last executing test programs: 8.09378849s ago: executing program 2 (id=2209): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.243833568s ago: executing program 5 (id=2214): r0 = socket(0x1d, 0x2, 0x6) getsockname$unix(r0, 0x0, &(0x7f0000000280)) 7.102112783s ago: executing program 2 (id=2215): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) 6.42104624s ago: executing program 5 (id=2218): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.402193309s ago: executing program 4 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a00000800028004000f"], 0x76}}, 0xc000) 6.256302654s ago: executing program 2 (id=2222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="600000000101010200000000000000000a0000000c00198008000200050000000600124000030000380002802c00018014000300fe8000000000000000000000000000bb14000400de880000000000000000000000000001060003"], 0x60}}, 0x0) 5.552582005s ago: executing program 2 (id=2225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x98}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x20000000) 5.422499963s ago: executing program 5 (id=2227): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x16, 0x0, 0x0, 0xae}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.365774871s ago: executing program 4 (id=2228): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000180)="a599faa5fd2590a2d70c4dbe031dca2cebf2afd869f138324a10cbf059a27843fffe") 5.261271527s ago: executing program 1 (id=2229): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x22100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x400, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2000000}, {0x2}, {0x2, 0x4}, {0x0, 0x0, 0x8}, 0x2, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000021, 0x0, 0x0, 0x16, 0x0, 0x0, 0xc}) 5.0910594s ago: executing program 0 (id=2230): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000001c0)) 4.754850326s ago: executing program 2 (id=2231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a01040000000000553f000100fffe08000a40000000000900020073797a32840000000900010073797a3000000000080005400000000f840000000c0a01030000000000000000010000000900020073797a32000000005800038054000080080003400000000248000b80200001800a00010071756f7461000000100002800c0001400000000000000000100001800c000100636f756e74657200140001800a00010072616e6765000000040002800900010073797a30"], 0x108}}, 0x0) 4.718655791s ago: executing program 4 (id=2233): r0 = socket(0x22, 0x2, 0x24) recvmmsg(r0, &(0x7f00000001c0), 0x4b, 0x40012160, 0x0) 4.243997762s ago: executing program 0 (id=2234): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x4}, 0x55) 3.984588628s ago: executing program 4 (id=2235): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000780)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x10, 0x0, 0x1, [@generic="25b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473fe77f3e5ba760d3793b2f943b7528ea34883bc4a506cf756740574b89d396af9b59638700500000005006f88d6e1db9b2b"]}, @nested={0x11e, 0x6, 0x0, 0x1, [@generic="634dd951746fe35a3d7f459357f5bf9d14f402d77419df0ad4b207b079f1e94261344641553e5fd4dc2124d022a188b59bf94d0b8e8fb35e2bcba7a54bafb59d4ac975c1f0269d2d60257614a64e4065874f88b774eadad615899ab2849b4d875f8e8aeae0a04d758db2073fdd6ea65bdf5b40d68be578e54ac5d648eea73348783ef332e3335bcede70f2206781b5c1dfecfdb00df4e35d6a5a839f96cb767f101a340f51bb05ff468cc68e11acc73b277cf0c92e1496a2c76d57b86930927bc2adc1d4c9eb637ff5c7ffbeb6ef5531802d1a51c6ee791a6b15d828518f78c9967ff8b460dc952a4b63038402", @generic="26c1e5e4409b7b2f21eaecd84205d99f8ad8c8696cd5d3eed9ad9a6c845fff292724b9ce7c1b3eafaa90e91de0"]}]}, 0x184}}, 0x0) 3.98290043s ago: executing program 2 (id=2236): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x1a00040, &(0x7f0000000200)={[{@utf8}, {@rodir}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@shortname_win95}, {@uni_xlateno}, {@fat=@nocase}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@utf8no}]}, 0x3, 0x350, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 3.865139572s ago: executing program 3 (id=2237): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 3.722725169s ago: executing program 1 (id=2238): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x1, 0x6}]}, 0x10) 3.615039817s ago: executing program 5 (id=2239): sigaltstack(&(0x7f00000015c0)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f00000029c0)={0x0, 0x1}, 0x0) 3.544986689s ago: executing program 0 (id=2240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x20050800) 3.293105385s ago: executing program 4 (id=2241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000002100010000000000000003000a000000000000000000000008000e"], 0x2c}}, 0x0) 3.104343546s ago: executing program 3 (id=2242): getgroups(0x3, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setresgid(0x0, 0xffffffffffffffff, r0) 2.994441067s ago: executing program 5 (id=2243): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 2.987764249s ago: executing program 1 (id=2244): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000240)={0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.794966665s ago: executing program 0 (id=2245): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e170602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.580085291s ago: executing program 4 (id=2246): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2.381172262s ago: executing program 3 (id=2247): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="98000000fdbb04b005b600000000000000000000eeff9500"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0xfffffea4, 0x10, &(0x7f0000000200), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 2.321034927s ago: executing program 1 (id=2248): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.781734815s ago: executing program 3 (id=2249): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x22}}], 0x1, 0x0) 1.498016417s ago: executing program 1 (id=2250): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f00000000c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f910, 0x100, '\x00', @p_u32=0x0}}) 1.344767003s ago: executing program 0 (id=2251): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000001f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80481e, &(0x7f0000000100)={[{@codepage={'codepage', 0x3d, 'cp861'}}, {@uid}, {@part={'part', 0x3d, 0x2}}, {@part={'part', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x21, 0x305, &(0x7f0000000240)="$eJzs3ctu00ocx/HfOGmb9lQ9Pm2PjnQ2oEIl2FQUWCA2QShb9qwQpUmlqlYRbZGADQGxRDwAex6ADW/Ahg2IF4AVKx6gO6MZ26md2E4vSdPL9yM1Go/n8p/ajmcstRaAc+tu48eHG7/sj5Eqqki6LXmSalJV0r/6r/Z0c2d9J2g1yxqquBr2xyiqaXrKrG628qraeq5GzLdbVU2n8zAcYRje+TnqIDBy7urP4UkT8XXo9teOOa5haUsXRh3DcUsfYLOrXT3TzAjDAQCcAPH934tvE9Muy8jzpMX4tn+m7v+7ow5gsG4GPVlhaYXU/d/N7kJjj+/fbtfees8t4ex+L1klKndhlzXWtT2u6MzKTDBNv1Wli8WbXFuvamn1lZqeXqseSxWbd5/N6NRNpKMdj38dqd4X+g4hI91a90jvTUWjcTPKbklIa+tBa8ImcuKf20eP4weJth/zxXwzD4yv92p25n/V0NheXEd+15Hyxmz814pb/MvVsqUUnx31et3LFPnHdfJ/dijFv1enlr8iSbeZPCBodyIoi9P1PavsY4VodMt9as3l1fI7WwW15jO1KvGZsLT6OCh9lDIcyRDNO3PfLOi3PqmRmv97Nr5FJVdmn+9540rGZ0Y0noKTtOpK+j13jr3L5WIngtjEwQaGyMGelr3VI93SzPbzFxuVIGht2URyiDZWkpyV4Mn0lnGJoDX2JrsrmyjZdfRERUnOZBxjqozae4VD62UY7rflcHgxB8HVgTZovz86OW3lHwt7CDs53pDGde4Tja/SCQjj6IkwlAp2Dfz7CSfQtkkOutusanLUEeGY2XmXidZ/biYfz+rcEsl++CXz9PJFpjItLndWcNmp4Kz7nCpeweU2W7iCS/V4vWDN6NZcl65Il1OZRqU9+nGcZ4Rp6Lse8vwfAAAAAAAAAAAAAAAAAADgtDnUHw98/lj2h0A9iVGPEQAAAAAAAAAAAAAAAAAAAACA0+5Q7//N+x/x7v2/fu77f6eSxKDe/1v+XiAA+/QnAAD//87IcOg=") mkdir(&(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 1.034759719s ago: executing program 3 (id=2252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0xec}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) 756.661187ms ago: executing program 1 (id=2253): r0 = syz_open_dev$video(&(0x7f0000000000), 0xcca, 0x181040) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x4, @pix_mp={0x8, 0x6, 0x32315659, 0x1, 0xc, [{0x43, 0xb6}, {0x9, 0x5}, {0x9, 0x8}, {0x0, 0x7}, {0x2, 0xf}, {0x4, 0x6}, {0x2, 0x9}, {0xffff1ab0, 0x241f1227}], 0x4, 0x0, 0x6, 0x1, 0x7}}) 397.520131ms ago: executing program 0 (id=2254): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@empty, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xfffe, 0x2}, {0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x9}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0xfffffffe, 0xfffffffd}}, 0xe8) 275.435964ms ago: executing program 3 (id=2255): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34324258}}) 0s ago: executing program 5 (id=2256): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f0000000040)=0x700) kernel console output (not intermixed with test programs): 659][ T7415] ? setup_bdev_super+0x4e6/0x5d0 [ 165.703739][ T7415] get_tree_bdev_flags+0x48e/0x5c0 [ 165.708909][ T7415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.714590][ T7415] ? __pfx_gfs2_fill_super+0x10/0x10 [ 165.718542][ T7413] loop2: detected capacity change from 0 to 65536 [ 165.719889][ T7415] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 165.719948][ T7415] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 165.737609][ T7415] gfs2_get_tree+0x54/0x220 [ 165.742140][ T7415] vfs_get_tree+0x92/0x2b0 [ 165.746606][ T7415] do_new_mount+0x2be/0xb40 [ 165.751137][ T7415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.758900][ T7415] ? __pfx_do_new_mount+0x10/0x10 [ 165.763966][ T7415] __se_sys_mount+0x2d6/0x3c0 [ 165.768670][ T7415] ? __pfx___se_sys_mount+0x10/0x10 [ 165.773893][ T7415] ? exc_page_fault+0x590/0x8b0 [ 165.778784][ T7415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.786385][ T7415] ? srso_alias_return_thunk+0x5/0xfbef5 [ 165.792087][ T7415] ? __x64_sys_mount+0x20/0xc0 [ 165.796888][ T7415] do_syscall_64+0xf3/0x230 [ 165.801525][ T7415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.807449][ T7415] RIP: 0033:0x7fba693816ba [ 165.811946][ T7415] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.831608][ T7415] RSP: 002b:00007fba6a202e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.840271][ T7415] RAX: ffffffffffffffda RBX: 00007fba6a202f10 RCX: 00007fba693816ba [ 165.848483][ T7415] RDX: 0000000020037f00 RSI: 0000000020037f40 RDI: 00007fba6a202ed0 [ 165.856485][ T7415] RBP: 0000000020037f00 R08: 00007fba6a202f10 R09: 0000000000000000 [ 165.864585][ T7415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020037f40 [ 165.872838][ T7415] R13: 00007fba6a202ed0 R14: 0000000000037f00 R15: 0000000020037f80 [ 165.880838][ T7415] [ 165.908762][ T7415] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 165.932444][ T7415] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 165.977092][ T7399] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 166.020094][ T25] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 166.030463][ T25] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 166.059312][ T7422] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.219173][ T7423] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.425402][ T25] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 395ms [ 166.502444][ T25] gfs2: fsid=syz:syz.0: jid=0: Done [ 166.532972][ T7399] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 166.575344][ T7399] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 166.640959][ T7428] loop4: detected capacity change from 0 to 128 [ 166.650484][ T7409] loop3: detected capacity change from 0 to 32768 [ 166.687246][ T7425] loop1: detected capacity change from 0 to 4096 [ 166.780122][ T7409] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz' [ 166.788269][ T7409] CPU: 1 UID: 0 PID: 7409 Comm: syz.3.600 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 166.798917][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.809145][ T7409] Call Trace: [ 166.809663][ T7431] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 166.812430][ T7409] [ 166.812446][ T7409] dump_stack_lvl+0x241/0x360 [ 166.812517][ T7409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.835957][ T7409] ? __pfx__printk+0x10/0x10 [ 166.840597][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.846351][ T7409] ? __kmalloc_cache_noprof+0x243/0x390 [ 166.851943][ T7409] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 166.857269][ T7409] sysfs_create_dir_ns+0x2ce/0x3a0 [ 166.862441][ T7409] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 166.868124][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.873891][ T7409] kobject_add_internal+0x435/0x8d0 [ 166.879163][ T7409] kobject_init_and_add+0x124/0x190 [ 166.884437][ T7409] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 166.890301][ T7409] ? __pfx_kobject_init_and_add+0x10/0x10 [ 166.896081][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.901741][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.907399][ T7409] ? __init_swait_queue_head+0xae/0x150 [ 166.912985][ T7409] gfs2_sys_fs_add+0x23b/0x4a0 [ 166.917791][ T7409] ? __pfx_gfs2_sys_fs_add+0x10/0x10 [ 166.923130][ T7409] ? __pfx_alloc_workqueue+0x10/0x10 [ 166.928484][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.934150][ T7409] ? read_word_at_a_time+0xe/0x20 [ 166.939212][ T7409] ? sized_strscpy+0x9a/0x2b0 [ 166.943928][ T7409] gfs2_fill_super+0x11ee/0x24d0 [ 166.948907][ T7409] ? __pfx_gfs2_fill_super+0x10/0x10 [ 166.954210][ T7409] ? snprintf+0xda/0x120 [ 166.958477][ T7409] ? __pfx_lock_release+0x10/0x10 [ 166.963521][ T7409] ? do_raw_spin_lock+0x14f/0x370 [ 166.968560][ T7409] ? __pfx_snprintf+0x10/0x10 [ 166.973258][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.978916][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.984569][ T7409] ? sb_set_blocksize+0x98/0xf0 [ 166.989442][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 166.995092][ T7409] ? setup_bdev_super+0x4e6/0x5d0 [ 167.000146][ T7409] get_tree_bdev_flags+0x48e/0x5c0 [ 167.005282][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.010926][ T7409] ? __pfx_gfs2_fill_super+0x10/0x10 [ 167.016239][ T7409] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 167.021904][ T7409] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 167.027572][ T7409] gfs2_get_tree+0x54/0x220 [ 167.032097][ T7409] vfs_get_tree+0x92/0x2b0 [ 167.036537][ T7409] do_new_mount+0x2be/0xb40 [ 167.041100][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.046748][ T7409] ? __pfx_do_new_mount+0x10/0x10 [ 167.051813][ T7409] __se_sys_mount+0x2d6/0x3c0 [ 167.056528][ T7409] ? __pfx___se_sys_mount+0x10/0x10 [ 167.061752][ T7409] ? exc_page_fault+0x590/0x8b0 [ 167.066624][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.072270][ T7409] ? srso_alias_return_thunk+0x5/0xfbef5 [ 167.077920][ T7409] ? __x64_sys_mount+0x20/0xc0 [ 167.082725][ T7409] do_syscall_64+0xf3/0x230 [ 167.087264][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.093258][ T7409] RIP: 0033:0x7fd67eb816ba [ 167.097710][ T7409] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.117463][ T7409] RSP: 002b:00007fd67f8cfe88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 167.125915][ T7409] RAX: ffffffffffffffda RBX: 00007fd67f8cff10 RCX: 00007fd67eb816ba [ 167.133900][ T7409] RDX: 0000000020013400 RSI: 0000000020013440 RDI: 00007fd67f8cfed0 [ 167.141974][ T7409] RBP: 0000000020013400 R08: 00007fd67f8cff10 R09: 0000000000000000 [ 167.149952][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020013440 [ 167.157942][ T7409] R13: 00007fd67f8cfed0 R14: 00000000000133f4 R15: 0000000020013480 [ 167.165959][ T7409] [ 167.171405][ T7409] kobject: kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory. [ 167.187092][ T7409] gfs2: fsid=syz:syz: error -17 adding sysfs files [ 167.431980][ T7433] loop1: detected capacity change from 0 to 16 [ 167.481225][ T7433] erofs (device loop1): mounted with root inode @ nid 36. [ 167.861739][ T7435] loop2: detected capacity change from 0 to 32768 [ 167.891201][ T7435] BTRFS: device fsid 8f67342e-760a-4d9f-bdfe-dfdef307742f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.607 (7435) [ 168.298661][ T7439] loop3: detected capacity change from 0 to 32768 [ 168.317541][ T7435] BTRFS info (device loop2): first mount of filesystem 8f67342e-760a-4d9f-bdfe-dfdef307742f [ 168.395340][ T7435] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 168.469312][ T7435] BTRFS info (device loop2): using free-space-tree [ 168.858424][ T7439] jbd2_journal_init_inode: Cannot locate journal superblock [ 168.866174][ T7439] (syz.3.610,7439,1):ocfs2_journal_init:951 ERROR: Linux journal layer error [ 168.987088][ T7437] loop5: detected capacity change from 0 to 32768 [ 169.071806][ T7439] (syz.3.610,7439,1):ocfs2_check_volume:2399 ERROR: Could not initialize