last executing test programs: 6m39.197329521s ago: executing program 5 (id=4394): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000010004b0400000000000000007a000000", @ANYRES32=r0, @ANYBLOB="0000000000000000140040800b0001006272696467650000040002800c001a"], 0x60}}, 0x10) 6m38.676198486s ago: executing program 5 (id=4398): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@bridge_delvlan={0x28, 0x56, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x0, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8}}}]}, 0x28}}, 0x0) 6m38.489879555s ago: executing program 5 (id=4400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010013000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000024000380200000800800034000000002140007800c000100636f756e746572"], 0xe4}}, 0x0) 6m38.074642138s ago: executing program 5 (id=4406): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000001c0)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@errors_remount}, {@allow_utime={'allow_utime', 0x3d, 0x40}}, {@errors_remount}, {@gid}, {@errors_remount}, {@umask}, {@errors_continue}]}, 0x4, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==") mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) 6m37.328171639s ago: executing program 5 (id=4416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x6, 0x0, &(0x7f000000b9c0)) 6m36.582269014s ago: executing program 5 (id=4428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x10, 0x4) 6m36.049670357s ago: executing program 32 (id=4428): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000080)=0x10, 0x4) 4m26.691252788s ago: executing program 1 (id=6211): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5c00000013006bcc9e3be35c6e17aa310704006c1d0000007ea60864160af36514001ac00800000000000000080000000364bc24eab556a705251e608294ff0051f60ac4c9f4d4938037e786a6d0000000000e4509c5bb8df3bfebd5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) 4m26.570917934s ago: executing program 1 (id=6214): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newsa={0x1c8, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@dev}, {@in6=@loopback, 0x0, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'rmd160\x00'}, 0x208, 0x0, "e863654b40a7ad42118bc1dd69d07e3b05cf0dbc9a9aac6130f0d060cb0c958c133115ff9cbb79de1007f5583249a62fe4273013ec2c2cca44c3a2d388d9483ca3"}}]}, 0x1c8}}, 0x0) 4m25.544287656s ago: executing program 1 (id=6227): r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x3}, 0x4) 4m25.494247541s ago: executing program 1 (id=6229): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000600)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@namecase}, {@errors_remount}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@namecase}, {@umask={'umask', 0x3d, 0x3}}, {@namecase}, {@dmask={'dmask', 0x3d, 0x3ff}}, {@keep_last_dots}]}, 0x1, 0x1524, &(0x7f0000002280)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) 4m25.119469321s ago: executing program 1 (id=6231): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000240)={[{@shortname_lower}, {@utf8no}, {@shortname_mixed}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_mixed}, {@numtail}, {@shortname_lower}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}]}, 0x2d, 0x35a, &(0x7f0000000600)="$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") rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m24.228278511s ago: executing program 1 (id=6242): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) 4m23.744596836s ago: executing program 33 (id=6242): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'}) 7.281367013s ago: executing program 3 (id=8560): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) 7.20578794s ago: executing program 2 (id=8561): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 6.990858557s ago: executing program 6 (id=8563): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) 6.771772951s ago: executing program 0 (id=8564): mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 6.641093965s ago: executing program 3 (id=8565): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) 6.536178032s ago: executing program 2 (id=8566): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1810038, &(0x7f00000005c0)={[{@acl}, {@cache_strategy_readaround}, {@dax}, {@cache_strategy_disabled}, {@dax_always}, {@acl}]}, 0x3, 0x1b1, &(0x7f00000000c0)="$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") mount(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540)='virtiofs\x00', 0x80c000, &(0x7f0000000580)='dax=always') 6.299920588s ago: executing program 6 (id=8567): syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x4, 0x0, 0x6, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x303, 0x6, 0x4}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "fd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) 6.188322278s ago: executing program 0 (id=8568): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000d00)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.061892787s ago: executing program 3 (id=8569): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x414, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="4b57e847ca97fe4b6468d5e3b1c8af6e644d82834f7f6415192ea618955c73aa164df482345e086f4d3eeab8150027a48e918d4fd9625eb5bbbda3abcbfb81f62a9f0bae4cdf14f1c7e660836a0ff1efeefa49a8eb3e395e0b9b42eaccbae5f0ee105aad7dee86f62c9ac34d9c489aeccbdcc43e382876a434a4a8099a697b7c86c89ef92d75b2882a9a01bf753884e7da7774a4d679a40f14baa67f2d7a6a2d0b44ae0c7a0fa9c53168755777b5237011e10adc830aedcc6714b8af1c083a8f77221e0488737fc02a13fa91c152", @ANYRES16], 0x1, 0x2ab, &(0x7f0000000440)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) 5.828612699s ago: executing program 2 (id=8570): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, 0x0, 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x24e}}], 0x20}], 0x1, 0x0) 5.582097207s ago: executing program 0 (id=8571): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x60, &(0x7f0000000040), 0x50) 5.32299977s ago: executing program 2 (id=8572): ioperm(0x0, 0xd, 0x4000000000000020) request_key(0x0, 0x0, 0x0, 0xfffffffffffffff9) 5.028550218s ago: executing program 3 (id=8573): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000180)) 4.952953758s ago: executing program 0 (id=8575): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) 4.723545426s ago: executing program 2 (id=8577): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x59, @mcast1, 0xccb}]}, &(0x7f0000000180)=0x10) 4.28081611s ago: executing program 0 (id=8578): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x3b}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x1, 0x8, &(0x7f0000000200)=""/8, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) 4.026987272s ago: executing program 2 (id=8580): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0x2, 0x4, 0xf7, 0x101, 0x200}) 3.837761072s ago: executing program 4 (id=8581): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000020900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000216c0000000c0a01030000000000000000070000000900020073797a31000008000900010073797a3000000000400003803c0000800f0003400000000230000b802c0001800a0001"], 0xf0}}, 0x0) 3.759882728s ago: executing program 3 (id=8582): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x1a2}) 3.63301699s ago: executing program 6 (id=8583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x20000000) 3.582824339s ago: executing program 0 (id=8584): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0xc0c09425, &(0x7f0000000040)) 3.032654601s ago: executing program 3 (id=8586): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x800, &(0x7f00000006c0)={[{@flushoncommit}, {@nossd}]}, 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0) 3.009114931s ago: executing program 6 (id=8587): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000001440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x738, 0x1709, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xa9, 0x0, 0x40, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x0, 0xd, {0x9, 0x21, 0x6, 0xef, 0x1, {0x22, 0xf05}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0xfc, 0x3}}}}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x310, 0x6, 0x8, 0x40, 0x40, 0x2}, 0x2c, &(0x7f00000014c0)={0x5, 0xf, 0x2c, 0x2, [@generic={0xb, 0x10, 0x1, "17eb3e17b62a7515"}, @generic={0x1c, 0x10, 0xa, "b003d769f9ae7c8a525b5363650f6c46a6c2e042d0dfe76286"}]}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 2.895148461s ago: executing program 4 (id=8588): timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000100)) 2.887173009s ago: executing program 7 (id=8589): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, &(0x7f0000002a80)) 2.373085194s ago: executing program 7 (id=8590): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x1, 0x0, 0x3, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xe, 0x0, 0x3, 0x3ffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x13600000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400000004, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69617cb3, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000]}) 2.372237608s ago: executing program 4 (id=8591): r0 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) 1.824489784s ago: executing program 7 (id=8592): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1.638565357s ago: executing program 4 (id=8593): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r0, &(0x7f0000000400)=[{&(0x7f0000000040)='U', 0x1}], 0x400, 0x3, 0x6, 0x12) 1.218753978s ago: executing program 7 (id=8594): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000016c0)={@cgroup, r0, 0x37, 0x20, 0x0, @void, @void, @void, @value}, 0x20) 900.832954ms ago: executing program 4 (id=8595): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @printk={@x, {0x3, 0x3, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 668.867524ms ago: executing program 7 (id=8596): r0 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x8, 0x5, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010100, @local}}}}) 660.939559ms ago: executing program 6 (id=8597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6}}, 0x20) 76.760114ms ago: executing program 4 (id=8598): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x7}]}}}]}, 0x3c}}, 0x40080) 59.735475ms ago: executing program 7 (id=8599): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xfdfffffd) 0s ago: executing program 6 (id=8600): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x223}], 0x1) kernel console output (not intermixed with test programs): .808214][T22788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6919'. [ 747.860645][T22784] usb usb8: usbfs: process 22784 (syz.6.6917) did not claim interface 1 before use [ 747.934244][T22783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 747.974921][T22783] ext4 filesystem being mounted at /1145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 748.244501][ T47] usb 4-1: USB disconnect, device number 104 [ 748.312643][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.464566][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 749.050000][T22842] loop3: detected capacity change from 0 to 128 [ 749.080044][ T47] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 749.116337][T22844] tmpfs: Bad value for 'mpol' [ 749.268266][ T47] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 749.296294][ T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.370906][ T47] usb 7-1: config 0 descriptor?? [ 749.380022][ T47] cp210x 7-1:0.0: cp210x converter detected [ 749.612737][ T47] usb 7-1: cp210x converter now attached to ttyUSB0 [ 749.644341][ T5849] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 749.827861][ T47] usb 7-1: USB disconnect, device number 11 [ 749.838583][ T5849] usb 8-1: Using ep0 maxpacket: 32 [ 749.912623][ T5849] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 749.924601][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 749.933185][ T47] cp210x 7-1:0.0: device disconnected [ 750.001703][ T5849] usb 8-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 750.011194][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.019918][ T5849] usb 8-1: Product: syz [ 750.024538][ T5849] usb 8-1: Manufacturer: syz [ 750.029163][ T5849] usb 8-1: SerialNumber: syz [ 750.046176][ T5849] usb 8-1: config 0 descriptor?? [ 750.056484][T22852] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 750.065081][ T5849] hub 8-1:0.0: bad descriptor, ignoring hub [ 750.141460][ T5849] hub 8-1:0.0: probe with driver hub failed with error -5 [ 750.177873][ T5849] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input68 [ 750.330332][T22852] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 750.336856][T13726] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 750.337374][T22852] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 750.445294][T22852] vhci_hcd vhci_hcd.0: Device attached [ 750.560306][T13726] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 750.568768][T13726] usb 4-1: config 0 has no interface number 0 [ 750.609720][T13726] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 750.643246][T22887] vhci_hcd: connection closed [ 750.644899][T13726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.651414][ T5890] usb 8-1: USB disconnect, device number 3 [ 750.658616][ C1] usbtouchscreen 8-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 750.706302][ T2979] vhci_hcd: stop threads [ 750.720005][ T5849] usb 48-1: SetAddress Request (2) to port 0 [ 750.739900][T22898] tmpfs: Bad value for 'mpol' [ 750.746210][ T2979] vhci_hcd: release socket [ 750.748366][ T5849] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 750.754451][T13726] usb 4-1: Product: syz [ 750.811445][ T2979] vhci_hcd: disconnect device [ 750.816771][T13726] usb 4-1: Manufacturer: syz [ 750.821417][T13726] usb 4-1: SerialNumber: syz [ 750.857755][T13726] usb 4-1: config 0 descriptor?? [ 751.114270][T13726] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 751.155674][T13726] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 751.202210][T13726] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 751.237209][T13726] usb 4-1: media controller created [ 751.250236][T22916] loop4: detected capacity change from 0 to 512 [ 751.357416][T22916] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 751.387702][T13726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 751.434133][T13726] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 751.470779][T13726] usb 4-1: USB disconnect, device number 105 [ 751.553146][ T5829] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 751.599447][T22923] loop0: detected capacity change from 0 to 512 [ 751.659197][T22923] EXT4-fs: Invalid want_extra_isize 2047 [ 751.671326][T22928] loop7: detected capacity change from 0 to 64 [ 752.528631][T22970] CIFS mount error: No usable UNC path provided in device string! [ 752.528631][T22970] [ 752.539014][T22970] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 752.969425][ T25] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 753.005926][T22981] loop4: detected capacity change from 0 to 32768 [ 753.021009][T22981] JBD2: Ignoring recovery information on journal [ 753.061966][T22981] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 753.078213][T13726] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 753.164618][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 753.204866][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.246771][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 753.275536][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 753.316043][ T25] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 753.319816][T13726] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 753.358333][T13726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.359373][ T25] usb 3-1: config 1 interface 1 has no altsetting 0 [ 753.391318][T13726] usb 8-1: Product: syz [ 753.397111][ T25] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 753.406749][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.412060][T13726] usb 8-1: Manufacturer: syz [ 753.415516][ T25] usb 3-1: Product: syz [ 753.444840][T13726] usb 8-1: SerialNumber: syz [ 753.449099][ T25] usb 3-1: Manufacturer: syz [ 753.459529][ T5829] ocfs2: Unmounting device (7,4) on (node local) [ 753.467306][T13726] usb 8-1: config 0 descriptor?? [ 753.497145][T23003] netlink: 'syz.3.6990': attribute type 32 has an invalid length. [ 753.522971][ T25] usb 3-1: SerialNumber: syz [ 753.747290][T13726] hso 8-1:0.0: Failed to find BULK IN ep [ 753.764561][T13726] usb-storage 8-1:0.0: USB Mass Storage device detected [ 753.819502][ T25] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 753.876092][ T25] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 753.971002][T13726] usb 8-1: USB disconnect, device number 4 [ 754.099927][T23022] netlink: 'syz.6.6997': attribute type 1 has an invalid