last executing test programs: 3m3.928397519s ago: executing program 0 (id=1558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FITHAW(r0, 0xc0045878) 3m3.694319967s ago: executing program 0 (id=1564): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000080)={0x0, 0x300}) 3m3.465328006s ago: executing program 0 (id=1566): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0xc, 0x2) 3m3.16940664s ago: executing program 0 (id=1569): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 3m2.509720723s ago: executing program 0 (id=1579): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_int(r0, 0x1, 0x28, 0x0, &(0x7f0000000500)) 3m1.742794645s ago: executing program 0 (id=1593): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x44e1, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) 3m1.397599363s ago: executing program 32 (id=1593): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x44e1, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x35}, 0x94) 2m37.342787207s ago: executing program 1 (id=1915): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) getsockopt$ax25_int(r0, 0x101, 0x3, 0x0, &(0x7f0000000100)) 2m37.18359434s ago: executing program 1 (id=1919): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000440)=@shmem={0xc, 0x1, {0x7, 0xab}}, 0x101000) 2m37.003711784s ago: executing program 1 (id=1923): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB="63726561746f723dc56e4aeb2c6e6f6465636f6d706f73652c6e6f6465636f6d706f73652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d63703836322c6465636f6d706f73652c6e6f6465636f6d706f73652c747970653ddf5cd7822c747970653d3562f9492c000d636f31f7e2e29beddb4ef82378682a8bca041768e6169888b12b7f494512dc26ff4f2c465fd72a12deca9a90c583035a0dbc483cec6bd64deb7182de40eb18fcd2a95121eea8d2f6d20ae3e32e000000000000"], 0x3, 0x6b3, &(0x7f0000000780)="$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") removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', 'trusted.overlay.impure\x00'}) 2m36.705935118s ago: executing program 1 (id=1928): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30, 0xa0}}], 0x1, 0x0) 2m36.43412476s ago: executing program 1 (id=1934): syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRESHEX, @ANYRESOCT, @ANYRES16, @ANYRES8, @ANYBLOB="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"], 0xfd, 0x200, &(0x7f00000002c0)="$eJzskr9rFEEUx7+zO3fuaUIOORBFEDVoLJLbbDT+KBRsDCoIohADgsfdJS5u/JE90DsOXKsUNoIiJIiFIElhIf4DLqiN2CgEuxBJnSKFjSSsvNm3mwnY28ynuO/NvLfvve/M3A4fhDsAbK5360AZhEQF338JSAAHhNpCw07VYb3MWuT4BSvVmPUP6+bJzvgEIPxDy6NWvKdxUJTRU/n9dQV19N3E6deX3v24WnixtHvt7UfKv3i9/QHiaKPvzav3z87P9ary4saEXseO9887VAjA843x5RW5165ktfxoiVoXkPFyEsKddwAMfR6cO+v2PrW4Ztju3KkFQXMmPPfEwppq9XO9W6c/twAkBPsbA6DnkP1FzqG9fRK4BsBGkudIbFFtTd+vhu3OoD9dm2pONe963sioe9x1T3jVST9ouvQLcDf1OZ8gSI8BoGsq0QhCxXdRbINzdmI7VIfmivK496XE45fQrRe1qxs4jHRb65fZylQgZluOmgPKKlk+Ajrah5HQdvtVFQllbAwCNi+GpTZf2stRgaFP94LGLMgbf7YAmdcYXkUhX3j6YuRU5hCzrP3YujFigXWVNXvR2UuVqoLF73kgAop4VGu1kiR5jMUeXPmWRmhvxivm/8qRfmDUtWxvN3fG/setGAwGg8FgMBgMBsN/4m8AAAD//4Hjlpw=") open(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) 2m35.387806995s ago: executing program 1 (id=1951): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 2m22.038003444s ago: executing program 5 (id=2122): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd2(0x0, 0x0) 2m21.70653042s ago: executing program 5 (id=2127): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000080)={[{@part={'part', 0x3d, 0x1}}, {@codepage={'codepage', 0x3d, 'koi8-r'}}, {@part={'part', 0x3d, 0x1}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@creator={'creator', 0x3d, "0d9848bc"}}]}, 0x11, 0x2bd, &(0x7f0000000200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8000, 0x0) 2m21.415788034s ago: executing program 5 (id=2131): socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 2m21.166381704s ago: executing program 5 (id=2135): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) 2m20.774057165s ago: executing program 5 (id=2141): r0 = syz_open_dev$vivid(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)=@userptr={0x3, 0x0, 0x4, 0x70000, 0xa2, {0x0, 0xea60}, {0x5, 0x1, 0x8, 0x9, 0x4, 0x0, "aa3f984b"}, 0x0, 0x2, {0x0}, 0x4}) 2m20.272564026s ago: executing program 33 (id=1951): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) 2m20.117458078s ago: executing program 5 (id=2154): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$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") truncate(&(0x7f0000000000)='./file2\x00', 0x8800000) 2m19.717646161s ago: executing program 34 (id=2154): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$eJzs20tu00Acx/HfJGkSQ4HyXCCkILGADUmaikqsWs7BqmrTqsIFhNkkQsJcAM7AObgMB4AFO1YY+ZGm9aM1E9y0zfez8Xh+/dvjuu6MolgAFtamHsrIqBnuPGivfLltStU1qx4YgMoFyfZPYMOxqgJwXtR/p3uSFYA/n/EAOCs/X0jfJf349WFb9eyqPsz9SV5rZfNP0v1Gkpu2nPT64qv0eFJvrmTrG/E2zq/mHv/Jo8n5l3VN13VDK7qpW8aXifKdw/p7VmsgAAAWjVH3tLwr1QvSePLOrgqmlrT7LTurTzW1u+8OB6fka4V5K8q722/cnRPOAiBPrdTzX6wePX/9gnRJivLVZL9tO0wAFfBG45Zcd/jOG4WTfNQYv9py/6nhWFWVaZjKjpzfaKZ6go+SDns2bY8c6FiPc/T33PE6sw/exJ/SKB05ZcpryoteWgxjIxuFU8BsN8X4VuXLn5V7XbM1NlTqhzs598K60TqjP/7jjXn/ZwJQtd77g7c9bzR+un+wtTfcG74e9PvP15+tra4PetHKvnfS+h7ARTad9HXk20AAAAAAAAAAAAAAAOAiuaO74Sb92i4AAACAS+i/vTPUUOHrVvO+RgAAAAAAAAAAAAAAAAAALpu/AQAA///U5AZL") truncate(&(0x7f0000000000)='./file2\x00', 0x8800000) 3.314633662s ago: executing program 3 (id=4068): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x40086683, &(0x7f00000000c0)) 3.173994604s ago: executing program 3 (id=4070): personality(0x5400004) ppoll(0x0, 0x0, &(0x7f0000000380)={0x0, 0x3938700}, &(0x7f0000000400)={[0x3cf]}, 0x8) 2.96849375s ago: executing program 3 (id=4073): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) 2.809345693s ago: executing program 3 (id=4075): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x20, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x530) 2.610607159s ago: executing program 3 (id=4077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x44, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052413"], 0x0) 2.316245543s ago: executing program 6 (id=4079): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) 2.189456233s ago: executing program 6 (id=4080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000e40)=@newlink={0x48, 0x10, 0x403, 0xffffffff, 0x25dfdbff, {0x0, 0x0, 0x3, 0x0, 0xa000, 0x830}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0x6, 0x1, @remote}]}, 0x48}}, 0x0) 1.973461431s ago: executing program 6 (id=4083): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x121081, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'unlock', ' ', 'mem'}, 0x8) 1.932203094s ago: executing program 7 (id=4084): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, {0x10, 0x8}, {0x8, 0xc}, {0xfffffffd}, {}, 0x0, 0x12, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 1.73309111s ago: executing program 6 (id=4086): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@profile={'stack ', ':\x00'}, 0x8) 1.73290852s ago: executing program 7 (id=4087): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, 0x0) 1.60192642s ago: executing program 6 (id=4089): syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d240601010302000100060006092403050503060581092403060103"], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 1.48542129s ago: executing program 7 (id=4091): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x8042) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x8, @pix={0x3, 0x401, 0x30383653, 0x1, 0xd5, 0x1, 0xc, 0x2, 0x0, 0x8, 0x1, 0x4}}) 1.412266406s ago: executing program 7 (id=4092): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x31, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1.216946242s ago: executing program 7 (id=4096): syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x10042, &(0x7f0000000440)={[{@discard_size={'discard', 0x3d, 0x2}}, {@uid}, {@errors_continue}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {}, {@uid}, {@errors_remount}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x25, 0x6276, &(0x7f00000089c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) 1.134015608s ago: executing program 4 (id=4098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@allocspi={0x150, 0x16, 0x1, 0x0, 0x0, {{{@in6=@loopback, @in=@broadcast}, {@in=@dev, 0x0, 0x6c}, @in6=@mcast2}, 0x0, 0x7fff}, [@migrate={0x50, 0x11, [{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in, @in6=@empty, @in6=@local}]}, @extra_flags={0x8, 0x18, 0x10000}]}, 0x150}}, 0x0) 983.885971ms ago: executing program 3 (id=4100): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x118, &(0x7f0000000380)=ANY=[]) 945.321043ms ago: executing program 4 (id=4102): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) 773.402268ms ago: executing program 4 (id=4103): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x53b, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_simple={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x6, 0x2, ':\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) 727.466631ms ago: executing program 2 (id=4104): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r0, 0x1, 0xc, 0x0, &(0x7f0000000180)) 700.877803ms ago: executing program 4 (id=4105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) 627.966749ms ago: executing program 2 (id=4106): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff}, 0x18}}, 0x0) 472.084262ms ago: executing program 4 (id=4107): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x92}], 0x1, 0x21, 0x0) 471.868052ms ago: executing program 2 (id=4108): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r0, &(0x7f00000000c0)=""/4096, 0x1000) 383.042089ms ago: executing program 7 (id=4109): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000800)=@newlink={0x38, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x7}]]}}}]}, 0x38}}, 0x0) 368.46645ms ago: executing program 4 (id=4110): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) 305.272815ms ago: executing program 2 (id=4111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900080000003e"], 0x30}}, 0x0) 198.756154ms ago: executing program 2 (id=4112): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' flc_size [ 219.935357][ T9987] sysv_free_block: flc_count > flc_size [ 219.940996][ T9987] sysv_free_block: flc_count > flc_size [ 219.975958][ T9987] sysv_free_block: flc_count > flc_size [ 220.013320][ T9987] sysv_free_block: flc_count > flc_size [ 220.058020][ T9987] sysv_free_block: flc_count > flc_size [ 220.063622][ T9987] sysv_free_block: flc_count > flc_size [ 220.064652][ T9955] loop6: detected capacity change from 0 to 32768 [ 220.119430][ T9987] sysv_free_block: flc_count > flc_size [ 220.131803][ T9987] sysv_free_block: flc_count > flc_size [ 220.160045][ T9955] syz.6.2320: attempt to access beyond end of device [ 220.160045][ T9955] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 220.165497][ T9987] sysv_free_block: flc_count > flc_size [ 220.188818][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 220.225276][ T9955] metapage_write_end_io: I/O error [ 220.238306][ T9987] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 220.268276][ T9955] blkno = 8ed2c, nblocks = 1 [ 220.275654][ T9955] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 220.275654][ T9955] [ 220.332333][ T9955] ERROR: (device loop6): remounting filesystem as read-only [ 220.378768][ T9955] UFO tlock:0xffffc9000286a090 [ 220.489282][ T107] blkno = 8ed2c, nblocks = 4 [ 220.493977][ T107] ERROR: (device loop6): dbUpdatePMap: blocks are outside the map [ 220.493977][ T107] [ 220.554103][ T9407] syz-executor: attempt to access beyond end of device [ 220.554103][ T9407] loop6: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 220.585412][ T9407] metapage_write_end_io: I/O error [ 220.591405][ T9407] JFS: metapage_get_blocks failed [ 220.607085][ T9407] JFS: metapage_get_blocks failed [ 220.632564][ T9407] JFS: metapage_get_blocks failed [ 220.654139][ T9407] JFS: metapage_get_blocks failed [ 220.826145][T10008] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.849193][T10011] tmpfs: Bad value for 'mpol' [ 221.155385][T10022] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2348'. [ 221.164385][T10022] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2348'. [ 221.415278][T10032] binder: 10031:10032 ioctl c018620c 200000000700 returned -22 [ 221.498284][T10036] loop4: detected capacity change from 0 to 128 [ 221.563195][T10036] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 221.582501][T10036] sysv_free_block: flc_count > flc_size [ 221.611480][T10036] sysv_free_block: flc_count > flc_size [ 221.635312][T10036] sysv_free_block: flc_count > flc_size [ 221.641437][T10036] sysv_free_block: flc_count > flc_size [ 221.691812][T10036] sysv_free_block: flc_count > flc_size [ 221.712086][T10036] sysv_free_block: flc_count > flc_size [ 221.733954][T10043] ieee802154 phy0 wpan0: encryption failed: -22 [ 221.746074][T10036] sysv_free_block: flc_count > flc_size [ 221.751672][T10036] sysv_free_block: flc_count > flc_size [ 221.795856][T10036] sysv_free_block: flc_count > flc_size [ 221.815589][T10036] sysv_free_block: flc_count > flc_size [ 221.824274][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 221.846836][T10036] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 221.864567][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2358'. [ 221.875221][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 221.925286][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2358'. [ 221.959783][T10045] loop2: detected capacity change from 0 to 4096 [ 222.012480][T10045] ntfs: (device loop2): parse_options(): Unrecognized mount option …´y0x0000000000000000. [ 222.218044][T10061] nft_compat: unsupported protocol 5 [ 223.141097][T10098] loop3: detected capacity change from 0 to 256 [ 223.165600][T10098] exfat: Deprecated parameter 'utf8' [ 223.185345][T10098] exfat: Deprecated parameter 'namecase' [ 223.202180][T10098] exfat: Deprecated parameter 'utf8' [ 223.260266][T10098] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 223.638143][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2382'. [ 223.903269][T10119] tmpfs: Bad value for 'mpol' [ 224.034683][T10100] loop4: detected capacity change from 0 to 32768 [ 224.075611][T10100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.2376 (10100) [ 224.110929][T10124] loop2: detected capacity change from 0 to 1024 [ 224.160894][T10100] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.160985][T10100] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 224.161064][T10100] BTRFS info (device loop4): using free space tree [ 224.223624][T10124] hfsplus: xattr searching failed [ 224.296241][ T9] hfsplus: b-tree write err: -5, ino 4 [ 224.355874][T10100] BTRFS info (device loop4): enabling ssd optimizations [ 224.423294][ T4275] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 224.703100][T10157] netlink: 'syz.2.2394': attribute type 1 has an invalid length. [ 225.486157][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2407'. [ 225.595913][T10188] loop4: detected capacity change from 0 to 256 [ 225.616736][T10188] exfat: Deprecated parameter 'utf8' [ 225.641918][T10188] exfat: Deprecated parameter 'namecase' [ 225.672200][T10188] exfat: Deprecated parameter 'utf8' [ 225.697522][T10191] netlink: 'syz.6.2409': attribute type 