 0 descriptor?? [ 1025.260565][ T7741] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1025.316237][ T7741] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.12044: Failed to acquire dquot type 1 [ 1025.440159][ T7727] loop2: detected capacity change from 0 to 32768 [ 1025.466523][ T4676] usbip-host 10-1: 10-1 is not in match_busid table... skip! [ 1025.587856][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1025.703874][ T4676] usb 10-1: USB disconnect, device number 8 [ 1025.785993][ T7787] loop1: detected capacity change from 0 to 256 [ 1025.807515][ T7788] loop4: detected capacity change from 0 to 16 [ 1025.858165][ T7775] loop6: detected capacity change from 0 to 4096 [ 1025.880639][ T7788] erofs: (device loop4): mounted with root inode @ nid 36. [ 1025.907185][ T7775] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1025.937725][ T7788] erofs: (device loop4): init_inode_xattrs: xattr_isize 12 of nid 86 is not supported yet [ 1026.054572][ T7775] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 1026.128799][ T7775] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1026.194333][ T7775] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 1027.132345][ T5757] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1027.219837][ T7853] AppArmor: change_hat: Invalid input '0x' [ 1027.327006][ T5757] usb 10-1: config 0 has an invalid interface number: 52 but max is 0 [ 1027.341650][ T5757] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.382741][ T5757] usb 10-1: config 0 has no interface number 0 [ 1027.389016][ T5757] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1027.448624][ T5757] usb 10-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1027.497646][ T5757] usb 10-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.551074][ T5757] usb 10-1: config 0 interface 52 has no altsetting 0 [ 1027.563638][ T7874] loop4: detected capacity change from 0 to 512 [ 1027.571222][ T7875] loop6: detected capacity change from 0 to 8 [ 1027.595871][ T5757] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1027.600505][ T7874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1027.639110][ T5757] usb 10-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 1027.653440][ T7875] cramfs: Error -3 while decompressing! [ 1027.668705][ T4265] udevd[4265]: incorrect cramfs checksum on /dev/loop6 [ 1027.680915][ T7875] cramfs: ffffffff96d751a8(26)->ffff88804d4b9000(4096) [ 1027.709445][ T7875] cramfs: Error -3 while decompressing! [ 1027.717852][ T5757] usb 10-1: Product: syz [ 1027.729242][ T7874] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.12074: casefold flag without casefold feature [ 1027.732133][ T5757] usb 10-1: Manufacturer: syz [ 1027.761003][ T7884] loop1: detected capacity change from 0 to 128 [ 1027.767763][ T5757] usb 10-1: SerialNumber: syz [ 1027.771947][ T7875] cramfs: ffffffff96d751c2(26)->ffff88807ed87000(4096) [ 1027.788589][ T5757] usb 10-1: config 0 descriptor?? [ 1027.790026][ T7874] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.12074: couldn't read orphan inode 15 (err -117) [ 1027.822487][ T7875] cramfs: Error -3 while decompressing! [ 1027.852915][ T7875] cramfs: ffffffff96d751dc(16)->ffff888041a5e000(4096) [ 1027.860000][ T7892] dlm: no locking on control device [ 1027.876017][ T7875] cramfs: Error -3 while decompressing! [ 1027.892019][ T7874] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1027.901154][ T7875] cramfs: ffffffff96d751a8(26)->ffff88804d4b9000(4096) [ 1028.024091][ T5757] synaptics_usb 10-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1028.067672][ T5757] synaptics_usb: probe of 10-1:0.52 failed with error -5 [ 1028.144364][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1028.255044][ T4347] usb 10-1: USB disconnect, device number 9 [ 1028.355889][ T7911] sp0: Synchronizing with TNC [ 1028.375540][ T7907] [U] è [ 1028.722776][ T26] audit: type=1400 audit(2000000038.740:2612): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="#(%#{//(@\)//&@},['%%&\#*" pid=7934 comm="syz.1.12083" [ 1030.479032][ T8017] loop4: detected capacity change from 0 to 4096 [ 1030.525611][ T8017] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1030.633387][ T8017] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 1030.694586][ T8017] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 1030.751983][ T8017] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 1030.822153][ T8017] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1030.926036][ T8017] ntfs: volume version 3.1. [ 1030.950628][ T8039] loop6: detected capacity change from 0 to 1024 [ 1031.008167][ T8017] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 1031.049420][ T8017] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 1031.414999][ T8066] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12122'. [ 1031.736600][ T8085] loop9: detected capacity change from 0 to 1024 [ 1031.996871][ T2943] hfsplus: b-tree write err: -5, ino 4 [ 1032.194919][ T8106] netlink: 2 bytes leftover after parsing attributes in process `syz.6.12133'. [ 1032.215861][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1032.261930][ T8108] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12132'. [ 1032.429646][ T8127] loop6: detected capacity change from 0 to 256 [ 1032.471246][ T8127] exfat: Deprecated parameter 'utf8' [ 1032.471859][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1032.500893][ T8127] exfat: Deprecated parameter 'utf8' [ 1032.551153][ T8127] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1032.637061][ T8127] exFAT-fs (loop6): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1032.690707][ T27] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1032.690739][ T27] usb 2-1: config 0 has no interface number 0 [ 1032.690776][ T27] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1032.690804][ T27] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.694388][ T27] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1032.694421][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.694443][ T27] usb 2-1: Product: syz [ 1032.694460][ T27] usb 2-1: Manufacturer: syz [ 1032.694476][ T27] usb 2-1: SerialNumber: syz [ 1032.696592][ T27] usb 2-1: config 0 descriptor?? [ 1032.697421][ T8112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1032.699355][ T27] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1032.702821][ T27] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1033.140660][ T4347] usb 2-1: USB disconnect, device number 6 [ 1033.144003][ T4347] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1033.144505][ T4347] cyberjack 2-1:0.69: device disconnected [ 1033.513492][ T8191] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 1033.721496][ T8199] netlink: 'syz.6.12151': attribute type 2 has an invalid length. [ 1033.935990][ T8209] loop2: detected capacity change from 0 to 1764 [ 1034.203171][ T5757] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1034.280739][ T8232] loop2: detected capacity change from 0 to 512 [ 1034.310419][ T8232] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1034.429109][ T8232] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1034.442345][ T5757] usb 10-1: Using ep0 maxpacket: 8 [ 1034.449408][ T5757] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1034.466731][ T5757] usb 10-1: config 179 has no interface number 0 [ 1034.469643][ T8232] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1034.473521][ T5757] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1034.495559][ T5757] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1034.507476][ T5757] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1034.519448][ T5757] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1034.530666][ T5757] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1034.570695][ T5757] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1034.611043][ T5757] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1034.627706][ T8232] EXT4-fs error (device loop2): ext4_get_verity_descriptor_location:337: inode #15: comm syz.2.12159: verity file corrupted; can't find descriptor [ 1034.697164][ T5757] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.731813][ T8232] EXT4-fs (loop2): Remounting filesystem read-only [ 1034.762545][ T8243] loop1: detected capacity change from 0 to 4096 [ 1034.772498][ T8232] fs-verity (loop2, inode 15): Error -117 getting verity descriptor size [ 1034.809109][ T8243] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 1034.811874][ T5757] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input42 [ 1034.897835][ T3950] EXT4-fs (loop2): unmounting filesystem. [ 1035.044523][ T8267] loop6: detected capacity change from 0 to 16 [ 1035.135403][ T8267] erofs: (device loop6): mounted with root inode @ nid 36. [ 1035.539525][ T5483] usb 10-1: USB disconnect, device number 10 [ 1035.539697][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1035.554076][ T5483] xpad 10-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1035.603877][ T26] audit: type=1326 audit(2000000045.610:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.12169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6cb8e929 code=0x7ffc0000 [ 1035.738032][ T26] audit: type=1326 audit(2000000045.660:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.12169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7efe6cb8e929 code=0x7ffc0000 [ 1035.832518][ T8310] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1035.853502][ T26] audit: type=1326 audit(2000000045.660:2615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.12169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6cb8e929 code=0x7ffc0000 [ 1035.929093][ T26] audit: type=1326 audit(2000000045.660:2616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8293 comm="syz.4.12169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6cb8e929 code=0x7ffc0000 [ 1036.232097][ T8335] blktrace: Concurrent blktraces are not allowed on sg0 [ 1036.760959][ T8364] loop6: detected capacity change from 0 to 256 [ 1037.085043][ T8377] loop1: detected capacity change from 0 to 64 [ 1037.129844][ T8381] netlink: 'syz.9.12190': attribute type 4 has an invalid length. [ 1037.172298][ T8377] syz.1.12189: attempt to access beyond end of device [ 1037.172298][ T8377] loop1: rw=0, sector=268435468, nr_sectors = 2 limit=64 [ 1037.191965][ T8381] netlink: 128124 bytes leftover after parsing attributes in process `syz.9.12190'. [ 1037.274483][ T8377] Buffer I/O error on dev loop1, logical block 134217734, async page read [ 1037.960067][ T8423] loop9: detected capacity change from 0 to 2048 [ 1037.976220][ T8423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1038.629289][ T8456] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12211'. [ 1038.648702][ T8456] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12211'. [ 1038.698790][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12211'. [ 1038.723493][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12211'. [ 1039.031915][T31289] UDF-fs: error (device loop9): udf_read_inode: (ino 1317) failed !bh [ 1039.032901][T31289] UDF-fs: error (device loop9): udf_read_inode: (ino 1317) failed !bh [ 1039.362088][ T8485] netlink: 'syz.2.12219': attribute type 2 has an invalid length. [ 1039.771523][ T8515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12225'. [ 1039.829389][ T11] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.863329][ T8517] netlink: 6 bytes leftover after parsing attributes in process `syz.6.12226'. [ 1040.069480][ T11] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.174409][ T11] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.365462][ T11] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.247302][T31298] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1041.282131][T31298] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1041.294972][T31298] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1041.321025][T31298] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1041.332352][T31298] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1041.342238][T31298] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1041.494539][ T8590] loop1: detected capacity change from 0 to 1024 [ 1041.592254][ T8578] vxcan1 speed is unknown, defaulting to 1000 [ 1041.616630][ T8598] loop4: detected capacity change from 0 to 2048 [ 1041.729151][ T8598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1042.023342][ T8614] device bond1 entered promiscuous mode [ 1042.029296][ T8614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1042.501010][ T8578] bond0 speed is unknown, defaulting to 1000 [ 1042.625678][ T8708] loop4: detected capacity change from 0 to 256 [ 1042.924659][ T8743] sctp: [Deprecated]: syz.1.12260 (pid 8743) Use of int in maxseg socket option. [ 1042.924659][ T8743] Use struct sctp_assoc_value instead [ 1042.942229][ T4676] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1043.154071][ T4676] usb 5-1: config 0 has an invalid interface number: 206 but max is 1 [ 1043.172917][ T4676] usb 5-1: config 0 has an invalid descriptor of length 181, skipping remainder of the config [ 1043.212546][ T4676] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1043.232587][ T4676] usb 5-1: config 0 has no interface number 0 [ 1043.246245][ T4676] usb 5-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1043.315211][ T8797] usb usb1: usbfs: process 8797 (syz.1.12265) did not claim interface 0 before use [ 1043.323158][ T4676] usb 5-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1043.365937][ T4676] usb 5-1: config 0 interface 206 altsetting 2 endpoint 0x8C has invalid maxpacket 27768, setting to 64 [ 1043.397906][ T4676] usb 5-1: config 0 interface 206 altsetting 2 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1043.422009][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 1043.432571][ T4676] usb 5-1: config 0 interface 206 has no altsetting 0 [ 1043.503333][ T4676] usb 5-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 1043.561924][ T4676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.570020][ T4676] usb 5-1: Product: syz [ 1043.625922][ T4676] usb 5-1: Manufacturer: syz [ 1043.650865][ T4676] usb 5-1: SerialNumber: syz [ 1043.682678][ T4676] usb 5-1: config 0 descriptor?? [ 1043.708082][ T8708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1043.717073][ T8708] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1043.874129][ T8578] chnl_net:caif_netlink_parms(): no params data found [ 1044.102585][ T4676] usb 5-1: USB disconnect, device number 45 [ 1044.338738][ T8930] bpf: Bad value for 'mode' [ 1044.604362][ T8941] loop2: detected capacity change from 0 to 256 [ 1044.674079][ T8941] exfat: Deprecated parameter 'utf8' [ 1044.696733][ T8941] exfat: Deprecated parameter 'utf8' [ 1044.788847][ T8941] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1044.841244][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.890550][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.923237][ T8578] device bridge_slave_0 entered promiscuous mode [ 1044.947962][ T8941] exFAT-fs (loop2): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 1044.974384][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.998912][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.012844][ T8578] device bridge_slave_1 entered promiscuous mode [ 1045.229980][ T8578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.286341][ T8578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1045.395557][ T11] device hsr_slave_0 left promiscuous mode [ 1045.413435][ T11] device hsr_slave_1 left promiscuous mode [ 1045.447502][ T9035] loop1: detected capacity change from 0 to 512 [ 1045.504493][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 1045.519287][ T9035] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1045.660905][ T9035] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 1045.679981][ T11] device veth1_macvtap left promiscuous mode [ 1045.686589][ T11] device veth0_macvtap left promiscuous mode [ 1045.693473][ T11] device veth1_vlan left promiscuous mode [ 1045.699520][ T11] device veth0_vlan left promiscuous mode [ 1045.757217][ T9035] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2195: inode #15: comm syz.1.12287: corrupted in-inode xattr [ 1045.832913][ T9035] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.12287: couldn't read orphan inode 15 (err -117) [ 1045.861043][ T9035] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1045.995495][ T11] bond1 (unregistering): Released all slaves [ 1046.015606][ T9057] loop2: detected capacity change from 0 to 64 [ 1046.138700][ T6326] EXT4-fs (loop1): unmounting filesystem. [ 1046.337189][ T26] audit: type=1326 audit(2000000056.320:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8e929 code=0x7ffc0000 [ 1046.378889][ T26] audit: type=1326 audit(2000000056.320:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f661bb8e929 code=0x7ffc0000 [ 1046.467003][ T26] audit: type=1326 audit(2000000056.320:2619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9066 comm="syz.1.12294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f661bb8e929 code=0x7ffc0000 [ 1046.982121][ T5757] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1047.219473][ T5757] usb 2-1: Using ep0 maxpacket: 8 [ 1047.232767][ T5757] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1047.244149][ T5757] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1047.252763][ T5757] usb 2-1: Product: syz [ 1047.257129][ T5757] usb 2-1: Manufacturer: syz [ 1047.262314][ T5757] usb 2-1: SerialNumber: syz [ 1047.288091][ T5757] usb 2-1: config 0 descriptor?? [ 1047.300064][ T5757] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1047.581949][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 1047.726034][ T5757] gspca_zc3xx: reg_r err -71 [ 1047.730768][ T5757] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1047.747632][ T5757] usb 2-1: USB disconnect, device number 7 [ 1048.469730][ T11] bond0 (unregistering): Released all slaves [ 1048.641097][ T9100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12302'. [ 1048.761811][ T8578] team0: Port device team_slave_0 added [ 1048.823710][ T8578] team0: Port device team_slave_1 added [ 1048.885261][ T9129] loop4: detected capacity change from 0 to 1024 [ 1049.084441][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.091464][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.127997][ T8578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.146155][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.152033][ T4347] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1049.153495][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.226255][ T9172] cgroup: Invalid name [ 1049.273121][ T8578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.361994][ T4347] usb 7-1: Using ep0 maxpacket: 16 [ 1049.384736][ T4347] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2 [ 1049.416052][ T9190] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1049.432093][ T4347] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.449668][ T4347] usb 7-1: Product: syz [ 1049.461917][ T4347] usb 7-1: Manufacturer: syz [ 1049.487484][ T4347] usb 7-1: SerialNumber: syz [ 1049.509196][ T4347] usb 7-1: config 0 descriptor?? [ 1049.533152][ T8578] device hsr_slave_0 entered promiscuous mode [ 1049.544723][ T8578] device hsr_slave_1 entered promiscuous mode [ 1049.574246][ T4347] snd-usb-audio: probe of 7-1:0.0 failed with error -2 [ 1049.662175][T31298] Bluetooth: hci0: command 0x0419 tx timeout [ 1049.705664][ T9238] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1049.758030][T21213] udevd[21213]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.765430][ T27] usb 7-1: USB disconnect, device number 38 [ 1050.756219][ T9342] loop6: detected capacity change from 0 to 256 [ 1050.799530][ T9342] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1050.818621][ T9342] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1050.884543][ T9342] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1050.922389][ T27] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1051.140163][ T27] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1051.159843][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.223686][ T27] usb 5-1: config 0 descriptor?? [ 1051.249808][ T27] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1051.530213][ T9384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12330'. [ 1051.639270][ T27] gp8psk: usb in 128 operation failed. [ 1051.651872][ T27] gp8psk: usb in 137 operation failed. [ 1051.657794][ T27] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1051.686965][ T27] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1051.742917][ T27] usb 5-1: USB disconnect, device number 46 [ 1052.227741][ T9429] loop6: detected capacity change from 0 to 1024 [ 1052.324853][ T9429] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1052.518718][ T8612] EXT4-fs (loop6): unmounting filesystem. [ 1052.806922][ T8578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1052.853139][ T8578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1052.883233][ T8578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1052.929202][ T8578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1053.347213][ T8578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.397689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1053.419324][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1053.457380][ T8578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.497607][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1053.511941][ T128] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1053.518295][ T9515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12354'. [ 1053.541654][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1053.569388][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.576669][ T4358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.614502][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1053.653449][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1053.674929][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1053.702223][ T128] usb 7-1: Using ep0 maxpacket: 8 [ 1053.714104][ T128] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1053.736204][ T128] usb 7-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1053.752417][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.759629][ T4358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.777426][ T128] usb 7-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1053.802285][ T128] usb 7-1: Product: syz [ 1053.806708][ T128] usb 7-1: Manufacturer: syz [ 1053.811509][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1053.832270][ T128] usb 7-1: SerialNumber: syz [ 1053.846368][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1053.867950][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1053.960514][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1054.011496][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1054.039084][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1054.052839][ T128] usb 7-1: Invalid connection information received from device [ 1054.059058][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1054.133533][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1054.148516][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1054.195640][ T8578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1054.218597][ T8578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1054.237173][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1054.251469][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1054.282683][ T27] usb 7-1: USB disconnect, device number 39 [ 1054.463909][ T9510] loop2: detected capacity change from 0 to 32768 [ 1054.544978][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.551428][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.055304][ T26] audit: type=1326 audit(2000000065.050:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.6.12366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1055.175633][ T26] audit: type=1326 audit(2000000065.080:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.6.12366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1055.310769][ T26] audit: type=1326 audit(2000000065.080:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.6.12366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1055.431149][ T26] audit: type=1326 audit(2000000065.080:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9572 comm="syz.6.12366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1055.467672][ T9590] device wg0 entered promiscuous mode [ 1055.534138][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1055.570534][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1055.620766][ T8578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.683076][ T9599] netlink: 'syz.2.12372': attribute type 10 has an invalid length. [ 1055.716987][ T9599] device macvlan0 entered promiscuous mode [ 1055.821530][ T9599] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1055.875039][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1055.884433][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1055.970619][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1055.989987][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1056.094351][ T8578] device veth0_vlan entered promiscuous mode [ 1056.121310][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1056.155686][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1056.181108][ T8578] device veth1_vlan entered promiscuous mode [ 1056.297027][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1056.350701][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1056.383131][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1056.419035][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1056.467627][ T8578] device veth0_macvtap entered promiscuous mode [ 1056.496991][ T9628] netlink: 'syz.6.12379': attribute type 1 has an invalid length. [ 1056.521177][ T8578] device veth1_macvtap entered promiscuous mode [ 1056.553440][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1056.573463][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1056.619583][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.682014][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.718936][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.758470][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.786233][ T9641] loop2: detected capacity change from 0 to 2048 [ 1056.809202][ T8578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.865793][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.880382][ T9641] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1056.912038][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.959662][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.019194][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.058214][ T8578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.089968][T23786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1057.122198][T23786] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1057.132291][T23786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1057.157471][T23786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1057.190344][ T9657] netdevsim netdevsim6: Firmware load for './file0/../file0' refused, path contains '..' component [ 1057.193885][ T8578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.270939][ T8578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.293020][ T8578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.321043][ T8578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.653939][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.715655][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.794961][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.800115][ T2943] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1057.832885][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.909945][ T4358] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1058.169956][ T26] audit: type=1326 audit(2000000068.170:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.0.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9200b8e929 code=0x7ffc0000 [ 1058.275741][ T26] audit: type=1326 audit(2000000068.210:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.0.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f9200b8e929 code=0x7ffc0000 [ 1058.427281][ T26] audit: type=1326 audit(2000000068.210:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.0.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9200b8e929 code=0x7ffc0000 [ 1058.477827][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12403'. [ 1058.505870][ T26] audit: type=1326 audit(2000000068.210:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9719 comm="syz.0.12227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9200b8e929 code=0x7ffc0000 [ 1058.529315][ T9735] netlink: 'syz.2.12403': attribute type 1 has an invalid length. [ 1059.349821][ T9776] loop4: detected capacity change from 0 to 1024 [ 1059.892059][ T9800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12426'. [ 1059.987790][ T9742] loop6: detected capacity change from 0 to 32768 [ 1060.158663][ T9742] XFS (loop6): Mounting V5 Filesystem [ 1060.326182][ T9742] XFS (loop6): Ending clean mount [ 1060.383250][ T9742] XFS (loop6): Quotacheck needed: Please wait. [ 1060.562095][ T9742] XFS (loop6): Quotacheck: Done. [ 1060.774630][ T8612] XFS (loop6): Unmounting Filesystem [ 1061.264700][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12445'. [ 1061.356832][ T9872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12445'. [ 1061.964125][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12455'. [ 1063.185529][ T9899] loop4: detected capacity change from 0 to 32768 [ 1064.405052][T10019] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12487'. [ 1064.448832][T10024] netlink: 'syz.6.12490': attribute type 21 has an invalid length. [ 1064.509930][T10024] IPv6: NLM_F_CREATE should be specified when creating new route [ 1064.794721][T10040] ubi31: detaching mtd0 [ 1064.904606][T10040] ubi31: mtd0 is detached [ 1065.025582][T10051] device netdevsim0 entered promiscuous mode [ 1065.162209][T10059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1065.319719][T10068] loop4: detected capacity change from 0 to 64 [ 1065.750716][T10094] netlink: 'syz.4.12509': attribute type 13 has an invalid length. [ 1065.768759][T10094] netlink: 'syz.4.12509': attribute type 12 has an invalid length. [ 1065.963037][T10105] loop2: detected capacity change from 0 to 8 [ 1066.115385][T10105] SQUASHFS error: Failed to read block 0x6a4: -5 [ 1066.158864][T10105] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 1066.206321][T10105] SQUASHFS error: Unable to read inode 0x87 [ 1066.521960][ T26] audit: type=1326 audit(2000000076.530:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.2.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 1066.629312][ T26] audit: type=1326 audit(2000000076.570:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.2.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 1066.758392][ T26] audit: type=1326 audit(2000000076.570:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.2.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 1066.862214][ T26] audit: type=1326 audit(2000000076.570:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10133 comm="syz.2.12521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 1067.081492][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12530'. [ 1067.814041][T10146] loop1: detected capacity change from 0 to 32768 [ 1067.866451][T10146] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.12525 (10146) [ 1067.885594][T10201] loop4: detected capacity change from 0 to 16 [ 1067.928797][T10146] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1067.964183][T10201] erofs: (device loop4): mounted with root inode @ nid 36. [ 1067.972602][T10146] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 1068.010383][T10146] BTRFS info (device loop1): force clearing of disk cache [ 1068.026282][T10201] syz.4.12540: attempt to access beyond end of device [ 1068.026282][T10201] loop4: rw=524288, sector=7864328, nr_sectors = 8 limit=16 [ 1068.062181][T10146] BTRFS info (device loop1): setting nodatasum [ 1068.068494][T10146] BTRFS info (device loop1): allowing degraded mounts [ 1068.104453][T10201] syz.4.12540: attempt to access beyond end of device [ 1068.104453][T10201] loop4: rw=0, sector=7864328, nr_sectors = 8 limit=16 [ 1068.147313][T10146] BTRFS info (device loop1): use zlib compression, level 3 [ 1068.166212][T10206] loop2: detected capacity change from 0 to 4096 [ 1068.185151][T10146] BTRFS info (device loop1): using free space tree [ 1068.191925][ T26] audit: type=1800 audit(2000000078.190:2632): pid=10201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12540" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 1068.212951][T10206] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 1068.732023][T10146] BTRFS info (device loop1): enabling ssd optimizations [ 1069.021449][ T6326] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1069.128246][T10263] loop2: detected capacity change from 0 to 