length. [ 754.175321][ T25] usb 3-1: USB disconnect, device number 117 [ 754.981738][T23060] loop4: detected capacity change from 0 to 256 [ 755.418914][ T25] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 755.480346][T23085] loop3: detected capacity change from 0 to 256 [ 755.487983][T23085] exfat: Deprecated parameter 'utf8' [ 755.493892][T23085] exfat: Deprecated parameter 'utf8' [ 755.561371][T23085] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d) [ 755.680067][ T25] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 755.701682][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.748678][ T25] usb 3-1: config 0 descriptor?? [ 755.769636][ T25] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 756.065251][T23105] openvswitch: netlink: Message has 1275 unknown bytes. [ 756.075761][T23105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 756.206161][ T25] gp8psk: usb in 137 operation failed. [ 756.218670][ T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 756.243761][ T25] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 756.276549][ T5849] usb 48-1: device descriptor read/8, error -110 [ 756.307382][ T25] usb 3-1: USB disconnect, device number 118 [ 756.691661][T23090] loop7: detected capacity change from 0 to 32768 [ 756.720305][T23090] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.7021 (23090) [ 756.805851][ T5849] usb usb48-port1: attempt power cycle [ 756.821875][T23090] BTRFS info (device loop7 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 756.923902][T23090] BTRFS info (device loop7 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 756.934076][T23090] BTRFS info (device loop7 state S): using free-space-tree [ 757.058729][T23140] loop2: detected capacity change from 0 to 1024 [ 757.455238][ T5849] usb usb48-port1: unable to enumerate USB device [ 757.715731][T20941] BTRFS info (device loop7 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 757.757183][T23179] loop4: detected capacity change from 0 to 256 [ 758.324225][T23173] loop3: detected capacity change from 0 to 32768 [ 758.675226][T23199] @: renamed from vlan0 (while UP) [ 758.779224][T23205] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 759.178461][T23217] netlink: 'syz.0.7060': attribute type 3 has an invalid length. [ 759.186345][T23217] netlink: 'syz.0.7060': attribute type 1 has an invalid length. [ 759.199206][T23217] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.7060'. [ 759.212909][T23217] nbd: couldn't find device at index 63 [ 759.452323][T23226] loop2: detected capacity change from 0 to 256 [ 759.749003][T23216] loop3: detected capacity change from 0 to 32768 [ 759.760943][T23226] FAT-fs (loop2): Directory bread(block 64) failed [ 759.760991][T23226] FAT-fs (loop2): Directory bread(block 65) failed [ 759.761071][T23226] FAT-fs (loop2): Directory bread(block 66) failed [ 759.761109][T23226] FAT-fs (loop2): Directory bread(block 67) failed [ 759.761186][T23226] FAT-fs (loop2): Directory bread(block 68) failed [ 759.761224][T23226] FAT-fs (loop2): Directory bread(block 69) failed [ 759.761305][T23226] FAT-fs (loop2): Directory bread(block 70) failed [ 759.761343][T23226] FAT-fs (loop2): Directory bread(block 71) failed [ 759.761420][T23226] FAT-fs (loop2): Directory bread(block 72) failed [ 759.761458][T23226] FAT-fs (loop2): Directory bread(block 73) failed [ 759.905192][T23216] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 760.142670][T23216] XFS (loop3): Ending clean mount [ 760.273775][ T2334] pvrusb2: request_firmware fatal error with code=-110 [ 760.280682][ T2334] pvrusb2: Failure uploading firmware1 [ 760.496385][T23229] loop4: detected capacity change from 0 to 32768 [ 760.532540][T23252] loop2: detected capacity change from 0 to 32768 [ 760.538953][ T5848] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 760.596700][ T2334] pvrusb2: Device initialization was not successful. [ 760.596773][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 760.596788][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 760.604258][ T5921] pvrusb2: Device being rendered inoperable [ 760.628232][T23252] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7065 (23252) [ 760.679145][T23229] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7064 (23229) [ 760.695655][T23252] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 760.695772][T23252] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 760.695830][T23252] BTRFS info (device loop2 state S): using free-space-tree [ 760.851557][T23229] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 760.851668][T23229] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 760.851719][T23229] BTRFS info (device loop4): using free-space-tree [ 761.210793][T23285] loop6: detected capacity change from 0 to 2048 [ 761.341265][T23285] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 761.592223][T23307] netlink: 'syz.7.7081': attribute type 21 has an invalid length. [ 761.600650][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7081'. [ 761.616671][T23309] xt_NFQUEUE: number of total queues is 0 [ 762.070541][ T5828] BTRFS info (device loop2 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 762.243852][T23331] loop6: detected capacity change from 0 to 512 [ 762.319511][T23331] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.7085: attempt to clear invalid blocks 1 len 1 [ 762.449944][ T5829] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 762.529861][T23331] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7085: bg 0: block 343: padding at end of block bitmap is not set [ 762.576480][T23331] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 762.643819][T23331] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7085: invalid indirect mapped block 1819239214 (level 0) [ 762.717238][T23331] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.7085: invalid indirect mapped block 1819239214 (level 1) [ 762.748321][T23331] EXT4-fs (loop6): 1 truncate cleaned up [ 762.755806][T23331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 762.806732][T23331] tmpfs: Bad value for 'mpol' [ 762.944152][T23354] loop3: detected capacity change from 0 to 1024 [ 763.119831][T16277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.243046][T23354] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 763.682023][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.291448][ T29] audit: type=1400 audit(1733865609.282:68): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F2603 pid=23391 comm="syz.7.7105" [ 764.317209][T23390] loop2: detected capacity change from 0 to 32768 [ 764.383889][T23390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7101 (23390) [ 764.599993][T23411] QAT: failed to copy from user cfg_data. [ 764.640658][T23410] loop3: detected capacity change from 0 to 512 [ 764.840658][T23390] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 764.859982][T23390] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 764.880419][T23410] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.7111: bad orphan inode 655360 [ 764.952099][ T5921] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 764.957350][T23407] loop4: detected capacity change from 0 to 32768 [ 764.993534][T23390] BTRFS info (device loop2): using free-space-tree [ 765.049706][T23407] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7122 (23407) [ 765.133552][T23410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 765.198880][T23410] ext4 filesystem being mounted at /1131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.236896][ T5921] usb 7-1: config 3 has an invalid interface number: 221 but max is 0 [ 765.245350][ T5921] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 765.267140][T23407] BTRFS info (device loop4 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 765.279629][ T5921] usb 7-1: config 3 has no interface number 0 [ 765.316692][T23407] BTRFS info (device loop4 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 765.381285][T23407] BTRFS info (device loop4 state S): using free-space-tree [ 765.448617][ T5921] usb 7-1: config 3 interface 221 has no altsetting 0 [ 765.481425][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 765.501157][ T5921] usb 7-1: New USB device found, idVendor=9277, idProduct=0561, bcdDevice=7a.8f [ 765.512097][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.523789][ T5921] usb 7-1: Product: syz [ 765.528087][ T5921] usb 7-1: Manufacturer: syz [ 765.532733][ T5921] usb 7-1: SerialNumber: syz [ 765.731586][T23451] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 765.764282][ T5921] cdc_acm 7-1:3.221: skipping garbage [ 765.777527][ T5921] usb 7-1: USB disconnect, device number 12 [ 766.380650][ T5828] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 766.474096][ T5829] BTRFS info (device loop4 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 766.848115][T23508] xt_TCPMSS: Only works on TCP SYN packets [ 767.072112][T23516] loop6: detected capacity change from 0 to 1024 [ 767.133602][T23516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.201732][T23511] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 767.690256][T16277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.250177][T23547] loop7: detected capacity change from 0 to 256 [ 768.250956][T23547] exfat: Deprecated parameter 'namecase' [ 768.316387][T23556] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 768.348388][T23547] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 768.596758][T23564] loop6: detected capacity change from 0 to 512 [ 768.774947][T23564] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 768.926849][T23564] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 768.935575][T23564] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.7149: bad orphan inode 13 [ 768.957432][T23564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.974800][T23574] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 769.074096][T16277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.277583][T23595] batadv1: entered promiscuous mode [ 769.283933][T23595] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 770.165563][T23630] loop0: detected capacity change from 0 to 512 [ 770.242233][T23630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.270257][T23630] ext4 filesystem being mounted at /1193/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.465748][T23640] syz.4.7180 (23640) used greatest stack depth: 16848 bytes left [ 770.481880][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.463666][T23651] loop6: detected capacity change from 0 to 32768 [ 771.508092][T23651] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7182 (23651) [ 771.792580][T23651] BTRFS info (device loop6 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 771.821007][T23651] BTRFS info (device loop6 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 771.831907][T23651] BTRFS info (device loop6 state S): using free-space-tree [ 772.079616][T23721] xt_TCPMSS: Only works on TCP SYN packets [ 772.096677][T23723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7218'. [ 772.175636][T23723] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7218'. [ 772.343379][T13726] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 772.390186][T23736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7208'. [ 772.430996][T23739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7209'. [ 772.590885][T23747] batadv1: entered promiscuous mode [ 772.597068][T23747] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 772.713518][T13726] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 772.726698][T13726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.735560][T16277] BTRFS info (device loop6 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 772.756515][T13726] usb 4-1: Product: syz [ 772.773839][T13726] usb 4-1: Manufacturer: syz [ 772.794370][T13726] usb 4-1: SerialNumber: syz [ 772.819669][T13726] r8152-cfgselector 4-1: Unknown version 0x0000 [ 772.829923][T13726] r8152-cfgselector 4-1: config 0 descriptor?? [ 773.240896][T23763] netlink: 288 bytes leftover after parsing attributes in process `syz.7.7222'. [ 773.275398][T23768] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7220'. [ 773.383386][T13726] r8152-cfgselector 4-1: USB disconnect, device number 106 [ 773.520636][T23778] loop4: detected capacity change from 0 to 1024 [ 773.536019][T23778] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 773.805852][T23778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 773.814867][T23778] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 773.900504][T23778] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 774.092813][T23800] loop2: detected capacity change from 0 to 1024 [ 774.130641][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.378828][T23813] batadv2: entered promiscuous mode [ 774.385404][T23813] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 774.648972][T23819] netlink: 92 bytes leftover after parsing attributes in process `syz.7.7242'. [ 774.673476][T23819] netlink: 133 bytes leftover after parsing attributes in process `syz.7.7242'. [ 774.689174][T23819] netlink: 133 bytes leftover after parsing attributes in process `syz.7.7242'. [ 774.699827][T16542] hfsplus: b-tree write err: -5, ino 4 [ 774.877675][T23827] loop6: detected capacity change from 0 to 512 [ 775.269178][T23827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.282084][T23827] ext4 filesystem being mounted at /447/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 775.375059][T16277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.392578][T23846] xt_CT: No such helper "syz1" [ 775.949146][T23878] netlink: 456 bytes leftover after parsing attributes in process `syz.2.7263'. [ 776.120939][T23883] batadv1: entered promiscuous mode [ 776.127669][T23883] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 777.994063][T23963] batadv1: entered promiscuous mode [ 778.000502][T23963] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 778.026443][T23932] loop6: detected capacity change from 0 to 32768 [ 778.485019][T23975] vlan0: entered promiscuous mode [ 778.494362][T23975] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 778.570263][T23982] loop0: detected capacity change from 0 to 1024 [ 778.689846][T23982] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 778.719054][T23982] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 778.829775][T23982] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 778.842212][T23982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 778.864629][T23990] __nla_validate_parse: 3 callbacks suppressed [ 778.864650][T23990] netlink: 288 bytes leftover after parsing attributes in process `syz.2.7300'. [ 778.921462][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.513420][T23955] loop3: detected capacity change from 0 to 32768 [ 779.541817][T23955] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7291 (23955) [ 779.605521][T23955] BTRFS info (device loop3 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 779.663852][T23955] BTRFS info (device loop3 state S): using blake2b (blake2b-256-generic) checksum algorithm [ 779.687673][T23955] BTRFS info (device loop3 state S): using free-space-tree [ 780.174591][ T5848] BTRFS info (device loop3 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 780.590420][T24065] xt_CT: No such helper "syz1" [ 781.213481][T24090] syz.6.7336 uses old SIOCAX25GETINFO [ 782.645978][ T5833] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 782.794615][T24122] loop3: detected capacity change from 0 to 32768 [ 782.819208][T24122] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7349 (24122) [ 782.870547][ T5833] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 782.878948][ T5833] usb 8-1: config 0 has no interface number 0 [ 782.896252][T24122] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 782.914131][ T5833] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 782.923387][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.931727][ T5833] usb 8-1: Product: syz [ 782.935924][ T5833] usb 8-1: Manufacturer: syz [ 782.940796][ T5833] usb 8-1: SerialNumber: syz [ 782.975532][T24122] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 782.998822][ T5833] usb 8-1: config 0 descriptor?? [ 783.010787][T24133] loop2: detected capacity change from 0 to 32768 [ 783.024727][T24122] BTRFS info (device loop3): using free-space-tree [ 783.066584][T24133] BTRFS: device /dev/loop2 (7:2) using temp-fsid 761be06c-df68-4d91-96ab-4f09c4f73e53 [ 783.076301][T24133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7351 (24133) [ 783.100354][T24159] loop0: detected capacity change from 0 to 1024 [ 783.211357][T24133] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 783.231788][T24133] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 783.240521][T24133] BTRFS info (device loop2): using free-space-tree [ 783.400622][ T5833] usb 8-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 783.419231][ T5833] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 783.429719][ T5833] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 783.438157][ T5833] usb 8-1: media controller created [ 783.456348][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 783.653938][ T5848] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 783.673299][ T5833] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 783.720342][ T5833] usb 8-1: USB disconnect, device number 5 [ 783.871462][ T6177] udevd[6177]: setting mode of /dev/bus/usb/008/005 to 020664 failed: No such file or directory [ 783.900882][ T6177] udevd[6177]: setting owner of /dev/bus/usb/008/005 to uid=0, gid=0 failed: No such file or directory [ 783.988642][ T5828] BTRFS info (device loop2): last unmount of filesystem 761be06c-df68-4d91-96ab-4f09c4f73e53 [ 784.569370][T24221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7371'. [ 784.695246][T24209] batadv1: entered promiscuous mode [ 784.702091][T24209] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 784.809673][T24229] netlink: 'syz.2.7374': attribute type 1 has an invalid length. [ 784.817910][T24229] netlink: 'syz.2.7374': attribute type 2 has an invalid length. [ 784.985348][T24233] loop3: detected capacity change from 0 to 512 [ 785.023075][T24233] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 785.190028][T24244] IPv6: syztnl0: Disabled Multicast RS [ 785.218231][T24233] EXT4-fs error (device loop3): __ext4_iget:4984: inode #15: block 1803188595: comm syz.3.7375: invalid block [ 785.336289][T24233] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.7375: couldn't read orphan inode 15 (err -117) [ 785.351550][T24233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.536279][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.574638][T24256] loop7: detected capacity change from 0 to 256 [ 785.687669][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7392'. [ 786.410879][T24291] loop2: detected capacity change from 0 to 512 [ 786.448611][T24291] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 786.516808][T24291] EXT4-fs error (device loop2): __ext4_iget:4984: inode #15: block 1803188595: comm syz.2.7404: invalid block [ 786.588109][T24291] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.7404: couldn't read orphan inode 15 (err -117) [ 786.788667][T24310] gretap1: entered allmulticast mode [ 786.807779][T24291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 786.869799][T24307] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 786.879063][T24307] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 787.034404][T24318] loop6: detected capacity change from 0 to 4096 [ 787.042231][T24318] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 787.055153][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.324165][T24333] loop2: detected capacity change from 0 to 256 [ 787.355720][T24335] binder: Bad value for 'max' [ 787.463709][T24333] FAT-fs (loop2): Directory bread(block 64) failed [ 787.472931][T24333] FAT-fs (loop2): Directory bread(block 65) failed [ 787.517299][T24333] FAT-fs (loop2): Directory bread(block 66) failed [ 787.542174][T24333] FAT-fs (loop2): Directory bread(block 67) failed [ 787.549045][T24333] FAT-fs (loop2): Directory bread(block 68) failed [ 787.618726][T24333] FAT-fs (loop2): Directory bread(block 69) failed [ 787.625486][T24333] FAT-fs (loop2): Directory bread(block 70) failed [ 787.710623][T24333] FAT-fs (loop2): Directory bread(block 71) failed [ 787.764803][T24333] FAT-fs (loop2): Directory bread(block 72) failed [ 787.813262][T24333] FAT-fs (loop2): Directory bread(block 73) failed [ 787.882734][T24350] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 787.901302][T24350] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 788.000506][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 788.006937][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 788.164156][T24359] batadv1: entered promiscuous mode [ 788.202070][T24359] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 788.317303][T24357] loop6: detected capacity change from 0 to 8192 [ 788.361250][T24357] syz.6.7434: attempt to access beyond end of device [ 788.361250][T24357] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 788.437035][T24357] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 788.460830][T24357] FAT-fs (loop6): Filesystem has been set read-only [ 788.515568][T24357] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 788.525810][T24357] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 788.560018][T24372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7439'. [ 788.739847][T24376] CIFS mount error: No usable UNC path provided in device string! [ 788.739847][T24376] [ 788.750584][T24376] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 788.868480][T24353] loop4: detected capacity change from 0 to 32768 [ 789.099854][T24389] loop2: detected capacity change from 0 to 256 [ 789.154555][T24353] ERROR: (device loop4): dbAllocNext: Corrupt dmap page [ 789.154555][T24353] [ 789.292617][T24389] FAT-fs (loop2): Directory bread(block 64) failed [ 789.318280][T24389] FAT-fs (loop2): Directory bread(block 65) failed [ 789.335610][T24389] FAT-fs (loop2): Directory bread(block 66) failed [ 789.351380][T24389] FAT-fs (loop2): Directory bread(block 67) failed [ 789.370556][T24389] FAT-fs (loop2): Directory bread(block 68) failed [ 789.383746][T24389] FAT-fs (loop2): Directory bread(block 69) failed [ 789.397862][T24389] FAT-fs (loop2): Directory bread(block 70) failed [ 789.404681][T24389] FAT-fs (loop2): Directory bread(block 71) failed [ 789.455745][T24389] FAT-fs (loop2): Directory bread(block 72) failed [ 789.477593][T24389] FAT-fs (loop2): Directory bread(block 73) failed [ 789.604420][T24398] loop7: detected capacity change from 0 to 4096 [ 789.652403][T24398] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 789.816254][T24407] No such timeout policy "syz0" [ 789.969381][T24398] ntfs3(loop7): failed to convert "c46c" to cp865 [ 790.078382][T24418] RDS: rds_bind could not find a transport for ::ffff:0.0.0.224, load rds_tcp or rds_rdma? [ 790.161962][T24415] loop2: detected capacity change from 0 to 8192 [ 790.212428][T24415] syz.2.7457: attempt to access beyond end of device [ 790.212428][T24415] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 790.241368][T24420] loop6: detected capacity change from 0 to 8 [ 790.272506][T24415] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 790.295136][T24415] FAT-fs (loop2): Filesystem has been set read-only [ 790.351188][T24415] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 790.396206][T24415] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 790.647604][T24431] netlink: 276 bytes leftover after parsing attributes in process `syz.4.7465'. [ 790.886160][T24443] netlink: 'syz.2.7471': attribute type 9 has an invalid length. [ 790.895141][T24443] netlink: 'syz.2.7471': attribute type 7 has an invalid length. [ 790.903027][T24443] netlink: 'syz.2.7471': attribute type 8 has an invalid length. [ 791.313987][T24464] loop6: detected capacity change from 0 to 8 [ 791.414640][T24453] loop7: detected capacity change from 0 to 2048 [ 791.507819][T24464] SQUASHFS error: xz decompression failed, data probably corrupt [ 791.528555][T24464] SQUASHFS error: Failed to read block 0x60: -5 [ 791.538241][T24453] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 791.666512][T24464] SQUASHFS error: xz decompression failed, data probably corrupt [ 791.718966][T24464] SQUASHFS error: Failed to read block 0x60: -5 [ 791.756176][ T29] audit: type=1800 audit(1733865634.766:69): pid=24464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.7480" name="file1" dev="loop6" ino=1 res=0 errno=0 [ 791.827154][T24476] loop0: detected capacity change from 0 to 2048 [ 791.911447][T24476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 792.071602][T24489] loop2: detected capacity change from 0 to 77 [ 792.079761][T24489] hfs: unable to locate alternate MDB [ 792.099653][T24489] hfs: continuing without an alternate MDB [ 792.380299][T24502] loop7: detected capacity change from 0 to 256 [ 792.400955][T24503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7495'. [ 792.887121][T24520] loop6: detected capacity change from 0 to 4096 [ 793.043824][T24520] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 793.153883][ T5894] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 793.237896][T24520] ntfs3(loop6): failed to convert "c46c" to cp865 [ 793.359549][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 793.382954][ T5894] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 793.391071][ T5894] usb 3-1: config 0 has no interface number 0 [ 793.433199][ T5894] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 793.503523][ T5894] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 793.560282][ T5894] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 793.597995][ T5894] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 793.674999][ T5894] usb 3-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 793.684201][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.756822][ T5894] usb 3-1: Product: syz [ 793.776131][ T5894] usb 3-1: Manufacturer: syz [ 793.790736][T24557] binder: 24555:24557 ioctl c0046209 0 returned -22 [ 793.807848][ T5894] usb 3-1: SerialNumber: syz [ 793.829143][ T5894] usb 3-1: config 0 descriptor?? [ 794.188547][ T5894] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 794.198969][ T5894] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 794.209173][ T5894] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 794.229667][ T5894] usb 3-1: USB disconnect, device number 119 [ 794.651355][T24588] loop0: detected capacity change from 0 to 64 [ 795.022135][T24601] loop2: detected capacity change from 0 to 8 [ 795.083182][T24593] loop4: detected capacity change from 0 to 4096 [ 795.160372][T24593] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 795.494443][T24621] snd_dummy snd_dummy.0: control 0:0:1073741821:syz1:0 is already present [ 795.739069][T24593] ntfs3(loop4): Failed to initialize $Extend/$ObjId. [ 795.844002][T24639] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.209005][ T5894] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 796.231551][ T29] audit: type=1326 audit(1733865638.901:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.7.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 796.337594][ T29] audit: type=1326 audit(1733865638.929:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.7.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 796.375722][T24657] loop0: detected capacity change from 0 to 256 [ 796.412269][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 796.463692][ T5894] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 796.501404][ T5894] usb 7-1: config 0 has no interface number 0 [ 796.512334][ T29] audit: type=1326 audit(1733865638.929:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.7.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 796.530242][ T5894] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 796.609937][ T5894] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 796.622886][ T29] audit: type=1326 audit(1733865638.929:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24653 comm="syz.7.7548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 796.626078][T24665] netlink: 'syz.4.7553': attribute type 2 has an invalid length. [ 796.674950][ T5894] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 796.685130][ T5894] usb 7-1: config 0 interface 2 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 796.728038][T24657] FAT-fs (loop0): Directory bread(block 64) failed [ 796.745327][ T5894] usb 7-1: New USB device found, idVendor=05da, idProduct=0099, bcdDevice=d5.82 [ 796.757002][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.765726][T24657] FAT-fs (loop0): Directory bread(block 65) failed [ 796.794274][T24665] netlink: 192444 bytes leftover after parsing attributes in process `syz.4.7553'. [ 796.803933][T24657] FAT-fs (loop0): Directory bread(block 66) failed [ 796.810758][ T5894] usb 7-1: Product: syz [ 796.826131][ T5894] usb 7-1: Manufacturer: syz [ 796.834863][T24657] FAT-fs (loop0): Directory bread(block 67) failed [ 796.850423][ T5894] usb 7-1: SerialNumber: syz [ 796.855331][T24657] FAT-fs (loop0): Directory bread(block 68) failed [ 796.868378][ T5894] usb 7-1: config 0 descriptor?? [ 796.888389][T24657] FAT-fs (loop0): Directory bread(block 69) failed [ 796.924578][T24657] FAT-fs (loop0): Directory bread(block 70) failed [ 796.948033][T24657] FAT-fs (loop0): Directory bread(block 71) failed [ 796.967464][T24657] FAT-fs (loop0): Directory bread(block 72) failed [ 796.974143][T24657] FAT-fs (loop0): Directory bread(block 73) failed [ 797.093203][ T25] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 797.221860][ T5894] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 2 is not bulk. [ 797.238078][ T5894] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 797.247779][ T5894] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 797.260778][ T25] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 797.287122][ T5894] usb 7-1: USB disconnect, device number 13 [ 797.336148][ T25] usb 4-1: config index 0 descriptor too short (expected 65397, got 72) [ 797.399888][ T25] usb 4-1: config index 1 descriptor too short (expected 65397, got 72) [ 797.412967][ T25] usb 4-1: config index 2 descriptor too short (expected 65397, got 72) [ 797.441868][ T25] usb 4-1: config index 3 descriptor too short (expected 65397, got 72) [ 797.467585][ T25] usb 4-1: config index 4 descriptor too short (expected 65397, got 72) [ 797.494108][T24690] syz.4.7563: attempt to access beyond end of device [ 797.494108][T24690] loop4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 797.529360][ T25] usb 4-1: config index 5 descriptor too short (expected 65397, got 72) [ 797.574263][ T25] usb 4-1: config index 6 descriptor too short (expected 65397, got 72) [ 797.584397][T24690] MINIX-fs: unable to read superblock [ 797.592416][ T25] usb 4-1: config index 7 descriptor too short (expected 65397, got 72) [ 797.611485][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 797.613720][T24694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7566'. [ 797.628041][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.657845][ T25] usb 4-1: Product: syz [ 797.672195][ T25] usb 4-1: Manufacturer: syz [ 797.676858][ T25] usb 4-1: SerialNumber: syz [ 797.685711][T24694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7566'. [ 797.862480][T24702] binder: 24701:24702 ioctl c0046209 0 returned -22 [ 797.881086][ T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 797.996830][T24705] snd_dummy snd_dummy.0: control 0:0:1073741821:syz1:0 is already present [ 798.069121][ T5921] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 798.146181][T24711] netlink: 'syz.7.7572': attribute type 2 has an invalid length. [ 798.224244][T24711] netlink: 192444 bytes leftover after parsing attributes in process `syz.7.7572'. [ 798.871010][T24727] loop0: detected capacity change from 0 to 4096 [ 799.827819][T24727] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 799.913220][T24741] loop2: detected capacity change from 0 to 64 [ 800.495365][T24748] loop3: detected capacity change from 0 to 1024 [ 800.726806][T24748] hfsplus: bad catalog entry type [ 801.279864][T24762] dvmrp1: entered allmulticast mode [ 801.577055][T24768] loop3: detected capacity change from 0 to 512 [ 801.659894][T24768] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 801.885054][T24768] EXT4-fs: error: could not find journal device path [ 801.946070][T24776] i2c i2c-0: Invalid block write size 252 [ 802.601472][T24783] tmpfs: Bad value for 'mpol' [ 803.116478][T24793] loop4: detected capacity change from 0 to 1024 [ 803.302642][T24800] loop3: detected capacity change from 0 to 128 [ 803.410647][T24798] loop6: detected capacity change from 0 to 2048 [ 803.497700][T24798] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 803.715917][T24805] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 803.908440][T24807] netlink: 'syz.7.7608': attribute type 79 has an invalid length. [ 804.572944][T24727] ntfs3(loop0): Failed to read $UpCase (-4). [ 804.649168][T24819] loop3: detected capacity change from 0 to 256 [ 805.030794][T24819] FAT-fs (loop3): Directory bread(block 64) failed [ 805.132612][T24819] FAT-fs (loop3): Directory bread(block 65) failed [ 805.218742][T24819] FAT-fs (loop3): Directory bread(block 66) failed [ 805.277369][T24819] FAT-fs (loop3): Directory bread(block 67) failed [ 805.316641][T24819] FAT-fs (loop3): Directory bread(block 68) failed [ 805.418037][T24819] FAT-fs (loop3): Directory bread(block 69) failed [ 805.424761][T24819] FAT-fs (loop3): Directory bread(block 70) failed [ 805.493331][T24831] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7617'. [ 805.554786][T24819] FAT-fs (loop3): Directory bread(block 71) failed [ 805.660083][T24819] FAT-fs (loop3): Directory bread(block 72) failed [ 805.666824][T24819] FAT-fs (loop3): Directory bread(block 73) failed [ 805.814533][T24837] loop2: detected capacity change from 0 to 1024 [ 806.509094][ T36] hfsplus: b-tree write err: -5, ino 4 [ 806.957104][ C1] sched: DL replenish lagged too much [ 808.678589][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7636'. [ 808.770647][T24885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 808.792780][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7636'. [ 809.000580][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7636'. [ 809.073013][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7636'. [ 809.235071][ T5833] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 809.602702][ T5833] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 809.668405][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.776333][ T5833] usb 5-1: Product: syz [ 809.838400][ T5833] usb 5-1: Manufacturer: syz [ 809.872281][ T5833] usb 5-1: SerialNumber: syz [ 809.936970][ T5833] usb 5-1: config 0 descriptor?? [ 810.305191][ T5833] usb-storage 5-1:0.0: USB Mass Storage device detected [ 810.671912][ T5833] usb 5-1: USB disconnect, device number 110 [ 810.902050][T24921] loop0: detected capacity change from 0 to 24 [ 811.009243][T24921] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 811.131711][T24921] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 811.230764][T24923] loop2: detected capacity change from 0 to 1024 [ 811.432468][T24923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.669639][T24923] EXT4-fs error (device loop2): ext4_xattr_inode_iget:440: inode #11: comm syz.2.7651: missing EA_INODE flag [ 811.893665][T24923] EXT4-fs (loop2): Remounting filesystem read-only [ 812.418528][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.025095][T24952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7659'. [ 813.087145][T24954] loop6: detected capacity change from 0 to 512 [ 813.360372][T24954] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.494589][T24954] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 813.661538][T24965] netlink: 'syz.3.7666': attribute type 4 has an invalid length. [ 813.679140][T24966] loop7: detected capacity change from 0 to 1024 [ 814.144287][T16277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.877563][T25001] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 816.341448][T24956] loop4: detected capacity change from 0 to 32768 [ 816.433899][T24956] (syz.4.7663,24956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 816.608353][T24956] (syz.4.7663,24956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 816.892323][T24956] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 816.892540][T24956] (syz.4.7663,24956,0):ocfs2_initialize_super:2281 ERROR: status = -12 [ 817.071200][T24956] (syz.4.7663,24956,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 818.192674][T25042] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709527469) [ 818.321683][T25042] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 821.860005][T25107] loop3: detected capacity change from 0 to 256 [ 823.175513][ T5894] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 823.413927][ T5894] usb 7-1: Using ep0 maxpacket: 16 [ 823.444497][ T5894] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 823.514592][ T5894] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 823.619618][ T5894] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.760402][ T5894] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 823.825456][ T5894] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.833683][ T5894] usb 7-1: Product: syz [ 823.944505][ T5894] usb 7-1: Manufacturer: syz [ 823.993132][ T5894] usb 7-1: SerialNumber: syz [ 824.335333][T25147] loop0: detected capacity change from 0 to 256 [ 824.401510][ T5894] usb 7-1: USB disconnect, device number 14 [ 824.748782][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 825.375396][T25163] loop4: detected capacity change from 0 to 512 [ 825.408873][T13726] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 825.454138][T25163] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 825.651497][T25163] EXT4-fs: error: could not find journal device path [ 825.700056][T13726] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 825.756217][T13726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.840505][T13726] usb 8-1: Product: syz [ 825.874333][T13726] usb 8-1: Manufacturer: syz [ 825.926810][T13726] usb 8-1: SerialNumber: syz [ 825.979373][T13726] usb 8-1: config 0 descriptor?? [ 826.362999][T13726] usb-storage 8-1:0.0: USB Mass Storage device detected [ 826.757076][T13726] usb 8-1: USB disconnect, device number 6 [ 827.487652][T25193] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709527469) [ 827.556833][T25194] loop4: detected capacity change from 0 to 1024 [ 827.617790][T25193] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 828.860600][T25211] loop0: detected capacity change from 0 to 256 [ 829.036059][T25211] FAT-fs (loop0): Directory bread(block 64) failed [ 829.069107][ T5833] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 829.085762][T25213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7774'. [ 829.112656][T25211] FAT-fs (loop0): Directory bread(block 65) failed [ 829.163511][T25211] FAT-fs (loop0): Directory bread(block 66) failed [ 829.207211][T25211] FAT-fs (loop0): Directory bread(block 67) failed [ 829.279578][T25211] FAT-fs (loop0): Directory bread(block 68) failed [ 829.298724][ T5833] usb 8-1: Using ep0 maxpacket: 32 [ 829.318597][T25211] FAT-fs (loop0): Directory bread(block 69) failed [ 829.383569][ T5833] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 829.403836][T25211] FAT-fs (loop0): Directory bread(block 70) failed [ 829.410474][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.422723][T25182] loop6: detected capacity change from 0 to 32768 [ 829.459308][T25211] FAT-fs (loop0): Directory bread(block 71) failed [ 829.465953][T25211] FAT-fs (loop0): Directory bread(block 72) failed [ 829.495521][ T5833] usb 8-1: Product: syz [ 829.499747][ T5833] usb 8-1: Manufacturer: syz [ 829.520702][T25182] (syz.6.7759,25182,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 829.583650][ T5833] usb 8-1: SerialNumber: syz [ 829.595156][T25211] FAT-fs (loop0): Directory bread(block 73) failed [ 829.612742][ T5833] usb 8-1: config 0 descriptor?? [ 829.667741][T25182] (syz.6.7759,25182,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 829.833809][T25182] JBD2: Ignoring recovery information on journal [ 829.879078][ T5833] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 007 [ 830.121450][T25182] JBD2: journal reset failed [ 830.126088][T25182] (syz.6.7759,25182,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 830.174181][ T5833] usb 8-1: USB disconnect, device number 7 [ 830.260509][T25182] (syz.6.7759,25182,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 830.795660][T25232] loop2: detected capacity change from 0 to 164 [ 830.976731][T25232] overlay: ./file0 is not a directory [ 832.643375][T25263] loop0: detected capacity change from 0 to 256 [ 832.767141][T25263] exfat: Deprecated parameter 'namecase' [ 832.951089][T25263] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 833.474605][ T29] audit: type=1326 audit(1733865673.237:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25276 comm="syz.6.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 833.749750][ T29] audit: type=1326 audit(1733865673.237:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25276 comm="syz.6.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 834.051828][ T29] audit: type=1326 audit(1733865673.311:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25276 comm="syz.6.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 834.204831][T25293] netlink: 'syz.0.7808': attribute type 1 has an invalid length. [ 834.212686][T25293] netlink: 244 bytes leftover after parsing attributes in process `syz.0.7808'. [ 834.335955][ T29] audit: type=1326 audit(1733865673.311:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25276 comm="syz.6.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 834.358228][ C0] vkms_vblank_simulate: vblank timer overrun [ 834.461188][T25293] NCSI netlink: No device for ifindex 0 [ 834.599741][ T29] audit: type=1326 audit(1733865673.311:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25276 comm="syz.6.7803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 834.778118][T25302] netlink: 'syz.3.7813': attribute type 1 has an invalid length. [ 835.107182][T25312] tmpfs: User quota inode hardlimit too large. [ 837.060714][T25351] loop4: detected capacity change from 0 to 8 [ 837.357338][T25355] netlink: 'syz.0.7836': attribute type 30 has an invalid length. [ 839.229166][T25392] netlink: 264 bytes leftover after parsing attributes in process `syz.0.7852'. [ 839.318717][T25392] unsupported nlmsg_type 40 [ 840.174509][T25409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7861'. [ 840.798084][T25415] loop0: detected capacity change from 0 to 2048 [ 840.864787][T25419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7866'. [ 841.035410][T25415] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 842.745549][T25445] loop4: detected capacity change from 0 to 512 [ 842.954684][T25445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.092032][T25445] ext4 filesystem being mounted at /1360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 843.327634][T25445] EXT4-fs error (device loop4): ext4_empty_dir:3097: inode #12: comm syz.4.7878: Directory hole found for htree leaf block 0 [ 843.736283][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.273262][ T29] audit: type=1326 audit(1733865683.242:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.6.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 844.494285][ T29] audit: type=1326 audit(1733865683.242:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.6.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 844.569313][T25436] loop0: detected capacity change from 0 to 32768 [ 844.718274][T25436] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.7872 (25436) [ 844.792009][T25474] netlink: 'syz.2.7890': attribute type 2 has an invalid length. [ 844.800044][ T29] audit: type=1326 audit(1733865683.307:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.6.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 844.832881][T25473] netlink: 'syz.7.7891': attribute type 2 has an invalid length. [ 844.840634][T25473] netlink: 'syz.7.7891': attribute type 1 has an invalid length. [ 844.927950][T25436] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 845.000308][T25473] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7891'. [ 845.037230][T25436] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 845.054509][ T29] audit: type=1326 audit(1733865683.307:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.6.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 845.145550][T25436] BTRFS info (device loop0): using free-space-tree [ 845.184370][T25481] loop4: detected capacity change from 0 to 16 [ 845.244928][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 845.245235][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 845.301022][T25481] erofs (device loop4): mounted with root inode @ nid 36. [ 845.342056][ T29] audit: type=1326 audit(1733865683.307:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25466 comm="syz.6.7888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7ee57ff19 code=0x7ffc0000 [ 845.397516][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 845.397808][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 845.500141][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 845.540600][T25481] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 845.613244][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 845.613516][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 845.699920][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 845.800823][T25481] erofs (device loop4): read error -117 @ 43 of nid 36 [ 845.830055][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 845.830331][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 845.938660][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 846.053543][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 846.144271][T25436] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 846.235568][T25495] loop7: detected capacity change from 0 to 4096 [ 846.316770][T25436] BTRFS error (device loop0): open_ctree failed [ 846.479763][T25495] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 848.942206][T25541] loop6: detected capacity change from 0 to 4096 [ 849.027862][T25549] openvswitch: netlink: Duplicate key (type 32). [ 849.039908][T25541] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 849.384754][T25556] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7923'. [ 849.470799][T25541] ntfs3(loop6): Failed to initialize $Extend/$ObjId. [ 849.509112][T25556] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 849.619737][T25556] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 849.703405][T25556] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 849.792837][T25556] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 852.801135][T25612] loop7: detected capacity change from 0 to 64 [ 853.459266][T25621] loop4: detected capacity change from 0 to 64 [ 853.641440][T25623] loop0: detected capacity change from 0 to 256 [ 853.823563][T25625] loop7: detected capacity change from 0 to 2048 [ 853.995483][T25625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 854.339779][T25591] loop3: detected capacity change from 0 to 32768 [ 854.581321][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 854.590556][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 854.628360][T25638] geneve3: entered promiscuous mode [ 854.645592][T25591] JBD2: Ignoring recovery information on journal [ 855.016323][T25591] JBD2: journal reset failed [ 855.075409][T25591] (syz.3.7941,25591,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 855.190413][T25591] (syz.3.7941,25591,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 855.380867][T25647] loop6: detected capacity change from 0 to 1764 [ 856.203796][T25662] loop4: detected capacity change from 0 to 256 [ 856.220106][T25663] netlink: 'syz.6.7973': attribute type 2 has an invalid length. [ 856.390953][T25662] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 856.592144][T25670] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7977'. [ 857.445143][T25681] loop7: detected capacity change from 0 to 1024 [ 857.970974][ T1026] hfsplus: b-tree write err: -5, ino 4 [ 858.204863][ T5833] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 858.311232][T25696] xt_hashlimit: max too large, truncated to 1048576 [ 858.441852][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 858.471869][ T5833] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 858.519679][ T5833] usb 3-1: config 179 has no interface number 0 [ 858.591057][ T5833] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 858.683594][ T5833] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 858.798300][ T5833] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 858.868679][ T5833] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 858.956973][ T5833] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 859.086002][ T5833] usb 3-1: config 179 interface 65 has no altsetting 0 [ 859.151613][ T5833] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 859.224135][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.398913][ T5833] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input70 [ 859.601957][ T5183] input input70: unable to receive magic message: -110 [ 859.854269][ T5833] usb 3-1: USB disconnect, device number 120 [ 859.860570][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 859.960746][ T5833] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 860.991764][T25725] loop7: detected capacity change from 0 to 4096 [ 861.034109][T25729] loop4: detected capacity change from 0 to 512 [ 861.149401][T25725] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 861.268839][T25729] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 861.348559][T25729] EXT4-fs (loop4): 1 truncate cleaned up [ 861.398024][T25729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.532952][T25703] loop6: detected capacity change from 0 to 32768 [ 861.543803][T25725] ntfs3(loop7): failed to convert "c46c" to cp1250 [ 861.627839][T25729] EXT4-fs error (device loop4): ext4_append:79: inode #2: comm syz.4.8005: Logical block already allocated [ 861.771848][T25703] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 