journal! [ 169.081863][ T7439] (syz.3.610,7439,1):ocfs2_check_volume:2484 ERROR: status = -22 [ 169.089647][ T7439] (syz.3.610,7439,1):ocfs2_mount_volume:1819 ERROR: status = -22 [ 169.141677][ T7437] (syz.5.613,7437,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 169.151376][ T7437] (syz.5.613,7437,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 169.221012][ T7446] loop1: detected capacity change from 0 to 32768 [ 169.329956][ T7446] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.612 (7446) [ 169.374485][ T7439] (syz.3.610,7439,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 169.530990][ T7444] loop0: detected capacity change from 0 to 32768 [ 169.539421][ T7444] (syz.0.611,7444,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 169.549871][ T7444] (syz.0.611,7444,1):ocfs2_fill_super:1178 ERROR: status = -22 [ 170.630447][ T7464] loop0: detected capacity change from 0 to 4096 [ 170.731496][ T7446] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 170.785040][ T7446] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 170.840037][ T7446] BTRFS info (device loop1): using free-space-tree [ 171.172546][ T7464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.220001][ T7443] loop4: detected capacity change from 0 to 262144 [ 171.467894][ T7435] BTRFS error (device loop2): open_ctree failed [ 171.492316][ T7446] BTRFS error (device loop1): open_ctree failed [ 171.492710][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.317459][ T7492] loop1: detected capacity change from 0 to 32768 [ 172.406070][ T7492] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.619 (7492) [ 172.425039][ T7492] BTRFS info (device loop1): first mount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 172.436652][ T7492] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 172.446955][ T7492] BTRFS info (device loop1): using free-space-tree [ 172.892454][ T7501] loop2: detected capacity change from 0 to 1 [ 173.021983][ T7501] syz.2.620: attempt to access beyond end of device [ 173.021983][ T7501] loop2: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 173.099772][ T7501] SQUASHFS error: Failed to read block 0x0: -5 [ 173.106128][ T7501] unable to read squashfs_super_block [ 173.307719][ T7504] loop4: detected capacity change from 0 to 3 [ 173.359991][ T7504] syz.4.622: attempt to access beyond end of device [ 173.359991][ T7504] loop4: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 173.459813][ T7504] SQUASHFS error: Failed to read block 0x0: -5 [ 173.648094][ T7504] unable to read squashfs_super_block [ 173.682493][ T7507] loop2: detected capacity change from 0 to 8 [ 173.801414][ T7509] loop5: detected capacity change from 0 to 3 [ 173.808906][ T7509] syz.5.624: attempt to access beyond end of device [ 173.808906][ T7509] loop5: rw=2048, sector=0, nr_sectors = 8 limit=3 [ 173.969684][ T7509] SQUASHFS error: Failed to read block 0x0: -5 [ 173.976327][ T7509] unable to read squashfs_super_block [ 174.168835][ T7512] loop4: detected capacity change from 0 to 1 [ 174.180330][ T7514] loop3: detected capacity change from 0 to 128 [ 174.195513][ T7514] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 174.207654][ T7514] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.220053][ T7512] syz.4.625: attempt to access beyond end of device [ 174.220053][ T7512] loop4: rw=2048, sector=0, nr_sectors = 8 limit=1 [ 174.233644][ T7512] SQUASHFS error: Failed to read block 0x0: -5 [ 174.240050][ T7512] unable to read squashfs_super_block [ 174.644508][ T7526] loop5: detected capacity change from 0 to 128 [ 174.723225][ T7522] loop2: detected capacity change from 0 to 4096 [ 174.786529][ T7526] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 174.883332][ T7528] loop4: detected capacity change from 0 to 128 [ 174.908327][ T7522] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 174.928661][ T7526] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 174.953931][ T7522] UDF-fs: Scanning with blocksize 512 failed [ 175.075710][ T7522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.168411][ T5826] BTRFS info (device loop1): last unmount of filesystem d552757d-9c39-40e3-95f0-16d819589928 [ 175.184520][ T7531] loop0: detected capacity change from 0 to 128 [ 175.426076][ T7535] loop4: detected capacity change from 0 to 512 [ 175.721257][ T7541] loop5: detected capacity change from 0 to 256 [ 175.751374][ T7540] loop0: detected capacity change from 0 to 2048 [ 176.031540][ T7537] loop2: detected capacity change from 0 to 8192 [ 176.387313][ T7547] loop1: detected capacity change from 0 to 8192 [ 176.457688][ T7547] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 176.489969][ T7547] UDF-fs: Scanning with blocksize 512 failed [ 176.539541][ T7547] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 176.581937][ T7547] UDF-fs: Scanning with blocksize 1024 failed [ 176.619333][ T7547] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 176.631069][ T7533] loop3: detected capacity change from 0 to 32768 [ 176.637111][ T7547] UDF-fs: Scanning with blocksize 2048 failed [ 176.683156][ T7533] BTRFS: device fsid 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.629 (7533) [ 176.746267][ T7547] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.766614][ T7533] BTRFS info (device loop3): first mount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 176.834427][ T7533] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 176.869397][ T7533] BTRFS info (device loop3): using free-space-tree [ 177.399062][ T7543] loop4: detected capacity change from 0 to 32768 [ 177.910801][ T7549] loop0: detected capacity change from 0 to 32768 [ 177.915888][ T5827] BTRFS info (device loop3): last unmount of filesystem 4c645aab-a6bb-4c7f-acba-f49e7dbd8268 [ 178.395972][ T7549] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 178.712946][ T7549] XFS (loop0): Ending clean mount [ 178.753597][ T7580] loop4: detected capacity change from 0 to 2048 [ 178.782533][ T7565] loop1: detected capacity change from 0 to 32768 [ 178.820558][ T7565] (syz.1.641,7565,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 178.880762][ T5825] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 178.899500][ T7565] (syz.1.641,7565,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 178.927824][ T7580] loop4: p2 p3 p7 [ 179.024998][ T7551] loop2: detected capacity change from 0 to 32768 [ 179.174037][ T7585] loop3: detected capacity change from 0 to 128 [ 179.202808][ T7551] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.635301][ T7551] XFS (loop2): Ending clean mount [ 179.699374][ T1199] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 179.857155][ T5845] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 179.897569][ T1199] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 179.909363][ T1199] usb 5-1: config 0 has no interface number 0 [ 179.917767][ T1199] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=60.74 [ 179.927898][ T1199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.966243][ T1199] usb 5-1: Product: syz [ 179.977594][ T1199] usb 5-1: Manufacturer: syz [ 179.984474][ T1199] usb 5-1: SerialNumber: syz [ 180.794755][ T7603] loop5: detected capacity change from 0 to 2048 [ 180.921737][ T7590] loop1: detected capacity change from 0 to 131072 [ 180.940670][ T1199] usb 5-1: config 0 descriptor?? [ 180.958786][ T1199] as10x_usb: device has been detected [ 180.960753][ T7606] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 180.965045][ T1199] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 181.142615][ T7590] XFS (loop1): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 181.163750][ T7612] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 181.183459][ T7612] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 181.186287][ T1199] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 181.260399][ T7614] loop5: detected capacity change from 0 to 512 [ 181.330675][ T7619] loop2: detected capacity change from 0 to 256 [ 181.504469][ T7619] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 181.652259][ T7619] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 181.728187][ T7619] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 181.760229][ T7590] XFS (loop1): Ending clean mount [ 181.784757][ T7619] UDF-fs: Scanning with blocksize 512 failed [ 181.866035][ T7619] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 182.036318][ T7619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 182.189735][ T5826] XFS (loop1): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 182.255922][ T7621] loop3: detected capacity change from 0 to 4096 [ 182.363028][ T1199] as10x_usb: error during firmware upload part1 [ 182.366141][ T7621] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 182.370342][ T1199] Registered device PCTV Systems picoStick (74e) [ 182.394287][ T7600] loop0: detected capacity change from 0 to 131072 [ 182.477322][ T1199] usb 5-1: USB disconnect, device number 13 [ 182.590396][ T7623] loop5: detected capacity change from 0 to 8192 [ 182.674635][ T7633] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.794178][ T7600] XFS (loop0): Deprecated V4 format (crc=0) not supported by kernel. [ 183.648494][ T7641] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.684070][ T7641] SET target dimension over the limit! [ 183.823910][ T7645] xt_nat: multiple ranges no longer supported [ 184.007764][ T1199] Unregistered device PCTV Systems picoStick (74e) [ 184.038818][ T1199] as10x_usb: device has been disconnected [ 184.766134][ T7673] netlink: 'syz.0.675': attribute type 9 has an invalid length. [ 184.806788][ T7673] netlink: 244 bytes leftover after parsing attributes in process `syz.0.675'. [ 185.943467][ T7693] loop5: detected capacity change from 0 to 64 [ 185.970527][ T7708] loop1: detected capacity change from 0 to 1764 [ 186.083038][ T7693] syz.5.686: attempt to access beyond end of device [ 186.083038][ T7693] loop5: rw=0, sector=3594, nr_sectors = 2 limit=64 [ 186.129806][ T7693] Buffer I/O error on dev loop5, logical block 1797, async page read [ 186.243937][ T7693] syz.5.686: attempt to access beyond end of device [ 186.243937][ T7693] loop5: rw=0, sector=3594, nr_sectors = 2 limit=64 [ 186.320600][ T7693] Buffer I/O error on dev loop5, logical block 1797, async page read [ 187.660993][ T7753] loop2: detected capacity change from 0 to 47 [ 187.717475][ T7754] loop3: detected capacity change from 0 to 1024 [ 187.749324][ C1] vkms_vblank_simulate: vblank timer overrun [ 187.809736][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 188.144964][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.272870][ T7764] netlink: 'syz.2.713': attribute type 21 has an invalid length. [ 188.331191][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.362871][ T7764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.713'. [ 188.545687][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.733457][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.434992][ T7806] loop4: detected capacity change from 0 to 128 [ 189.484118][ T7806] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 189.572497][ T7806] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 189.639317][ T7806] FAT-fs (loop4): Filesystem has been set read-only [ 189.808968][ T7814] netlink: 'syz.1.732': attribute type 10 has an invalid length. [ 189.863159][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.900973][ T7814] veth1_macvtap: left promiscuous mode [ 190.310075][ T7775] loop0: detected capacity change from 0 to 32768 [ 190.469672][ T7775] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 190.543194][ T7779] loop2: detected capacity change from 0 to 40427 [ 190.669881][ T7779] F2FS-fs (loop2): invalid crc value [ 190.734847][ T7775] XFS (loop0): Ending clean mount [ 190.885920][ T7779] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.074748][ T5825] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 191.164178][ T7809] loop5: detected capacity change from 0 to 65536 [ 191.218335][ T7855] Cannot find set identified by id 0 to match [ 191.265159][ T7861] loop3: detected capacity change from 0 to 256 [ 191.272632][ T7861] exfat: Deprecated parameter 'namecase' [ 191.316370][ T7863] netlink: 'syz.1.745': attribute type 1 has an invalid length. [ 191.340356][ T7861] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 191.355862][ T7809] XFS (loop5): Mounting V5 Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 191.535221][ T7873] IPv6: Can't replace route, no match found [ 191.689812][ T7779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 191.739660][ T7809] XFS (loop5): Ending clean mount [ 192.311686][ T7901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.758'. [ 192.311947][ T5829] XFS (loop5): Unmounting Filesystem d408de26-55fb-48ab-a8ab-aacedb20f9dd [ 192.522976][ T7907] netlink: 'syz.0.760': attribute type 29 has an invalid length. [ 192.615632][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.760'. [ 193.102071][ T7915] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.367015][ T7931] loop3: detected capacity change from 0 to 512 [ 193.545632][ T7931] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.659408][ T7931] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.696660][ T7933] loop1: detected capacity change from 0 to 4096 [ 193.705583][ T7933] EXT4-fs: Ignoring removed nobh option [ 193.762971][ T7947] loop0: detected capacity change from 0 to 64 [ 193.998815][ T7956] loop2: detected capacity change from 0 to 512 [ 194.036907][ T7933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.153286][ T7960] netlink: 'syz.4.778': attribute type 11 has an invalid length. [ 194.165835][ T7956] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 194.194814][ T7933] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 194.208374][ T7960] netlink: 224 bytes leftover after parsing attributes in process `syz.4.778'. [ 194.229586][ T7933] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 194.239576][ T7933] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.767: Failed to acquire dquot type 1 [ 194.285632][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.316069][ T7956] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a840e01c, mo2=0002] [ 194.324492][ T7956] System zones: 1-12 [ 194.328768][ T7956] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.413901][ T7956] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.775: Inode bitmap for bg 0 marked uninitialized [ 194.491202][ T7956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.542880][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.546144][ T7956] EXT4-fs error (device loop2): ext4_map_blocks:671: inode #2: block 5: comm syz.2.775: lblock 0 mapped to illegal pblock 5 (length 1) [ 194.593923][ T7956] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.775: error -117 reading directory block [ 195.053632][ T7986] loop5: detected capacity change from 0 to 4096 [ 195.066124][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.173629][ T7989] netlink: 'syz.2.785': attribute type 7 has an invalid length. [ 195.181781][ T7989] netlink: 'syz.2.785': attribute type 8 has an invalid length. [ 195.266702][ T7992] loop1: detected capacity change from 0 to 256 [ 195.370434][ T7994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.791'. [ 195.976720][ T7966] loop0: detected capacity change from 0 to 32768 [ 195.999023][ T8002] loop4: detected capacity change from 0 to 4096 [ 196.008350][ T7966] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.780 (7966) [ 196.059020][ T8002] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 196.084237][ T7966] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 196.137396][ T7966] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 196.190380][ T7966] BTRFS info (device loop0): using free-space-tree [ 196.209364][ T8002] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 196.281457][ T8023] loop1: detected capacity change from 0 to 8 [ 196.580619][ T8034] loop5: detected capacity change from 0 to 2048 [ 196.703673][ T8034] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 196.952043][ T7079] udevd[7079]: incorrect nilfs2 checksum on /dev/loop5 [ 196.968894][ T5825] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 197.218165][ T8052] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.248625][ T8057] netlink: 'syz.1.815': attribute type 9 has an invalid length. [ 197.256625][ T8057] netlink: 244 bytes leftover after parsing attributes in process `syz.1.815'. [ 