last executing test programs: 30.274387476s ago: executing program 0 (id=904): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x8, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 30.175060878s ago: executing program 0 (id=906): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000004c0), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000400)="1f", 0x1, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000009c0)="8a", 0x1, r0) 29.994087463s ago: executing program 0 (id=909): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x51) ioctl$UI_DEV_CREATE(r0, 0x5501) 29.6920941s ago: executing program 0 (id=912): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@auto_da_alloc}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 29.216060371s ago: executing program 0 (id=914): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, r0, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) clock_getres(0xfffffffffffffffb, 0x0) 28.515851248s ago: executing program 0 (id=919): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000002c0)={r2, 0x1, 0x1, 0x9, &(0x7f0000000340)=[{0x1, 0x7ff, 0xe04, 0x7ff}, {0xd, 0x1, 0x3}, {0x26a, 0x299, 0x304, 0x5}, {0x7, 0x43d, 0x0, 0xfb}, {0xb, 0x1, 0x9688, 0x8}, {0x4, 0x4, 0x2, 0x7}, {0x1, 0x4, 0x81, 0xb}, {0xa, 0x52, 0x3, 0x7}, {0x8, 0x6, 0x3, 0x7fff}]}) 28.120773318s ago: executing program 32 (id=919): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x40) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f00000002c0)={r2, 0x1, 0x1, 0x9, &(0x7f0000000340)=[{0x1, 0x7ff, 0xe04, 0x7ff}, {0xd, 0x1, 0x3}, {0x26a, 0x299, 0x304, 0x5}, {0x7, 0x43d, 0x0, 0xfb}, {0xb, 0x1, 0x9688, 0x8}, {0x4, 0x4, 0x2, 0x7}, {0x1, 0x4, 0x81, 0xb}, {0xa, 0x52, 0x3, 0x7}, {0x8, 0x6, 0x3, 0x7fff}]}) 2.990498723s ago: executing program 1 (id=1133): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 2.366306437s ago: executing program 2 (id=1138): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0x11, "c8f46976e79ea788f03d9d3205927e"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 2.2119814s ago: executing program 4 (id=1139): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@mcast1, @remote, @remote, 0x1, 0x2, 0x5, 0x400, 0xb7, 0xd30048, r1}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) 2.202564321s ago: executing program 2 (id=1140): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/bridge/bridge-nf-call-iptables\x00', 0x1, 0x0) write$cgroup_int(r0, 0x0, 0x0) 2.075641914s ago: executing program 4 (id=1142): syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1210080, &(0x7f0000000080)={[{@creator={'creator', 0x3d, "83f2824d"}}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}]}, 0x1, 0x331, &(0x7f00000002c0)="$eJzs3U1rE0EcBvBnNps0aUNd20rBY7XgqbT1oHixSBHEL+BBirWNULpW0ApWEKNnKXoSBI/e9Cr6FfQifgE99SCe9FI8uDIzO9nddGfz0rXbkucHSfZlXv6zs2+Tki6IaGBdWvz25uyOfIkygBKAC4ADoAq4AE5gsnp/Y3Nt02+sZhVUUjnkS0DnFHvSrGw00rLKfCpHyJNzbq0Od/tKDk2kTEHwvWOaXwcSCRVH6GN/DwcYCo9Otb564JH9H03drsES62Gxi108wGiR4RARUfHC678TXiXq4f274wDT4b35Ub/+J+5vdouL41BoXf8dPR8IuX2OqVXReE8N4WTvO2aUmFaW3ifqyYVBtLkr0HtWogNEp1GlisWp3VrzGzNNVcBTXAzFkk2o91WYhii2aCv6YyplbJohq+3ZRlQbyrIN85b4x3uu8eMPvEyvbulzFzGJT+KLWBIeXmG1df/nBkJuHLV9vLae0vHP2ktUrfR0qkQrozH9cVXJSdMDH95GrazZtmsVJRlLGlmKaL9/90yczyv2XBhLfNVgWjdnb53KNZ6aa741/yc110R7rppb9hszK3f8zK9ScpM6ohPb4pqYwk+8x2Ls/t+RqadhPzITZ36hUoZ7RmZ7XJXS0o8J6gC+nXJkOl1kHmiXUzs62zPcxHmM3tt6uL7s+427OU28eKeL7yO7OVRyjaf/Cb0jiqg58jOWBtUts2PmVenfIAh839QZW+XmVkXWRFlVe+51ogdFU8/urwo09+wSC/bEABYAhEvMGaGf2h+3cg1FBXaV/bfsAbUkZYd0l30TVY5dULesMlUlVpUw1NWRUusjnquP1pf93k8pdPREnY7J60UHQ0WQVzGhx3+x8cqsOuvINy9jNBJ0KjxW4pxlBDSm3oe7G8G1irWO4EbMRIcx16kzwOm2Gh2YGp+0F+uFcbbd0h8Ovf8pQyziK27w+38iIiIiIiIiIiIiIiIiIiIiIiIioqOm1x8q9PNzgmSNOwP4jzeIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiPYn9vxfoKSeGFMp/Pm/JbhwUW8tG07JZJ5LQUR9+xcAAP//J6VW/g==") r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x0) 2.022273215s ago: executing program 2 (id=1143): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002000000000000000001080004000000000014000000110001"], 0xa0}}, 0x0) 1.855072688s ago: executing program 2 (id=1145): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x80}, 0x8) 1.748019011s ago: executing program 4 (id=1146): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000002880)=""/4082, 0xff2) 1.732755221s ago: executing program 3 (id=1147): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r1}, 0xc) 1.624454044s ago: executing program 3 (id=1148): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006040)={0x2020}, 0x2020) 1.540020555s ago: executing program 4 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502007000040600666c6167730007020000000002000000000200000008040200", 0x3d) 1.460160297s ago: executing program 2 (id=1150): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x5a}}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @multicast}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @private0}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 1.421617738s ago: executing program 4 (id=1151): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c040) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) 1.31990362s ago: executing program 3 (id=1152): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x10, &(0x7f0000000540), 0x1, 0x7cc, &(0x7f00000022c0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 1.255349222s ago: executing program 2 (id=1153): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000d80)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000180)="ca", 0x1}], 0x1, 0xc, 0x7ff, 0x1) 1.211010793s ago: executing program 1 (id=1154): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a010400000000000000000500000a0900010073797a30000000005c000000030a010400000000000000000500000a0900010073797a30000000000900030073797a30000000002800048008000140000000000800024000000001140003006e657464657673696d3000000000000008000a400000000260000000060a01040000000000000000050000020900010073797a30000000000900020073797a300000000034000480300001800e0001"], 0x104}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) 1.207517473s ago: executing program 4 (id=1162): r0 = syz_usb_connect(0x2, 0x68, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0xa}}) 1.000042597s ago: executing program 3 (id=1155): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x1, 0xfe}, 0x14) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) 704.160044ms ago: executing program 1 (id=1156): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r2}, &(0x7f0000000cc0), &(0x7f0000000d00)=r1}, 0x20) 532.393588ms ago: executing program 3 (id=1157): openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 456.015769ms ago: executing program 1 (id=1158): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="01") 296.396993ms ago: executing program 1 (id=1159): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/kvm/parameters/nx_huge_pages\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x4) 109.836307ms ago: executing program 3 (id=1160): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f0000000000)=""/59, 0x204000, 0x800, 0x5, 0x3}, 0x1c) 0s ago: executing program 1 (id=1161): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) kernel console output (not intermixed with test programs): 1: new high-speed USB device number 3 using dummy_hcd [ 105.088506][ T6201] Illegal XDP return value 4290914816 on prog (id 16) dev N/A, expect packet loss! [ 105.106290][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 105.124602][ T788] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 105.143840][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.186790][ T788] usb 4-1: config 0 descriptor?? [ 105.435811][ T788] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 105.467927][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.523213][ T788] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 105.553082][ T788] usb 4-1: media controller created [ 105.580707][ T6213] loop2: detected capacity change from 0 to 256 [ 105.608796][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.627545][ T6213] exfat: Deprecated parameter 'namecase' [ 105.653658][ T6213] exfat: Deprecated parameter 'namecase' [ 105.668786][ T788] az6027: usb out operation failed. (-71) [ 105.675880][ T788] az6027: usb out operation failed. (-71) [ 105.683089][ T788] stb0899_attach: Driver disabled by Kconfig [ 105.689445][ T788] az6027: no front-end attached [ 105.689445][ T788] [ 105.698284][ T788] az6027: usb out operation failed. (-71) [ 105.704159][ T788] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 105.704901][ T6213] exfat: Deprecated parameter 'namecase' [ 105.732539][ T788] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 105.785932][ T788] dvb-usb: schedule remote query interval to 400 msecs. [ 105.813700][ T788] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 105.823104][ T6213] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 105.856213][ T788] usb 4-1: USB disconnect, device number 3 [ 106.075067][ T788] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 106.385747][ T6216] loop0: detected capacity change from 0 to 32768 [ 106.418113][ T6216] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.162 (6216) [ 106.458444][ T6216] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 106.487295][ T6216] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 106.511305][ T6216] BTRFS info (device loop0): use zlib compression, level 3 [ 106.536067][ T6216] BTRFS info (device loop0): turning on sync discard [ 106.578296][ T6216] BTRFS info (device loop0): using free space tree [ 106.660781][ T6236] loop3: detected capacity change from 0 to 1024 [ 106.673064][ T6236] ======================================================= [ 106.673064][ T6236] WARNING: The mand mount option has been deprecated and [ 106.673064][ T6236] and is ignored by this kernel. Remove the mand [ 106.673064][ T6236] option from the mount to silence this warning. [ 106.673064][ T6236] ======================================================= [ 106.710380][ T6236] EXT4-fs: Ignoring removed nobh option [ 106.717191][ T6236] EXT4-fs: Ignoring removed bh option [ 106.722751][ T6236] EXT4-fs: Ignoring removed nobh option [ 106.729462][ T6236] EXT4-fs (loop3): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 106.831991][ T6236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.878301][ T6216] BTRFS info (device loop0): enabling ssd optimizations [ 107.030169][ T28] audit: type=1800 audit(1788369859.942:4): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.167" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 107.145142][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.241308][ T5771] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.401494][ T6257] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.947033][ T6276] loop3: detected capacity change from 0 to 256 [ 108.586790][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 108.881307][ T6305] kAFS: bad VL server IP address [ 109.521069][ T6324] loop7: detected capacity change from 0 to 7 [ 109.535222][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.544593][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.558041][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.567272][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.576473][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.579718][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.593193][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.606511][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.615713][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.623978][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.633216][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.641667][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.650881][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.659367][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.668601][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.676596][ T6324] ldm_validate_partition_table(): Disk read failed. [ 109.688922][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.698181][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.712531][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.721766][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.730366][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.739592][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 109.750091][ T6324] Dev loop7: unable to read RDB block 0 [ 109.756678][ T6324] loop7: unable to read partition table [ 109.762575][ T6324] loop7: partition table beyond EOD, truncated [ 109.773697][ T6324] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`րc֐ȵ4FLQk݊) failed (rc=-5) [ 109.806253][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 109.816036][ T27] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 109.825296][ T27] usb 1-1: config 179 has no interface number 0 [ 109.837137][ T5832] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.843891][ T6308] loop2: detected capacity change from 0 to 40427 [ 109.851197][ T27] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 109.862847][ T27] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 109.884465][ T6308] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 109.893071][ T27] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 109.910589][ T6308] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 109.923712][ T27] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 109.945514][ T6308] F2FS-fs (loop2): invalid crc value [ 109.973448][ T27] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 110.009893][ T6308] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.038947][ T27] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 110.049276][ T5832] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.059253][ T5832] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.059469][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.086090][ T5832] usb 2-1: New USB device found, idVendor=1199, idProduct=0fff, bcdDevice= 0.00 [ 110.109877][ T6319] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 110.115788][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.206394][ T5832] usb-storage 2-1:1.0: USB Mass Storage device detected [ 110.283832][ T6308] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 110.291185][ T6308] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.482968][ T27] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 110.619774][ T5779] syz-executor: attempt to access beyond end of device [ 110.619774][ T5779] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 110.656556][ T5832] usb-storage: probe of 2-1:1.0 failed with error -5 [ 110.680655][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 110.695814][ T5832] usb 2-1: USB disconnect, device number 2 [ 110.819006][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 110.819011][ T788] usb 1-1: USB disconnect, device number 2 [ 