861.834759][T25729] EXT4-fs (loop4): Remounting filesystem read-only [ 862.016112][T25703] XFS (loop6): Ending clean mount [ 862.224142][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.396053][T16277] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 862.502566][T25754] loop7: detected capacity change from 0 to 1024 [ 862.619467][T25757] loop0: detected capacity change from 0 to 64 [ 862.708225][T25754] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.830972][T25762] loop4: detected capacity change from 0 to 256 [ 862.981118][T25762] FAT-fs (loop4): Directory bread(block 64) failed [ 863.001987][T25754] EXT4-fs warning (device loop7): ext4_rmdir:3201: inode #11: comm syz.7.8012: empty directory 'file1' has too many links (111) [ 863.071183][T25762] FAT-fs (loop4): Directory bread(block 65) failed [ 863.123000][T25762] FAT-fs (loop4): Directory bread(block 66) failed [ 863.129600][T25762] FAT-fs (loop4): Directory bread(block 67) failed [ 863.262178][T25762] FAT-fs (loop4): Directory bread(block 68) failed [ 863.268768][T25762] FAT-fs (loop4): Directory bread(block 69) failed [ 863.362114][T25767] netlink: 'syz.2.8019': attribute type 21 has an invalid length. [ 863.395852][T25762] FAT-fs (loop4): Directory bread(block 70) failed [ 863.402460][T25762] FAT-fs (loop4): Directory bread(block 71) failed [ 863.542147][T25762] FAT-fs (loop4): Directory bread(block 72) failed [ 863.577033][T20941] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.626578][T25762] FAT-fs (loop4): Directory bread(block 73) failed [ 864.128828][T25772] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8022'. [ 864.431643][T25780] loop0: detected capacity change from 0 to 256 [ 864.573388][T25780] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0xae69b4a6, utbl_chksum : 0xe619d30d) [ 864.605975][T25775] loop7: detected capacity change from 0 to 4096 [ 864.692963][T25775] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 864.874445][T25787] IPv6: sit2: Disabled Multicast RS [ 864.945469][T25783] loop6: detected capacity change from 0 to 2048 [ 865.114723][T25775] ntfs3(loop7): failed to convert "c46c" to cp864 [ 865.152362][T25789] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 865.321579][T25783] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: disallowed inode number - offset=56, inode=6, rec_len=24, name_len=5 [ 865.597876][T25783] Remounting filesystem read-only [ 867.124171][T25812] loop7: detected capacity change from 0 to 4096 [ 867.261701][T25812] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 867.505011][T25812] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 868.595369][T25825] loop6: detected capacity change from 0 to 4096 [ 869.172110][T25803] loop3: detected capacity change from 0 to 32768 [ 869.298243][T25803] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8035 (25803) [ 869.475771][T25803] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 869.611081][T25803] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 869.730001][T25803] BTRFS info (device loop3): disk space caching is enabled [ 869.817163][T25803] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 869.886108][T25838] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8052'. [ 869.992423][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 869.992700][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 870.043240][T25838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8052'. [ 870.119218][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 870.119516][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 870.250631][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 870.267728][T25838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 870.371869][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 870.372144][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 870.490135][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 870.599704][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 870.738651][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 870.838462][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 870.961481][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 871.080122][T25803] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 871.215211][T25803] BTRFS error (device loop3): open_ctree failed [ 871.576596][T25829] loop7: detected capacity change from 0 to 32768 [ 871.693279][T25829] (syz.7.8047,25829,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2caa02c5, computed 0x16b4199d. Applying ECC. [ 871.860593][T25829] (syz.7.8047,25829,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xaeb6429d, computed 0x2bb5f33f. Applying ECC. [ 871.994525][T25829] (syz.7.8047,25829,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xaeb6429d, computed 0x6d1830cb [ 872.155353][T25829] (syz.7.8047,25829,0):ocfs2_validate_inode_block:1379 ERROR: Checksum failed for dinode 20 [ 872.244001][T25829] (syz.7.8047,25829,0):ocfs2_read_locked_inode:521 ERROR: status = -5 [ 872.323098][T25829] (syz.7.8047,25829,0):_ocfs2_get_system_file_inode:144 ERROR: status = -5 [ 872.404236][T25829] (syz.7.8047,25829,0):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 872.480949][T25869] loop4: detected capacity change from 0 to 1024 [ 872.499664][T25829] (syz.7.8047,25829,0):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 872.499718][T25829] (syz.7.8047,25829,0):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 872.683749][T25829] (syz.7.8047,25829,0):ocfs2_initialize_super:2250 ERROR: status = -22 [ 872.737968][T13726] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 872.785362][T25829] (syz.7.8047,25829,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 872.976758][T13726] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 873.030089][T13726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.099964][T13726] usb 3-1: Product: syz [ 873.134419][T13726] usb 3-1: Manufacturer: syz [ 873.183422][ T80] hfsplus: b-tree write err: -5, ino 4 [ 873.193702][T13726] usb 3-1: SerialNumber: syz [ 873.291408][T13726] r8152-cfgselector 3-1: Unknown version 0x0000 [ 873.334144][T13726] r8152-cfgselector 3-1: config 0 descriptor?? [ 873.948973][T13726] r8152-cfgselector 3-1: USB disconnect, device number 121 [ 874.882098][T25898] loop0: detected capacity change from 0 to 2048 [ 875.052088][T25898] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 875.138043][T25898] UDF-fs: Scanning with blocksize 512 failed [ 875.286303][T25898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 875.327219][T25904] loop2: detected capacity change from 0 to 2048 [ 875.414926][T25906] ipt_rpfilter: unknown options [ 875.462949][T25904] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 876.713462][T25886] loop6: detected capacity change from 0 to 32768 [ 876.945092][T25886] read_mapping_page failed! [ 877.029513][T25886] ERROR: (device loop6): txCommit: [ 877.029513][T25886] [ 877.116304][ T29] audit: type=1326 audit(1733865713.553:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25929 comm="syz.2.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb277ff19 code=0x7ffc0000 [ 877.343136][T25928] loop4: detected capacity change from 0 to 4096 [ 877.349804][ T29] audit: type=1326 audit(1733865713.553:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25929 comm="syz.2.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb277ff19 code=0x7ffc0000 [ 877.442312][T25935] loop7: detected capacity change from 0 to 512 [ 877.515017][T16277] ERROR: (device loop6): diFree: numfree > numinos [ 877.515017][T16277] [ 877.606974][T25935] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 877.648369][ T29] audit: type=1326 audit(1733865713.599:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25929 comm="syz.2.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3fb277ff19 code=0x7ffc0000 [ 877.897866][T25928] ntfs3(loop4): ino=21, The size of extended attributes must not exceed 64KiB [ 877.920572][ T29] audit: type=1326 audit(1733865713.599:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25929 comm="syz.2.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb277ff19 code=0x7ffc0000 [ 878.164876][ T29] audit: type=1326 audit(1733865713.599:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25929 comm="syz.2.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb277ff19 code=0x7ffc0000 [ 879.231602][ T8] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 879.253212][T13726] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 879.450373][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.478172][T13726] usb 5-1: Using ep0 maxpacket: 16 [ 879.501281][T25953] loop2: detected capacity change from 0 to 4096 [ 879.531964][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.568308][T13726] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 879.633206][T25953] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 879.642468][T13726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.654313][ T8] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 879.701545][T13726] usb 5-1: Product: syz [ 879.705771][T13726] usb 5-1: Manufacturer: syz [ 879.710980][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 879.776622][ T8] usb 7-1: SerialNumber: syz [ 879.783617][T13726] usb 5-1: SerialNumber: syz [ 879.872011][T13726] usb 5-1: config 0 descriptor?? [ 879.923468][T13726] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 879.960651][T25953] ntfs3(loop2): failed to convert "c46c" to iso8859-6 [ 880.022929][T25953] ntfs3(loop2): failed to convert "0030" to iso8859-6 [ 880.102381][ T8] usb 7-1: 0:2 : does not exist [ 880.134948][T25961] ax25_connect(): syz.7.8106 uses autobind, please contact jreuter@yaina.de [ 880.220848][ T8] usb 7-1: USB disconnect, device number 15 [ 880.290795][T25936] loop3: detected capacity change from 0 to 32768 [ 880.370195][T13726] usb 5-1: clie_3_5_startup: get interface number failed: -71 [ 880.413697][T13726] visor 5-1:0.0: probe with driver visor failed with error -71 [ 880.504018][T13726] usb 5-1: USB disconnect, device number 111 [ 880.580383][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 881.169308][T25936] jfs_create: dtInsert returned -EIO [ 881.198836][T25936] ERROR: (device loop3): jfs_create: [ 881.198836][T25936] [ 881.417668][T25967] loop6: detected capacity change from 0 to 2048 [ 881.517748][T25967] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024) [ 881.527736][T25967] NILFS (loop6): mounting unchecked fs [ 881.681599][T25967] NILFS (loop6): recovery required for readonly filesystem [ 881.689173][T25967] NILFS (loop6): write access will be enabled during recovery [ 881.721871][T10351] udevd[10351]: incorrect nilfs2 checksum on /dev/loop6 [ 881.848143][T25967] NILFS (loop6): norecovery option specified, skipping roll-forward recovery [ 881.979795][T25975] loop7: detected capacity change from 0 to 64 [ 882.005641][T25967] NILFS (loop6): couldn't remount because the filesystem is in an incomplete recovery state [ 882.554501][T25959] loop0: detected capacity change from 0 to 32768 [ 882.759665][T25959] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 882.926347][T25959] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 883.067875][T25990] loop7: detected capacity change from 0 to 8 [ 883.307562][ T5838] ocfs2: Unmounting device (7,0) on (node local) [ 883.999225][T13726] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 884.093864][T26005] loop7: detected capacity change from 0 to 256 [ 884.102153][T26003] netlink: 'syz.3.8127': attribute type 13 has an invalid length. [ 884.226246][T13726] usb 7-1: Using ep0 maxpacket: 32 [ 884.267354][T26003] gretap0: refused to change device tx_queue_len [ 884.323952][T13726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 213, changing to 7 [ 884.345872][T26003] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 884.410339][T13726] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 42437, setting to 1024 [ 884.529612][T13726] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 884.582768][T13726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.657570][T13726] usb 7-1: Product: syz [ 884.696810][T13726] usb 7-1: Manufacturer: syz [ 884.701496][T13726] usb 7-1: SerialNumber: syz [ 884.855366][T13726] usb 7-1: config 0 descriptor?? [ 885.015155][T13726] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 885.090620][ T80] usb 7-1: Failed to submit usb control message: -71 [ 885.194482][ T80] usb 7-1: unable to send the bmi data to the device: -71 [ 885.205582][T13726] usb 7-1: USB disconnect, device number 16 [ 885.299701][ T80] usb 7-1: unable to get target info from device [ 885.306200][ T80] usb 7-1: could not get target info (-71) [ 885.375761][ T80] usb 7-1: could not probe fw (-71) [ 886.108481][T25993] loop2: detected capacity change from 0 to 32768 [ 886.220755][T25993] XFS: ikeep mount option is deprecated. [ 886.226470][T25993] XFS: noikeep mount option is deprecated. [ 886.374165][T25993] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop2": -EINTR [ 886.870165][T26031] loop7: detected capacity change from 0 to 4096 [ 887.094681][T26031] NILFS (loop7): invalid segment: Checksum error in segment payload [ 887.153443][T26031] NILFS (loop7): trying rollback from an earlier position [ 887.382949][T26031] NILFS (loop7): recovery complete [ 887.508858][T26034] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 887.858570][T26016] loop4: detected capacity change from 0 to 32768 [ 887.944480][T26016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.8130 (26016) [ 888.076729][T26020] loop3: detected capacity change from 0 to 32768 [ 888.090223][T26016] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 888.194501][T26016] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 888.292154][T26016] BTRFS info (device loop4): using free-space-tree [ 888.373652][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 888.373963][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 888.407830][T26020] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 888.508316][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 888.508611][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 888.532242][T26051] loop2: detected capacity change from 0 to 512 [ 888.554958][T26050] loop6: detected capacity change from 0 to 512 [ 888.638819][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 888.639094][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 888.673636][T26051] EXT4-fs: Ignoring removed oldalloc option [ 888.733615][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 888.733888][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 888.809136][T26050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.841880][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 888.842157][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 888.865256][T26061] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8146'. [ 888.885209][ T29] audit: type=1326 audit(1733865724.399:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26058 comm="syz.7.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 888.912004][T26051] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 888.980735][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 888.981031][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 888.997644][ T5848] ocfs2: Unmounting device (7,3) on (node local) [ 889.110841][T26050] ext4 filesystem being mounted at /592/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 889.144025][T26016] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 889.146945][T26016] BTRFS error (device loop4): open_ctree failed [ 889.181918][T26051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 889.205515][ T29] audit: type=1326 audit(1733865724.463:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26058 comm="syz.7.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 889.394186][T26051] ext4 filesystem being mounted at /1361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 889.459776][T26050] Quota error (device loop6): do_check_range: Getting block 134217730 out of range 1-5 [ 889.500064][ T29] audit: type=1326 audit(1733865724.463:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26058 comm="syz.7.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 889.631675][T26050] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 889.706886][T26076] loop7: detected capacity change from 0 to 128 [ 889.747804][T26050] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.8144: Failed to acquire dquot type 0 [ 889.781409][ T29] audit: type=1326 audit(1733865724.463:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26058 comm="syz.7.