last executing test programs: 5m1.654365326s ago: executing program 1 (id=367): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0xff51) 4m53.267705767s ago: executing program 1 (id=371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 4m46.704826763s ago: executing program 1 (id=375): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000240)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@errors_remount}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xe, 0x0, 0x0, @void, @value=0x0}, 0x20) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 4m38.130189912s ago: executing program 1 (id=379): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x5c, r0, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 4m31.280064172s ago: executing program 1 (id=384): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x251, &(0x7f0000000800)="$eJzs3b9qU1EcB/CfbdqELnYWhwsuTkGdXINUEANCJINOBqpLK8LtEp3yGD6Dj+RjdLHbEXtC0z+xIDY9tzefD4T7gy+B71lyEzgn98PDzwf7X44+pZ/fo9erohMxSyliNzZiM7J78+vG6bwd580CALhrRqPJoHQHVquuB5OtiOheScY/ihQCAAAAAAAAAADgvy3b/x8n9v8DQJvZ/99+dT2Y7My/v11k/z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQzklK99M1r9L9AICbd839/1fKSlcEAG6Y3/8AsH7c/wFg/bx99/71YDjcG1VVL+J4Nh1Px/ma85evhntPqlO7i3cdT6fjzbP8ac6ri/lW7MzzZ0vz7Xj8KOd/shdvhpfybuyvfvkAAAAAAAAAAAAAAAAAAADQCP3qzNLz/f3+3/I8nft/gEvn9zvxoHNrywAAAAAAAAAAAAAAAAAAAIA77ejrt4PJ4eHH2nB16EZEA2r86xDPG1HjtoeIRtRoy1D6kwkAAAAAAAAAAAAAAAAAANbP4tBv6SYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUM7i+f+rGyJilrLSywUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa7HcAAAD///uTnfQ=") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x842}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) 4m23.563801191s ago: executing program 1 (id=388): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000080)=0x18, 0x4) 4m5.572280519s ago: executing program 32 (id=388): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$sock_int(r0, 0x1, 0x49, &(0x7f0000000080)=0x18, 0x4) 2m57.0928255s ago: executing program 4 (id=550): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) preadv(r1, &(0x7f0000001440)=[{&(0x7f0000001480)=""/15, 0xf}], 0x1, 0x0, 0x0) 2m56.818040882s ago: executing program 4 (id=554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xc004ae02, 0x40001) 2m56.633339771s ago: executing program 4 (id=557): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2f082, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 2m55.806473899s ago: executing program 4 (id=566): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000140)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@adinicb}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100), 0x10}, 0x94) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[]) 2m55.404803918s ago: executing program 4 (id=567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a0103"], 0x28}}, 0x0) recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0}, 0x10000) 2m55.040269835s ago: executing program 4 (id=568): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x2, {{0xa, 0xfffd, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x200000}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 2m54.585406816s ago: executing program 33 (id=568): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x2, {{0xa, 0xfffd, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x200000}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 1m2.218258231s ago: executing program 5 (id=1380): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) writev(r0, &(0x7f0000001b40)=[{&(0x7f0000000140)='?', 0x1}, {0x0}], 0x2) 1m1.913034195s ago: executing program 5 (id=1381): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) gettid() syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="0000f50000000341", @ANYRES16], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m1.718678054s ago: executing program 0 (id=1383): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020001002c000480280001800a00010071756f74610000001800028008000240000000010c000140000000000000000a0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 1m1.656186157s ago: executing program 3 (id=1384): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x60, 0x2, [@TCA_FLOWER_ACT={0x5c, 0x3, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xb75}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xc}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x0, 0x1, 0x3, 0x403}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) 1m1.428713638s ago: executing program 0 (id=1386): setns(0xc9, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9bed67a87ee4723d39c107800000000", 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x24004014) 1m0.993553708s ago: executing program 0 (id=1387): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@local, 0x80000001}, @local, 0x8, 0x5, 0x3ff, 0x80000004, 0x24b, 0x10001, 0x9}) 1m0.993399048s ago: executing program 3 (id=1388): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01072bbd7000ffdbdf2501000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 54.184014296s ago: executing program 5 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x1, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 51.021815673s ago: executing program 3 (id=1392): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc3, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "00de6c83d50000"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}, "03"}}}}}, 0x0) 50.750508956s ago: executing program 0 (id=1393): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8005, 0x14a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 45.887762942s ago: executing program 2 (id=1394): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc41a, &(0x7f0000000240)={[{@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@errors_remount}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000480)="$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") bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xe, 0x0, 0x0, @void, @value=0x0}, 0x20) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 45.851877084s ago: executing program 5 (id=1395): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x5c, r0, 0xb97534d5fe9704cf, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7fc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 43.673976575s ago: executing program 3 (id=1396): set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0x40) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 37.859621046s ago: executing program 2 (id=1397): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)="3c5c783ecd2d036a2762bb626c65640a", 0x10) 37.796472369s ago: executing program 0 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) 36.044853211s ago: executing program 5 (id=1398): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}}, r1}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x400, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, {0xa, 0x4e23, 0x6, @local, 0x1}, r1, 0x9}}, 0x48) 32.509930045s ago: executing program 3 (id=1399): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x9, 0x251, &(0x7f0000000800)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x842}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) 28.949510411s ago: executing program 5 (id=1400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x6, 0x4}, 0x8) 28.891619644s ago: executing program 2 (id=1401): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x400, &(0x7f00000003c0)={[{@uni_xlate}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@shortname_win95}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}]}, 0x1, 0x21a, &(0x7f0000000180)="$eJzs3bFqU1EYB/AvbaqlIOkgFEXwiotTaCruEVEQCgqSwc1iU5QkFgwE2qHVyZfQV9DRVXAQV19ABKmCi906CJF6Y2NL2kRqcov9/ZZ8JOd/z3cuIYcMObl3rlFbXG4ubW5uxORkLvLlKMdWLqZjLMYj9SQAgP/JVrsd39uprHsBAEbD/g8Ax8+A+//tEbYEAAzZwN//x0bWEgAwZHfutnNplUxGNJ61Kq1K+pg+e3UpHkY9qjEbhfgR0d6R1jduzl+fTbZ9mY5KY72TX29VxnfnS1GI6d75UpLanZ+IqU7+41RUYy4Kcbp3fq5n/kRcuvjH/MUoxIf7sRz1WIztbDe/VkqSa7fm9+RP/hoHAAAAAAAAAAAAAAAAAAAAAADDUEx29Dy/p1jc7/U0n56vk4/+5wPtPZ8nH2fz2a4dAAAAAAAAAAAAAAAAAAAAjormymptoV6vPj6oePT+5dt+YwYscp15D3udwxenLnx+vv+Yp39zf/5t8eZ8lrdlwOLdxoMzl5szV45KPyurtYmD3lrfChFDmv1Vpmv/veq+g2delBder336OuiVM/gwAgAAAAAAAAAAAAAAAACAY677o9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT//394RdZrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwEAAP//Rp2fMw==") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000340), 0x400000000000083, 0x0, 0x0) 28.303897781s ago: executing program 0 (id=1402): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x232]}, 0x8}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 20.639648398s ago: executing program 3 (id=1403): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 20.554311552s ago: executing program 2 (id=1404): capset(&(0x7f0000000180)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0xfffffe42) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 11.129745981s ago: executing program 34 (id=1400): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x6, 0x4}, 0x8) 9.202592111s ago: executing program 35 (id=1402): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9170, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x232]}, 0x8}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) 8.860248147s ago: executing program 2 (id=1408): r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f00000001c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x1, @local, 0xa}, 0x1c, 0x0}}], 0x1, 0x20084800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) 2.382604059s ago: executing program 36 (id=1403): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 0s ago: executing program 2 (id=1410): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4ad, &(0x7f0000001080)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000600)={0x23e3, 0xfffffffc, 0xd, 0x2}) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): (device loop3): auto enabling async discard [ 121.151722][ T28] audit: type=1800 audit(1789669970.207:9): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.290" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 121.219007][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.309561][ T6586] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.429483][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 121.443398][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 121.451771][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.466795][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.488407][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.532309][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.556940][ T5778] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 121.558191][ T6588] loop2: detected capacity change from 0 to 4096 [ 121.570642][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.596193][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.633994][ T6590] nbd0: detected capacity change from 0 to 127 [ 121.662983][ T5789] block nbd0: Receive control failed (result -32) [ 121.686058][ T24] block nbd0: Dead connection, failed to find a fallback [ 121.694852][ T24] block nbd0: shutting down sockets [ 121.701298][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.712499][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.740871][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.750687][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.758968][ T97] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.771159][ T97] Buffer I/O error on dev nbd0, logical block 2, async page read [ 121.779449][ T97] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.789028][ T97] Buffer I/O error on dev nbd0, logical block 3, async page read [ 121.798947][ T97] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.800094][ T6594] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.808952][ T97] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.827137][ T97] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 121.836982][ T97] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.846718][ T24] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 121.857832][ T24] Buffer I/O error on dev nbd0, logical block 2, async page read [ 121.872504][ T24] Buffer I/O error on dev nbd0, logical block 3, async page read [ 121.882918][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 121.885435][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 121.892430][ T24] Buffer I/O error on dev nbd0, logical block 0, async page read [ 121.892464][ T24] Buffer I/O error on dev nbd0, logical block 1, async page read [ 121.892967][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 121.929456][ T24] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 121.941042][ T6007] ldm_validate_partition_table(): Disk read failed. [ 121.945304][ T9] usbtmc 1-1:16.0: can't read capabilities [ 121.959225][ T6007] Dev nbd0: unable to read RDB block 0 [ 121.977720][ T6007] nbd0: unable to read partition table [ 122.019680][ T6007] ldm_validate_partition_table(): Disk read failed. [ 122.040678][ T6007] Dev nbd0: unable to read RDB block 0 [ 122.063361][ T6007] nbd0: unable to read partition table [ 122.099683][ T9] usb 1-1: USB disconnect, device number 3 [ 122.566674][ T6609] loop3: detected capacity change from 0 to 128 [ 122.605669][ T6609] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 122.625207][ T6609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.726830][ T28] audit: type=1800 audit(1789669971.787:10): pid=6609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.313" name="file1" dev="loop3" ino=104 res=0 errno=0 [ 127.550718][ T6631] netlink: 14 bytes leftover after parsing attributes in process `syz.0.321'. [ 129.845090][ T6635] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.521895][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.543976][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.577360][ T6641] loop0: detected capacity change from 0 to 64 [ 136.400256][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 136.852617][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.889446][ T9] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 136.919245][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.105594][ T9] usb 4-1: config 0 descriptor?? [ 138.423428][ T9] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 138.500798][ T9] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 138.579943][ T9] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 138.588189][ T9] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 138.679846][ T9] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 138.687900][ T9] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 138.881427][ T9] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID vef.fd Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 139.043990][ T9] usb 4-1: USB disconnect, device number 6 [ 143.791480][ T6647] fido_id[6647]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 150.578539][ T6667] loop3: detected capacity change from 0 to 512 [ 150.661662][ T6667] EXT4-fs: inline encryption not supported [ 150.810300][ T6667] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 150.908719][ T6667] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 