21 has an invalid length. [ 225.704338][T10188] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 225.730176][T10191] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.791009][T10191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 225.798423][T10191] IPv6: NLM_F_CREATE should be set when creating new route [ 225.805754][T10191] IPv6: NLM_F_CREATE should be set when creating new route [ 225.813154][T10191] IPv6: NLM_F_CREATE should be set when creating new route [ 226.101540][T10202] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 226.280441][ T4519] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 226.311834][T10208] netlink: 'syz.2.2419': attribute type 15 has an invalid length. [ 226.477341][ T4519] usb 8-1: config 0 has no interfaces? [ 226.484941][ T4519] usb 8-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 226.523685][ T4519] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.556585][ T4519] usb 8-1: Product: syz [ 226.560800][ T4519] usb 8-1: Manufacturer: syz [ 226.574867][ T4519] usb 8-1: SerialNumber: syz [ 226.599026][ T4519] r8152-cfgselector 8-1: config 0 descriptor?? [ 226.687279][T10224] netlink: 'syz.4.2425': attribute type 21 has an invalid length. [ 226.735245][T10224] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.758820][T10224] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 226.766164][T10224] IPv6: NLM_F_CREATE should be set when creating new route [ 226.773482][T10224] IPv6: NLM_F_CREATE should be set when creating new route [ 226.780784][T10224] IPv6: NLM_F_CREATE should be set when creating new route [ 226.823839][ T4519] r8152-cfgselector 8-1: Unknown version 0x00d0 [ 227.029202][ T4380] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 227.089594][T10239] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 227.117751][T10241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2430'. [ 227.124517][T10238] loop2: detected capacity change from 0 to 1764 [ 227.157066][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2430'. [ 227.218844][T10243] Invalid option length (1048180) for dns_resolver key [ 227.977328][T10275] loop4: detected capacity change from 0 to 1764 [ 228.202265][T10290] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 228.220402][ T14] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 228.264069][T10295] device hsr0 entered promiscuous mode [ 228.310338][T10295] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 228.353430][T10298] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 228.445319][ T14] usb 7-1: Using ep0 maxpacket: 8 [ 228.460273][ T14] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.505545][ T14] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 228.600725][ T14] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 228.615275][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.641266][ T14] usb 7-1: Product: syz [ 228.659151][ T14] usb 7-1: Manufacturer: syz [ 228.675214][ T14] usb 7-1: SerialNumber: syz [ 228.716027][ T14] usb 7-1: config 0 descriptor?? [ 229.133435][ T4256] usb 7-1: USB disconnect, device number 2 [ 229.253737][ T26] audit: type=1326 audit(1755785983.116:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad58ebe9 code=0x7ffc0000 [ 229.307206][T10333] netlink: 'syz.2.2471': attribute type 21 has an invalid length. [ 229.347620][T10333] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2471'. [ 229.355523][ T26] audit: type=1326 audit(1755785983.116:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fcdad58ebe9 code=0x7ffc0000 [ 229.403023][T10339] netlink: 'syz.4.2474': attribute type 10 has an invalid length. [ 229.457644][T10339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.475412][ T26] audit: type=1326 audit(1755785983.116:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10334 comm="syz.7.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdad58ebe9 code=0x7ffc0000 [ 229.497856][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.505610][ T4338] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 229.505758][T10339] device batadv0 entered promiscuous mode [ 229.515762][ T4338] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 229.536162][T10339] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 229.804409][T10353] Invalid option length (1048180) for dns_resolver key [ 230.126454][T10365] ubi0: attaching mtd0 [ 230.130944][T10365] ubi0 error: ubi_attach_mtd_dev: bad VID header (37978) or data offsets (38042) [ 230.207211][ T26] audit: type=1326 audit(1755785984.076:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad658ebe9 code=0x7ffc0000 [ 230.239512][T10341] loop7: detected capacity change from 0 to 32768 [ 230.274120][T10341] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 scanned by syz.7.2473 (10341) [ 230.316862][T10372] erofs: (device loop7): erofs_read_superblock: cannot find valid erofs superblock [ 230.319556][ T26] audit: type=1326 audit(1755785984.076:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f4ad658ebe9 code=0x7ffc0000 [ 230.445338][ T26] audit: type=1326 audit(1755785984.076:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10366 comm="syz.4.2485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ad658ebe9 code=0x7ffc0000 [ 230.518820][T10378] netlink: 'syz.6.2490': attribute type 10 has an invalid length. [ 230.585392][T10378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.603463][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2492'. [ 230.626912][T10378] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 230.872349][T10391] Invalid option length (1048180) for dns_resolver key [ 230.992567][T10399] netlink: 'syz.7.2501': attribute type 10 has an invalid length. [ 231.096076][T10399] device veth1_macvtap left promiscuous mode [ 231.138224][T10399] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 231.419122][T10416] device hsr0 entered promiscuous mode [ 231.466279][T10416] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 231.623951][T10422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2511'. [ 231.638789][T10423] xt_TCPMSS: Only works on TCP SYN packets [ 231.769406][T10426] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.819903][T10429] Invalid option length (1048180) for dns_resolver key [ 232.232626][T10446] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 232.294027][T10410] loop2: detected capacity change from 0 to 32768 [ 232.355390][T10449] netlink: 'syz.4.2525': attribute type 1 has an invalid length. [ 232.369451][T10410] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2505 (10410) [ 232.446650][T10410] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.485342][T10410] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 232.494065][T10410] BTRFS info (device loop2): using free space tree [ 232.634280][T10462] loop4: detected capacity change from 0 to 164 [ 232.995280][T10494] netlink: 'syz.6.2534': attribute type 21 has an invalid length. [ 233.021999][T10410] BTRFS info (device loop2): enabling ssd optimizations [ 233.057109][T10494] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2534'. [ 233.205730][T10503] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2539'. [ 233.217345][ T4274] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.253209][T10503] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 233.345544][ T4256] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 233.538556][ T4256] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 233.568806][ T4256] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.619548][ T4256] usb 8-1: config 0 descriptor?? [ 233.712377][ T4256] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 233.805448][T10519] autofs4:pid:10519:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 233.895294][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2546'. [ 234.060386][ T4256] gp8psk: usb in 137 operation failed. [ 234.076886][ T4256] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 234.140950][ T4256] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 234.192195][ T4256] usb 8-1: USB disconnect, device number 3 [ 234.317488][T10539] loop3: detected capacity change from 0 to 256 [ 234.528783][T10546] netlink: 'syz.2.2556': attribute type 10 has an invalid length. [ 234.836794][T10556] SET target dimension over the limit! [ 234.896625][T10558] xt_TCPMSS: Only works on TCP SYN packets [ 235.068106][T10533] loop6: detected capacity change from 0 to 32768 [ 235.142716][T10533] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.2551 (10533) [ 235.197603][T10533] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.222904][T10533] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 235.265550][T10533] BTRFS info (device loop6): using free space tree [ 235.597385][T10593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2569'. [ 235.711088][T10533] BTRFS info (device loop6): enabling ssd optimizations [ 235.718400][ T5093] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 235.721655][T10553] loop7: detected capacity change from 0 to 32768 [ 235.791606][T10606] loop3: detected capacity change from 0 to 1024 [ 235.848696][T10553] XFS (loop7): Mounting V5 Filesystem [ 235.891867][ T9407] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 235.903151][T10606] hfsplus: xattr searching failed [ 235.910871][ T5093] usb 5-1: config 0 has no interfaces? [ 235.919109][ T5093] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 235.938654][ T5093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.955185][ T5093] usb 5-1: Product: syz [ 235.961349][ T5093] usb 5-1: Manufacturer: syz [ 235.966789][ T5093] usb 5-1: SerialNumber: syz [ 235.973339][ T5093] r8152-cfgselector 5-1: config 0 descriptor?? [ 236.199904][ T5093] r8152-cfgselector 5-1: Unknown version 0x00d0 [ 236.407634][ T4256] r8152-cfgselector 5-1: USB disconnect, device number 6 [ 236.416521][T10553] XFS (loop7): Ending clean mount [ 236.474431][T10553] XFS (loop7): Quotacheck needed: Please wait. [ 236.577548][T10553] XFS (loop7): Quotacheck: Done. [ 236.765307][ T9414] XFS (loop7): Unmounting Filesystem [ 236.947373][T10645] autofs4:pid:10645:validate_dev_ioctl: invalid path supplied for cmd(0xc0189371) [ 237.085837][ T4516] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 237.279975][ T4516] usb 3-1: Using ep0 maxpacket: 8 [ 237.292715][ T4516] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 237.360670][ T4516] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 237.387298][ T4516] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 237.415076][ T4516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.431083][ T4516] usb 3-1: Product: syz [ 237.441426][ T4516] usb 3-1: Manufacturer: syz [ 237.463651][ T4516] usb 3-1: SerialNumber: syz [ 237.486061][ T4516] usb 3-1: config 0 descriptor?? [ 237.537232][ T4514] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 237.735364][ T4514] usb 5-1: Using ep0 maxpacket: 8 [ 237.747020][ T4514] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 237.771642][ T4514] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.800581][ T4514] usb 5-1: Product: syz [ 237.804870][ T4514] usb 5-1: Manufacturer: syz [ 237.842844][ T4514] usb 5-1: SerialNumber: syz [ 237.854526][T10677] loop7: detected capacity change from 0 to 256 [ 237.854761][T10679] netlink: 'syz.6.2596': attribute type 1 has an invalid length. [ 237.873534][ T4514] usb 5-1: config 0 descriptor?? [ 237.894226][ T4514] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 237.899532][T10679] netlink: 'syz.6.2596': attribute type 2 has an invalid length. [ 237.974514][ T4520] usb 3-1: USB disconnect, device number 10 [ 238.298874][ T4514] gspca_vc032x: reg_w err -71 [ 238.304874][ T4514] vc032x: probe of 5-1:0.0 failed with error -71 [ 238.334309][ T4514] usb 5-1: USB disconnect, device number 7 [ 238.404396][T10699] loop6: detected capacity change from 0 to 64 [ 238.697208][T10708] loop6: detected capacity change from 0 to 256 [ 238.753233][T10708] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 238.945360][ T4315] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 239.013302][T10718] loop7: detected capacity change from 0 to 1024 [ 239.105407][ T4520] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 239.136026][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 239.150267][ T4315] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 239.185210][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.211265][ T4315] usb 3-1: config 0 descriptor?? [ 239.233383][ T4315] gspca_main: sunplus-2.14.0 probing 041e:400b [ 239.271978][ T4368] hfsplus: b-tree write err: -5, ino 4 [ 239.296759][ T4520] usb 7-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 239.335274][ T4520] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.375688][T10725] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2614'. [ 239.392739][ T4520] usb 7-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 239.425835][ T4520] usb 7-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 239.465347][ T4520] usb 7-1: config 1 interface 1 has no altsetting 0 [ 239.486787][ T4520] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.518330][ T4520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.543560][ T4520] usb 7-1: Product: syz [ 239.564996][ T4520] usb 7-1: Manufacturer: syz [ 239.574035][ T4520] usb 7-1: SerialNumber: syz [ 239.574816][T10711] loop3: detected capacity change from 0 to 32768 [ 239.599172][ T4520] usb 7-1: selecting invalid altsetting 0 [ 239.625287][ T4520] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 239.636849][ T4315] gspca_sunplus: reg_w_riv err -71 [ 239.654411][ T4315] sunplus: probe of 3-1:0.0 failed with error -71 [ 239.682265][ T4315] usb 3-1: USB disconnect, device number 11 [ 239.775536][T10711] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 239.798932][ T4520] usb 7-1: selecting invalid altsetting 0 [ 239.814989][ T4520] usbtest: probe of 7-1:1.1 failed with error -22 [ 239.823655][ T4520] usb 7-1: USB disconnect, device number 3 [ 239.974102][ T4271] ocfs2: Unmounting device (7,3) on (node local) [ 240.034918][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 240.045292][T10748] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2621'. [ 240.302593][T10755] xt_bpf: check failed: parse error [ 240.345544][T10759] loop2: detected capacity change from 0 to 8 [ 240.613660][T10746] syz.7.2620 (10746): drop_caches: 2 [ 241.217697][T10788] loop2: detected capacity change from 0 to 164 [ 241.239882][T10787] loop3: detected capacity change from 0 to 1024 [ 241.243346][ T4520] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 241.288488][T10788] Unable to read rock-ridge attributes [ 241.445243][ T4520] usb 7-1: Using ep0 maxpacket: 8 [ 241.452405][ T4520] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 241.475249][ T4520] usb 7-1: config 2 has no interface number 0 [ 241.511580][ T4357] hfsplus: b-tree write err: -5, ino 4 [ 241.521237][ T4520] usb 7-1: config 2 interface 31 has no altsetting 0 [ 241.552769][ T4520] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 241.595597][ T4520] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.634867][ T4520] usb 7-1: Product: syz [ 241.645023][ T4520] usb 7-1: Manufacturer: syz [ 241.668399][T10803] loop2: detected capacity change from 0 to 64 [ 241.686603][ T4520] usb 7-1: SerialNumber: syz [ 