1024 [ 1069.304095][T10263] syz.2.12552: attempt to access beyond end of device [ 1069.304095][T10263] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 1069.382033][T10263] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 1069.459832][T10263] hfsplus: unable to mark blocks free: error -5 [ 1069.472024][T10263] hfsplus: can't free extent [ 1069.516344][T21213] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by udevd (21213) [ 1070.346919][T10311] loop2: detected capacity change from 0 to 64 [ 1070.412112][T10311] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 1070.553469][T10319] device bridge9 entered promiscuous mode [ 1071.014883][T10342] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12571'. [ 1071.388394][T10354] loop1: detected capacity change from 0 to 2048 [ 1071.410846][T10354] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1072.525429][T10407] netlink: 'syz.2.12589': attribute type 1 has an invalid length. [ 1072.791986][ T27] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1072.981978][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 1072.990374][ T27] usb 5-1: config 0 has an invalid interface number: 15 but max is 0 [ 1073.010989][ T27] usb 5-1: config 0 has no interface number 0 [ 1073.072721][ T27] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=66.ee [ 1073.112203][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.127170][ T27] usb 5-1: Product: syz [ 1073.159944][ T27] usb 5-1: Manufacturer: syz [ 1073.169938][T10445] netlink: 'syz.1.12598': attribute type 1 has an invalid length. [ 1073.181829][ T27] usb 5-1: SerialNumber: syz [ 1073.203262][ T27] usb 5-1: config 0 descriptor?? [ 1073.218399][T10445] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.12598'. [ 1073.417265][ T27] speedtch 5-1:0.15: speedtch_bind: wrong device class 42 [ 1073.436052][ T27] speedtch 5-1:0.15: usbatm_usb_probe: bind failed: -19! [ 1073.550995][T10467] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12605'. [ 1073.580705][T10467] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 1073.643056][ T27] usb 5-1: USB disconnect, device number 47 [ 1073.644564][T10467] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 1073.961117][T10494] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1073.995171][T10496] netlink: 'syz.0.12612': attribute type 5 has an invalid length. [ 1074.012067][ T5482] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1074.159809][T10504] loop2: detected capacity change from 0 to 256 [ 1074.189937][T10504] exfat: Deprecated parameter 'utf8' [ 1074.203744][ T5482] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1074.231951][ T5482] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1074.238681][T10504] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 1074.319048][ T5482] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1074.376659][ T5482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.389656][ T5482] usb 2-1: Product: syz [ 1074.415624][ T5482] usb 2-1: Manufacturer: syz [ 1074.435942][ T5482] usb 2-1: SerialNumber: syz [ 1074.454188][ T5482] usb 2-1: config 0 descriptor?? [ 1074.489949][ T5482] usb 2-1: selecting invalid altsetting 0 [ 1074.752268][ T5482] usb 2-1: USB disconnect, device number 8 [ 1074.927229][T10561] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 1075.107855][T10561] device bond1 entered promiscuous mode [ 1075.138749][T10561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1075.243769][T10608] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12629'. [ 1076.005899][T10644] netlink: 'syz.2.12642': attribute type 2 has an invalid length. [ 1076.048494][T10644] netlink: 'syz.2.12642': attribute type 2 has an invalid length. [ 1076.765898][T10684] ieee802154 phy0 wpan0: encryption failed: -22 [ 1076.896323][T10686] loop4: detected capacity change from 0 to 4096 [ 1077.002246][T10694] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1077.042015][T10686] NILFS error (device loop4): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1 [ 1077.075514][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12658'. [ 1077.095910][T10686] Remounting filesystem read-only [ 1077.278049][T10703] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1077.801545][T10728] loop1: detected capacity change from 0 to 256 [ 1077.911140][T10728] FAT-fs (loop1): Directory bread(block 64) failed [ 1077.971848][T10728] FAT-fs (loop1): Directory bread(block 65) failed [ 1077.978564][T10728] FAT-fs (loop1): Directory bread(block 66) failed [ 1078.041989][T10728] FAT-fs (loop1): Directory bread(block 67) failed [ 1078.048955][T10728] FAT-fs (loop1): Directory bread(block 68) failed [ 1078.091896][T10728] FAT-fs (loop1): Directory bread(block 69) failed [ 1078.098611][T10728] FAT-fs (loop1): Directory bread(block 70) failed [ 1078.129571][T10728] FAT-fs (loop1): Directory bread(block 71) failed [ 1078.160170][T10728] FAT-fs (loop1): Directory bread(block 72) failed [ 1078.187656][T10728] FAT-fs (loop1): Directory bread(block 73) failed [ 1078.309216][T10744] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12674'. [ 1078.377716][T10751] (unnamed net_device) (uninitialized): peer notification delay (10) is not a multiple of miimon (100), value rounded to 0 ms [ 1078.497398][T10751] device bond5 entered promiscuous mode [ 1078.519203][T10751] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1079.701880][ T4669] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1079.901864][ T4669] usb 7-1: Using ep0 maxpacket: 32 [ 1079.911076][ T4669] usb 7-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=ba.e3 [ 1079.947633][ T4669] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.982712][ T4669] usb 7-1: Product: syz [ 1080.000372][ T4669] usb 7-1: Manufacturer: syz [ 1080.026483][ T4669] usb 7-1: SerialNumber: syz [ 1080.056223][ T4669] usb 7-1: config 0 descriptor?? [ 1080.286844][ T4669] f81534a_ctrl 7-1:0.0: failed to set register 0x116: -5 [ 1080.302922][ T4669] f81534a_ctrl 7-1:0.0: failed to enable ports: -5 [ 1080.329979][ T4669] f81534a_ctrl: probe of 7-1:0.0 failed with error -5 [ 1080.367663][ T4669] usb 7-1: USB disconnect, device number 40 [ 1080.627597][T10903] netlink: 'syz.2.12706': attribute type 1 has an invalid length. [ 1080.837291][T10857] loop4: detected capacity change from 0 to 32768 [ 1080.935207][T10915] netlink: 'syz.2.12708': attribute type 10 has an invalid length. [ 1081.329406][T10932] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1081.379245][T10932] overlayfs: missing 'lowerdir' [ 1081.604318][T10940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12717'. [ 1082.007230][T10955] loop2: detected capacity change from 0 to 8 [ 1082.105570][T10955] SQUASHFS error: Failed to read block 0x6e6: -5 [ 1082.152431][T10955] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 1082.177598][T10955] SQUASHFS error: Unable to read directory block [631:26] [ 1082.415712][T10973] loop4: detected capacity change from 0 to 128 [ 1082.730523][T10987] netlink: 'syz.2.12732': attribute type 1 has an invalid length. [ 1082.939006][T10997] netlink: 592 bytes leftover after parsing attributes in process `syz.0.12734'. [ 1082.986446][T11001] loop1: detected capacity change from 0 to 256 [ 1083.021203][T11001] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1083.051911][T11001] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1083.093864][T11001] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1083.318727][T11013] netlink: 'syz.2.12739': attribute type 21 has an invalid length. [ 1083.361927][T11013] netlink: 'syz.2.12739': attribute type 6 has an invalid length. [ 1083.369870][T11013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12739'. [ 1083.722931][ T26] audit: type=1326 audit(2000000093.730:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.2.12743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 1083.759036][T11033] netlink: 'syz.0.12744': attribute type 7 has an invalid length. [ 1083.801356][ T26] audit: type=1326 audit(2000000093.730:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.2.12743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 1083.820862][T11033] netlink: 'syz.0.12744': attribute type 8 has an invalid length. [ 1083.892561][ T26] audit: type=1326 audit(2000000093.730:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.2.12743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 1083.922002][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12746'. [ 1083.962075][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12746'. [ 1083.971101][T11038] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12746'. [ 1083.999796][T10988] loop6: detected capacity change from 0 to 32768 [ 1084.036641][T10988] (syz.6.12731,10988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1084.065980][ T26] audit: type=1326 audit(2000000093.730:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.2.12743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8af58e929 code=0x7ffc0000 [ 1084.084665][T10988] (syz.6.12731,10988,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1084.269520][T10988] (syz.6.12731,10988,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1084.304242][T10988] JBD2: Ignoring recovery information on journal [ 1084.385975][T10988] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1084.670014][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12755'. [ 1084.686955][ T8612] ocfs2: Unmounting device (7,6) on (node local) [ 1085.259291][T11094] netlink: 'syz.1.12763': attribute type 1 has an invalid length. [ 1085.517149][ T5482] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1085.723808][ T5482] usb 7-1: config 0 has an invalid interface number: 72 but max is 0 [ 1085.741934][ T5482] usb 7-1: config 0 has no interface number 0 [ 1085.748101][ T5482] usb 7-1: too many endpoints for config 0 interface 72 altsetting 65: 192, using maximum allowed: 30 [ 1085.800423][ T5482] usb 7-1: config 0 interface 72 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 192 [ 1085.851878][ T5482] usb 7-1: config 0 interface 72 has no altsetting 0 [ 1085.858714][ T5482] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1085.906525][ T5482] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.943571][ T5482] usb 7-1: config 0 descriptor?? [ 1086.045702][T11124] loop1: detected capacity change from 0 to 256 [ 1086.065545][T11110] infiniband syz!: set active [ 1086.102080][T11110] infiniband syz!: added team_slave_0 [ 1086.199916][T11101] loop4: detected capacity change from 0 to 32768 [ 1086.201270][ T4669] usb 7-1: USB disconnect, device number 41 [ 1086.213382][T11101] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.12764 (11101) [ 1086.342394][T11101] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1086.364096][T11147] loop2: detected capacity change from 0 to 16 [ 1086.371199][T11147] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1086.382862][T11110] RDS/IB: syz!: added [ 1086.383790][T11101] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1086.411419][T11101] BTRFS info (device loop4): force clearing of disk cache [ 