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 889.913225][T26076] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 890.042179][T26076] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 890.076180][ T29] audit: type=1326 audit(1733865724.463:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26058 comm="syz.7.8143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 890.212674][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 890.334623][T16277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 890.533231][T20941] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 891.191801][T26097] loop7: detected capacity change from 0 to 128 [ 891.355873][T26097] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 891.631236][T26103] loop2: detected capacity change from 0 to 128 [ 891.686946][T26101] ipt_REJECT: TCP_RESET invalid for non-tcp [ 891.788643][T26103] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 891.855574][T20941] sysv_free_block: flc_count > flc_size [ 891.929440][T20941] sysv_free_block: flc_count > flc_size [ 891.938311][T26103] ext4 filesystem being mounted at /1363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 891.976969][T20941] sysv_free_block: flc_count > flc_size [ 892.042129][T20941] sysv_free_block: flc_count > flc_size [ 892.092473][T20941] sysv_free_block: flc_count > flc_size [ 892.142442][T20941] sysv_free_block: flc_count > flc_size [ 892.184872][T20941] sysv_free_block: flc_count > flc_size [ 892.254443][T20941] sysv_free_block: flc_count > flc_size [ 892.287656][T20941] sysv_free_block: flc_count > flc_size [ 892.293292][T20941] sysv_free_block: flc_count > flc_size [ 892.396050][T20941] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 892.442681][T26109] loop0: detected capacity change from 0 to 512 [ 892.547972][T26109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 892.719811][T26109] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.753994][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 892.836170][T26114] netlink: 'syz.7.8163': attribute type 16 has an invalid length. [ 892.844859][T26109] ext4 filesystem being mounted at /1351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.967733][T26114] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.8163'. [ 893.275795][T26109] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 893.802414][T26126] loop7: detected capacity change from 0 to 2048 [ 893.832478][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.904116][T26126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 893.921992][T26126] EXT4-fs: Ignoring removed nobh option [ 893.961365][T26094] loop3: detected capacity change from 0 to 32768 [ 894.068368][T26094] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8158 (26094) [ 894.117979][T26126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.221122][T26094] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 894.308163][T26094] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm [ 894.330873][T26126] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.8171: bg 0: block 2: invalid block bitmap [ 894.383617][T26094] BTRFS info (device loop3): using free-space-tree [ 894.439334][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 894.439640][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 894.455379][T13726] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 894.547880][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 894.548172][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 894.562179][T26126] EXT4-fs (loop7): Remounting filesystem read-only [ 894.651104][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 894.656330][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 894.705275][T13726] usb 7-1: Using ep0 maxpacket: 8 [ 894.736086][T26126] EXT4-fs warning (device loop7): ext4_xattr_inode_lookup_create:1605: inode #18: comm syz.7.8171: cleanup dec ref error -117 [ 894.794389][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 894.794666][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 894.834404][T26149] loop4: detected capacity change from 0 to 8 [ 894.912033][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 894.912421][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 894.946738][T13726] usb 7-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 895.033527][T26094] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 895.073600][T26094] BTRFS error (device loop3): open_ctree failed [ 895.159506][T13726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.167644][T13726] usb 7-1: Product: syz [ 895.238964][T20941] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.266676][T13726] usb 7-1: Manufacturer: syz [ 895.328344][T13726] usb 7-1: SerialNumber: syz [ 895.401999][T13726] usb 7-1: config 0 descriptor?? [ 895.496407][T13726] usb 7-1: selecting invalid altsetting 3 [ 895.582193][T13726] comedi comedi0: could not set alternate setting 3 in high speed [ 895.662770][T13726] usbdux 7-1:0.0: driver 'usbdux' failed to auto-configure device. [ 895.806130][T13726] usbdux 7-1:0.0: probe with driver usbdux failed with error -22 [ 895.912891][T13726] usb 7-1: USB disconnect, device number 17 [ 895.962926][T26169] netlink: 'syz.3.8183': attribute type 3 has an invalid length. [ 896.071433][T26169] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8183'. [ 896.266195][T26165] loop0: detected capacity change from 0 to 4096 [ 896.361111][T26165] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 896.552799][T26174] loop2: detected capacity change from 0 to 256 [ 896.642589][T26165] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 896.710077][T26165] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 896.876975][T26174] FAT-fs (loop2): Directory bread(block 64) failed [ 896.977437][T26174] FAT-fs (loop2): Directory bread(block 65) failed [ 897.057501][T26174] FAT-fs (loop2): Directory bread(block 66) failed [ 897.064117][T26174] FAT-fs (loop2): Directory bread(block 67) failed [ 897.194844][T26174] FAT-fs (loop2): Directory bread(block 68) failed [ 897.290164][T26174] FAT-fs (loop2): Directory bread(block 69) failed [ 897.326969][T26174] FAT-fs (loop2): Directory bread(block 70) failed [ 897.333563][T26174] FAT-fs (loop2): Directory bread(block 71) failed [ 897.444327][T26174] FAT-fs (loop2): Directory bread(block 72) failed [ 897.510973][T26174] FAT-fs (loop2): Directory bread(block 73) failed [ 898.784387][T26202] loop0: detected capacity change from 0 to 256 [ 898.864939][T26203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8200'. [ 898.945226][T26203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8200'. [ 899.818028][T26214] loop2: detected capacity change from 0 to 256 [ 900.074991][T26183] loop7: detected capacity change from 0 to 32768 [ 900.325133][T26183] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 900.453585][T26183] JBD2: Ignoring recovery information on journal [ 900.727494][T26183] JBD2: journal reset failed [ 900.754588][T26183] (syz.7.8190,26183,0):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 900.867276][T26183] (syz.7.8190,26183,0):ocfs2_check_volume:2428 ERROR: ocfs2 journal load failed! -4 [ 901.013379][T26227] loop4: detected capacity change from 0 to 512 [ 901.063242][T26227] EXT4-fs: Ignoring removed i_version option [ 901.157618][T26227] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 901.236138][T26229] process 'syz.3.8212' launched './file0' with NULL argv: empty string added [ 901.333415][T26227] EXT4-fs (loop4): 1 truncate cleaned up [ 901.399637][T26227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.528471][ T8] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 901.582975][T26227] EXT4-fs error (device loop4): ext4_find_extent:902: inode #15: comm syz.4.8211: inode has invalid extent depth: 25964 [ 901.687841][T26227] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 901.777596][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 901.835598][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 901.914414][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 902.022190][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 902.083807][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.126045][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 902.241962][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 902.331976][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 902.424217][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 902.510782][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 902.558725][T26240] loop4: detected capacity change from 0 to 512 [ 902.677092][ T8] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 902.713086][T26240] Quota error (device loop4): write_blk: dquota write failed [ 902.760106][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.828634][T26240] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 902.848819][ T8] usb 3-1: Product: syz [ 902.875111][ T8] usb 3-1: Manufacturer: syz [ 902.879749][ T8] usb 3-1: SerialNumber: syz [ 902.923317][T26217] loop0: detected capacity change from 0 to 32768 [ 902.930159][T26240] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.8216: Failed to acquire dquot type 1 [ 902.981189][ T8] usb 3-1: config 0 descriptor?? [ 902.988250][T26231] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 903.036315][T26240] EXT4-fs (loop4): 1 truncate cleaned up [ 903.102696][T26246] xt_ecn: cannot match TCP bits for non-tcp packets [ 903.113802][T26240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.127784][T26248] loop7: detected capacity change from 0 to 64 [ 903.180123][T26217] read_mapping_page failed! [ 903.229732][T26217] ERROR: (device loop0): txCommit: [ 903.229732][T26217] [ 903.243129][T26240] ext4 filesystem being mounted at /1427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 903.377848][T26217] ERROR: (device loop0): remounting filesystem as read-only [ 903.433866][ T8] cxacru 3-1:0.0: submit of read urb for cm 0x90 failed (-8) [ 903.459366][T26240] Quota error (device loop4): write_blk: dquota write failed [ 903.534530][T26249] cxacru 3-1:0.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 903.565557][T26240] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 903.608836][ T8] usb 3-1: USB disconnect, device number 122 [ 903.641754][T26249] cxacru 3-1:0.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 903.717032][T26240] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.8216: Failed to acquire dquot type 1 [ 904.179925][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 904.246585][T16542] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 904.317100][T16542] EXT4-fs error (device loop4): ext4_release_dquot:6961: comm kworker/u8:9: Failed to release dquot type 1 [ 905.684608][T26244] loop3: detected capacity change from 0 to 32768 [ 905.817551][T26271] loop2: detected capacity change from 0 to 2048 [ 905.891770][T26244] (syz.3.8217,26244,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 906.015764][T26244] (syz.3.8217,26244,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 906.074372][T26271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 906.159569][T26244] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 906.159733][T26244] (syz.3.8217,26244,0):ocfs2_initialize_super:2281 ERROR: status = -12 [ 906.350327][T26244] (syz.3.8217,26244,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 906.603019][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 907.287275][T26256] loop6: detected capacity change from 0 to 32768 [ 907.428466][T26256] read_mapping_page failed! [ 908.457761][T26273] loop7: detected capacity change from 0 to 32768 [ 908.679126][T26273] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 909.008455][T26275] loop0: detected capacity change from 0 to 40427 [ 909.053806][T26273] XFS (loop7): Ending clean mount [ 909.115915][T26273] XFS (loop7): Quotacheck needed: Please wait. [ 909.185600][T26275] F2FS-fs (loop0): Found nat_bits in checkpoint [ 909.326717][T26273] XFS (loop7): Quotacheck: Done. [ 909.598945][T20941] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 909.764802][T26321] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 910.982840][T26329] cgroup: subsys name conflicts with all [ 911.008489][T26331] IPv6: NLM_F_CREATE should be specified when creating new route [ 911.758700][T26343] libceph: resolve '. [ 911.758700][T26343] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 911.758700][T26343] ' (ret=-3): failed [ 912.473321][T26323] loop6: detected capacity change from 0 to 32768 [ 912.541657][T26323] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8248 (26323) [ 912.586670][T26355] loop7: detected capacity change from 0 to 2048 [ 912.646299][T26359] loop2: detected capacity change from 0 to 16 [ 912.720679][T26323] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 912.741847][T26355] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 912.764104][T26360] netlink: 'syz.4.8265': attribute type 1 has an invalid length. [ 912.772439][T26359] erofs (device loop2): mounted with root inode @ nid 36. [ 912.834148][T26323] BTRFS info (device loop6): using sha256 (sha256-ni) checksum algorithm [ 912.915201][T26323] BTRFS info (device loop6): using free-space-tree [ 913.165121][T26323] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 913.165416][T26323] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 913.277462][T26366] loop0: detected capacity change from 0 to 2048 [ 913.529026][T26323] BTRFS error (device loop6): open_ctree failed [ 913.683536][T26366] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.384521][ T5838] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.856535][T26395] program syz.4.8275 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 915.617031][T26401] netlink: 'syz.4.8277': attribute type 1 has an invalid length. [ 915.727390][T26401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8277'. [ 916.414042][T26410] netlink: 'syz.0.8280': attribute type 2 has an invalid length. [ 917.198740][T26420] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8286'. [ 917.259762][T13726] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 917.280996][T26391] loop7: detected capacity change from 0 to 32768 [ 917.290805][T26420] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8286'. [ 917.520685][T13726] usb 5-1: Using ep0 maxpacket: 32 [ 917.526624][T26422] (unnamed net_device) (uninitialized): option use_carrier: invalid value (9) [ 917.579462][T13726] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 917.632941][T13726] usb 5-1: config 0 has no interface number 0 [ 917.685871][T13726] usb 5-1: config 0 interface 12 has no altsetting 0 [ 917.797419][T13726] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 917.838374][T26403] Bluetooth: hci0: command 0x0406 tx timeout [ 917.857181][T13726] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.931067][T13726] usb 5-1: Product: syz [ 917.998303][T13726] usb 5-1: Manufacturer: syz [ 918.031524][T13726] usb 5-1: SerialNumber: syz [ 918.071156][T13726] usb 5-1: config 0 descriptor?? [ 918.247770][T26428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8290'. [ 918.607118][T13726] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 918.706057][T13726] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 918.743989][T13726] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 918.832742][T13726] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 918.949315][T13726] usb 5-1: USB disconnect, device number 112 [ 919.036080][T26436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 919.885894][T26451] overlayfs: conflicting options: verity=on,redirect_dir=follow [ 920.607698][T26464] netlink: 'syz.0.8307': attribute type 10 has an invalid length. [ 921.138891][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 921.145333][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 921.758854][T26484] netlink: 'syz.2.8317': attribute type 2 has an invalid length. [ 921.917953][T26488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8320'. [ 922.986937][T26509] loop2: detected capacity change from 0 to 256 [ 923.203064][T26509] FAT-fs (loop2): Directory bread(block 64) failed [ 923.270097][T26509] FAT-fs (loop2): Directory bread(block 65) failed [ 923.323381][T26509] FAT-fs (loop2): Directory bread(block 66) failed [ 923.413604][T26509] FAT-fs (loop2): Directory bread(block 67) failed [ 923.420605][T26509] FAT-fs (loop2): Directory bread(block 68) failed [ 923.565384][T26509] FAT-fs (loop2): Directory bread(block 69) failed [ 923.572375][T26509] FAT-fs (loop2): Directory bread(block 70) failed [ 923.709091][T26509] FAT-fs (loop2): Directory bread(block 71) failed [ 923.772027][T26509] FAT-fs (loop2): Directory bread(block 72) failed [ 923.788144][T26518] loop7: detected capacity change from 0 to 4096 [ 923.803632][T26509] FAT-fs (loop2): Directory bread(block 73) failed [ 923.930266][T26518] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 924.074186][T26526] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8338'. [ 924.104532][T26525] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 924.182423][T26525] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 