151.368675][ T6667] EXT4-fs (loop3): 1 truncate cleaned up [ 151.554987][ T6667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.156981][ T6667] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5972: inode #12: comm syz.3.336: bad extra_isize 62 (inode size 256) [ 152.369445][ T6667] EXT4-fs (loop3): Remounting filesystem read-only [ 152.376239][ T6667] EXT4-fs warning (device loop3): ext4_rename_delete:3780: inode #12: comm syz.3.336: Deleting old file: nlink 2, error=-5 [ 154.192646][ T6672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.337'. [ 155.792253][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.822469][ T6695] loop2: detected capacity change from 0 to 1024 [ 168.328443][ T6695] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 168.391028][ T6695] System zones: 0-1, 3-12 [ 168.494045][ T6695] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.904513][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 179.122374][ T6712] netlink: 32 bytes leftover after parsing attributes in process `syz.3.352'. [ 186.657748][ T6722] bond1 (unregistering): Released all slaves [ 188.203101][ T28] audit: type=1400 audit(1789670037.267:11): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=6728 comm="syz.0.358" name="/" offset=59 [ 194.695371][ T6740] loop3: detected capacity change from 0 to 256 [ 194.960915][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.967985][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.477433][ T6750] loop1: detected capacity change from 0 to 128 [ 199.773187][ T28] audit: type=1800 audit(1789670048.837:12): pid=6751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.363" name="bus" dev="loop1" ino=1048616 res=0 errno=0 [ 212.409983][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 212.417065][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 212.442297][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 212.450175][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 221.380178][ T6783] loop1: detected capacity change from 0 to 512 [ 221.902278][ T6783] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 222.000317][ T6783] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.375: invalid indirect mapped block 256 (level 1) [ 222.130304][ T6783] EXT4-fs (loop1): Remounting filesystem read-only [ 222.183987][ T6783] EXT4-fs (loop1): 1 truncate cleaned up [ 222.345250][ T6783] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.347881][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.027956][ T6813] loop1: detected capacity change from 0 to 512 [ 240.625866][ T6818] loop0: detected capacity change from 0 to 256 [ 256.398370][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.410461][ T6842] loop0: detected capacity change from 0 to 128 [ 256.419069][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.503933][ T6857] loop3: detected capacity change from 0 to 512 [ 275.976408][ T6857] fscrypt: Error allocating hmac(sha512): -2 [ 285.181345][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 285.224086][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 285.254197][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 285.308630][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 285.421496][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 285.436544][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.605051][ T51] Bluetooth: hci0: command tx timeout [ 289.670232][ T51] Bluetooth: hci0: command tx timeout [ 291.749453][ T51] Bluetooth: hci0: command tx timeout [ 293.830448][ T51] Bluetooth: hci0: command tx timeout [ 294.323443][ T6875] chnl_net:caif_netlink_parms(): no params data found [ 298.041830][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.069758][ T6875] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.108421][ T6875] bridge_slave_0: entered allmulticast mode [ 298.198095][ T6875] bridge_slave_0: entered promiscuous mode [ 298.297946][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.350015][ T6875] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.391466][ T6875] bridge_slave_1: entered allmulticast mode [ 298.475120][ T6875] bridge_slave_1: entered promiscuous mode [ 299.777689][ T6875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.987666][ T6875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.337628][ T6875] team0: Port device team_slave_0 added [ 301.457605][ T6875] team0: Port device team_slave_1 added [ 302.736534][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.779040][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.850666][ T6875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.023933][ T6875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.056277][ T6875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.158108][ T6875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.932360][ T6875] hsr_slave_0: entered promiscuous mode [ 304.992577][ T6875] hsr_slave_1: entered promiscuous mode [ 305.050249][ T6875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.058432][ T6875] Cannot create hsr debugfs directory [ 308.452782][ T6903] netlink: 'syz.0.420': attribute type 9 has an invalid length. [ 308.523362][ T6903] netlink: 371 bytes leftover after parsing attributes in process `syz.0.420'. [ 311.072016][ T6875] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.114409][ T6875] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.165879][ T6875] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.240187][ T6875] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.285878][ T6917] loop2: detected capacity change from 0 to 512 [ 311.368325][ T6917] EXT4-fs: Ignoring removed nobh option [ 311.403587][ T6917] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 311.493098][ T6917] EXT4-fs (loop2): 1 truncate cleaned up [ 311.528594][ T6917] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.635712][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.725248][ T6917] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 311.758013][ T6875] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.802908][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.812126][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.863052][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.870341][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.993695][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.468653][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.715891][ T6875] veth0_vlan: entered promiscuous mode [ 312.727848][ T6875] veth1_vlan: entered promiscuous mode [ 312.768611][ T6875] veth0_macvtap: entered promiscuous mode [ 312.781038][ T6875] veth1_macvtap: entered promiscuous mode [ 312.805079][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.816851][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.827743][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.838670][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.849189][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.860006][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.870897][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.881437][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.893693][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.912292][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.923506][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.933679][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.944326][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.955092][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.965834][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.975806][ T6875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.986911][ T6875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.998251][ T6875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.012104][ T6875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.021387][ T6875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.030936][ T6875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.040023][ T6875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.143727][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.158698][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.188256][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.198724][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.646896][ T6963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 313.879596][ T6965] loop0: detected capacity change from 0 to 8192 [ 313.908550][ T6965] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 313.923131][ T6965] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 313.933794][ T6965] REISERFS (device loop0): using ordered data mode [ 313.941374][ T6965] reiserfs: using flush barriers [ 313.952815][ T6965] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 313.970820][ T6965] REISERFS (device loop0): checking transaction log (loop0) [ 314.119954][ T6965] REISERFS (device loop0): Using tea hash to sort names [ 314.134346][ T6973] loop2: detected capacity change from 0 to 512 [ 314.143988][ T6965] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 314.156601][ T6973] EXT4-fs: Ignoring removed nobh option [ 314.212185][ T6973] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 314.277387][ T6973] EXT4-fs (loop2): 1 truncate cleaned up [ 314.327197][ T6973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.437822][ T6973] EXT4-fs warning (device loop2): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 314.508348][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.683312][ T6983] loop2: detected capacity change from 0 to 512 [ 314.816034][ T6983] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #2: comm syz.2.441: corrupted xattr block 255: invalid header [ 314.847019][ T6983] EXT4-fs (loop2): Remounting filesystem read-only [ 314.899573][ T6983] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 314.934703][ T6983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.130547][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.149419][ T7002] loop4: detected capacity change from 0 to 512 [ 315.519523][ T7010] loop0: detected capacity change from 0 to 2048 [ 315.563525][ T7010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.715546][ T28] audit: type=1800 audit(1789670164.777:13): pid=7010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.449" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 315.725099][ T7010] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 315.801757][ T7020] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 315.844607][ T7010] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 315.851234][ T7020] EXT4-fs (loop0): This should not happen!! Data will be lost [ 315.851234][ T7020] [ 315.911814][ T7020] EXT4-fs (loop0): Total free blocks count 0 [ 315.921440][ T7020] EXT4-fs (loop0): Free/Dirty block details [ 315.928967][ T7010] EXT4-fs (loop0): This should not happen!! Data will be lost [ 315.928967][ T7010] [ 315.929037][ T7010] EXT4-fs (loop0): Total free blocks count 0 [ 315.929053][ T7010] EXT4-fs (loop0): Free/Dirty block details [ 315.929114][ T7010] EXT4-fs (loop0): free_blocks=2415919104 [ 315.968896][ T5786] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 316.159837][ T5786] usb 4-1: Using ep0 maxpacket: 32 [ 316.198551][ T5786] usb 4-1: config 0 has no interfaces? [ 316.215121][ T5786] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 316.230005][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.239563][ T5786] usb 4-1: Product: syz [ 316.244801][ T5786] usb 4-1: Manufacturer: syz [ 316.252307][ T5786] usb 4-1: SerialNumber: syz [ 316.279365][ T5786] usb 4-1: config 0 descriptor?? [ 316.285759][ T7028] loop0: detected capacity change from 0 to 1024 [ 316.319021][ T7028] EXT4-fs: Ignoring removed mblk_io_submit option [ 316.325601][ T7028] EXT4-fs: Ignoring removed oldalloc option [ 316.359415][ T7028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 316.398994][ T7028] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.518682][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 316.532858][ T27] usb 4-1: USB disconnect, device number 7 [ 316.756611][ T7039] loop2: detected capacity change from 0 to 512 [ 316.779880][ T7039] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 316.858133][ T7039] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 316.878143][ T7039] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 316.888380][ T7039] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 317.834385][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.840955][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.969987][ T7045] loop0: detected capacity change from 0 to 32768 [ 318.091955][ T7051] loop2: detected capacity change from 0 to 32768 [ 318.166758][ T7051] (syz.2.464,7051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.214854][ T7051] (syz.2.464,7051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.287823][ T7051] (syz.2.464,7051,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 318.365246][ T7053] loop3: detected capacity change from 0 to 32768 [ 318.382722][ T7051] JBD2: Ignoring recovery information on journal [ 318.497095][ T7051] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 318.511657][ T7057] loop4: detected capacity change from 0 to 32768 [ 318.518585][ T7053] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 318.543522][ T7057] (syz.4.467,7057,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.611307][ T7057] (syz.4.467,7057,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 318.765788][ T7053] XFS (loop3): Ending clean mount [ 318.774548][ T7057] debugfs: Directory '9357E9D751824C228242B9B0D0FB6750' with parent 'ocfs2' already present! [ 318.912468][ T7057] JBD2: Ignoring recovery information on journal [ 319.111686][ T5778] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 319.114163][ T5776] ocfs2: Unmounting device (7,2) on (node local) [ 319.131149][ T7057] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 319.739103][ T7057] syz.4.467 (7057) used greatest stack depth: 18776 bytes left [ 319.914032][ T6875] ocfs2: Unmounting device (7,4) on (node local) [ 320.418939][ T23] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 320.639572][ T23] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.668014][ T23] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.692856][ T23] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 320.703556][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.712489][ T23] usb 1-1: Product: syz [ 320.716817][ T23] usb 1-1: Manufacturer: syz [ 320.722023][ T23] usb 1-1: SerialNumber: syz [ 320.735211][ T23] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 320.765860][ T23] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 320.830629][ T23] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 321.650554][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 321.889821][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.918416][ T23] usb 5-1: config 0 has no interface number 0 [ 321.931275][ T23] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 321.941528][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.950743][ T23] usb 5-1: Product: syz [ 