197.834219][ T8072] loop3: detected capacity change from 0 to 8 [ 197.849516][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.823'. [ 198.436041][ T8094] binder: 8093:8094 ioctl c00c620f 0 returned -14 [ 198.627992][ T8109] netlink: 'syz.5.835': attribute type 30 has an invalid length. [ 198.958478][ T8120] loop4: detected capacity change from 0 to 256 [ 199.219301][ T8120] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d) [ 199.312634][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.323386][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.450854][ T8129] loop5: detected capacity change from 0 to 4096 [ 199.565740][ T8129] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 199.741776][ T8143] xt_cluster: node mask cannot exceed total number of nodes [ 200.601121][ T8165] loop0: detected capacity change from 0 to 2048 [ 200.683484][ T8174] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 200.771410][ T8165] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 200.877562][ T8165] Remounting filesystem read-only [ 200.925228][ T8182] loop3: detected capacity change from 0 to 256 [ 200.934600][ T8165] NILFS (loop0): error -5 truncating bmap (ino=16) [ 201.117544][ T8134] loop2: detected capacity change from 0 to 32768 [ 201.157495][ T8182] FAT-fs (loop3): Directory bread(block 64) failed [ 201.168728][ T8134] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.846 (8134) [ 201.191622][ T8182] FAT-fs (loop3): Directory bread(block 65) failed [ 201.216363][ T8182] FAT-fs (loop3): Directory bread(block 66) failed [ 201.246815][ T8182] FAT-fs (loop3): Directory bread(block 67) failed [ 201.280016][ T5825] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 201.331119][ T8134] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.369397][ T8134] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 201.409385][ T8134] BTRFS info (device loop2): using free-space-tree [ 201.455991][ T8182] FAT-fs (loop3): Directory bread(block 68) failed [ 201.463017][ T8182] FAT-fs (loop3): Directory bread(block 69) failed [ 201.470179][ T8182] FAT-fs (loop3): Directory bread(block 70) failed [ 201.476765][ T8182] FAT-fs (loop3): Directory bread(block 71) failed [ 201.485085][ T8202] netlink: 'syz.4.871': attribute type 10 has an invalid length. [ 201.505586][ T8182] FAT-fs (loop3): Directory bread(block 72) failed [ 201.560317][ T8182] FAT-fs (loop3): Directory bread(block 73) failed [ 201.580420][ T8202] veth1_macvtap: left promiscuous mode [ 201.712768][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.5.872'. [ 201.726680][ T8134] BTRFS info (device loop2 state M): max_inline set to 0 [ 201.865836][ T5845] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 201.897230][ T29] audit: type=1800 audit(2000000008.130:5): pid=8182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.865" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 202.350323][ T8239] loop4: detected capacity change from 0 to 4096 [ 202.944825][ T8262] netlink: 44 bytes leftover after parsing attributes in process `syz.1.884'. [ 202.999879][ T8267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.886'. [ 203.118025][ T8267] team_slave_0: entered allmulticast mode [ 203.299622][ T8271] xt_CT: You must specify a L4 protocol and not use inversions on it [ 203.757473][ T8291] netlink: 'syz.4.893': attribute type 2 has an invalid length. [ 203.915591][ T8297] binfmt_misc: register: failed to install interpreter file ./file0 [ 204.600834][ T8319] vlan0: entered promiscuous mode [ 204.617908][ T8319] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 204.688996][ T29] audit: type=1326 audit(2000000010.920:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67eb7ff19 code=0x7ffc0000 [ 204.707743][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.909'. [ 204.783619][ T29] audit: type=1326 audit(2000000010.920:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67eb7ff19 code=0x7ffc0000 [ 204.840707][ T29] audit: type=1326 audit(2000000010.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fd67eb7ff19 code=0x7ffc0000 [ 204.959240][ T29] audit: type=1326 audit(2000000011.070:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67eb7ff19 code=0x7ffc0000 [ 205.091781][ T29] audit: type=1326 audit(2000000011.070:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67eb7ff19 code=0x7ffc0000 [ 205.305409][ T8342] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 205.446085][ T8349] xt_TCPMSS: Only works on TCP SYN packets [ 205.467025][ T8350] netlink: zone id is out of range [ 205.866118][ T8367] netlink: 'syz.0.925': attribute type 33 has an invalid length. [ 205.883443][ T8309] loop4: detected capacity change from 0 to 32768 [ 205.913365][ T8367] team0: entered allmulticast mode [ 205.919216][ T8367] team_slave_0: entered allmulticast mode [ 205.925908][ T8367] team_slave_1: entered allmulticast mode [ 206.012627][ T8369] netlink: 'syz.5.923': attribute type 1 has an invalid length. [ 206.239260][ T8376] netlink: 'syz.1.927': attribute type 21 has an invalid length. [ 206.261784][ T8363] loop2: detected capacity change from 0 to 32768 [ 206.302347][ T8376] netlink: 168 bytes leftover after parsing attributes in process `syz.1.927'. [ 206.334393][ T8363] jfs_strtoUCS: char2uni returned -22. [ 206.341360][ T8363] charset = euc-jp, char = 0xd4 [ 206.350795][ T8309] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 206.531373][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 206.537508][ T5847] Bluetooth: hci0: command 0x0406 tx timeout [ 206.544198][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 206.550361][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 206.556413][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 206.564024][ T5847] Bluetooth: hci5: command 0x0406 tx timeout [ 206.577220][ T5838] ocfs2: Unmounting device (7,4) on (node local) [ 207.170554][ T8406] capability: warning: `syz.5.943' uses deprecated v2 capabilities in a way that may be insecure [ 207.602977][ T8422] loop0: detected capacity change from 0 to 256 [ 207.659687][ T8422] exfat: Deprecated parameter 'utf8' [ 207.665108][ T8422] exfat: Deprecated parameter 'utf8' [ 207.718948][ T8422] exfat: Deprecated parameter 'namecase' [ 207.745543][ T8422] exfat: Deprecated parameter 'utf8' [ 207.780507][ T8422] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 208.024547][ T8430] loop4: detected capacity change from 0 to 256 [ 208.060107][ T8429] x_tables: duplicate underflow at hook 1 [ 208.094070][ T8435] binder: 8431:8435 ioctl 400c620e 0 returned -14 [ 208.376876][ T8441] loop3: detected capacity change from 0 to 256 [ 209.381253][ T8484] loop4: detected capacity change from 0 to 512 [ 209.465579][ T8484] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.978: invalid indirect mapped block 256 (level 2) [ 209.531751][ T8489] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 34014 - 0 [ 209.576322][ T8484] EXT4-fs (loop4): 2 truncates cleaned up [ 209.838778][ T8484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.919660][ T8501] netlink: zone id is out of range [ 209.954013][ T8501] netlink: zone id is out of range [ 209.991736][ T8501] netlink: zone id is out of range [ 210.016976][ T8501] netlink: zone id is out of range [ 210.037063][ T8501] netlink: zone id is out of range [ 210.050189][ T8489] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 34014 - 0 [ 210.059037][ T8489] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 34014 - 0 [ 210.060632][ T8501] netlink: zone id is out of range [ 210.067935][ T8489] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 34014 - 0 [ 210.189397][ T8501] netlink: zone id is out of range [ 210.194611][ T8501] netlink: zone id is out of range [ 210.222604][ T8501] netlink: zone id is out of range [ 210.227797][ T8501] netlink: zone id is out of range [ 210.299634][ T8489] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 49014 - 0 [ 210.359259][ T8489] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 49014 - 0 [ 210.398362][ T29] audit: type=1800 audit(2000000016.630:11): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.978" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 210.452946][ T8489] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 49014 - 0 [ 210.521553][ T8489] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 49014 - 0 [ 210.579520][ T8489] geneve2: entered promiscuous mode [ 210.585686][ T8489] geneve2: entered allmulticast mode [ 210.736807][ T8525] loop1: detected capacity change from 0 to 1024 [ 210.762855][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.819328][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.997'. [ 210.828350][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.997'. [ 211.161322][ T8525] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 211.285258][ T8545] loop2: detected capacity change from 0 to 256 [ 211.622024][ T8554] autofs4:pid:8554:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 211.707934][ T8557] loop1: detected capacity change from 0 to 2048 [ 211.791934][ T8557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.914574][ T8557] process 'syz.1.1004' launched './file1' with NULL argv: empty string added [ 212.142870][ T8568] xt_CT: No such helper "syz1" [ 212.176921][ T8570] loop0: detected capacity change from 0 to 256 [ 212.257449][ T8570] FAT-fs (loop0): Directory bread(block 64) failed [ 212.289395][ T8570] FAT-fs (loop0): Directory bread(block 65) failed [ 212.307587][ T8576] netlink: 'syz.1.1014': attribute type 3 has an invalid length. [ 212.322637][ T8570] FAT-fs (loop0): Directory bread(block 66) failed [ 212.357977][ T8570] FAT-fs (loop0): Directory bread(block 67) failed [ 212.359499][ T8576] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1014'. [ 212.377592][ T8570] FAT-fs (loop0): Directory bread(block 68) failed [ 212.419471][ T8570] FAT-fs (loop0): Directory bread(block 69) failed [ 212.446775][ T8570] FAT-fs (loop0): Directory bread(block 70) failed [ 212.493766][ T8578] loop2: detected capacity change from 0 to 2048 [ 212.501962][ T8570] FAT-fs (loop0): Directory bread(block 71) failed [ 212.529670][ T8570] FAT-fs (loop0): Directory bread(block 72) failed [ 212.554269][ T8570] FAT-fs (loop0): Directory bread(block 73) failed [ 212.588300][ T8578] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 212.706258][ T8584] : entered promiscuous mode [ 212.804020][ T29] audit: type=1800 audit(2000000019.030:12): pid=8578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1017" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 213.132008][ T8601] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 213.190533][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1025'. [ 213.269367][ T8603] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 213.424990][ T8607] loop0: detected capacity change from 0 to 8 [ 213.452556][ T8607] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 213.558926][ T8607] cramfs: Error -3 while decompressing! [ 213.619369][ T8607] cramfs: ffffffff9a4f2368(26)->ffff88804e026000(4096) [ 213.626395][ T8607] cramfs: Error -5 while decompressing! [ 213.672125][ T8607] cramfs: ffffffff9a4f2382(26)->ffff88807a481000(4096) [ 213.729570][ T8607] cramfs: Error -3 while decompressing! [ 213.755393][ T8607] cramfs: ffffffff9a4f239c(16)->ffff88804d933000(4096) [ 213.780608][ T8607] cramfs: Error -3 while decompressing! [ 213.810882][ T8607] cramfs: ffffffff9a4f2368(26)->ffff88804e026000(4096) [ 213.818351][ T29] audit: type=1800 audit(2000000020.050:13): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1030" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 214.062694][ T8630] kAFS: unable to lookup cell '/' [ 214.251295][ T8620] bond1: entered promiscuous mode [ 214.256975][ T8620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.292881][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 214.304674][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1042'. [ 214.316559][ T8634] loop1: detected capacity change from 0 to 2048 [ 214.379506][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 214.464180][ T8634] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 214.506615][ T8642] tmpfs: Bad value for 'mpol' [ 214.559470][ T8634] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 214.585072][ T8634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.597636][ T8645] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1049'. [ 215.120119][ T8651] xt_TCPMSS: Only works on TCP SYN packets [ 215.126475][ T8662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1059'. [ 215.270207][ T8668] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 215.706327][ T8682] netlink: 'syz.5.1066': attribute type 10 has an invalid length. [ 215.926340][ T8682] team0: Port device wlan1 added [ 216.283940][ T8656] loop3: detected capacity change from 0 to 32768 [ 216.372456][ T8701] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 216.396006][ T8708] loop4: detected capacity change from 0 to 256 [ 216.396174][ T8656] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.544485][ T8708] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0a619f0a, utbl_chksum : 0xe619d30d) [ 216.708983][ T8721] loop0: detected capacity change from 0 to 512 [ 216.770394][ T8721] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02d, mo2=0002] [ 216.778699][ T8721] System zones: 1-12 [ 216.819654][ T8721] EXT4-fs (loop0): orphan cleanup on readonly fs [ 216.839652][ T8721] EXT4-fs error (device loop0): __ext4_iget:4984: inode #11: block 393240: comm syz.0.1081: invalid block [ 216.892752][ T8721] EXT4-fs (loop0): Remounting filesystem read-only [ 216.947554][ T8721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 217.006144][ T8732] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 217.069413][ T8656] XFS (loop3): Ending clean mount [ 217.143641][ T8656] XFS (loop3): Quotacheck needed: Please wait. [ 217.174774][ T8736] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 217.203833][ T8736] CIFS mount error: No usable UNC path provided in device string! [ 217.203833][ T8736] [ 217.219900][ T8736] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 217.375272][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.432666][ T8656] XFS (loop3): Quotacheck: Done. [ 217.708188][ T5827] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 217.719443][ T5959] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 217.989677][ T5959] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.998714][ T5959] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.023854][ T5959] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.033307][ T5959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.044491][ T5959] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.056938][ T5959] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.066397][ T5959] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.112015][ T5959] usb 3-1: Product: syz [ 218.116356][ T5959] usb 3-1: Manufacturer: syz [ 218.126700][ T5959] cdc_wdm 3-1:1.0: skipping garbage [ 218.132496][ T5959] cdc_wdm 3-1:1.0: skipping garbage [ 218.150693][ T5959] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 218.198569][ T5959] cdc_wdm 3-1:1.0: Unknown control protocol [ 218.387516][ T8750] loop1: detected capacity change from 0 to 32768 [ 218.423000][ T8740] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 218.433022][ T8750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1095 (8750) [ 218.507443][ T8750] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 218.524779][ T5959] usb 3-1: USB disconnect, device number 20 [ 218.527486][ T8750] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 218.550657][ T8750] BTRFS info (device loop1): using free-space-tree [ 219.117747][ T1199] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 219.214131][ T8771] loop4: detected capacity change from 0 to 32768 [ 219.349313][ T1199] usb 6-1: Using ep0 maxpacket: 32 [ 219.366503][ T1199] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.425257][ T1199] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.486161][ T1199] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 219.538575][ T1199] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.567303][ T8810] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 219.746966][ T1199] hub 6-1:4.0: USB hub found [ 219.763863][ T5826] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 220.110830][ T1199] hub 6-1:4.0: config failed, hub has too many ports! (err -19) [ 220.439763][ T1199] usb 6-1: USB