924.843845][T26536] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8344'. [ 925.331513][T26543] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8346'. [ 926.005190][T26556] binder: 26554:26556 ioctl 400c620e 0 returned -14 [ 926.389088][T26565] bridge5: entered promiscuous mode [ 926.429455][T26565] bridge5: entered allmulticast mode [ 926.891050][T26576] loop3: detected capacity change from 0 to 128 [ 927.020682][T26576] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 927.118565][T26576] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 931.533876][T26606] loop4: detected capacity change from 0 to 32768 [ 931.752465][ T29] audit: type=1800 audit(1733865763.977:94): pid=26606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8376" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 933.580515][T26680] openvswitch: netlink: Tunnel attr 228 out of range max 16 [ 934.211335][T26691] sctp: [Deprecated]: syz.7.8418 (pid 26691) Use of int in max_burst socket option deprecated. [ 934.211335][T26691] Use struct sctp_assoc_value instead [ 934.319330][T26654] loop0: detected capacity change from 0 to 32768 [ 934.499875][T26654] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8400 (26654) [ 934.631006][T26690] loop3: detected capacity change from 0 to 4096 [ 934.757797][T26654] BTRFS error (device loop0): open_ctree failed [ 935.926587][T26715] loop2: detected capacity change from 0 to 2048 [ 936.090802][T26715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 936.326930][ T29] audit: type=1800 audit(1733865768.195:95): pid=26715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8430" name="file1" dev="loop2" ino=1367 res=0 errno=0 [ 937.720878][T26729] loop7: detected capacity change from 0 to 4096 [ 937.864186][T26729] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512). [ 938.087920][T26745] netlink: zone id is out of range [ 938.093190][T26745] netlink: zone id is out of range [ 938.135838][T26729] ntfs3(loop7): Failed to initialize $Extend/$Reparse. [ 938.224833][T26745] netlink: zone id is out of range [ 938.230001][T26745] netlink: zone id is out of range [ 938.326411][T26745] netlink: zone id is out of range [ 938.384582][T26745] netlink: zone id is out of range [ 938.444412][T26745] netlink: zone id is out of range [ 938.516265][T26745] netlink: zone id is out of range [ 938.560530][T26745] netlink: zone id is out of range [ 938.617709][T26751] loop4: detected capacity change from 0 to 64 [ 938.625426][T16311] ntfs3(loop7): ino=1a, ntfs3_write_inode failed, -22. [ 938.701210][T20941] ntfs3(loop7): ino=1a, ntfs_sync_fs failed, -22. [ 939.313706][T26759] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8449'. [ 939.595998][T26764] loop6: detected capacity change from 0 to 256 [ 939.853641][T26764] FAT-fs (loop6): Directory bread(block 64) failed [ 939.904032][T26764] FAT-fs (loop6): Directory bread(block 65) failed [ 939.910703][T26764] FAT-fs (loop6): Directory bread(block 66) failed [ 940.044574][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8456'. [ 940.061076][T26764] FAT-fs (loop6): Directory bread(block 67) failed [ 940.098368][T26764] FAT-fs (loop6): Directory bread(block 68) failed [ 940.104966][T26764] FAT-fs (loop6): Directory bread(block 69) failed [ 940.244183][T26764] FAT-fs (loop6): Directory bread(block 70) failed [ 940.318817][T26764] FAT-fs (loop6): Directory bread(block 71) failed [ 940.399892][T26764] FAT-fs (loop6): Directory bread(block 72) failed [ 940.448367][T26764] FAT-fs (loop6): Directory bread(block 73) failed [ 941.670309][T26439] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 941.905827][T26439] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 941.972259][T26439] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 942.010602][T26803] SET target dimension over the limit! [ 942.033408][T26439] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 942.088376][T26439] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.165859][T26796] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 942.209745][T26439] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 942.420100][T26807] loop0: detected capacity change from 0 to 256 [ 942.539772][T26807] FAT-fs (loop0): Directory bread(block 1285) failed [ 942.686117][T26807] FAT-fs (loop0): Directory bread(block 1285) failed [ 942.713887][T13726] usb 5-1: USB disconnect, device number 113 [ 942.789715][T26807] FAT-fs (loop0): Directory bread(block 1285) failed [ 942.846189][T26807] FAT-fs (loop0): Directory bread(block 1285) failed [ 944.356588][T26833] netlink: 44 bytes leftover after parsing attributes in process `syz.7.8487'. [ 945.618327][T26859] loop4: detected capacity change from 0 to 256 [ 945.645795][T26856] binder: Bad value for 'stats' [ 946.443391][T26874] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8504'. [ 947.003839][T26879] loop2: detected capacity change from 0 to 4096 [ 947.029436][T26882] loop6: detected capacity change from 0 to 2048 [ 947.062211][T26879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 947.141892][T26882] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.8508: bad orphan inode 8192 [ 947.233263][T26882] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.248949][T26879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.336380][T26439] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 947.483846][T26879] EXT4-fs error (device loop2): ext4_empty_dir:3112: inode #12: block 80: comm syz.2.8507: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 947.544078][T26439] usb 8-1: Using ep0 maxpacket: 8 [ 947.592757][T26439] usb 8-1: unable to get BOS descriptor or descriptor too short [ 947.667814][T26439] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 947.722051][T26879] EXT4-fs warning (device loop2): ext4_empty_dir:3114: inode #12: comm syz.2.8507: directory missing '..' [ 947.744681][T26439] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 947.852476][T26439] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 947.937278][T26439] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 947.981150][T16277] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.033375][T26439] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 948.089269][ T5828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.148975][T26439] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 948.258552][T26439] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 948.364954][T26439] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 48059, setting to 1024 [ 948.386672][T26901] loop4: detected capacity change from 0 to 1024 [ 948.449566][T26901] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 948.494965][T26439] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 948.550134][T26901] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 948.578306][T26907] loop6: detected capacity change from 0 to 256 [ 948.625509][T26439] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 948.634725][T26439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.690005][T26901] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 948.769520][T26439] usb 8-1: Product: syz [ 948.785904][T26901] EXT4-fs error (device loop4): ext4_get_journal_inode:5809: inode #5: comm syz.4.8515: unexpected bad inode w/o EXT4_IGET_BAD [ 948.831533][T26439] usb 8-1: Manufacturer: syz [ 948.858239][T26439] usb 8-1: SerialNumber: syz [ 948.918253][T26439] usb 8-1: config 0 descriptor?? [ 948.928692][T26886] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 948.981679][T26901] EXT4-fs (loop4): no journal found [ 948.996077][T26439] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 949.003746][T26901] EXT4-fs (loop4): can't get journal size [ 949.081837][T26901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 949.317981][T26439] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 949.444116][T26439] usb 8-1: USB disconnect, device number 8 [ 949.657570][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.849548][ T6368] udevd[6368]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 949.985963][T26923] loop3: detected capacity change from 0 to 64 [ 950.733261][T26934] loop6: detected capacity change from 0 to 128 [ 950.849289][T26934] befs: (loop6): No write support. Marking filesystem read-only [ 951.018177][T26934] befs: (loop6): invalid magic header [ 951.635655][T26944] loop0: detected capacity change from 0 to 8 [ 951.773858][T26944] SQUASHFS error: lzo decompression failed, data probably corrupt [ 951.891128][T26944] SQUASHFS error: Failed to read block 0x1c0: -5 [ 951.953144][T26944] SQUASHFS error: Unable to read metadata cache entry [1be] [ 952.096261][T26952] loop4: detected capacity change from 0 to 512 [ 952.315130][T26952] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 952.449637][T26952] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 952.457609][T26952] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e128, mo2=0002] [ 952.633592][T26952] System zones: 0-1, 15-15, 18-18, 34-34 [ 952.639637][T26952] EXT4-fs (loop4): orphan cleanup on readonly fs [ 952.774479][T26952] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 952.783929][T26952] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 953.030036][T26952] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 953.123349][T26952] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.8540: bg 0: block 40: padding at end of block bitmap is not set [ 953.168535][T26966] loop6: detected capacity change from 0 to 2048 [ 953.273920][T26966] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 953.283184][T26952] EXT4-fs (loop4): Remounting filesystem read-only [ 953.348662][T26952] EXT4-fs (loop4): 1 truncate cleaned up [ 953.421021][T26952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 953.759160][T26978] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8551'. [ 953.960587][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.981392][T26980] ip6erspan0: entered promiscuous mode [ 954.509138][T26987] bridge1: entered promiscuous mode [ 954.529862][ T29] audit: type=1326 audit(1733865785.003:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26988 comm="syz.7.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 954.576759][T26989] loop4: detected capacity change from 0 to 1024 [ 954.684400][T26989] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 954.781165][ T29] audit: type=1326 audit(1733865785.058:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26988 comm="syz.7.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 954.841949][T26992] : Can't lookup blockdev [ 954.934074][T26989] EXT4-fs error (device loop4): ext4_map_blocks:705: inode #3: block 2: comm syz.4.8556: lblock 2 mapped to illegal pblock 2 (length 1) [ 955.013902][ T29] audit: type=1326 audit(1733865785.058:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26988 comm="syz.7.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 955.083990][T26989] Quota error (device loop4): write_blk: dquota write failed [ 955.091425][T26989] Quota error (device loop4): find_free_dqentry: Can't write quota data block 2 [ 955.251665][T27001] loop7: detected capacity change from 0 to 256 [ 955.267723][T26989] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 955.298834][ T29] audit: type=1326 audit(1733865785.058:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26988 comm="syz.7.8558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0601f7ff19 code=0x7ffc0000 [ 955.385466][T26989] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.8556: Failed to acquire dquot type 0 [ 955.504167][T26989] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.8556: lblock 2 mapped to illegal pblock 2 (length 1) [ 955.590855][T27001] FAT-fs (loop7): Directory bread(block 64) failed [ 955.655682][T27001] FAT-fs (loop7): Directory bread(block 65) failed [ 955.669191][T27008] loop2: detected capacity change from 0 to 16 [ 955.699067][T26989] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 955.709666][T27001] FAT-fs (loop7): Directory bread(block 66) failed [ 955.765826][T27001] FAT-fs (loop7): Directory bread(block 67) failed [ 955.772510][T27001] FAT-fs (loop7): Directory bread(block 68) failed [ 955.780632][T27008] virtio-fs: tag <(null)> not found [ 955.786046][T26989] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.8556: Failed to acquire dquot type 0 [ 955.884117][T26989] EXT4-fs error (device loop4): ext4_free_blocks:6589: comm syz.4.8556: Freeing blocks not in datazone - block = 0, count = 4096 [ 955.905830][T27001] FAT-fs (loop7): Directory bread(block 69) failed [ 955.912471][T27001] FAT-fs (loop7): Directory bread(block 70) failed [ 955.995990][T26989] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #3: block 2: comm syz.4.8556: lblock 2 mapped to illegal pblock 2 (length 1) [ 956.021241][T27001] FAT-fs (loop7): Directory bread(block 71) failed [ 956.089897][ T5833] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 956.097903][T27001] FAT-fs (loop7): Directory bread(block 72) failed [ 956.161819][T27001] FAT-fs (loop7): Directory bread(block 73) failed [ 956.181268][T27014] loop3: detected capacity change from 0 to 128 [ 956.208965][T26989] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 956.219049][T26989] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.8556: Failed to acquire dquot type 0 [ 956.266545][T27014] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 956.340077][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 956.427227][T26989] EXT4-fs (loop4): 1 orphan inode deleted [ 956.434256][T26989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.449053][ T5833] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 956.528271][ T5833] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 956.591166][ T5833] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.698728][ T5833] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 956.813554][ T5833] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 956.837554][T26997] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 10: padding at end of block bitmap is not set [ 956.880056][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.974451][ T5833] usb 7-1: Product: syz [ 957.009324][ T5833] usb 7-1: Manufacturer: syz [ 957.034556][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.069568][ T5833] usb 7-1: SerialNumber: syz [ 957.554023][ T5833] usb 7-1: USB disconnect, device number 18 [ 957.668916][T27030] overlayfs: conflicting options: userxattr,metacopy=on [ 957.963127][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 958.365270][T27038] netlink: 'syz.4.8581': attribute type 3 has an invalid length. [ 958.373053][T27038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8581'. [ 958.525791][T27038] netlink: 'syz.4.8581': attribute type 3 has an invalid length. [ 958.606168][T27038] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8581'. [ 958.723471][T27045] dvmrp1: entered allmulticast mode [ 959.513203][T26439] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 959.753515][T26439] usb 7-1: Using ep0 maxpacket: 16 [ 959.838219][T26439] usb 7-1: config 1 interface 0 has no altsetting 0 [ 959.863149][T27057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 959.903236][T26439] usb 7-1: New USB device found, idVendor=0738, idProduct=1709, bcdDevice= 0.40 [ 959.945132][T26439] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.021260][T26439] usb 7-1: Product: syz [ 960.036831][T26439] usb 7-1: Manufacturer: syz [ 960.041457][T26439] usb 7-1: SerialNumber: syz [ 960.506675][T26439] usbhid 7-1:1.0: can't add hid device: -71 [ 960.544772][T26439] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 960.640202][T26439] usb 7-1: USB disconnect, device number 19 [ 960.822952][T27036] loop2: detected capacity change from 0 to 32768 [ 960.919545][T27036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.8580 (27036) [ 961.095624][T27036] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 961.142572][T27043] loop0: detected capacity change from 0 to 32768 [ 961.181894][T27036] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 961.232207][T27036] BTRFS info (device loop2): using free-space-tree [ 961.247363][T27043] BTRFS: device /dev/loop0 (7:0) using temp-fsid 158197e4-a0dd-4466-b8e4-9a5414a24047 [ 961.350031][T27043] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.8584 (27043) [ 961.453647][T27036] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 961.453962][T27036] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 961.533369][T27036] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 961.563700][T27043] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 961.659248][T27036] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 961.659528][T27036] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 961.741274][T27036] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 961.755934][T27043] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 