321.955282][ T23] usb 5-1: Manufacturer: syz [ 321.963446][ T23] usb 5-1: SerialNumber: syz [ 321.974958][ T23] usb 5-1: config 0 descriptor?? [ 321.990366][ T7092] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 322.005758][ T7092] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 322.014349][ T7092] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 322.018402][ T5786] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 322.026732][ T7092] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 322.054828][ T9] usb 1-1: USB disconnect, device number 4 [ 322.095560][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 322.133372][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 322.151016][ T9] ti_usb_3410_5052 1-1:2.0: device disconnected [ 322.201841][ T23] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 322.222261][ T23] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 322.235731][ T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 322.246815][ T23] usb 5-1: media controller created [ 322.276942][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.282313][ T5786] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 322.312147][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.323985][ T5786] usb 4-1: Product: syz [ 322.328307][ T5786] usb 4-1: Manufacturer: syz [ 322.339587][ T5786] usb 4-1: SerialNumber: syz [ 322.521463][ T5786] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 322.867641][ T8] usb 4-1: driver API: 1.9.9 2016-02-15 [1-1] [ 322.895135][ T8] usb 4-1: firmware API: 1.9.6 2012-07-07 [ 323.234728][ C0] usb 4-1: received invalid command response:got -4, instead of 0 [ 323.243260][ C0] usb 4-1: restart device (9) [ 323.358483][ T23] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 323.468909][ T5786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 323.479500][ T23] usb 5-1: USB disconnect, device number 2 [ 323.518197][ C0] usb 4-1: received invalid command response:got -4, instead of 0 [ 323.696148][ T5786] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 323.709184][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 323.719425][ T5786] usb 1-1: Product: syz [ 323.723818][ T5786] usb 1-1: Manufacturer: syz [ 323.744185][ T5786] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 323.992035][ T8] usb 4-1: firmware upload failed (-110). [ 324.014778][ T23] usb 1-1: USB disconnect, device number 5 [ 324.353563][ T7182] loop4: detected capacity change from 0 to 512 [ 324.398531][ T7182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.484800][ T7185] EXT4-fs error (device loop4): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 324.572451][ T6875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.774036][ T8] usb 4-1: USB disconnect, device number 8 [ 325.393893][ T7215] autofs4:pid:7215:autofs_fill_super: pipe file descriptor does not contain proper ops [ 325.744214][ T7223] sctp: Trying to GSO but underlying device doesn't support it. [ 326.038861][ T7206] loop0: detected capacity change from 0 to 32768 [ 326.162942][ T7206] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.300984][ T7206] XFS (loop0): Ending clean mount [ 326.389040][ T7245] loop4: detected capacity change from 0 to 512 [ 326.398356][ T7245] EXT4-fs: Ignoring removed bh option [ 326.408360][ T7245] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 326.423881][ T7206] XFS (loop0): Quotacheck needed: Please wait. [ 326.431141][ T7245] EXT4-fs (loop4): 1 truncate cleaned up [ 326.438351][ T7245] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.648169][ T7206] XFS (loop0): Quotacheck: Done. [ 326.668385][ T6875] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.828990][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 326.953646][ T7257] capability: warning: `syz.2.548' uses 32-bit capabilities (legacy support in use) [ 326.993610][ T7257] program syz.2.548 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.494111][ T7264] could not allocate digest TFM handle -¿ÆqøêÊâ4¿OÃ(0&qú´f·=¯*΀¯òøj„¸$€ŒÆª­ü€«;º}'üj°O [ 328.233698][ T7293] loop2: detected capacity change from 0 to 512 [ 328.290258][ T5786] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 328.383040][ T5849] kernel read not supported for file /dsp1 (pid: 5849 comm: kworker/1:7) [ 328.416961][ T7293] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 328.439291][ T7293] EXT4-fs (loop2): Test dummy encryption mode enabled [ 328.460691][ T7293] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.513811][ T5786] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 328.546880][ T5786] usb 4-1: config 0 has an invalid interface number: 255 but max is 1 [ 328.577040][ T5786] usb 4-1: config 0 has no interface number 0 [ 328.585221][ T5786] usb 4-1: config 0 has no interface number 1 [ 328.622487][ T7305] loop4: detected capacity change from 0 to 2048 [ 328.626961][ T5786] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 328.646050][ T7305] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 328.675117][ T5786] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 328.677369][ T7305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 328.708274][ T5786] usb 4-1: config 0 interface 255 has no altsetting 0 [ 328.739117][ T5786] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 328.761194][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.782583][ T5786] usb 4-1: Product: syz [ 328.803460][ T5786] usb 4-1: Manufacturer: syz [ 328.825095][ T5786] usb 4-1: SerialNumber: syz [ 328.847339][ T5786] usb 4-1: config 0 descriptor?? [ 328.864668][ T7293] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 328.904233][ T6875] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 328.913399][ T7293] EXT4-fs error (device loop2): ext4_add_entry:2488: inode #2: comm syz.2.564: Directory hole found for htree leaf block 0 [ 328.936637][ T6875] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh [ 328.947245][ T7293] EXT4-fs (loop2): Remounting filesystem read-only [ 329.019378][ T5776] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 329.152543][ T5786] usb 4-1: USB disconnect, device number 9 [ 329.564094][ T2947] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.705071][ T2947] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.873613][ T2947] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.005348][ T7320] loop0: detected capacity change from 0 to 1764 [ 330.081268][ T2947] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.407990][ T7327] loop0: detected capacity change from 0 to 1024 [ 330.880854][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.900977][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.915847][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.950073][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.957880][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.970771][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 331.138640][ T7344] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 331.163265][ T7344] netlink: 152 bytes leftover after parsing attributes in process `syz.0.588'. [ 331.448901][ T5849] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 331.592459][ T7360] loop0: detected capacity change from 0 to 64 [ 331.689640][ T5849] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 331.698276][ T5849] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 331.753977][ T5849] usb 3-1: config 0 has no interface number 0 [ 331.781586][ T5849] usb 3-1: config 0 has no interface number 1 [ 331.787889][ T5849] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 331.826717][ T5849] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 331.884093][ T5849] usb 3-1: config 0 interface 255 has no altsetting 0 [ 331.955875][ T5849] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 331.995723][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.011396][ T5849] usb 3-1: Product: syz [ 332.052520][ T5849] usb 3-1: Manufacturer: syz [ 332.069117][ T5849] usb 3-1: SerialNumber: syz [ 332.110363][ T5849] usb 3-1: config 0 descriptor?? [ 332.490807][ T23] usb 3-1: USB disconnect, device number 2 [ 332.898148][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 333.029206][ T51] Bluetooth: hci0: command tx timeout [ 333.255796][ T7371] loop3: detected capacity change from 0 to 32768 [ 333.383515][ T7392] loop2: detected capacity change from 0 to 1024 [ 333.518040][ T7392] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 333.537739][ T7392] System zones: 0-1, 3-12 [ 333.577635][ T7392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.722546][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.747606][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.759803][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.779192][ T7334] bridge_slave_0: entered allmulticast mode [ 333.825653][ T7334] bridge_slave_0: entered promiscuous mode [ 333.867551][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.899636][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.922601][ T7334] bridge_slave_1: entered allmulticast mode [ 333.930709][ T7334] bridge_slave_1: entered promiscuous mode [ 333.967151][ T2947] hsr_slave_0: left promiscuous mode [ 334.029201][ T2947] hsr_slave_1: left promiscuous mode [ 334.035612][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.051325][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.071124][ T2947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.081516][ T2947] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.091173][ T2947] bridge_slave_1: left allmulticast mode [ 334.096914][ T2947] bridge_slave_1: left promiscuous mode [ 334.103703][ T2947] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.135165][ T2947] bridge_slave_0: left allmulticast mode [ 334.142688][ T2947] bridge_slave_0: left promiscuous mode [ 334.157407][ T2947] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.261163][ T2947] veth1_macvtap: left promiscuous mode [ 334.267570][ T2947] veth0_macvtap: left promiscuous mode [ 334.268701][ T7408] loop3: detected capacity change from 0 to 128 [ 334.273923][ T2947] veth1_vlan: left promiscuous mode [ 334.285532][ T2947] veth0_vlan: left promiscuous mode [ 334.318905][ T7408] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 334.436374][ T7408] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 334.738325][ T7406] loop2: detected capacity change from 0 to 32768 [ 334.839280][ T7406] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 334.986315][ T7406] XFS (loop2): Ending clean mount [ 335.018148][ T7406] XFS (loop2): Quotacheck needed: Please wait. [ 335.125191][ T51] Bluetooth: hci0: command tx timeout [ 335.176760][ T7406] XFS (loop2): Quotacheck: Done. [ 335.600530][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 336.034402][ T2947] team0 (unregistering): Port device team_slave_1 removed [ 336.105827][ T2947] team0 (unregistering): Port device team_slave_0 removed [ 336.168327][ T2947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.232316][ T2947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.696406][ T2947] bond0 (unregistering): Released all slaves [ 336.859774][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.874523][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.919001][ T7334] team0: Port device team_slave_0 added [ 336.930595][ T7334] team0: Port device team_slave_1 added [ 336.990334][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.999072][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.031113][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.044608][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.051679][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.079129][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.176408][ T7334] hsr_slave_0: entered promiscuous mode [ 337.193928][ T51] Bluetooth: hci0: command tx timeout [ 337.194238][ T7334] hsr_slave_1: entered promiscuous mode [ 337.211107][ T7334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.219513][ T7334] Cannot create hsr debugfs directory [ 337.549468][ T7334] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.566708][ T7334] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.587329][ T7334] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.606980][ T7334] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.726175][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.752818][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.790807][ T2947] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.798923][ T2947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.822359][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.830414][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.130066][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.553107][ T7334] veth0_vlan: entered promiscuous mode [ 338.587665][ T7334] veth1_vlan: entered promiscuous mode [ 338.652798][ T7334] veth0_macvtap: entered promiscuous mode [ 338.673647][ T7334] veth1_macvtap: entered promiscuous mode [ 338.713585][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.733341][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.745402][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.765119][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.775376][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.789132][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.804143][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.815772][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.827410][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.871665][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.883108][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.894747][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.905539][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.915698][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.926758][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.936979][ T7334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.948024][ T7334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.963142][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.989966][ T7334] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.002757][ T7334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.012690][ T7334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.021791][ T7334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.143950][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.153678][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.210307][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.225241][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.274948][ T51] Bluetooth: hci0: command tx timeout [ 339.443872][ T7467] loop5: detected capacity change from 0 to 2048 [ 339.508454][ T7467] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 339.588202][ T6997] udevd[6997]: incorrect nilfs2 checksum on /dev/loop5 [ 339.600362][ T7476] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.890637][ T7480] nfsd: exp_rootfh path not found ainx\ [ 340.108356][ T7488] loop3: detected capacity change from 0 to 512 [ 340.200946][ T7488] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 340.248711][ T7488] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 