disconnect, device number 16 [ 220.451168][ T8831] loop0: detected capacity change from 0 to 2048 [ 220.497601][ T8831] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 220.884492][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.933071][ T8843] xt_hashlimit: max too large, truncated to 1048576 [ 221.015505][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.118068][ T8847] loop4: detected capacity change from 0 to 164 [ 221.187303][ T8852] loop2: detected capacity change from 0 to 512 [ 221.207292][ T8847] Unable to read rock-ridge attributes [ 221.284472][ T8853] __vm_enough_memory: pid: 8853, comm: syz.0.1129, bytes: 4503599627366400 not enough memory for the allocation [ 221.352163][ T8852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.417317][ T8852] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.749825][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.918595][ T29] audit: type=1326 audit(2000000028.150:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 221.999966][ T29] audit: type=1326 audit(2000000028.150:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 222.123194][ T29] audit: type=1326 audit(2000000028.150:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 222.223293][ T29] audit: type=1326 audit(2000000028.150:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 222.245638][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.247291][ T8881] loop0: detected capacity change from 0 to 1024 [ 222.261619][ T8878] netlink: 'syz.4.1142': attribute type 10 has an invalid length. [ 222.281774][ T8878] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1142'. [ 222.324083][ T29] audit: type=1326 audit(2000000028.150:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8869 comm="syz.0.1137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 222.346301][ C0] vkms_vblank_simulate: vblank timer overrun [ 222.426530][ T8878] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 222.879734][ T8896] loop0: detected capacity change from 0 to 128 [ 222.943305][ T8900] loop3: detected capacity change from 0 to 8 [ 222.946514][ T8856] loop5: detected capacity change from 0 to 32768 [ 222.958044][ T8856] XFS: ikeep mount option is deprecated. [ 222.963956][ T8856] XFS: noikeep mount option is deprecated. [ 222.980780][ T8900] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 223.020338][ T1199] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 223.077949][ T8896] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.109419][ T8896] ext4 filesystem being mounted at /198/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.147818][ T8900] cramfs: Error -3 while decompressing! [ 223.165318][ T8900] cramfs: ffffffff9a4f6368(26)->ffff888052d42000(4096) [ 223.199639][ T8900] cramfs: Error -3 while decompressing! [ 223.205408][ T8900] cramfs: ffffffff9a4f6382(282)->ffff888073158000(4096) [ 223.207462][ T8856] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 223.225677][ T8900] cramfs: bad data blocksize 4294966884 [ 223.248165][ T8900] cramfs: Error -3 while decompressing! [ 223.258237][ T8900] cramfs: ffffffff9a4f6368(26)->ffff888052d42000(4096) [ 223.263337][ T5825] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.312126][ T29] audit: type=1800 audit(2000000029.510:19): pid=8900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1152" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 223.449953][ T1199] usb 3-1: Using ep0 maxpacket: 8 [ 223.459267][ T1199] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 223.468462][ T1199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.479644][ T1199] usb 3-1: Product: syz [ 223.483872][ T1199] usb 3-1: Manufacturer: syz [ 223.488499][ T1199] usb 3-1: SerialNumber: syz [ 223.495929][ T1199] usb 3-1: config 0 descriptor?? [ 223.508209][ T1199] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 223.631740][ T8856] XFS (loop5): Ending clean mount [ 223.652965][ T8856] XFS (loop5): Quotacheck needed: Please wait. [ 223.772255][ T29] audit: type=1326 audit(2000000030.010:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 223.835774][ T8856] XFS (loop5): Quotacheck: Done. [ 223.847751][ T29] audit: type=1326 audit(2000000030.010:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 223.939716][ T1199] gspca_sonixj: reg_r err -71 [ 223.944565][ T1199] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 223.969263][ T29] audit: type=1326 audit(2000000030.060:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 223.975884][ T1199] usb 3-1: USB disconnect, device number 21 [ 224.022990][ T8931] netlink: 'syz.1.1163': attribute type 39 has an invalid length. [ 224.031274][ T29] audit: type=1326 audit(2000000030.060:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8925 comm="syz.0.1160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04c017ff19 code=0x7ffc0000 [ 224.175676][ T8931] veth0_macvtap: left promiscuous mode [ 224.234070][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.297300][ T5829] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 224.529596][ T8943] loop3: detected capacity change from 0 to 16 [ 224.629755][ T8943] erofs (device loop3): mounted with root inode @ nid 36. [ 224.945434][ T8951] netlink: 'syz.2.1172': attribute type 3 has an invalid length. [ 224.955170][ T8951] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1172'. [ 225.079885][ T5904] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 225.166939][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 225.213592][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.233707][ T8958] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 225.264183][ T5904] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 225.273701][ T5904] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 225.287189][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1179'. [ 225.304041][ T5904] usb 5-1: Product: syz [ 225.308268][ T5904] usb 5-1: Manufacturer: syz [ 225.326502][ T5904] usb 5-1: SerialNumber: syz [ 225.395947][ T5904] usb 5-1: config 0 descriptor?? [ 225.639620][ T5904] hso 5-1:0.0: Failed to find INT IN ep [ 225.645879][ T5904] usb-storage 5-1:0.0: USB Mass Storage device detected [ 225.858805][ T5904] usb 5-1: USB disconnect, device number 14 [ 226.512853][ T9005] loop3: detected capacity change from 0 to 512 [ 226.558590][ T9005] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1200: bad orphan inode 13 [ 226.665239][ T9005] ext4_test_bit(bit=12, block=4) = 1 [ 226.677580][ T9005] is_bad_inode(inode)=0 [ 226.711926][ T9005] NEXT_ORPHAN(inode)=0 [ 226.739408][ T9005] max_ino=32 [ 226.742729][ T9005] i_nlink=1 [ 226.747071][ T9005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.896401][ T9016] loop4: detected capacity change from 0 to 2048 [ 226.915470][ T9005] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.1200: Unrecognised inode hash code 20 [ 226.939552][ T9005] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.1200: Corrupt directory, running e2fsck is recommended [ 226.962854][ T9016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.969697][ T9023] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1206'. [ 227.016970][ T9023] unsupported nlmsg_type 40 [ 227.056134][ T8] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 227.158666][ T5827] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.229927][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 227.275142][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 227.296356][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 227.340192][ T8] usb 6-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 227.369353][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.399685][ T8] usb 6-1: Product: syz [ 227.403915][ T8] usb 6-1: Manufacturer: syz [ 227.408736][ T8] usb 6-1: SerialNumber: syz [ 227.438446][ T8] usb 6-1: config 0 descriptor?? [ 227.448725][ T9017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 227.482127][ T9017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 227.584667][ T9035] dns_resolver: Unsupported server list version (0) [ 227.805751][ T9017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 227.840695][ T9017] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 227.884319][ T9047] netlink: 'syz.2.1218': attribute type 21 has an invalid length. [ 227.929761][ T9047] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1218'. [ 227.958602][ T9047] netlink: 'syz.2.1218': attribute type 5 has an invalid length. [ 228.024886][ T9047] netlink: 'syz.2.1218': attribute type 6 has an invalid length. [ 228.052618][ T8] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 228.064929][ T9047] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1218'. [ 228.108053][ T8] asix 6-1:0.0: probe with driver asix failed with error -71 [ 228.199899][ T8] usb 6-1: USB disconnect, device number 17 [ 228.539325][ T5955] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 228.584327][ T9069] loop0: detected capacity change from 0 to 1024 [ 228.622165][ T9069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.655133][ T9069] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.715662][ T9069] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1228: corrupted xattr block 128: overlapping e_value [ 228.720112][ T5955] usb 2-1: Using ep0 maxpacket: 16 [ 228.816222][ T5955] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.848058][ T5955] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 228.865383][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.905110][ T5955] usb 2-1: config 0 descriptor?? [ 228.970218][ T5955] gspca_main: spca501-2.14.0 probing 0000:0000 [ 229.028449][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.456165][ T5955] gspca_spca501: reg write: error -71 [ 229.465258][ T5955] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 229.473326][ T5955] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 229.500150][ T5955] usb 2-1: USB disconnect, device number 18 [ 230.217112][ T9124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1253'. [ 230.888370][ T9151] tmpfs: Bad value for 'mpol' [ 231.002621][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 231.011858][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 231.052541][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1269'. [ 231.088039][ T9157] erspan0: default FDB implementation only supports local addresses [ 231.152240][ T9162] syz.4.1272 (9162): attempted to duplicate a private mapping with mremap. This is not supported. [ 231.309690][ T9167] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 231.519433][ T5955] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 231.553195][ T9175] loop5: detected capacity change from 0 to 256 [ 231.669331][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 231.683037][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 231.706155][ T5955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 231.778457][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 231.849396][ T5959] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 231.858818][ T5955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 231.909725][ T5955] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 231.944064][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 231.964279][ T5955] usb 4-1: Product: syz [ 231.968601][ T5955] usb 4-1: Manufacturer: syz [ 232.006536][ T5955] usb 4-1: SerialNumber: syz [ 232.018200][ T5959] usb 3-1: New USB device found, idVendor=0403, idProduct=0000, bcdDevice= 4.00 [ 232.031554][ T5955] usb 4-1: config 0 descriptor?? [ 232.041148][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.070361][ T5955] usb 4-1: NFC: intf ffff88807db7d000 id ffffffff8f309ae0 [ 232.080650][ T5959] usb 3-1: config 0 descriptor?? [ 232.120676][ T5959] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 232.142052][ T9187] loop4: detected capacity change from 0 to 4096 [ 232.161232][ T9194] loop0: detected capacity change from 0 to 256 [ 232.168484][ T9194] exfat: Deprecated parameter 'utf8' [ 232.185254][ T5959] usb 3-1: Detected FT232B [ 232.203393][ T9194] exfat: Deprecated parameter 'utf8' [ 232.237851][ T9194] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 232.285992][ T9187] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 232.367537][ T5955] nfcmrvl 4-1:0.0: NFC: registered with nci successfully [ 232.398195][ T5955] usb 4-1: USB disconnect, device number 18 [ 232.406717][ T5955] usb 4-1: NFC: intf ffff88807db7d000 [ 232.465321][ T9202] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 232.591259][ T5959] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 232.602827][ T5959] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 232.643486][ T5959] usb 3-1: USB disconnect, device number 22 [ 232.697438][ T5959] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 232.709033][ T5959] ftdi_sio 3-1:0.0: device disconnected [ 232.974633][ T9210] loop4: detected capacity change from 0 to 256 [ 233.013372][ T9210] exfat: Deprecated parameter 'utf8' [ 233.092367][ T9210] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 233.667168][ T9227] xt_TCPMSS: Only works on TCP SYN packets [ 233.910736][ T9234] Illegal XDP return value 4294967274 on prog (id 66) dev N/A, expect packet loss! [ 234.043019][ T9236] loop2: detected capacity change from 0 to 512 [ 234.142060][ T9236] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 234.169749][ T9242] loop5: detected capacity change from 0 to 164 [ 234.173456][ T9236] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 234.276272][ T9236] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 234.318468][ T9247] loop0: detected capacity change from 0 to 128 [ 234.380018][ T9245] loop4: detected capacity change from 0 to 4096 [ 234.411497][ T9236] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 234.421252][ T9236] System zones: 0-2, 18-18, 34-34 [ 234.451597][ T9245] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 234.477393][ T9236] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 234.550521][ T9236] EXT4-fs (loop2): 1 truncate cleaned up [ 234.569617][ T9236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.704933][ T9236] EXT4-fs error (device loop2): ext4_generic_delete_entry:2687: inode #2: block 3: comm syz.2.1308: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 234.782481][ T9236] EXT4-fs error (device loop2) in ext4_delete_entry:2758: Corrupt filesystem [ 234.902254][ T9263] loop5: detected capacity change from 0 to 1024 [ 235.067390][ T5904] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 235.112362][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.262941][ T5904] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=74.01 [ 235.274051][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.284861][ T5904] usb 1-1: config 0 descriptor?? [ 235.454033][ T5914] hfsplus: b-tree write err: -5, ino 4 [ 235.549602][ T5904] usb 1-1: string descriptor 0 read error: -71 [ 235.559000][ T5904] ttusbir 1-1:0.0: cannot find expected altsetting [ 235.636712][ T9281] loop1: detected capacity change from 0 to 4096 [ 235.643715][ T5904] usb 1-1: USB disconnect, device number 13 [ 235.713482][ T9281] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 235.836915][ T9281] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 235.893333][ T9289] loop3: detected capacity change from 0 to 4096 [ 236.006631][ T9289] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 236.165087][ T9289] ntfs3(loop3): failed to convert "c46c" to cp437 [ 236.339899][ T5842] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 236.397103][ T9307] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1341'. [ 236.563251][ T5842] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 236.583095][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.627929][ T5842] usb 3-1: Product: syz [ 236.644714][ T5842] usb 3-1: Manufacturer: syz [ 236.682620][ T5842] usb 3-1: SerialNumber: syz [ 236.750990][ T5842] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 236.846886][ T5904] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 236.999753][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 236.999780][ T29] audit: type=1326 audit(2000000043.240:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9326 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 237.131265][ T29] audit: type=1326 audit(2000000043.280:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9326 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 237.195979][ T29] audit: type=1326 audit(2000000043.280:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9326 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 237.299317][ T29] audit: type=1326 audit(2000000043.280:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9326 comm="syz.4.