110.833904][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 110.869170][ T788] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 111.215475][ T6345] loop3: detected capacity change from 0 to 4096 [ 111.258826][ T6345] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 111.327003][ T6345] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 111.777065][ T6360] loop1: detected capacity change from 0 to 512 [ 111.832034][ T6360] EXT4-fs error (device loop1): ext4_orphan_get:1408: inode #15: comm syz.1.215: iget: bad extended attribute block 134217728 [ 111.868302][ T6360] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.215: couldn't read orphan inode 15 (err -117) [ 111.897955][ T6360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.951627][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.969854][ T6366] loop3: detected capacity change from 0 to 1024 [ 111.977586][ T6366] EXT4-fs: Ignoring removed orlov option [ 112.010804][ T6366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.225728][ T6366] EXT4-fs error (device loop3): __ext4_new_inode:1292: comm syz.3.218: failed to insert inode 16: doubly allocated? [ 112.327448][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.530452][ T6379] loop3: detected capacity change from 0 to 256 [ 112.587165][ T6379] exfat: Deprecated parameter 'namecase' [ 112.592945][ T6379] exfat: Deprecated parameter 'namecase' [ 112.630058][ T6379] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d) [ 113.096082][ T5763] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.313569][ T5763] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.378835][ T5763] usb 1-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 113.398287][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 113.422919][ T5763] usb 1-1: Product: syz [ 113.432980][ T5763] usb 1-1: Manufacturer: syz [ 113.452212][ T5763] navman 1-1:1.0: navman converter detected [ 113.471817][ T6391] loop2: detected capacity change from 0 to 512 [ 113.480055][ T5763] usb 1-1: navman converter now attached to ttyUSB0 [ 113.554758][ T6391] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 113.633196][ T6391] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1154: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 113.694244][ T6391] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.229: bg 0: block 248: padding at end of block bitmap is not set [ 113.737769][ T27] usb 1-1: USB disconnect, device number 3 [ 113.750091][ T6391] Quota error (device loop2): write_blk: dquota write failed [ 113.762558][ T6391] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 113.775337][ T6391] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.229: Failed to acquire dquot type 1 [ 113.787275][ T27] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 113.794690][ T6391] EXT4-fs (loop2): 1 truncate cleaned up [ 113.803154][ T6391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 113.830074][ T27] navman 1-1:1.0: device disconnected [ 113.965247][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 113.983147][ T969] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 113.999181][ T969] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:6: Failed to release dquot type 1 [ 114.069682][ T6405] veth1_to_bond: entered allmulticast mode [ 114.082940][ T6405] veth1_to_bond: left allmulticast mode [ 114.653821][ T6426] loop1: detected capacity change from 0 to 512 [ 114.661520][ T6424] batman_adv: batadv0: Adding interface: macvtap1 [ 114.710030][ T6424] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.752317][ T6429] program syz.0.246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.772949][ T6424] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 114.931117][ T6426] EXT4-fs (loop1): Test dummy encryption mode enabled [ 114.956321][ T6426] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 115.020295][ T6426] EXT4-fs (loop1): 1 truncate cleaned up [ 115.031069][ T6410] loop3: detected capacity change from 0 to 32768 [ 115.038798][ T6426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.051444][ T6410] XFS (loop3): Invalid device [./bus], error=-16 [ 115.110200][ T5774] blk_print_req_error: 10 callbacks suppressed [ 115.110216][ T5774] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 115.274184][ T27] IPVS: starting estimator thread 0... [ 115.396263][ T6443] IPVS: using max 20 ests per chain, 48000 per kthread [ 115.427476][ T6426] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 115.600792][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.841141][ T6436] loop2: detected capacity change from 0 to 32768 [ 115.910852][ T6436] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.054744][ T6436] XFS (loop2): Ending clean mount [ 116.090138][ T6436] XFS (loop2): Quotacheck needed: Please wait. [ 116.145461][ T6436] XFS (loop2): Quotacheck: Done. [ 116.338543][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.670781][ T6475] loop0: detected capacity change from 0 to 16 [ 116.719621][ T6475] erofs: (device loop0): mounted with root inode @ nid 36. [ 116.752009][ T6475] syz.0.261: attempt to access beyond end of device [ 116.752009][ T6475] loop0: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 116.785153][ T6475] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 117.002235][ T6469] loop3: detected capacity change from 0 to 40427 [ 117.021361][ T6469] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 117.043384][ T6469] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.069995][ T6469] F2FS-fs (loop3): invalid crc value [ 117.176723][ T6469] F2FS-fs (loop3): Found nat_bits in checkpoint [ 117.246430][ T6489] i2c i2c-0: delete_device: Can't parse I2C address [ 117.328142][ T6469] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 117.335646][ T6469] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.446763][ T6494] netlink: 'syz.1.267': attribute type 3 has an invalid length. [ 117.454550][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 117.502226][ T6497] loop0: detected capacity change from 0 to 256 [ 117.647426][ T5777] syz-executor: attempt to access beyond end of device [ 117.647426][ T5777] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 117.726188][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 118.065053][ T6512] loop0: detected capacity change from 0 to 512 [ 118.080658][ T6512] EXT4-fs (loop0): orphan cleanup on readonly fs [ 118.087372][ T788] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 118.107695][ T6512] EXT4-fs error (device loop0): ext4_ext_check_inode:532: inode #4: comm syz.0.277: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 118.131742][ T6512] EXT4-fs error (device loop0): ext4_quota_enable:7147: comm syz.0.277: Bad quota inode: 4, type: 1 [ 118.145850][ T6512] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.160834][ T6512] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 118.168943][ T6512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 118.196623][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.218833][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.280801][ T6515] loop0: detected capacity change from 0 to 512 [ 118.291930][ T6515] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.309295][ T788] usb 3-1: config 0 has an invalid interface number: 37 but max is 1 [ 118.318579][ T788] usb 3-1: config 0 has an invalid interface number: 255 but max is 1 [ 118.333189][ T6515] EXT4-fs (loop0): 1 truncate cleaned up [ 118.342797][ T788] usb 3-1: config 0 has no interface number 0 [ 118.352071][ T6515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.371028][ T788] usb 3-1: config 0 has no interface number 1 [ 118.378734][ T788] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 118.435910][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.445164][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.454165][ T788] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 118.466086][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.480630][ T27] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 118.500161][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.512363][ T27] usb 2-1: Product: syz [ 118.516845][ T27] usb 2-1: Manufacturer: syz [ 118.522036][ T27] usb 2-1: SerialNumber: syz [ 118.541915][ T27] usb 2-1: selecting invalid altsetting 1 [ 118.548140][ T788] usb 3-1: config 0 interface 255 has no altsetting 0 [ 118.573954][ T788] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 118.589869][ T27] usb 2-1: unit 6 not found! [ 118.596819][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.620285][ T788] usb 3-1: Product: syz [ 118.642709][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.653760][ T788] usb 3-1: Manufacturer: syz [ 118.665248][ T788] usb 3-1: SerialNumber: syz [ 118.696674][ T788] usb 3-1: config 0 descriptor?? [ 118.880954][ T6524] loop3: detected capacity change from 0 to 256 [ 118.904399][ T6524] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 118.996439][ T2137] usb 3-1: USB disconnect, device number 2 [ 119.255248][ T5832] IPVS: starting estimator thread 0... [ 119.366152][ T6529] IPVS: using max 20 ests per chain, 48000 per kthread [ 119.395526][ T27] usb 2-1: 2:0: failed to get current value for ch 0 (-71) [ 119.468205][ T27] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 119.494282][ T27] usb 2-1: USB disconnect, device number 3 [ 119.538933][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.575691][ T6523] loop0: detected capacity change from 0 to 40427 [ 119.599525][ T6523] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 119.651664][ T6523] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 119.716808][ T6523] F2FS-fs (loop0): invalid crc value [ 119.752327][ T6523] F2FS-fs (loop0): Found nat_bits in checkpoint [ 119.918480][ T6523] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 119.935816][ T6523] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 120.030907][ T5771] syz-executor: attempt to access beyond end of device [ 120.030907][ T5771] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 120.048903][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 120.293721][ T6548] loop1: detected capacity change from 0 to 16 [ 120.325667][ T6548] erofs: (device loop1): mounted with root inode @ nid 36. [ 120.385047][ T6548] syz.1.291: attempt to access beyond end of device [ 120.385047][ T6548] loop1: rw=0, sector=15300821024, nr_sectors = 8 limit=16 [ 120.466158][ T6548] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 72 of nid 36 [ 120.482579][ T6540] loop2: detected capacity change from 0 to 32768 [ 120.551301][ T6540] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 120.697730][ T6540] XFS (loop2): Ending clean mount [ 120.994529][ T5779] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 121.450507][ T6571] netlink: 'syz.1.295': attribute type 3 has an invalid length. [ 121.581874][ T6573] loop3: detected capacity change from 0 to 512 [ 121.598085][ T27] IPVS: starting estimator thread 0... [ 121.677121][ T6573] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.296: iget: bad extended attribute block 134217728 [ 121.706146][ T6576] IPVS: using max 19 ests per chain, 45600 per kthread [ 121.716990][ T6573] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.296: couldn't read orphan inode 15 (err -117) [ 121.762351][ T6573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.941519][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.107055][ T6590] loop3: detected capacity change from 0 to 2048 [ 122.129982][ T6590] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 122.188025][ T6590] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.280882][ T6592] loop2: detected capacity change from 0 to 512 [ 122.289352][ T6569] loop0: detected capacity change from 0 to 40427 [ 122.319012][ T6592] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.326193][ T6569] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 122.335472][ T6569] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 122.382083][ T6569] F2FS-fs (loop0): Found nat_bits in checkpoint [ 122.417100][ T6592] EXT4-fs (loop2): 1 truncate cleaned up [ 122.466814][ T6592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.579832][ T6600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.305'. [ 122.596419][ T6569] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 122.603500][ T6569] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 122.711650][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.947618][ T6569] overlayfs: conflicting lowerdir path [ 123.091028][ T6608] loop2: detected capacity change from 0 to 512 [ 123.108992][ T6584] loop1: detected capacity change from 0 to 40427 [ 123.125085][ T6608] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #15: comm syz.2.309: iget: bad extended attribute block 134217728 [ 123.142843][ T6608] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.309: couldn't read orphan inode 15 (err -117) [ 123.157411][ T6608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.175159][ T6606] EXT4-fs (loop3): Test dummy encryption mode enabled [ 123.198767][ T6606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.201278][ T6584] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.226174][ T6584] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.243370][ T5771] syz-executor: attempt to access beyond end of device [ 123.243370][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 123.267263][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.278798][ T6606] EXT4-fs (loop3): 1 truncate cleaned up [ 123.285717][ T6606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.303183][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 123.315093][ T6584] F2FS-fs (loop1): invalid crc value [ 123.321441][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 123.355434][ T6584] F2FS-fs (loop1): Found nat_bits in checkpoint [ 123.534208][ T6584] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 123.556721][ T6584] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.577504][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.770078][ T5776] syz-executor: attempt to access beyond end of device [ 123.770078][ T5776] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 123.824455][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 124.643789][ T6642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.314'. [ 125.228753][ T6664] set_capacity_and_notify: 1 callbacks suppressed [ 125.228772][ T6664] loop3: detected capacity change from 0 to 256 [ 125.446245][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.653208][ T5832] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 125.676398][ T5832] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 125.705173][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.728873][ T5832] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 125.747869][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.780932][ T6662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.797500][ T6662] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 125.826943][ T5832] pl2303 3-1:1.0: pl2303 converter detected [ 125.846831][ T5832] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 126.188497][ T6685] netlink: 40 bytes leftover after parsing attributes in process `syz.0.344'. [ 126.205288][ T6681] loop3: detected capacity change from 0 to 256 [ 126.215924][ T6685] Zero length message leads to an empty skb [ 126.236736][ T6662] pl2303 3-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 126.274304][ T6662] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 126.294821][ T6662] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 126.306799][ T6662] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 126.352605][ T6662] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 126.370161][ T6681] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 126.391534][ T6687] loop0: detected capacity change from 0 to 512 [ 126.658786][ T6662] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 126.726821][ T6662] pl2303 ttyUSB0: error sending break = -32 [ 126.900032][ T6695] ip6gre1: entered allmulticast mode [ 126.905802][ T6697] loop0: detected capacity change from 0 to 512 [ 126.925915][ T6697] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.942565][ T999] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.952263][ T2137] usb 3-1: USB disconnect, device number 3 [ 126.969533][ T6697] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 126.982784][ T6697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 126.991430][ T6697] System zones: 1-12 [ 127.000536][ T6697] EXT4-fs (loop0): 1 truncate cleaned up [ 127.006994][ T2137] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 127.015572][ T2137] pl2303 3-1:1.0: device disconnected [ 127.027443][ T6697] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.119197][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.492445][ T6689] loop1: detected capacity change from 0 to 40427 [ 127.546684][ T6689] F2FS-fs (loop1): invalid crc value [ 127.565279][ T6689] F2FS-fs (loop1): Found nat_bits in checkpoint [ 127.727796][ T6689] F2FS-fs (loop1): Start checkpoint disabled! [ 127.756449][ T6689] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 128.069050][ T999] kworker/u4:7: attempt to access beyond end of device [ 128.069050][ T999] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 128.087742][ T999] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.094750][ T999] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 128.364437][ T6735] netlink: 'syz.3.367': attribute type 14 has an invalid length. [ 128.684767][ T6741] loop1: detected capacity change from 0 to 512 [ 128.741764][ T6741] EXT4-fs (loop1): 1 orphan inode deleted [ 128.757964][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 128.780015][ T6741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.793245][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6989: comm kworker/u4:1: Failed to release dquot type 1 [ 128.805668][ T6741] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.919880][ T6727] loop0: detected capacity change from 0 to 32768 [ 128.946277][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.996113][ T5832] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 129.176192][ T5832] usb 4-1: Using ep0 maxpacket: 16 [ 129.196201][ T5832] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 129.205897][ T5832] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 129.227618][ T5832] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 57701, setting to 1024 [ 129.244464][ T5832] usb 4-1: config 0 interface 0 has no altsetting 0 [ 129.260168][ T5832] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 129.301246][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.321350][ T5832] usb 4-1: Product: syz [ 129.325573][ T5832] usb 4-1: Manufacturer: syz [ 129.334204][ T5832] usb 4-1: SerialNumber: syz [ 129.345081][ T5832] usb 4-1: config 0 descriptor?? [ 129.597655][ T5832] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 129.880226][ T5812] usb 4-1: USB disconnect, device number 4 [ 129.906540][ T5125] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 130.138371][ T28] audit: type=1326 audit(1788369883.072:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.175735][ T6758] loop0: detected capacity change from 0 to 32768 [ 130.203241][ T28] audit: type=1326 audit(1788369883.072:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.259095][ T28] audit: type=1326 audit(1788369883.072:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.330240][ T28] audit: type=1326 audit(1788369883.072:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.366403][ T28] audit: type=1326 audit(1788369883.072:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.393030][ T6771] netlink: 'syz.2.382': attribute type 11 has an invalid length. [ 130.403464][ T28] audit: type=1326 audit(1788369883.072:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.424010][ T6771] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.382'. [ 130.494907][ T28] audit: type=1326 audit(1788369883.072:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.580957][ T28] audit: type=1326 audit(1788369883.072:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.650534][ T28] audit: type=1326 audit(1788369883.072:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.381" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ceb99e159 code=0x7ffc0000 [ 130.737552][ T6775] capability: warning: `syz.3.385' uses deprecated v2 capabilities in a way that may be insecure [ 130.826201][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.092367][ T6767] loop1: detected capacity change from 0 to 40427 [ 131.126102][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.138434][ T6767] F2FS-fs (loop1): invalid crc value [ 131.197708][ T6767] F2FS-fs (loop1): Found nat_bits in checkpoint [ 131.316048][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 131.334711][ T27] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 131.347040][ T27] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 131.357194][ T6767] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 131.406331][ T27] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.415575][ T27] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 131.476200][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.484270][ T27] usb 3-1: Product: syz [ 131.510244][ T27] usb 3-1: Manufacturer: syz [ 131.514925][ T27] usb 3-1: SerialNumber: syz [ 131.549875][ T27] usb 3-1: config 0 descriptor?? [ 131.694545][ T5776] syz-executor: attempt to access beyond end of device [ 131.694545][ T5776] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.737100][ T5776] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 131.985902][ T27] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 132.105146][ T6791] loop0: detected capacity change from 0 to 32768 [ 132.132253][ T6791] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.283518][ T6791] XFS (loop0): Ending clean mount [ 132.337653][ T6808] loop3: detected capacity change from 0 to 8 [ 132.394350][ T6808] SQUASHFS error: Unknown LZ4 version [ 132.401716][ T27] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 132.432078][ T6808] squashfs image failed sanity check [ 132.498916][ T27] usb 3-1: USB disconnect, device number 4 [ 132.535803][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 133.155482][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.162006][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.192750][ T6822] netlink: 76 bytes leftover after parsing attributes in process `syz.0.400'. [ 133.214807][ T6823] process 'syz.2.401' launched './file0' with NULL argv: empty string added [ 133.666602][ T5832] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 133.858011][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 133.881748][ T5832] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 133.900471][ T5832] usb 1-1: config 179 has no interface number 0 [ 133.907976][ T5832] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 133.922531][ T5832] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 133.935412][ T5832] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 133.953049][ T6845] loop3: detected capacity change from 0 to 2048 [ 133.958552][ T5832] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 133.989165][ T5832] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 134.015759][ T5832] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 134.045836][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.077146][ T6831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 134.096236][ T6850] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.295802][ T6850] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 134.333482][ T6850] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 134.375392][ T6850] Remounting filesystem read-only [ 134.388584][ T12] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 134.416013][ T12] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 134.458430][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.494819][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.523091][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.549169][ T788] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 134.596285][ T12] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 134.604128][ T12] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 134.621258][ T12] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 134.633648][ T12] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 134.643486][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.660423][ T12] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 134.684041][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.716140][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.725128][ T12] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 134.782544][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.825631][ T12] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 134.845654][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.854964][ T5810] usb 1-1: USB disconnect, device number 4 [ 134.861024][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 134.866400][ T5810] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 134.881252][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.892656][ T12] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 134.919150][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 134.946376][ T12] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 134.962931][ T12] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 134.971875][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.005398][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.037937][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.059834][ T12] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 135.067451][ T12] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 135.074891][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.084395][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.094710][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.104465][ T12] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 135.114911][ T12] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 135.122575][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.134832][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.154190][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.164435][ T12] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 135.176470][ T12] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 135.184620][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.207958][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.236108][ T12] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 135.280116][ T6845] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 135.370903][ T5777] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 135.394120][ T5777] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 135.401113][ T5777] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 135.409423][ T5777] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 135.417866][ T5777] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 135.436182][ T5777] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 135.469254][ T6873] loop1: detected capacity change from 0 to 1024 [ 135.514467][ T6873] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.598207][ T6877] loop0: detected capacity change from 0 to 1024 [ 135.645167][ T6873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.744657][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.871973][ T11] hfsplus: b-tree write err: -5, ino 25 [ 135.889532][ T11] hfsplus: b-tree write err: -5, ino 4 [ 135.895292][ T11] hfsplus: b-tree write err: -5, ino 2 [ 136.944102][ T6917] loop3: detected capacity change from 0 to 32768 [ 137.555415][ T6942] loop0: detected capacity change from 0 to 1024 [ 138.292612][ T6961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 138.310990][ T6962] loop0: detected capacity change from 0 to 512 [ 138.583505][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 138.916183][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 138.966387][ T6980] netlink: 92 bytes leftover after parsing attributes in process `syz.3.473'. [ 139.047744][ T6966] loop2: detected capacity change from 0 to 32768 [ 139.075094][ T6966] JBD2: Ignoring recovery information on journal [ 139.090143][ T6966] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 139.105724][ T6966] JBD2: bad block at offset 32 [ 139.119023][ T6966] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 139.301526][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 139.464771][ T6988] loop3: detected capacity change from 0 to 4096 [ 139.511050][ T6988] EXT4-fs (loop3): Test dummy encryption mode enabled [ 139.602353][ T6988] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.729597][ T6988] EXT4-fs (loop3): shut down requested (1) [ 139.835915][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.481'. [ 139.869642][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.374172][ T7016] loop1: detected capacity change from 0 to 1024 [ 140.431648][ T7016] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 140.442047][ T7016] System zones: 0-1, 3-12 [ 140.459360][ T7016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.605213][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.901047][ T7028] 9pnet_fd: p9_fd_create_unix (7028): problem connecting socket: ./file0: -111 [ 140.987139][ T7007] loop3: detected capacity change from 0 to 32768 [ 141.030986][ T7007] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 141.088661][ T7007] JBD2: Ignoring recovery information on journal [ 141.221187][ T7007] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 141.385623][ T7036] loop0: detected capacity