340.309455][ T5786] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 340.356253][ T7488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.414976][ T7488] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.512866][ T5786] usb 6-1: config 0 has an invalid interface number: 37 but max is 1 [ 340.537431][ T5786] usb 6-1: config 0 has an invalid interface number: 255 but max is 1 [ 340.588933][ T5786] usb 6-1: config 0 has no interface number 0 [ 340.617033][ T5786] usb 6-1: config 0 has no interface number 1 [ 340.634523][ T5786] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 340.643295][ T7473] loop0: detected capacity change from 0 to 32768 [ 340.647558][ T5786] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 340.678011][ T5786] usb 6-1: config 0 interface 255 has no altsetting 0 [ 340.701821][ T5786] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 340.719229][ T5786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.733207][ T5786] usb 6-1: Product: syz [ 340.737459][ T5786] usb 6-1: Manufacturer: syz [ 340.763980][ T5786] usb 6-1: SerialNumber: syz [ 340.779053][ T5764] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 340.806456][ T7473] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 340.820504][ T5786] usb 6-1: config 0 descriptor?? [ 341.007590][ T5764] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 341.036458][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.079042][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.115756][ T5764] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 341.139808][ T23] usb 6-1: USB disconnect, device number 2 [ 341.144778][ T5764] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 341.190934][ T5764] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 341.225369][ T5764] usb 4-1: Manufacturer: syz [ 341.234177][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 341.263016][ T5764] usb 4-1: config 0 descriptor?? [ 341.682216][ T5764] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 341.737608][ T5764] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 341.819866][ T7517] pim6reg1: tun_chr_ioctl cmd 1074025675 [ 341.826170][ T7517] pim6reg1: persist disabled [ 341.889032][ T27] usb 4-1: USB disconnect, device number 10 [ 341.988687][ T7520] fido_id[7520]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 342.211982][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 342.423232][ T7536] syz.2.619 uses obsolete (PF_INET,SOCK_PACKET) [ 342.534940][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.581499][ T7545] netlink: 60 bytes leftover after parsing attributes in process `syz.2.621'. [ 342.597967][ T7545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.621'. [ 343.626785][ T7582] loop3: detected capacity change from 0 to 64 [ 344.120967][ T7595] loop0: detected capacity change from 0 to 256 [ 344.759169][ T7606] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 344.789542][ T7606] nbd: error processing sock list [ 344.807969][ T7606] block nbd1: shutting down sockets [ 344.812128][ T7609] loop0: detected capacity change from 0 to 4096 [ 345.480476][ T7623] loop5: detected capacity change from 0 to 8192 [ 345.975075][ T7640] netlink: 8 bytes leftover after parsing attributes in process `syz.5.652'. [ 346.009063][ T7640] netlink: 'syz.5.652': attribute type 20 has an invalid length. [ 346.025085][ T7640] netlink: 'syz.5.652': attribute type 21 has an invalid length. [ 346.358031][ T7651] loop5: detected capacity change from 0 to 256 [ 346.724530][ T7655] loop3: detected capacity change from 0 to 1024 [ 346.915596][ T7655] hfsplus: xattr searching failed [ 346.989072][ T7655] hfsplus: xattr searching failed [ 347.008409][ T7655] hfsplus: b-tree write err: -5, ino 3 [ 347.127354][ T78] hfsplus: b-tree write err: -5, ino 3 [ 347.707301][ T7675] loop0: detected capacity change from 0 to 4096 [ 347.735577][ T7675] NILFS (loop0): invalid segment: Checksum error in segment payload [ 347.778076][ T7675] NILFS (loop0): trying rollback from an earlier position [ 347.845539][ T7675] NILFS (loop0): recovery complete [ 347.865261][ T7683] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 348.356557][ T7692] loop5: detected capacity change from 0 to 256 [ 348.414751][ T7690] loop0: detected capacity change from 0 to 4096 [ 348.533897][ T7690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.760628][ T7690] EXT4-fs (loop0): Online defrag not supported with bigalloc [ 348.952877][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.188643][ T7711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.196674][ T7711] IPv6: NLM_F_CREATE should be set when creating new route [ 349.204089][ T7711] IPv6: NLM_F_CREATE should be set when creating new route [ 349.247708][ T7711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.910103][ T7724] netlink: 'syz.2.682': attribute type 5 has an invalid length. [ 349.948357][ T7723] tap0: tun_chr_ioctl cmd 1074025677 [ 349.963321][ T7723] tap0: linktype set to 1 [ 350.265142][ T7736] loop3: detected capacity change from 0 to 16 [ 350.301045][ T7736] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 350.589521][ T7746] loop0: detected capacity change from 0 to 128 [ 350.646688][ T7746] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 350.707159][ T7746] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 350.861551][ T7754] loop2: detected capacity change from 0 to 128 [ 351.284981][ T7767] loop3: detected capacity change from 0 to 256 [ 351.312035][ T7768] loop0: detected capacity change from 0 to 512 [ 351.357549][ T7768] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 351.389071][ T7768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 351.408096][ T7768] EXT4-fs (loop0): orphan cleanup on readonly fs [ 351.409137][ T7767] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f1c, chksum : 0x850fc7e5, utbl_chksum : 0xe619d30d) [ 351.415631][ T7768] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.702: bad orphan inode 3 [ 351.481256][ T7768] EXT4-fs (loop0): Remounting filesystem read-only [ 351.520379][ T7768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 351.657478][ T7768] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.702: dx entry: limit 0 != root limit 125 [ 351.683897][ T7768] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.702: Corrupt directory, running e2fsck is recommended [ 351.847436][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 352.421426][ T7790] input: syz1 as /devices/virtual/input/input9 [ 352.559772][ T5764] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 352.629903][ T7798] netlink: 56 bytes leftover after parsing attributes in process `syz.3.714'. [ 352.790659][ T5764] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 352.832278][ T5764] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 352.851587][ T5764] usb 1-1: Product: syz [ 352.860574][ T5764] usb 1-1: Manufacturer: syz [ 352.882471][ T5764] usb 1-1: SerialNumber: syz [ 352.913007][ T5764] usb 1-1: config 0 descriptor?? [ 353.321979][ T5764] usb 1-1: USB disconnect, device number 6 [ 353.911978][ T28] audit: type=1326 audit(1789670202.977:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7833 comm="syz.5.727" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c2a79e159 code=0x0 [ 353.991899][ T7836] MTRR 2 not used [ 354.096219][ T7841] loop2: detected capacity change from 0 to 128 [ 354.203505][ T7841] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 354.241046][ T7841] hpfs: filesystem error: improperly stopped [ 354.249421][ T7841] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 354.271384][ T7841] hpfs: You really don't want any checks? You are crazy... [ 354.289987][ T7841] hpfs: hpfs_map_sector(): read error [ 354.298320][ T7841] hpfs: code page support is disabled [ 354.318547][ T7841] hpfs: hpfs_map_4sectors(): unaligned read [ 354.335253][ T7841] hpfs: hpfs_map_4sectors(): unaligned read [ 354.343198][ T7841] hpfs: filesystem error: unable to find root dir [ 354.344411][ T7847] __sock_release: fasync list not empty! [ 354.869147][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 355.069696][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 355.100743][ T8] usb 1-1: config index 0 descriptor too short (expected 27632, got 27) [ 355.119433][ T8] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 355.133807][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 355.147844][ T8] usb 1-1: config 1 has no interface number 0 [ 355.155189][ T8] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.169526][ T8] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 355.186552][ T8] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 355.197105][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.292881][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 355.487783][ T7881] loop5: detected capacity change from 0 to 2048 [ 355.488702][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 355.524690][ T7881] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.938398][ T8] usb 1-1: USB disconnect, device number 7 [ 355.947451][ T8] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 356.083682][ T7893] input: syz1 as /devices/virtual/input/input10 [ 356.801403][ T7916] nbd1: detected capacity change from 0 to 63 [ 356.817434][ T51] block nbd1: Receive control failed (result -104) [ 357.748461][ T7944] loop3: detected capacity change from 0 to 4096 [ 357.785536][ T7944] EXT4-fs: inline encryption not supported [ 357.877377][ T7944] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.908418][ T7944] EXT4-fs (loop3): Test dummy encryption mode enabled [ 358.008178][ T7944] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 358.034093][ T7944] System zones: 0-5 [ 358.092741][ T7944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.439685][ T7969] loop0: detected capacity change from 0 to 512 [ 358.484216][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.639291][ T7974] loop5: detected capacity change from 0 to 2048 [ 358.696754][ T7974] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 358.763408][ T7974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 359.609443][ T8001] netlink: 'syz.5.792': attribute type 39 has an invalid length. [ 359.775317][ T8006] batadv_slave_1: entered promiscuous mode [ 359.782183][ T8006] macvlan2: entered allmulticast mode [ 359.788074][ T8006] batadv_slave_1: entered allmulticast mode [ 359.803839][ T8006] batman_adv: batadv0: Adding interface: macvlan2 [ 359.816519][ T8006] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.849192][ T8006] batman_adv: batadv0: Interface activated: macvlan2 [ 361.123235][ T8042] loop3: detected capacity change from 0 to 128 [ 361.135292][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 361.207838][ T8042] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 361.235367][ T8042] ext4 filesystem being mounted at /179/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 361.360677][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.388874][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.415920][ T5778] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 361.436530][ T8] usb 3-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 361.488846][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.582965][ T8] usb 3-1: config 0 descriptor?? [ 361.777058][ T8057] overlayfs: invalid origin (0000) [ 362.052167][ T8] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 362.076580][ T8] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 362.085475][ T8] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 362.101868][ T8] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 362.138848][ T8] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 362.148140][ T8] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 362.157552][ T8065] loop0: detected capacity change from 0 to 1024 [ 362.174521][ T8] playstation 0003:054C:0BA0.0003: unknown main item tag 0x0 [ 362.221817][ T8] playstation 0003:054C:0BA0.0003: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.2-1/input0 [ 362.351406][ T8037] loop5: detected capacity change from 0 to 40427 [ 362.351969][ T8] playstation 0003:054C:0BA0.0003: Invalid reportID received, expected 18 got 90 [ 362.419436][ T8037] F2FS-fs (loop5): invalid crc value [ 362.420143][ T8] playstation 0003:054C:0BA0.0003: Failed to retrieve DualShock4 pairing info: -22 [ 362.486060][ T8] playstation 0003:054C:0BA0.0003: Failed to get MAC address from DualShock4 [ 362.528385][ T8037] F2FS-fs (loop5): Found nat_bits in checkpoint [ 362.532544][ T8] playstation 0003:054C:0BA0.0003: Failed to create dualshock4. [ 362.588490][ T8] playstation: probe of 0003:054C:0BA0.0003 failed with error -22 [ 362.656041][ T8] usb 3-1: USB disconnect, device number 3 [ 362.818979][ T8037] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 363.019452][ T7334] syz-executor: attempt to access beyond end of device [ 363.019452][ T7334] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 363.088317][ T7334] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 364.091662][ T8] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 364.301243][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.345012][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.384416][ T8] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 364.408573][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.428474][ T8] usb 4-1: config 0 descriptor?? [ 364.883758][ T8] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 364.936483][ T8] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 364.978172][ T8] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.004782][ T8] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.029039][ T8] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.057927][ T8] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.080154][ T8] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 365.094970][ T8] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 365.342783][ T8] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 365.369320][ T8] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 365.412870][ T8] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 365.469290][ T8] usb 4-1: USB disconnect, device number 11 [ 365.511526][ T8160] sctp: [Deprecated]: syz.2.836 (pid 8160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.511526][ T8160] Use struct sctp_sack_info instead [ 365.747640][ T8130] loop0: detected capacity change from 0 to 40427 [ 365.786339][ T8130] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 365.805754][ T8130] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 365.840316][ T8130] F2FS-fs (loop0): invalid crc value [ 365.892188][ T8130] F2FS-fs (loop0): Found nat_bits in checkpoint [ 366.097942][ T8130] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 366.116191][ T8130] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 366.457169][ T8162] loop5: detected capacity change from 0 to 32768 [ 366.511808][ T8162] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.837 (8162) [ 366.658215][ T8162] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 366.698127][ T8162] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 