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 237.764373][ T9341] netlink: 'syz.5.1358': attribute type 21 has an invalid length. [ 237.810769][ T9341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1358'. [ 239.490816][ T9361] loop5: detected capacity change from 0 to 764 [ 239.579284][ T5959] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 239.597543][ T9361] rock: directory entry would overflow storage [ 239.658334][ T9361] rock: sig=0x4654, size=5, remaining=4 [ 239.841437][ T5959] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.899331][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.921098][ T9338] loop0: detected capacity change from 0 to 32768 [ 239.964838][ T9363] loop1: detected capacity change from 0 to 4096 [ 239.977704][ T5959] usb 4-1: config 0 descriptor?? [ 240.001996][ T9338] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1356 (9338) [ 240.033895][ T5959] cp210x 4-1:0.0: cp210x converter detected [ 240.102161][ T9363] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 240.294059][ T5959] usb 4-1: cp210x converter now attached to ttyUSB0 [ 240.440738][ T9367] SET target dimension over the limit! [ 240.468538][ T8] usb 4-1: USB disconnect, device number 19 [ 240.520030][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.582163][ T8] cp210x 4-1:0.0: device disconnected [ 240.632488][ T9369] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 240.711340][ T9369] overlayfs: missing 'lowerdir' [ 241.946885][ T9363] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 242.489403][ T9391] loop2: detected capacity change from 0 to 256 [ 242.569123][ C1] sched: DL replenish lagged too much [ 242.589731][ T9391] MINIX-fs: mounting file system with errors, running fsck is recommended [ 243.344994][ T9399] x_tables: duplicate entry at hook 3 [ 243.701981][ T9391] Trying to free block not in datazone [ 243.883776][ T9391] Trying to free block not in datazone [ 243.939978][ T9391] Trying to free block not in datazone [ 243.945534][ T9391] Trying to free block not in datazone [ 243.978199][ T9374] loop5: detected capacity change from 0 to 32768 [ 244.027327][ T9407] loop1: detected capacity change from 0 to 64 [ 244.051078][ T9406] xt_l2tp: v2 sid > 0xffff: 262144 [ 244.097266][ T9374] bcachefs (/dev/loop5): error reading default superblock: checksum error, type none: got should be [ 244.170301][ T9391] Trying to free block not in datazone [ 244.175853][ T9391] Trying to free block not in datazone [ 244.259629][ T9374] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 244.259849][ T9374] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 244.521220][ T9391] Trying to free block not in datazone [ 244.569682][ T9391] Trying to free block not in datazone [ 244.642239][ T9374] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 244.712920][ T9391] Trying to free block not in datazone [ 244.718498][ T9391] Trying to free block not in datazone [ 245.942200][ T9429] loop2: detected capacity change from 0 to 256 [ 246.359796][ T9429] FAT-fs (loop2): Directory bread(block 64) failed [ 246.366441][ T9429] FAT-fs (loop2): Directory bread(block 65) failed [ 246.473028][ T9429] FAT-fs (loop2): Directory bread(block 66) failed [ 246.520874][ T9429] FAT-fs (loop2): Directory bread(block 67) failed [ 246.592235][ T9429] FAT-fs (loop2): Directory bread(block 68) failed [ 246.598888][ T9429] FAT-fs (loop2): Directory bread(block 69) failed [ 246.707143][ T9429] FAT-fs (loop2): Directory bread(block 70) failed [ 246.749596][ T5959] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 246.770286][ T9429] FAT-fs (loop2): Directory bread(block 71) failed [ 246.777690][ T9429] FAT-fs (loop2): Directory bread(block 72) failed [ 246.917664][ T9429] FAT-fs (loop2): Directory bread(block 73) failed [ 247.072857][ T5959] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 247.124753][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.225105][ T5959] usb 2-1: config 0 descriptor?? [ 247.733646][ T5959] usb 2-1: Cannot set MAC address [ 247.758192][ T9445] loop0: detected capacity change from 0 to 256 [ 247.789724][ T5959] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 247.948596][ T5959] usb 2-1: USB disconnect, device number 19 [ 247.998348][ T9447] tmpfs: Bad value for 'mpol' [ 248.025401][ T9445] FAT-fs (loop0): Directory bread(block 64) failed [ 248.095313][ T9445] FAT-fs (loop0): Directory bread(block 65) failed [ 248.158109][ T9445] FAT-fs (loop0): Directory bread(block 66) failed [ 248.229281][ T9445] FAT-fs (loop0): Directory bread(block 67) failed [ 248.291504][ T9445] FAT-fs (loop0): Directory bread(block 68) failed [ 248.298138][ T9445] FAT-fs (loop0): Directory bread(block 69) failed [ 248.358327][ T9449] Cannot find set identified by id 0 to match [ 248.449414][ T9445] FAT-fs (loop0): Directory bread(block 70) failed [ 248.456053][ T9445] FAT-fs (loop0): Directory bread(block 71) failed [ 248.572385][ T9445] FAT-fs (loop0): Directory bread(block 72) failed [ 248.644493][ T9445] FAT-fs (loop0): Directory bread(block 73) failed [ 249.515867][ T9461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.822364][ T9483] loop5: detected capacity change from 0 to 64 [ 253.375111][ T9511] loop0: detected capacity change from 0 to 1024 [ 253.728815][ T9511] syz.0.1435: attempt to access beyond end of device [ 253.728815][ T9511] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 255.299271][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 255.332803][ T9537] net_ratelimit: 337 callbacks suppressed [ 255.332848][ T9537] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.400042][ T9538] loop5: detected capacity change from 0 to 256 [ 255.454511][ T9540] overlayfs: failed to resolve './file0.': -2 [ 255.520985][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 255.624661][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 255.634043][ T8] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 255.669411][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.739274][ T8] usb 1-1: Product: syz [ 255.743570][ T8] usb 1-1: Manufacturer: syz [ 255.829244][ T8] usb 1-1: SerialNumber: syz [ 255.935922][ T8] usb 1-1: config 0 descriptor?? [ 256.003647][ T8] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 256.566143][ T9545] loop1: detected capacity change from 0 to 4096 [ 256.586387][ T8] gspca_ov534_9: reg_w failed -110 [ 256.615556][ T9548] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1452'. [ 256.740144][ T9545] NILFS (loop1): invalid segment: Checksum error in segment payload [ 256.748360][ T9545] NILFS (loop1): trying rollback from an earlier position [ 257.039505][ T8] gspca_ov534_9: Unknown sensor 0000 [ 257.039638][ T8] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 257.086416][ T9545] NILFS (loop1): recovery complete [ 257.178954][ T9555] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.343841][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1456'. [ 257.426703][ T9559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1456'. [ 258.540214][ T9570] loop2: detected capacity change from 0 to 128 [ 258.661144][ T9570] FAT-fs (loop2): bread failed, FSINFO block (sector = 202) [ 258.963461][ T8] usb 1-1: USB disconnect, device number 14 [ 259.466358][ T9584] loop1: detected capacity change from 0 to 128 [ 259.527269][ T9587] loop4: detected capacity change from 0 to 512 [ 259.716082][ T9587] EXT4-fs (loop4): Test dummy encryption mode enabled [ 259.916230][ T9587] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 260.016094][ T9587] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.1468: attempt to clear invalid blocks 2 len 1 [ 260.220583][ T9587] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 260.259546][ T9595] netlink: 'syz.0.1471': attribute type 32 has an invalid length. [ 260.408672][ T9587] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1468: invalid indirect mapped block 1819239214 (level 0) [ 260.562289][ T9587] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.1468: invalid indirect mapped block 1819239214 (level 1) [ 260.645245][ T9587] EXT4-fs (loop4): 1 truncate cleaned up [ 260.646452][ T9587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.793126][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.793275][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.270107][ T9587] fscrypt (loop4): Error allocating 'cts(cbc(aes))' transform: -4 [ 261.513832][ T9613] loop5: detected capacity change from 0 to 2048 [ 261.673670][ T9613] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 261.680706][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.750283][ C0] vkms_vblank_simulate: vblank timer overrun [ 261.779777][ T9617] loop0: detected capacity change from 0 to 512 [ 261.838396][ T9618] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 261.930215][ T9617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.930414][ T9617] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.093993][ T9623] xt_cgroup: path and classid specified [ 262.856699][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.978946][ T9633] loop4: detected capacity change from 0 to 128 [ 263.062920][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.112058][ T9635] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1482'. [ 263.219699][ T9635] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1482'. [ 263.275855][ T9633] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.329602][ T9635] netlink: 'syz.5.1482': attribute type 6 has an invalid length. [ 263.359476][ T9635] netlink: 'syz.5.1482': attribute type 5 has an invalid length. [ 263.415573][ T9633] ext4 filesystem being mounted at /251/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 263.464847][ T9635] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1482'. [ 264.113226][ T5838] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.645301][ T9652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.723297][ T9656] loop2: detected capacity change from 0 to 64 [ 264.740564][ T9652] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 264.905469][ T9652] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 268.157455][ T9709] (unnamed net_device) (uninitialized): up delay (3) is not a multiple of miimon (6516), value rounded to 0 ms [ 268.944268][ T9720] netlink: 'syz.0.1517': attribute type 16 has an invalid length. [ 269.034946][ T9720] netlink: 'syz.0.1517': attribute type 17 has an invalid length. [ 269.660321][ T9720] team0: left allmulticast mode [ 269.728593][ T9733] tmpfs: Bad value for 'mpol' [ 269.759280][ T9720] team_slave_0: left allmulticast mode [ 269.925468][ T9720] team_slave_1: left allmulticast mode [ 270.101616][ T9720] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.359769][ T9741] syz.2.1524 uses obsolete (PF_INET,SOCK_PACKET) [ 270.473896][ T9720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.557982][ T9760] loop0: detected capacity change from 0 to 256 [ 272.768789][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1540'. [ 272.851229][ T9779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1540'. [ 274.667652][ T9797] loop0: detected capacity change from 0 to 4096 [ 274.801812][ T9797] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 275.147210][ T9797] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 276.365111][ T9822] loop5: detected capacity change from 0 to 64 [ 276.613514][ T9822] Bad inode number on dev loop5: 6 is out of range [ 276.880798][ T9829] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 277.580080][ T9836] loop0: detected capacity change from 0 to 512 [ 277.750200][ T9836] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1562: attempt to clear invalid blocks 2 len 1 [ 277.927148][ T9836] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 278.042933][ T9836] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1562: invalid indirect mapped block 1819239214 (level 0) [ 278.215507][ T9836] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1562: invalid indirect mapped block 1819239214 (level 1) [ 278.230118][ T5895] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 278.382622][ T9836] EXT4-fs (loop0): 1 truncate cleaned up [ 278.417167][ T9836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.470528][ T5895] usb 6-1: Using ep0 maxpacket: 8 [ 278.540473][ T5895] usb 6-1: config 0 has an invalid interface number: 15 but max is 0 [ 278.613856][ T5895] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.715880][ T5895] usb 6-1: config 0 has no interface number 0 [ 278.749555][ T5843] Bluetooth: hci5: command 0x0406 tx timeout [ 278.758716][ T9836] EXT4-fs warning (device loop0): dx_probe:833: inode #2: comm syz.0.1562: Unrecognised inode hash code 20 [ 278.824186][ T5895] usb 6-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 278.875914][ T9836] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1562: Corrupt directory, running e2fsck is recommended [ 278.898418][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.007137][ T5895] usb 6-1: Product: syz [ 279.050957][ T5895] usb 6-1: Manufacturer: syz [ 279.055708][ T5895] usb 6-1: SerialNumber: syz [ 279.141096][ T5895] usb 6-1: config 0 descriptor?? [ 279.436619][ T5895] imon 6-1:0.15: unable to register, err -19 [ 279.454108][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.568866][ T5895] usb 6-1: USB disconnect, device number 18 [ 279.619740][ C0] vkms_vblank_simulate: vblank timer overrun [ 279.884243][ T9863] loop1: detected capacity change from 0 to 16 [ 279.967582][ T9863] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 280.561212][ T29] audit: type=1326 audit(2000000086.800:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992b7ff19 code=0x7ffc0000 [ 280.847087][ T29] audit: type=1326 audit(2000000086.940:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992b7ff19 code=0x7ffc0000 [ 281.077806][ T29] audit: type=1326 audit(2000000087.020:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fc992b7ff19 code=0x7ffc0000 [ 281.331523][ T29] audit: type=1326 audit(2000000087.020:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992b7ff19 code=0x7ffc0000 [ 281.438817][ T9880] IPv6: Can't replace route, no match found [ 281.547420][ T29] audit: type=1326 audit(2000000087.020:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9870 comm="syz.2.