change from 0 to 8192 [ 141.444189][ T7036] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.540811][ T7036] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 141.611411][ T7036] REISERFS (device loop0): using ordered data mode [ 141.646019][ T7036] reiserfs: using flush barriers [ 141.651560][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.499'. [ 141.682850][ T7007] overlayfs: upper fs does not support tmpfile. [ 141.706244][ T7036] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 141.746431][ T7007] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 141.753484][ T7007] overlayfs: failed to set xattr on upper [ 141.760137][ T7036] REISERFS (device loop0): checking transaction log (loop0) [ 141.777846][ T7036] REISERFS (device loop0): Using r5 hash to sort names [ 141.796566][ T7036] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 141.805759][ T7007] overlayfs: ...falling back to redirect_dir=nofollow. [ 141.835051][ T7007] overlayfs: ...falling back to index=off. [ 141.848930][ T7007] overlayfs: ...falling back to uuid=null. [ 141.904882][ T7044] loop1: detected capacity change from 0 to 16384 [ 141.916760][ T7007] overlayfs: upper fs missing required features. [ 141.979030][ T7044] NILFS (loop1): invalid segment: Checksum error in segment payload [ 141.996599][ T7044] NILFS (loop1): trying rollback from an earlier position [ 142.087838][ T7044] NILFS (loop1): recovery complete [ 142.151942][ T7051] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.235322][ T5777] ocfs2: Unmounting device (7,3) on (node local) [ 142.390792][ T7056] loop2: detected capacity change from 0 to 128 [ 142.571413][ T7056] syz.2.504: attempt to access beyond end of device [ 142.571413][ T7056] loop2: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 142.595117][ T7056] syz.2.504: attempt to access beyond end of device [ 142.595117][ T7056] loop2: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 142.945242][ T7067] loop3: detected capacity change from 0 to 128 [ 143.120005][ T7069] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x47 [ 143.366424][ T2137] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 143.571299][ T2137] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 143.602733][ T2137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.638142][ T2137] usb 1-1: config 0 descriptor?? [ 143.677782][ T2137] cp210x 1-1:0.0: cp210x converter detected [ 144.076412][ T2137] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 144.177387][ T7093] capability: warning: `syz.1.520' uses 32-bit capabilities (legacy support in use) [ 144.203839][ T7093] loop1: detected capacity change from 0 to 256 [ 144.287989][ T2137] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 144.321027][ T2137] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 144.361163][ T2137] usb 1-1: cp210x converter now attached to ttyUSB0 [ 144.402111][ T2137] usb 1-1: USB disconnect, device number 5 [ 144.443353][ T2137] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 144.459912][ T2137] cp210x 1-1:0.0: device disconnected [ 144.565691][ T7100] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 144.702373][ T7104] netlink: 52 bytes leftover after parsing attributes in process `syz.3.526'. [ 145.097452][ T2137] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.185662][ T7119] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03 [ 145.308360][ T2137] usb 4-1: Using ep0 maxpacket: 8 [ 145.324639][ T2137] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 145.360547][ T2137] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 145.386921][ T2137] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 145.423999][ T2137] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 145.466948][ T2137] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 145.486664][ T2137] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.526056][ T2137] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.547367][ T2137] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.804440][ T2137] usb 4-1: GET_CAPABILITIES returned 0 [ 145.816460][ T2137] usbtmc 4-1:16.0: can't read capabilities [ 146.061036][ T2137] usb 4-1: USB disconnect, device number 5 [ 146.121031][ T7130] loop1: detected capacity change from 0 to 32768 [ 146.162819][ T7130] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 146.235754][ T7130] XFS (loop1): Ending clean mount [ 146.342152][ T5776] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 146.846791][ T7158] device-mapper: ioctl: Invalid ioctl structure: name c, dev 2 [ 147.147054][ T33] wlan1: Trigger new scan to find an IBSS to join [ 147.366178][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.556945][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 147.572862][ T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 147.596737][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.616063][ T9] usb 1-1: Product: syz [ 147.620383][ T9] usb 1-1: Manufacturer: syz [ 147.625012][ T9] usb 1-1: SerialNumber: syz [ 147.639332][ T9] usb 1-1: config 0 descriptor?? [ 147.661117][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 147.846644][ T7178] loop2: detected capacity change from 0 to 32768 [ 147.889641][ T7178] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 147.924539][ T7178] JBD2: Ignoring recovery information on journal [ 147.976360][ T7178] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 148.085778][ T7178] overlayfs: upper fs does not support tmpfile. [ 148.095506][ T7178] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.100303][ T9] gspca_se401: Bayer format not supported! [ 148.109895][ T7178] overlayfs: failed to set xattr on upper [ 148.125251][ T7178] overlayfs: ...falling back to redirect_dir=nofollow. [ 148.132983][ T7178] overlayfs: ...falling back to index=off. [ 148.155676][ T7178] overlayfs: ...falling back to uuid=null. [ 148.167515][ T7178] overlayfs: upper fs missing required features. [ 148.196431][ T5810] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.228911][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 148.323057][ T9] usb 1-1: USB disconnect, device number 6 [ 148.398004][ T5810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 148.423011][ T5810] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 148.438984][ T5810] usb 4-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 148.450709][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.458899][ T5810] usb 4-1: Product: syz [ 148.463171][ T5810] usb 4-1: Manufacturer: syz [ 148.467946][ T5810] usb 4-1: SerialNumber: syz [ 148.491218][ T5810] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 148.513756][ T5810] ums-sddr09 4-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 148.513756][ T5810] Please send a copy of this message to and [ 148.568004][ T7196] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 148.606255][ T7196] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 148.946453][ T7204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 149.181969][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 149.181984][ T28] audit: type=1326 audit(1788369902.112:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.269089][ T7212] loop2: detected capacity change from 0 to 512 [ 149.295097][ T7212] EXT4-fs error (device loop2): ext4_get_journal_inode:5820: comm syz.2.572: inode #2147418112: comm syz.2.572: iget: illegal inode # [ 149.309621][ T28] audit: type=1326 audit(1788369902.112:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.352565][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.573'. [ 149.363151][ T7212] EXT4-fs (loop2): no journal found [ 149.368600][ T5810] scsi host1: usb-storage 4-1:1.0 [ 149.383908][ T7212] EXT4-fs (loop2): can't get journal size [ 149.393575][ T5810] usb 4-1: USB disconnect, device number 6 [ 149.405802][ T28] audit: type=1326 audit(1788369902.112:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.453324][ T7212] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 149.530811][ T7212] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 149.596193][ T28] audit: type=1326 audit(1788369902.112:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.612192][ T7212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.620027][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.649906][ T28] audit: type=1326 audit(1788369902.152:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.735119][ T28] audit: type=1326 audit(1788369902.152:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.795280][ T28] audit: type=1326 audit(1788369902.152:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.819183][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.833831][ T7223] loop0: detected capacity change from 0 to 64 [ 149.845783][ T7212] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 149.857578][ T28] audit: type=1326 audit(1788369902.152:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.884254][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.919029][ T28] audit: type=1326 audit(1788369902.152:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.943744][ T28] audit: type=1326 audit(1788369902.152:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.0.571" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb5f9e159 code=0x7ffc0000 [ 149.967618][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.055558][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.192764][ T11] wlan1: Trigger new scan to find an IBSS to join [ 150.423150][ T7235] binder: 7234:7235 ioctl c0306201 200000000300 returned -14 [ 150.442278][ T5763] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 150.645513][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.679009][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.707260][ T5763] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 150.729544][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.748936][ T5763] usb 2-1: config 0 descriptor?? [ 150.892661][ T7239] loop2: detected capacity change from 0 to 32768 [ 150.905512][ T7239] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.584 (7239) [ 150.934914][ T7239] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 150.946884][ T7239] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 150.956727][ T7239] BTRFS info (device loop2): using free space tree [ 151.016204][ T2137] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.024077][ T7239] BTRFS info (device loop2): enabling ssd optimizations [ 151.042694][ T7239] BTRFS info (device loop2): auto enabling async discard [ 151.257175][ T2137] usb 1-1: Using ep0 maxpacket: 8 [ 151.286461][ T2137] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 151.321129][ T2137] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 151.351317][ T2137] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 151.393093][ T2137] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 151.416102][ T2137] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 151.451326][ T2137] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.486376][ T2137] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 151.506305][ T2137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.549115][ T5779] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 151.594165][ T5763] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71 [ 151.620983][ T5763] usb 2-1: USB disconnect, device number 4 [ 151.785161][ T2137] usb 1-1: GET_CAPABILITIES returned 0 [ 151.788899][ T5774] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop2 scanned by udevd (5774) [ 151.793879][ T2137] usbtmc 1-1:16.0: can't read capabilities [ 152.017064][ T5832] usb 1-1: USB disconnect, device number 7 [ 152.219245][ T7277] netlink: 'syz.2.594': attribute type 29 has an invalid length. [ 152.256233][ T7277] netlink: 21 bytes leftover after parsing attributes in process `syz.2.594'. [ 152.286447][ T7277] netlink: 'syz.2.594': attribute type 29 has an invalid length. [ 152.295853][ T7277] netlink: 21 bytes leftover after parsing attributes in process `syz.2.594'. [ 152.306815][ T7278] netlink: 'syz.2.594': attribute type 29 has an invalid length. [ 152.315080][ T7278] netlink: 21 bytes leftover after parsing attributes in process `syz.2.594'. [ 152.343705][ T7277] netlink: 'syz.2.594': attribute type 29 has an invalid length. [ 152.353243][ T7277] netlink: 21 bytes leftover after parsing attributes in process `syz.2.594'. [ 152.701226][ T7293] loop0: detected capacity change from 0 to 256 [ 152.789740][ T7295] binder: 7294:7295 ioctl 40046205 0 returned -22 [ 152.939574][ T5774] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.150816][ T1003] wlan1: Trigger new scan to find an IBSS to join [ 153.314006][ T7314] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 153.335708][ T7317] loop0: detected capacity change from 0 to 8 [ 153.369170][ T7317] SQUASHFS error: lzo decompression failed, data probably corrupt [ 153.396358][ T7317] SQUASHFS error: Failed to read block 0x144: -5 [ 153.402758][ T7317] SQUASHFS error: Unable to read metadata cache entry [142] [ 153.423165][ T7317] SQUASHFS error: Unable to read inode 0x11f [ 153.496120][ T5832] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.513024][ T7322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 153.537493][ T7322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 153.686028][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 153.702073][ T5832] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 153.712046][ T5832] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 153.754122][ T5832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.786693][ T5832] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 153.799643][ T5832] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 153.846950][ T5832] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.882584][ T5832] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.919798][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.087441][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.620'. [ 154.152658][ T12] wlan1: Creating new IBSS network, BSSID c6:ec:a2:e8:da:ad [ 154.194226][ T5832] usb 2-1: GET_CAPABILITIES returned 0 [ 154.216397][ T5832] usbtmc 2-1:16.0: can't read capabilities [ 154.266184][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 154.356176][ T7347] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 154.356176][ T7347] The task syz.0.623 (7347) triggered the difference, watch for misbehavior. [ 154.413900][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 154.446722][ T7349] team0: entered promiscuous mode [ 154.451823][ T7349] team_slave_0: entered promiscuous mode [ 154.461589][ T2137] usb 2-1: USB disconnect, device number 5 [ 154.482847][ T7349] team_slave_1: entered promiscuous mode [ 154.494848][ T7349] team0: left promiscuous mode [ 154.503487][ T7349] team_slave_0: left promiscuous mode [ 154.509714][ T7349] team_slave_1: left promiscuous mode [ 154.704375][ T7355] netlink: 