366.735308][ T8162] BTRFS info (device loop5): setting nodatasum [ 366.768856][ T8162] BTRFS info (device loop5): force zlib compression, level 3 [ 366.814882][ T8162] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 366.863250][ T8162] BTRFS info (device loop5): use lzo compression, level 0 [ 366.883376][ T8162] BTRFS info (device loop5): enabling auto defrag [ 366.890939][ T8162] BTRFS info (device loop5): max_inline at 4096 [ 366.907600][ T8162] BTRFS info (device loop5): using free space tree [ 366.965203][ T8185] erspan0: entered promiscuous mode [ 367.222643][ T8162] BTRFS info (device loop5): enabling ssd optimizations [ 367.597134][ T8211] loop0: detected capacity change from 0 to 1024 [ 367.798611][ T7334] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 368.487086][ T8] kernel write not supported for file /470/clear_refs (pid: 8 comm: kworker/0:0) [ 368.727768][ T8208] loop3: detected capacity change from 0 to 32768 [ 368.776344][ T8208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.843 (8208) [ 368.940743][ T8208] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 368.987632][ T8208] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 369.050007][ T8208] BTRFS info (device loop3): using free space tree [ 369.329072][ T8208] BTRFS info (device loop3): enabling ssd optimizations [ 369.377178][ T8208] BTRFS info (device loop3): auto enabling async discard [ 369.400760][ T8213] loop2: detected capacity change from 0 to 40427 [ 369.470661][ T8213] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 369.492840][ T8213] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 369.537436][ T8213] F2FS-fs (loop2): invalid crc value [ 369.558497][ T8213] F2FS-fs (loop2): Found nat_bits in checkpoint [ 369.838885][ T8213] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 369.848109][ T8213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 370.123386][ T5776] syz-executor: attempt to access beyond end of device [ 370.123386][ T5776] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 370.221725][ T5776] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 370.240357][ T5778] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 371.408741][ C1] sched: RT throttling activated [ 371.757179][ T8276] loop5: detected capacity change from 0 to 131072 [ 371.769624][ T8276] F2FS-fs (loop5): Wrong secs_per_zone / total_sections (512, 24) [ 371.778494][ T8276] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 371.787593][ T8276] F2FS-fs (loop5): Test dummy encryption mode enabled [ 371.821416][ T8276] F2FS-fs (loop5): invalid crc value [ 371.845809][ T8276] F2FS-fs (loop5): Found nat_bits in checkpoint [ 371.889983][ T8276] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 371.933762][ T8276] F2FS-fs (loop5): Start checkpoint disabled! [ 371.999348][ T8276] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 372.006808][ T8276] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 372.091597][ T8273] loop0: detected capacity change from 0 to 40427 [ 372.114145][ T8273] F2FS-fs (loop0): Invalid log blocks per segment (32) [ 372.121977][ T8273] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 372.171888][ T8273] F2FS-fs (loop0): heap/no_heap options were deprecated [ 372.848858][ T27] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 373.059274][ T5849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 373.090740][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.121617][ T27] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 373.159267][ T27] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 373.188947][ T27] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 373.198635][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.292114][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.325462][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.353756][ T5849] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 373.392368][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.418227][ T5849] usb 3-1: config 0 descriptor?? [ 373.483002][ T27] dvb_ttusb_budget: ttusb_init_controller: error [ 373.499273][ T27] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 373.553569][ T5847] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 373.732238][ T27] DVB: Unable to find symbol stv0299_attach() [ 373.778966][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 373.797647][ T5847] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 373.826237][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.845238][ T27] DVB: Unable to find symbol tda8083_attach() [ 373.845938][ T8318] loop5: detected capacity change from 0 to 256 [ 373.858880][ T5847] usb 4-1: Product: syz [ 373.863245][ T5847] usb 4-1: Manufacturer: syz [ 373.867928][ T5847] usb 4-1: SerialNumber: syz [ 373.873918][ T8318] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xf9f813e7, utbl_chksum : 0xe619d30d) [ 373.877040][ T27] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 373.907109][ T5849] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 373.920411][ T5847] usb 4-1: config 0 descriptor?? [ 373.950727][ T27] usb 1-1: USB disconnect, device number 8 [ 373.968919][ T5849] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 373.975900][ T5849] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 373.988005][ T5849] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 373.996420][ T5849] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 374.004088][ T5849] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 374.011728][ T5849] arvo 0003:1E7D:30D4.0005: unknown main item tag 0x0 [ 374.052323][ T5849] arvo 0003:1E7D:30D4.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 374.349312][ T27] usb 3-1: USB disconnect, device number 4 [ 374.361925][ T5847] airspy 4-1:0.0: Board ID: 00 [ 374.367742][ T5847] airspy 4-1:0.0: Firmware version: [ 374.762991][ T5847] airspy 4-1:0.0: usb_control_msg() failed -71 request 0e [ 374.799129][ T5847] airspy 4-1:0.0: Registered as swradio24 [ 374.815712][ T5847] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 374.840477][ T5847] usb 4-1: USB disconnect, device number 12 [ 374.898907][ T5764] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 375.099095][ T5764] usb 6-1: Using ep0 maxpacket: 32 [ 375.131603][ T5764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.168878][ T5764] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.193106][ T5764] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 375.213733][ T5764] usb 6-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 375.227978][ T5764] usb 6-1: Manufacturer: syz [ 375.248077][ T5764] usb 6-1: config 0 descriptor?? [ 375.253244][ T5786] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 375.261618][ T8337] loop2: detected capacity change from 0 to 512 [ 375.462564][ T5786] usb 1-1: Using ep0 maxpacket: 8 [ 375.477301][ T5786] usb 1-1: unable to get BOS descriptor or descriptor too short [ 375.538144][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.555696][ T5786] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 375.561870][ T8341] input: syz1 as /devices/virtual/input/input11 [ 375.571694][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.587167][ T5786] usb 1-1: config 0 has no interface number 0 [ 375.605332][ T5786] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 375.649929][ T5786] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 375.669304][ T5786] usb 1-1: config 0 interface 88 has no altsetting 0 [ 375.692565][ T5786] usb 1-1: string descriptor 0 read error: -22 [ 375.729014][ T5786] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 375.752761][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 375.784861][ T5786] usb 1-1: config 0 descriptor?? [ 375.829625][ T5786] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input12 [ 375.851167][ T5764] hid (null): unknown global tag 0xd [ 375.895537][ T5764] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0042.0006/input/input13 [ 375.983988][ T8077] udevd[8077]: Error opening device "/dev/input/event4": Input/output error [ 375.998909][ T8077] udevd[8077]: Unable to EVIOCGABS device "/dev/input/event4" [ 376.006628][ T8077] udevd[8077]: Unable to EVIOCGABS device "/dev/input/event4" [ 376.052348][ T5764] input: syz Mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:5543:0042.0006/input/input14 [ 376.053414][ T27] usb 1-1: USB disconnect, device number 9 [ 376.121371][ T5764] uclogic 0003:5543:0042.0006: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.5-1/input0 [ 376.156740][ T8350] loop3: detected capacity change from 0 to 256 [ 376.175840][ T5764] usb 6-1: USB disconnect, device number 3 [ 376.459053][ T8356] TCP: TCP_TX_DELAY enabled [ 376.504897][ T8353] fido_id[8353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 377.466247][ T5764] smpboot: CPU 1 is now offline [ 378.305147][ T8401] loop3: detected capacity change from 0 to 2048 [ 378.349193][ T8401] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 378.390353][ T8] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 378.440160][ T8401] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 378.499306][ T8401] UDF-fs: Scanning with blocksize 512 failed [ 378.536295][ T8401] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 378.567653][ T8401] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.618950][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 378.656518][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.715170][ T8] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 378.734611][ T8410] loop0: detected capacity change from 0 to 4096 [ 378.768905][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.808508][ T8] usb 6-1: config 0 descriptor?? [ 378.953681][ T8413] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 379.036252][ T8415] loop2: detected capacity change from 0 to 128 [ 379.113881][ T8415] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.209867][ T8415] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.291179][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.317362][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.331558][ T8] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.5-1/input0 [ 379.656793][ T5776] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 379.697559][ T8425] nvme_fcloop: unknown parameter or missing value 'w' [ 379.709151][ T5786] usb 6-1: USB disconnect, device number 4 [ 380.268965][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 380.463373][ T8417] loop3: detected capacity change from 0 to 40427 [ 380.499201][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 380.539636][ T8417] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64) [ 380.553063][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.592649][ T9] usb 1-1: Product: syz [ 380.605388][ T8417] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 380.616287][ T9] usb 1-1: Manufacturer: syz [ 380.652102][ T9] usb 1-1: SerialNumber: syz [ 380.667395][ T9] usb 1-1: config 0 descriptor?? [ 380.678311][ T8417] F2FS-fs (loop3): Image doesn't support compression [ 380.688001][ T8444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.925'. [ 380.713941][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 380.731592][ T8417] F2FS-fs (loop3): Image doesn't support compression [ 380.776260][ T8417] F2FS-fs (loop3): invalid crc value [ 381.027457][ T8417] F2FS-fs (loop3): Start checkpoint disabled! [ 381.105541][ T8417] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 381.127278][ T8417] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 381.139688][ T28] audit: type=1400 audit(1789670230.207:15): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=8448 comm="syz.5.927" [ 381.449740][ T11] kworker/u4:0: attempt to access beyond end of device [ 381.449740][ T11] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 381.541324][ T11] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 381.571473][ T5786] usb 1-1: USB disconnect, device number 10 [ 381.824363][ T8460] type mismatch for 10000000,10000000 old: write-back new: write-combining [ 382.284170][ T8466] loop0: detected capacity change from 0 to 512 [ 382.833508][ T8458] loop5: detected capacity change from 0 to 32768 [ 382.968449][ T28] audit: type=1800 audit(1789670232.027:16): pid=8458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.932" name="file1" dev="loop5" ino=4 res=0 errno=0 [ 383.620887][ T8480] jffs2: notice: (8480) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 385.095679][ T8493] loop2: detected capacity change from 0 to 40427 [ 385.137136][ T8493] F2FS-fs (loop2): invalid crc value [ 385.207881][ T8493] F2FS-fs (loop2): Found nat_bits in checkpoint [ 385.395811][ T8493] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 386.346658][ T8521] loop2: detected capacity change from 0 to 4096 [ 386.418863][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 386.575642][ T28] audit: type=1800 audit(1789670235.637:17): pid=8521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.954" name="file1" dev="loop2" ino=0 res=0 errno=0 [ 386.649633][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 386.668542][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 3: 254, using maximum allowed: 30 [ 386.734771][ T9] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 386.824356][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 386.871341][ T9] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 386.931003][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.959268][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 30 seconds [ 386.972111][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 30 seconds [ 386.984371][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 30 seconds [ 386.995898][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 30 seconds [ 387.028639][ T9] usb 1-1: config 0 descriptor?? [ 387.488405][ T9] uclogic 0003:28BD:0071.0008: interface is invalid, ignoring [ 387.716141][ T5764] usb 1-1: USB disconnect, device number 11 [ 387.893633][ T8532] loop2: detected capacity change from 0 to 32768 [ 387.981343][ T8532] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 388.060464][ T8532] XFS (loop2): Ending clean mount [ 388.069247][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 388.241195][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.299579][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 388.330375][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 388.364135][ T5776] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 388.384265][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 388.479083][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.515526][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.598537][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 388.659157][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.919142][ T5786] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 388.942502][ T9] usb 6-1: GET_CAPABILITIES returned 0 [ 388.964320][ T9] usbtmc 6-1:16.0: can't read capabilities [ 389.139020][ T5786] usb 1-1: Using ep0 maxpacket: 8 [ 389.167511][ T9] usb 6-1: USB disconnect, device number 5 [ 389.177988][ T5786] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 