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc992b7ff19 code=0x7ffc0000 [ 281.789759][ T9885] tipc: Can't bind to reserved service type 0 [ 282.080217][ T9882] loop3: detected capacity change from 0 to 4096 [ 282.202928][ T9889] loop0: detected capacity change from 0 to 16 [ 282.261700][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1585'. [ 282.302226][ T9889] erofs (device loop0): mounted with root inode @ nid 36. [ 282.482332][ T9889] erofs (device loop0): read error -117 @ 0 of nid 36 [ 283.929602][ T9908] loop1: detected capacity change from 0 to 64 [ 284.998756][ T9924] loop5: detected capacity change from 0 to 16 [ 285.078967][ T9924] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 285.468259][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 286.359410][ T5895] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 286.553614][ T5895] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 286.553668][ T5895] usb 4-1: config 8 has no interface number 0 [ 286.553727][ T5895] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 286.553777][ T5895] usb 4-1: config 8 interface 177 has no altsetting 0 [ 286.553826][ T5895] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 286.553872][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.561592][ T9942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 286.840737][ T9949] loop2: detected capacity change from 0 to 512 [ 286.923015][ T5895] usb 4-1: string descriptor 0 read error: -71 [ 286.926874][ C0] ir_toy 4-1:8.177: out urb status: -71 [ 286.965455][ T9949] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 286.965575][ T9949] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 286.965619][ T9949] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1616: Failed to acquire dquot type 1 [ 287.003199][ T9949] EXT4-fs (loop2): 1 truncate cleaned up [ 287.004424][ T9949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.004600][ T9949] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.446900][ T5895] ir_toy 4-1:8.177: could not write reset command: -110 [ 287.447142][ T5895] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110 [ 287.465702][ T5895] usb 4-1: USB disconnect, device number 20 [ 287.686032][ T9949] Quota error (device loop2): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 287.686278][ T9949] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 287.686329][ T9949] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.1616: Failed to acquire dquot type 1 [ 288.055529][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.510478][ T9947] loop1: detected capacity change from 0 to 32768 [ 289.645997][ T9947] read_mapping_page failed! [ 289.720920][ T9947] jfs_mount: Failed to read AGGREGATE_I [ 289.788375][ T9947] Mount JFS Failure: -5 [ 289.808638][ T9947] jfs_mount failed w/return code = -5 [ 289.869722][ T9974] loop3: detected capacity change from 0 to 1764 [ 290.067528][ T9979] tc_dump_action: action bad kind [ 290.318207][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.370310][ T9988] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.324230][T10004] loop2: detected capacity change from 0 to 256 [ 292.440126][T10009] netlink: 'syz.5.1641': attribute type 2 has an invalid length. [ 292.467844][T10010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 292.669546][T10004] FAT-fs (loop2): Directory bread(block 64) failed [ 292.739242][T10004] FAT-fs (loop2): Directory bread(block 65) failed [ 292.800296][T10004] FAT-fs (loop2): Directory bread(block 66) failed [ 292.806992][T10004] FAT-fs (loop2): Directory bread(block 67) failed [ 292.940394][T10004] FAT-fs (loop2): Directory bread(block 68) failed [ 293.039569][T10004] FAT-fs (loop2): Directory bread(block 69) failed [ 293.051909][T10004] FAT-fs (loop2): Directory bread(block 70) failed [ 293.058535][T10004] FAT-fs (loop2): Directory bread(block 71) failed [ 293.196698][T10004] FAT-fs (loop2): Directory bread(block 72) failed [ 293.260483][T10004] FAT-fs (loop2): Directory bread(block 73) failed [ 293.319287][T10018] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1646'. [ 293.847060][T10024] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 294.007660][T10024] overlayfs: overlapping lowerdir path [ 294.867721][T10038] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1656'. [ 294.902526][ T8] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 295.178365][ T8] usb 6-1: config 0 has no interfaces? [ 295.266137][ T8] usb 6-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=a7.2d [ 295.329431][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.337618][ T8] usb 6-1: Product: syz [ 295.459202][ T8] usb 6-1: Manufacturer: syz [ 295.499637][T10044] loop0: detected capacity change from 0 to 1764 [ 295.516052][ T8] usb 6-1: SerialNumber: syz [ 295.553790][ T8] usb 6-1: config 0 descriptor?? [ 295.660745][T10044] tmpfs: Bad value for 'mpol' [ 295.847544][ T5959] usb 6-1: USB disconnect, device number 19 [ 296.340350][T10055] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1665'. [ 296.353866][T10056] loop3: detected capacity change from 0 to 8 [ 297.957256][T10076] loop1: detected capacity change from 0 to 512 [ 297.964368][T10074] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (2147483647) [ 298.055163][T10074] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 298.142793][T10076] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 298.377475][T10076] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1674: corrupted in-inode xattr: e_value out of bounds [ 298.559766][T10076] EXT4-fs (loop1): Remounting filesystem read-only [ 298.650585][T10076] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.736576][T10088] No such timeout policy "syz0" [ 298.813625][T10092] loop4: detected capacity change from 0 to 256 [ 299.125296][T10087] loop2: detected capacity change from 0 to 2048 [ 299.221913][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.248058][T10092] FAT-fs (loop4): Directory bread(block 64) failed [ 299.329394][T10092] FAT-fs (loop4): Directory bread(block 65) failed [ 299.379602][T10092] FAT-fs (loop4): Directory bread(block 66) failed [ 299.476518][T10092] FAT-fs (loop4): Directory bread(block 67) failed [ 299.504018][T10094] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 299.539445][T10092] FAT-fs (loop4): Directory bread(block 68) failed [ 299.546191][T10092] FAT-fs (loop4): Directory bread(block 69) failed [ 299.636438][T10094] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 299.686802][T10092] FAT-fs (loop4): Directory bread(block 70) failed [ 299.739735][T10087] Alternate GPT is invalid, using primary GPT. [ 299.746173][T10087] loop2: p1 p2 p3 [ 299.777207][T10092] FAT-fs (loop4): Directory bread(block 71) failed [ 299.841401][T10092] FAT-fs (loop4): Directory bread(block 72) failed [ 299.848159][T10092] FAT-fs (loop4): Directory bread(block 73) failed [ 299.922165][T10100] loop1: detected capacity change from 0 to 8 [ 301.352293][T10110] loop0: detected capacity change from 0 to 2048 [ 301.502574][T10110] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 301.807610][T10119] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 301.889040][T10120] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 302.031469][T10120] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 302.130145][T10117] loop4: detected capacity change from 0 to 4096 [ 302.244735][T10117] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 302.543801][T10117] ntfs3(loop4): Failed to initialize $Extend/$Reparse. [ 302.827245][T10132] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 302.907763][T10133] loop2: detected capacity change from 0 to 512 [ 302.914862][T10132] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 303.181713][T10133] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 303.241188][T10133] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 303.349701][T10133] EXT4-fs (loop2): 1 truncate cleaned up [ 303.404452][T10133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.691796][T10143] loop1: detected capacity change from 0 to 256 [ 303.783186][T10145] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1707'. [ 304.015659][T10133] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 304.609463][ T5845] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.781849][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.694964][T10169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.258527][T10174] lo speed is unknown, defaulting to 1000 [ 306.378622][T10174] lo speed is unknown, defaulting to 1000 [ 306.433233][T10179] loop5: detected capacity change from 0 to 16 [ 306.588019][T10179] erofs (device loop5): mounted with root inode @ nid 36. [ 306.625654][T10174] lo speed is unknown, defaulting to 1000 [ 307.123264][T10190] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 307.199447][T10190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.481068][ T8] lo speed is unknown, defaulting to 1000 [ 309.499623][T10174] infiniband syz2: set active [ 309.579423][T10174] infiniband syz2: added lo [ 309.675270][T10174] syz2: rxe_create_cq: returned err = -12 [ 309.756633][T10174] infiniband syz2: Couldn't create ib_mad CQ [ 309.819359][T10174] infiniband syz2: Couldn't open port 1 [ 309.899710][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 310.130240][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 310.190869][ T8] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 310.269369][T10174] RDS/IB: syz2: added [ 310.291663][ T8] usb 1-1: config 0 has no interface number 0 [ 310.362308][T10174] smc: adding ib device syz2 with port count 1 [ 310.402840][ T8] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 310.444795][T10174] smc: ib device syz2 port 1 has pnetid [ 310.541895][ T5959] lo speed is unknown, defaulting to 1000 [ 310.552995][ T8] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 310.646284][T10174] lo speed is unknown, defaulting to 1000 [ 310.669689][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.677905][ T8] usb 1-1: Product: syz [ 310.807210][ T8] usb 1-1: Manufacturer: syz [ 310.847394][ T8] usb 1-1: SerialNumber: syz [ 310.916490][ T8] usb 1-1: config 0 descriptor?? [ 311.467293][ T8] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 311.610104][ T8] usb 1-1: USB disconnect, device number 15 [ 312.029429][ T5895] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 312.249395][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 312.351872][ T5895] usb 6-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=46.8b [ 312.431354][T10174] lo speed is unknown, defaulting to 1000 [ 312.440936][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.449023][ T5895] usb 6-1: Product: syz [ 312.531660][ T5895] usb 6-1: Manufacturer: syz [ 312.536407][ T5895] usb 6-1: SerialNumber: syz [ 312.690254][ T5895] usb 6-1: config 0 descriptor?? [ 312.949914][ T5895] f81534a_ctrl 6-1:0.0: failed to set register 0x116: -5 [ 313.059709][ T5895] f81534a_ctrl 6-1:0.0: failed to enable ports: -5 [ 313.138222][ T5895] f81534a_ctrl 6-1:0.0: probe with driver f81534a_ctrl failed with error -5 [ 313.267798][ T5895] usb 6-1: USB disconnect, device number 20 [ 313.656674][T10174] lo speed is unknown, defaulting to 1000 [ 313.835169][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1756'. [ 313.977132][T10272] tc_dump_action: action bad kind [ 315.205335][T10174] lo speed is unknown, defaulting to 1000 [ 315.537777][T10301] loop1: detected capacity change from 0 to 1024 [ 316.183773][ T5837] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 316.194659][ T5837] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 316.295496][ T68] hfsplus: b-tree write err: -5, ino 4 [ 316.702773][T10314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1773'. [ 316.735950][T10174] lo speed is unknown, defaulting to 1000 [ 316.799508][T10314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1773'. [ 317.630355][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1777'. [ 317.977090][T10174] lo speed is unknown, defaulting to 1000 [ 318.619711][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1781'. [ 319.325038][T10351] loop0: detected capacity change from 0 to 1024 [ 319.428986][T10345] loop3: detected capacity change from 0 to 4096 [ 319.464038][T10351] EXT4-fs: Ignoring removed mblk_io_submit option [ 319.588567][T10351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.625546][T10345] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 320.275149][ T5837] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 320.290133][ T5837] Bluetooth: hci0: Injecting HCI hardware error event [ 320.302735][ T5843] Bluetooth: hci0: hardware error 0x00 [ 320.392011][T10367] loop1: detected capacity change from 0 to 256 [ 320.489368][T10345] ntfs3(loop3): failed to convert "c46c" to default [ 320.639677][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.482568][T10381] loop0: detected capacity change from 0 to 512 [ 321.569476][T10382] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1795'. [ 321.584033][T10382] netlink: 'syz.2.1795': attribute type 1 has an invalid length. [ 321.629484][T10381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.694549][T10382] netlink: 'syz.2.1795': attribute type 2 has an invalid length. [ 321.769652][T10382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1795'. [ 321.932046][T10381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.108769][T10381] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.227792][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.237882][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.461558][T10393] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 322.669677][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 323.369562][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.591150][ C0] vkms_vblank_simulate: vblank timer overrun [ 326.568338][T10454] loop1: detected capacity change from 0 to 1764 [ 327.156370][T10461] loop3: detected capacity change from 0 to 8 [ 327.441629][T10461] SQUASHFS error: lzo decompression failed, data probably corrupt [ 327.520286][T10461] SQUASHFS error: Failed to read block 0x1c0: -5 [ 327.614608][T10461] SQUASHFS error: Unable to read metadata cache entry [1be] [ 329.311970][T10453] loop0: detected capacity change from 0 to 32768 [ 329.496081][T10453] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 329.496331][T10453] (syz.0.1820,10453,0):ocfs2_initialize_super:2281 ERROR: status = -12 [ 329.664823][T10453] (syz.0.1820,10453,0):ocfs2_fill_super:1178 ERROR: status = -12 [ 329.931788][T10460] loop4: detected capacity change from 0 to 32768 [ 330.044546][T10484] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1833'. [ 331.596241][T10497] program syz.4.1841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.838718][T10507] rdma_rxe: rxe_newlink: failed to add lo [ 331.950446][ T5959] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 332.229244][ T5959] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.319590][ T5959] usb 4-1: config 0 has no interface number 0 [ 332.405155][ T5959] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 332.470575][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.565214][ T5959] usb 4-1: Product: syz [ 332.578061][T10515] loop1: detected capacity change from 0 to 256 [ 332.619195][ T5959] usb 4-1: Manufacturer: syz [ 332.661819][ T5959] usb 4-1: SerialNumber: syz [ 332.706446][ T5959] usb 4-1: config 0 descriptor?? [ 332.996121][T10515] FAT-fs (loop1): Directory bread(block 64) failed [ 333.079540][T10515] FAT-fs (loop1): Directory bread(block 65) failed [ 333.086433][T10515] FAT-fs (loop1): Directory bread(block 66) failed [ 333.215078][ T5959] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 333.229887][T10515] FAT-fs (loop1): Directory bread(block 67) failed [ 333.236870][T10515] FAT-fs (loop1): Directory bread(block 68) failed [ 333.327448][T10521] loop5: detected capacity change from 0 to 16 [ 333.347045][ T5959] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 333.375969][T10515] FAT-fs (loop1): Directory bread(block 69) failed [ 333.425345][T10521] erofs (device loop5): mounted with root inode @ nid 36. [ 333.445041][T10515] FAT-fs (loop1): Directory bread(block 70) failed [ 333.463015][ T5959] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 333.519224][T10515] FAT-fs (loop1): Directory bread(block 71) failed [ 333.529771][ T5959] usb 4-1: media controller created [ 333.592838][T10515] FAT-fs (loop1): Directory bread(block 72) failed [ 333.615190][T10523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1853'. [ 333.705285][T10515] FAT-fs (loop1): Directory bread(block 73) failed [ 333.827281][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.045997][ T5959] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 334.318545][T10530] loop0: detected capacity change from 0 to 512 [ 334.577324][ T5959] usb 4-1: USB disconnect, device number 21 [ 334.650492][T10530] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1857: bg 0: block 248: padding at end of block bitmap is not set [ 334.810550][T10539] loop4: detected capacity change from 0 to 64 [ 334.868831][T10530] Quota error (device loop0): write_blk: dquota write failed [ 334.960802][T10530] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 335.016257][T10539] Trying to free block not in datazone [ 335.067208][T10530] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1857: Failed to acquire dquot type 1 [ 335.091596][T10539] minix_free_block (loop4:21): bit already cleared [ 335.234502][T10530] EXT4-fs (loop0): 1 truncate cleaned up [ 335.330443][T10530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.450108][T10530] ext4 filesystem being mounted at /317/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.721679][T10530] Quota error (device loop0): write_blk: dquota write failed [ 335.809655][T10530] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 335.952382][T10530] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.1857: Failed to acquire dquot type 1 [ 337.516265][T10561] loop1: detected capacity change from 0 to 4096 [ 337.656009][T10561] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 338.699456][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.752207][ T62] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 338.854315][ T62] EXT4-fs error (device loop0): ext4_release_dquot:6961: comm kworker/u8:4: Failed to release dquot type 1 [ 340.400301][T10595] netlink: 'syz.1.1881': attribute type 2 has an invalid length. [ 