1086.417023][T11110] smc: adding ib device syz! with port count 1 [ 1086.437437][T11101] BTRFS info (device loop4): force zlib compression, level 3 [ 1086.445709][T11101] BTRFS info (device loop4): enabling auto defrag [ 1086.458930][T11101] BTRFS info (device loop4): max_inline at 0 [ 1086.469654][T11101] BTRFS info (device loop4): enabling disk space caching [ 1086.481067][T11110] smc: ib device syz! port 1 has pnetid [ 1086.505031][T11101] BTRFS info (device loop4): disk space caching is enabled [ 1086.812353][T11101] BTRFS info (device loop4): enabling ssd optimizations [ 1086.825665][T11101] BTRFS info (device loop4): rebuilding free space tree [ 1086.906804][T11101] BTRFS info (device loop4): disabling free space tree [ 1086.950864][T11101] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1086.991616][T11101] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1087.159033][T11101] BTRFS warning (device loop4): can't clear the compat:0,compat:2,compat:4,compat:8,compat:9,compat:15,compat:16,compat:17,compat:18,compat:19,compat:22,compat:27,compat:28,compat:29,compat:32,compat:33,compat:35,compat:36,compat:37,compat:38,compat:39,compat:41,compat:43,compat:44,compat:45,compat:46,compat:47,compat:49,compat:51,compat:52,compat:54,compat:56,compat:57,compat:58,compat:59,compat:60,compat:62,compat:63 feature bits while mounted [ 1087.232013][T11187] netlink: 'syz.2.12774': attribute type 27 has an invalid length. [ 1087.476436][ T4277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1087.865372][T11206] loop2: detected capacity change from 0 to 256 [ 1087.967324][T11206] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1088.018259][T21213] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop4 scanned by udevd (21213) [ 1088.033521][T11206] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1088.099591][T11206] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1088.901323][T11243] loop2: detected capacity change from 0 to 64 [ 1089.556202][T11275] loop1: detected capacity change from 0 to 256 [ 1089.634180][T11275] exfat: Deprecated parameter 'utf8' [ 1089.639590][T11275] exfat: Deprecated parameter 'utf8' [ 1089.766461][T11275] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7bac8b1f, utbl_chksum : 0xe619d30d) [ 1089.981895][ T5693] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1090.174847][ T5693] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1090.186174][ T5693] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.189202][T11313] netlink: 'syz.0.12806': attribute type 10 has an invalid length. [ 1090.218497][ T5693] usb 3-1: config 0 has no interface number 0 [ 1090.238062][ T5693] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1090.239065][T11313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12806'. [ 1090.270380][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.288859][ T5693] usb 3-1: Product: syz [ 1090.297108][ T5693] usb 3-1: Manufacturer: syz [ 1090.302226][T11313] device ipvlan1 entered promiscuous mode [ 1090.311892][ T5693] usb 3-1: SerialNumber: syz [ 1090.318670][ T5693] usb 3-1: config 0 descriptor?? [ 1090.325600][T11313] bridge0: port 3(ipvlan1) entered blocking state [ 1090.351017][T11313] bridge0: port 3(ipvlan1) entered disabled state [ 1090.375795][T11313] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1090.418848][T11314] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1090.561078][ T5693] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 1090.569130][ T5693] usb 3-1: No valid video chain found. [ 1090.675993][T11334] ieee802154 phy0 wpan0: encryption failed: -90 [ 1090.683305][T11335] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12810'. [ 1090.710237][T11335] netlink: 144 bytes leftover after parsing attributes in process `syz.4.12810'. [ 1090.786515][ T5693] usb 3-1: USB disconnect, device number 9 [ 1091.009959][T11354] afs: Unknown parameter 'dont_hash' [ 1091.787891][T11344] loop1: detected capacity change from 0 to 32768 [ 1091.831101][T11344] (syz.1.12813,11344,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1091.887472][T11344] (syz.1.12813,11344,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1091.985949][T11344] (syz.1.12813,11344,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 1092.054411][T11344] JBD2: Ignoring recovery information on journal [ 1092.254959][T11344] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 1092.525787][T11371] loop6: detected capacity change from 0 to 32768 [ 1092.548330][ T6326] ocfs2: Unmounting device (7,1) on (node local) [ 1092.786274][T11374] loop4: detected capacity change from 0 to 32768 [ 1092.792370][T11414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.099037][T11423] binder: 11422:11423 ioctl c018620c 200000000380 returned -22 [ 1093.738285][T11444] loop4: detected capacity change from 0 to 2048 [ 1093.806334][T11444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1094.881978][T11501] loop6: detected capacity change from 0 to 1024 [ 1095.029567][T11508] loop2: detected capacity change from 0 to 2048 [ 1095.126717][T11508] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1095.205059][T11508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1095.617006][T11485] loop4: detected capacity change from 0 to 32768 [ 1096.000941][T11551] loop2: detected capacity change from 0 to 1024 [ 1096.066787][T11551] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1096.165207][T11551] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 1096.235574][T11551] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1096.246429][T11551] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.12865: Failed to acquire dquot type 0 [ 1096.260577][T11551] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1096.358406][T11570] loop1: detected capacity change from 0 to 1024 [ 1096.426996][T11551] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.12865: corrupted inode contents [ 1096.493618][T11570] hfsplus: keylen 65060 too large [ 1096.500088][T11551] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #13: comm syz.2.12865: mark_inode_dirty error [ 1096.602472][T11551] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.12865: corrupted inode contents [ 1096.702014][T11551] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #13: comm syz.2.12865: mark_inode_dirty error [ 1096.740251][T11551] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.12865: corrupted inode contents [ 1096.821875][T11551] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1096.852110][T11551] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #13: comm syz.2.12865: corrupted inode contents [ 1096.923619][T11551] EXT4-fs error (device loop2): ext4_truncate:4312: inode #13: comm syz.2.12865: mark_inode_dirty error [ 1096.974878][T11551] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1097.037826][T11551] EXT4-fs (loop2): 1 truncate cleaned up [ 1097.046140][T11551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1097.105487][T11551] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 1097.153991][T11551] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1097.177865][T11551] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.12865: Failed to acquire dquot type 0 [ 1097.257296][ T5693] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1097.291922][T11215] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1097.329161][ T3950] EXT4-fs (loop2): unmounting filesystem. [ 1097.451890][ T5693] usb 5-1: Using ep0 maxpacket: 32 [ 1097.459313][ T5693] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1097.486337][T11215] usb 7-1: config 7 has an invalid interface number: 192 but max is 0 [ 1097.511968][T11215] usb 7-1: config 7 has no interface number 0 [ 1097.518322][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.543394][T11215] usb 7-1: config 7 interface 192 has no altsetting 0 [ 1097.563957][ T5693] usb 5-1: config 0 descriptor?? [ 1097.586396][T11215] usb 7-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 1097.598127][ T5693] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1097.621869][T11215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.648729][T11215] usb 7-1: Product: syz [ 1097.662107][T11215] usb 7-1: Manufacturer: syz [ 1097.677344][T11215] usb 7-1: SerialNumber: syz [ 1097.785738][T11639] netlink: 'syz.1.12885': attribute type 1 has an invalid length. [ 1097.978709][ T5693] gspca_sunplus: reg_w_riv err -71 [ 1097.996208][ T5693] sunplus: probe of 5-1:0.0 failed with error -71 [ 1098.004776][T11215] usb 7-1: USB disconnect, device number 42 [ 1098.053001][ T5693] usb 5-1: USB disconnect, device number 48 [ 1098.250568][T11672] xt_TCPMSS: Only works on TCP SYN packets [ 1098.296991][T11676] loop1: detected capacity change from 0 to 256 [ 1098.357625][T11676] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 1098.789604][T11698] netlink: 'syz.6.12897': attribute type 1 has an invalid length. [ 1099.025450][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12901'. [ 1099.157442][T11720] loop2: detected capacity change from 0 to 1024 [ 1099.270511][T11720] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1099.572375][T11740] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1099.643405][ T3950] EXT4-fs (loop2): unmounting filesystem. [ 1100.211648][T11769] UBIFS error (pid: 11769): cannot open "", error -22 [ 1100.329550][T11774] dlm: plock device version mismatch: kernel (1.2.0), user (1.16121856.0) [ 1100.464843][T11782] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12922'. [ 1100.646308][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12925'. [ 1100.722086][T11788] netlink: 332 bytes leftover after parsing attributes in process `syz.2.12925'. [ 1100.800061][T11795] loop4: detected capacity change from 0 to 2048 [ 1100.846569][T11795] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1100.873032][T11748] loop1: detected capacity change from 0 to 32768 [ 1100.932535][T11802] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1101.021436][T11748] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1101.091938][T11748] lbmIODone: I/O error in JFS log [ 1101.131203][T11748] *** Log Format Error ! *** [ 1101.151581][T11748] lmLogInit: exit(-22) [ 1101.202414][T11748] lmLogOpen: exit(-22) [ 1101.219770][T11810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12930'. [ 1101.288794][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12930'. [ 1101.969695][T11845] netlink: 'syz.6.12938': attribute type 7 has an invalid length. [ 1102.002170][T11845] netlink: 140 bytes leftover after parsing attributes in process `syz.6.12938'. [ 1102.409117][T11865] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12944'. [ 1102.569175][T11871] loop6: detected capacity change from 0 to 128 [ 1103.056045][T11899] loop2: detected capacity change from 0 to 164 [ 1103.176340][T11906] loop1: detected capacity change from 0 to 256 [ 1103.324490][T11906] FAT-fs (loop1): Directory bread(block 64) failed [ 1103.358986][T11906] FAT-fs (loop1): Directory bread(block 65) failed [ 1103.378692][T11915] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1103.387636][T11906] FAT-fs (loop1): Directory bread(block 66) failed [ 1103.436680][T11906] FAT-fs (loop1): Directory bread(block 67) failed [ 1103.472000][T11906] FAT-fs (loop1): Directory bread(block 68) failed [ 1103.501336][T11906] FAT-fs (loop1): Directory bread(block 69) failed [ 1103.551927][T11906] FAT-fs (loop1): Directory bread(block 70) failed [ 1103.558582][T11906] FAT-fs (loop1): Directory bread(block 71) failed [ 1103.627986][T11906] FAT-fs (loop1): Directory bread(block 72) failed [ 1103.653307][T11906] FAT-fs (loop1): Directory bread(block 73) failed [ 1103.986669][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12966'. [ 1104.043383][T11942] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12966'. [ 1104.096287][T11949] loop1: detected capacity change from 0 to 512 [ 1104.332177][T11949] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1104.343821][T11949] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1104.350410][T11966] autofs4:pid:11966:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 1104.356068][T11949] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.12968: Failed to acquire dquot type 1 [ 1104.418002][T11949] EXT4-fs (loop1): 1 truncate cleaned up [ 1104.450265][T11949] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1104.471153][T11966] autofs4:pid:11966:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 1104.484565][T11949] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.617714][ T26] audit: type=1326 audit(2000000114.620:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.6.12976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1104.662162][T11949] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1104.702248][ T26] audit: type=1326 audit(2000000114.620:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.6.12976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1104.772113][T11949] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1104.835310][T11949] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.12968: Failed to acquire dquot type 1 [ 1104.888506][ T26] audit: type=1326 audit(2000000114.620:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.6.12976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1104.910240][T11988] loop6: detected capacity change from 0 to 1024 [ 1104.951889][ T26] audit: type=1326 audit(2000000114.620:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.6.12976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1105.009775][T11988] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #3: comm syz.6.12979: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 1105.041657][ T6326] EXT4-fs (loop1): unmounting filesystem. [ 1105.051886][ T26] audit: type=1326 audit(2000000114.620:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11974 comm="syz.6.12976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1105.116810][T11988] EXT4-fs error (device loop6): ext4_quota_enable:7025: comm syz.6.12979: Bad quota inode: 3, type: 0 [ 1105.149960][T11988] EXT4-fs warning (device loop6): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1105.203963][T11988] EXT4-fs (loop6): mount failed [ 1105.460740][T12013] Cannot find del_set index 0 as target [ 1105.840433][T12038] loop6: detected capacity change from 0 to 128 [ 1105.899902][T12038] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1106.006213][T12038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1106.067500][T12044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12993'. [ 1106.087320][T12044] netlink: 'syz.2.12993': attribute type 1 has an invalid length. [ 1106.651172][T12078] netlink: 'syz.0.13002': attribute type 25 has an invalid length. [ 1106.681920][T12078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13002'. [ 1106.708832][T12077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13003'. [ 1107.370439][T12102] loop6: detected capacity change from 0 to 256 [ 1107.567383][T12057] loop1: detected capacity change from 0 to 32768 [ 1107.594567][T12109] loop2: detected capacity change from 0 to 1024 [ 1107.762554][T12073] loop4: detected capacity change from 0 to 32768 [ 1107.811566][T12121] program syz.0.13014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.840296][T12073] ERROR: (device loop4): dbAllocAG: unable to allocate blocks [ 1107.840296][T12073] [ 1107.894300][T12073] ERROR: (device loop4): remounting filesystem as read-only [ 1107.942060][T12073] jfs_create: dtInsert returned -EIO [ 1107.947613][T12073] ERROR: (device loop4): jfs_create: [ 1107.947613][T12073] [ 1108.109799][T12131] netlink: zone id is out of range [ 1108.146932][T12131] netlink: zone id is out of range [ 1108.174775][T12131] netlink: set zone limit has 8 unknown bytes [ 1108.245341][T12135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13018'. [ 1108.333023][T12139] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1108.930141][T31298] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 1109.460318][T12192] loop1: detected capacity change from 0 to 256 [ 1109.639009][T12192] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 1110.021509][T12221] loop1: detected capacity change from 0 to 256 [ 1110.057265][T12221] exfat: Deprecated parameter 'utf8' [ 1110.093514][T12221] exfat: Deprecated parameter 'utf8' [ 1110.141541][T12221] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 1110.192993][T12227] loop2: detected capacity change from 0 to 64 [ 1111.182914][T12278] netlink: 'syz.1.13056': attribute type 10 has an invalid length. [ 1111.403095][T12289] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13061'. [ 1111.587501][T12305] loop2: detected capacity change from 0 to 256 [ 1111.837511][T12315] loop1: detected capacity change from 0 to 256 [ 1112.474376][T12350] loop4: detected capacity change from 0 to 256 [ 1112.553356][T12350] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 1112.887140][T12368] ALSA: mixer_oss: invalid OSS volume '¢“ò¹œÃéÞ¨c">ø†<ö£/4¤' [ 1112.907304][T12368] ALSA: mixer_oss: invalid OSS volume 'ÄNi)À·E{:ÊT%½cB' [ 1112.933159][T12370] [U] Ã]Û=®NTرˆ [ 1112.937161][T12368] ALSA: mixer_oss: invalid OSS volume 'fEøà,MTÔóÝé‹8P„דT}¦'‘§Wàül©{' [ 1112.973216][T12368] ALSA: mixer_oss: invalid OSS volume 'Áé;›y@¸]Ì>ë#óÒaèýÍ6\9/¸ü[Óø\' [ 1113.102772][T12373] Bluetooth: MGMT ver 1.22 [ 1113.466855][T12335] loop2: detected capacity change from 0 to 32768 [ 1113.659066][T12335] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 1113.703659][T12335] XFS (loop2): Mounting V5 Filesystem [ 1113.896985][T12335] XFS (loop2): Ending clean mount [ 1113.912796][T12335] XFS (loop2): Quotacheck needed: Please wait. [ 1114.108473][T12335] XFS (loop2): Quotacheck: Done. [ 1114.259973][ T3950] XFS (loop2): Unmounting Filesystem [ 1114.409636][T12378] loop4: detected capacity change from 0 to 32768 [ 1114.460573][T31298] Bluetooth: hci0: link tx timeout [ 1114.467266][T31298] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1114.606437][T12378] ialloc: diAlloc returned -5! [ 1115.430412][ T26] audit: type=1326 audit(2000000125.430:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.6.13107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1115.545122][ T26] audit: type=1326 audit(2000000125.440:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.6.13107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1115.650167][ T26] audit: type=1326 audit(2000000125.440:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.6.13107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1115.762734][ T26] audit: type=1326 audit(2000000125.440:2645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.6.13107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1115.798868][T12497] loop2: detected capacity change from 0 to 8 [ 1115.833237][T12497] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1115.850183][ T26] audit: type=1326 audit(2000000125.440:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.6.13107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1115.905631][T21213] udevd[21213]: incorrect cramfs checksum on /dev/loop2 [ 1115.918573][T12497] cramfs: Error -5 while decompressing! [ 1115.936672][T12497] cramfs: ffffffff96d75138(16)->ffff8880413a8000(4096) [ 1115.967379][T12497] cramfs: Error -5 while decompressing! [ 1115.980011][ T26] audit: type=1326 audit(2000000125.440:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12476 comm="syz.6.13107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1a2f8e929 code=0x7ffc0000 [ 1116.005571][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.005620][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.046386][T12497] cramfs: ffffffff96d75138(16)->ffff8880413a8000(4096) [ 1116.068129][T21213] udevd[21213]: incorrect cramfs checksum on /dev/loop2 [ 1116.112325][ T26] audit: type=1800 audit(2000000126.070:2648): pid=12497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13111" name="file0" dev="loop2" ino=244 res=0 errno=0 [ 1116.310713][T12518] loop1: detected capacity change from 0 to 128 [ 1116.312004][ T5693] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1116.343196][T12518] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1116.387282][T12518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1116.511875][ T5693] usb 5-1: Using ep0 maxpacket: 32 [ 1116.518915][ T5693] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1116.541882][T31298] Bluetooth: hci0: command 0x0406 tx timeout [ 1116.547754][ T5693] usb 5-1: config 0 has no interface number 0 [ 1116.576667][ T5693] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1116.651405][ T5693] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1116.681347][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.720342][ T5693] usb 5-1: Product: syz [ 1116.729626][ T5693] usb 5-1: Manufacturer: syz [ 1116.735770][T12528] loop1: detected capacity change from 0 to 1024 [ 1116.744690][ T5693] usb 5-1: SerialNumber: syz [ 1116.760548][ T5693] usb 5-1: config 0 descriptor?? [ 1116.802347][ T5693] smsc75xx v1.0.0 [ 1116.858021][T12500] loop6: detected capacity change from 0 to 32768 [ 1116.974867][T12500] JBD2: Ignoring recovery information on journal [ 1117.116205][T12500] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1117.148592][T12519] loop2: detected capacity change from 0 to 32768 [ 1117.261050][T12519] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 1117.301242][T12549] loop1: detected capacity change from 0 to 128 [ 1117.348556][T12519] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 1117.386211][T12549] EXT4-fs: Ignoring removed nobh option [ 1117.412783][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1117.445941][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1117.489766][ T5693] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1117.521662][T12549] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1117.536196][ T5693] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 1117.545942][T12549] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1117.621252][ T5693] usb 5-1: USB disconnect, device number 49 [ 1117.746326][ T8612] ocfs2: Unmounting device (7,6) on (node local) [ 1117.759532][ T3950] ocfs2: Unmounting device (7,2) on (node local) [ 1117.973877][ T6326] EXT4-fs (loop1): unmounting filesystem. [ 1118.301424][T12587] IPVS: Error connecting to the multicast addr [ 1118.460596][T12598] loop1: detected capacity change from 0 to 512 [ 1118.579427][T12598] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 1118.642470][T12598] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 1118.681945][T12598] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #13: comm syz.1.13128: iget: bad i_size value: 12154757448730 [ 1118.731025][T12598] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.13128: couldn't read orphan inode 13 (err -117) [ 1118.772479][T12598] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1119.036527][ T6326] EXT4-fs (loop1): unmounting filesystem. [ 1119.290615][T12634] loop2: detected capacity change from 0 to 256 [ 1119.378543][T12634] FAT-fs (loop2): Directory bread(block 64) failed [ 1119.421914][T12634] FAT-fs (loop2): Directory bread(block 65) failed [ 1119.428617][T12634] FAT-fs (loop2): Directory bread(block 66) failed [ 1119.491952][T12634] FAT-fs (loop2): Directory bread(block 67) failed [ 1119.498676][T12634] FAT-fs (loop2): Directory bread(block 68) failed [ 1119.552132][T12634] FAT-fs (loop2): Directory bread(block 69) failed [ 1119.572017][T12634] FAT-fs (loop2): Directory bread(block 70) failed [ 1119.578629][T12634] FAT-fs (loop2): Directory bread(block 71) failed [ 1119.626537][T12634] FAT-fs (loop2): Directory bread(block 72) failed [ 1119.651951][T12634] FAT-fs (loop2): Directory bread(block 73) failed [ 1119.678259][T12590] loop6: detected capacity change from 0 to 32768 [ 1119.859530][T12657] program syz.4.13142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.910112][T12590] XFS (loop6): Mounting V5 Filesystem [ 1120.128976][T12590] XFS (loop6): Ending clean mount [ 1120.172320][T12590] XFS (loop6): Quotacheck needed: Please wait. [ 1120.409422][T12590] XFS (loop6): Quotacheck: Done. [ 1120.600561][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13146'. [ 1120.644616][ T8612] XFS (loop6): Unmounting Filesystem [ 1121.164458][T12706] loop4: detected capacity change from 0 to 64 [ 1121.337203][ T26] audit: type=1800 audit(2000000131.340:2649): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13151" name="bus" dev="loop4" ino=21 res=0 errno=0 [ 1121.826666][T12726] loop4: detected capacity change from 0 to 1024 [ 1121.862985][T12726] EXT4-fs: Ignoring removed orlov option [ 1121.924960][T12691] loop1: detected capacity change from 0 to 32768 [ 1121.929825][T12726] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1122.282811][T12726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1122.679651][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 1123.167369][T12765] loop6: detected capacity change from 0 to 256 [ 1123.572304][T12786] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1124.965016][T12849] tipc: Invalid UDP bearer configuration [ 1124.965062][T12849] tipc: Enabling of bearer rejected, failed to enable media [ 1125.639429][T12878] loop1: detected capacity change from 0 to 512 [ 1125.686700][T12878] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1125.731820][T12878] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1125.852119][T12878] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.13188: bad orphan inode 131083 [ 1125.932010][T12892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13189'. [ 1125.957748][T12878] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1126.353443][ T6326] EXT4-fs (loop1): unmounting filesystem. [ 1126.655524][T12926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13199'. [ 1126.891864][T11215] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1127.106785][T11215] usb 3-1: Using ep0 maxpacket: 32 [ 1127.114747][T11215] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1127.178249][T11215] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1127.241889][T11215] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 1127.251016][T11215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.319318][T11215] usb 3-1: config 0 descriptor?? [ 1127.369189][T12957] loop6: detected capacity change from 0 to 512 [ 1127.547629][T12957] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1127.557201][T12957] ext4 filesystem being mounted at /2264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1127.740473][ T8612] EXT4-fs (loop6): unmounting filesystem. [ 1127.797353][T11215] hid-retrode 0003:0403:97C1.0002: hidraw0: USB HID v0.02 Device [HID 0403:97c1] on usb-dummy_hcd.2-1/input0 [ 1127.997143][ T5693] usb 3-1: USB disconnect, device number 10 [ 1128.054435][T12984] loop6: detected capacity change from 0 to 64 [ 1128.162092][T12984] hfs: unable to locate alternate MDB [ 1128.167546][T12984] hfs: continuing without an alternate MDB [ 1128.260170][T12998] binder: 12997:12998 ioctl c00c620f 200000000980 returned -22 [ 1128.302209][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 1128.381261][T12979] fido_id[12979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1129.375712][T13040] loop6: detected capacity change from 0 to 1024 [ 1129.385303][T13038] loop1: detected capacity change from 0 to 1764 [ 1129.456895][T13040] EXT4-fs: Ignoring removed oldalloc option [ 1129.461251][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13220'. [ 1129.701421][T13040] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1129.879355][T13096] loop4: detected capacity change from 0 to 1024 [ 1130.004510][ T8612] EXT4-fs (loop6): unmounting filesystem. [ 1130.209264][T13108] loop1: detected capacity change from 0 to 2048 [ 1130.257486][T13108] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1130.324162][T13114] tipc: Enabling of bearer rejected, failed to enable media [ 1130.379204][T13126] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1131.337382][T13163] loop4: detected capacity change from 0 to 4096 [ 1131.463361][T13163] ntfs: volume version 3.1. [ 1132.283388][T13189] loop4: detected capacity change from 0 to 8192 [ 1132.727226][T13165] loop1: detected capacity change from 0 to 32768 [ 1132.824373][T13211] netlink: 'syz.4.13249': attribute type 4 has an invalid length. [ 1132.889269][T13211] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13249'. [ 1132.956499][T13175] loop6: detected capacity change from 0 to 32768 [ 1133.003756][T13175] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.13244 (13175) [ 1133.021923][ T4669] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1133.038099][ T4368] read_mapping_page failed! [ 1133.057618][ T4368] ERROR: (device loop1): txCommit: [ 1133.057618][ T4368] [ 1133.112954][T13175] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1133.128547][ T4368] jfs_write_inode: jfs_commit_inode failed! [ 1133.172553][T13175] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1133.223916][ T4669] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 1133.242929][T13175] BTRFS info (device loop6): use zlib compression, level 3 [ 1133.264046][ T4669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.301848][T13175] BTRFS info (device loop6): using free space tree [ 1133.322772][ T4669] usb 3-1: config 0 descriptor?? [ 1133.423679][ T4669] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1133.451907][ T4669] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 1133.539843][ T4669] usb 3-1: USB disconnect, device number 11 [ 1133.660632][T13175] BTRFS info (device loop6): enabling ssd optimizations [ 1134.022581][ T8612] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1134.173555][T13276] loop1: detected capacity change from 0 to 2048 [ 1134.250047][T13276] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1134.317320][T13276] NILFS (loop1): mounting unchecked fs [ 1134.409103][T13276] NILFS (loop1): recovery complete [ 1134.471819][T13285] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1135.438076][T13323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13265'. [ 1135.461241][T13323] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13265'. [ 1135.529190][T13325] loop2: detected capacity change from 0 to 1024 [ 1135.631177][T13332] autofs4:pid:13332:autofs_fill_super: called with bogus options [ 1135.646078][T13325] hfsplus: bad catalog entry type [ 1135.804166][T23786] hfsplus: b-tree write err: -5, ino 4 [ 1136.146521][T13356] netlink: 'syz.0.13279': attribute type 2 has an invalid length. [ 1136.781394][T13388] sp0: Synchronizing with TNC [ 1136.853412][T13387] [U] è [ 1137.188720][T13404] loop1: detected capacity change from 0 to 8192 [ 1137.502620][T13421] loop6: detected capacity change from 0 to 512 [ 1137.550268][T13421] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.13297: Invalid inode bitmap blk 4 in block_group 0 [ 1137.614564][T13421] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1137.710341][T13421] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 1137.819235][T13421] EXT4-fs error (device loop6): ext4_read_inode_bitmap:140: comm syz.6.13297: Invalid inode bitmap blk 4 in block_group 0 [ 1137.904756][T13421] EXT4-fs error (device loop6) in ext4_free_inode:362: Corrupt filesystem [ 1138.150334][ T8612] EXT4-fs (loop6): unmounting filesystem. [ 1138.424383][T13470] loop1: detected capacity change from 0 to 256 [ 1138.490965][T13470] FAT-fs (loop1): Directory bread(block 64) failed [ 1138.512143][T13470] FAT-fs (loop1): Directory bread(block 65) failed [ 1138.539415][T13470] FAT-fs (loop1): Directory bread(block 66) failed [ 1138.562131][T13470] FAT-fs (loop1): Directory bread(block 67) failed [ 1138.569435][T13470] FAT-fs (loop1): Directory bread(block 68) failed [ 1138.642915][T13470] FAT-fs (loop1): Directory bread(block 69) failed [ 1138.649795][T13470] FAT-fs (loop1): Directory bread(block 70) failed [ 1138.708197][T13470] FAT-fs (loop1): Directory bread(block 71) failed [ 1138.726947][T13482] loop4: detected capacity change from 0 to 24 [ 1138.733828][T13470] FAT-fs (loop1): Directory bread(block 72) failed [ 1138.740419][T13470] FAT-fs (loop1): Directory bread(block 73) failed [ 1138.800237][T13482] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1138.849724][T13482] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1139.022278][ T28] INFO: task syz-executor:8490 blocked for more than 143 seconds. [ 1139.030673][ T28] Not tainted 6.1.145-syzkaller #0 [ 1139.064430][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.129153][ T28] task:syz-executor state:D stack:22144 pid:8490 ppid:1 flags:0x00004004 [ 1139.159361][ T28] Call Trace: [ 1139.169464][ T28] [ 1139.180863][ T28] __schedule+0x10e9/0x40d0 [ 1139.190339][ T28] ? release_firmware_map_entry+0x18a/0x18a [ 1139.209485][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1139.222102][ T28] ? lock_chain_count+0x20/0x20 [ 1139.232084][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 1139.237194][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1139.252138][ T28] schedule+0xb9/0x180 [ 1139.266519][ T28] io_schedule+0x7c/0xd0 [ 1139.270857][ T28] folio_wait_bit_common+0x6e1/0xf60 [ 1139.291867][ T28] ? folio_wait_bit+0x30/0x30 [ 1139.296770][ T28] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 1139.315474][ T28] ? folio_mapping+0x1ba/0x4d0 [ 1139.322060][ T28] truncate_inode_pages_range+0x9a2/0xff0 [ 1139.327872][ T28] ? mapping_evict_folio+0x520/0x520 [ 1139.360834][ T28] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1139.372172][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1139.377477][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1139.391918][ T28] evict+0x498/0x870 [ 1139.402302][ T28] ? proc_nr_inodes+0x2f0/0x2f0 [ 1139.412129][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1139.430200][ T28] ? _raw_spin_unlock+0x24/0x40 [ 1139.448686][ T28] ? do_raw_spin_unlock+0x11d/0x230 [ 1139.471883][ T28] evict_inodes+0x604/0x690 [ 1139.476502][ T28] ? clear_inode+0x150/0x150 [ 1139.481146][ T28] ? dput+0x1c9/0x1d0 [ 1139.508636][ T28] ? sync_filesystem+0x103/0x220 [ 1139.531232][ T28] generic_shutdown_super+0x93/0x340 [ 1139.544201][ T28] kill_block_super+0x7c/0xe0 [ 1139.549602][ T28] deactivate_locked_super+0x93/0xf0 [ 1139.590029][ T28] cleanup_mnt+0x463/0x4f0 [ 1139.605194][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1139.629902][ T28] task_work_run+0x1ca/0x250 [ 1139.648399][ T28] ? task_work_cancel+0x230/0x230 [ 1139.668682][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1139.674935][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1139.680485][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1139.715552][ T28] syscall_exit_to_user_mode+0x16/0x40 [ 1139.721122][ T28] do_syscall_64+0x58/0xa0 [ 1139.755175][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1139.759952][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1139.781204][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1139.794777][ T28] RIP: 0033:0x7fc40298fc57 [ 1139.799399][ T28] RSP: 002b:00007ffceb7a1a98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1139.808119][ T28] RAX: 0000000000000000 RBX: 00007fc402a10a8d RCX: 00007fc40298fc57 [ 1139.819816][ T28] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffceb7a1b50 [ 1139.837475][ T28] RBP: 00007ffceb7a1b50 R08: 0000000000000000 R09: 0000000000000000 [ 1139.855093][ T28] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffceb7a2be0 [ 1139.872614][ T28] R13: 00007fc402a10a8d R14: 00000000000f0b2a R15: 00007ffceb7a2c20 [ 1139.876191][T13495] loop2: detected capacity change from 0 to 40427 [ 1139.889780][ T28] [ 1139.901506][T13495] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff [ 1139.904389][ T28] [ 1139.904389][ T28] Showing all locks held in the system: [ 1139.918805][T13495] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 1139.993636][T13495] F2FS-fs (loop2): invalid crc value [ 1140.021622][T13495] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1140.036297][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1140.041658][ T28] #0: ffffffff8cb2b7b0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1140.090846][ T28] 1 lock held by rcu_tasks_trace/13: [ 1140.097695][ T28] #0: ffffffff8cb2bfd0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1140.130150][ T28] 1 lock held by khungtaskd/28: [ 1140.149327][ T28] #0: ffffffff8cb2ae20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1140.160070][T13495] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1140.168547][ T28] 2 locks held by getty/4029: [ 1140.173722][ T28] #0: ffff88814d5ff098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1140.184134][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 1140.203154][ T28] 1 lock held by syz-executor/8490: [ 1140.216044][ T28] #0: ffff8880631180e0 (&type->s_umount_key#113){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1140.241465][ T28] 2 locks held by udevd/21213: [ 1140.256887][ T28] 1 lock held by syz.2.13314/13492: [ 1140.273768][ T28] 2 locks held by rm/13531: [ 1140.289060][ T28] [ 1140.297111][ T28] ============================================= [ 1140.297111][ T28] [ 1140.318806][ T3950] syz-executor: attempt to access beyond end of device [ 1140.318806][ T3950] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1140.338097][ T28] NMI backtrace for cpu 0 [ 1140.342507][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.145-syzkaller #0 [ 1140.350440][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1140.360530][ T28] Call Trace: [ 1140.363859][ T28] [ 1140.366823][ T28] dump_stack_lvl+0x168/0x22e [ 1140.371540][ T28] ? irq_work_queue+0xb8/0x140 [ 1140.376364][ T28] ? show_regs_print_info+0x12/0x12 [ 1140.381598][ T28] ? load_image+0x3b0/0x3b0 [ 1140.386145][ T28] ? vprintk_emit+0x571/0x680 [ 1140.390871][ T28] ? printk_sprint+0x460/0x460 [ 1140.395689][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 1140.400676][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1140.406866][ T28] ? _printk+0xcc/0x110 [ 1140.411066][ T28] ? load_image+0x3b0/0x3b0 [ 1140.415616][ T28] ? load_image+0x3b0/0x3b0 [ 1140.420248][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1140.426357][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1140.432379][ T28] watchdog+0xeee/0xf30 [ 1140.436580][ T28] ? watchdog+0x1ed/0xf30 [ 1140.441051][ T28] kthread+0x29d/0x330 [ 1140.445257][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1140.450320][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1140.454955][ T28] ret_from_fork+0x1f/0x30 [ 1140.459424][ T28] [ 1140.463778][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1140.469180][ C1] NMI backtrace for cpu 1 [ 1140.469192][ C1] CPU: 1 PID: 4368 Comm: kworker/u4:8 Not tainted 6.1.145-syzkaller #0 [ 1140.469210][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1140.469221][ C1] Workqueue: phy33 ieee80211_iface_work [ 1140.469247][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 1140.469269][ C1] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 90 80 9e 0c 48 89 de 5b e9 07 52 4f 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d a4 a7 81 7e 65 8b 15 a5 a7 81 7e 81 e2 00 01 ff 00 74 [ 1140.469285][ C1] RSP: 0018:ffffc90004adf238 EFLAGS: 00000283 [ 1140.469299][ C1] RAX: ffffffff81d11314 RBX: ffff88823bdb9000 RCX: ffff88801abe8000 [ 1140.469313][ C1] RDX: 0000000000000000 RSI: ffff88823bdb9000 RDI: ffff88823bdb8260 [ 1140.469326][ C1] RBP: ffffc90004adf350 R08: dffffc0000000000 R09: fffff940011dedc1 [ 1140.469340][ C1] R10: fffff940011dedc1 R11: 1ffffd40011dedc0 R12: dffffc0000000000 [ 1140.469354][ C1] R13: ffff88823bdb8000 R14: ffff88823bdb853e R15: ffff888017441dc0 [ 1140.469368][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1140.469384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1140.469396][ C1] CR2: 00007fb7f5c0f000 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 1140.469412][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1140.469423][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1140.469434][ C1] Call Trace: [ 1140.469440][ C1] [ 1140.469446][ C1] kfence_guarded_alloc+0x754/0xcf0 [ 1140.469470][ C1] ? alloc_covered_contains+0xe0/0xe0 [ 1140.469486][ C1] ? stack_trace_save+0x98/0xe0 [ 1140.469507][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1140.469532][ C1] __kfence_alloc+0x369/0x3a0 [ 1140.469550][ C1] ? kfence_guarded_free+0x780/0x780 [ 1140.469566][ C1] ? mark_lock+0x94/0x320 [ 1140.469587][ C1] ? __kfence_alloc+0x296/0x3a0 [ 1140.469603][ C1] ? __kmem_cache_alloc_node+0x1fa/0x260 [ 1140.469620][ C1] ? __kmalloc+0xa0/0x240 [ 1140.469643][ C1] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 1140.469661][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x3c4/0x2b10 [ 1140.469681][ C1] ? ieee80211_iface_work+0x726/0xc80 [ 1140.469701][ C1] ? process_one_work+0x898/0x1160 [ 1140.469718][ C1] ? worker_thread+0xaa2/0x1250 [ 1140.469736][ C1] ? kthread+0x29d/0x330 [ 1140.469759][ C1] ? ret_from_fork+0x1f/0x30 [ 1140.469805][ C1] ? should_failslab+0x5/0x20 [ 1140.469830][ C1] ? slab_pre_alloc_hook+0x59/0x310 [ 1140.469848][ C1] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 1140.469867][ C1] __kmem_cache_alloc_node+0x1fa/0x260 [ 1140.469887][ C1] ? ieee802_11_parse_elems_full+0xb2/0x1230 [ 1140.469904][ C1] __kmalloc+0xa0/0x240 [ 1140.469929][ C1] ieee802_11_parse_elems_full+0xb2/0x1230 [ 1140.469948][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1140.469968][ C1] ? mark_lock+0x94/0x320 [ 1140.469992][ C1] ? trace_contention_end+0x5f/0x170 [ 1140.470013][ C1] ? __mutex_lock+0x19e/0xaf0 [ 1140.470035][ C1] ? __lock_acquire+0x13c0/0x7c50 [ 1140.470059][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x11b/0x2b10 [ 1140.470087][ C1] ? mutex_lock_nested+0x10/0x10 [ 1140.470108][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 1140.470127][ C1] ? verify_lock_unused+0x140/0x140 [ 1140.470153][ C1] ieee80211_ibss_rx_queued_mgmt+0x3c4/0x2b10 [ 1140.470174][ C1] ? verify_lock_unused+0x140/0x140 [ 1140.470196][ C1] ? rcu_is_watching+0x11/0xa0 [ 1140.470228][ C1] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 1140.470247][ C1] ? mark_lock+0x94/0x320 [ 1140.470274][ C1] ? mark_lock+0x94/0x320 [ 1140.470298][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1140.470324][ C1] ? lock_chain_count+0x20/0x20 [ 1140.470346][ C1] ? __rwlock_init+0x140/0x140 [ 1140.470374][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1140.470398][ C1] ? skb_dequeue+0x10a/0x140 [ 1140.470423][ C1] ieee80211_iface_work+0x726/0xc80 [ 1140.470444][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1140.470470][ C1] ? process_one_work+0x7a1/0x1160 [ 1140.470488][ C1] process_one_work+0x898/0x1160 [ 1140.470513][ C1] ? worker_detach_from_pool+0x240/0x240 [ 1140.470535][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 1140.470558][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1140.470582][ C1] ? kthread_data+0x4b/0xc0 [ 1140.470608][ C1] worker_thread+0xaa2/0x1250 [ 1140.470635][ C1] ? __kthread_parkme+0x162/0x1c0 [ 1140.470663][ C1] kthread+0x29d/0x330 [ 1140.470686][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 1140.470704][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1140.470730][ C1] ret_from_fork+0x1f/0x30 [ 1140.470759][ C1] [ 1140.920703][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1140.927710][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.145-syzkaller #0 [ 1140.935652][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1140.945744][ T28] Call Trace: [ 1140.949055][ T28] [ 1140.952019][ T28] dump_stack_lvl+0x168/0x22e [ 1140.956739][ T28] ? memcpy+0x3c/0x60 [ 1140.960772][ T28] ? show_regs_print_info+0x12/0x12 [ 1140.966016][ T28] ? load_image+0x3b0/0x3b0 [ 1140.970578][ T28] panic+0x2c9/0x710 [ 1140.974512][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1140.979071][ T28] ? watchdog+0xf1c/0xf30 [ 1140.983449][ T28] watchdog+0xf2d/0xf30 [ 1140.987651][ T28] ? watchdog+0x1ed/0xf30 [ 1140.992028][ T28] kthread+0x29d/0x330 [ 1140.996151][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1141.001217][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1141.005860][ T28] ret_from_fork+0x1f/0x30 [ 1141.010341][ T28] [ 1141.013736][ T28] Kernel Offset: disabled [ 1141.018089][ T28] Rebooting in 86400 seconds..