389.230349][ T5786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 389.269808][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 389.299633][ T5786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.343658][ T5786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.388822][ T5786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 389.422390][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.728040][ T5786] usb 1-1: GET_CAPABILITIES returned 0 [ 389.762540][ T5786] usbtmc 1-1:16.0: can't read capabilities [ 390.051004][ T8551] usb 1-1: usbtmc_ioctl_clear_out_halt returned -32 [ 390.096092][ T5786] usb 1-1: USB disconnect, device number 12 [ 390.116173][ T8561] bonding: no command found in bonding_masters - use +ifname or -ifname [ 391.323409][ T8569] loop2: detected capacity change from 0 to 32768 [ 391.354771][ T8569] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.970 (8569) [ 391.465793][ T8569] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 391.544327][ T8569] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 391.588508][ T8569] BTRFS info (device loop2): using free space tree [ 391.662514][ T8569] BTRFS info (device loop2): enabling ssd optimizations [ 391.700740][ T8569] BTRFS info (device loop2): auto enabling async discard [ 392.148117][ T5776] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 392.818938][ T8611] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 393.307793][ T5786] IPVS: starting estimator thread 0... [ 393.429256][ T8619] IPVS: using max 32 ests per chain, 76800 per kthread [ 393.808562][ T8600] loop0: detected capacity change from 0 to 32768 [ 394.126107][ T8633] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.990'. [ 394.663587][ T8645] loop3: detected capacity change from 0 to 512 [ 394.722277][ T8645] EXT4-fs: inline encryption not supported [ 394.802089][ T8647] loop2: detected capacity change from 0 to 128 [ 394.837599][ T8645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.884060][ T8647] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 394.962996][ T8647] hpfs: filesystem error: improperly stopped [ 394.986453][ T8645] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.022465][ T8647] hpfs: You really don't want any checks? You are crazy... [ 395.045999][ T8647] hpfs: hpfs_map_sector(): read error [ 395.090084][ T8647] hpfs: code page support is disabled [ 395.095741][ T8647] hpfs: hpfs_map_4sectors(): unaligned read [ 395.109454][ T8645] EXT4-fs (loop3): resizing filesystem from 128 to 2 blocks [ 395.147360][ T8647] hpfs: hpfs_map_4sectors(): unaligned read [ 395.155746][ T8645] EXT4-fs warning (device loop3): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 395.175927][ T8647] hpfs: filesystem error: unable to find root dir [ 395.338517][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.829313][ T8660] program syz.5.1002 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.362943][ T8680] pimreg: entered allmulticast mode [ 396.446634][ T8685] pimreg: left allmulticast mode [ 397.038877][ T5764] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 397.229042][ T5764] usb 3-1: Using ep0 maxpacket: 32 [ 397.242002][ T5764] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 397.268623][ T5764] usb 3-1: config 0 has no interface number 0 [ 397.304940][ T5764] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 397.350018][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.370307][ T5764] usb 3-1: Product: syz [ 397.388517][ T5764] usb 3-1: Manufacturer: syz [ 397.406112][ T5764] usb 3-1: SerialNumber: syz [ 397.426511][ T5764] usb 3-1: config 0 descriptor?? [ 397.462708][ T5764] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 397.679330][ T5764] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 397.756965][ T5764] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 397.967848][ T8690] loop5: detected capacity change from 0 to 32768 [ 398.087628][ T8706] loop3: detected capacity change from 0 to 8 [ 398.098118][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 398.123059][ T5786] usb 3-1: USB disconnect, device number 5 [ 398.174328][ T5786] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 398.265983][ T5786] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 398.352730][ T5786] quatech2 3-1:0.51: device disconnected [ 398.508330][ T8690] JBD2: Ignoring recovery information on journal [ 398.574843][ T8690] jbd2_journal_bmap: journal block not found at offset 32 on loop5-75 [ 398.685818][ T8690] JBD2: bad block at offset 32 [ 398.739025][ T8690] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 399.089518][ T8716] ftl_cs: FTL header not found. [ 399.272395][ T8716] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 399.481795][ T7334] ocfs2: Unmounting device (7,5) on (node local) [ 399.770625][ T8731] loop2: detected capacity change from 0 to 4096 [ 399.844222][ T8735] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 400.140348][ T5776] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 400.352022][ T8741] loop3: detected capacity change from 0 to 128 [ 400.384549][ T8741] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 400.506664][ T8741] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 400.667647][ T8747] jffs2: notice: (8747) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 401.218118][ T8761] program syz.2.1045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.208840][ T28] audit: type=1400 audit(1789670251.267:18): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=8785 comm="syz.3.1056" name="/" offset=59 [ 403.002472][ T8807] loop2: detected capacity change from 0 to 128 [ 403.043365][ T8807] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 403.128390][ T8807] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 403.227380][ T28] audit: type=1800 audit(1789670252.287:19): pid=8807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1067" name="file1" dev="loop2" ino=104 res=0 errno=0 [ 403.247931][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.503341][ T8815] loop3: detected capacity change from 0 to 4096 [ 403.525071][ T8819] loop5: detected capacity change from 0 to 128 [ 403.633575][ T8821] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 403.721600][ T28] audit: type=1800 audit(1789670252.787:20): pid=8819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1071" name="bus" dev="loop5" ino=1048671 res=0 errno=0 [ 403.885686][ T8823] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1072'. [ 405.176396][ T8839] MTRR 2 not used [ 405.186748][ T8842] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.1079'. [ 405.233791][ T8842] net_ratelimit: 162 callbacks suppressed [ 405.233870][ T8842] netlink: zone id is out of range [ 405.256892][ T8842] netlink: zone id is out of range [ 405.264357][ T8842] netlink: zone id is out of range [ 405.274381][ T8842] netlink: zone id is out of range [ 405.281493][ T8842] netlink: zone id is out of range [ 405.286901][ T8842] netlink: zone id is out of range [ 405.295314][ T8842] netlink: zone id is out of range [ 405.303327][ T8842] netlink: zone id is out of range [ 405.322183][ T8842] netlink: zone id is out of range [ 405.340109][ T8842] netlink: zone id is out of range [ 406.299540][ T8861] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1085'. [ 406.466187][ T28] audit: type=1400 audit(1789670255.517:21): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=8862 comm="syz.2.1088" name="/" offset=59 [ 407.535222][ T8886] loop2: detected capacity change from 0 to 128 [ 407.613439][ T28] audit: type=1800 audit(1789670256.677:22): pid=8886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1106" name="bus" dev="loop2" ino=1048673 res=0 errno=0 [ 408.523338][ T28] audit: type=1400 audit(1789670257.587:23): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="/" pid=8899 comm="syz.5.1101" name="/" offset=59 [ 408.917930][ T8905] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1103'. [ 409.482939][ T8919] loop3: detected capacity change from 0 to 256 [ 409.975700][ T8928] loop3: detected capacity change from 0 to 128 [ 410.094209][ T28] audit: type=1800 audit(1789670259.147:24): pid=8928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1111" name="bus" dev="loop3" ino=1048676 res=0 errno=0 [ 410.116830][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.894229][ T8939] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1118'. [ 411.411102][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 411.489162][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.853994][ T8964] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1131'. [ 412.219055][ T8] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 412.403629][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 412.412551][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 412.425914][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 412.437769][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.447303][ T8] usb 1-1: Product: syz [ 412.453766][ T8] usb 1-1: Manufacturer: syz [ 412.458371][ T8] usb 1-1: SerialNumber: syz [ 412.469414][ T8] usb 1-1: config 0 descriptor?? [ 412.486188][ T8] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 412.498921][ T8] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 412.759924][ T8] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 412.838629][ T8] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 412.856497][ T8] em28xx 1-1:0.0: board has no eeprom [ 412.902217][ T8966] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 412.931837][ T8] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 412.940218][ T8] em28xx 1-1:0.0: dvb set to bulk mode. [ 412.946210][ T9] em28xx 1-1:0.0: Binding DVB extension [ 412.987955][ T8] usb 1-1: USB disconnect, device number 13 [ 413.022430][ T8] em28xx 1-1:0.0: Disconnecting em28xx [ 413.067501][ T9] em28xx 1-1:0.0: Registering input extension [ 413.077989][ T8] em28xx 1-1:0.0: Closing input extension [ 413.122654][ T8] em28xx 1-1:0.0: Freeing device [ 413.584691][ T8974] loop3: detected capacity change from 0 to 1024 [ 413.927373][ T8979] loop2: detected capacity change from 0 to 4096 [ 413.981923][ T78] hfsplus: b-tree write err: -5, ino 25 [ 413.988338][ T78] hfsplus: b-tree write err: -5, ino 4 [ 414.041961][ T8979] EXT4-fs (loop2): Test dummy encryption mode enabled [ 414.063494][ T78] hfsplus: b-tree write err: -5, ino 2 [ 414.142083][ T8979] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.600202][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.043770][ T9001] »»»»»»: renamed from vlan0 (while UP) [ 415.445446][ T9015] loop2: detected capacity change from 0 to 64 [ 416.001264][ T9025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1156'. [ 416.944605][ T9047] loop2: detected capacity change from 0 to 256 [ 417.024808][ T9047] FAT-fs (loop2): Directory bread(block 64) failed [ 417.040333][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 60 seconds [ 417.052227][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 60 seconds [ 417.065186][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 60 seconds [ 417.077596][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 60 seconds [ 417.119223][ T9047] FAT-fs (loop2): Directory bread(block 65) failed [ 417.157159][ T9049] sctp: [Deprecated]: syz.0.1165 (pid 9049) Use of int in maxseg socket option. [ 417.157159][ T9049] Use struct sctp_assoc_value instead [ 417.176444][ T9047] FAT-fs (loop2): Directory bread(block 66) failed [ 417.204085][ T9047] FAT-fs (loop2): Directory bread(block 67) failed [ 417.242140][ T9047] FAT-fs (loop2): Directory bread(block 68) failed [ 417.282087][ T9047] FAT-fs (loop2): Directory bread(block 69) failed [ 417.305830][ T9047] FAT-fs (loop2): Directory bread(block 70) failed [ 417.330820][ T9047] FAT-fs (loop2): Directory bread(block 71) failed [ 417.353753][ T9047] FAT-fs (loop2): Directory bread(block 72) failed [ 417.367943][ T9047] FAT-fs (loop2): Directory bread(block 73) failed [ 417.598982][ T5786] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 417.799159][ T5786] usb 4-1: Using ep0 maxpacket: 16 [ 417.864156][ T5786] usb 4-1: unable to get BOS descriptor or descriptor too short [ 417.947881][ T5786] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 418.007884][ T5786] usb 4-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 418.109152][ T5786] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 418.184748][ T5786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.266654][ T5786] usb 4-1: Product: syz [ 418.281348][ T5786] usb 4-1: Manufacturer: syz [ 418.301293][ T5786] usb 4-1: SerialNumber: syz [ 418.602093][ T5786] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 418.637236][ T5786] snd-usb-audio: probe of 4-1:5.0 failed with error -22 [ 418.750849][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1175'. [ 419.069115][ T5786] usb 4-1: USB disconnect, device number 13 [ 419.223553][ T7172] udevd[7172]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 419.394531][ T9082] loop5: detected capacity change from 0 to 512 [ 419.441529][ T9082] EXT4-fs: inline encryption not supported [ 419.537340][ T9082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 419.603352][ T9082] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 419.766600][ T9082] Quota error (device loop5): do_insert_tree: Free block already used in tree: block 1 [ 419.810923][ T9082] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 419.905059][ T9082] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1180: Failed to acquire dquot type 1 [ 419.957170][ T9082] EXT4-fs (loop5): Remounting filesystem read-only [ 420.030518][ T9082] EXT4-fs (loop5): 1 truncate cleaned up [ 420.037239][ T9082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.764889][ T7334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.006499][ T9112] loop2: detected capacity change from 0 to 512 [ 421.103325][ T9112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.297757][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.133789][ T9135] program syz.5.1202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 422.375004][ T9140] loop2: detected capacity change from 0 to 1024 [ 422.464176][ T9140] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 422.857009][ T9145] loop5: detected capacity change from 0 to 4096 [ 422.911381][ T9145] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 423.065771][ T9145] ntfs: volume version 3.1. [ 423.793600][ T9151] loop2: detected capacity change from 0 to 32768 [ 423.833268][ T9151] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.1210 (9151) [ 423.918287][ T9151] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 424.002537][ T9151] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 424.058980][ T9151] BTRFS info (device loop2): using free space tree [ 424.176351][ T9151] BTRFS info (device loop2): enabling ssd optimizations [ 424.217720][ T9151] BTRFS info (device loop2): auto enabling async discard [ 424.309893][ T28] audit: type=1800 audit(1789670273.377:25): pid=9151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1210" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 424.520370][ T5776] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 