241.692164][T10804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2641'. [ 241.750188][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 242.006050][T10814] x_tables: unsorted underflow at hook 1 [ 242.126816][ T4520] ch9200: probe of 7-1:2.31 failed with error -22 [ 242.155245][ T4520] usb 7-1: USB disconnect, device number 4 [ 242.248151][T10823] netlink: 'syz.2.2650': attribute type 8 has an invalid length. [ 242.275219][T10823] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2650'. [ 242.412327][T10829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2652'. [ 242.493943][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'. [ 243.255802][T10868] loop7: detected capacity change from 0 to 128 [ 243.262809][T10868] EXT4-fs: Ignoring removed nobh option [ 243.313015][T10871] xt_bpf: check failed: parse error [ 243.402251][T10868] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 243.403930][T10874] loop6: detected capacity change from 0 to 164 [ 243.428209][T10874] Unable to read rock-ridge attributes [ 243.455587][T10868] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.464655][T10879] loop3: detected capacity change from 0 to 256 [ 243.647018][ T9414] EXT4-fs (loop7): unmounting filesystem. [ 244.041469][T10901] x_tables: unsorted underflow at hook 1 [ 244.735757][T10934] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 244.759291][T10931] loop6: detected capacity change from 0 to 4096 [ 244.820265][T10931] ntfs3: loop6: Different NTFS' sector size (2048) and media sector size (512) [ 245.024754][T10943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2698'. [ 245.074864][T10943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'. [ 245.475399][ T4516] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 245.497552][T10955] loop6: detected capacity change from 0 to 8 [ 245.531410][T10958] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 245.653352][T10927] loop4: detected capacity change from 0 to 32768 [ 245.675306][ T4516] usb 8-1: Using ep0 maxpacket: 8 [ 245.694231][ T4516] usb 8-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 245.759775][T10927] XFS (loop4): Mounting V5 Filesystem [ 245.763345][ T4516] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.774366][ T4516] usb 8-1: Product: syz [ 245.795477][ T4516] usb 8-1: Manufacturer: syz [ 245.800124][ T4516] usb 8-1: SerialNumber: syz [ 245.812453][ T4516] usb 8-1: config 0 descriptor?? [ 245.847746][ T4516] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 245.881129][T10927] XFS (loop4): Ending clean mount [ 246.026569][ T4275] XFS (loop4): Unmounting Filesystem [ 246.253842][ T4516] gspca_vc032x: reg_w err -71 [ 246.275316][ T4516] vc032x: probe of 8-1:0.0 failed with error -71 [ 246.344301][ T4516] usb 8-1: USB disconnect, device number 4 [ 247.043979][T11016] netlink: 'syz.7.2723': attribute type 8 has an invalid length. [ 247.121723][T11016] netlink: 128124 bytes leftover after parsing attributes in process `syz.7.2723'. [ 247.292775][T11028] loop2: detected capacity change from 0 to 22 [ 247.360758][T11030] loop3: detected capacity change from 0 to 512 [ 247.368326][T11028] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 247.417136][T11028] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 247.469091][T11030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 247.536277][T11030] ext4 filesystem being mounted at /632/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.609523][T11039] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 247.779067][T11043] loop4: detected capacity change from 0 to 128 [ 247.821454][T11024] loop6: detected capacity change from 0 to 32768 [ 247.830785][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 247.845895][T11043] EXT4-fs: Ignoring removed nobh option [ 247.882236][T11043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 247.910022][T11043] ext4 filesystem being mounted at /612/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.959197][T11024] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 247.986031][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 248.150086][T11050] loop7: detected capacity change from 0 to 4096 [ 248.191821][T11050] ntfs3: loop7: Different NTFS' sector size (2048) and media sector size (512) [ 248.258801][ T9407] ocfs2: Unmounting device (7,6) on (node local) [ 248.399639][T11062] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 248.943343][ T14] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 249.162974][ T14] usb 8-1: Using ep0 maxpacket: 8 [ 249.175576][ T14] usb 8-1: config 2 has an invalid interface number: 31 but max is 0 [ 249.204090][ T14] usb 8-1: config 2 has no interface number 0 [ 249.216159][T11084] xt_ecn: cannot match TCP bits for non-tcp packets [ 249.224422][ T14] usb 8-1: config 2 interface 31 has no altsetting 0 [ 249.246874][ T14] usb 8-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 249.265221][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.283531][ T14] usb 8-1: Product: syz [ 249.288306][ T14] usb 8-1: Manufacturer: syz [ 249.293044][ T14] usb 8-1: SerialNumber: syz [ 249.363074][T11060] loop3: detected capacity change from 0 to 40427 [ 249.395439][ T4315] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 249.404861][T11060] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 249.454204][T11060] F2FS-fs (loop3): invalid crc value [ 249.475657][T11060] F2FS-fs (loop3): Found nat_bits in checkpoint [ 249.586014][T11060] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.625286][ T4315] usb 7-1: Using ep0 maxpacket: 32 [ 249.632351][ T4315] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 249.665377][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.710388][ T4315] usb 7-1: config 0 descriptor?? [ 249.747078][ T4315] gspca_main: sunplus-2.14.0 probing 041e:400b [ 249.760276][ T14] ch9200: probe of 8-1:2.31 failed with error -22 [ 249.815663][ T14] usb 8-1: USB disconnect, device number 5 [ 249.975081][T11098] loop2: detected capacity change from 0 to 4096 [ 249.988385][T11101] x_tables: ip_tables: osf match: only valid for protocol 6 [ 250.006977][T11098] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 250.143916][ T4315] gspca_sunplus: reg_w_riv err -71 [ 250.153517][ T4315] sunplus: probe of 7-1:0.0 failed with error -71 [ 250.189174][ T4315] usb 7-1: USB disconnect, device number 5 [ 250.429691][T11111] loop4: detected capacity change from 0 to 64 [ 250.733063][T11120] loop2: detected capacity change from 0 to 256 [ 250.751822][T11119] loop4: detected capacity change from 0 to 256 [ 250.790150][T11119] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 251.163810][T11133] program syz.3.2774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.173428][ T8751] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 251.228516][T11137] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2776'. [ 251.255472][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2776'. [ 251.367499][ T8751] usb 5-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 251.388754][ T8751] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.412461][ T8751] usb 5-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 251.437747][ T8751] usb 5-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 251.485423][ T8751] usb 5-1: config 1 interface 1 has no altsetting 0 [ 251.513976][ T8751] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 251.514007][ T8751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.514026][ T8751] usb 5-1: Product: syz [ 251.514039][ T8751] usb 5-1: Manufacturer: syz [ 251.514052][ T8751] usb 5-1: SerialNumber: syz [ 251.519804][ T8751] usb 5-1: selecting invalid altsetting 0 [ 251.519933][ T8751] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 251.726580][ T8751] usb 5-1: selecting invalid altsetting 0 [ 251.732729][ T8751] usbtest: probe of 5-1:1.1 failed with error -22 [ 251.756230][T11153] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2784'. [ 251.784460][ T8751] usb 5-1: USB disconnect, device number 8 [ 252.165459][T11171] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744071562330114) [ 252.205326][T11171] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 252.300858][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2796'. [ 252.453605][T11183] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2797'. [ 252.453641][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2797'. [ 252.548768][T11189] xt_ecn: cannot match TCP bits for non-tcp packets [ 252.935593][T11201] loop2: detected capacity change from 0 to 512 [ 253.016364][T11201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 253.021626][T11208] loop7: detected capacity change from 0 to 256 [ 253.059955][T11201] ext4 filesystem being mounted at /604/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.070646][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2809'. [ 253.070666][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2809'. [ 253.120384][T11208] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 253.249333][T11213] loop3: detected capacity change from 0 to 22 [ 253.287392][T11214] xt_TCPMSS: Only works on TCP SYN packets [ 253.306318][T11213] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 253.416495][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 253.455252][T11213] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 253.495218][ T4516] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 253.661852][T11195] loop6: detected capacity change from 0 to 32768 [ 253.678037][ T4516] usb 8-1: config 1 has an invalid descriptor of length 212, skipping remainder of the config [ 253.710329][ T4516] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.777696][T11229] loop4: detected capacity change from 0 to 16 [ 253.799410][T11229] erofs: (device loop4): mounted with root inode @ nid 36. [ 253.814940][T11229] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 253.827081][T11229] erofs: (device loop4): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 253.837247][T11229] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 253.843495][ T4516] usb 8-1: too many endpoints for config 1 interface 1 altsetting 78: 168, using maximum allowed: 30 [ 253.905045][ T4516] usb 8-1: config 1 interface 1 altsetting 78 has 0 endpoint descriptors, different from the interface descriptor's value: 168 [ 253.971079][ T4516] usb 8-1: config 1 interface 1 has no altsetting 0 [ 253.992288][ T4516] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.001685][T11195] XFS (loop6): Mounting V5 Filesystem [ 254.019861][ T4516] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.103216][T11242] loop4: detected capacity change from 0 to 256 [ 254.120344][ T4516] usb 8-1: Product: syz [ 254.151287][ T4516] usb 8-1: Manufacturer: syz [ 254.162577][ T4516] usb 8-1: SerialNumber: syz [ 254.197896][T11195] XFS (loop6): Ending clean mount [ 254.205059][ T4516] usb 8-1: selecting invalid altsetting 0 [ 254.221462][ T4516] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 254.238984][T11242] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 254.388870][ T9407] XFS (loop6): Unmounting Filesystem [ 254.406527][ T4516] usb 8-1: selecting invalid altsetting 0 [ 254.412621][ T4516] usbtest: probe of 8-1:1.1 failed with error -22 [ 254.459307][ T4516] usb 8-1: USB disconnect, device number 6 [ 254.781355][T11259] netlink: 'syz.3.2832': attribute type 2 has an invalid length. [ 255.560088][T11288] tmpfs: Bad value for 'mpol' [ 255.637312][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2848'. [ 255.649895][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.657241][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.750440][T11297] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2850'. [ 256.815439][T11337] xt_l2tp: missing protocol rule (udp|l2tpip) [ 256.919170][T11300] syz.4.2851 (11300): drop_caches: 2 [ 256.998855][T11346] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2873'. [ 257.037493][T11349] loop3: detected capacity change from 0 to 24 [ 257.060292][T11349] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 257.107037][T11349] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 257.265438][T11356] loop2: detected capacity change from 0 to 16 [ 257.315550][T11356] erofs: (device loop2): mounted with root inode @ nid 36. [ 257.337952][T11356] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 257.425594][T11356] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 65535 [ 257.466092][T11356] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 257.559608][T11367] loop6: detected capacity change from 0 to 256 [ 257.661251][T11372] netlink: 'syz.4.2888': attribute type 2 has an invalid length. [ 257.919892][T11381] loop4: detected capacity change from 0 to 256 [ 258.291303][T11374] syz.3.2887 (11374): drop_caches: 2 [ 258.820796][T11408] tmpfs: Bad value for 'mpol' [ 258.828393][T11410] overlayfs: './file0' not a directory [ 259.049756][T11422] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2911'. [ 259.404024][T11439] xt_l2tp: missing protocol rule (udp|l2tpip) [ 259.545876][T11444] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744071562330114) [ 259.585318][T11444] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 260.256691][T11471] loop2: detected capacity change from 0 to 4096 [ 260.313957][T11471] ntfs: volume version 3.1. [ 260.466716][T11487] loop4: detected capacity change from 0 to 24 [ 260.521625][T11487] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 260.559211][T11489] netlink: 'syz.6.2943': attribute type 1 has an invalid length. [ 260.643543][T11487] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 261.006127][T11504] loop4: detected capacity change from 0 to 256 [ 261.499205][T11518] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 261.545865][T11518] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 261.619105][T11518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.890884][T11527] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2960'. [ 262.004706][T11498] loop2: detected capacity change from 0 to 40427 [ 262.063630][T11498] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 262.134794][T11498] F2FS-fs (loop2): invalid crc value [ 262.151960][T11498] F2FS-fs (loop2): Found nat_bits in checkpoint [ 262.344763][T11498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 262.351147][T11540] loop3: detected capacity change from 0 to 256 [ 263.585092][T11581] loop6: detected capacity change from 0 to 4096 [ 263.636014][T11581] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512) [ 263.712438][T11595] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 264.043447][T11599] loop6: detected capacity change from 0 to 4096 [ 264.403865][T11599] ntfs: volume version 3.1. [ 264.427726][T11613] loop3: detected capacity change from 0 to 128 [ 264.580663][T11593] loop7: detected capacity change from 0 to 32768 [ 264.707832][T11605] syz.2.2996 (11605): drop_caches: 2 [ 264.739667][T11593] ea_get: invalid extended attribute [ 264.749274][T11613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 264.768107][T11593] ffff888072025fb0: 04 00 00 00 .... [ 264.778517][T11613] ext4 filesystem being mounted at /693/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.917020][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 