last executing test programs: 2m38.186922606s ago: executing program 2 (id=11546): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername$inet(r0, 0x0, 0x0) 2m38.153466248s ago: executing program 2 (id=11547): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@delneigh={0x1c, 0x1a, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x1bc396b6b0f08b88}, 0x20000000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz 020'], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2m37.858732291s ago: executing program 2 (id=11551): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m37.667145396s ago: executing program 2 (id=11554): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x6, 0x9}, &(0x7f00000001c0)=0xc) 2m37.486073616s ago: executing program 2 (id=11557): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000002740)=ANY=[], 0x1, 0x6001, &(0x7f0000006400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 2m35.727923283s ago: executing program 2 (id=11568): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000980)="3b694fd92521e030e855f9e9b6c8fd613d4157a422b1f059eed57f239120a3d192161caf2ebfe6eff508b221e51b615612029a6a9ee9b2a299147dbcfc122534415c746da5dc158d142a32d74386e909d578e94ac327bedfce1cac75ac8b6ecea2b2f15203aa88e2c4163f9d9d3e547727957e40d51111a695811e67efc5a23e3210803306a076d84e253c0b04e43c6b30bf586434f960bebc74ce5bcbfd0a54fb89f99e2694663e099446a20c12a1f2bfaadc819efe80cad4b03931fde849aa10a3d845d6f19ec00ec689ff503fd1426de3a307ba2af01467c094cf76fab587a8f7556cefce01e3f3ec2b47b908913fb538c04125fc1630b15156705b23a9935f98c4c4ac1951c439d717f8f4b39de584226fb636afa2a9970c301c5c0bf43b5f375b86ea7b16206ef454b3a75b3c5036bdbd6cff667ea697dc4e1a5b4ef2fe4eb952228ed86a6bbc83f93e8d7cc95c19c7bb57657e25e15ce665b1361ed72bc7af65c14f7a8cdb4ecf76d88affc62d334f3515336e47234690ddb6d80646537622239e05a73bb1dfc00fcd53321768276694c681276eade99bdb024381848270e8c9935fa25dd0bc3e98c1276faf9858c1dac082e69d86031e680cc9f5cea2d68b7fb39f11f467e45abc90169c7b8651848d5bbe7c2cf6c2d98e5f0a4cbcca6525735551ec3297f497494422baf856b3f21986fb3c0fadb85b38ae535b0f386d8872f2f61b56cf9656edb54b2e36b74f1cf71bdc52936a415ec6cdeebb396ba9c7b618cbab56f4f482dd7343815ed01899ecfdcc973e71dc637d7ef5909d23d7b591f6f4568bf67e3db933fad590e981d5b3f830aa77ec3db2419fb071104bc569a0e17946af0e3755d01b7a347f156c1f54877240d47bb1cef308f92dd059444ffe64d51a5d3c2bf9b2c2d13a5c5855118cc288b84ad5c55c7d0be0796758c59cd43aa397b483d81b721f892c8a5afb5a328dba1d812ced69b4454d963e524b4913dd6b0bc9629d42bc064a1d6df53855cc55c5b1b78ae902c2ab55b9dbad96d2b894fb34557b1bfee4924346b7ec89bd8aa84fb2aaef0bc3f214412d0ef3dfad91401a617b1841fefd44c1f44ecfe24a0910f076e62b7fcf88eb9e95d8475b2862ce0c7a12a230cb5d160dc0fda74e4dce7043bbc0beb48952536ef90806c86d06dccbcd7b315e07ab378786d053", 0x350}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m18.796824934s ago: executing program 32 (id=11568): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000980)="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", 0x350}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7.749259332s ago: executing program 3 (id=12527): r0 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) 6.993076749s ago: executing program 0 (id=12530): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@fadd={0x58, 0x114, 0x6, {{0x10001, 0x82}, 0x0, 0x0, 0x2, 0x7, 0x100000000, 0xec3, 0x12, 0x401}}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0}}], 0xb0}, 0x0) 6.753492714s ago: executing program 0 (id=12531): munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) 6.235890894s ago: executing program 3 (id=12534): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001700)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001680)={0xc0, 0x5, 0x1, "04"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x40, 0x5, 0x4, "e4b72d73"}, 0x0, 0x0, 0x0, 0x0}) 5.797888851s ago: executing program 0 (id=12538): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffef00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007500000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4.54435792s ago: executing program 0 (id=12542): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 4.145233283s ago: executing program 3 (id=12546): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) fstatfs(r0, 0x0) 2.942423236s ago: executing program 3 (id=12553): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}}, 0x90) 2.42277826s ago: executing program 4 (id=12558): io_setup(0x7d, &(0x7f0000000600)=0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_submit(r0, 0xfffffd2a, 0x0) 2.014073975s ago: executing program 4 (id=12560): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) 1.81710815s ago: executing program 4 (id=12562): mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4006, &(0x7f0000000c00)=0x6, 0x6, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0x9, 0x6, 0x2) 1.64045149s ago: executing program 1 (id=12563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000894}, 0x24008000) 1.539444967s ago: executing program 4 (id=12564): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0x200000, 0x31a000, 0x8}) 1.346438968s ago: executing program 1 (id=12565): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000001100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x18, r1, 0x2, 0x0, &(0x7f00000010c0)=[{0x8, 0xfffffffffffffff7}, {0x610, 0x140000000000}]}) 1.269337043s ago: executing program 1 (id=12566): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0806000108000604"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.087775061s ago: executing program 0 (id=12567): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000027000100000000000000000a01"], 0x50}}, 0x0) 1.01976047s ago: executing program 0 (id=12568): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0x16, "e6cd4168"}, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x9, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "0000a4ec"}, @local=@item_4={0x3, 0x2, 0x0, "e801dfa9"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) 570.019049ms ago: executing program 4 (id=12569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44) 532.311635ms ago: executing program 1 (id=12570): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x11400, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_NOP128={0x3f, 0x20, 0x0, 0xffffffffffffffff, 0xffffffff00000001, 0xffffffffffffffff, 0xbd7, 0x10, 0xd293f69c73b5f9fc, {0x758}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 415.01985ms ago: executing program 1 (id=12571): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f00000001c0)) 334.327485ms ago: executing program 1 (id=12572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 333.242532ms ago: executing program 3 (id=12573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote, 0x7ff}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 257.135942ms ago: executing program 4 (id=12574): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)={[{@errors_remount}, {@init_itable}, {@sysvgroups}, {@orlov}]}, 0x1, 0x4cf, &(0x7f0000000500)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x129080, 0x10) 0s ago: executing program 3 (id=12575): syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file1\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@unhide}]}, 0xff, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) kernel console output (not intermixed with test programs): 7fe4 [ 1061.570951][T30544] Remounting filesystem read-only [ 1061.673207][T30530] NILFS (loop4): mounting fs with errors [ 1061.706391][T19976] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1061.872815][T19976] usb 2-1: Using ep0 maxpacket: 32 [ 1061.877342][T19976] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1061.877363][T19976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.098556][T19976] usb 2-1: config 0 descriptor?? [ 1062.110337][T19976] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1062.484621][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1062.777538][T30544] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1062.777571][T30544] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1062.806334][T30544] Remounting filesystem read-only [ 1062.826076][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1062.928541][T19976] gspca_nw80x: reg_w err -71 [ 1062.928637][T19976] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 1062.940854][T19976] usb 2-1: USB disconnect, device number 75 [ 1062.975282][ T5591] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 1063.302187][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1063.389728][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1063.469501][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11193'. [ 1064.117784][ T202] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1064.155981][T30594] vivid-001: disconnect [ 1064.156529][T30594] vivid-001: reconnect [ 1064.223093][T30599] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1064.281559][ T202] usb 5-1: Using ep0 maxpacket: 32 [ 1064.292211][ T202] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1064.292258][ T202] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1064.292298][ T202] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 1064.292320][ T202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.349688][ T202] usb 5-1: config 0 descriptor?? [ 1064.722119][T30614] loop0: detected capacity change from 0 to 2048 [ 1064.725336][T30614] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1064.745592][T30616] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1064.843607][ T202] kye 0003:0458:5010.002C: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1064.874181][ T202] kye 0003:0458:5010.002C: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 1064.874319][ T202] kye 0003:0458:5010.002C: tablet-enabling feature report not found [ 1064.874335][ T202] kye 0003:0458:5010.002C: tablet enabling failed [ 1065.036144][T30619] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11216'. [ 1065.054356][T30620] netlink: 'syz.2.11217': attribute type 29 has an invalid length. [ 1065.065625][T30620] netlink: 'syz.2.11217': attribute type 29 has an invalid length. [ 1065.090882][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1065.104506][ T202] usb 5-1: USB disconnect, device number 59 [ 1065.202377][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1065.367085][T30621] fido_id[30621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1066.109046][T30623] loop3: detected capacity change from 0 to 32768 [ 1066.393801][T30623] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1066.479311][T16809] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1066.523361][T30623] XFS (loop3): Ending clean mount [ 1066.662990][T16809] usb 3-1: Using ep0 maxpacket: 32 [ 1066.665938][T16809] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1066.665964][T16809] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1066.665984][T16809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1066.666003][T16809] usb 3-1: config 1 has no interface number 0 [ 1066.666056][T16809] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1066.666083][T16809] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1066.666122][T16809] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1066.666144][T16809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.689436][ T5592] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1066.777176][T16809] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 1067.186457][T30651] loop4: detected capacity change from 0 to 32768 [ 1067.496234][T16809] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 1067.783607][T16809] usb 3-1: USB disconnect, device number 59 [ 1067.895267][ T5693] Flush: task=udevd[5693] dev=loop4 state=2 [ 1067.914287][T16809] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 1068.093409][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1068.182782][ T5693] Teardown: task=udevd[5693] dev=loop4 state=2 [ 1068.270547][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1068.276615][T30680] netlink: 'syz.1.11242': attribute type 1 has an invalid length. [ 1068.534874][T30688] loop0: detected capacity change from 0 to 512 [ 1068.742767][T30688] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1068.809839][T30688] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1068.906400][T30688] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.11243: Block bitmap for bg 0 marked uninitialized [ 1068.906435][T30688] loop0: lost filesystem error report for type 5 error -117 [ 1068.924805][ C0] EXT4-fs (loop0): initial error at time 2000000068: ext4_read_block_bitmap_nowait:517 [ 1068.924836][ C0] EXT4-fs (loop0): last error at time 2000000068: ext4_read_block_bitmap_nowait:517 [ 1068.982890][T30688] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1068.982918][T30688] loop0: lost filesystem error report for type 5 error -117 [ 1069.005327][T30688] EXT4-fs (loop0): 1 orphan inode deleted [ 1069.151543][T30688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1069.300254][T30688] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 1069.322770][T30688] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 1069.349120][T30688] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.11243: Block bitmap for bg 0 marked uninitialized [ 1069.428701][T16809] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1069.583238][ T5594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.614280][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1069.621424][T16809] usb 5-1: Using ep0 maxpacket: 32 [ 1069.624203][T16809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1069.627049][T16809] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1069.627078][T16809] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1069.627098][T16809] usb 5-1: Product: syz [ 1069.627112][T16809] usb 5-1: Manufacturer: syz [ 1069.627126][T16809] usb 5-1: SerialNumber: syz [ 1069.635565][T16809] usb 5-1: config 0 descriptor?? [ 1069.636865][T30705] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1069.639712][T16809] hub 5-1:0.0: bad descriptor, ignoring hub [ 1069.639748][T16809] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1069.841251][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1069.958280][T16809] usb 5-1: USB disconnect, device number 60 [ 1070.070254][T30728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11262'. [ 1070.392165][T19976] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1070.621844][T19976] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1070.621873][T19976] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1070.621893][T19976] usb 1-1: config 1 has no interface number 0 [ 1070.621936][T19976] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1070.625574][T19976] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1070.625604][T19976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.625623][T19976] usb 1-1: Product: syz [ 1070.625638][T19976] usb 1-1: Manufacturer: syz [ 1070.625653][T19976] usb 1-1: SerialNumber: syz [ 1070.950402][T19976] usb 1-1: selecting invalid altsetting 1 [ 1071.371254][T19976] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 1071.371301][T19976] cdc_ncm 1-1:1.1: bind() failure [ 1071.406425][T19976] usb 1-1: USB disconnect, device number 53 [ 1072.230991][T30787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11288'. [ 1072.231025][T30787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11288'. [ 1072.481660][T30801] loop3: detected capacity change from 0 to 64 [ 1072.795229][T30801] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 1073.034448][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1073.133904][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1073.412197][T30796] loop4: detected capacity change from 0 to 32768 [ 1073.423063][T30796] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.11294 (30796) [ 1073.452291][T30796] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1073.452325][T30796] BTRFS info (device loop4): using sha256 checksum algorithm [ 1074.247721][T30796] BTRFS info (device loop4): enabling ssd optimizations [ 1074.247749][T30796] BTRFS info (device loop4): turning on sync discard [ 1074.247765][T30796] BTRFS info (device loop4): enabling free space tree [ 1074.375119][T30860] netlink: 44 bytes leftover after parsing attributes in process `syz.2.11317'. [ 1074.829009][T30870] overlayfs: workdir and upperdir must be separate subtrees [ 1074.939331][ T38] audit: type=1800 audit(2000000074.471:812): pid=30796 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.4.11294" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 1076.117784][T30901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1076.508093][T30911] netlink: 'syz.3.11339': attribute type 1 has an invalid length. [ 1076.508120][T30911] netlink: 232 bytes leftover after parsing attributes in process `syz.3.11339'. [ 1076.508135][T30911] netlink: 'syz.3.11339': attribute type 1 has an invalid length. [ 1077.244746][T30930] netlink: 'syz.0.11349': attribute type 3 has an invalid length. [ 1078.597148][T30954] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1080.557168][T31013] loop0: detected capacity change from 0 to 2048 [ 1080.586080][T31016] tipc: Can't bind to reserved service type 61 [ 1080.663615][T31013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.691086][T31013] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1080.973560][ T5594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.079086][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1081.261439][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1081.373694][T31032] netlink: 1084 bytes leftover after parsing attributes in process `syz.1.11395'. [ 1081.470988][T31035] loop0: detected capacity change from 0 to 2048 [ 1081.778827][ T5591] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1082.266256][T31053] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1082.513698][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1082.646482][T31053] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 1082.646525][T31053] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 1082.847846][T31053] Remounting filesystem read-only [ 1082.866049][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1082.998038][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1083.201717][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1083.516044][T31077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11413'. [ 1083.517436][T31079] loop0: detected capacity change from 0 to 64 [ 1083.744913][T31086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11417'. [ 1083.801470][T16809] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1084.025577][T16809] usb 5-1: Using ep0 maxpacket: 8 [ 1084.027938][T16809] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1084.027964][T16809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.027983][T16809] usb 5-1: config 0 has no interface number 0 [ 1084.036734][T16809] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1084.036764][T16809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.036784][T16809] usb 5-1: Product: syz [ 1084.036798][T16809] usb 5-1: Manufacturer: syz [ 1084.036813][T16809] usb 5-1: SerialNumber: syz [ 1084.076932][T16809] usb 5-1: config 0 descriptor?? [ 1084.313923][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1084.317434][ T202] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1084.450973][T16809] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1084.451119][T16809] uvcvideo 5-1:0.31: No valid video chain found. [ 1084.501772][ T202] usb 4-1: Using ep0 maxpacket: 16 [ 1084.503652][ T202] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1084.532651][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1084.543768][ T202] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1084.543797][ T202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.543810][ T202] usb 4-1: Product: syz [ 1084.543822][ T202] usb 4-1: Manufacturer: syz [ 1084.543922][ T202] usb 4-1: SerialNumber: syz [ 1084.581459][ T202] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1084.581476][ T202] r8152-cfgselector 4-1: config 0 descriptor?? [ 1084.747137][ T8040] usb 5-1: USB disconnect, device number 61 [ 1085.114681][ T202] r8152-cfgselector 4-1: USB disconnect, device number 50 [ 1085.171309][T31114] macsec0: entered promiscuous mode [ 1085.171333][T31114] bridge0: entered promiscuous mode [ 1085.371291][T31122] usb usb9: usbfs: process 31122 (syz.2.11432) did not claim interface 4 before use [ 1085.777506][T31137] netlink: 'syz.4.11440': attribute type 4 has an invalid length. [ 1085.777524][T31137] netlink: 3649 bytes leftover after parsing attributes in process `syz.4.11440'. [ 1085.858948][T31140] loop3: detected capacity change from 0 to 764 [ 1085.906291][T31140] Symlink component flag not implemented [ 1085.943210][T31140] Symlink component flag not implemented (128) [ 1086.044397][ T5693] Flush: task=udevd[5693] dev=loop3 state=2 [ 1086.156401][T31150] loop4: detected capacity change from 0 to 1024 [ 1086.501107][ T5693] Teardown: task=udevd[5693] dev=loop3 state=2 [ 1086.682455][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1087.059436][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1087.081252][T19976] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1087.259044][T19976] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1087.259077][T19976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 90, changing to 7 [ 1087.259100][T19976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 50044, setting to 1024 [ 1087.259140][T19976] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1087.259163][T19976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.342341][T19976] usb 4-1: config 0 descriptor?? [ 1087.365641][T31174] loop0: detected capacity change from 0 to 64 [ 1087.618718][T19976] ath6kl: Failed to submit usb control message: -71 [ 1087.618764][T19976] ath6kl: unable to send the bmi data to the device: -71 [ 1087.618777][T19976] ath6kl: Unable to send get target info: -71 [ 1087.688279][T19976] ath6kl: Failed to init ath6kl core: -71 [ 1087.689650][T19976] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1087.767771][T19976] usb 4-1: USB disconnect, device number 51 [ 1087.992674][T31181] loop4: detected capacity change from 0 to 1024 [ 1088.224190][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1088.365857][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1088.462765][ T5693] Flush: task=udevd[5693] dev=loop4 state=2 [ 1088.512316][T31194] netlink: 'syz.0.11458': attribute type 2 has an invalid length. [ 1088.589746][T31196] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11466'. [ 1088.785917][ T5693] Teardown: task=udevd[5693] dev=loop4 state=2 [ 1089.370569][T31209] loop0: detected capacity change from 0 to 65536 [ 1089.421554][T31209] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 1089.485251][T31209] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_inobt block 0x8 [ 1089.485304][T31209] XFS (loop0): Unmount and run xfs_repair [ 1089.485317][T31209] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 1089.485335][T31209] 00000000: 49 41 42 33 00 00 00 05 ff ff ff ff ff ff ff ff IAB3............ [ 1089.485350][T31209] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 1089.485364][T31209] 00000020: d6 f6 9d bd 8c 5d 46 be b8 8e 92 c0 ae 88 ce b2 .....]F......... [ 1089.485377][T31209] 00000030: 00 00 00 00 69 39 59 d5 00 00 00 40 00 00 40 37 ....i9Y....@..@7 [ 1089.485391][T31209] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1089.485404][T31209] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1089.485418][T31209] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1089.485432][T31209] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1089.485448][T31209] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x8 len 2 error 74 [ 1089.485833][T31209] loop0: lost filesystem error report for type 5 error -117 [ 1089.485957][T31209] XFS (loop0): Failed to read root inode 0x40, error 117 [ 1089.492848][T31209] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_mountfs+0x132e/0x2380 (fs/xfs/xfs_mount.c:1261). Shutting down filesystem. [ 1089.492909][T31209] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 1089.492925][T31209] loop0: lost filesystem error report for type 5 error -108 [ 1089.788240][T19976] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1089.830313][ T7106] Flush: task=udevd[7106] dev=loop0 state=2 [ 1089.910282][ T7106] Teardown: task=udevd[7106] dev=loop0 state=2 [ 1089.943647][T31236] netlink: 'syz.3.11481': attribute type 1 has an invalid length. [ 1089.953598][T19976] usb 2-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8 [ 1089.953629][T19976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.953649][T19976] usb 2-1: Product: syz [ 1089.953663][T19976] usb 2-1: Manufacturer: syz [ 1089.953693][T19976] usb 2-1: SerialNumber: syz [ 1090.009739][T19976] usb 2-1: config 0 descriptor?? [ 1090.024567][T19976] hub 2-1:0.0: bad descriptor, ignoring hub [ 1090.024606][T19976] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1090.026047][T19976] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1090.054814][T19976] usb 2-1: Detected SIO [ 1090.148582][T19976] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1090.452238][T19976] usb 2-1: USB disconnect, device number 76 [ 1090.473506][T19976] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1090.504821][T19976] ftdi_sio 2-1:0.0: device disconnected [ 1091.522717][T31234] loop4: detected capacity change from 0 to 32768 [ 1092.024710][T31234] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1092.176325][T31234] XFS (loop4): Ending clean mount [ 1092.402668][ T5591] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1092.555856][T31285] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11499'. [ 1093.802100][T31308] loop3: detected capacity change from 0 to 256 [ 1093.956696][T31308] exfat: Deprecated parameter 'utf8' [ 1093.984893][T31308] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 1094.054017][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1094.201706][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1094.221398][T31319] loop0: detected capacity change from 0 to 128 [ 1094.325755][T31319] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1094.325896][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1094.442811][T31319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1094.480023][T31323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11519'. [ 1094.505696][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1095.508028][ T37] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1095.710275][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.710301][ T37] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1095.710351][ T37] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1095.710374][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.760281][ T37] usb 4-1: config 0 descriptor?? [ 1095.810457][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1095.932734][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1095.970708][T31336] loop4: detected capacity change from 0 to 32768 [ 1096.242667][T31336] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1096.492233][ T37] Bluetooth: Can't get version to change to load ram patch err [ 1096.492254][ T37] Bluetooth: Loading sysconfig file failed [ 1096.492290][ T37] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 1096.536454][ T37] usb 4-1: USB disconnect, device number 52 [ 1096.562272][T31336] XFS (loop4): Ending clean mount [ 1097.590036][T31399] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1097.966567][T31412] loop3: detected capacity change from 0 to 128 [ 1097.985290][T31413] sctp: [Deprecated]: syz.2.11554 (pid 31413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1097.985290][T31413] Use struct sctp_sack_info instead [ 1098.056652][ T5591] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1098.233163][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1098.680337][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1098.919177][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1099.125008][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1100.729136][T31435] loop0: detected capacity change from 0 to 32768 [ 1100.779322][T31437] loop3: detected capacity change from 0 to 32768 [ 1100.883329][T31437] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1101.085206][T31437] XFS (loop3): Ending clean mount [ 1101.319460][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1101.420953][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1101.674536][T30494] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1101.858270][T30494] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1101.859657][T30494] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.859681][T30494] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1101.859726][T30494] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1101.862361][T30494] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1101.862404][T30494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.862424][T30494] usb 2-1: Product: syz [ 1101.862449][T30494] usb 2-1: Manufacturer: syz [ 1101.862463][T30494] usb 2-1: SerialNumber: syz [ 1101.998442][ T5592] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1102.236377][T30494] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 1102.236425][T30494] cdc_ncm 2-1:1.0: bind() failure [ 1102.284868][T30494] usb 2-1: USB disconnect, device number 77 [ 1102.797599][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1102.945235][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1103.428701][T31505] veth1_to_bridge: entered allmulticast mode [ 1103.430096][T31505] bridge0: port 4(veth1_to_bridge) entered blocking state [ 1103.430539][T31505] bridge0: port 4(veth1_to_bridge) entered disabled state [ 1103.471012][T31505] veth1_to_bridge: entered promiscuous mode [ 1103.471247][T31505] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1103.636543][T31505] bridge0: port 4(veth1_to_bridge) entered blocking state [ 1103.636643][T31505] bridge0: port 4(veth1_to_bridge) entered listening state [ 1103.932941][T31511] loop3: detected capacity change from 0 to 512 [ 1103.994674][T31513] loop4: detected capacity change from 0 to 512 [ 1104.018890][T31511] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1104.018921][T31511] FAT-fs (loop3): Filesystem has been set read-only [ 1104.107938][T31511] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1104.214792][T31513] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 1104.214899][T31513] System zones: 1-12 [ 1104.262599][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1104.293029][T31513] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.11599: Directory hole found for htree index block 0 [ 1104.293060][T31513] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 1104.309172][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1104.309196][ C0] EXT4-fs (loop4): initial error at time 2000000101: dx_probe:791: inode 2 [ 1104.309223][ C0] EXT4-fs (loop4): last error at time 2000000101: dx_probe:791: inode 2 [ 1104.389874][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1104.399382][T31513] EXT4-fs (loop4): Remounting filesystem read-only [ 1104.399444][T31513] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 1104.401763][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1104.401912][T31513] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 1104.413267][T31513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1104.487003][T31513] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 1104.567037][T31519] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 1104.613993][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.783096][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1104.878074][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1105.010193][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1105.031332][ C1] bridge0: port 4(veth1_to_bridge) entered blocking state [ 1105.062311][T31532] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11607'. [ 1105.627891][T31542] loop0: detected capacity change from 0 to 256 [ 1106.521972][T31553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11616'. [ 1106.983637][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1107.066588][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1107.975813][T31594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11636'. [ 1107.975844][T31594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11636'. [ 1108.061860][T31598] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11638'. [ 1108.519033][T30494] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 1108.684994][T30494] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1108.685022][T30494] usb 4-1: config 0 has no interface number 0 [ 1108.685065][T30494] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1108.685088][T30494] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1108.685114][T30494] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1108.685139][T30494] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1108.685166][T30494] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1108.685191][T30494] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1108.685242][T30494] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1108.685265][T30494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.822127][T30494] usb 4-1: config 0 descriptor?? [ 1108.824063][T31606] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1108.824185][T31606] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1108.844793][T30494] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1109.252769][T30494] usb 4-1: USB disconnect, device number 53 [ 1109.274083][T30494] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1110.349668][ T202] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1110.512470][ T202] usb 4-1: Using ep0 maxpacket: 32 [ 1110.514350][ T202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.514375][ T202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.514397][ T202] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1110.514410][ T202] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.524338][ T202] usb 4-1: config 0 descriptor?? [ 1111.046175][ T202] ft260 0003:0403:6030.002D: item fetching failed at offset 0/2 [ 1111.050447][ T202] ft260 0003:0403:6030.002D: failed to parse HID [ 1111.050582][ T202] ft260 0003:0403:6030.002D: probe with driver ft260 failed with error -22 [ 1111.073448][T31655] loop4: detected capacity change from 0 to 2048 [ 1111.245831][T31660] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1111.293019][T16809] usb 4-1: USB disconnect, device number 54 [ 1111.598258][T31666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11670'. [ 1111.668120][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1111.747901][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1112.206162][T31684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11677'. [ 1113.018497][T30494] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1113.227578][T30494] usb 4-1: Using ep0 maxpacket: 8 [ 1113.242771][T30494] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 222, using maximum allowed: 30 [ 1113.242820][T30494] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 131, changing to 11 [ 1113.242921][T30494] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 222 [ 1113.242948][T30494] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1113.242978][T30494] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1113.243000][T30494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.328783][T30494] usb 4-1: config 0 descriptor?? [ 1113.833158][T30494] cherry 0003:046A:0027.002E: item fetching failed at offset 38/40 [ 1113.833857][T30494] cherry 0003:046A:0027.002E: probe with driver cherry failed with error -22 [ 1114.063270][T16809] usb 4-1: USB disconnect, device number 55 [ 1114.292333][T30494] IPVS: starting estimator thread 0... [ 1114.363993][T31722] loop4: detected capacity change from 0 to 512 [ 1114.381648][T31720] IPVS: using max 10 ests per chain, 24000 per kthread [ 1114.386675][T31722] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1114.424127][T31722] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.11695: iget: bad i_size value: 38620345925642 [ 1114.424163][T31722] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1114.424630][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1114.424649][ C0] EXT4-fs (loop4): initial error at time 2000000110: ext4_orphan_get:1399: inode 15 [ 1114.424677][ C0] EXT4-fs (loop4): last error at time 2000000110: ext4_orphan_get:1399: inode 15 [ 1114.482174][T31722] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.11695: couldn't read orphan inode 15 (err -117) [ 1114.482207][T31722] loop4: lost filesystem error report for type 5 error -117 [ 1114.488070][T31722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1114.626547][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.671474][T31728] loop0: detected capacity change from 0 to 16 [ 1114.732595][T31728] erofs (device loop0): mounted with root inode @ nid 36. [ 1114.806624][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1115.032981][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1115.083919][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1115.162499][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1116.248360][T31759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11711'. [ 1116.946089][T31764] loop3: detected capacity change from 0 to 2048 [ 1117.248170][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1117.354069][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1118.515496][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1118.610962][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1118.654490][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1118.676398][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1118.677192][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1118.747703][T31803] netlink: 252 bytes leftover after parsing attributes in process `syz.0.11732'. [ 1118.932638][T31812] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11734'. [ 1119.167696][T31816] loop0: detected capacity change from 0 to 128 [ 1119.370997][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1119.440314][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1119.489545][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1119.513094][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1119.513909][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1120.065088][T31816] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1120.067070][T31816] ext4 filesystem being mounted at /2247/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1120.269447][T31833] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11742'. [ 1120.561108][ T5594] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1120.752785][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1120.817010][T31842] loop3: detected capacity change from 0 to 256 [ 1120.886012][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1121.369046][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1121.545455][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1121.838714][ T5606] Bluetooth: hci5: command tx timeout [ 1122.710890][ T3388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1122.710927][ T3388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.807240][T31872] netlink: 'syz.3.11760': attribute type 4 has an invalid length. [ 1122.807258][T31872] netlink: 17 bytes leftover after parsing attributes in process `syz.3.11760'. [ 1122.863552][T31870] loop4: detected capacity change from 0 to 256 [ 1122.864691][T31870] exfat: Deprecated parameter 'namecase' [ 1122.864722][T31870] exfat: Deprecated parameter 'utf8' [ 1123.088186][T31870] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb94bd070, utbl_chksum : 0xe619d30d) [ 1123.204305][T31884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11765'. [ 1123.419086][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1123.510161][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1124.073593][ T5606] Bluetooth: hci5: command tx timeout [ 1124.473091][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11782'. [ 1124.473122][T31924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11782'. [ 1124.473593][T31924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11782'. [ 1124.473614][T31924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11782'. [ 1125.051874][T31933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11785'. [ 1125.109474][ T3388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1125.109509][ T3388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.701690][T31956] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11795'. [ 1125.744008][T31785] virt_wifi0 speed is unknown, defaulting to 1000 [ 1125.759276][T31785] lo speed is unknown, defaulting to 1000 [ 1125.973995][ T5701] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1126.131104][ T3388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.131141][ T3388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.169208][ T5701] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1126.169245][ T5701] usb 2-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.169267][ T5701] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1126.169301][ T5701] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 1126.169322][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.214496][ T5701] usb 2-1: config 0 descriptor?? [ 1126.324527][ T5606] Bluetooth: hci5: command tx timeout [ 1126.378666][ T8040] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1126.487363][T31972] loop4: detected capacity change from 0 to 256 [ 1126.488455][T31972] exfat: Deprecated parameter 'utf8' [ 1126.488482][T31972] exfat: Deprecated parameter 'utf8' [ 1126.488700][T31972] exfat: Deprecated parameter 'utf8' [ 1126.543703][ T8040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.543741][ T8040] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1126.579868][ T8040] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1126.579895][ T8040] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.579913][ T8040] usb 4-1: Product: syz [ 1126.579926][ T8040] usb 4-1: Manufacturer: syz [ 1126.579939][ T8040] usb 4-1: SerialNumber: syz [ 1126.628548][ T8040] usb 4-1: config 0 descriptor?? [ 1126.654014][ T8040] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1126.659614][ T8040] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1126.701548][ T8040] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1126.701611][ T8040] usb 4-1: media controller created [ 1126.740760][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.740794][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.740821][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.740846][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.740886][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.740913][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.740938][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.740962][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.740963][ T8040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1126.740988][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1126.741013][ T5701] hid-rmi 0003:06CB:81A7.002F: unknown main item tag 0x0 [ 1127.093677][ T5701] hid-rmi 0003:06CB:81A7.002F: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.1-1/input0 [ 1127.121281][T31972] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1127.151314][ T5701] usb 2-1: USB disconnect, device number 78 [ 1127.334957][ T8040] DVB: Unable to find symbol tda10046_attach() [ 1127.334974][ T8040] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1127.334988][ T8040] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1127.337515][T31974] fido_id[31974]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1127.374116][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1127.510672][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1127.628211][ T8040] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1127.631763][ T8040] usb 4-1: USB disconnect, device number 56 [ 1128.591824][ T5606] Bluetooth: hci5: command tx timeout [ 1130.127264][T32008] loop0: detected capacity change from 0 to 32768 [ 1130.739591][T32011] veth1_vlan: entered promiscuous mode [ 1130.746703][T32011] macvtap1: entered promiscuous mode [ 1130.754763][T32011] macvtap1: entered allmulticast mode [ 1130.754787][T32011] veth1_vlan: entered allmulticast mode [ 1130.985091][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1131.132276][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1131.635867][ T37] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1131.851785][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 1131.854086][ T37] usb 2-1: config 5 has an invalid interface number: 70 but max is 0 [ 1131.854111][ T37] usb 2-1: config 5 has no interface number 0 [ 1131.854142][ T37] usb 2-1: config 5 interface 70 has no altsetting 0 [ 1131.856778][ T37] usb 2-1: New USB device found, idVendor=0482, idProduct=0203, bcdDevice=2f.99 [ 1131.856806][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.856824][ T37] usb 2-1: Product: syz [ 1131.856838][ T37] usb 2-1: Manufacturer: syz [ 1131.856852][ T37] usb 2-1: SerialNumber: syz [ 1131.896602][T31785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.896997][T31785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.897311][T31785] bridge_slave_0: entered allmulticast mode [ 1131.901012][T31785] bridge_slave_0: entered promiscuous mode [ 1132.240948][ T37] usb 2-1: USB disconnect, device number 79 [ 1132.379382][T32070] loop0: detected capacity change from 0 to 128 [ 1132.395802][T32070] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1132.402300][T32070] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1132.504064][T31785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.504373][T31785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.504652][T31785] bridge_slave_1: entered allmulticast mode [ 1132.507520][T31785] bridge_slave_1: entered promiscuous mode [ 1132.731952][T32074] loop4: detected capacity change from 0 to 256 [ 1132.733151][T32074] exfat: Deprecated parameter 'utf8' [ 1132.733183][T32074] exfat: Deprecated parameter 'utf8' [ 1132.756640][T32074] exfat: Deprecated parameter 'namecase' [ 1132.756675][T32074] exfat: Deprecated parameter 'utf8' [ 1132.791455][T32074] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1133.173664][ T5693] Flush: task=udevd[5693] dev=loop4 state=2 [ 1133.225761][T31785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.248574][T32023] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1133.266953][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1133.315575][ T5693] Teardown: task=udevd[5693] dev=loop4 state=2 [ 1133.318874][T31785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.371966][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1133.729631][T32091] loop4: detected capacity change from 0 to 512 [ 1133.735394][T32091] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1133.818025][T32091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1133.818159][T32091] ext4 filesystem being mounted at /2317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1133.962958][T32098] loop0: detected capacity change from 0 to 256 [ 1134.006422][ T3388] bridge_slave_1: left allmulticast mode [ 1134.006633][ T3388] bridge_slave_1: left promiscuous mode [ 1134.181960][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.331634][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1134.342600][T32091] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 92 vs 96 free clusters [ 1134.372071][T32091] Quota error (device loop4): write_blk: dquota write failed [ 1134.372220][T32091] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 1134.372260][T32091] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.11852: Failed to acquire dquot type 1 [ 1134.452993][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1134.535242][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1134.574123][ T3388] bridge_slave_0: left allmulticast mode [ 1134.574153][ T3388] bridge_slave_0: left promiscuous mode [ 1134.612022][ T3388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.775353][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1134.866711][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1137.108153][ T37] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1137.296741][ T37] usb 5-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1137.296792][ T37] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 1137.296819][ T37] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1137.296844][ T37] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1137.296879][ T37] usb 5-1: New USB device found, idVendor=18d1, idProduct=5028, bcdDevice= 0.00 [ 1137.296900][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.301009][ T37] usb 5-1: config 0 descriptor?? [ 1137.882896][ T37] hid-multitouch 0003:18D1:5028.0030: ignoring exceeding usage max [ 1137.887519][ T37] hid-multitouch 0003:18D1:5028.0030: hidraw0: USB HID v0.10 Device [HID 18d1:5028] on usb-dummy_hcd.4-1/input0 [ 1138.116698][ T37] usb 5-1: USB disconnect, device number 62 [ 1138.334090][ T3388] bridge0 (unregistering): left promiscuous mode [ 1139.362521][ T37] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1139.556437][ T37] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1139.556471][ T37] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1139.556495][ T37] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1139.556540][ T37] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1139.556561][ T37] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1139.634327][ T37] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1139.634356][ T37] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1139.634376][ T37] usb 5-1: Product: syz [ 1139.634390][ T37] usb 5-1: Manufacturer: syz [ 1139.680422][ T37] cdc_wdm 5-1:1.0: skipping garbage [ 1139.680442][ T37] cdc_wdm 5-1:1.0: skipping garbage [ 1139.712499][T32158] netlink: 'syz.0.11882': attribute type 30 has an invalid length. [ 1139.792116][ T37] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1139.792138][ T37] cdc_wdm 5-1:1.0: Unknown control protocol [ 1140.289312][T25780] usb 5-1: USB disconnect, device number 63 [ 1140.382490][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.425206][ T3388] bond_slave_0: left promiscuous mode [ 1140.479833][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.500896][ T3388] bond_slave_1: left promiscuous mode [ 1140.501663][ T3388] bond0 (unregistering): Released all slaves [ 1140.526373][ T3388] bond1 (unregistering): Released all slaves [ 1140.552371][ T3388] bond2 (unregistering): Released all slaves [ 1140.761452][T32158] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1141.444145][T31785] team0: Port device team_slave_0 added [ 1141.480419][T31785] team0: Port device team_slave_1 added [ 1141.626680][T31785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.626698][T31785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.626724][T31785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.952307][T31785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.959917][T31785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.959948][T31785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.352697][T32198] loop4: detected capacity change from 0 to 512 [ 1142.737668][T32198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1142.737789][T32198] ext4 filesystem being mounted at /2336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1142.862276][T32201] veth1_to_hsr: entered promiscuous mode [ 1142.988805][T32201] macsec2: entered promiscuous mode [ 1142.998611][T32201] macsec2: entered allmulticast mode [ 1142.998644][T32201] veth1_to_hsr: entered allmulticast mode [ 1143.137048][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1143.201404][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1143.700520][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1144.084027][T32226] loop0: detected capacity change from 0 to 4096 [ 1144.124082][T32232] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1144.570225][ T5693] Flush: task=udevd[5693] dev=loop0 state=2 [ 1144.847558][ T5693] Teardown: task=udevd[5693] dev=loop0 state=2 [ 1145.913141][ T5254] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1146.018368][T31785] hsr_slave_0: entered promiscuous mode [ 1146.024049][T31785] hsr_slave_1: entered promiscuous mode [ 1146.027708][ T8040] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1146.038834][T31785] debugfs: 'hsr0' already exists in 'hsr' [ 1146.038863][T31785] Cannot create hsr debugfs directory [ 1146.194666][ T8040] usb 2-1: Using ep0 maxpacket: 32 [ 1146.205567][ T8040] usb 2-1: config 0 has no interfaces? [ 1146.217333][ T8040] usb 2-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 1146.217372][ T8040] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.217391][ T8040] usb 2-1: Product: syz [ 1146.217405][ T8040] usb 2-1: Manufacturer: syz [ 1146.217418][ T8040] usb 2-1: SerialNumber: syz [ 1146.304027][ T8040] usb 2-1: config 0 descriptor?? [ 1146.551715][T32274] ALSA: mixer_oss: invalid OSS volume '' [ 1146.820316][T30494] usb 2-1: USB disconnect, device number 80 [ 1147.239908][T32290] loop3: detected capacity change from 0 to 64 [ 1147.836329][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1147.976813][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1148.120963][T32309] netlink: 'syz.0.11942': attribute type 28 has an invalid length. [ 1148.213042][T32311] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11943'. [ 1148.345867][T32316] loop0: detected capacity change from 0 to 512 [ 1148.456517][T32316] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1148.523003][ T8040] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1148.723054][ T8040] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1148.723106][ T8040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1148.723132][ T8040] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1148.723170][ T8040] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1148.723192][ T8040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.743502][ T8040] usb 4-1: config 0 descriptor?? [ 1148.774841][T32312] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1149.277391][ T8040] hid-multitouch 0003:1FD2:6007.0031: item fetching failed at offset 16/40 [ 1149.278293][ T8040] hid-multitouch 0003:1FD2:6007.0031: probe with driver hid-multitouch failed with error -22 [ 1149.322318][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1149.431024][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1149.443557][T32339] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11951'. [ 1149.494242][ T8040] usb 4-1: USB disconnect, device number 57 [ 1149.871839][ T5254] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1151.007227][T32368] loop3: detected capacity change from 0 to 512 [ 1151.156458][T32368] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1151.598966][T32368] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 1152.098618][ T37] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1152.307657][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1152.307701][ T37] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a31, bcdDevice= 0.00 [ 1152.307720][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.356904][ T5701] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1152.449456][ T37] usb 5-1: config 0 descriptor?? [ 1152.450451][T32379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1152.530244][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 1152.532501][ T5701] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1152.532523][ T5701] usb 2-1: config 0 has no interface number 0 [ 1152.535624][ T5701] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1152.535651][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.535669][ T5701] usb 2-1: Product: syz [ 1152.535682][ T5701] usb 2-1: Manufacturer: syz [ 1152.535748][ T5701] usb 2-1: SerialNumber: syz [ 1152.561887][T32368] EXT4-fs (loop3): 1 truncate cleaned up [ 1152.630646][ T5701] usb 2-1: config 0 descriptor?? [ 1152.645541][ T5701] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1152.645570][ T5701] usb 2-1: selecting invalid altsetting 1 [ 1152.645584][ T5701] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1152.958807][ T5701] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1152.959518][ T5701] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1152.959568][ T5701] usb 2-1: media controller created [ 1153.144256][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1153.213312][ T37] hid_parser_main: 30 callbacks suppressed [ 1153.213335][ T37] hid-corsair-void 0003:1B1C:0A31.0032: unknown main item tag 0x4 [ 1153.213361][ T37] hid-corsair-void 0003:1B1C:0A31.0032: unknown main item tag 0x0 [ 1153.213386][ T37] hid-corsair-void 0003:1B1C:0A31.0032: reserved main item tag 0xd [ 1153.213508][ T37] hid-corsair-void 0003:1B1C:0A31.0032: ignoring exceeding usage max [ 1153.215323][T32404] loop0: detected capacity change from 0 to 1024 [ 1153.304693][ T37] hid-corsair-void 0003:1B1C:0A31.0032: hidraw0: USB HID v9.62 Device [HID 1b1c:0a31] on usb-dummy_hcd.4-1/input0 [ 1153.348077][ T37] usb 5-1: USB disconnect, device number 64 [ 1153.629910][T32368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1153.676986][ T5701] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1153.677042][ T5701] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1153.678610][ T5701] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1153.752302][T32407] fido_id[32407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1153.800522][ T5701] usb 2-1: USB disconnect, device number 81 [ 1153.961789][ T7106] Flush: task=udevd[7106] dev=loop0 state=2 [ 1154.297190][ T7106] Teardown: task=udevd[7106] dev=loop0 state=2 [ 1154.601268][T32419] netlink: 196 bytes leftover after parsing attributes in process `syz.1.11980'. [ 1155.511101][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1155.515606][T32431] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11985'. [ 1155.802234][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1155.922883][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1155.986790][ T5254] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1156.069223][T32422] netlink: 'syz.0.11981': attribute type 8 has an invalid length. [ 1156.092336][T32434] netlink: 340 bytes leftover after parsing attributes in process `syz.1.11987'. [ 1156.632195][T32453] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11992'. [ 1156.928439][T32454] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11992'. [ 1157.400493][T32478] binder: 32477:32478 ioctl c0306201 2000000003c0 returned -22 [ 1157.839961][T32487] loop0: detected capacity change from 0 to 512 [ 1157.970776][T19976] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1157.986835][ T5254] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1158.000215][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1158.082800][ T38] audit: type=1326 audit(2000000151.202:813): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=32488 comm="syz.1.12005" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efde2e1de59 code=0x0 [ 1158.136339][T19976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1158.136374][T19976] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1158.136399][T19976] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1158.139302][T19976] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1158.139330][T19976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.139350][T19976] usb 5-1: Product: syz [ 1158.139365][T19976] usb 5-1: Manufacturer: syz [ 1158.139379][T19976] usb 5-1: SerialNumber: syz [ 1158.167191][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1158.325294][T19976] usb 5-1: config 0 descriptor?? [ 1158.326770][T32485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1158.326891][T32485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1158.410402][T32492] loop0: detected capacity change from 0 to 1024 [ 1158.427924][T19976] usb 5-1: ucan: probing device on interface #0 [ 1158.777896][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1158.861269][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1159.062090][T32497] loop0: detected capacity change from 0 to 128 [ 1159.120946][T19976] ucan 5-1:0.0: probe with driver ucan failed with error -71 [ 1159.141515][T32498] netlink: 'syz.3.12007': attribute type 23 has an invalid length. [ 1159.141807][T19976] usb 5-1: USB disconnect, device number 65 [ 1159.156494][T32497] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1159.156525][T32497] hpfs: filesystem error: improperly stopped [ 1159.156539][T32497] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1159.156552][T32497] hpfs: You really don't want any checks? You are crazy... [ 1159.156564][T32497] hpfs: Code page index out of array [ 1159.156572][T32497] hpfs: code page support is disabled [ 1159.156950][T32497] hpfs: hpfs_map_4sectors(): unaligned read [ 1159.304374][T32497] hpfs: hpfs_map_4sectors(): unaligned read [ 1159.304392][T32497] hpfs: filesystem error: unable to find root dir [ 1159.565706][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1159.653009][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1159.730696][ T3388] hsr_slave_0: left promiscuous mode [ 1159.782815][ T3388] hsr_slave_1: left promiscuous mode [ 1159.788813][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.979012][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.379542][ T202] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1160.577653][ T202] usb 4-1: Using ep0 maxpacket: 32 [ 1160.602400][ T202] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1160.602427][ T202] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1160.602446][ T202] usb 4-1: config 0 has no interface number 0 [ 1160.602487][ T202] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1160.605463][ T202] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1160.605492][ T202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.605511][ T202] usb 4-1: Product: syz [ 1160.605525][ T202] usb 4-1: Manufacturer: syz [ 1160.605539][ T202] usb 4-1: SerialNumber: syz [ 1160.744676][ T202] usb 4-1: config 0 descriptor?? [ 1160.794363][ T202] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 1160.794454][ T202] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 1160.945561][T32530] loop4: detected capacity change from 0 to 32768 [ 1160.972556][ T202] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1161.042416][T32530] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1161.161985][T32530] XFS (loop4): Ending clean mount [ 1161.254819][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 1161.388169][ T5591] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1161.436149][ T3388] team0 (unregistering): Port device team_slave_0 removed [ 1161.754816][ T202] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 1161.844766][ T202] usb 4-1: USB disconnect, device number 58 [ 1161.846143][ T202] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 1162.124549][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1162.302956][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1162.948182][T32546] loop3: detected capacity change from 0 to 32768 [ 1163.165388][T32546] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1163.357747][T32546] XFS (loop3): Ending clean mount [ 1163.542371][ T5592] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1163.590642][T31785] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1163.765610][T31785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.800107][T31785] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1164.277943][T31785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1164.320333][T31785] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1164.448357][T32568] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12030'. [ 1164.604417][T31785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1164.611121][T31785] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1164.775072][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1164.803401][T31785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1165.005449][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1165.375322][T32593] loop3: detected capacity change from 0 to 64 [ 1166.387379][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1166.599865][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1166.694410][T31785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.840533][T32610] sg_write: data in/out 437212/170 bytes for SCSI command 0x0-- guessing data in; [ 1166.840533][T32610] program syz.0.12045 not setting count and/or reply_len properly [ 1167.016510][T31785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.020466][ T202] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1167.110854][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.111108][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.196052][ T202] usb 5-1: Using ep0 maxpacket: 16 [ 1167.211134][ T202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.211162][ T202] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.212492][ T202] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1167.212518][ T202] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 1167.212537][ T202] usb 5-1: Manufacturer: syz [ 1167.269889][ T202] usb 5-1: config 0 descriptor?? [ 1167.287674][ T141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.483552][ T141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.910810][ T202] creative-sb0540 0003:041E:3100.0033: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1168.182246][ T5701] usb 5-1: USB disconnect, device number 66 [ 1169.196772][T32642] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12056'. [ 1169.738376][T32646] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12060'. [ 1169.740294][T32646] sch_tbf: peakrate 2 is lower than or equals to rate 50420 ! [ 1170.370343][T32663] tipc: Enabling of bearer rejected, failed to enable media [ 1171.010414][T32677] loop0: detected capacity change from 0 to 736 [ 1171.019420][T25780] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1171.186067][T25780] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1171.186096][T25780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.186115][T25780] usb 5-1: Product: syz [ 1171.186128][T25780] usb 5-1: Manufacturer: syz [ 1171.186141][T25780] usb 5-1: SerialNumber: syz [ 1171.562267][T25780] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1171.562326][T25780] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1171.562347][T25780] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1171.879835][T32677] rock: directory entry would overflow storage [ 1171.879851][T32677] rock: sig=0x3b10, size=4, remaining=3 [ 1171.915541][T25780] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1171.950052][T25780] usb 5-1: USB disconnect, device number 67 [ 1172.109624][T31785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.438235][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1172.500109][T32706] tc_dump_action: action bad kind [ 1172.581557][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1173.535794][T32722] netlink: 'syz.1.12087': attribute type 12 has an invalid length. [ 1173.535816][T32722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12087'. [ 1173.810680][T32701] loop4: detected capacity change from 0 to 32768 [ 1173.976879][T32701] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.12080 (32701) [ 1174.028657][T31785] veth0_vlan: entered promiscuous mode [ 1174.117932][T31785] veth1_vlan: entered promiscuous mode [ 1174.410905][T32739] 9p: Bad value for 'wfdno' [ 1174.621034][T31785] veth0_macvtap: entered promiscuous mode [ 1174.669657][T31785] veth1_macvtap: entered promiscuous mode [ 1174.741761][T32701] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1174.741795][T32701] BTRFS info (device loop4): using crc32c checksum algorithm [ 1174.863288][T32724] loop0: detected capacity change from 0 to 32768 [ 1174.914710][T32742] Invalid ELF header magic: != ELF [ 1174.934009][T32724] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1174.966833][T31785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1175.011680][T32724] XFS (loop0): Ending clean mount [ 1175.048921][T31785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1175.355111][ T3383] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.377521][ T3383] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.399438][ T3383] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.406309][ T3383] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1175.787999][T19976] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1175.789396][ T5594] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1175.982734][T19976] usb 2-1: Using ep0 maxpacket: 8 [ 1175.990099][T19976] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 1175.990127][T19976] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 1175.990148][T19976] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1175.990198][T19976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1175.990222][T19976] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1176.025256][T19976] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 1176.025285][T19976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.025305][T19976] usb 2-1: Product: syz [ 1176.025319][T19976] usb 2-1: Manufacturer: syz [ 1176.025333][T19976] usb 2-1: SerialNumber: syz [ 1176.459421][T19976] usb 2-1: config 0 descriptor?? [ 1176.828829][T19976] hub 2-1:0.0: bad descriptor, ignoring hub [ 1176.828863][T19976] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1176.903066][T19976] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input50 [ 1177.213981][T19976] usb 2-1: USB disconnect, device number 82 [ 1177.697746][T32745] loop3: detected capacity change from 0 to 32768 [ 1178.278621][T32745] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop3": -EINTR [ 1179.679766][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1179.703099][T32701] BTRFS error (device loop4): open_ctree failed: -4 [ 1180.445611][ T3388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.445630][ T3388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.449816][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1180.641350][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1180.643276][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1180.862325][ T323] loop0: detected capacity change from 0 to 64 [ 1181.062919][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1181.141126][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1181.560822][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1181.606037][ T332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12105'. [ 1181.805061][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1181.839828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.839849][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.126847][ T343] loop0: detected capacity change from 0 to 64 [ 1182.342488][ T353] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12111'. [ 1182.842708][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1182.898916][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1182.990711][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1183.041951][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1183.045472][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1183.445633][ T343] hfs: get root inode failed [ 1183.456437][ T343] Flush: task=syz.0.12106[343] dev=loop0 state=2 [ 1183.762897][ T343] Teardown: task=syz.0.12106[343] dev=loop0 state=2 [ 1185.422757][ T5701] usb 5-1: new low-speed USB device number 68 using dummy_hcd [ 1185.687139][ T5701] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 1185.687176][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1185.687245][ T5701] usb 5-1: New USB device found, idVendor=0dfc, idProduct=010a, bcdDevice= 0.00 [ 1185.687268][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.692750][ T5701] usb 5-1: config 0 descriptor?? [ 1185.693842][ T402] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1185.869883][ T419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12131'. [ 1186.252652][ T5606] Bluetooth: hci3: command tx timeout [ 1186.603187][ T5701] hid-generic 0003:0DFC:010A.0034: unknown main item tag 0x1 [ 1186.603223][ T5701] hid-generic 0003:0DFC:010A.0034: unknown main item tag 0x6 [ 1186.603260][ T5701] hid-generic 0003:0DFC:010A.0034: unknown main item tag 0x4 [ 1186.709696][ T5701] hid-generic 0003:0DFC:010A.0034: hidraw0: USB HID v0.81 Device [HID 0dfc:010a] on usb-dummy_hcd.4-1/input0 [ 1186.727471][ T5701] usb 5-1: USB disconnect, device number 68 [ 1186.733256][ T433] loop0: detected capacity change from 0 to 64 [ 1187.223452][ T5693] Flush: task=udevd[5693] dev=loop0 state=2 [ 1187.267030][ T437] fido_id[437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1187.502811][ T5693] Teardown: task=udevd[5693] dev=loop0 state=2 [ 1188.084275][ T452] loop4: detected capacity change from 0 to 1024 [ 1188.500949][ T5606] Bluetooth: hci3: command tx timeout [ 1189.272429][ T459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12145'. [ 1189.705873][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1190.038779][ T459] macsec3: entered promiscuous mode [ 1190.061681][ T459] macsec3: entered allmulticast mode [ 1190.064797][ T459] 8021q: adding VLAN 0 to HW filter on device macsec3 [ 1190.066374][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1190.751830][ T5606] Bluetooth: hci3: command tx timeout [ 1191.090234][ T356] virt_wifi0 speed is unknown, defaulting to 1000 [ 1191.350106][ T482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.456858][ T477] loop0: detected capacity change from 0 to 32768 [ 1192.464709][ T477] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.12149 (477) [ 1192.740759][ T477] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1192.740792][ T477] BTRFS info (device loop0): using crc32c checksum algorithm [ 1193.008572][ T5606] Bluetooth: hci3: command tx timeout [ 1193.501087][ T477] BTRFS info (device loop0): enabling ssd optimizations [ 1193.501116][ T477] BTRFS info (device loop0): turning on flush-on-commit [ 1193.501134][ T477] BTRFS info (device loop0): turning on async discard [ 1193.501149][ T477] BTRFS info (device loop0): enabling free space tree [ 1193.501166][ T477] BTRFS info (device loop0): enabling auto defrag [ 1193.501185][ T477] BTRFS info (device loop0): use lzo compression, level 1 [ 1193.501205][ T477] BTRFS info (device loop0): max_inline set to 4096 [ 1194.064936][ T38] audit: type=1800 audit(2000000184.290:814): pid=477 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.0.12149" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 1194.501578][ T3383] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.137132][ T5594] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1195.217444][ T356] lo speed is unknown, defaulting to 1000 [ 1195.382938][ T549] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1195.901866][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1196.254606][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1196.723043][ T573] binder: 572:573 unknown command 0 [ 1196.723062][ T573] binder: 572:573 ioctl c0306201 200000000340 returned -22 [ 1197.575937][ T3383] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.383502][ T600] loop3: detected capacity change from 0 to 32768 [ 1198.550531][ T600] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1198.550554][ T600] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1199.052362][ T600] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 18 (type: exp=5, found=4), function = gfs2_meta_buffer, file = fs/gfs2/meta_io.c, line = 460 [ 1199.052407][ T600] CPU: 0 UID: 0 PID: 600 Comm: syz.3.12192 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1199.052436][ T600] Tainted: [L]=SOFTLOCKUP [ 1199.052443][ T600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1199.052455][ T600] Call Trace: [ 1199.052463][ T600] [ 1199.052472][ T600] dump_stack_lvl+0xe8/0x150 [ 1199.052507][ T600] gfs2_withdraw+0xc3/0x1b0 [ 1199.052531][ T600] gfs2_meta_buffer+0x250/0x2e0 [ 1199.052567][ T600] __gfs2_iomap_get+0x752/0x1840 [ 1199.052624][ T600] ? __pfx___gfs2_iomap_get+0x10/0x10 [ 1199.052656][ T600] ? rcu_is_watching+0x15/0xb0 [ 1199.052693][ T600] gfs2_block_map+0x29c/0x6f0 [ 1199.052736][ T600] ? __pfx_gfs2_block_map+0x10/0x10 [ 1199.052764][ T600] ? out_of_line_wait_on_bit+0x13b/0x190 [ 1199.052797][ T600] ? __pfx_bit_wait_io+0x10/0x10 [ 1199.052827][ T600] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 1199.052861][ T600] ? __pfx_wake_bit_function+0x10/0x10 [ 1199.052907][ T600] ? __pfx_set_normalized_timespec64+0x10/0x10 [ 1199.052942][ T600] gfs2_write_alloc_required+0x3b2/0x690 [ 1199.052979][ T600] ? __pfx_gfs2_write_alloc_required+0x10/0x10 [ 1199.053054][ T600] ? __pfx_wake_bit_function+0x10/0x10 [ 1199.053095][ T600] gfs2_jdesc_check+0x210/0x2f0 [ 1199.053127][ T600] init_journal+0xcc3/0x2330 [ 1199.053160][ T600] ? init_inodes+0xdb/0x320 [ 1199.053184][ T600] ? __pfx_init_journal+0x10/0x10 [ 1199.053205][ T600] ? vsnprintf+0xe42/0xef0 [ 1199.053240][ T600] ? snprintf+0xe8/0x140 [ 1199.053267][ T600] ? init_inodes+0xdb/0x320 [ 1199.053287][ T600] ? __pfx_snprintf+0x10/0x10 [ 1199.053315][ T600] ? gfs2_glock_nq_num+0x13d/0x170 [ 1199.053350][ T600] init_inodes+0xdb/0x320 [ 1199.053373][ T600] gfs2_fill_super+0x1982/0x20f0 [ 1199.053404][ T600] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1199.053421][ T600] ? rt_spin_unlock+0x157/0x200 [ 1199.053454][ T600] ? init_locking+0xb8/0x210 [ 1199.053473][ T600] ? sb_set_blocksize+0x11b/0x210 [ 1199.053511][ T600] ? setup_bdev_super+0x586/0x680 [ 1199.053545][ T600] get_tree_bdev_flags+0x430/0x4f0 [ 1199.053577][ T600] ? __pfx_gfs2_fill_super+0x10/0x10 [ 1199.053598][ T600] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1199.053631][ T600] ? rcu_is_watching+0x15/0xb0 [ 1199.053671][ T600] gfs2_get_tree+0x51/0x1e0 [ 1199.053696][ T600] vfs_get_tree+0x92/0x2a0 [ 1199.053728][ T600] do_new_mount+0x319/0xdc0 [ 1199.053753][ T600] ? cap_capable+0x123/0x460 [ 1199.053795][ T600] ? __pfx_do_new_mount+0x10/0x10 [ 1199.053822][ T600] ? ns_capable+0x89/0xe0 [ 1199.053850][ T600] ? path_mount+0x647/0x1050 [ 1199.053878][ T600] ? user_path_at+0xd4/0x160 [ 1199.053908][ T600] __se_sys_mount+0x31d/0x420 [ 1199.053944][ T600] ? __pfx___se_sys_mount+0x10/0x10 [ 1199.053974][ T600] ? __x64_sys_mount+0x20/0xc0 [ 1199.054001][ T600] do_syscall_64+0x17b/0x530 [ 1199.054031][ T600] ? irqentry_exit+0x10f/0x8f0 [ 1199.054067][ T600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.054089][ T600] ? clear_bhb_loop+0x40/0x90 [ 1199.054116][ T600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.054137][ T600] RIP: 0033:0x7f4570d4f0ca [ 1199.054158][ T600] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.054177][ T600] RSP: 002b:00007f456efa5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1199.054199][ T600] RAX: ffffffffffffffda RBX: 00007f456efa5ee0 RCX: 00007f4570d4f0ca [ 1199.054213][ T600] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f456efa5ea0 [ 1199.054227][ T600] RBP: 00002000000124c0 R08: 00007f456efa5ee0 R09: 0000000000000000 [ 1199.054240][ T600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 1199.054253][ T600] R13: 00007f456efa5ea0 R14: 0000000000012620 R15: 0000200000000180 [ 1199.054286][ T600] [ 1199.054325][ T600] gfs2: fsid=syz:syz.0: G: s:SH n:2/12 f:aqo t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1199.054357][ T600] gfs2: fsid=syz:syz.0: H: s:SH f:eEcH e:0 p:0 [(none)] init_inodes+0xdb/0x320 [ 1199.054388][ T600] gfs2: fsid=syz:syz.0: I: n:1/18 t:8 f:0x00 d:0x00000200 s:8388608 p:0 [ 1199.054470][ T600] gfs2: fsid=syz:syz.0: my journal (0) is bad: -5 [ 1199.362460][ T600] Flush: task=syz.3.12192[600] dev=loop3 state=2 [ 1199.477081][ T617] loop4: detected capacity change from 0 to 512 [ 1199.914869][ T600] Teardown: task=syz.3.12192[600] dev=loop3 state=2 [ 1200.071417][ T617] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.12197: corrupted inode contents [ 1200.071454][ T617] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1200.075313][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1200.075335][ C0] EXT4-fs (loop4): initial error at time 2000000189: ext4_do_update_inode:5742: inode 16 [ 1200.075364][ C0] EXT4-fs (loop4): last error at time 2000000189: ext4_do_update_inode:5742: inode 16 [ 1200.086578][ T617] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #16: comm syz.4.12197: mark_inode_dirty error [ 1200.086609][ T617] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1200.136252][ T617] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.12197: corrupted inode contents [ 1200.136298][ T617] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1200.136879][ T617] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.12197: mark_inode_dirty error [ 1200.136904][ T617] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1200.137384][ T617] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.12197: corrupted inode contents [ 1200.137407][ T617] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1200.138360][ T617] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 1200.138384][ T617] loop4: lost filesystem error report for type 5 error -117 [ 1200.138822][ T617] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #16: comm syz.4.12197: corrupted inode contents [ 1200.138848][ T617] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1200.139264][ T617] EXT4-fs error (device loop4): ext4_truncate:4691: inode #16: comm syz.4.12197: mark_inode_dirty error [ 1200.139289][ T617] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1200.139707][ T617] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 1200.139727][ T617] loop4: lost filesystem error report for type 5 error -117 [ 1200.193082][ T617] EXT4-fs (loop4): 1 truncate cleaned up [ 1200.207382][ T617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1200.207528][ T617] ext4 filesystem being mounted at /2400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1200.406891][ T3383] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.591010][ T167] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1200.591134][ T167] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 1200.601648][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1200.783820][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1201.047642][ T636] loop3: detected capacity change from 0 to 512 [ 1201.108454][ T636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1201.290661][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1201.302067][ T636] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 1201.542090][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.639855][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1201.799666][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1201.929909][T30494] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1202.102041][T30494] usb 5-1: Using ep0 maxpacket: 16 [ 1202.152024][T30494] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 1202.152059][T30494] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1202.152091][T30494] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1202.152114][T30494] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.194095][T30494] usb 5-1: config 0 descriptor?? [ 1202.195465][ T648] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1202.570689][ T3383] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.661687][T30494] corsair 0003:1B1C:1B3E.0035: unknown main item tag 0x2 [ 1202.662714][T30494] corsair 0003:1B1C:1B3E.0035: unknown main item tag 0x6 [ 1202.662794][T30494] corsair 0003:1B1C:1B3E.0035: ignoring exceeding usage max [ 1202.784863][T30494] corsair 0003:1B1C:1B3E.0035: hidraw0: USB HID v40.81 Device [HID 1b1c:1b3e] on usb-dummy_hcd.4-1/input0 [ 1202.890041][T30494] usb 5-1: USB disconnect, device number 69 [ 1203.046670][ T677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12222'. [ 1203.048677][ T677] netlink: 'syz.1.12222': attribute type 22 has an invalid length. [ 1203.048697][ T677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12222'. [ 1203.075248][ T673] fido_id[673]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1203.724376][ T696] loop0: detected capacity change from 0 to 4096 [ 1203.811288][ T701] loop3: detected capacity change from 0 to 256 [ 1203.878617][ T696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.056796][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1204.201240][ T5594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.216691][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1204.419760][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1204.573412][ T714] loop3: detected capacity change from 0 to 512 [ 1204.576150][ T714] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1204.630121][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1204.695137][ T714] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1204.736712][ T714] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 1204.886046][ T714] EXT4-fs error (device loop3): __ext4_add_entry:2412: inode #2: comm syz.3.12238: Directory hole found for htree leaf block 0 [ 1204.889551][ T714] EXT4-fs (loop3): Remounting filesystem read-only [ 1205.318190][ T726] netlink: 'syz.4.12243': attribute type 3 has an invalid length. [ 1205.355383][ T5592] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1205.561239][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1205.688555][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1205.702374][ T734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12247'. [ 1206.060230][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.060539][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 1206.060839][ T356] bridge_slave_0: entered allmulticast mode [ 1206.073339][ T356] bridge_slave_0: entered promiscuous mode [ 1206.146420][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.146708][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 1206.147007][ T356] bridge_slave_1: entered allmulticast mode [ 1206.164168][ T356] bridge_slave_1: entered promiscuous mode [ 1206.630212][ T759] netlink: 666 bytes leftover after parsing attributes in process `syz.3.12258'. [ 1206.860564][T25780] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1207.055034][T25780] usb 5-1: Using ep0 maxpacket: 8 [ 1207.088963][T25780] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 1207.094496][T25780] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1207.094526][T25780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.094547][T25780] usb 5-1: Product: syz [ 1207.094561][T25780] usb 5-1: Manufacturer: syz [ 1207.094574][T25780] usb 5-1: SerialNumber: syz [ 1207.103149][T25780] usb 5-1: config 0 descriptor?? [ 1207.184183][T25780] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1207.184248][T25780] usb 5-1: setting power ON [ 1207.184274][T25780] dvb-usb: bulk message failed: -22 (2/0) [ 1207.318532][ T356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1207.350219][T25780] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1207.356252][T25780] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1207.356301][T25780] usb 5-1: media controller created [ 1207.520530][ T777] loop3: detected capacity change from 0 to 256 [ 1207.530184][T25780] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1207.637384][ T777] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 1207.749498][T25780] usb 5-1: selecting invalid altsetting 6 [ 1207.749520][T25780] usb 5-1: digital interface selection failed (-22) [ 1207.749546][T25780] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1207.753669][T25780] usb 5-1: setting power OFF [ 1207.753694][T25780] dvb-usb: bulk message failed: -22 (2/0) [ 1207.753711][T25780] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1207.753727][T25780] (NULL device *): no alternate interface [ 1207.839698][ T356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1207.850022][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1207.941632][T25780] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1207.961956][T25780] usb 5-1: USB disconnect, device number 70 [ 1207.977010][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1208.764075][ T356] team0: Port device team_slave_0 added [ 1208.793542][ T356] team0: Port device team_slave_1 added [ 1209.131536][ T38] audit: type=1326 audit(2000000198.297:815): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=807 comm="syz.3.12280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570d4de59 code=0x7ffc0000 [ 1209.131583][ T38] audit: type=1326 audit(2000000198.297:816): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=807 comm="syz.3.12280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570d4de59 code=0x7ffc0000 [ 1209.131807][ T38] audit: type=1326 audit(2000000198.297:817): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=807 comm="syz.3.12280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4570d4de59 code=0x7ffc0000 [ 1209.147083][ T38] audit: type=1326 audit(2000000198.297:818): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=807 comm="syz.3.12280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570d4de59 code=0x7ffc0000 [ 1209.147137][ T38] audit: type=1326 audit(2000000198.325:819): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=807 comm="syz.3.12280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570d4de59 code=0x7ffc0000 [ 1209.149218][ T38] audit: type=1326 audit(2000000198.325:820): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=807 comm="syz.3.12280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f4570d4de59 code=0x7ffc0000 [ 1209.149269][ T38] audit: type=1326 audit(2000000198.325:821): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=807 comm="syz.3.12280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570d4de59 code=0x7ffc0000 [ 1209.149310][ T38] audit: type=1326 audit(2000000198.325:822): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=807 comm="syz.3.12280" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4570d4de59 code=0x7ffc0000 [ 1209.408421][ T811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12281'. [ 1209.408444][ T811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12281'. [ 1209.408470][ T811] netlink: 'syz.4.12281': attribute type 14 has an invalid length. [ 1209.496824][ T788] loop0: detected capacity change from 0 to 32768 [ 1209.574287][ T788] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1209.631740][ T3383] bridge_slave_1: left allmulticast mode [ 1209.631776][ T3383] bridge_slave_1: left promiscuous mode [ 1209.633857][ T3383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.846294][ T788] XFS (loop0): Ending clean mount [ 1210.416832][ T3383] bridge_slave_0: left allmulticast mode [ 1210.416871][ T3383] bridge_slave_0: left promiscuous mode [ 1210.418247][ T3383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.497791][ T5594] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1210.899352][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1211.238703][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1213.627271][ T855] sock: sock_timestamping_bind_phc: sock not bind to device [ 1214.000898][ T871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12305'. [ 1214.054539][ T873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12306'. [ 1214.054553][ T873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12306'. [ 1214.054569][ T873] netlink: 'syz.1.12306': attribute type 18 has an invalid length. [ 1214.054578][ T873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12306'. [ 1214.155812][ T3383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.264440][ T3383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.309538][ T3383] bond0 (unregistering): Released all slaves [ 1214.315216][ T880] netlink: 240 bytes leftover after parsing attributes in process `syz.0.12309'. [ 1214.772611][ T886] loop0: detected capacity change from 0 to 2048 [ 1215.071222][ T893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1215.071247][ T893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1215.078525][ T886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1215.088413][ T886] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1215.125892][ T356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.125909][ T356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.125936][ T356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.136356][ T356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.136372][ T356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.136399][ T356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.459135][ T5594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1215.778411][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1216.067528][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1216.260077][ T921] loop4: detected capacity change from 0 to 128 [ 1216.262561][ T921] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1216.263514][ T921] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1216.959307][ T167] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1217.151585][ T5591] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1217.170297][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1217.403122][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1217.526286][ T957] loop3: detected capacity change from 0 to 1024 [ 1217.532909][ T954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12327'. [ 1217.657469][ T957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1217.738241][ T957] EXT4-fs error (device loop3): ext4_readdir:265: inode #2: block 16: comm syz.3.12333: path /2505/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1217.808708][ T957] EXT4-fs (loop3): Remounting filesystem read-only [ 1217.878640][ T356] hsr_slave_0: entered promiscuous mode [ 1217.879990][ T356] hsr_slave_1: entered promiscuous mode [ 1217.880939][ T356] debugfs: 'hsr0' already exists in 'hsr' [ 1217.880963][ T356] Cannot create hsr debugfs directory [ 1217.907800][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.022120][ T202] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1218.037560][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1218.089653][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1218.120780][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1218.163150][ T967] loop3: detected capacity change from 0 to 512 [ 1218.199978][ T202] usb 2-1: Using ep0 maxpacket: 16 [ 1218.206651][ T202] usb 2-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1218.206678][ T202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.214525][ T954] veth3: entered allmulticast mode [ 1218.240204][ T202] usb 2-1: config 0 descriptor?? [ 1218.278618][ T967] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1218.278974][ T967] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.12335: corrupted in-inode xattr: e_value size too large [ 1218.279006][ T967] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1218.279358][ T967] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.12335: couldn't read orphan inode 15 (err -117) [ 1218.279393][ T967] loop3: lost filesystem error report for type 5 error -117 [ 1218.345684][ T967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.810620][ T202] elecom 0003:056E:00FD.0036: unknown main item tag 0x4 [ 1218.810644][ T202] elecom 0003:056E:00FD.0036: reserved main item tag 0xd [ 1218.828872][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1218.914448][ T202] elecom 0003:056E:00FD.0036: hidraw0: USB HID v0.09 Device [HID 056e:00fd] on usb-dummy_hcd.1-1/input0 [ 1218.965591][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1219.040124][T19989] usb 2-1: USB disconnect, device number 83 [ 1219.051426][ T976] fido_id[976]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1219.086747][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1219.282119][ T986] loop0: detected capacity change from 0 to 128 [ 1219.396358][ T986] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1219.404369][ T986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1219.514662][ T988] loop3: detected capacity change from 0 to 64 [ 1220.718797][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1220.732624][T16809] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1220.831541][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1220.844625][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1220.895242][T16809] usb 2-1: Using ep0 maxpacket: 32 [ 1220.911538][T16809] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 1220.914243][T16809] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1220.914270][T16809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.914290][T16809] usb 2-1: Product: syz [ 1220.914302][T16809] usb 2-1: Manufacturer: syz [ 1220.914316][T16809] usb 2-1: SerialNumber: syz [ 1221.044407][T16809] usb 2-1: config 0 descriptor?? [ 1221.059457][T16809] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1221.059513][T16809] dvb-usb: bulk message failed: -22 (2/0) [ 1221.079929][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1221.094294][T16809] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1221.095042][T16809] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1221.095097][T16809] usb 2-1: media controller created [ 1221.131755][T16809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1221.386323][ T1012] loop4: detected capacity change from 0 to 512 [ 1221.387562][ T1012] EXT4-fs: Ignoring removed orlov option [ 1221.390732][T16809] usb 2-1: selecting invalid altsetting 7 [ 1221.390750][T16809] cxusb: set interface failed [ 1221.390764][T16809] dvb-usb: bulk message failed: -22 (1/0) [ 1221.747052][T16809] DVB: Unable to find symbol lgdt330x_attach() [ 1221.747069][T16809] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1221.748315][ T1012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1221.748435][ T1012] ext4 filesystem being mounted at /2425/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.303711][T16809] rc_core: IR keymap rc-dvico-portable not found [ 1222.303733][T16809] Registered IR keymap rc-empty [ 1222.710865][T16809] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1222.732359][T16809] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input51 [ 1222.842140][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.858509][T16809] dvb-usb: schedule remote query interval to 100 msecs. [ 1222.858540][T16809] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1222.883971][T16809] usb 2-1: USB disconnect, device number 84 [ 1222.887164][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1223.305967][ T3383] hsr_slave_0: left promiscuous mode [ 1223.312086][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1223.372332][ T3383] hsr_slave_1: left promiscuous mode [ 1223.374691][ T3383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.374936][ T3383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1223.460025][ T3383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1223.460055][ T3383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.536703][T16809] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1223.555003][ T5693] udevd[5693]: setting mode of /dev/bus/usb/002/084 to 020664 failed: No such file or directory [ 1223.555149][ T5693] udevd[5693]: setting owner of /dev/bus/usb/002/084 to uid=0, gid=0 failed: No such file or directory [ 1224.273256][ T1071] loop0: detected capacity change from 0 to 2048 [ 1224.310103][ T1071] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1224.514948][ T5693] Flush: task=udevd[5693] dev=loop0 state=2 [ 1224.576532][ T1075] loop4: detected capacity change from 0 to 128 [ 1224.627065][ T1075] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1224.627550][ T1075] ext4 filesystem being mounted at /2428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1224.765759][ T5693] Teardown: task=udevd[5693] dev=loop0 state=2 [ 1224.899149][ T5591] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1225.025147][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1225.298157][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1225.395174][ T1090] bad cache= option: noneÿÿ [ 1225.395174][ T1090] [ 1225.399862][ T1090] CIFS: VFS: bad cache= option: noneÿÿ [ 1225.464269][ T3383] veth1_macvtap: left promiscuous mode [ 1225.520048][ T3383] veth0_macvtap: left promiscuous mode [ 1225.520500][ T3383] veth1_vlan: left promiscuous mode [ 1225.521862][ T3383] veth0_vlan: left promiscuous mode [ 1225.754528][ T1099] loop4: detected capacity change from 0 to 512 [ 1225.807136][ T1099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1225.830873][ T1098] loop0: detected capacity change from 0 to 4096 [ 1225.840303][ T1098] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1226.063307][ T1098] ntfs3(loop0): ino=19, mi_enum_attr [ 1226.063357][ T1098] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1226.065109][ T1098] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1226.414998][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1226.509292][ T5693] Flush: task=udevd[5693] dev=loop0 state=2 [ 1226.676857][ T1104] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1226.685603][ T5693] Teardown: task=udevd[5693] dev=loop0 state=2 [ 1226.727254][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1226.842894][ T1104] [U] J"—E:ÀÆ" [ 1226.884495][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1226.896207][ T1104] [U] *~›"ÁÝÏCǘB³Ü¼ÇÌ‘•WØ ‚<Ô_À ª‡Ó [ 1227.974331][ T3383] team0 (unregistering): Port device team_slave_1 removed [ 1228.037559][ T3383] team0 (unregistering): Port device team_slave_0 removed [ 1228.271932][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1228.458455][ T1111] loop3: detected capacity change from 0 to 8 [ 1228.770368][T16809] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1228.869681][ T1111] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1228.869705][ T1111] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1228.943443][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1228.964131][T16809] usb 2-1: Using ep0 maxpacket: 16 [ 1228.966430][T16809] usb 2-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1228.966462][T16809] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1228.969083][T16809] usb 2-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.40 [ 1228.969112][T16809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.969131][T16809] usb 2-1: Product: syz [ 1228.969145][T16809] usb 2-1: Manufacturer: syz [ 1228.969159][T16809] usb 2-1: SerialNumber: syz [ 1229.229946][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1229.550595][T16809] usbhid 2-1:1.0: can't add hid device: -71 [ 1229.550707][T16809] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1229.585361][T16809] usb 2-1: USB disconnect, device number 85 [ 1230.689625][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1231.645851][ T1179] netlink: 'syz.1.12404': attribute type 22 has an invalid length. [ 1231.645872][ T1179] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12404'. [ 1232.014719][ T1194] loop3: detected capacity change from 0 to 64 [ 1232.974335][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1233.031690][ T1209] binder: 1208:1209 ioctl c018620c 0 returned -14 [ 1233.069098][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1234.554512][ T1252] loop4: detected capacity change from 0 to 256 [ 1235.172688][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1235.375997][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1235.819900][ T1253] gretap0: entered promiscuous mode [ 1235.820697][ T1253] vlan2: entered promiscuous mode [ 1236.006938][ T1296] loop0: detected capacity change from 0 to 512 [ 1236.009877][ T1296] EXT4-fs: Ignoring removed orlov option [ 1236.009907][ T1296] EXT4-fs: Ignoring removed mblk_io_submit option [ 1236.133986][ T1296] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.12446: corrupted in-inode xattr: e_value size too large [ 1236.134021][ T1296] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1236.143309][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1236.143330][ C0] EXT4-fs (loop0): initial error at time 2000000223: ext4_iget_extra_inode:5180: inode 15 [ 1236.143353][ C0] EXT4-fs (loop0): last error at time 2000000223: ext4_iget_extra_inode:5180: inode 15 [ 1236.209740][ T1296] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.12446: couldn't read orphan inode 15 (err -117) [ 1236.209775][ T1296] loop0: lost filesystem error report for type 5 error -117 [ 1236.235079][ T1296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1236.385151][ T5594] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.514337][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1236.582521][ T1304] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12448'. [ 1236.657419][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1236.895794][ T1315] loop3: detected capacity change from 0 to 64 [ 1237.291464][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1237.428791][ T1328] loop4: detected capacity change from 0 to 512 [ 1237.509595][ T1328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1237.509724][ T1328] ext4 filesystem being mounted at /2456/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1237.818284][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1237.985393][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.072500][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1238.170912][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1238.196134][ T1337] loop0: detected capacity change from 0 to 128 [ 1238.288624][ T1343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12458'. [ 1238.505443][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1238.653662][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1238.754383][ T1355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12466'. [ 1240.151960][ T1391] loop0: detected capacity change from 0 to 2048 [ 1240.156313][ T1391] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1240.161596][ T1391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1240.830805][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1241.015945][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1241.899304][T25780] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1242.038389][ T1436] loop0: detected capacity change from 0 to 4096 [ 1242.042265][ T1436] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1242.087553][T25780] usb 2-1: config 150 has an invalid interface number: 204 but max is 2 [ 1242.087582][T25780] usb 2-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1242.087601][T25780] usb 2-1: config 150 has no interface number 0 [ 1242.087628][T25780] usb 2-1: config 150 interface 204 has no altsetting 0 [ 1242.109239][T25780] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1242.109269][T25780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.109288][T25780] usb 2-1: Product: syz [ 1242.109302][T25780] usb 2-1: Manufacturer: syz [ 1242.109316][T25780] usb 2-1: SerialNumber: syz [ 1242.438534][ T1436] ntfs3(loop0): Failed to initialize $Extend/$Reparse. [ 1242.685508][T25780] xr_serial 2-1:150.204: skipping garbage [ 1242.685563][T25780] xr_serial 2-1:150.204: xr_serial converter detected [ 1242.688824][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1242.797749][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1243.068513][T25780] xr_serial ttyUSB0: Failed to set reg 0x0c: -71 [ 1243.069207][T25780] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1243.101429][T25780] usb 2-1: USB disconnect, device number 86 [ 1243.358119][T25780] xr_serial 2-1:150.204: device disconnected [ 1243.785328][ T1448] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1245.090461][ T1472] loop4: detected capacity change from 0 to 32768 [ 1245.133686][ T1497] batadv0: left promiscuous mode [ 1245.133713][ T1497] batadv0: left allmulticast mode [ 1245.183788][ T356] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1245.228555][ T1472] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1245.341096][ T1472] XFS (loop4): Ending clean mount [ 1245.656751][ T356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1245.671176][ T1512] tipc: Started in network mode [ 1245.671205][ T1512] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1245.697400][ T5591] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1245.698136][ T1512] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1245.699224][ T1512] tipc: Enabled bearer , priority 10 [ 1245.699654][ T356] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1246.054485][ T356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1246.073884][ T1525] loop0: detected capacity change from 0 to 512 [ 1246.254821][ T1525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12518'. [ 