340.408223][T10595] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1881'. [ 340.602311][T10600] netlink: 'syz.0.1882': attribute type 10 has an invalid length. [ 340.709258][T10600] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1882'. [ 340.718525][T10600] bridge0: port 3(batadv0) entered blocking state [ 340.859476][T10600] bridge0: port 3(batadv0) entered disabled state [ 340.930720][T10600] batadv0: entered allmulticast mode [ 341.015707][T10600] batadv0: entered promiscuous mode [ 341.076318][T10600] bridge0: port 3(batadv0) entered blocking state [ 341.083898][T10600] bridge0: port 3(batadv0) entered forwarding state [ 341.298781][T10609] loop5: detected capacity change from 0 to 256 [ 341.506171][ T68] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 341.516231][ T68] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 342.566343][T10617] loop0: detected capacity change from 0 to 4096 [ 342.673321][T10625] loop3: detected capacity change from 0 to 2048 [ 342.759575][T10625] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 342.848403][T10617] ntfs3(loop0): Failed to load $Extend (-22). [ 342.949339][T10617] ntfs3(loop0): Failed to initialize $Extend. [ 342.955866][T10630] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 343.119223][T10625] NILFS (loop3): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157 [ 343.212951][T10625] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 343.417946][T10625] Remounting filesystem read-only [ 343.469187][T10625] NILFS (loop3): error -5 truncating bmap (ino=16) [ 343.871469][ T5827] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 344.380646][T10644] loop0: detected capacity change from 0 to 256 [ 344.571657][T10644] FAT-fs (loop0): Directory bread(block 64) failed [ 344.578285][T10644] FAT-fs (loop0): Directory bread(block 65) failed [ 344.711087][T10644] FAT-fs (loop0): Directory bread(block 66) failed [ 344.718005][T10644] FAT-fs (loop0): Directory bread(block 67) failed [ 344.900411][T10644] FAT-fs (loop0): Directory bread(block 68) failed [ 344.907065][T10644] FAT-fs (loop0): Directory bread(block 69) failed [ 344.959320][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1908'. [ 344.968378][T10654] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1908'. [ 345.039760][T10644] FAT-fs (loop0): Directory bread(block 70) failed [ 345.047202][T10644] FAT-fs (loop0): Directory bread(block 71) failed [ 345.146228][T10654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1908'. [ 345.160696][T10644] FAT-fs (loop0): Directory bread(block 72) failed [ 345.167376][T10644] FAT-fs (loop0): Directory bread(block 73) failed [ 345.972522][T10664] tmpfs: User quota inode hardlimit too large. [ 346.494684][T10671] loop2: detected capacity change from 0 to 256 [ 346.665316][T10671] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 346.764261][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1919'. [ 347.207235][T10678] loop3: detected capacity change from 0 to 64 [ 347.390516][T10678] 9pnet_fd: p9_fd_create_unix (10678): problem connecting socket: ./file0: -13 [ 349.701991][T10707] ALSA: mixer_oss: invalid OSS volume 'u' [ 350.060935][T10714] loop5: detected capacity change from 0 to 256 [ 350.216382][T10714] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 350.463684][T10714] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008) [ 350.576716][T10719] loop4: detected capacity change from 0 to 1024 [ 350.861090][T10719] hfsplus: bad catalog entry type [ 350.912146][T10724] loop2: detected capacity change from 0 to 164 [ 351.088120][T10724] Unable to read rock-ridge attributes [ 351.359512][ T68] hfsplus: b-tree write err: -5, ino 4 [ 351.605264][T10732] loop5: detected capacity change from 0 to 1764 [ 351.904176][T10732] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 352.028204][T10736] loop1: detected capacity change from 0 to 1024 [ 352.225300][T10736] EXT4-fs (loop1): orphan cleanup on readonly fs [ 352.428642][T10736] EXT4-fs (loop1): 1 truncate cleaned up [ 352.505257][T10736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.771552][ T8] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 352.952339][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.009381][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.127856][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 353.215458][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 353.299200][ T8] usb 5-1: config 1 interface 1 has no altsetting 0 [ 353.417746][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.449942][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.512483][T10756] xt_HMARK: spi-set and port-set can't be combined [ 353.539413][ T8] usb 5-1: Product: syz [ 353.543686][ T8] usb 5-1: Manufacturer: syz [ 353.609580][ T8] usb 5-1: SerialNumber: syz [ 354.016670][ T8] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 354.091167][ T8] usb 5-1: MIDIStreaming interface descriptor not found [ 354.121326][T10757] loop5: detected capacity change from 0 to 4096 [ 354.267684][T10757] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 354.359196][ T8] usb 5-1: USB disconnect, device number 15 [ 354.841203][T10757] ntfs3(loop5): ino=5, "/" attr_set_size [ 354.916285][T10757] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 355.072243][ T6062] udevd[6062]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.458610][T10774] warning: `syz.4.1966' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 355.596452][T10777] loop3: detected capacity change from 0 to 1024 [ 355.824484][T10782] loop1: detected capacity change from 0 to 256 [ 355.882707][T10777] hfsplus: xattr searching failed [ 356.016989][T10782] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 358.242226][T10808] loop4: detected capacity change from 0 to 256 [ 359.055637][T10822] loop4: detected capacity change from 0 to 256 [ 359.249636][T10826] netlink: 'syz.0.1992': attribute type 16 has an invalid length. [ 359.257591][T10826] netlink: 'syz.0.1992': attribute type 17 has an invalid length. [ 359.339446][T10822] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 360.019383][T10834] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1996'. [ 360.469409][T10842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1998'. [ 362.638282][T10841] loop1: detected capacity change from 0 to 32768 [ 362.684024][T10841] XFS: noikeep mount option is deprecated. [ 362.781530][T10841] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 362.841211][T10846] loop5: detected capacity change from 0 to 32768 [ 362.956772][T10841] XFS (loop1): Ending clean mount [ 362.966825][T10846] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 363.061747][T10846] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 363.090006][T10841] XFS (loop1): Quotacheck needed: Please wait. [ 363.301270][T10846] (syz.5.2002,10846,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=9223372036854775873, rec_len=0, name_len=0 [ 363.353647][T10841] XFS (loop1): Quotacheck: Done. [ 363.427463][T10846] (syz.5.2002,10846,0):ocfs2_prepare_dir_for_insert:4277 ERROR: status = -2 [ 363.459862][T10846] (syz.5.2002,10846,0):ocfs2_mknod:296 ERROR: status = -2 [ 363.487768][T10846] (syz.5.2002,10846,0):ocfs2_mknod:500 ERROR: status = -2 [ 363.527504][T10846] (syz.5.2002,10846,0):ocfs2_mkdir:657 ERROR: status = -2 [ 363.694017][ T5826] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 363.833101][ T5829] ocfs2: Unmounting device (7,5) on (node local) [ 365.024369][T10872] loop2: detected capacity change from 0 to 32768 [ 365.091058][T10872] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2010 (10872) [ 365.197726][T10872] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 365.299592][T10872] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 365.395088][T10872] BTRFS info (device loop2): using free-space-tree [ 365.596758][T10875] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.072324][T10875] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.398188][T10872] BTRFS error (device loop2): open_ctree failed [ 368.170048][T10921] xt_ecn: cannot match TCP bits for non-tcp packets [ 369.022620][T10933] loop0: detected capacity change from 0 to 128 [ 369.230885][T10933] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 369.407600][T10933] ext4 filesystem being mounted at /343/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 369.993472][ T5825] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 370.039565][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'. [ 370.929297][ T29] audit: type=1326 audit(2000000177.140:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 371.217361][ T29] audit: type=1326 audit(2000000177.140:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 371.424724][T10962] loop1: detected capacity change from 0 to 2048 [ 371.473999][ T29] audit: type=1326 audit(2000000177.210:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 371.729405][ T29] audit: type=1326 audit(2000000177.210:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 371.833103][T10962] overlayfs: conflicting options: metacopy=off,verity=on [ 372.012105][ T29] audit: type=1326 audit(2000000177.210:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10958 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa17657ff19 code=0x7ffc0000 [ 375.616390][T11030] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2076'. [ 375.791376][T11030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.951296][T11034] xt_ecn: cannot match TCP bits for non-tcp packets [ 376.066197][T11038] loop0: detected capacity change from 0 to 16 [ 376.148445][T11038] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 376.250101][T11038] cramfs: empty filesystem [ 377.509278][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 377.768549][ T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 377.849530][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.959452][ T8] usb 4-1: Product: syz [ 377.963742][ T8] usb 4-1: Manufacturer: syz [ 377.968367][ T8] usb 4-1: SerialNumber: syz [ 378.110926][ T8] usb 4-1: config 0 descriptor?? [ 378.351536][ T8] hso 4-1:0.0: Failed to find BULK IN ep [ 378.361119][T11064] loop2: detected capacity change from 0 to 64 [ 378.425557][ T8] usb-storage 4-1:0.0: USB Mass Storage device detected [ 378.489878][T11066] xt_hashlimit: max too large, truncated to 1048576 [ 378.919560][ T8] usb 4-1: USB disconnect, device number 22 [ 379.957187][T11084] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 379.990605][T11086] loop2: detected capacity change from 0 to 64 [ 380.135047][T11092] IPv6: NLM_F_REPLACE set, but no existing node found! [ 380.388072][T11085] loop4: detected capacity change from 0 to 4096 [ 380.552500][T11086] hfs: request for non-existent node 262144 in B*Tree [ 380.582055][T11085] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 380.650005][T11086] hfs: request for non-existent node 262144 in B*Tree [ 380.759288][T11085] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 380.866794][T11098] loop0: detected capacity change from 0 to 512 [ 380.976664][T11100] loop1: detected capacity change from 0 to 512 [ 381.182326][T11098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.253371][T11100] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 381.315295][T11098] ext4 filesystem being mounted at /356/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.433847][T11100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.575156][T11100] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 381.680094][ T68] ntfs3(loop4): ino=5, ntfs3_write_inode failed, -22. [ 381.900837][ T5825] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.247836][T11108] loop3: detected capacity change from 0 to 8192 [ 382.336954][T11108] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.470585][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.871078][ T5894] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 383.199487][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 383.210224][T11125] sock: sock_timestamping_bind_phc: sock not bind to device [ 383.295468][ T5894] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 383.347846][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.467896][ T5894] usb 1-1: Product: syz [ 383.517041][ T5894] usb 1-1: Manufacturer: syz [ 383.571446][ T5894] usb 1-1: SerialNumber: syz [ 383.633724][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.640249][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.672357][ T5894] r8152-cfgselector 1-1: Unknown version 0x0000 [ 383.678706][ T5894] r8152-cfgselector 1-1: config 0 descriptor?? [ 383.872413][T11130] loop1: detected capacity change from 0 to 1024 [ 384.409619][ T5894] r8152-cfgselector 1-1: USB disconnect, device number 16 [ 384.589774][T11138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.838794][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 384.935149][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 385.019294][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2129'. [ 385.656971][T11156] loop0: detected capacity change from 0 to 256 [ 385.737900][T11156] exfat: Deprecated parameter 'namecase' [ 385.819725][T11158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.913407][T11156] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 386.612520][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2141'. [ 386.700246][T11168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2141'. [ 386.860488][T11172] IPv6: sit1: Disabled Multicast RS [ 387.646784][T11185] loop1: detected capacity change from 0 to 512 [ 387.686833][T11186] netlink: 'syz.5.2150': attribute type 11 has an invalid length. [ 387.810620][T11185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.960317][T11185] ext4 filesystem being mounted at /397/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.357560][T11185] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #12: comm syz.1.2147: invalid size [ 388.499157][ T29] audit: type=1326 audit(2000000194.730:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6937ff19 code=0x7ffc0000 [ 388.557104][T11185] EXT4-fs (loop1): Remounting filesystem read-only [ 388.704958][ T29] audit: type=1326 audit(2000000194.730:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6937ff19 code=0x7ffc0000 [ 388.981423][ T29] audit: type=1326 audit(2000000194.780:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fba6937ff19 code=0x7ffc0000 [ 389.133946][ T5826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.240475][ T29] audit: type=1326 audit(2000000194.780:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6937ff19 code=0x7ffc0000 [ 389.264111][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 389.359482][ T52] Quota error (device loop1): write_blk: dquota write failed [ 389.453917][ T52] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 389.487438][ T29] audit: type=1326 audit(2000000194.780:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.5.