265.545456][T11647] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 265.589528][T11647] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 265.715623][T11647] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.175661][T11676] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 266.467806][T11690] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 266.500239][T11690] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 266.595654][T11690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 266.656996][T11693] device bond4 entered promiscuous mode [ 266.695364][ T4315] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 266.695619][T11693] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.715221][T11699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3041'. [ 266.885295][ T4315] usb 7-1: Using ep0 maxpacket: 32 [ 266.894790][ T4315] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 266.921442][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.952105][ T4315] usb 7-1: config 0 descriptor?? [ 267.001208][ T4315] gspca_main: sq930x-2.14.0 probing 041e:403c [ 267.169748][ T4315] gspca_sq930x: reg_r 001f failed -71 [ 267.175935][ T4315] sq930x: probe of 7-1:0.0 failed with error -71 [ 267.186686][T11717] loop4: detected capacity change from 0 to 4096 [ 267.195594][ T4315] usb 7-1: USB disconnect, device number 6 [ 267.229672][T11717] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 267.963138][ T26] audit: type=1107 audit(1755786021.826:192): pid=11747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 268.232266][T11762] netlink: 'syz.3.3071': attribute type 1 has an invalid length. [ 268.337758][T11762] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3071'. [ 268.485316][ T4520] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 268.579986][T11775] loop2: detected capacity change from 0 to 4096 [ 268.614287][T11775] ntfs3: loop2: ino=3, Correct links count -> 2. [ 268.622370][T11775] ntfs3: loop2: Failed to load $Volume. [ 268.683112][ T4520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.710405][ T4520] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.741107][ T4520] usb 5-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00 [ 268.792340][ T4520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.832532][ T4520] usb 5-1: config 0 descriptor?? [ 269.055804][ T4520] usbhid 5-1:0.0: can't add hid device: -71 [ 269.061932][ T4520] usbhid: probe of 5-1:0.0 failed with error -71 [ 269.084966][ T4520] usb 5-1: USB disconnect, device number 9 [ 269.142740][T11770] loop6: detected capacity change from 0 to 32768 [ 269.160378][T11770] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.3075 (11770) [ 269.203093][T11770] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 269.223375][T11770] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 269.233251][T11770] BTRFS info (device loop6): enabling auto defrag [ 269.270187][T11770] BTRFS info (device loop6): doing ref verification [ 269.309343][T11770] BTRFS info (device loop6): use no compression [ 269.320584][T11770] BTRFS info (device loop6): force clearing of disk cache [ 269.349718][T11770] BTRFS info (device loop6): max_inline at 4096 [ 269.369077][T11770] BTRFS info (device loop6): disabling free space tree [ 269.499454][T11808] netlink: 'syz.2.3089': attribute type 21 has an invalid length. [ 269.641946][T11770] BTRFS info (device loop6): enabling ssd optimizations [ 269.682180][T11770] BTRFS info (device loop6): rebuilding free space tree [ 269.729564][T11770] BTRFS info (device loop6): disabling free space tree [ 269.738372][T11770] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 269.758581][T11770] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 269.840112][T11828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3092'. [ 270.014319][ T9407] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 270.296719][T11837] loop7: detected capacity change from 0 to 4096 [ 270.384311][T11837] ntfs: volume version 3.1. [ 270.482050][T11851] netlink: 'syz.3.3104': attribute type 11 has an invalid length. [ 271.102086][T11875] loop7: detected capacity change from 0 to 256 [ 271.287408][T11882] netlink: 'syz.4.3115': attribute type 1 has an invalid length. [ 271.354012][T11882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3115'. [ 271.430891][T11884] Scaler: ================= START STATUS ================= [ 271.470334][T11884] Scaler: ================== END STATUS ================== [ 271.917012][T11903] loop2: detected capacity change from 0 to 256 [ 271.924845][T11909] loop7: detected capacity change from 0 to 8 [ 272.050770][T11903] FAT-fs (loop2): Directory bread(block 64) failed [ 272.077334][T11909] SQUASHFS error: lzo decompression failed, data probably corrupt [ 272.096847][T11903] FAT-fs (loop2): Directory bread(block 65) failed [ 272.103530][T11903] FAT-fs (loop2): Directory bread(block 66) failed [ 272.116617][T11909] SQUASHFS error: Failed to read block 0x0: -5 [ 272.133351][T11903] FAT-fs (loop2): Directory bread(block 67) failed [ 272.147338][T11903] FAT-fs (loop2): Directory bread(block 68) failed [ 272.153939][T11909] SQUASHFS error: lzo decompression failed, data probably corrupt [ 272.178186][T11909] SQUASHFS error: Failed to read block 0x0: -5 [ 272.185857][ T26] audit: type=1800 audit(1755786026.046:193): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3132" name="file2" dev="loop7" ino=3 res=0 errno=0 [ 272.212794][T11903] FAT-fs (loop2): Directory bread(block 69) failed [ 272.239476][T11903] FAT-fs (loop2): Directory bread(block 70) failed [ 272.258203][T11903] FAT-fs (loop2): Directory bread(block 71) failed [ 272.294919][T11903] FAT-fs (loop2): Directory bread(block 72) failed [ 272.326526][T11903] FAT-fs (loop2): Directory bread(block 73) failed [ 272.501082][T11916] syz.6.3122 (11916): drop_caches: 2 [ 272.507481][T11924] loop3: detected capacity change from 0 to 64 [ 272.706890][T11930] loop2: detected capacity change from 0 to 128 [ 273.038955][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3137'. [ 273.361170][T11954] netlink: 'syz.3.3143': attribute type 21 has an invalid length. [ 273.374472][T11955] loop4: detected capacity change from 0 to 1024 [ 273.759426][T11967] netlink: 'syz.7.3148': attribute type 11 has an invalid length. [ 273.916495][T11965] loop4: detected capacity change from 0 to 4096 [ 274.005988][T11965] ntfs: volume version 3.1. [ 274.108933][T11976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3152'. [ 274.300209][T11946] loop2: detected capacity change from 0 to 32768 [ 274.401584][T11946] ea_get: invalid extended attribute [ 274.425439][T11946] ffff888056682830: 04 00 00 00 .... [ 274.705328][ T4315] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 274.898365][T11996] loop4: detected capacity change from 0 to 4096 [ 274.902540][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 274.933629][ T4315] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 274.960913][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.980495][T11996] ntfs3: loop4: ino=3, Correct links count -> 2. [ 275.024747][T11996] ntfs3: loop4: Failed to load $Volume. [ 275.034028][ T4315] usb 4-1: config 0 descriptor?? [ 275.067793][ T4315] gspca_main: sq930x-2.14.0 probing 041e:403c [ 275.116924][T12005] syz.2.3163 (12005): drop_caches: 2 [ 275.270036][ T4315] gspca_sq930x: reg_r 001f failed -71 [ 275.278046][ T4315] sq930x: probe of 4-1:0.0 failed with error -71 [ 275.329598][ T4315] usb 4-1: USB disconnect, device number 11 [ 275.549265][T12015] loop2: detected capacity change from 0 to 4096 [ 275.613522][T12015] ntfs: volume version 3.1. [ 276.048661][T12034] syz.3.3176 (12034): drop_caches: 2 [ 276.598005][T12043] loop6: detected capacity change from 0 to 4096 [ 276.717309][T12043] ntfs3: loop6: ino=3, Correct links count -> 2. [ 276.803572][T12043] ntfs3: loop6: Failed to load $Volume. [ 277.140856][T12039] loop4: detected capacity change from 0 to 32768 [ 277.209108][T12067] syz.2.3192 (12067): drop_caches: 2 [ 277.454028][T12075] netlink: 'syz.7.3207': attribute type 1 has an invalid length. [ 277.494374][T12075] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.3207'. [ 277.991513][T12096] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3206'. [ 278.069693][T12096] 0ªX¹¦À: renamed from caif0 [ 278.095765][T12096] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 279.017298][T12134] loop2: detected capacity change from 0 to 2048 [ 279.145286][T12143] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 279.253689][T12134] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 279.402541][T12134] Remounting filesystem read-only [ 279.426170][T12134] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16) [ 279.474153][T12134] NILFS (loop2): error -5 truncating bmap (ino=16) [ 279.621016][ T4274] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer [ 279.800562][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3233'. [ 280.351220][T12151] loop3: detected capacity change from 0 to 32768 [ 280.414888][T12154] loop7: detected capacity change from 0 to 32768 [ 280.458796][T12154] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.3231 (12154) [ 280.486150][T12151] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 280.517145][T12151] XFS (loop3): Mounting V5 Filesystem [ 280.565633][T12154] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 280.688000][T12154] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 280.705467][T12154] BTRFS info (device loop7): using free space tree [ 280.707452][T12151] XFS (loop3): Ending clean mount [ 280.880738][T12151] XFS (loop3): Quotacheck needed: Please wait. [ 280.995466][T12154] BTRFS info (device loop7): enabling ssd optimizations [ 281.002673][T12151] XFS (loop3): Quotacheck: Done. [ 281.016096][T12165] loop4: detected capacity change from 0 to 32768 [ 281.148142][T12165] read_mapping_page failed! [ 281.153257][T12165] ialloc: diAlloc returned -5! [ 281.207304][ T9414] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 281.486750][T12214] IPv6: Can't replace route, no match found [ 281.495914][ T4271] XFS (loop3): Unmounting Filesystem [ 281.539680][T12216] netlink: 'syz.2.3250': attribute type 1 has an invalid length. [ 281.612566][T12216] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3250'. [ 282.254334][T12243] netlink: 'syz.4.3258': attribute type 1 has an invalid length. [ 282.299885][T12243] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3258'. [ 283.093731][T12270] loop3: detected capacity change from 0 to 256 [ 283.162529][T12270] FAT-fs (loop3): Directory bread(block 64) failed [ 283.180592][T12270] FAT-fs (loop3): Directory bread(block 65) failed [ 283.245879][T12270] FAT-fs (loop3): Directory bread(block 66) failed [ 283.252503][T12270] FAT-fs (loop3): Directory bread(block 67) failed [ 283.305275][T12270] FAT-fs (loop3): Directory bread(block 68) failed [ 283.348268][T12270] FAT-fs (loop3): Directory bread(block 69) failed [ 283.375841][T12270] FAT-fs (loop3): Directory bread(block 70) failed [ 283.382465][T12270] FAT-fs (loop3): Directory bread(block 71) failed [ 283.416485][T12270] FAT-fs (loop3): Directory bread(block 72) failed [ 283.422183][T12250] loop2: detected capacity change from 0 to 32768 [ 283.423059][T12270] FAT-fs (loop3): Directory bread(block 73) failed [ 283.478185][T12250] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.3260 (12250) [ 283.538328][T12288] loop6: detected capacity change from 0 to 128 [ 283.601778][T12250] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 283.653864][T12288] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 283.677068][T12288] ext4 filesystem being mounted at /175/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 283.691414][T12250] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 283.735652][T12250] BTRFS info (device loop2): enabling auto defrag [ 283.740245][T12288] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 1029 (only 1 groups) [ 283.765207][T12250] BTRFS info (device loop2): doing ref verification [ 283.808188][T12294] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3280'. [ 283.838344][T12250] BTRFS info (device loop2): use no compression [ 283.844992][T12250] BTRFS info (device loop2): force clearing of disk cache [ 283.901504][T12294] 0ªX¹¦À: renamed from caif0 [ 283.913598][T12250] BTRFS info (device loop2): max_inline at 4096 [ 283.927481][T12294] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 283.928719][ T9407] EXT4-fs (loop6): unmounting filesystem. [ 283.950873][T12250] BTRFS info (device loop2): disabling free space tree [ 284.255352][T12250] BTRFS info (device loop2): enabling ssd optimizations [ 284.269631][T12250] BTRFS info (device loop2): rebuilding free space tree [ 284.295905][T12287] loop4: detected capacity change from 0 to 32768 [ 284.325337][T12287] jfs_strtoUCS: char2uni returned -22. [ 284.362632][T12250] BTRFS info (device loop2): disabling free space tree [ 284.367636][T12287] charset = iso8859-6, char = 0xfc [ 284.390187][T12250] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 284.445906][T12250] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 284.448077][T12323] loop6: detected capacity change from 0 to 764 [ 284.518744][T12323] rock: directory entry would overflow storage [ 284.570961][T12323] rock: sig=0x4654, size=5, remaining=4 [ 284.798229][T12330] loop7: detected capacity change from 0 to 2048 [ 284.853756][ T4274] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 284.872290][T12332] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 284.921884][T12330] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 285.090737][T12330] Remounting filesystem read-only [ 285.126395][T12330] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16) [ 285.147968][T12339] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3294'. [ 285.165626][T12330] NILFS (loop7): error -5 truncating bmap (ino=16) [ 285.185504][T12339] 0ªX¹¦À: renamed from caif0 [ 285.444888][ T9414] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer [ 285.479828][T12339] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 286.373774][T12369] loop3: detected capacity change from 0 to 4096 [ 286.416860][T12369] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 286.443083][T12371] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3306'. [ 286.475873][T12371] netlink: 'syz.6.3306': attribute type 1 has an invalid length. [ 286.504117][T12371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3306'. [ 286.594468][T12369] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 286.635611][T12355] loop2: detected capacity change from 0 to 32768 [ 286.635826][T12361] loop7: detected capacity change from 0 to 32768 [ 286.734326][T12361] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.3302 (12361) [ 286.785000][T12355] XFS (loop2): Mounting V5 Filesystem [ 286.803497][T12361] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 286.815664][T12361] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 286.841456][T12365] loop4: detected capacity change from 0 to 32768 [ 286.844045][T12361] BTRFS info (device loop7): enabling auto defrag [ 286.878864][T12361] BTRFS info (device loop7): doing ref verification [ 286.885703][T12361] BTRFS info (device loop7): use no compression [ 286.892660][T12361] BTRFS info (device loop7): force clearing of disk cache [ 