424.738913][ T7172] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop2 scanned by udevd (7172) [ 425.598901][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 425.637930][ T9204] loop2: detected capacity change from 0 to 256 [ 425.822053][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.875618][ T9] usb 6-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 425.940789][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.005129][ T9] usb 6-1: config 0 descriptor?? [ 426.077329][ T9210] bond1 (unregistering): Released all slaves [ 426.472064][ T9] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 426.501929][ T9] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 426.528820][ T9] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 426.549067][ T9] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 426.557108][ T9] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 426.602971][ T9] hid-multitouch 0003:1FD2:6007.0009: unknown main item tag 0x0 [ 426.651660][ T9] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID vef.fd Device [HID 1fd2:6007] on usb-dummy_hcd.5-1/input0 [ 426.732411][ T9] usb 6-1: USB disconnect, device number 6 [ 426.813540][ T9219] fido_id[9219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 427.413905][ T9221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1232'. [ 427.770675][ T9231] loop3: detected capacity change from 0 to 1024 [ 427.863044][ T9231] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 427.935001][ T9231] System zones: 0-1, 3-12 [ 427.979633][ T9231] EXT4-fs (loop3): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 428.244859][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 428.257838][ T9242] loop5: detected capacity change from 0 to 512 [ 428.281531][ T9242] EXT4-fs: inline encryption not supported [ 428.342465][ T9242] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 428.501041][ T9242] EXT4-fs (loop5): 1 truncate cleaned up [ 428.507630][ T9242] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.688334][ T9242] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5972: inode #12: comm syz.5.1240: bad extra_isize 62 (inode size 256) [ 428.765919][ T9242] EXT4-fs (loop5): Remounting filesystem read-only [ 428.799199][ T9242] EXT4-fs warning (device loop5): ext4_rename_delete:3780: inode #12: comm syz.5.1240: Deleting old file: nlink 2, error=-5 [ 428.945063][ T9259] loop3: detected capacity change from 0 to 64 [ 429.038545][ T7334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.124712][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1248'. [ 430.565925][ T9298] loop5: detected capacity change from 0 to 2048 [ 430.704794][ T9298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.046067][ T7334] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.616388][ T9321] vcan0: tx address claim with dlc 0 [ 432.177526][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1290'. [ 433.162127][ T9328] loop3: detected capacity change from 0 to 40427 [ 433.222307][ T9328] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 433.263102][ T9328] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 433.322702][ T9328] F2FS-fs (loop3): invalid crc value [ 433.604792][ T9328] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 433.655671][ T9328] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 433.935911][ T9328] syz.3.1278: attempt to access beyond end of device [ 433.935911][ T9328] loop3: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 434.037217][ T9375] syz.3.1278: attempt to access beyond end of device [ 434.037217][ T9375] loop3: rw=2049, sector=53344, nr_sectors = 128 limit=40427 [ 434.180532][ T9375] syz.3.1278: attempt to access beyond end of device [ 434.180532][ T9375] loop3: rw=2049, sector=53472, nr_sectors = 8 limit=40427 [ 434.401555][ T5778] syz-executor: attempt to access beyond end of device [ 434.401555][ T5778] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 434.521603][ T5778] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 436.279876][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1324'. [ 436.422284][ T9438] loop2: detected capacity change from 0 to 64 [ 436.744047][ T9444] loop2: detected capacity change from 0 to 512 [ 436.834955][ T9444] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.932093][ T9444] ext4 filesystem being mounted at /402/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.231576][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.558947][ T5786] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 437.779584][ T5786] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 437.836253][ T5786] usb 4-1: config 0 has no interface number 0 [ 437.870239][ T5786] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 437.945631][ T5786] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 438.011156][ T5786] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 438.049884][ T5786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.093053][ T5786] usb 4-1: config 0 descriptor?? [ 438.104703][ T9456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 438.178432][ T5786] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 438.960532][ T9487] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1347'. [ 439.258885][ T5764] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 439.458913][ T5764] usb 3-1: Using ep0 maxpacket: 16 [ 439.476072][ T5764] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.508508][ T5764] usb 3-1: config 0 has no interfaces? [ 439.536713][ T5764] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 439.575790][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.627716][ T5764] usb 3-1: config 0 descriptor?? [ 439.986756][ T5764] usb 3-1: USB disconnect, device number 6 [ 440.018536][ T9] usb 4-1: USB disconnect, device number 14 [ 440.712146][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.719064][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.174087][ T9537] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 441.719256][ T9532] loop2: detected capacity change from 0 to 32768 [ 441.774827][ T9532] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1370 (9532) [ 441.909145][ T9532] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 441.952127][ T9532] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 442.012413][ T9532] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 442.069244][ T9532] BTRFS info (device loop2): use zstd compression, level 3 [ 442.131093][ T9532] BTRFS info (device loop2): using free space tree [ 442.254994][ T9532] BTRFS info (device loop2): enabling ssd optimizations [ 442.310354][ T28] audit: type=1807 audit(1789670291.377:26): UNKNOWN=? res=0 [ 442.322392][ T9566] ima: policy update failed [ 442.328559][ T9532] BTRFS info (device loop2): auto enabling async discard [ 442.349229][ T28] audit: type=1802 audit(1789670291.377:27): pid=9569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1380" res=0 errno=0 [ 442.429415][ T28] audit: type=1802 audit(1789670291.387:28): pid=9566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1380" res=0 errno=0 [ 442.525451][ T28] audit: type=1800 audit(1789670291.587:29): pid=9532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1370" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 442.761237][ T5776] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 442.849081][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 443.058871][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 443.088201][ T9] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 443.105254][ T9582] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.138648][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.173975][ T9] usb 6-1: Product: syz [ 443.178270][ T9] usb 6-1: Manufacturer: syz [ 443.211935][ T9] usb 6-1: SerialNumber: syz [ 443.233175][ T9] usb 6-1: config 0 descriptor?? [ 443.285637][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 444.691111][ T9] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 445.024260][ T9] usb 6-1: device descriptor read/64, error -32 [ 445.509410][ T9] usb 6-1: reset high-speed USB device number 7 using dummy_hcd [ 446.086600][ T9591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1388'. [ 446.614105][ T9] gspca_se401: read req failed req 0x06 error -19 [ 446.930670][ T9] usb 6-1: USB disconnect, device number 7 [ 447.137057][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 90 seconds [ 447.154245][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 90 seconds [ 447.171195][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 90 seconds [ 447.190170][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 90 seconds [ 458.222768][ T5139] udevd[5139]: worker [6997] /devices/virtual/block/nbd1 is taking a long time [ 461.984046][ T9608] loop2: detected capacity change from 0 to 512 [ 462.571070][ T9608] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 462.645731][ T9608] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1394: invalid indirect mapped block 256 (level 1) [ 462.907295][ T9608] EXT4-fs (loop2): Remounting filesystem read-only [ 462.993523][ T9608] EXT4-fs (loop2): 1 truncate cleaned up [ 463.107058][ T9608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.553382][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.743700][ T9622] autofs4:pid:9622:autofs_fill_super: pipe file descriptor does not contain proper ops [ 477.230334][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 120 seconds [ 477.243371][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 120 seconds [ 477.259961][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 120 seconds [ 477.335961][ T9626] loop3: detected capacity change from 0 to 512 [ 477.349875][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 120 seconds [ 478.097321][ T9628] loop2: detected capacity change from 0 to 256 [ 485.190503][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 486.139829][ T8] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 486.244610][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.329083][ T8] usb 1-1: Product: syz [ 486.333994][ T8] usb 1-1: Manufacturer: syz [ 486.404798][ T8] usb 1-1: SerialNumber: syz [ 491.592950][ T8] usb 1-1: can't set config #1, error -110 [ 495.812093][ T9] usb 1-1: USB disconnect, device number 14 [ 502.207074][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.214800][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.478108][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 150 seconds [ 507.491712][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 150 seconds [ 507.524748][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 150 seconds [ 507.854282][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 150 seconds [ 511.176890][ T9658] loop2: detected capacity change from 0 to 512 [ 511.356209][ T9658] EXT4-fs: Ignoring removed bh option [ 511.907623][ T9658] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 512.330603][ T9658] EXT4-fs (loop2): 1 truncate cleaned up [ 512.736697][ T9658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.087650][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.633148][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 524.659751][ T5792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 524.680899][ T5792] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 524.739842][ T5792] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 524.790300][ T5792] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 524.850299][ T5792] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 524.870815][ T5792] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 526.448071][ T5792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 526.477158][ T5792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 526.540093][ T5792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 526.609412][ T5792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 526.625190][ T5792] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 526.635769][ T5792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 527.063208][ T51] Bluetooth: hci4: command tx timeout [ 528.802691][ T51] Bluetooth: hci5: command tx timeout [ 529.150420][ T51] Bluetooth: hci4: command tx timeout [ 530.884499][ T51] Bluetooth: hci5: command tx timeout [ 531.189992][ T51] Bluetooth: hci4: command tx timeout [ 532.743466][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 532.763997][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 532.777079][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 532.881249][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 532.927879][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 532.938392][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 532.951323][ T5792] Bluetooth: hci5: command tx timeout [ 533.485602][ T51] Bluetooth: hci4: command tx timeout [ 535.033089][ T51] Bluetooth: hci5: command tx timeout [ 535.116331][ T51] Bluetooth: hci0: command tx timeout [ 536.596512][ T9586] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.225809][ T51] Bluetooth: hci0: command tx timeout [ 538.159949][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 180 seconds [ 538.172117][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 180 seconds [ 538.186491][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 180 seconds [ 538.201701][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 180 seconds [ 538.770653][ T9586] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.289080][ T51] Bluetooth: hci0: command tx timeout [ 540.435665][ T9586] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.754674][ T5139] udevd[5139]: worker [6997] /devices/virtual/block/nbd1 timeout; kill it [ 540.896870][ T5139] udevd[5139]: seq 12663 '/devices/virtual/block/nbd1' killed [ 541.399282][ T51] Bluetooth: hci0: command tx timeout [ 541.953843][ T9586] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.552514][ T9661] chnl_net:caif_netlink_parms(): no params data found [ 552.301821][ T9663] chnl_net:caif_netlink_parms(): no params data found [ 552.730526][ T9661] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.738554][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.840145][ T9661] bridge_slave_0: entered allmulticast mode [ 552.986663][ T9661] bridge_slave_0: entered promiscuous mode [ 553.137340][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.240215][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.248175][ T9661] bridge_slave_1: entered allmulticast mode [ 553.361704][ T9661] bridge_slave_1: entered promiscuous mode [ 558.074288][ T9663] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 563.631280][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.669296][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.086688][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 210 seconds [ 569.100467][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 210 seconds [ 569.115738][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 210 seconds [ 569.138330][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 210 seconds [ 585.615164][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 