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba6937ff19 code=0x7ffc0000 [ 389.533776][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 389.624110][ T52] Quota error (device loop1): write_blk: dquota write failed [ 389.719394][ T52] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 392.905011][ T5843] Bluetooth: hci2: unexpected event for opcode 0x0804 [ 393.645508][T11269] loop3: detected capacity change from 0 to 256 [ 393.956649][T11271] loop4: detected capacity change from 0 to 512 [ 394.086431][T11271] EXT4-fs: Ignoring removed i_version option [ 394.174552][T11271] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 394.314948][T11271] EXT4-fs (loop4): 1 truncate cleaned up [ 394.380585][T11271] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.618438][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 395.001554][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.059258][T11287] netlink: 'syz.1.2196': attribute type 1 has an invalid length. [ 395.519745][T11293] overlayfs: missing 'lowerdir' [ 397.112971][T11315] usb usb8: usbfs: process 11315 (syz.2.2209) did not claim interface 0 before use [ 397.537055][T11308] loop4: detected capacity change from 0 to 8192 [ 397.671385][T11308] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 397.944803][T11308] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 398.032265][T11308] FAT-fs (loop4): Filesystem has been set read-only [ 399.037880][T11339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.609562][T11345] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2226'. [ 400.062227][T11348] team_slave_0: left allmulticast mode [ 400.439753][T11359] delete_channel: no stack [ 400.468138][T11361] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 401.202452][T11369] IPv6: NLM_F_CREATE should be specified when creating new route [ 401.269921][T11367] loop2: detected capacity change from 0 to 256 [ 401.289603][T11369] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2237'. [ 401.507021][T11367] FAT-fs (loop2): Directory bread(block 64) failed [ 401.597722][T11367] FAT-fs (loop2): Directory bread(block 65) failed [ 401.639385][T11367] FAT-fs (loop2): Directory bread(block 66) failed [ 401.646057][T11367] FAT-fs (loop2): Directory bread(block 67) failed [ 401.780020][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 401.792851][T11367] FAT-fs (loop2): Directory bread(block 68) failed [ 401.878888][T11367] FAT-fs (loop2): Directory bread(block 69) failed [ 401.945313][T11367] FAT-fs (loop2): Directory bread(block 70) failed [ 402.059713][T11367] FAT-fs (loop2): Directory bread(block 71) failed [ 402.066872][T11367] FAT-fs (loop2): Directory bread(block 72) failed [ 402.234394][T11367] FAT-fs (loop2): Directory bread(block 73) failed [ 402.324695][T11385] netlink: 'syz.0.2245': attribute type 10 has an invalid length. [ 402.469289][ T5894] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 402.701304][T11385] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 402.708622][ T5894] usb 6-1: Using ep0 maxpacket: 32 [ 402.750136][T11385] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 402.762128][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.839730][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.919267][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 402.950985][T11385] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 402.982615][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.090652][ T5894] usb 6-1: config 0 descriptor?? [ 403.148426][ T5894] hub 6-1:0.0: USB hub found [ 403.356701][ T5894] hub 6-1:0.0: 1 port detected [ 403.629982][ T5894] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 403.706974][ T5894] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 403.832897][T11397] loop0: detected capacity change from 0 to 64 [ 403.869389][ T5894] usbhid 6-1:0.0: can't add hid device: -71 [ 403.904967][ T5894] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 404.129597][ T5894] usb 6-1: USB disconnect, device number 21 [ 404.749982][ T30] INFO: task jbd2/sda1-8:5159 blocked for more than 143 seconds. [ 404.835049][ T30] Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 404.895687][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 405.009645][ T30] task:jbd2/sda1-8 state:D stack:23440 pid:5159 tgid:5159 ppid:2 flags:0x00004000 [ 405.109419][ T30] Call Trace: [ 405.121473][ T30] [ 405.136128][ T30] __schedule+0x1850/0x4c30 [ 405.169009][ T30] ? __pfx___schedule+0x10/0x10 [ 405.217245][ T30] ? __pfx_lock_release+0x10/0x10 [ 405.252328][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 405.309416][ T30] ? schedule+0x90/0x320 [ 405.346006][ T30] schedule+0x14b/0x320 [ 405.370954][ T30] io_schedule+0x8d/0x110 [ 405.407623][ T30] bit_wait_io+0x12/0xd0 [ 405.434946][ T30] __wait_on_bit+0xb2/0x2f0 [ 405.453868][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 405.473184][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 405.497132][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 405.525350][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 405.545091][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 405.565360][ T30] jbd2_journal_commit_transaction+0x3d07/0x6650 [ 405.592871][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 405.618329][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 405.645117][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.665039][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 405.688032][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.707025][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 405.734498][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.756984][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 405.786263][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 405.802655][ T30] ? prepare_to_wait+0x186/0x210 [ 405.819206][ T30] ? schedule+0x90/0x320 [ 405.837454][ T30] kjournald2+0x41c/0x7b0 [ 405.853879][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 405.881369][ T30] ? __pfx_kjournald2+0x10/0x10 [ 405.906274][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 405.926471][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 405.949506][ T30] ? __kthread_parkme+0x169/0x1d0 [ 405.969887][ T30] ? __pfx_kjournald2+0x10/0x10 [ 405.988994][ T30] kthread+0x2f2/0x390 [ 406.003984][ T30] ? __pfx_kjournald2+0x10/0x10 [ 406.026670][ T30] ? __pfx_kthread+0x10/0x10 [ 406.044762][ T30] ret_from_fork+0x4d/0x80 [ 406.066976][ T30] ? __pfx_kthread+0x10/0x10 [ 406.089293][ T30] ret_from_fork_asm+0x1a/0x30 [ 406.108666][ T30] [ 406.150555][ T30] [ 406.150555][ T30] Showing all locks held in the system: [ 406.193221][ T30] 4 locks held by kworker/1:0/25: [ 406.221503][ T30] 1 lock held by khungtaskd/30: [ 406.236306][ T30] #0: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 406.298605][ T30] 2 locks held by kworker/u8:4/62: [ 406.317970][ T30] 2 locks held by getty/5578: [ 406.338760][ T30] #0: ffff888034f1a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 406.363162][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 406.378965][ T30] 2 locks held by kworker/1:4/5842: [ 406.388861][ T30] 2 locks held by kworker/1:7/5904: [ 406.413395][ T30] [ 406.415982][ T30] ============================================= [ 406.415982][ T30] [ 406.442183][ T30] NMI backtrace for cpu 0 [ 406.446592][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 406.457250][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 406.467422][ T30] Call Trace: [ 406.470725][ T30] [ 406.473675][ T30] dump_stack_lvl+0x241/0x360 [ 406.478413][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.483695][ T30] ? __pfx__printk+0x10/0x10 [ 406.488346][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 406.493362][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 406.498900][ T30] ? _printk+0xd5/0x120 [ 406.503093][ T30] ? __pfx__printk+0x10/0x10 [ 406.507732][ T30] ? __wake_up_klogd+0xcc/0x110 [ 406.512647][ T30] ? __pfx__printk+0x10/0x10 [ 406.517280][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.522944][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 406.528011][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 406.534025][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 406.540042][ T30] watchdog+0xff6/0x1040 [ 406.544327][ T30] ? watchdog+0x1ea/0x1040 [ 406.548836][ T30] ? __pfx_watchdog+0x10/0x10 [ 406.553584][ T30] kthread+0x2f2/0x390 [ 406.557690][ T30] ? __pfx_watchdog+0x10/0x10 [ 406.562402][ T30] ? __pfx_kthread+0x10/0x10 [ 406.567029][ T30] ret_from_fork+0x4d/0x80 [ 406.571477][ T30] ? __pfx_kthread+0x10/0x10 [ 406.576120][ T30] ret_from_fork_asm+0x1a/0x30 [ 406.580933][ T30] [ 406.585766][ T30] Sending NMI from CPU 0 to CPUs 1: [ 406.591786][ C1] NMI backtrace for cpu 1 [ 406.591804][ C1] CPU: 1 UID: 0 PID: 5842 Comm: kworker/1:4 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 406.591838][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 406.591856][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 406.591915][ C1] RIP: 0010:unwind_next_frame+0x1d6/0x22d0 [ 406.591951][ C1] Code: 39 f0 0f 86 55 18 00 00 44 89 f0 48 8d 1c 85 d8 e4 48 91 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 4c 89 e5 0f 85 97 1a 00 00 <44> 8b 23 44 89 f0 ff c0 48 8d 1c 85 d8 e4 48 91 48 89 d8 48 c1 e8 [ 406.591971][ C1] RSP: 0018:ffffc90000a18450 EFLAGS: 00000046 [ 406.591992][ C1] RAX: 0000000000000000 RBX: ffffffff914d0e20 RCX: 00000000000b0001 [ 406.592008][ C1] RDX: 00000000000b0001 RSI: ffffffff820a52a0 RDI: 0000000000000001 [ 406.592025][ C1] RBP: dffffc0000000000 R08: 0000000000000001 R09: ffffc90000a18610 [ 406.592043][ C1] R10: dffffc0000000000 R11: ffffffff818b36f0 R12: dffffc0000000000 [ 406.592062][ C1] R13: ffffc90000a18520 R14: 0000000000010a52 R15: ffffffff820a529f [ 406.592083][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 406.592104][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.592121][ C1] CR2: 000000110c26e33c CR3: 000000000e736000 CR4: 0000000000350ef0 [ 406.592140][ C1] Call Trace: [ 406.592153][ C1] [ 406.592164][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 406.592196][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 406.592231][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 406.592257][ C1] ? nmi_handle+0x2a/0x5a0 [ 406.592302][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 406.592325][ C1] ? nmi_handle+0x151/0x5a0 [ 406.592354][ C1] ? nmi_handle+0x2a/0x5a0 [ 406.592383][ C1] ? unwind_next_frame+0x1d6/0x22d0 [ 406.592410][ C1] ? default_do_nmi+0x63/0x160 [ 406.592438][ C1] ? exc_nmi+0x123/0x1f0 [ 406.592462][ C1] ? end_repeat_nmi+0xf/0x53 [ 406.592506][ C1] ? kasan_save_free_info+0x3f/0x50 [ 406.592536][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 406.592565][ C1] ? kasan_save_free_info+0x40/0x50 [ 406.592589][ C1] ? unwind_next_frame+0x1d6/0x22d0 [ 406.592617][ C1] ? unwind_next_frame+0x1d6/0x22d0 [ 406.592646][ C1] ? unwind_next_frame+0x1d6/0x22d0 [ 406.592674][ C1] [ 406.592682][ C1] [ 406.592697][ C1] ? kasan_save_free_info+0x40/0x50 [ 406.592723][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 406.592747][ C1] arch_stack_walk+0x11c/0x150 [ 406.592785][ C1] ? kasan_save_free_info+0x40/0x50 [ 406.592811][ C1] stack_trace_save+0x118/0x1d0 [ 406.592841][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 406.592865][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 406.592888][ C1] ? __pfx_lock_release+0x10/0x10 [ 406.592920][ C1] kasan_save_track+0x3f/0x80 [ 406.592951][ C1] ? kasan_save_track+0x3f/0x80 [ 406.592978][ C1] ? kasan_save_free_info+0x40/0x50 [ 406.593034][ C1] kasan_save_free_info+0x40/0x50 [ 406.593057][ C1] __kasan_slab_free+0x59/0x70 [ 406.593087][ C1] ? dummy_timer+0x7f4/0x4620 [ 406.593114][ C1] kfree+0x196/0x430 [ 406.593152][ C1] ? dummy_timer+0x7f4/0x4620 [ 406.593178][ C1] dummy_timer+0x7f4/0x4620 [ 406.593202][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.593231][ C1] ? debug_object_deactivate+0x2d5/0x390 [ 406.593290][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.593330][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 406.593359][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 406.593409][ C1] __hrtimer_run_queues+0x59d/0xd30 [ 406.593449][ C1] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 406.593491][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 406.593525][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.593548][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.593573][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 406.593605][ C1] hrtimer_run_softirq+0x19a/0x2c0 [ 406.593644][ C1] handle_softirqs+0x2d6/0x9b0 [ 406.593689][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.593717][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 406.593755][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 406.593794][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.593817][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 406.593858][ C1] __irq_exit_rcu+0xf7/0x220 [ 406.593893][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 406.593932][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.593958][ C1] irq_exit_rcu+0x9/0x30 [ 406.593991][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 406.594024][ C1] [ 406.594032][ C1] [ 406.594041][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.594078][ C1] RIP: 0010:preempt_schedule_irq+0xf6/0x1c0 [ 406.594116][ C1] Code: 89 f5 49 c1 ed 03 eb 0d 48 f7 03 08 00 00 00 0f 84 8b 00 00 00 bf 01 00 00 00 e8 95 11 9c f5 e8 10 cb d5 f5 fb bf 01 00 00 00 85 ab ff ff 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d5 e9 38 f6 48 [ 406.594136][ C1] RSP: 0018:ffffc900032579c0 EFLAGS: 00000282 [ 406.594156][ C1] RAX: 3934c95b79458600 RBX: 1ffff9200064af40 RCX: ffffffff817b246a [ 406.594175][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9680 RDI: 0000000000000001 [ 406.594193][ C1] RBP: ffffc90003257a70 R08: ffffffff942b8987 R09: 1ffffffff2857130 [ 406.594212][ C1] R10: dffffc0000000000 R11: fffffbfff2857131 R12: 1ffff9200064af38 [ 406.594231][ C1] R13: 1ffff9200064af3c R14: ffffc900032579e0 R15: dffffc0000000000 [ 406.594256][ C1] ? mark_lock+0x9a/0x360 [ 406.594291][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 406.594323][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.594358][ C1] irqentry_exit+0x5e/0x90 [ 406.594390][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.594425][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x37/0x70 [ 406.594454][ C1] Code: 00 d6 03 00 65 8b 15 d0 63 64 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c 8b 91 f8 15 00 00 <83> fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 8d 7e 01 8b 89 fc [ 406.594474][ C1] RSP: 0018:ffffc90003257b38 EFLAGS: 00000246 [ 406.594494][ C1] RAX: ffffffff867f54ed RBX: ffff88802718c280 RCX: ffff88805d101e00 [ 406.594513][ C1] RDX: 0000000000000000 RSI: ffffffff8c0a9680 RDI: ffff88802718c280 [ 406.594530][ C1] RBP: ffff888023d80280 R08: ffffffff942b8987 R09: 1ffffffff2857130 [ 406.594549][ C1] R10: dffffc0000000000 R11: fffffbfff2857131 R12: dffffc0000000000 [ 406.594568][ C1] R13: ffff88802718c348 R14: ffff888023d802b0 R15: ffff88802718c280 [ 406.594598][ C1] ? wg_timers_any_authenticated_packet_sent+0xd/0x20 [ 406.594641][ C1] wg_timers_any_authenticated_packet_sent+0xd/0x20 [ 406.594677][ C1] wg_packet_tx_worker+0x168/0x810 [ 406.594717][ C1] ? process_scheduled_works+0x976/0x1840 [ 406.594743][ C1] process_scheduled_works+0xa68/0x1840 [ 406.594785][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 406.594815][ C1] ? assign_work+0x364/0x3d0 [ 406.594845][ C1] worker_thread+0x870/0xd30 [ 406.594873][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.594900][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 406.594922][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 406.594957][ C1] ? __kthread_parkme+0x169/0x1d0 [ 406.594987][ C1] ? __pfx_worker_thread+0x10/0x10 [ 406.595013][ C1] kthread+0x2f2/0x390 [ 406.595043][ C1] ? __pfx_worker_thread+0x10/0x10 [ 406.595067][ C1] ? __pfx_kthread+0x10/0x10 [ 406.595097][ C1] ret_from_fork+0x4d/0x80 [ 406.595122][ C1] ? __pfx_kthread+0x10/0x10 [ 406.595151][ C1] ret_from_fork_asm+0x1a/0x30 [ 406.595185][ C1] [ 407.374007][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 407.380965][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 407.391530][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.401718][ T30] Call Trace: [ 407.405017][ T30] [ 407.407963][ T30] dump_stack_lvl+0x241/0x360 [ 407.412695][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.417928][ T30] ? __pfx__printk+0x10/0x10 [ 407.422545][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 407.428562][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.434221][ T30] ? vscnprintf+0x5d/0x90 [ 407.438583][ T30] panic+0x349/0x880 [ 407.442511][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.448169][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 407.454357][ T30] ? __pfx_panic+0x10/0x10 [ 407.458800][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 407.464226][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.469886][ T30] ? __irq_work_queue_local+0x137/0x410 [ 407.475499][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.481165][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 407.486575][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 407.492766][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 407.498989][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 407.504654][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 407.510898][ T30] watchdog+0x1035/0x1040 [ 407.515270][ T30] ? watchdog+0x1ea/0x1040 [ 407.519722][ T30] ? __pfx_watchdog+0x10/0x10 [ 407.524425][ T30] kthread+0x2f2/0x390 [ 407.528530][ T30] ? __pfx_watchdog+0x10/0x10 [ 407.533237][ T30] ? __pfx_kthread+0x10/0x10 [ 407.537863][ T30] ret_from_fork+0x4d/0x80 [ 407.542307][ T30] ? __pfx_kthread+0x10/0x10 [ 407.546929][ T30] ret_from_fork_asm+0x1a/0x30 [ 407.551729][ T30] [ 407.556035][ T30] Kernel Offset: disabled [ 407.560371][ T30] Rebooting in 86400 seconds..