286.900392][T12361] BTRFS info (device loop7): max_inline at 4096 [ 286.956088][T12355] XFS (loop2): totally zeroed log [ 286.962173][T12365] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 286.973631][T12355] XFS (loop2): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 287.005420][T12361] BTRFS info (device loop7): disabling free space tree [ 287.016405][T12365] XFS (loop4): Mounting V5 Filesystem [ 287.042588][T12355] XFS (loop2): log mount/recovery failed: error -22 [ 287.070386][T12396] program syz.3.3308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.162005][T12365] XFS (loop4): Ending clean mount [ 287.188589][T12355] XFS (loop2): log mount failed [ 287.195869][T12365] XFS (loop4): Quotacheck needed: Please wait. [ 287.305528][T12361] BTRFS info (device loop7): enabling ssd optimizations [ 287.337150][T12361] BTRFS info (device loop7): rebuilding free space tree [ 287.438117][T12361] BTRFS info (device loop7): disabling free space tree [ 287.445424][T12361] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 287.455842][T12361] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 287.467567][T12365] XFS (loop4): Quotacheck: Done. [ 287.632062][ T4275] XFS (loop4): Unmounting Filesystem [ 287.813492][ T9414] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 288.206588][T12426] loop3: detected capacity change from 0 to 1764 [ 288.259096][T12426] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 288.567380][T12430] loop6: detected capacity change from 0 to 4096 [ 288.619057][T12430] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 288.823088][T12430] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 288.875256][T12439] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 289.087794][T12444] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3311'. [ 289.136825][T12444] 0ªX¹¦À: renamed from caif0 [ 289.177435][T12444] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 289.658050][T12470] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3339'. [ 289.708678][T12470] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3339'. [ 290.152596][T12489] usb usb8: usbfs: process 12489 (syz.7.3357) did not claim interface 0 before use [ 290.163483][T12493] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3346'. [ 290.174601][T12494] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3347'. [ 290.182810][T12493] 0ªX¹¦À: renamed from caif0 [ 290.197029][T12494] netlink: 'syz.3.3347': attribute type 1 has an invalid length. [ 290.222881][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3347'. [ 290.236915][T12493] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 290.588283][T12507] program syz.6.3353 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.946829][T12527] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3375'. [ 290.969425][T12527] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3375'. [ 291.655725][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3380'. [ 291.924129][T12559] netlink: 'syz.6.3380': attribute type 1 has an invalid length. [ 291.940160][T12559] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3380'. [ 292.527936][T12584] loop6: detected capacity change from 0 to 256 [ 292.573639][T12564] loop3: detected capacity change from 0 to 32768 [ 292.594260][T12564] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3382 (12564) [ 292.600252][T12587] device ip6gretap2 entered promiscuous mode [ 292.654437][T12564] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 292.667669][T12584] FAT-fs (loop6): Directory bread(block 64) failed [ 292.679881][T12584] FAT-fs (loop6): Directory bread(block 65) failed [ 292.703632][T12564] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 292.712711][T12584] FAT-fs (loop6): Directory bread(block 66) failed [ 292.752179][T12584] FAT-fs (loop6): Directory bread(block 67) failed [ 292.759008][T12564] BTRFS info (device loop3): enabling auto defrag [ 292.775508][T12584] FAT-fs (loop6): Directory bread(block 68) failed [ 292.791944][T12564] BTRFS info (device loop3): doing ref verification [ 292.799890][T12584] FAT-fs (loop6): Directory bread(block 69) failed [ 292.815004][T12564] BTRFS info (device loop3): use no compression [ 292.849330][T12584] FAT-fs (loop6): Directory bread(block 70) failed [ 292.856865][T12564] BTRFS info (device loop3): force clearing of disk cache [ 292.876480][T12584] FAT-fs (loop6): Directory bread(block 71) failed [ 292.883170][T12584] FAT-fs (loop6): Directory bread(block 72) failed [ 292.900235][T12564] BTRFS info (device loop3): max_inline at 4096 [ 292.920477][T12564] BTRFS info (device loop3): disabling free space tree [ 292.940772][T12584] FAT-fs (loop6): Directory bread(block 73) failed [ 292.979112][T12596] netlink: 'syz.7.3395': attribute type 10 has an invalid length. [ 292.997638][T12567] loop2: detected capacity change from 0 to 32768 [ 293.043887][T12596] team0: Port device dummy0 added [ 293.138862][T12567] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 293.168131][T12567] XFS (loop2): Mounting V5 Filesystem [ 293.389319][T12564] BTRFS info (device loop3): enabling ssd optimizations [ 293.428342][T12567] XFS (loop2): Ending clean mount [ 293.436801][T12564] BTRFS info (device loop3): rebuilding free space tree [ 293.455815][T12567] XFS (loop2): Quotacheck needed: Please wait. [ 293.529699][T12567] XFS (loop2): Quotacheck: Done. [ 293.565748][T12564] BTRFS info (device loop3): disabling free space tree [ 293.595492][T12564] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 293.603301][T12631] loop7: detected capacity change from 0 to 4096 [ 293.615789][T12564] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 293.658812][T12631] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512) [ 293.705285][T12345] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 293.733817][ T4274] XFS (loop2): Unmounting Filesystem [ 293.813826][T12631] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 293.905287][T12345] usb 5-1: Using ep0 maxpacket: 8 [ 293.912370][T12345] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 293.946268][T12345] usb 5-1: config 6 has no interface number 0 [ 293.956572][T12345] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 293.966063][ T4271] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 293.975156][T12345] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 294.023624][T12345] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 294.033385][T12345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.051162][T12345] usb 5-1: Product: syz [ 294.055595][T12345] usb 5-1: Manufacturer: syz [ 294.061455][T12345] usb 5-1: SerialNumber: syz [ 294.105503][T12345] hso 5-1:6.2: Failed to find INT IN ep [ 294.300275][T12345] usb 5-1: USB disconnect, device number 10 [ 294.449277][T12636] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 294.516043][T12633] loop6: detected capacity change from 0 to 32768 [ 294.539097][T12633] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.3401 (12633) [ 294.579073][T12633] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 294.622200][T12633] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 294.665920][T12633] BTRFS info (device loop6): using free space tree [ 295.203830][T12633] BTRFS info (device loop6): enabling ssd optimizations [ 295.335551][ T9407] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 295.627239][T12686] loop2: detected capacity change from 0 to 512 [ 295.667808][T12686] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.700592][T12686] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.735386][T12686] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 295.770120][T12686] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 295.874425][T12686] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3841: comm syz.2.3418: Allocating blocks 41-42 which overlap fs metadata [ 295.950036][T12686] Quota error (device loop2): write_blk: dquota write failed [ 295.965359][T12686] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 295.978207][T12686] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 295.980195][T12693] sctp: [Deprecated]: syz.6.3415 (pid 12693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.980195][T12693] Use struct sctp_sack_info instead [ 295.989284][T12686] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.3418: Failed to acquire dquot type 1 [ 296.019020][T12686] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 296.031323][T12676] loop7: detected capacity change from 0 to 32768 [ 296.069601][T12686] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #12: comm syz.2.3418: corrupted inode contents [ 296.111271][T12676] jfs_strtoUCS: char2uni returned -22. [ 296.126470][T12676] charset = iso8859-6, char = 0xfc [ 296.158813][T12686] EXT4-fs error (device loop2): ext4_dirty_inode:6119: inode #12: comm syz.2.3418: mark_inode_dirty error [ 296.204115][T12686] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #12: comm syz.2.3418: corrupted inode contents [ 296.274466][T12686] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #12: comm syz.2.3418: mark_inode_dirty error [ 296.310162][T12695] loop3: detected capacity change from 0 to 4096 [ 296.332752][T12686] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #12: comm syz.2.3418: corrupted inode contents [ 296.379070][T12686] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 296.384316][T12695] EXT4-fs: inline encryption not supported [ 296.432990][T12686] EXT4-fs error (device loop2): ext4_do_update_inode:5254: inode #12: comm syz.2.3418: corrupted inode contents [ 296.452003][T12701] loop4: detected capacity change from 0 to 1024 [ 296.479117][T12686] EXT4-fs error (device loop2): ext4_truncate:4312: inode #12: comm syz.2.3418: mark_inode_dirty error [ 296.480586][T12695] EXT4-fs (loop3): Test dummy encryption mode enabled [ 296.492351][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3423'. [ 296.529854][T12686] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 296.540271][T12701] EXT4-fs (loop4): orphan cleanup on readonly fs [ 296.598506][T12701] EXT4-fs (loop4): 1 truncate cleaned up [ 296.615308][T12686] EXT4-fs (loop2): 1 truncate cleaned up [ 296.617083][T12695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.621360][T12686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 296.740722][T12701] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.922999][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 296.930412][ T9601] Quota error (device loop2): remove_tree: Cycle in quota tree detected: block 4 index 0 [ 296.952034][ T4275] EXT4-fs (loop4): unmounting filesystem. [ 296.956708][ T9601] EXT4-fs error (device loop2): ext4_release_dquot:6850: comm kworker/u4:8: Failed to release dquot type 1 [ 297.053368][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 297.173422][T12712] [U] ^C [ 297.721417][T12741] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 298.025322][ T4518] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 298.215479][ T4518] usb 5-1: Using ep0 maxpacket: 32 [ 298.223072][ T4518] usb 5-1: unable to get BOS descriptor or descriptor too short [ 298.232301][ T4518] usb 5-1: config 7 has an invalid interface number: 128 but max is 0 [ 298.241159][ T4518] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 298.250170][ T4518] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 298.260829][ T4518] usb 5-1: config 7 has no interface number 0 [ 298.267435][ T4518] usb 5-1: config 7 interface 128 altsetting 2 has an invalid endpoint with address 0x17, skipping [ 298.281296][ T4518] usb 5-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 298.293123][ T4518] usb 5-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 298.306504][ T4518] usb 5-1: config 7 interface 128 has no altsetting 0 [ 298.315776][ T4518] usb 5-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 298.324926][ T4518] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.333371][ T4518] usb 5-1: Product: syz [ 298.337735][ T4518] usb 5-1: Manufacturer: syz [ 298.342400][ T4518] usb 5-1: SerialNumber: syz [ 298.349318][T12744] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 298.569733][ T4518] usb 5-1: MIDIStreaming interface descriptor not found [ 298.617202][ T4518] usb 5-1: USB disconnect, device number 11 [ 298.868339][ T4259] udevd[4259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 299.678760][T12785] loop2: detected capacity change from 0 to 256 [ 299.761696][T12785] FAT-fs (loop2): Directory bread(block 64) failed [ 299.781257][T12785] FAT-fs (loop2): Directory bread(block 65) failed [ 299.828490][T12785] FAT-fs (loop2): Directory bread(block 66) failed [ 299.862244][T12785] FAT-fs (loop2): Directory bread(block 67) failed [ 299.882294][T12785] FAT-fs (loop2): Directory bread(block 68) failed [ 299.915420][T12785] FAT-fs (loop2): Directory bread(block 69) failed [ 299.980486][T12785] FAT-fs (loop2): Directory bread(block 70) failed [ 300.018576][T12785] FAT-fs (loop2): Directory bread(block 71) failed [ 300.036143][T12785] FAT-fs (loop2): Directory bread(block 72) failed [ 300.045230][T12785] FAT-fs (loop2): Directory bread(block 73) failed [ 300.083912][T12767] loop4: detected capacity change from 0 to 32768 [ 300.099912][T12767] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.3446 (12767) [ 300.210092][T12767] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 300.232585][T12767] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 300.270185][T12767] BTRFS info (device loop4): enabling auto defrag [ 300.288777][T12767] BTRFS info (device loop4): doing ref verification [ 300.325748][T12767] BTRFS info (device loop4): use no compression [ 300.345371][T12767] BTRFS info (device loop4): force clearing of disk cache [ 300.352600][T12767] BTRFS info (device loop4): max_inline at 4096 [ 300.386329][T12767] BTRFS info (device loop4): disabling free space tree [ 300.685563][T12767] BTRFS info (device loop4): enabling ssd optimizations [ 300.720312][T12824] loop3: detected capacity change from 0 to 256 [ 300.768948][T12767] BTRFS info (device loop4): rebuilding free space tree [ 300.813028][T12767] BTRFS info (device loop4): disabling free space tree [ 300.841032][T12767] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 300.898729][T12767] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 301.068561][T12838] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 301.162309][T12838] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 301.204502][T12842] loop3: detected capacity change from 0 to 256 [ 301.213695][T12838] overlayfs: missing 'lowerdir' [ 301.231335][ T4275] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 301.346655][T12842] FAT-fs (loop3): Directory bread(block 64) failed [ 301.398131][T12842] FAT-fs (loop3): Directory bread(block 65) failed [ 301.423774][T12842] FAT-fs (loop3): Directory bread(block 66) failed [ 301.455264][ T4640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop4 scanned by udevd (4640) [ 301.496056][T12842] FAT-fs (loop3): Directory bread(block 67) failed [ 301.503072][T12842] FAT-fs (loop3): Directory bread(block 68) failed [ 301.525449][T12842] FAT-fs (loop3): Directory bread(block 69) failed [ 301.532119][T12842] FAT-fs (loop3): Directory bread(block 70) failed [ 301.555293][T12842] FAT-fs (loop3): Directory bread(block 71) failed [ 301.596099][T12842] FAT-fs (loop3): Directory bread(block 72) failed [ 301.631848][T12842] FAT-fs (loop3): Directory bread(block 73) failed [ 301.918689][T12856] loop6: detected capacity change from 0 to 1024 [ 302.068249][T12856] syz.6.3485: attempt to access beyond end of device [ 302.068249][T12856] loop6: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 302.135233][T12856] Buffer I/O error on dev loop6, logical block 100663296, async page read [ 302.170938][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3487'. [ 302.178947][T12856] syz.6.3485: attempt to access beyond end of device [ 302.178947][T12856] loop6: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 302.256162][T12862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3487'. [ 302.264806][T12856] Buffer I/O error on dev loop6, logical block 100663296, async page read [ 302.484387][T12870] loop2: detected capacity change from 0 to 128 [ 303.074071][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 303.124128][T12893] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3501'. [ 303.472736][T12912] loop3: detected capacity change from 0 to 764 [ 303.579057][T12912] Symlink component flag not implemented [ 303.626440][T12912] Symlink component flag not implemented [ 303.665249][T12912] Symlink component flag not implemented (128) [ 303.691843][T12912] Symlink component flag not implemented (122) [ 303.874450][T12927] binder: 12924:12927 unknown command 0 [ 303.885531][T12927] binder: 12924:12927 ioctl c0306201 200000000480 returned -22 [ 303.993215][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 304.031461][T12933] loop3: detected capacity change from 0 to 512 [ 304.055897][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 304.149507][T12941] loop7: detected capacity change from 0 to 128 [ 304.156061][T12933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 304.225790][T12933] System zones: 0-2, 18-18, 34-34 [ 304.299030][T12933] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3521: bg 0: block 248: padding at end of block bitmap is not set [ 304.361612][T12933] Quota error (device loop3): write_blk: dquota write failed [ 304.395446][T12933] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 304.427942][T12933] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.3521: Failed to acquire dquot type 1 [ 304.507991][T12933] EXT4-fs (loop3): 1 truncate cleaned up [ 304.513865][T12933] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 304.595798][T12933] ext4 filesystem being mounted at /798/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.610152][T12958] loop7: detected capacity change from 0 to 256 [ 304.806691][T12965] loop4: detected capacity change from 0 to 256 [ 304.812876][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 304.890034][ T26] audit: type=1800 audit(1755786058.756:194): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3536" name="file1" dev="loop4" ino=1048644 res=0 errno=0 [ 305.180758][T12975] delete_channel: no stack [ 305.309690][T12983] loop6: detected capacity change from 0 to 128 [ 305.426325][T12983] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 305.461916][T12983] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 305.471559][T12992] loop7: detected capacity change from 0 to 512 [ 305.536348][T12992] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 305.544439][T12992] System zones: 0-2, 18-18, 34-34 [ 305.664472][T12992] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.3548: bg 0: block 248: padding at end of block bitmap is not set [ 305.666003][ T9407] EXT4-fs (loop6): unmounting filesystem. [ 305.753421][T13004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3555'. [ 305.827220][T12992] Quota error (device loop7): write_blk: dquota write failed [ 305.834992][T12992] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 305.926475][T12992] EXT4-fs error (device loop7): ext4_acquire_dquot:6814: comm syz.7.3548: Failed to acquire dquot type 1 [ 305.984298][T13009] loop2: detected capacity change from 0 to 256 [ 306.004847][T12992] EXT4-fs (loop7): 1 truncate cleaned up [ 306.026326][T12992] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 306.037905][ T26] audit: type=1400 audit(1755786059.906:195): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=13012 comm="syz.4.3558" [ 306.087837][T12992] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.323616][ T9414] EXT4-fs (loop7): unmounting filesystem. [ 306.433586][T13028] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 306.505182][ T8751] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 306.695191][ T8751] usb 5-1: Using ep0 maxpacket: 16 [ 306.703896][ T8751] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 306.728145][ T8751] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.772244][ T8751] usb 5-1: Product: syz [ 306.776997][ T8751] usb 5-1: Manufacturer: syz [ 306.781625][ T8751] usb 5-1: SerialNumber: syz [ 306.827276][ T8751] r8152-cfgselector 5-1: config 0 descriptor?? [ 307.186043][T13059] autofs4:pid:13059:validate_dev_ioctl: path string terminator missing for cmd(0xc018937e) [ 307.242350][ T8751] r8152-cfgselector 5-1: Unknown version 0x0000 [ 307.258342][ T8751] r8152-cfgselector 5-1: bad CDC descriptors [ 307.299714][ T8751] r8152-cfgselector 5-1: Unknown version 0x0000 [ 307.317298][ T8751] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 307.395176][ T4520] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 307.537546][T13073] autofs4:pid:13073:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189374) [ 307.560655][T13073] autofs4:pid:13073:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 307.605289][T12345] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 307.605453][ T4520] usb 3-1: Using ep0 maxpacket: 16 [ 307.643128][ T4520] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 307.667905][ T4520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.687228][ T4520] usb 3-1: Product: syz [ 307.691780][ T4520] usb 3-1: Manufacturer: syz [ 307.702613][ T4520] usb 3-1: SerialNumber: syz [ 307.707762][T13080] cgroup: No subsys list or none specified [ 307.722385][ T4520] r8152-cfgselector 3-1: config 0 descriptor?? [ 307.805339][T12345] usb 8-1: Using ep0 maxpacket: 16 [ 307.812497][T12345] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 307.842842][T12345] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 307.865496][T12345] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.908870][T12345] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.928548][T12345] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.942805][T12345] usb 8-1: Product: syz [ 307.947578][T12345] usb 8-1: Manufacturer: syz [ 307.952498][T12345] usb 8-1: SerialNumber: syz [ 308.158547][ T4520] r8152-cfgselector 3-1: Unknown version 0x0000 [ 308.177434][ T4520] r8152-cfgselector 3-1: USB disconnect, device number 12 [ 308.390855][T12345] usb 8-1: 0:2 : does not exist [ 308.416439][T12345] usb 8-1: USB disconnect, device number 7 [ 308.463065][ T4638] udevd[4638]: setting mode of /dev/bus/usb/008/007 to 020664 failed: No such file or directory [ 308.500826][ T4638] udevd[4638]: setting owner of /dev/bus/usb/008/007 to uid=0, gid=0 failed: No such file or directory [ 308.663308][ T4640] udevd[4640]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.185317][T12345] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 309.298795][ T4316] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 309.377490][T12345] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.415610][T12345] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 309.452900][T12345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.483961][T13149] netlink: 'syz.3.3623': attribute type 8 has an invalid length. [ 309.498053][T12345] usb 5-1: config 0 descriptor?? [ 309.515520][ T4316] usb 3-1: Using ep0 maxpacket: 8 [ 309.522755][ T4316] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 309.562505][ T4316] usb 3-1: config 0 has no interface number 0 [ 309.574035][ T4316] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 309.593901][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.612741][ T4316] usb 3-1: Product: syz [ 309.634915][ T4316] usb 3-1: Manufacturer: syz [ 309.663574][ T4316] usb 3-1: SerialNumber: syz [ 309.682377][ T4316] usb 3-1: config 0 descriptor?? [ 309.724378][T12345] usb 5-1: USB disconnect, device number 13 [ 309.902704][ T4316] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 309.909522][T13163] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3631'. [ 309.919727][ T4316] usb 3-1: No valid video chain found. [ 309.944072][ T4316] usb 3-1: USB disconnect, device number 13 [ 310.846859][T13201] netlink: 'syz.2.3649': attribute type 21 has an invalid length. [ 310.869971][T13201] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3649'. [ 311.168371][T13181] loop7: detected capacity change from 0 to 32768 [ 311.223111][T13212] loop2: detected capacity change from 0 to 64 [ 311.584397][T13225] loop3: detected capacity change from 0 to 256 [ 312.348383][ T4316] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 312.555238][ T4316] usb 3-1: Using ep0 maxpacket: 32 [ 312.562495][ T4316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.602915][ T4316] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 312.640650][ T4316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.658103][ T4316] usb 3-1: config 0 descriptor?? [ 312.675188][T13264] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 312.696473][ T4316] gspca_main: spca501-2.14.0 probing 0000:0000 [ 312.710992][T13266] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 312.788654][T13260] team0: Port device team_slave_0 removed [ 312.795277][T13260] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 312.802460][T13269] loop6: detected capacity change from 0 to 256 [ 312.869476][T13269] FAT-fs (loop6): Directory bread(block 64) failed [ 312.889397][T13269] FAT-fs (loop6): Directory bread(block 65) failed [ 312.911003][T13269] FAT-fs (loop6): Directory bread(block 66) failed [ 312.965516][T13269] FAT-fs (loop6): Directory bread(block 67) failed [ 312.994706][T13269] FAT-fs (loop6): Directory bread(block 68) failed [ 313.023558][T13269] FAT-fs (loop6): Directory bread(block 69) failed [ 313.048279][T13269] FAT-fs (loop6): Directory bread(block 70) failed [ 313.070838][ T4316] gspca_spca501: reg write: error -71 [ 313.082230][T13269] FAT-fs (loop6): Directory bread(block 71) failed [ 313.095225][ T4316] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 313.102553][ T4316] spca501: probe of 3-1:0.0 failed with error -22 [ 313.107762][T13269] FAT-fs (loop6): Directory bread(block 72) failed [ 313.152156][T13269] FAT-fs (loop6): Directory bread(block 73) failed [ 313.162683][ T4316] usb 3-1: USB disconnect, device number 14 [ 313.572161][T13291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3693'. [ 313.780839][T13295] loop2: detected capacity change from 0 to 1024 [ 313.987078][T13303] loop6: detected capacity change from 0 to 256 [ 313.995647][ T35] hfsplus: b-tree write err: -5, ino 4 [ 314.293632][T13275] loop3: detected capacity change from 0 to 40427 [ 314.343053][T13275] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 314.361807][T13275] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 314.403419][T13275] F2FS-fs (loop3): invalid crc value [ 314.485062][T13275] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 314.607556][T13327] loop6: detected capacity change from 0 to 16 [ 314.635652][T13327] erofs: (device loop6): mounted with root inode @ nid 36. [ 314.752186][T13275] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 314.774080][T13275] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 314.774285][T13329] loop7: detected capacity change from 0 to 2048 [ 314.952343][T13337] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 315.069209][T13341] loop2: detected capacity change from 0 to 764 [ 315.199684][T13337] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 315.255366][T13337] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 315.307275][T13345] loop6: detected capacity change from 0 to 2048 [ 315.325570][T13337] Remounting filesystem read-only [ 315.345337][ T9414] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 315.370795][T13345] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 315.449785][T13345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.585479][T13345] UDF-fs: error (device loop6): udf_verify_fi: directory (ino 1376) has entry at pos 0 with unaligned lenght of impUse field [ 315.713355][T13356] loop3: detected capacity change from 0 to 2048 [ 315.782105][T13356] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 315.801527][T13360] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 315.826835][T13356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 315.915700][T13364] usb usb8: usbfs: process 13364 (syz.6.3725) did not claim interface 8 before use [ 315.945314][ T4316] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 316.144275][T13368] netlink: 'syz.2.3728': attribute type 4 has an invalid length. [ 316.145294][ T4316] usb 5-1: Using ep0 maxpacket: 16 [ 316.178818][ T4316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.223715][ T4316] usb 5-1: config 0 interface 0 has no altsetting 0 [ 316.242845][ T4316] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 316.260472][ T4316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.301264][ T4316] usb 5-1: Product: syz [ 316.314473][ T4316] usb 5-1: Manufacturer: syz [ 316.329455][ T4316] usb 5-1: SerialNumber: syz [ 316.336528][T13379] netlink: 'syz.3.3735': attribute type 30 has an invalid length. [ 316.350244][ T4316] usb 5-1: config 0 descriptor?? [ 316.382690][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3735'. [ 316.400205][T13379] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 316.420898][T13379] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 316.636140][ T4520] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 316.644024][T13390] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3739'. [ 316.760112][T13398] loop6: detected capacity change from 0 to 64 [ 316.795597][ T4316] usb 5-1: USB disconnect, device number 14 [ 316.855351][ T4520] usb 8-1: Using ep0 maxpacket: 16 [ 316.863035][ T26] audit: type=1326 audit(1755786070.726:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046378ebe9 code=0x7ffc0000 [ 316.864905][ T4520] usb 8-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 316.914189][T13402] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 316.926811][ T4520] usb 8-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 316.930956][ T26] audit: type=1326 audit(1755786070.756:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046378ebe9 code=0x7ffc0000 [ 316.946848][ T4520] usb 8-1: Manufacturer: syz [ 316.971859][ T26] audit: type=1326 audit(1755786070.766:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f046378ebe9 code=0x7ffc0000 [ 317.006512][ T4520] usb 8-1: config 0 descriptor?? [ 317.072093][ T26] audit: type=1326 audit(1755786070.766:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046378ebe9 code=0x7ffc0000 [ 317.101927][ T1265] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.108318][ T1265] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.144356][ T26] audit: type=1326 