585.651454][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 585.666041][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 585.769248][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 585.783241][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 585.793221][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.192719][ T9586] hsr_slave_0: left promiscuous mode [ 586.564374][ T9586] hsr_slave_1: left promiscuous mode [ 586.951698][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.031395][ T9586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.309679][ T9586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.317391][ T9586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.566067][ T9586] bridge_slave_1: left allmulticast mode [ 587.612251][ T9586] bridge_slave_1: left promiscuous mode [ 587.681784][ T9586] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.929104][ T51] Bluetooth: hci1: command tx timeout [ 588.343682][ T9586] bridge_slave_0: left allmulticast mode [ 588.470413][ T9586] bridge_slave_0: left promiscuous mode [ 588.477006][ T9586] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.611479][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 589.659551][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 589.689058][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 589.729732][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 589.769703][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 589.790703][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 590.014141][ T51] Bluetooth: hci1: command tx timeout [ 590.352917][ T9586] veth1_macvtap: left promiscuous mode [ 590.419136][ T9586] veth0_macvtap: left promiscuous mode [ 590.425920][ T9586] veth1_vlan: left promiscuous mode [ 590.530575][ T9586] veth0_vlan: left promiscuous mode [ 591.919606][ T51] Bluetooth: hci0: command tx timeout [ 592.079564][ T51] Bluetooth: hci1: command tx timeout [ 593.991736][ T51] Bluetooth: hci0: command tx timeout [ 594.173359][ T51] Bluetooth: hci1: command tx timeout [ 595.105838][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 595.126244][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 595.151041][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 595.187560][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 595.208257][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 595.259720][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 596.099567][ T5792] Bluetooth: hci0: command tx timeout [ 597.349337][ T5792] Bluetooth: hci3: command tx timeout [ 598.177532][ T5792] Bluetooth: hci0: command tx timeout [ 599.455062][ T5792] Bluetooth: hci3: command tx timeout [ 599.549394][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 240 seconds [ 599.570199][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 240 seconds [ 599.588574][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 240 seconds [ 599.605917][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 240 seconds [ 601.509955][ T5792] Bluetooth: hci3: command tx timeout [ 603.591539][ T5792] Bluetooth: hci3: command tx timeout [ 605.536646][ T9586] team0 (unregistering): Port device team_slave_1 removed [ 606.199934][ T9586] team0 (unregistering): Port device team_slave_0 removed [ 606.957108][ T9586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.658968][ T9586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.635373][ T9586] bond0 (unregistering): Released all slaves [ 621.695394][ T9586] IPVS: stop unused estimator thread 0... [ 625.051055][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.057725][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.222430][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 270 seconds [ 630.239542][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 270 seconds [ 630.258387][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 270 seconds [ 630.274612][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 270 seconds [ 633.125630][ T9586] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.220053][ T9586] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.383399][ T9586] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.361123][ T9586] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.997368][ T9586] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.801936][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 646.816402][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 646.886245][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 646.999032][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 647.023558][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 647.034544][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 647.472816][ T9586] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.135701][ T51] Bluetooth: hci4: command tx timeout [ 649.178182][ T9586] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 649.757210][ T5792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 649.774557][ T5792] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 649.880762][ T5792] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 649.932562][ T5792] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 650.010323][ T5792] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 650.040384][ T5792] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 651.232560][ T5792] Bluetooth: hci4: command tx timeout [ 652.227851][ T9586] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.889859][ T5792] Bluetooth: hci5: command tx timeout [ 653.282049][ T5792] Bluetooth: hci4: command tx timeout [ 654.991153][ T5792] Bluetooth: hci5: command tx timeout [ 655.399211][ T5792] Bluetooth: hci4: command tx timeout [ 657.089888][ T5792] Bluetooth: hci5: command tx timeout [ 659.143834][ T51] Bluetooth: hci5: command tx timeout [ 659.317777][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 659.348146][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 659.375997][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 659.429673][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 659.460496][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 659.479356][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 660.999632][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 300 seconds [ 661.022659][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 300 seconds [ 661.035143][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 300 seconds [ 661.047892][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 300 seconds [ 661.759115][ T5084] Bluetooth: hci3: command tx timeout [ 663.839433][ T5084] Bluetooth: hci3: command tx timeout [ 665.912639][ T5084] Bluetooth: hci3: command tx timeout [ 667.988834][ T5084] Bluetooth: hci3: command tx timeout [ 669.189841][ T9727] chnl_net:caif_netlink_parms(): no params data found [ 678.809766][ T9727] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.817983][ T9727] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.939813][ T9727] bridge_slave_0: entered allmulticast mode [ 679.019129][ T9727] bridge_slave_0: entered promiscuous mode [ 679.105773][ T9730] chnl_net:caif_netlink_parms(): no params data found [ 681.163666][ T9727] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.252827][ T9727] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.326101][ T9727] bridge_slave_1: entered allmulticast mode [ 681.396713][ T9727] bridge_slave_1: entered promiscuous mode [ 685.149624][ T9730] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 686.522174][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.555627][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.639429][ T6596] block nbd1: Possible stuck request ffff8880222b0000: control (read@0,1024B). Runtime 330 seconds [ 691.651367][ T6596] block nbd1: Possible stuck request ffff8880222b0200: control (read@1024,1024B). Runtime 330 seconds [ 691.670961][ T6596] block nbd1: Possible stuck request ffff8880222b0400: control (read@2048,1024B). Runtime 330 seconds [ 691.683974][ T6596] block nbd1: Possible stuck request ffff8880222b0600: control (read@3072,1024B). Runtime 330 seconds [ 696.714646][ T29] INFO: task udevd:6997 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 696.839071][ T29] Not tainted syzkaller #0 [ 696.844341][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.045626][ T29] task:udevd state:D stack:23208 pid:6997 ppid:5139 flags:0x00004006 [ 697.199981][ T29] Call Trace: [ 697.203591][ T29] [ 697.206791][ T29] __schedule+0x15ae/0x4660 [ 697.349442][ T29] ? perf_trace_lock_acquire+0x400/0x400 [ 697.355729][ T29] ? asan.module_dtor+0x20/0x20 [ 697.579427][ T29] ? mark_lock+0x94/0x320 [ 697.584079][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 697.717269][ T29] ? lock_chain_count+0x20/0x20 [ 697.799191][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 697.805437][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 697.979700][ T29] schedule+0xbd/0x170 [ 697.984101][ T29] io_schedule+0x80/0xd0 [ 698.148823][ T29] folio_wait_bit_common+0x881/0xfa0 [ 698.154858][ T29] ? folio_wait_bit+0x30/0x30 [ 698.289269][ T29] ? _compound_head+0x120/0x120 [ 698.294317][ T29] ? filemap_add_folio+0x190/0x3d0 [ 698.498999][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 698.504942][ T29] ? blkdev_writepage+0x30/0x30 [ 698.652973][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 698.658342][ T29] ? blkdev_writepage+0x30/0x30 [ 698.810374][ T29] read_part_sector+0xd2/0x350 [ 698.815420][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 698.992117][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 699.098961][ T29] ? put_partition+0x360/0x360 [ 699.104511][ T29] ? alloc_pages+0x4e1/0x740 [ 699.281595][ T29] bdev_disk_changed+0x755/0x1450 [ 699.287306][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 699.438995][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 699.444765][ T29] ? iput+0x33f/0x900 [ 699.589446][ T29] blkdev_get_whole+0x30d/0x390 [ 699.594578][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 699.745087][ T29] blkdev_open+0x14e/0x360 [ 699.839662][ T29] do_dentry_open+0x880/0x14b0 [ 699.844675][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 699.999195][ T29] path_openat+0x284f/0x3270 [ 700.005130][ T29] ? do_sys_openat2+0xda/0x1d0 [ 700.182950][ T29] ? __x64_sys_openat+0x139/0x160 [ 700.188365][ T29] ? verify_lock_unused+0x140/0x140 [ 700.360617][ T29] ? do_filp_open+0x430/0x430 [ 700.366041][ T29] do_filp_open+0x1f2/0x430 [ 700.529058][ T29] ? vfs_tmpfile+0x620/0x620 [ 700.640712][ T29] ? _raw_spin_unlock+0x28/0x40 [ 700.645746][ T29] ? alloc_fd+0x590/0x640 [ 700.790365][ T29] do_sys_openat2+0x134/0x1d0 [ 700.795732][ T29] ? do_sys_open+0xe0/0xe0 [ 700.929359][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 700.935728][ T29] ? lock_chain_count+0x20/0x20 [ 701.162796][ T29] __x64_sys_openat+0x139/0x160 [ 701.168106][ T29] do_syscall_64+0x55/0xb0 [ 701.308994][ T29] ? clear_bhb_loop+0x40/0x90 [ 701.314091][ T29] ? clear_bhb_loop+0x40/0x90 [ 701.599051][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.605123][ T29] RIP: 0033:0x7fa741dc9407 [ 701.739332][ T29] RSP: 002b:00007ffde55180d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 701.748211][ T29] RAX: ffffffffffffffda RBX: 00007fa741d3d880 RCX: 00007fa741dc9407 [ 701.978834][ T29] RDX: 00000000000a0800 RSI: 0000561659b1fe50 RDI: ffffffffffffff9c [ 701.987019][ T29] RBP: 0000561659b02910 R08: 0000000000000000 R09: 0000000000000000 [ 702.218922][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 0000561659b17830 [ 702.227185][ T29] R13: 0000561659b1a410 R14: 0000000000000000 R15: 0000561659b17830 [ 702.409428][ T29] [ 702.461671][ T29] [ 702.461671][ T29] Showing all locks held in the system: [ 702.580721][ T29] 3 locks held by kworker/0:1/9: [ 702.585965][ T29] 2 locks held by kworker/u4:1/12: [ 702.719474][ T29] 1 lock held by khungtaskd/29: [ 702.724851][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 702.923290][ T29] 2 locks held by kworker/u4:7/2947: [ 703.031715][ T29] 1 lock held by klogd/5128: [ 703.036930][ T29] 2 locks held by getty/5530: [ 703.199268][ T29] #0: ffff888031ada0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 703.415393][ T29] #1: ffffc900032832f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 703.599438][ T29] 2 locks held by kworker/0:3/5764: [ 703.607304][ T29] 3 locks held by kworker/0:5/5786: [ 703.769091][ T29] 1 lock held by udevd/6997: [ 703.774001][ T29] #0: ffff888141b384c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 703.999052][ T29] 6 locks held by kworker/u4:9/9586: [ 704.005212][ T29] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 704.239339][ T29] #1: ffffc900033d7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 704.369191][ T29] #2: ffffffff8e3c3950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 704.527717][ T29] #3: ffffffff8e3d0988 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x251/0xa80 [ 704.655406][ T29] #4: ffff888077380768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: wiphy_unregister+0x25b/0xa80 [ 704.774343][ T29] #5: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 705.048827][ T29] 2 locks held by kworker/0:4/9588: [ 705.054295][ T29] #0: ffff888017c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 705.221139][ T29] #1: ffffc900033f7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 705.348886][ T29] 4 locks held by syz-executor/9727: [ 705.354693][ T29] #0: ffff8880617e4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500 [ 705.539013][ T29] #1: ffff8880617e40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x552/0x1150 [ 705.658903][ T29] #2: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0x99/0x220 [ 705.788825][ T29] #3: ffff888059098338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x7b/0x630 [ 705.898820][ T29] 3 locks held by syz-executor/9730: [ 705.904547][ T29] #0: ffff88806a3f4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x500 [ 706.080245][ T29] #1: ffff88806a3f40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x552/0x1150 [ 706.220487][ T29] #2: ffffffff8e53eb68 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0x99/0x220 [ 706.354651][ T29] 1 lock held by syz-executor/9737: [ 706.428730][ T29] 2 locks held by syz-executor/9755: [ 706.434521][ T29] 2 locks held by sed/9767: [ 706.538388][ T29] [ 706.599001][ T29] ============================================= [ 706.599001][ T29] [ 706.608100][ T29] NMI backtrace for cpu 0 [ 706.612757][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 706.620074][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 706.630387][ T29] Call Trace: [ 706.634021][ T29] [ 706.637196][ T29] dump_stack_lvl+0x18c/0x250 [ 706.642163][ T29] ? __wake_up_klogd+0xd9/0x100 [ 706.647359][ T29] ? show_regs_print_info+0x20/0x20 [ 706.653093][ T29] ? load_image+0x420/0x420 [ 706.658126][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 706.663272][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 706.670187][ T29] ? load_image+0x420/0x420 [ 706.675158][ T29] ? wq_watchdog_touch+0xef/0x170 [ 706.681217][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 706.687945][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 706.694213][ T29] watchdog+0xf59/0xfa0