961.779824][T27049] loop3: detected capacity change from 0 to 32768 [ 961.877028][T27036] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 961.877314][T27036] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 961.908176][T27049] BTRFS: device /dev/loop3 (7:3) using temp-fsid 9f36cb62-1a6b-4770-935b-b0a4f4a9a5fd [ 961.983846][T27043] BTRFS info (device loop0): using free-space-tree [ 962.037874][ T30] INFO: task jbd2/sda1-8:5160 blocked for more than 143 seconds. [ 962.045659][ T30] Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 962.101234][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 962.101541][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 962.146177][T27049] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8586 (27049) [ 962.178181][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 962.224564][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 962.224855][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 962.277935][ T30] task:jbd2/sda1-8 state:D [ 962.365702][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 962.401418][ T30] stack:24824 pid:5160 tgid:5160 ppid:2 flags:0x00004000 [ 962.427996][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 962.428268][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 962.485875][T27097] [U] v3f"S/4:XTzWtlW= [ 962.528424][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 962.528774][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 962.600940][ T30] Call Trace: [ 962.633866][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 962.634160][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 962.667716][T27097] [U] J"e:" [ 962.763444][ T30] [ 962.789227][T27036] BTRFS error (device loop2): open_ctree failed [ 962.796341][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 962.796604][T27043] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 962.817835][ T30] __schedule+0x1850/0x4c30 [ 962.947877][ T30] ? __pfx___schedule+0x10/0x10 [ 962.958987][T27043] BTRFS error (device loop0): open_ctree failed [ 962.976678][ T30] ? __pfx_lock_release+0x10/0x10 [ 963.000008][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 963.039036][ T30] ? schedule+0x90/0x320 [ 963.084073][ T30] schedule+0x14b/0x320 [ 963.128634][ T30] io_schedule+0x8d/0x110 [ 963.146693][ T30] bit_wait_io+0x12/0xd0 [ 963.177702][ T30] __wait_on_bit+0xb2/0x2f0 [ 963.204199][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 963.239212][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 963.266304][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 963.282399][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 963.313305][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 963.321751][ T30] jbd2_journal_commit_transaction+0x3cfa/0x6560 [ 963.352175][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 963.373884][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 963.391172][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.412906][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 963.432674][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.451891][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 963.473955][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.498673][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 963.518409][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 963.545270][ T30] ? prepare_to_wait+0x186/0x210 [ 963.562485][ T30] ? schedule+0x90/0x320 [ 963.581754][ T30] kjournald2+0x41c/0x7b0 [ 963.595642][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 963.625456][ T30] ? __pfx_kjournald2+0x10/0x10 [ 963.651175][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 963.669717][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 963.695474][ T30] ? __kthread_parkme+0x169/0x1d0 [ 963.715953][ T30] ? __pfx_kjournald2+0x10/0x10 [ 963.725900][ T30] kthread+0x2f2/0x390 [ 963.751404][ T30] ? __pfx_kjournald2+0x10/0x10 [ 963.771212][ T30] ? __pfx_kthread+0x10/0x10 [ 963.785289][ T30] ret_from_fork+0x4d/0x80 [ 963.801918][ T30] ? __pfx_kthread+0x10/0x10 [ 963.817615][ T30] ret_from_fork_asm+0x1a/0x30 [ 963.832107][ T30] [ 963.883613][ T30] [ 963.883613][ T30] Showing all locks held in the system: [ 963.975278][ T30] 5 locks held by kworker/0:0/8: [ 963.989901][ T30] #0: ffff8880216ce548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 964.056492][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 964.121922][ T30] #2: ffff888028324190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1fe/0x5150 [ 964.184689][ T30] #3: ffff88805bc37190 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x103/0x950 [ 964.253780][ T30] #4: ffff8880248c7160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 964.346069][ T30] 4 locks held by kworker/1:0/25: [ 964.375297][ T30] 1 lock held by khungtaskd/30: [ 964.400765][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 964.446040][ T30] 2 locks held by getty/5582: [ 964.468950][ T30] #0: ffff88803102a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 964.527166][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 964.569287][ T30] 4 locks held by kworker/1:3/5849: [ 964.598377][ T30] 2 locks held by kworker/1:6/5921: [ 964.620257][ T30] 4 locks held by udevd/5976: [ 964.651508][ T30] #0: ffff888052e5e1c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb4/0xd70 [ 964.686598][ T30] #1: ffff88807e829088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x53/0x3b0 [ 964.705747][ T30] #2: ffff88807c939698 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 964.721333][ T30] #3: ffff88805bc37190 (&dev->mutex){....}-{4:4}, at: uevent_show+0x17d/0x340 [ 964.741173][ T30] 1 lock held by cxacru/26249: [ 964.751014][ T30] #0: ffffffff8e7e1f90 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0x140/0x300 [ 964.812602][ T30] [ 964.815097][ T30] ============================================= [ 964.815097][ T30] [ 964.835205][ T30] NMI backtrace for cpu 0 [ 964.839562][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 964.850258][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 964.860329][ T30] Call Trace: [ 964.863623][ T30] [ 964.866574][ T30] dump_stack_lvl+0x241/0x360 [ 964.871299][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 964.876534][ T30] ? __pfx__printk+0x10/0x10 [ 964.881169][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 964.886141][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 964.891803][ T30] ? _printk+0xd5/0x120 [ 964.895989][ T30] ? __pfx__printk+0x10/0x10 [ 964.900612][ T30] ? __wake_up_klogd+0xcc/0x110 [ 964.905491][ T30] ? __pfx__printk+0x10/0x10 [ 964.910114][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.915771][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 964.920823][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 964.926828][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 964.932842][ T30] watchdog+0xff6/0x1040 [ 964.937118][ T30] ? watchdog+0x1ea/0x1040 [ 964.941577][ T30] ? __pfx_watchdog+0x10/0x10 [ 964.946317][ T30] kthread+0x2f2/0x390 [ 964.950417][ T30] ? __pfx_watchdog+0x10/0x10 [ 964.955119][ T30] ? __pfx_kthread+0x10/0x10 [ 964.959748][ T30] ret_from_fork+0x4d/0x80 [ 964.964189][ T30] ? __pfx_kthread+0x10/0x10 [ 964.968810][ T30] ret_from_fork_asm+0x1a/0x30 [ 964.973877][ T30] [ 964.977594][ T30] Sending NMI from CPU 0 to CPUs 1: [ 964.982824][ C1] NMI backtrace for cpu 1 [ 964.982840][ C1] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 964.982865][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 964.982881][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 964.982920][ C1] RIP: 0010:unwind_next_frame+0x340/0x22d0 [ 964.982951][ C1] Code: c0 0f 85 58 18 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 6a 18 00 00 0f b6 43 01 83 e0 07 0f 84 ca 15 00 00 83 f8 01 <4c> 8b 6c 24 08 49 bc 00 00 00 00 00 fc ff df 48 8b 6c 24 50 0f 84 [ 964.982971][ C1] RSP: 0018:ffffc90000a18450 EFLAGS: 00000002 [ 964.982990][ C1] RAX: 0000000000000002 RBX: ffffffff90a396aa RCX: ffffffff902cc934 [ 964.983007][ C1] RDX: ffffffff90a396a6 RSI: ffffffff90a396a6 RDI: 0000000000000001 [ 964.983024][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffc90000a18610 [ 964.983041][ C1] R10: dffffc0000000000 R11: ffffffff818b2450 R12: 0000000000000000 [ 964.983058][ C1] R13: ffffc90000a18520 R14: ffffffff90a396ab R15: ffffffff8161ba75 [ 964.983080][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 964.983099][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 964.983116][ C1] CR2: 00007f9f67f62a00 CR3: 000000000e736000 CR4: 0000000000350ef0 [ 964.983135][ C1] Call Trace: [ 964.983144][ C1] [ 964.983154][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 964.983181][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 964.983212][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 964.983238][ C1] ? nmi_handle+0x2a/0x5a0 [ 964.983276][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 964.983298][ C1] ? nmi_handle+0x151/0x5a0 [ 964.983326][ C1] ? nmi_handle+0x2a/0x5a0 [ 964.983355][ C1] ? unwind_next_frame+0x340/0x22d0 [ 964.983381][ C1] ? default_do_nmi+0x63/0x160 [ 964.983407][ C1] ? exc_nmi+0x123/0x1f0 [ 964.983430][ C1] ? end_repeat_nmi+0xf/0x53 [ 964.983464][ C1] ? handle_softirqs+0x2d5/0x9b0 [ 964.983501][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 964.983529][ C1] ? unwind_next_frame+0x340/0x22d0 [ 964.983558][ C1] ? unwind_next_frame+0x340/0x22d0 [ 964.983590][ C1] ? unwind_next_frame+0x340/0x22d0 [ 964.983617][ C1] [ 964.983626][ C1] [ 964.983640][ C1] ? handle_softirqs+0x2d6/0x9b0 [ 964.983676][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 964.983701][ C1] arch_stack_walk+0x11c/0x150 [ 964.983739][ C1] ? handle_softirqs+0x2d6/0x9b0 [ 964.983777][ C1] stack_trace_save+0x118/0x1d0 [ 964.983802][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 964.983826][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 964.983849][ C1] ? __pfx_lock_release+0x10/0x10 [ 964.983881][ C1] kasan_save_track+0x3f/0x80 [ 964.983906][ C1] ? kasan_save_track+0x3f/0x80 [ 964.983929][ C1] ? kasan_save_free_info+0x40/0x50 [ 964.983963][ C1] ? __kasan_slab_free+0x59/0x70 [ 964.983987][ C1] ? kfree+0x196/0x430 [ 964.984014][ C1] ? dummy_timer+0x7f4/0x4620 [ 964.984036][ C1] ? __hrtimer_run_queues+0x59d/0xd30 [ 964.984068][ C1] ? hrtimer_run_softirq+0x19a/0x2c0 [ 964.984101][ C1] ? handle_softirqs+0x2d6/0x9b0 [ 964.984165][ C1] kasan_save_free_info+0x40/0x50 [ 964.984203][ C1] __kasan_slab_free+0x59/0x70 [ 964.984228][ C1] ? dummy_timer+0x7f4/0x4620 [ 964.984249][ C1] kfree+0x196/0x430 [ 964.984277][ C1] ? dummy_timer+0x7f4/0x4620 [ 964.984301][ C1] dummy_timer+0x7f4/0x4620 [ 964.984324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.984353][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 964.984406][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.984449][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 964.984476][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 964.984499][ C1] __hrtimer_run_queues+0x59d/0xd30 [ 964.984532][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 964.984570][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 964.984604][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.984626][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.984647][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 964.984679][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 964.984716][ C1] handle_softirqs+0x2d6/0x9b0 [ 964.984755][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.984783][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 964.984819][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 964.984857][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.984878][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 964.984909][ C1] __irq_exit_rcu+0xf7/0x220 [ 964.984944][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 964.984982][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.985006][ C1] irq_exit_rcu+0x9/0x30 [ 964.985039][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 964.985069][ C1] [ 964.985077][ C1] [ 964.985087][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 964.985121][ C1] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 964.985152][ C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 a5 44 a4 f5 e8 00 fc dd f5 fb bf 01 00 00 00 85 ab ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 65 92 3c f6 48 [ 964.985171][ C1] RSP: 0018:ffffc900001f78c0 EFLAGS: 00000282 [ 964.985191][ C1] RAX: 10de6efcb831f700 RBX: 1ffff9200003ef20 RCX: ffffffff817b11ca [ 964.985210][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: 0000000000000001 [ 964.985227][ C1] RBP: ffffc900001f7980 R08: ffffffff942a1987 R09: 1ffffffff2854330 [ 964.985245][ C1] R10: dffffc0000000000 R11: fffffbfff2854331 R12: 1ffff9200003ef18 [ 964.985263][ C1] R13: 1ffff9200003ef1c R14: ffffc900001f78e0 R15: dffffc0000000000 [ 964.985287][ C1] ? mark_lock+0x9a/0x360 [ 964.985320][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 964.985350][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 964.985386][ C1] irqentry_exit+0x5e/0x90 [ 964.985414][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 964.985448][ C1] RIP: 0010:__local_bh_enable_ip+0x170/0x200 [ 964.985484][ C1] Code: 8c e8 94 73 66 0a 65 66 8b 05 34 21 a2 7e 66 85 c0 75 5d bf 01 00 00 00 e8 5d bd 0b 00 e8 18 73 45 00 fb 65 8b 05 f8 20 a2 7e <85> c0 75 05 e8 77 92 a8 ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 964.985502][ C1] RSP: 0018:ffffc900001f7a40 EFLAGS: 00000286 [ 964.985521][ C1] RAX: 0000000080000000 RBX: 1ffff9200003ef4c RCX: ffffffff817b11ca [ 964.985538][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9760 RDI: ffffffff8c5f9680 [ 964.985556][ C1] RBP: ffffc900001f7af8 R08: ffffffff942a1987 R09: 1ffffffff2854330 [ 964.985574][ C1] R10: dffffc0000000000 R11: fffffbfff2854331 R12: dffffc0000000000 [ 964.985591][ C1] R13: 1ffff9200003ef50 R14: ffffc900001f7a80 R15: 0000000000000201 [ 964.985614][ C1] ? mark_lock+0x9a/0x360 [ 964.985647][ C1] ? wg_socket_send_skb_to_peer+0x176/0x1d0 [ 964.985684][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 964.985720][ C1] ? mod_peer_timer+0x21/0x260 [ 964.985757][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 964.985782][ C1] wg_socket_send_skb_to_peer+0x176/0x1d0 [ 964.985821][ C1] wg_packet_tx_worker+0x1bf/0x810 [ 964.985859][ C1] ? process_scheduled_works+0x976/0x1840 [ 964.985883][ C1] process_scheduled_works+0xa68/0x1840 [ 964.985924][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 964.985954][ C1] ? assign_work+0x364/0x3d0 [ 964.985979][ C1] worker_thread+0x870/0xd30 [ 964.986013][ C1] ? __kthread_parkme+0x169/0x1d0 [ 964.986041][ C1] ? __pfx_worker_thread+0x10/0x10 [ 964.986065][ C1] kthread+0x2f2/0x390 [ 964.986092][ C1] ? __pfx_worker_thread+0x10/0x10 [ 964.986116][ C1] ? __pfx_kthread+0x10/0x10 [ 964.986145][ C1] ret_from_fork+0x4d/0x80 [ 964.986168][ C1] ? __pfx_kthread+0x10/0x10 [ 964.986196][ C1] ret_from_fork_asm+0x1a/0x30 [ 964.986228][ C1] [ 965.788158][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 965.795058][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 965.805580][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 965.815656][ T30] Call Trace: [ 965.818953][ T30] [ 965.822170][ T30] dump_stack_lvl+0x241/0x360 [ 965.827155][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 965.832391][ T30] ? __pfx__printk+0x10/0x10 [ 965.837011][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 965.843029][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.848691][ T30] ? vscnprintf+0x5d/0x90 [ 965.853056][ T30] panic+0x349/0x880 [ 965.856980][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.862639][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 965.868821][ T30] ? __pfx_panic+0x10/0x10 [ 965.873276][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 965.878686][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.884339][ T30] ? __irq_work_queue_local+0x137/0x410 [ 965.889914][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.895565][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 965.900969][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 965.907151][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 965.913335][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 965.919019][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 965.925208][ T30] watchdog+0x1035/0x1040 [ 965.929570][ T30] ? watchdog+0x1ea/0x1040 [ 965.934289][ T30] ? __pfx_watchdog+0x10/0x10 [ 965.938998][ T30] kthread+0x2f2/0x390 [ 965.943099][ T30] ? __pfx_watchdog+0x10/0x10 [ 965.947807][ T30] ? __pfx_kthread+0x10/0x10 [ 965.952433][ T30] ret_from_fork+0x4d/0x80 [ 965.956886][ T30] ? __pfx_kthread+0x10/0x10 [ 965.961514][ T30] ret_from_fork_asm+0x1a/0x30 [ 965.966321][ T30] [ 965.969601][ T30] Kernel Offset: disabled [ 965.973927][ T30] Rebooting in 86400 seconds..