audit(1755786070.766:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13399 comm="syz.3.3744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046378ebe9 code=0x7ffc0000 [ 317.167441][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.223946][ T4520] usb 8-1: Not enough endpoints found in device, aborting! [ 317.446092][ T4316] usb 8-1: USB disconnect, device number 8 [ 317.524242][T13420] x_tables: unsorted underflow at hook 2 [ 317.955917][T13440] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3763'. [ 317.995188][T13440] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 318.589094][ T4316] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 318.807175][ T4316] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 318.831562][ T4316] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.913416][ T4316] usb 8-1: config 0 has no interface number 0 [ 318.921142][ T4316] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 318.930242][T13482] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3785'. [ 318.952677][ T4316] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 319.001691][ T4316] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 319.046109][ T4316] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.054237][ T4316] usb 8-1: Product: syz [ 319.086281][ T4316] usb 8-1: Manufacturer: syz [ 319.090929][ T4316] usb 8-1: SerialNumber: syz [ 319.141357][ T4316] usb 8-1: config 0 descriptor?? [ 319.339156][T13497] IPv6: Can't replace route, no match found [ 319.398737][T13470] loop3: detected capacity change from 0 to 32768 [ 319.487406][T13470] ea_get: invalid extended attribute [ 319.571314][ T4316] usbtouchscreen: probe of 8-1:0.117 failed with error -71 [ 319.603349][ T4316] usb 8-1: USB disconnect, device number 9 [ 321.194536][T13563] device netdevsim0 entered promiscuous mode [ 321.214097][T13563] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.587636][T13582] loop3: detected capacity change from 0 to 256 [ 321.610510][T13582] exfat: Deprecated parameter 'utf8' [ 321.632880][T13582] exfat: Deprecated parameter 'namecase' [ 321.665766][T13582] exfat: Deprecated parameter 'namecase' [ 321.681332][T13586] overlayfs: missing 'lowerdir' [ 321.700843][T13582] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 321.817370][ T26] audit: type=1326 audit(1755786075.686:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.6.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0b38ebe9 code=0x7ffc0000 [ 321.903864][ T26] audit: type=1326 audit(1755786075.716:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.6.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f0b0b38ebe9 code=0x7ffc0000 [ 321.926669][T13593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3837'. [ 322.008630][ T26] audit: type=1326 audit(1755786075.716:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.6.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0b38ebe9 code=0x7ffc0000 [ 322.053889][T13597] loop3: detected capacity change from 0 to 2048 [ 322.121670][T13597] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 322.135488][ T26] audit: type=1326 audit(1755786075.716:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13588 comm="syz.6.3835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0b38ebe9 code=0x7ffc0000 [ 322.275855][T13606] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 322.310002][ T26] audit: type=1326 audit(1755786076.066:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c798ebe9 code=0x7ffc0000 [ 322.332355][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.372444][T13597] syz.3.3838: attempt to access beyond end of device [ 322.372444][T13597] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 322.435315][T13597] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1) [ 322.445888][ T26] audit: type=1326 audit(1755786076.066:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c798ebe9 code=0x7ffc0000 [ 322.561575][ T26] audit: type=1326 audit(1755786076.066:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f32c798ebe9 code=0x7ffc0000 [ 322.583843][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.695234][ T26] audit: type=1326 audit(1755786076.066:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c798ebe9 code=0x7ffc0000 [ 322.718033][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.810190][ T26] audit: type=1326 audit(1755786076.096:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13600 comm="syz.2.3841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c798ebe9 code=0x7ffc0000 [ 322.832538][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.159540][T13634] overlayfs: missing 'lowerdir' [ 323.294430][T13640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3859'. [ 323.355453][T13640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3859'. [ 323.607225][T13650] loop4: detected capacity change from 0 to 764 [ 323.687625][T13650] Symlink component flag not implemented [ 323.697172][T13650] Symlink component flag not implemented [ 323.702923][T13650] Symlink component flag not implemented (128) [ 323.758245][T13650] Symlink component flag not implemented (122) [ 324.188138][T13676] loop4: detected capacity change from 0 to 2048 [ 324.231723][T13676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 324.285312][ T4268] Bluetooth: hci1: command 0x0406 tx timeout [ 324.285366][ T4273] Bluetooth: hci5: command 0x0406 tx timeout [ 324.503190][T13688] delete_channel: no stack [ 324.599781][T13691] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3884'. [ 324.610142][T13691] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 324.751037][T13696] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3886'. [ 324.830584][ T26] audit: type=1400 audit(1755786078.696:210): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=13698 comm="syz.2.3888" [ 324.957127][T13703] loop7: detected capacity change from 0 to 256 [ 324.984238][T13675] loop3: detected capacity change from 0 to 32768 [ 325.048012][ T26] audit: type=1800 audit(1755786078.916:211): pid=13703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3889" name="file1" dev="loop7" ino=1048651 res=0 errno=0 [ 325.248322][T13712] loop6: detected capacity change from 0 to 256 [ 326.018384][T13743] cgroup: No subsys list or none specified [ 326.097120][T13748] netlink: 'syz.6.3921': attribute type 29 has an invalid length. [ 326.121964][T13748] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3921'. [ 326.627853][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'. [ 326.702995][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3923'. [ 326.975408][T13788] loop7: detected capacity change from 0 to 256 [ 327.048356][T13788] FAT-fs (loop7): Directory bread(block 64) failed [ 327.054930][T13788] FAT-fs (loop7): Directory bread(block 65) failed [ 327.102362][T13788] FAT-fs (loop7): Directory bread(block 66) failed [ 327.133230][T13788] FAT-fs (loop7): Directory bread(block 67) failed [ 327.154028][T13788] FAT-fs (loop7): Directory bread(block 68) failed [ 327.184356][T13788] FAT-fs (loop7): Directory bread(block 69) failed [ 327.194593][T13788] FAT-fs (loop7): Directory bread(block 70) failed [ 327.236619][T13788] FAT-fs (loop7): Directory bread(block 71) failed [ 327.243283][T13788] FAT-fs (loop7): Directory bread(block 72) failed [ 327.280808][T13788] FAT-fs (loop7): Directory bread(block 73) failed [ 327.435519][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3940'. [ 327.701512][T13817] loop3: detected capacity change from 0 to 256 [ 327.826293][T13817] FAT-fs (loop3): Directory bread(block 64) failed [ 327.855420][T13817] FAT-fs (loop3): Directory bread(block 65) failed [ 327.862060][T13817] FAT-fs (loop3): Directory bread(block 66) failed [ 327.926564][T13827] loop2: detected capacity change from 0 to 1024 [ 327.963776][T13817] FAT-fs (loop3): Directory bread(block 67) failed [ 327.995432][T13817] FAT-fs (loop3): Directory bread(block 68) failed [ 328.002009][T13817] FAT-fs (loop3): Directory bread(block 69) failed [ 328.081510][T13817] FAT-fs (loop3): Directory bread(block 70) failed [ 328.095214][T13817] FAT-fs (loop3): Directory bread(block 71) failed [ 328.107875][T13817] FAT-fs (loop3): Directory bread(block 72) failed [ 328.145309][T13817] FAT-fs (loop3): Directory bread(block 73) failed [ 328.217132][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 328.217145][ T26] audit: type=1326 audit(1755786082.086:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c798ebe9 code=0x7ffc0000 [ 328.298573][T13835] loop2: detected capacity change from 0 to 2048 [ 328.325213][ T26] audit: type=1326 audit(1755786082.086:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32c798ebe9 code=0x7ffc0000 [ 328.370014][T13835] Alternate GPT is invalid, using primary GPT. [ 328.396895][T13835] loop2: p2 p3 p7 [ 328.403913][ T26] audit: type=1326 audit(1755786082.086:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f32c798ebe9 code=0x7ffc0000 [ 328.531154][ T26] audit: type=1326 audit(1755786082.086:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f32c798ec23 code=0x7ffc0000 [ 328.586814][T13844] netlink: 'syz.4.3963': attribute type 29 has an invalid length. [ 328.595041][T13844] netlink: 'syz.4.3963': attribute type 29 has an invalid length. [ 328.638848][ T26] audit: type=1326 audit(1755786082.086:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f32c798d69f code=0x7ffc0000 [ 328.815053][ T26] audit: type=1326 audit(1755786082.166:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f32c798ec77 code=0x7ffc0000 [ 328.910545][T13855] loop7: detected capacity change from 0 to 2048 [ 328.911217][ T9544] udevd[9544]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 328.938110][ T5184] udevd[5184]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 328.960640][ T26] audit: type=1326 audit(1755786082.166:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f32c798d550 code=0x7ffc0000 [ 328.988107][ T4640] udevd[4640]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 329.016807][T13855] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 329.058463][T13863] netlink: 'syz.6.3970': attribute type 2 has an invalid length. [ 329.106578][T13864] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.123038][ T26] audit: type=1326 audit(1755786082.166:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32c798e7eb code=0x7ffc0000 [ 329.169504][T13855] syz.7.3966: attempt to access beyond end of device [ 329.169504][T13855] loop7: rw=0, sector=262216, nr_sectors = 2 limit=2048 [ 329.225432][T13867] netlink: 'syz.3.3972': attribute type 27 has an invalid length. [ 329.233382][T13867] netlink: 'syz.3.3972': attribute type 3 has an invalid length. [ 329.234792][ T26] audit: type=1326 audit(1755786082.196:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f32c798d84a code=0x7ffc0000 [ 329.244116][T13855] NILFS (loop7): I/O error reading meta-data file (ino=6, block-offset=1) [ 329.302650][T13867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3972'. [ 329.377932][ T26] audit: type=1326 audit(1755786082.196:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13834 comm="syz.2.3955" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f32c798e7eb code=0x7ffc0000 [ 329.794230][T13886] loop3: detected capacity change from 0 to 2048 [ 329.935207][T13895] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 329.974443][T13886] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0 [ 330.101319][T13886] Remounting filesystem read-only [ 330.298488][T13909] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3992'. [ 330.328374][T13909] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3992'. [ 331.131920][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4005'. [ 331.408898][T13946] loop7: detected capacity change from 0 to 1024 [ 331.541835][T13946] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 331.563932][T13946] EXT4-fs error (device loop7): ext4_get_first_dir_block:3605: inode #11: comm syz.7.4010: directory missing '..' [ 331.616870][T13961] loop2: detected capacity change from 0 to 16 [ 331.634395][T13961] erofs: (device loop2): mounted with root inode @ nid 36. [ 331.656247][T13961] erofs: (device loop2): z_erofs_readahead: readahead error at page 2 @ nid 9895604650073 [ 331.672563][ T4273] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[8192] [ 331.693277][T13961] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -20 in[4096, 0] out[4096] [ 331.737515][ T9414] EXT4-fs (loop7): unmounting filesystem. [ 332.086442][T13979] loop7: detected capacity change from 0 to 512 [ 332.116804][T13979] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.222563][T13979] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 332.296218][T13987] loop3: detected capacity change from 0 to 512 [ 332.442633][T13987] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.4029: Failed to acquire dquot type 1 [ 332.546708][T13987] EXT4-fs (loop3): 1 truncate cleaned up [ 332.552492][T13987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 332.597622][T13987] ext4 filesystem being mounted at /893/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.679359][T13987] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.4029: Failed to acquire dquot type 1 [ 332.862880][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 332.891951][T14011] loop4: detected capacity change from 0 to 1024 [ 332.945275][ T4518] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 332.974828][T14011] fuse: Invalid rootmode [ 333.065355][ T9] hfsplus: b-tree write err: -5, ino 4 [ 333.136758][ T4518] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.159022][ T4518] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 333.185446][ T4518] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 333.206636][ T4518] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 333.259717][ T4518] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 333.280020][ T4518] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.313490][ T4518] usb 8-1: config 1 interface 1 has no altsetting 0 [ 333.336510][ T4518] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.356250][ T4518] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.368499][ T4518] usb 8-1: Product: syz [ 333.372749][ T4518] usb 8-1: Manufacturer: syz [ 333.407642][ T4518] usb 8-1: SerialNumber: syz [ 333.435536][T14004] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 333.867217][ T4520] usb 8-1: USB disconnect, device number 10 [ 334.020026][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4063'. [ 334.375241][ T4520] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 334.597482][ T4520] usb 3-1: config 1 has an invalid interface descriptor of length 6, skipping [ 334.603039][T14075] loop7: detected capacity change from 0 to 4096 [ 334.626170][ T4520] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.639087][T14075] ntfs3: loop7: Different NTFS' sector size (1024) and media sector size (512) [ 334.667872][ T4520] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 334.718567][ T4520] usb 3-1: config 1 has no interface number 1 [ 334.744613][ T4520] usb 3-1: string descriptor 0 read error: -22 [ 334.765272][ T4520] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.804805][T14075] ntfs3: loop7: no free space to extend mft [ 334.808229][T14081] netlink: 'syz.6.4074': attribute type 13 has an invalid length. [ 334.825564][ T4520] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.869539][ T4520] usb 3-1: MIDIStreaming interface descriptor not found [ 334.876853][T14081] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4074'. [ 334.896379][T14061] loop4: detected capacity change from 0 to 40427 [ 334.902098][T14081] syz_tun: refused to change device tx_queue_len [ 334.921368][ T4520] snd-usb-audio: probe of 3-1:1.2 failed with error -16 [ 334.930706][T14061] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 334.953557][T14081] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 334.968787][T14061] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 335.052129][T14061] F2FS-fs (loop4): invalid crc value [ 335.098157][ T4520] usb 3-1: USB disconnect, device number 15 [ 335.153553][T14061] F2FS-fs (loop4): Found nat_bits in checkpoint [ 335.312878][T14061] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 335.325391][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 335.347206][T14061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 335.356910][ T4381] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 335.412409][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4080'. [ 335.425514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 335.467361][T14099] loop7: detected capacity change from 0 to 64 [ 335.545425][ T4381] usb 4-1: Using ep0 maxpacket: 32 [ 335.552663][ T4381] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.615822][ T4381] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 335.661256][ T4381] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.686073][ T4381] usb 4-1: Product: syz [ 335.690283][ T4381] usb 4-1: Manufacturer: syz [ 335.716069][ T4381] usb 4-1: SerialNumber: syz [ 335.730704][ T4381] usb 4-1: config 0 descriptor?? [ 335.792201][ T4381] usb 4-1: bad CDC descriptors [ 335.797625][ T4381] usb 4-1: unsupported MDLM descriptors [ 335.984233][ T4381] usb 4-1: USB disconnect, device number 12 [ 336.241593][T14123] netlink: 1 bytes leftover after parsing attributes in process `syz.7.4092'. [ 336.305573][T12226] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 336.504410][T12226] usb 7-1: config 0 has an invalid interface number: 31 but max is 0 [ 336.528593][T12226] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.562900][T12226] usb 7-1: config 0 has no interface number 0 [ 336.600725][T12226] usb 7-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 336.635789][T12226] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.663373][T12226] usb 7-1: Product: syz [ 336.674301][T12226] usb 7-1: Manufacturer: syz [ 336.696354][T12226] usb 7-1: SerialNumber: syz [ 336.714744][T12226] usb 7-1: config 0 descriptor?? [ 336.735553][T12226] hub 7-1:0.31: bad descriptor, ignoring hub [ 336.741624][T12226] hub: probe of 7-1:0.31 failed with error -5 [ 336.766444][T12226] usb 7-1: Found UVC 0.04 device syz (046d:08c3) [ 336.784388][T12226] uvcvideo 7-1:0.31: Entity type for entity Output 6 was not initialized! [ 336.821926][T12226] usb 7-1: Failed to create links for entity 6 [ 336.845312][T12226] usb 7-1: Failed to register entities (-22). [ 337.012378][ T4316] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 337.013399][T14130] loop7: detected capacity change from 0 to 32768 [ 337.072190][T12226] usb 7-1: USB disconnect, device number 7 [ 337.209214][ T4316] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 337.230319][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.259158][ T4316] usb 4-1: Product: syz [ 337.269292][ T4316] usb 4-1: Manufacturer: syz [ 337.279422][ T4316] usb 4-1: SerialNumber: syz [ 337.294380][ T4316] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 337.414801][ T4316] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 337.452237][T14160] ieee802154 phy0 wpan0: encryption failed: -22 [ 337.568955][ T27] INFO: task syz-executor:4265 blocked for more than 143 seconds. [ 337.589820][ T27] Not tainted 6.1.148-syzkaller #0 [ 337.610022][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 337.639484][ T27] task:syz-executor state:D stack:20880 pid:4265 ppid:1 flags:0x00004004 [ 337.684532][ T27] Call Trace: [ 337.694798][ T27] [ 337.707986][ T27] __schedule+0x10ec/0x40b0 [ 337.722850][ T27] ? release_firmware_map_entry+0x18a/0x18a [ 337.743440][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 337.774403][ T27] ? lock_chain_count+0x20/0x20 [ 337.793740][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 337.799095][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 337.810815][ T27] schedule+0xb9/0x180 [ 337.823013][ T27] io_schedule+0x7c/0xd0 [ 337.827950][ T27] folio_wait_bit_common+0x6e1/0xf60 [ 337.833380][ T27] ? folio_wait_bit+0x30/0x30 [ 337.842849][ T27] ? migration_entry_wait_on_locked+0xe50/0xe50 [ 337.849564][ T27] ? folio_mapping+0x1ba/0x4d0 [ 337.855062][ T27] truncate_inode_pages_range+0x9a2/0xff0 [ 337.857011][ T4381] usb 4-1: USB disconnect, device number 13 [ 337.867894][ T27] ? mapping_evict_folio+0x520/0x520 [ 337.874034][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 337.902223][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 337.908091][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 337.913521][ T27] evict+0x498/0x870 [ 337.917959][ T27] ? proc_nr_inodes+0x2f0/0x2f0 [ 337.922959][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 337.931401][ T27] ? _raw_spin_unlock+0x24/0x40 [ 337.936608][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 337.941999][ T27] evict_inodes+0x604/0x690 [ 337.947007][ T27] ? clear_inode+0x150/0x150 [ 337.951736][ T27] ? dput+0x1c9/0x1d0 [ 337.963229][ T27] ? sync_filesystem+0x103/0x220 [ 337.972753][ T27] generic_shutdown_super+0x93/0x340 [ 337.981034][ T27] kill_block_super+0x7c/0xe0 [ 337.986138][ T27] deactivate_locked_super+0x93/0xf0 [ 337.991670][ T27] cleanup_mnt+0x463/0x4f0 [ 337.996424][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 338.001653][ T27] task_work_run+0x1ca/0x250 [ 338.006396][ T27] ? task_work_cancel+0x230/0x230 [ 338.011457][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 338.017009][ T27] exit_to_user_mode_loop+0xe6/0x110 [ 338.022326][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 338.027968][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 338.033444][ T27] do_syscall_64+0x58/0xa0 [ 338.038084][ T27] ? clear_bhb_loop+0x60/0xb0 [ 338.042816][ T27] ? clear_bhb_loop+0x60/0xb0 [ 338.047653][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.053689][ T27] RIP: 0033:0x7f68b718ff17 [ 338.058558][ T27] RSP: 002b:00007ffd576699e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 338.067305][ T27] RAX: 0000000000000000 RBX: 00007f68b7211c05 RCX: 00007f68b718ff17 [ 338.075375][ T27] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd57669aa0 [ 338.083536][ T27] RBP: 00007ffd57669aa0 R08: 0000000000000000 R09: 0000000000000000 [ 338.091864][ T27] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd5766ab30 [ 338.099960][ T27] R13: 00007f68b7211c05 R14: 000000000002c731 R15: 00007ffd5766ab70 [ 338.108045][ T27] [ 338.111158][ T27] [ 338.111158][ T27] Showing all locks held in the system: [ 338.119908][ T27] 1 lock held by rcu_tasks_kthre/12: [ 338.125373][ T27] #0: ffffffff8cb2b770 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 338.136097][ T27] 1 lock held by rcu_tasks_trace/13: [ 338.141390][ T27] #0: ffffffff8cb2bf90 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 338.152724][ T27] 1 lock held by khungtaskd/27: [ 338.157651][ T27] #0: ffffffff8cb2ade0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 338.167853][ T27] 4 locks held by kworker/u4:2/35: [ 338.173006][ T27] #0: ffff8880b8e3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 338.183025][ T27] #1: ffff8880b8e27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 338.198715][ T27] #2: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x674/0xd20 [ 338.208222][ T27] #3: ffffffff96e41588 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6a/0x490 [ 338.218824][ T27] 2 locks held by getty/4026: [ 338.223707][ T27] #0: ffff888030334098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 338.233597][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 338.243751][ T27] 1 lock held by syz-executor/4265: [ 338.249048][ T27] #0: ffff8880548e80e0 (&type->s_umount_key#52){+.+.}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 338.259554][ T27] 2 locks held by kworker/0:5/4316: [ 338.265062][ T27] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 338.275616][ T27] #1: ffffc90003fa7d00 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 338.287296][ T27] 5 locks held by kworker/0:8/4381: [ 338.292545][ T27] #0: ffff888145696138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 338.303509][ T27] #1: ffffc90002e87d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 338.314823][ T27] #2: ffff8880278ae190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1a7/0x54e0 [ 338.323806][ T27] #3: ffff88805773b190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x107/0x8a0 [ 338.333176][ T27] #4: ffff88807f0c0118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb2/0x850 [ 338.344015][ T27] 5 locks held by kworker/u4:8/9601: [ 338.349520][ T27] #0: ffff8880b8f3aa98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 338.359780][ T27] #1: ffff8880b8f27848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x398/0x6d0 [ 338.375596][ T27] #2: ffff8880b8f28418 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x674/0xd20 [ 338.384808][ T27] #3: ffffffff96e0d280 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6a/0x490 [ 338.398315][ T27] #4: ffff8880b8f281d8 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x184/0x870 [ 338.408095][ T27] [ 338.410447][ T27] ============================================= [ 338.410447][ T27] [ 338.419242][ T27] NMI backtrace for cpu 1 [ 338.423589][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.148-syzkaller #0 [ 338.431475][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.441528][ T27] Call Trace: [ 338.444844][ T27] [ 338.445383][ T4316] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 338.447765][ T27] dump_stack_lvl+0x168/0x22e [ 338.447789][ T27] ? irq_work_queue+0xb8/0x140 [ 338.457307][ T4316] ath9k_htc: Failed to initialize the device [ 338.459452][ T27] ? show_regs_print_info+0x12/0x12 [ 338.474339][ T4381] usb 4-1: ath9k_htc: USB layer deinitialized [ 338.475435][ T27] ? load_image+0x3b0/0x3b0 [ 338.475459][ T27] ? vprintk_emit+0x571/0x680 [ 338.475481][ T27] ? printk_sprint+0x460/0x460 [ 338.475502][ T27] nmi_cpu_backtrace+0x3f4/0x470 [ 338.500737][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 338.506910][ T27] ? _printk+0xcc/0x110 [ 338.511634][ T27] ? load_image+0x3b0/0x3b0 [ 338.516249][ T27] ? load_image+0x3b0/0x3b0 [ 338.520968][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 338.527074][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 338.533252][ T27] watchdog+0xeee/0xf30 [ 338.537425][ T27] ? watchdog+0x1ed/0xf30 [ 338.541758][ T27] kthread+0x29d/0x330 [ 338.545928][ T27] ? hungtask_pm_notify+0x40/0x40 [ 338.551091][ T27] ? kthread_blkcg+0xd0/0xd0 [ 338.555726][ T27] ret_from_fork+0x1f/0x30 [ 338.560161][ T27] [ 338.564303][ T27] Sending NMI from CPU 1 to CPUs 0: [ 338.570295][ C0] NMI backtrace for cpu 0 [ 338.570305][ C0] CPU: 0 PID: 4254 Comm: syz-executor Not tainted 6.1.148-syzkaller #0 [ 338.570321][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.570329][ C0] RIP: 0010:preempt_count_add+0x2/0x190 [ 338.570351][ C0] Code: e1 07 80 c1 03 38 c1 7c 97 48 8b 3c 24 e8 a6 36 79 00 eb 8c e9 f5 fe ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 41 57 <41> 56 53 49 bf 00 00 00 00 00 fc ff df 48 c7 c0 20 51 be 96 48 c1 [ 338.570363][ C0] RSP: 0018:ffffc90003c77c10 EFLAGS: 00000a06 [ 338.570376][ C0] RAX: 1ffff1100611e607 RBX: ffff8880308f1dc0 RCX: ffff8880308f1dc0 [ 338.570387][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c0420 RDI: 0000000000000001 [ 338.570396][ C0] RBP: ffffc90003c77d30 R08: dffffc0000000000 R09: ffffed10171c54b1 [ 338.570407][ C0] R10: ffffed10171c54b1 R11: 1ffff110171c54b0 R12: dffffc0000000000 [ 338.570417][ C0] R13: ffffc90003c77dc0 R14: 1ffff1100611e3b8 R15: dffffc0000000000 [ 338.570427][ C0] FS: 0000555573407500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 338.570439][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 338.570449][ C0] CR2: 00007ffe6972ffd8 CR3: 000000007f632000 CR4: 00000000003506f0 [ 338.570461][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 338.570469][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 338.570478][ C0] Call Trace: [ 338.570482][ C0] [ 338.570488][ C0] schedule+0xb2/0x180 [ 338.570503][ C0] do_nanosleep+0x1a9/0x5f0 [ 338.570521][ C0] ? do_nanosleep+0x7c/0x5f0 [ 338.570538][ C0] ? usleep_range_state+0x1a0/0x1a0 [ 338.570555][ C0] ? memset+0x1e/0x40 [ 338.570574][ C0] ? __hrtimer_init+0x186/0x270 [ 338.570588][ C0] hrtimer_nanosleep+0x15b/0x340 [ 338.570602][ C0] ? __might_fault+0xc2/0x120 [ 338.570622][ C0] ? __might_fault+0xa6/0x120 [ 338.570641][ C0] ? nanosleep_copyout+0x110/0x110 [ 338.570656][ C0] ? __remove_hrtimer+0x470/0x470 [ 338.570670][ C0] ? timespec64_add_safe+0x1d0/0x1d0 [ 338.570691][ C0] __se_sys_clock_nanosleep+0x2e6/0x370 [ 338.570713][ C0] ? __x64_sys_clock_nanosleep+0xa0/0xa0 [ 338.570734][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 338.570752][ C0] do_syscall_64+0x4c/0xa0 [ 338.570765][ C0] ? clear_bhb_loop+0x60/0xb0 [ 338.570777][ C0] ? clear_bhb_loop+0x60/0xb0 [ 338.570790][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.570809][ C0] RIP: 0033:0x7f461d5c1463 [ 338.570819][ C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 338.570830][ C0] RSP: 002b:00007fff5273f2a8 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 338.570843][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f461d5c1463 [ 338.570852][ C0] RDX: 00007fff5273f2c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 338.570860][ C0] RBP: 0000000000000000 R08: 0000000000000151 R09: 0024c95b2c8be238 [ 338.570869][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff5273f710 [ 338.570877][ C0] R13: 0000000000000004 R14: 00007fff5273f2fc R15: 00007fff5273f390 [ 338.570893][ C0] [ 338.636185][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 338.636202][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.148-syzkaller #0 [ 338.636219][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.636227][ T27] Call Trace: [ 338.636233][ T27] [ 338.636240][ T27] dump_stack_lvl+0x168/0x22e [ 338.636259][ T27] ? memcpy+0x3c/0x60 [ 338.636279][ T27] ? show_regs_print_info+0x12/0x12 [ 338.636294][ T27] ? load_image+0x3b0/0x3b0 [ 338.636325][ T27] panic+0x2c9/0x710 [ 338.636342][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 338.636361][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 338.636381][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 338.636399][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 338.636416][ T27] watchdog+0xf2d/0xf30 [ 338.636435][ T27] ? watchdog+0x1ed/0xf30 [ 338.636454][ T27] kthread+0x29d/0x330 [ 338.636473][ T27] ? hungtask_pm_notify+0x40/0x40 [ 338.636488][ T27] ? kthread_blkcg+0xd0/0xd0 [ 338.636507][ T27] ret_from_fork+0x1f/0x30 [ 338.636536][ T27] [ 338.637961][ T27] Kernel Offset: disabled [ 338.994969][ T27] Rebooting in 86400 seconds..