'syz.2.629': attribute type 21 has an invalid length. [ 154.720027][ T7355] netlink: 128 bytes leftover after parsing attributes in process `syz.2.629'. [ 154.909209][ T7360] loop2: detected capacity change from 0 to 4096 [ 155.037764][ T7360] ntfs: volume version 3.1. [ 155.826607][ T7385] netlink: 'syz.2.642': attribute type 1 has an invalid length. [ 155.856124][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.2.642'. [ 156.200813][ T7393] nr0: tun_chr_ioctl cmd 1074025677 [ 156.223187][ T7393] nr0: linktype set to 805 [ 156.268100][ T7397] netlink: 'syz.0.650': attribute type 29 has an invalid length. [ 156.291505][ T7397] netlink: 'syz.0.650': attribute type 29 has an invalid length. [ 156.355522][ T7402] netlink: 'syz.0.650': attribute type 29 has an invalid length. [ 156.391944][ T7397] netlink: 'syz.0.650': attribute type 29 has an invalid length. [ 156.482642][ T7407] loop2: detected capacity change from 0 to 64 [ 156.738352][ T7414] loop1: detected capacity change from 0 to 256 [ 156.856329][ T788] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 156.991584][ T7420] program syz.1.659 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.046161][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 157.074392][ T788] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.094256][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 157.103815][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 157.119275][ T7425] xt_hashlimit: size too large, truncated to 1048576 [ 157.120555][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 157.153165][ T788] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 157.211763][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.284866][ T788] hub 1-1:1.0: bad descriptor, ignoring hub [ 157.335855][ T788] hub: probe of 1-1:1.0 failed with error -5 [ 157.366670][ T788] cdc_wdm 1-1:1.0: skipping garbage [ 157.371989][ T788] cdc_wdm 1-1:1.0: skipping garbage [ 157.413150][ T788] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 157.451887][ T788] cdc_wdm 1-1:1.0: Unknown control protocol [ 157.988691][ T27] usb 1-1: USB disconnect, device number 8 [ 158.184358][ T7435] loop3: detected capacity change from 0 to 40427 [ 158.199796][ T7435] F2FS-fs (loop3): invalid crc value [ 158.232165][ T7435] F2FS-fs (loop3): Found nat_bits in checkpoint [ 158.301752][ T7435] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 158.352290][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 158.352306][ T28] audit: type=1800 audit(1788369911.282:41): pid=7435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.663" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 158.451248][ T5777] syz-executor: attempt to access beyond end of device [ 158.451248][ T5777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.510345][ T5777] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 158.863235][ T7449] __nla_validate_parse: 4 callbacks suppressed [ 158.863252][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 159.386576][ T7457] loop3: detected capacity change from 0 to 1024 [ 160.023303][ T7467] loop0: detected capacity change from 0 to 512 [ 160.059489][ T7467] EXT4-fs: inline encryption not supported [ 160.135913][ T7467] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 160.200716][ T7467] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.242128][ T7467] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.674: inode #15: comm syz.0.674: iget: illegal inode # [ 160.320882][ T7467] EXT4-fs error (device loop0): ext4_orphan_get:1413: comm syz.0.674: couldn't read orphan inode 15 (err -117) [ 160.379747][ T7467] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 160.560331][ T7467] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 160.638171][ T7467] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 160.685536][ T7461] loop1: detected capacity change from 0 to 32768 [ 160.715959][ C1] sched: RT throttling activated [ 160.803000][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.850778][ T7461] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 160.978073][ T7464] loop3: detected capacity change from 0 to 131072 [ 160.999773][ T7464] F2FS-fs (loop3): invalid crc value [ 161.037418][ T7480] loop0: detected capacity change from 0 to 1024 [ 161.051192][ T7461] XFS (loop1): Ending clean mount [ 161.053415][ T7464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 161.109091][ T7464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 161.230506][ T7480] hfsplus: bad catalog entry type [ 161.368883][ T5776] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 161.406365][ T1003] hfsplus: b-tree write err: -5, ino 25 [ 161.412443][ T1003] hfsplus: b-tree write err: -5, ino 4 [ 161.436974][ T1003] hfsplus: b-tree write err: -5, ino 2 [ 162.110242][ T7499] loop1: detected capacity change from 0 to 256 [ 162.146938][ T7499] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.221321][ T28] audit: type=1800 audit(1788369915.132:42): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.679" name="bus" dev="loop1" ino=1048649 res=0 errno=0 [ 162.280293][ T7499] Invalid ELF header magic: != ELF [ 162.681282][ T7509] loop1: detected capacity change from 0 to 256 [ 162.722889][ T7509] exfat: Deprecated parameter 'namecase' [ 162.748192][ T7509] exfat: Deprecated parameter 'namecase' [ 162.897303][ T7509] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 163.464022][ T7505] loop2: detected capacity change from 0 to 40427 [ 163.514139][ T7505] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 163.547697][ T7505] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 163.569889][ T7505] F2FS-fs (loop2): heap/no_heap options were deprecated [ 163.587205][ T7505] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x7ffff [ 163.613396][ T7505] F2FS-fs (loop2): invalid crc value [ 163.678939][ T7505] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.737265][ T7531] netem: incorrect gi model size [ 163.754518][ T7531] netem: change failed [ 163.850542][ T7505] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 163.885229][ T7505] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.075792][ T5779] syz-executor: attempt to access beyond end of device [ 164.075792][ T5779] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 164.128926][ T5779] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 164.578563][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.705'. [ 165.233994][ T7567] loop0: detected capacity change from 0 to 512 [ 165.257386][ T7567] EXT4-fs: Ignoring removed nobh option [ 165.318806][ T7567] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 165.404637][ T7567] EXT4-fs (loop0): mount failed [ 165.486875][ T7572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 165.654552][ T7559] loop2: detected capacity change from 0 to 32768 [ 165.714996][ T7559] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 165.836248][ T5763] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.922228][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 166.071432][ T5763] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 166.094653][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.126340][ T5763] usb 1-1: Product: syz [ 166.130661][ T5763] usb 1-1: Manufacturer: syz [ 166.135374][ T5763] usb 1-1: SerialNumber: syz [ 166.427062][ T5763] usb 1-1: 1:1: All rates were zero [ 166.434578][ T5763] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 166.558631][ T5763] usb 1-1: USB disconnect, device number 9 [ 166.680975][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.734659][ T7595] loop1: detected capacity change from 0 to 512 [ 166.817242][ T7595] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.724: Invalid inode bitmap blk 4 in block_group 0 [ 166.884602][ T7595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.004577][ T7587] loop2: detected capacity change from 0 to 32768 [ 167.034635][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.156400][ T7587] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 167.424129][ T7587] XFS (loop2): Ending clean mount [ 167.619594][ T5779] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 168.122623][ T7626] loop3: detected capacity change from 0 to 4096 [ 168.135366][ T7626] EXT4-fs: Ignoring removed mblk_io_submit option [ 168.196872][ T7626] EXT4-fs (loop3): Test dummy encryption mode enabled [ 168.218307][ T7630] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.736'. [ 168.276782][ T7626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.310621][ T7637] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 168.388424][ T7639] loop0: detected capacity change from 0 to 64 [ 168.535174][ T7641] loop2: detected capacity change from 0 to 4096 [ 168.556388][ T7626] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 168.577993][ T7641] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 168.610504][ T7626] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 168.676404][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.856816][ T7641] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 168.913518][ T7641] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 168.925225][ T7641] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 168.941807][ T7641] ntfs3: loop2: ino=3, ntfs_set_state failed, -22. [ 169.056259][ T59] ntfs3: loop2: ino=3, ntfs3_write_inode failed, -22. [ 169.141332][ T7651] loop2: detected capacity change from 0 to 256 [ 169.146863][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.380962][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 169.411378][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.434148][ T9] usb 1-1: Product: syz [ 169.442892][ T9] usb 1-1: Manufacturer: syz [ 169.449011][ T9] usb 1-1: SerialNumber: syz [ 169.628867][ T788] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 169.932736][ T5763] usb 1-1: USB disconnect, device number 10 [ 170.623265][ T7694] netlink: 52 bytes leftover after parsing attributes in process `syz.2.764'. [ 170.642113][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.651444][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.669499][ T788] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 170.681998][ T788] ath9k_htc: Failed to initialize the device [ 170.696460][ T5763] usb 1-1: ath9k_htc: USB layer deinitialized [ 171.096239][ T5763] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 171.231221][ T7701] loop2: detected capacity change from 0 to 8192 [ 171.254245][ T7701] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 171.268401][ T7701] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 171.277817][ T7701] REISERFS (device loop2): using ordered data mode [ 171.284436][ T7701] reiserfs: using flush barriers [ 171.291422][ T7701] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 171.308278][ T7701] REISERFS (device loop2): checking transaction log (loop2) [ 171.320215][ T7701] REISERFS (device loop2): Using r5 hash to sort names [ 171.328877][ T7701] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 171.338466][ T5763] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 171.357312][ T5763] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 171.384009][ T5763] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 171.435254][ T5763] usb 1-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 171.459852][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.768'. [ 171.469985][ T5763] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.031858][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.774'. [ 172.050031][ T5085] Bluetooth: hci4: Reading Intel version command failed (-71) [ 172.074923][ T9] usb 1-1: USB disconnect, device number 11 [ 172.086046][ T5763] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 172.144211][ T7718] loop3: detected capacity change from 0 to 64 [ 172.221016][ T7718] syz.3.775: attempt to access beyond end of device [ 172.221016][ T7718] loop3: rw=2049, sector=153, nr_sectors = 8 limit=64 [ 172.238489][ T7718] syz.3.775: attempt to access beyond end of device [ 172.238489][ T7718] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 172.252592][ T7718] buffer_io_error: 10 callbacks suppressed [ 172.252607][ T7718] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 172.268057][ T5763] usb 3-1: Using ep0 maxpacket: 8 [ 172.284413][ T5763] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.295420][ T5763] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.304990][ T7718] syz.3.775: attempt to access beyond end of device [ 172.304990][ T7718] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 172.318595][ T5763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 172.330909][ T7718] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 172.339869][ T5763] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 172.351605][ T7718] syz.3.775: attempt to access beyond end of device [ 172.351605][ T7718] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 172.365405][ T5763] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 172.374889][ T7718] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 172.384615][ T5763] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.393257][ T7718] syz.3.775: attempt to access beyond end of device [ 172.393257][ T7718] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 172.410542][ T7718] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 172.432171][ T5763] hub 3-1:1.0: bad descriptor, ignoring hub [ 172.444692][ T5763] hub: probe of 3-1:1.0 failed with error -5 [ 172.458657][ T5763] cdc_wdm 3-1:1.0: skipping garbage [ 172.464018][ T5763] cdc_wdm 3-1:1.0: skipping garbage [ 172.492648][ T5763] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 172.500922][ T5763] cdc_wdm 3-1:1.0: Unknown control protocol [ 172.745556][ T7725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.776'. [ 172.859446][ T7714] loop1: detected capacity change from 0 to 32768 [ 172.901668][ T7714] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 173.089035][ T788] usb 3-1: USB disconnect, device number 5 [ 173.182682][ T7714] XFS (loop1): Ending clean mount [ 173.446683][ T5776] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 174.190298][ T7763] loop1: detected capacity change from 0 to 512 [ 174.383345][ T7768] program syz.3.789 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.518752][ T7770] loop1: detected capacity change from 0 to 1024 [ 174.801157][ T7778] loop3: detected capacity change from 0 to 128 [ 174.882388][ T7776] loop0: detected capacity change from 0 to 4096 [ 174.949180][ T7776] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 175.208935][ T7776] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 175.221701][ T7785] loop3: detected capacity change from 0 to 512 [ 175.227211][ T7776] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 175.234829][ T7776] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 175.266272][ T7776] ntfs3: loop0: ino=3, ntfs_set_state failed, -22. [ 175.349836][ T999] ntfs3: loop0: ino=3, ntfs3_write_inode failed, -22. [ 175.527135][ T7790] loop3: detected capacity change from 0 to 256 [ 175.566416][ T7790] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf9f813e7, utbl_chksum : 0xe619d30d) [ 177.566078][ T5832] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 177.621130][ T7848] loop1: detected capacity change from 0 to 512 [ 177.676402][ T7850] bridge0: entered promiscuous mode [ 177.682612][ T7848] EXT4-fs error (device loop1): __ext4_iget:5079: inode #11: block 1: comm syz.1.827: invalid block [ 177.705877][ T7850] vlan2: entered promiscuous mode [ 177.713645][ T7848] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.827: couldn't read orphan inode 11 (err -117) [ 177.727665][ T7848] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.753160][ T7848] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.827: Directory hole found for htree leaf block 0 [ 177.773776][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 177.788766][ T7854] netlink: 844 bytes leftover after parsing attributes in process `syz.2.829'. [ 177.807934][ T5832] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.860346][ T5832] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 177.891699][ T5832] usb 1-1: config 5 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.934280][ T5832] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 177.953788][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.975898][ T5832] usb 1-1: Product: syz [ 177.977087][ T7858] loop3: detected capacity change from 0 to 512 [ 177.981902][ T5832] usb 1-1: Manufacturer: syz [ 177.998255][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.011479][ T5832] usb 1-1: SerialNumber: syz [ 178.017230][ T7858] EXT4-fs (loop3): Test dummy encryption mode enabled [ 178.080843][ T7858] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #11: comm syz.3.830: casefold flag without casefold feature [ 178.132872][ T7858] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.830: couldn't read orphan inode 11 (err -117) [ 178.160466][ T7858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 178.224648][ T7858] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.830: bg 0: block 7: invalid block bitmap [ 178.280436][ T5832] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 178.306476][ T5832] snd-usb-audio: probe of 1-1:5.0 failed with error -22 [ 178.393460][ T7858] syz.3.830 (7858) used greatest stack depth: 20024 bytes left [ 178.411167][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.648472][ T7856] loop2: detected capacity change from 0 to 32768 [ 178.711957][ T7856] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 178.777019][ T5832] usb 1-1: USB disconnect, device number 12 [ 178.859687][ T7856] XFS (loop2): Ending clean mount [ 178.917276][ T7879] loop1: detected capacity change from 0 to 1024 [ 178.959532][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:5.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.066854][ T5779] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 180.160701][ T7917] program syz.2.852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.415459][ T7927] netlink: 24 bytes leftover after parsing attributes in process `syz.3.859'. [ 181.074193][ T7941] bridge0: entered promiscuous mode [ 181.086451][ T7941] vlan2: entered promiscuous mode [ 181.686450][ T7965] bridge0: entered promiscuous mode [ 181.702641][ T7965] vlan2: entered promiscuous mode [ 181.873621][ T7973] rnbd_client L203: map_device: Unknown parameter or missing value 'se' [ 182.324821][ T7990] loop3: detected capacity change from 0 to 4096 [ 182.336167][ T7990] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 182.403115][ T7990] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 182.504556][ T7990] ntfs3: loop3: ino=1d, "file1" failed to parse mft record [ 182.514102][ T7990] ntfs3: loop3: ino=1d, "file1" attr_set_size [ 182.526078][ T5832] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.578999][ T5777] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22. [ 182.638189][ T7994] Bluetooth: MGMT ver 1.22 [ 182.760326][ T5832] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 182.784118][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.812876][ T5832] usb 3-1: Product: syz [ 182.825519][ T7998] loop0: detected capacity change from 0 to 512 [ 182.835855][ T5832] usb 3-1: Manufacturer: syz [ 182.850221][ T5832] usb 3-1: SerialNumber: syz [ 182.862424][ T7998] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 182.922396][ T788] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 182.948093][ T7998] EXT4-fs (loop0): 1 truncate cleaned up [ 182.984906][ T7998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.170133][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.267192][ T5832] usb 3-1: USB disconnect, device number 6 [ 183.302848][ T8013] loop0: detected capacity change from 0 to 256 [ 183.322428][ T28] audit: type=1800 audit(1788370192.253:43): pid=8013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.898" name="file1" dev="loop0" ino=1048662 res=0 errno=0 [ 183.660584][ T8022] [ 184.029298][ T788] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 184.059903][ T788] ath9k_htc: Failed to initialize the device [ 184.077155][ T5832] usb 3-1: ath9k_htc: USB layer deinitialized [ 184.149977][ T8038] input: syz0 as /devices/virtual/input/input9 [ 184.162089][ T999] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 184.334000][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 184.413536][ T8045] loop0: detected capacity change from 0 to 1024 [ 184.431641][ T8045] EXT4-fs: Ignoring removed bh option [ 184.446084][ T5832] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.465089][ T8045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.637676][ T5832] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 184.655992][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 184.676016][ T5832] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 184.702676][ T5832] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 184.726051][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.762907][ T5771] EXT4-fs error (device loop0): ext4_read_inline_dir:1591: inode #12: block 7: comm syz-executor: path /222/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 184.822475][ T5771] EXT4-fs (loop0): Remounting filesystem read-only [ 185.230513][ T8050] loop3: detected capacity change from 0 to 32768 [ 185.270141][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.308125][ T788] usb 3-1: USB disconnect, device number 7 [ 185.316415][ T5085] Bluetooth: hci4: Reading Intel version command failed (-71) [ 185.331011][ T8050] read_mapping_page failed! [ 185.340662][ T8050] ERROR: (device loop3): txCommit: [ 185.340662][ T8050] [ 185.561916][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.812739][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.973643][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.006919][ T8067] loop3: detected capacity change from 0 to 256 [ 186.014896][ T8067] exfat: Deprecated parameter 'utf8' [ 186.047720][ T8067] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d) [ 186.101748][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.276171][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.516393][ T8078] tipc: Started in network mode [ 186.561077][ T8078] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 186.582548][ T8078] tipc: Enabling of bearer rejected, failed to enable media [ 186.897649][ T8091] GUP no longer grows the stack in syz.2.930 (8091): 200000009000-20000000a000 (200000005000) [ 186.909932][ T8091] CPU: 0 PID: 8091 Comm: syz.2.930 Not tainted syzkaller #0 [ 186.917296][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.927472][ T8091] Call Trace: [ 186.930791][ T8091] [ 186.933751][ T8091] dump_stack_lvl+0x18c/0x250 [ 186.938513][ T8091] ? show_regs_print_info+0x20/0x20 [ 186.943808][ T8091] ? load_image+0x420/0x420 [ 186.948351][ T8091] ? find_vma+0x134/0x1b0 [ 186.952745][ T8091] __get_user_pages+0xfe7/0x1580 [ 186.957766][ T8091] ? populate_vma_page_range+0x380/0x380 [ 186.963450][ T8091] ? __gup_longterm_locked+0x21d8/0x2cb0 [ 186.969129][ T8091] ? down_read_killable+0x1d0/0x340 [ 186.974410][ T8091] __gup_longterm_locked+0x2345/0x2cb0 [ 186.979968][ T8091] ? pin_user_pages_remote+0x220/0x220 [ 186.985488][ T8091] ? mark_lock+0x94/0x320 [ 186.989893][ T8091] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 186.995929][ T8091] ? __lock_acquire+0x7d80/0x7d80 [ 187.001182][ T8091] ? lock_chain_count+0x20/0x20 [ 187.006089][ T8091] ? internal_get_user_pages_fast+0x1f8e/0x27a0 [ 187.012397][ T8091] internal_get_user_pages_fast+0x2174/0x27a0 [ 187.018569][ T8091] ? get_user_pages_fast_only+0xa0/0xa0 [ 187.024175][ T8091] ? trace_contention_end+0x39/0xe0 [ 187.029419][ T8091] ? __mutex_lock+0x30d/0xc80 [ 187.034147][ T8091] ? __lock_acquire+0x7d80/0x7d80 [ 187.039242][ T8091] ? iov_iter_iovec_advance+0x1ef/0x290 [ 187.044863][ T8091] __iov_iter_get_pages_alloc+0x380/0xac0 [ 187.050653][ T8091] iov_iter_get_pages2+0x5f/0xa0 [ 187.055656][ T8091] __se_sys_vmsplice+0x5e5/0x11f0 [ 187.060739][ T8091] ? __x64_sys_vmsplice+0xb0/0xb0 [ 187.065816][ T8091] ? futex_wake_mark+0x150/0x150 [ 187.070835][ T8091] ? fd_install+0x60/0x4e0 [ 187.075316][ T8091] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 187.081371][ T8091] ? lockdep_hardirqs_on+0x98/0x150 [ 187.086645][ T8091] do_syscall_64+0x55/0xb0 [ 187.091110][ T8091] ? clear_bhb_loop+0x40/0x90 [ 187.095851][ T8091] ? clear_bhb_loop+0x40/0x90 [ 187.100581][ T8091] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.106536][ T8091] RIP: 0033:0x7f1ceb99e159 [ 187.111021][ T8091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.130659][ T8091] RSP: 002b:00007f1cec947028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 187.139122][ T8091] RAX: ffffffffffffffda RBX: 00007f1cebc25fa0 RCX: 00007f1ceb99e159 [ 187.147167][ T8091] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000004 [ 187.155185][ T8091] RBP: 00007f1ceba35024 R08: 0000000000000000 R09: 0000000000000000 [ 187.163188][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.171199][ T8091] R13: 00007f1cebc26038 R14: 00007f1cebc25fa0 R15: 00007ffd34ae9428 [ 187.179256][ T8091] [ 187.182319][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.251179][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.262037][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.275029][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.283355][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.292151][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.300848][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.356207][ T788] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 187.550165][ T788] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 187.559677][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.606588][ T788] usb 2-1: Product: syz [ 187.616119][ T788] usb 2-1: Manufacturer: syz [ 187.620776][ T788] usb 2-1: SerialNumber: syz [ 187.683965][ T5832] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.988563][ T9] usb 2-1: USB disconnect, device number 6 [ 188.522042][ T8093] chnl_net:caif_netlink_parms(): no params data found [ 188.746664][ T5832] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 188.769126][ T5832] ath9k_htc: Failed to initialize the device [ 188.804453][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 189.046154][ T8093] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.053507][ T8093] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.071121][ T8093] bridge_slave_0: entered allmulticast mode [ 189.080196][ T8093] bridge_slave_0: entered promiscuous mode [ 189.102060][ T8093] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.125280][ T8093] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.134176][ T8093] bridge_slave_1: entered allmulticast mode [ 189.148443][ T8093] bridge_slave_1: entered promiscuous mode [ 189.157698][ T2137] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.207040][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 189.227168][ T8153] loop3: detected capacity change from 0 to 256 [ 189.276398][ T12] hsr_slave_0: left promiscuous mode [ 189.295995][ T12] hsr_slave_1: left promiscuous mode [ 189.303542][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.315814][ T8153] FAT-fs (loop3): Directory bread(block 64) failed [ 189.328971][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.336615][ T8153] FAT-fs (loop3): Directory bread(block 65) failed [ 189.343304][ T8153] FAT-fs (loop3): Directory bread(block 66) failed [ 189.356364][ T8153] FAT-fs (loop3): Directory bread(block 67) failed [ 189.363138][ T8153] FAT-fs (loop3): Directory bread(block 68) failed [ 189.371672][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.385577][ T8153] FAT-fs (loop3): Directory bread(block 69) failed [ 189.387871][ T51] Bluetooth: hci0: command tx timeout [ 189.400335][ T8153] FAT-fs (loop3): Directory bread(block 70) failed [ 189.407187][ T8153] FAT-fs (loop3): Directory bread(block 71) failed [ 189.414003][ T8153] FAT-fs (loop3): Directory bread(block 72) failed [ 189.420640][ T8153] FAT-fs (loop3): Directory bread(block 73) failed [ 189.427411][ T2137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.445104][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 189.455113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.464141][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1289, setting to 1024 [ 189.476566][ T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 189.487556][ T9] usb 2-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 189.496759][ T2137] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 189.513165][ T12] bridge_slave_1: left allmulticast mode [ 189.516993][ T2137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.533201][ T12] bridge_slave_1: left promiscuous mode [ 189.541902][ T2137] usb 3-1: config 0 descriptor?? [ 189.554996][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.567985][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.607359][ T12] bridge_slave_0: left allmulticast mode [ 189.638002][ T12] bridge_slave_0: left promiscuous mode [ 189.644044][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.750183][ T12] veth1_macvtap: left promiscuous mode [ 189.764418][ T12] veth0_macvtap: left promiscuous mode [ 189.770881][ T12] veth1_vlan: left promiscuous mode [ 189.776824][ T12] veth0_vlan: left promiscuous mode [ 189.806075][ T2137] usbhid 3-1:0.0: can't add hid device: -71 [ 189.812201][ T2137] usbhid: probe of 3-1:0.0 failed with error -71 [ 189.860109][ T2137] usb 3-1: USB disconnect, device number 8 [ 190.119806][ T5763] usb 2-1: USB disconnect, device number 7 [ 190.125104][ T51] Bluetooth: hci4: Reading Intel version command failed (-71) [ 190.426271][ T2137] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 190.636447][ T2137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.648779][ T2137] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 0.40 [ 190.667419][ T2137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.689785][ T2137] usb 3-1: config 0 descriptor?? [ 190.698308][ T2137] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 190.721144][ T2137] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 190.730167][ T12] team0 (unregistering): Port device team_slave_1 removed [ 190.739657][ T2137] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 190.755391][ T2137] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 190.773803][ T2137] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 190.814089][ T2137] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 88 [ 190.825142][ T2137] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 190.853417][ T2137] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 190.874968][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.935813][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.984435][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.128465][ T9] usb 3-1: USB disconnect, device number 9 [ 191.157392][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 191.173269][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 191.191216][ T9] keyspan 3-1:0.0: device disconnected [ 191.370842][ T12] bond0 (unregistering): Released all slaves [ 191.470035][ T51] Bluetooth: hci0: command tx timeout [ 191.483890][ T8093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.497872][ T8093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.568479][ T8093] team0: Port device team_slave_0 added [ 191.577433][ T8093] team0: Port device team_slave_1 added [ 191.634095][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.642621][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.668601][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.704550][ T8093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.787243][ T8093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.812912][ T8093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.838841][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.860986][ T8093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.167647][ T8093] hsr_slave_0: entered promiscuous mode [ 192.205845][ T8093] hsr_slave_1: entered promiscuous mode [ 192.236173][ T8093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.252338][ T8093] Cannot create hsr debugfs directory [ 192.568557][ T12] IPVS: stop unused estimator thread 0... [ 193.198534][ T8211] MTRR 1 not used [ 193.487818][ T8093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.546774][ T51] Bluetooth: hci0: command tx timeout [ 193.594766][ T8093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.632242][ T8093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.720548][ T8093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.160079][ T8093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.288650][ T8093] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.389720][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.397551][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.462017][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.469410][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.522668][ T8224] loop3: detected capacity change from 0 to 32768 [ 194.545770][ T8224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.964 (8224) [ 194.574329][ T8224] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.584725][ T8224] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 194.599976][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.607895][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.652822][ T8224] BTRFS info (device loop3): setting nodatasum [ 194.677568][ T8224] BTRFS info (device loop3): force zlib compression, level 3 [ 194.687174][ T8224] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 194.720786][ T8224] BTRFS info (device loop3): use lzo compression, level 0 [ 194.747265][ T8224] BTRFS info (device loop3): turning on flush-on-commit [ 194.756409][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 194.766243][ T8224] BTRFS info (device loop3): enabling auto defrag [ 194.772756][ T8224] BTRFS info (device loop3): max_inline at 0 [ 194.796434][ T8224] BTRFS info (device loop3): using free space tree [ 194.973813][ T8224] BTRFS info (device loop3): enabling ssd optimizations [ 194.981036][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 195.023195][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 195.048125][ T9] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 195.086037][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.141336][ T9] usb 2-1: config 0 descriptor?? [ 195.198064][ T8273] loop2: detected capacity change from 0 to 256 [ 195.205577][ T8273] exfat: Deprecated parameter 'namecase' [ 195.286200][ T8273] exfat: Deprecated parameter 'utf8' [ 195.291718][ T8273] exfat: Deprecated parameter 'namecase' [ 195.368591][ T8273] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 195.390002][ T5777] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 195.421452][ T8273] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 195.610580][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x1 [ 195.626119][ T51] Bluetooth: hci0: command tx timeout [ 195.649343][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.670434][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.688506][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.695239][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.723901][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.742314][ T8093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.768585][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.775340][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.825484][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.851999][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.906209][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.921174][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.956500][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.985676][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 195.996071][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.022301][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.049739][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.066454][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.083468][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.090654][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.120941][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.147739][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.179736][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.205992][ T9] elo 0003:04E7:0009.0002: unknown main item tag 0x0 [ 196.271536][ T9] elo 0003:04E7:0009.0002: hidraw0: USB HID v0.c1 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 196.345882][ T9] usb 2-1: USB disconnect, device number 8 [ 196.550542][ T8301] fido_id[8301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 196.576247][ T5832] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 196.711510][ T8093] veth0_vlan: entered promiscuous mode [ 196.733190][ T8093] veth1_vlan: entered promiscuous mode [ 196.768257][ T5832] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 196.793821][ T8093] veth0_macvtap: entered promiscuous mode [ 196.796498][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.812816][ T8093] veth1_macvtap: entered promiscuous mode [ 196.829065][ T5832] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 196.844019][ T5832] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 196.852895][ T5832] usb 3-1: Manufacturer: syz [ 196.870074][ T5832] usb 3-1: config 0 descriptor?? [ 196.887222][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.920341][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.950798][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.982532][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.002702][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.014801][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.037621][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.056169][ T5832] rc_core: IR keymap rc-hauppauge not found [ 197.063397][ T5832] Registered IR keymap rc-empty [ 197.095635][ T5832] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 197.118761][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.138522][ T5832] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 197.158668][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.186984][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.208850][ T5832] usb 3-1: USB disconnect, device number 10 [ 197.219848][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.232129][ T8093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.242984][ T8093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.255168][ T8093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.339842][ T8093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.366031][ T8093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.390544][ T8093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.409837][ T8093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.611915][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.635839][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.666453][ T27] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 197.685331][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.695295][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.861610][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 197.876044][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.904627][ T27] usb 4-1: Product: syz [ 197.910255][ T27] usb 4-1: Manufacturer: syz [ 197.944094][ T27] usb 4-1: SerialNumber: syz [ 197.965413][ T27] usb 4-1: config 0 descriptor?? [ 198.003661][ T8330] loop4: detected capacity change from 0 to 1024 [ 198.203506][ T27] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.417544][ T5832] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 198.471897][ T8348] vivid-002: disconnect [ 198.489535][ T8345] vivid-002: reconnect [ 198.628305][ T5832] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 198.654173][ T5832] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 62535, setting to 64 [ 198.669969][ T5832] usb 5-1: config 0 interface 0 has no altsetting 0 [ 198.686320][ T5832] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice= 0.06 [ 198.702113][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 198.712087][ T5832] usb 5-1: SerialNumber: syz [ 198.744438][ T5832] usb 5-1: config 0 descriptor?? [ 198.764552][ T8337] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 198.819880][ T27] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 198.846889][ T27] usb 4-1: USB disconnect, device number 7 [ 199.003852][ T8337] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 199.038567][ T5832] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 199.985902][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1005'. [ 200.006151][ T5810] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 200.370484][ T5810] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.390900][ T5810] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 200.411774][ T5810] usb 4-1: can't read configurations, error -71 [ 200.497840][ T28] audit: type=1326 audit(1788370209.433:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 200.559478][ T28] audit: type=1326 audit(1788370209.433:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 200.613205][ T28] audit: type=1326 audit(1788370209.453:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 200.644191][ T28] audit: type=1326 audit(1788370209.453:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 200.683039][ T28] audit: type=1326 audit(1788370209.453:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 200.730493][ T28] audit: type=1326 audit(1788370209.463:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 200.778735][ T28] audit: type=1326 audit(1788370209.463:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 200.802829][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.860687][ T28] audit: type=1326 audit(1788370209.463:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 200.884797][ C0] vkms_vblank_simulate: vblank timer overrun [ 200.975634][ T2137] usb 5-1: USB disconnect, device number 2 [ 201.009605][ T28] audit: type=1326 audit(1788370209.463:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 201.090370][ T28] audit: type=1326 audit(1788370209.463:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.1.1010" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd111d9e159 code=0x7ffc0000 [ 201.104457][ T33] hfsplus: b-tree write err: -5, ino 25 [ 201.180641][ T33] hfsplus: b-tree write err: -5, ino 4 [ 201.197137][ T8423] loop3: detected capacity change from 0 to 512 [ 201.206087][ T33] hfsplus: b-tree write err: -5, ino 2 [ 201.246133][ T8423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.408785][ T8423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.499965][ T8423] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.570080][ T8434] gretap0: entered promiscuous mode [ 201.850766][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.559145][ T8467] loop3: detected capacity change from 0 to 512 [ 202.603495][ T8467] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.655759][ T8467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.709774][ T8473] vhci_hcd: not connected 4 [ 202.714935][ T8467] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.911564][ T8480] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.1030: bg 0: block 217: padding at end of block bitmap is not set [ 202.974275][ T8480] EXT4-fs (loop3): Remounting filesystem read-only [ 203.074905][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.491809][ T8502] netem: change failed [ 203.944562][ T8515] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 204.864331][ T8543] program syz.4.1060 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.011324][ T8547] loop2: detected capacity change from 0 to 128 [ 205.065137][ T8547] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.065461][ T8549] loop4: detected capacity change from 0 to 128 [ 205.095725][ T8547] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.188764][ T8547] overlayfs: upper fs needs to support d_type. [ 205.285630][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 205.755552][ T8563] loop3: detected capacity change from 0 to 512 [ 205.776212][ T8563] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.807771][ T8563] EXT4-fs (loop3): 1 truncate cleaned up [ 205.856959][ T8563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.939748][ T8563] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.1068: Logical block already allocated [ 205.963235][ T8563] EXT4-fs (loop3): Remounting filesystem read-only [ 206.028846][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.330834][ T8576] netlink: 'syz.4.1075': attribute type 2 has an invalid length. [ 206.468723][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 206.468738][ T28] audit: type=1800 audit(1788370215.403:64): pid=8582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1076" name="attr_allow_any_host" dev="configfs" ino=16259 res=0 errno=0 [ 206.654992][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1080'. [ 206.715683][ T8587] vlan2: entered promiscuous mode [ 206.738198][ T8587] syz_tun: entered promiscuous mode [ 206.910707][ T5780] Bluetooth: hci3: command 0x0406 tx timeout [ 206.916929][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 206.925357][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 206.995700][ T8598] loop2: detected capacity change from 0 to 512 [ 207.478972][ T8616] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.516280][ T8615] bonding: no command found in bonding_masters - use +ifname or -ifname [ 207.671311][ T28] audit: type=1400 audit(1788370216.603:65): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8622 comm="syz.1.1096" name="p" offset=43 [ 208.811409][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1112'. [ 208.890922][ T8666] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1112'. [ 209.356036][ T8677] i2c i2c-0: delete_device: Can't find device in list [ 209.617010][ T8684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 209.791298][ T8689] loop3: detected capacity change from 0 to 16 [ 209.820562][ T8689] erofs: (device loop3): mounted with root inode @ nid 36. [ 209.937177][ T8693] kAFS: bad VL server IP address [ 210.033789][ T8695] loop3: detected capacity change from 0 to 512 [ 210.076153][ T8036] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 210.140957][ T8695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.185035][ T8701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 210.196250][ T8695] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.226085][ T8701] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1124'. [ 210.289424][ T8036] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 210.326102][ T8036] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 210.358491][ T8036] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 210.424584][ T8036] usb 5-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 210.444124][ T8036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.468219][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.485449][ T8036] usb 5-1: config 0 descriptor?? [ 210.515793][ T8691] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 210.932782][ T8716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1132'. [ 210.957750][ T8036] hid-steam 0003:28DE:1205.0003: unknown main item tag 0x0 [ 210.973645][ T8716] vlan3: entered promiscuous mode [ 210.982124][ T8036] hid-steam 0003:28DE:1205.0003: unknown main item tag 0xd [ 210.986033][ T8716] syz_tun: entered promiscuous mode [ 211.004833][ T8036] hid-steam 0003:28DE:1205.0003: unknown main item tag 0x4 [ 211.046585][ T8036] hid-steam 0003:28DE:1205.0003: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.4-1/input0 [ 211.182491][ T8036] usb 5-1: USB disconnect, device number 3 [ 211.312135][ T8718] fido_id[8718]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 211.504434][ T8725] loop3: detected capacity change from 0 to 4096 [ 211.511264][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 211.545825][ T8727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1137'. [ 212.039040][ T8736] loop4: detected capacity change from 0 to 64 [ 212.496221][ T8752] binder: 8751:8752 ioctl 4018620d 0 returned -22 [ 212.516423][ T28] audit: type=1400 audit(1788370221.443:66): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8753 comm="syz.4.1149" name="p" offset=58 [ 212.808754][ T8763] loop3: detected capacity change from 0 to 2048 [ 212.871910][ T8763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.968736][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1154'. [ 213.005398][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.018591][ T8772] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1154'. [ 213.152454][ T6339] udevd[6339]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 213.183121][ T5775] udevd[5775]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 213.226145][ T2137] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 213.454090][ T2137] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 213.475972][ T2137] usb 5-1: config 0 has no interface number 0 [ 213.484877][ T2137] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 213.506121][ T2137] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.514161][ T2137] usb 5-1: Product: syz [ 213.570136][ T2137] usb 5-1: Manufacturer: syz [ 213.574796][ T2137] usb 5-1: SerialNumber: syz [ 213.612869][ T2137] usb 5-1: config 0 descriptor?? [ 213.613986][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1157'. [ 213.656751][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1157'. [ 213.692062][ T8787] erspan0: entered promiscuous mode [ 213.727333][ T8770] loop2: detected capacity change from 0 to 32768 [ 213.738711][ T8787] gretap0: entered promiscuous mode [ 213.777593][ T8770] JBD2: Ignoring recovery information on journal [ 213.933817][ T8770] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 214.105052][ T8798] [ 214.107438][ T8798] ====================================================== [ 214.114477][ T8798] WARNING: possible circular locking dependency detected [ 214.121543][ T8798] syzkaller #0 Not tainted [ 214.125993][ T8798] ------------------------------------------------------ [ 214.133032][ T8798] syz.2.1153/8798 is trying to acquire lock: [ 214.139049][ T8798] ffff88805fb43120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 214.150685][ T8798] [ 214.150685][ T8798] but task is already holding lock: [ 214.158068][ T8798] ffff88805fb431b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 214.168727][ T8798] [ 214.168727][ T8798] which lock already depends on the new lock. [ 214.168727][ T8798] [ 214.179155][ T8798] [ 214.179155][ T8798] the existing dependency chain (in reverse order) is: [ 214.188220][ T8798] [ 214.188220][ T8798] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 214.196053][ T8798] down_read+0x46/0x2e0 [ 214.200756][ T8798] ocfs2_init_acl+0x30a/0x770 [ 214.205971][ T8798] ocfs2_mknod+0x1427/0x2310 [ 214.211115][ T8798] ocfs2_mkdir+0x196/0x430 [ 214.216076][ T8798] vfs_mkdir+0x2a5/0x470 [ 214.220845][ T8798] do_mkdirat+0x1dc/0x450 [ 214.225816][ T8798] __x64_sys_mkdirat+0x89/0xa0 [ 214.231119][ T8798] do_syscall_64+0x55/0xb0 [ 214.236074][ T8798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.242517][ T8798] [ 214.242517][ T8798] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 214.251042][ T8798] down_read+0x46/0x2e0 [ 214.255734][ T8798] ocfs2_start_trans+0x3a8/0x6f0 [ 214.261214][ T8798] ocfs2_modify_bh+0xe4/0x4c0 [ 214.266427][ T8798] ocfs2_local_read_info+0x1433/0x17d0 [ 214.272420][ T8798] dquot_load_quota_sb+0x734/0xb30 [ 214.278160][ T8798] dquot_load_quota_inode+0x2d7/0x5c0 [ 214.284093][ T8798] ocfs2_enable_quotas+0x1c4/0x4a0 [ 214.289752][ T8798] ocfs2_fill_super+0x416d/0x5010 [ 214.295310][ T8798] mount_bdev+0x21c/0x2c0 [ 214.300174][ T8798] legacy_get_tree+0xea/0x180 [ 214.305414][ T8798] vfs_get_tree+0x8c/0x280 [ 214.310377][ T8798] do_new_mount+0x24a/0xa40 [ 214.315430][ T8798] __se_sys_mount+0x2e7/0x3d0 [ 214.320651][ T8798] do_syscall_64+0x55/0xb0 [ 214.325610][ T8798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.332050][ T8798] [ 214.332050][ T8798] -> #1 (sb_internal#2){.+.+}-{0:0}: [ 214.339565][ T8798] ocfs2_start_trans+0x2a9/0x6f0 [ 214.345052][ T8798] ocfs2_setattr+0x10e8/0x1bf0 [ 214.350359][ T8798] notify_change+0xb05/0xde0 [ 214.355507][ T8798] chown_common+0x3f3/0x5b0 [ 214.360552][ T8798] ksys_fchown+0xed/0x160 [ 214.365418][ T8798] __x64_sys_fchown+0x7a/0x90 [ 214.370634][ T8798] do_syscall_64+0x55/0xb0 [ 214.375589][ T8798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.382026][ T8798] [ 214.382026][ T8798] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 214.390820][ T8798] __lock_acquire+0x37ef/0x7d80 [ 214.396248][ T8798] lock_acquire+0x19e/0x420 [ 214.401282][ T8798] down_write+0x97/0x200 [ 214.406057][ T8798] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 214.412564][ T8798] ocfs2_truncate_file+0xe87/0x1530 [ 214.418296][ T8798] ocfs2_setattr+0x15b8/0x1bf0 [ 214.423594][ T8798] notify_change+0xb05/0xde0 [ 214.428721][ T8798] do_truncate+0x1b0/0x240 [ 214.433665][ T8798] path_openat+0x2a7e/0x3270 [ 214.438791][ T8798] do_filp_open+0x1f2/0x430 [ 214.443829][ T8798] do_sys_openat2+0x134/0x1d0 [ 214.449040][ T8798] __x64_sys_openat+0x139/0x160 [ 214.454420][ T8798] do_syscall_64+0x55/0xb0 [ 214.459392][ T8798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.465827][ T8798] [ 214.465827][ T8798] other info that might help us debug this: [ 214.465827][ T8798] [ 214.476065][ T8798] Chain exists of: [ 214.476065][ T8798] &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 214.476065][ T8798] [ 214.491346][ T8798] Possible unsafe locking scenario: [ 214.491346][ T8798] [ 214.498814][ T8798] CPU0 CPU1 [ 214.504185][ T8798] ---- ---- [ 214.509562][ T8798] lock(&oi->ip_xattr_sem); [ 214.514169][ T8798] lock(&journal->j_trans_barrier); [ 214.521992][ T8798] lock(&oi->ip_xattr_sem); [ 214.529106][ T8798] lock(&ocfs2_file_ip_alloc_sem_key); [ 214.534662][ T8798] [ 214.534662][ T8798] *** DEADLOCK *** [ 214.534662][ T8798] [ 214.542811][ T8798] 3 locks held by syz.2.1153/8798: [ 214.547926][ T8798] #0: ffff88807d786418 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 214.557192][ T8798] #1: ffff88805fb43498 (&sb->s_type->i_mutex_key#25){++++}-{3:3}, at: do_truncate+0x19c/0x240 [ 214.567576][ T8798] #2: ffff88805fb431b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa5/0x360 [ 214.578646][ T8798] [ 214.578646][ T8798] stack backtrace: [ 214.584642][ T8798] CPU: 1 PID: 8798 Comm: syz.2.1153 Not tainted syzkaller #0 [ 214.592041][ T8798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.602106][ T8798] Call Trace: [ 214.605391][ T8798] [ 214.608327][ T8798] dump_stack_lvl+0x18c/0x250 [ 214.613024][ T8798] ? load_image+0x420/0x420 [ 214.617531][ T8798] ? show_regs_print_info+0x20/0x20 [ 214.622740][ T8798] ? print_circular_bug+0x12b/0x1a0 [ 214.627967][ T8798] check_noncircular+0x2fc/0x400 [ 214.632921][ T8798] ? print_deadlock_bug+0x5d0/0x5d0 [ 214.638130][ T8798] ? lockdep_lock+0xf5/0x230 [ 214.642734][ T8798] ? lockdep_unlock+0x146/0x2e0 [ 214.647600][ T8798] ? _find_first_zero_bit+0xd6/0x100 [ 214.652902][ T8798] __lock_acquire+0x37ef/0x7d80 [ 214.657779][ T8798] ? verify_lock_unused+0x140/0x140 [ 214.663014][ T8798] lock_acquire+0x19e/0x420 [ 214.667539][ T8798] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 214.673699][ T8798] ? __might_sleep+0xe0/0xe0 [ 214.678302][ T8798] ? read_lock_is_recursive+0x20/0x20 [ 214.683691][ T8798] ? mapping_evict_folio+0x530/0x530 [ 214.689000][ T8798] down_write+0x97/0x200 [ 214.693259][ T8798] ? ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 214.699430][ T8798] ? down_read_killable+0x340/0x340 [ 214.704660][ T8798] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 214.710657][ T8798] ? ocfs2_remove_refcount_tree+0xe50/0xe50 [ 214.716587][ T8798] ? up_write+0x1be/0x410 [ 214.720942][ T8798] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 214.726682][ T8798] ocfs2_truncate_file+0xe87/0x1530 [ 214.731896][ T8798] ? ocfs2_simple_size_update+0x4a0/0x4a0 [ 214.737633][ T8798] ? do_raw_spin_unlock+0x121/0x230 [ 214.742855][ T8798] ? _raw_spin_unlock+0x28/0x40 [ 214.747715][ T8798] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 214.753442][ T8798] ? ocfs2_inode_lock_atime+0x530/0x530 [ 214.758995][ T8798] ? ocfs2_rw_lock+0x138/0x250 [ 214.763770][ T8798] ? dquot_initialize+0x20/0x20 [ 214.768642][ T8798] ? ocfs2_create_new_inode_locks+0x690/0x690 [ 214.774715][ T8798] ? setattr_prepare+0x1e5/0xac0 [ 214.779695][ T8798] ? jbd2_journal_begin_ordered_truncate+0xbb/0x150 [ 214.786307][ T8798] ocfs2_setattr+0x15b8/0x1bf0 [ 214.791096][ T8798] ? ocfs2_extend_allocation+0x1830/0x1830 [ 214.796923][ T8798] ? ktime_get_coarse_real_ts64+0x2f/0x120 [ 214.802747][ T8798] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 214.809007][ T8798] ? ktime_get_coarse_real_ts64+0x10a/0x120 [ 214.814918][ T8798] ? current_time+0x196/0x290 [ 214.819610][ T8798] ? inode_set_ctime_current+0x2e0/0x2e0 [ 214.825266][ T8798] ? evm_inode_setattr+0x10a/0x6c0 [ 214.830396][ T8798] ? security_inode_setattr+0xdc/0x140 [ 214.835876][ T8798] ? try_break_deleg+0x79/0x120 [ 214.840749][ T8798] ? ocfs2_extend_allocation+0x1830/0x1830 [ 214.846561][ T8798] notify_change+0xb05/0xde0 [ 214.851176][ T8798] do_truncate+0x1b0/0x240 [ 214.855603][ T8798] ? put_page_bootmem+0x2b0/0x2b0 [ 214.860639][ T8798] ? apparmor_file_truncate+0x24a/0x2e0 [ 214.866198][ T8798] ? ima_bprm_check+0x200/0x200 [ 214.871069][ T8798] path_openat+0x2a7e/0x3270 [ 214.875674][ T8798] ? do_sys_openat2+0xda/0x1d0 [ 214.880454][ T8798] ? do_filp_open+0x430/0x430 [ 214.885159][ T8798] do_filp_open+0x1f2/0x430 [ 214.889682][ T8798] ? vfs_tmpfile+0x620/0x620 [ 214.894294][ T8798] ? _raw_spin_unlock+0x28/0x40 [ 214.899162][ T8798] ? alloc_fd+0x590/0x640 [ 214.903542][ T8798] do_sys_openat2+0x134/0x1d0 [ 214.908236][ T8798] ? do_sys_open+0xe0/0xe0 [ 214.912680][ T8798] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 214.918686][ T8798] ? rcu_is_watching+0x15/0xb0 [ 214.923498][ T8798] ? lock_chain_count+0x20/0x20 [ 214.928380][ T8798] __x64_sys_openat+0x139/0x160 [ 214.933265][ T8798] do_syscall_64+0x55/0xb0 [ 214.937723][ T8798] ? clear_bhb_loop+0x40/0x90 [ 214.942441][ T8798] ? clear_bhb_loop+0x40/0x90 [ 214.947153][ T8798] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.953079][ T8798] RIP: 0033:0x7f1ceb99e159 [ 214.957513][ T8798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.977135][ T8798] RSP: 002b:00007f1cec926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.985581][ T8798] RAX: ffffffffffffffda RBX: 00007f1cebc26090 RCX: 00007f1ceb99e159 [ 214.993569][ T8798] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 215.001564][ T8798] RBP: 00007f1ceba35024 R08: 0000000000000000 R09: 0000000000000000 [ 215.009553][ T8798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.017540][ T8798] R13: 00007f1cebc26128 R14: 00007f1cebc26090 R15: 00007ffd34ae9428 [ 215.025526][ T8798] [ 215.075311][ T2137] asix 5-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 215.106190][ T2137] asix: probe of 5-1:0.251 failed with error -524 [ 215.210383][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 215.282251][ T8036] usb 5-1: USB disconnect, device number 4 [ 215.291136][ T999] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)