1246.265157][ T1525] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12518'. [ 1246.265182][ T1525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12518'. [ 1246.510088][ T356] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1246.896210][ T5594] Flush: task=syz-executor[5594] dev=loop0 state=2 [ 1247.088715][ T356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1247.095270][T16809] tipc: Node number set to 1 [ 1247.173579][ T5594] Teardown: task=syz-executor[5594] dev=loop0 state=2 [ 1247.182127][ T356] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1247.376430][ T1540] loop3: detected capacity change from 0 to 512 [ 1247.379832][ T1540] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1247.441298][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1247.610933][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1247.620674][ T1540] EXT4-fs (loop3): 1 truncate cleaned up [ 1247.623452][ T1540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1247.689188][ T356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1247.858304][ T5592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1247.906607][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1248.103738][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1248.229637][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1248.236040][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1248.256961][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1248.270219][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1248.743659][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1249.068731][ T1566] vimc link validate: Scaler:src:16x16 (0x33424752, 7, 0, 1, 7) RGB/YUV Capture:snk:128x16 (0x30314142, 4, 0, 0, 0) [ 1249.790288][ T202] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1249.952121][ T202] usb 4-1: Using ep0 maxpacket: 16 [ 1249.954286][ T202] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 1249.958013][ T202] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1249.958041][ T202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.958059][ T202] usb 4-1: Product: syz [ 1249.958072][ T202] usb 4-1: Manufacturer: syz [ 1249.958085][ T202] usb 4-1: SerialNumber: syz [ 1250.033088][ T202] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1250.033114][ T202] r8152-cfgselector 4-1: config 0 descriptor?? [ 1250.384742][ T202] r8152-cfgselector 4-1: Needed 1 retries to read version [ 1250.579375][ T1591] loop4: detected capacity change from 0 to 4096 [ 1250.580663][ T1591] EXT4-fs: Ignoring removed orlov option [ 1250.583577][ T1591] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1250.627364][ T1591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1250.673462][ T202] r8152-cfgselector 4-1: USB disconnect, device number 59 [ 1250.841107][ T5611] Bluetooth: hci5: command tx timeout [ 1250.865231][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.131500][ T5693] Flush: task=udevd[5693] dev=loop4 state=2 [ 1251.257758][ T5693] Teardown: task=udevd[5693] dev=loop4 state=2 [ 1251.334631][ T1605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12544'. [ 1251.575560][ T1610] sctp: [Deprecated]: syz.1.12547 (pid 1610) Use of int in max_burst socket option deprecated. [ 1251.575560][ T1610] Use struct sctp_assoc_value instead [ 1251.582088][ T1550] virt_wifi0 speed is unknown, defaulting to 1000 [ 1251.641840][ T1613] loop4: detected capacity change from 0 to 512 [ 1251.698638][ T1550] lo speed is unknown, defaulting to 1000 [ 1251.726173][ T1613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0002] [ 1251.726296][ T1613] System zones: 1-12 [ 1251.775944][ T1613] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.12548: error while reading EA inode 32 err=-116 [ 1251.775982][ T1613] loop4: lost filesystem error report for type 5 error -117 [ 1251.782401][ T1613] EXT4-fs (loop4): Remounting filesystem read-only [ 1251.782401][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1251.782423][ C0] EXT4-fs (loop4): initial error at time 2000000237: ext4_xattr_inode_iget:446 [ 1251.782445][ C0] EXT4-fs (loop4): last error at time 2000000237: ext4_xattr_inode_iget:446 [ 1251.782489][ T1613] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 1251.782591][ T1613] EXT4-fs (loop4): 1 orphan inode deleted [ 1251.823940][ T1613] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.041342][ T5591] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1252.172683][ T1611] loop3: detected capacity change from 0 to 32768 [ 1252.217206][ T5591] Flush: task=syz-executor[5591] dev=loop4 state=2 [ 1252.381007][ T1611] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1252.465789][ T5591] Teardown: task=syz-executor[5591] dev=loop4 state=2 [ 1252.725365][ T1624] netlink: 248 bytes leftover after parsing attributes in process `syz.4.12550'. [ 1253.089159][ T5611] Bluetooth: hci5: command tx timeout [ 1253.146978][ T1632] openvswitch: netlink: Actions may not be safe on all matching packets [ 1253.283012][ T1636] xt_socket: unknown flags 0xe4 [ 1253.566437][ T5592] ocfs2: Unmounting device (7,3) on (node local) [ 1253.650473][ T5592] Flush: task=syz-executor[5592] dev=loop3 state=2 [ 1253.699545][ T38] audit: type=1326 audit(2000000239.422:823): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1639 comm="syz.1.12561" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde2e1de59 code=0x7ffc0000 [ 1253.700127][ T38] audit: type=1326 audit(2000000239.422:824): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1639 comm="syz.1.12561" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde2e1de59 code=0x7ffc0000 [ 1253.700395][ T38] audit: type=1326 audit(2000000239.422:825): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1639 comm="syz.1.12561" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde2e1de59 code=0x7ffc0000 [ 1253.788035][ T38] audit: type=1326 audit(2000000239.505:826): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1639 comm="syz.1.12561" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efde2e1de59 code=0x7ffc0000 [ 1253.788102][ T38] audit: type=1326 audit(2000000239.514:827): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1639 comm="syz.1.12561" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde2e1de59 code=0x7ffc0000 [ 1253.788143][ T38] audit: type=1326 audit(2000000239.514:828): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1639 comm="syz.1.12561" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde2e1de59 code=0x7ffc0000 [ 1253.788656][ T38] audit: type=1326 audit(2000000239.514:829): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1639 comm="syz.1.12561" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efde2e1de59 code=0x7ffc0000 [ 1253.788869][ T38] audit: type=1326 audit(2000000239.514:830): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=1639 comm="syz.1.12561" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efde2e1de59 code=0x7ffc0000 [ 1253.845560][ T5592] Teardown: task=syz-executor[5592] dev=loop3 state=2 [ 1254.467684][ T1656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12567'. [ 1255.210093][ T1666] xt_socket: unknown flags 0x50 [ 1255.348166][ T1670] loop4: detected capacity change from 0 to 512 [ 1255.349155][ T1670] EXT4-fs: Ignoring removed orlov option [ 1255.353975][ T5611] Bluetooth: hci5: command tx timeout [ 1255.381042][ T1670] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1255.381172][ T1670] ext4 filesystem being mounted at /2486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1255.421634][ T1669] tipc: Enabling of bearer rejected, failed to enable media [ 1255.560743][ T1677] loop3: detected capacity change from 0 to 164 [ 1255.640860][ T1670] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1255.645893][ T1675] ------------[ cut here ]------------ [ 1255.645905][ T1675] sb_rdonly(sb) [ 1255.645919][ T1675] WARNING: fs/ext4/ext4_jbd2.c:75 at ext4_journal_check_start+0x24f/0x2b0, CPU#0: syz.4.12574/1675 [ 1255.645961][ T1675] Modules linked in: [ 1255.645985][ T1675] CPU: 0 UID: 0 PID: 1675 Comm: syz.4.12574 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1255.646010][ T1675] Tainted: [L]=SOFTLOCKUP [ 1255.646016][ T1675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1255.646029][ T1675] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0 [ 1255.646049][ T1675] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8c 7d cc 08 cc e8 96 b0 47 ff 41 bf fb ff ff ff eb e0 e8 89 b0 47 ff eb d3 e8 82 b0 47 ff 90 <0f> 0b 90 eb c8 e8 77 b0 47 ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85 [ 1255.646066][ T1675] RSP: 0000:ffffc9001c9ff758 EFLAGS: 00010287 [ 1255.646082][ T1675] RAX: ffffffff827dd32e RBX: ffff888039790000 RCX: 0000000000080000 [ 1255.646096][ T1675] RDX: ffffc9000f9fd000 RSI: 0000000000000870 RDI: 0000000000000871 [ 1255.646108][ T1675] RBP: 0000000000000370 R08: 0000000000000000 R09: 0000000000000000 [ 1255.646119][ T1675] R10: dffffc0000000000 R11: ffffed1007ac4881 R12: dffffc0000000000 [ 1255.646134][ T1675] R13: 1ffff110072f2105 R14: ffff888039790828 R15: 0000000000000001 [ 1255.646147][ T1675] FS: 00007fe2210356c0(0000) GS:ffff888125c3c000(0000) knlGS:0000000000000000 [ 1255.646164][ T1675] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1255.646177][ T1675] CR2: 00007f5cfbe25000 CR3: 000000005b450000 CR4: 00000000003526f0 [ 1255.646193][ T1675] Call Trace: [ 1255.646201][ T1675] [ 1255.646214][ T1675] __ext4_journal_start_sb+0x147/0x5d0 [ 1255.646241][ T1675] ext4_file_open+0x770/0xab0 [ 1255.646278][ T1675] ? __pfx_ext4_file_open+0x10/0x10 [ 1255.646314][ T1675] ? rt_spin_unlock+0x157/0x200 [ 1255.646335][ T1675] ? tomoyo_file_open+0x166/0x220 [ 1255.646365][ T1675] ? __pfx_ext4_file_open+0x10/0x10 [ 1255.646391][ T1675] do_dentry_open+0x849/0x1420 [ 1255.646423][ T1675] vfs_open+0x3b/0x350 [ 1255.646440][ T1675] ? path_openat+0x2e4d/0x3850 [ 1255.646479][ T1675] path_openat+0x2e64/0x3850 [ 1255.646576][ T1675] do_file_open+0x23e/0x4a0 [ 1255.646600][ T1675] ? lockdep_hardirqs_on+0x7a/0x110 [ 1255.646659][ T1675] ? __pfx_do_file_open+0x10/0x10 [ 1255.646707][ T1675] ? alloc_fd+0x654/0x6d0 [ 1255.646740][ T1675] do_sys_openat2+0x115/0x200 [ 1255.646763][ T1675] ? __pfx_do_sys_openat2+0x10/0x10 [ 1255.646783][ T1675] ? rcu_is_watching+0x15/0xb0 [ 1255.646809][ T1675] ? kfree+0x4d/0x6c0 [ 1255.646849][ T1675] __x64_sys_openat+0x138/0x170 [ 1255.646874][ T1675] do_syscall_64+0x17b/0x530 [ 1255.646903][ T1675] ? irqentry_exit+0x10f/0x8f0 [ 1255.646930][ T1675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.646950][ T1675] ? clear_bhb_loop+0x40/0x90 [ 1255.646974][ T1675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.646995][ T1675] RIP: 0033:0x7fe222dfde59 [ 1255.647013][ T1675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.647029][ T1675] RSP: 002b:00007fe221035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1255.647049][ T1675] RAX: ffffffffffffffda RBX: 00007fe223086090 RCX: 00007fe222dfde59 [ 1255.647063][ T1675] RDX: 0000000000129080 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1255.647078][ T1675] RBP: 00007fe222e93e6f R08: 0000000000000000 R09: 0000000000000000 [ 1255.647090][ T1675] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 1255.647101][ T1675] R13: 00007fe223086128 R14: 00007fe223086090 R15: 00007ffe5e5b2dd8 [ 1255.647129][ T1675] [ 1255.647147][ T1675] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1255.647167][ T1675] CPU: 0 UID: 0 PID: 1675 Comm: syz.4.12574 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1255.647195][ T1675] Tainted: [L]=SOFTLOCKUP [ 1255.647202][ T1675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1255.647215][ T1675] Call Trace: [ 1255.647224][ T1675] [ 1255.647232][ T1675] vpanic+0x56c/0xa60 [ 1255.647253][ T1675] ? __pfx__printk+0x10/0x10 [ 1255.647276][ T1675] ? __pfx_vpanic+0x10/0x10 [ 1255.647292][ T1675] ? is_bpf_text_address+0x292/0x2b0 [ 1255.647319][ T1675] ? is_bpf_text_address+0x26/0x2b0 [ 1255.647351][ T1675] panic+0xc5/0xd0 [ 1255.647368][ T1675] ? __pfx_panic+0x10/0x10 [ 1255.647402][ T1675] __warn+0x315/0x4c0 [ 1255.647420][ T1675] ? ext4_journal_check_start+0x24f/0x2b0 [ 1255.647444][ T1675] ? ext4_journal_check_start+0x24f/0x2b0 [ 1255.647466][ T1675] __report_bug+0x276/0x570 [ 1255.647499][ T1675] ? ext4_journal_check_start+0x24f/0x2b0 [ 1255.647524][ T1675] ? __pfx___report_bug+0x10/0x10 [ 1255.647551][ T1675] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1255.647573][ T1675] ? preempt_schedule_thunk+0x16/0x40 [ 1255.647594][ T1675] ? ext4_journal_check_start+0x24f/0x2b0 [ 1255.647614][ T1675] report_bug+0x16a/0x220 [ 1255.647641][ T1675] ? ext4_journal_check_start+0x24f/0x2b0 [ 1255.647666][ T1675] ? ext4_journal_check_start+0x251/0x2b0 [ 1255.647683][ T1675] handle_bug+0x9c/0x200 [ 1255.647700][ T1675] exc_invalid_op+0x1a/0x50 [ 1255.647717][ T1675] asm_exc_invalid_op+0x1a/0x20 [ 1255.647733][ T1675] RIP: 0010:ext4_journal_check_start+0x24f/0x2b0 [ 1255.647752][ T1675] Code: 5b 41 5c 41 5d 41 5e 41 5f 5d e9 8c 7d cc 08 cc e8 96 b0 47 ff 41 bf fb ff ff ff eb e0 e8 89 b0 47 ff eb d3 e8 82 b0 47 ff 90 <0f> 0b 90 eb c8 e8 77 b0 47 ff 90 0f 0b 90 43 80 7c 25 00 00 0f 85 [ 1255.647766][ T1675] RSP: 0000:ffffc9001c9ff758 EFLAGS: 00010287 [ 1255.647781][ T1675] RAX: ffffffff827dd32e RBX: ffff888039790000 RCX: 0000000000080000 [ 1255.647794][ T1675] RDX: ffffc9000f9fd000 RSI: 0000000000000870 RDI: 0000000000000871 [ 1255.647807][ T1675] RBP: 0000000000000370 R08: 0000000000000000 R09: 0000000000000000 [ 1255.647819][ T1675] R10: dffffc0000000000 R11: ffffed1007ac4881 R12: dffffc0000000000 [ 1255.647834][ T1675] R13: 1ffff110072f2105 R14: ffff888039790828 R15: 0000000000000001 [ 1255.647855][ T1675] ? ext4_journal_check_start+0x24e/0x2b0 [ 1255.647880][ T1675] ? ext4_journal_check_start+0x24e/0x2b0 [ 1255.647904][ T1675] __ext4_journal_start_sb+0x147/0x5d0 [ 1255.647928][ T1675] ext4_file_open+0x770/0xab0 [ 1255.647964][ T1675] ? __pfx_ext4_file_open+0x10/0x10 [ 1255.647999][ T1675] ? rt_spin_unlock+0x157/0x200 [ 1255.648021][ T1675] ? tomoyo_file_open+0x166/0x220 [ 1255.648050][ T1675] ? __pfx_ext4_file_open+0x10/0x10 [ 1255.648076][ T1675] do_dentry_open+0x849/0x1420 [ 1255.648106][ T1675] vfs_open+0x3b/0x350 [ 1255.648124][ T1675] ? path_openat+0x2e4d/0x3850 [ 1255.648152][ T1675] path_openat+0x2e64/0x3850 [ 1255.648209][ T1675] do_file_open+0x23e/0x4a0 [ 1255.648234][ T1675] ? lockdep_hardirqs_on+0x7a/0x110 [ 1255.648264][ T1675] ? __pfx_do_file_open+0x10/0x10 [ 1255.648312][ T1675] ? alloc_fd+0x654/0x6d0 [ 1255.648341][ T1675] do_sys_openat2+0x115/0x200 [ 1255.648366][ T1675] ? __pfx_do_sys_openat2+0x10/0x10 [ 1255.648385][ T1675] ? rcu_is_watching+0x15/0xb0 [ 1255.648411][ T1675] ? kfree+0x4d/0x6c0 [ 1255.648447][ T1675] __x64_sys_openat+0x138/0x170 [ 1255.648472][ T1675] do_syscall_64+0x17b/0x530 [ 1255.648500][ T1675] ? irqentry_exit+0x10f/0x8f0 [ 1255.648524][ T1675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.648543][ T1675] ? clear_bhb_loop+0x40/0x90 [ 1255.648564][ T1675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.648582][ T1675] RIP: 0033:0x7fe222dfde59 [ 1255.648599][ T1675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.648615][ T1675] RSP: 002b:00007fe221035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1255.648634][ T1675] RAX: ffffffffffffffda RBX: 00007fe223086090 RCX: 00007fe222dfde59 [ 1255.648658][ T1675] RDX: 0000000000129080 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1255.648671][ T1675] RBP: 00007fe222e93e6f R08: 0000000000000000 R09: 0000000000000000 [ 1255.648685][ T1675] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 [ 1255.648697][ T1675] R13: 00007fe223086128 R14: 00007fe223086090 R15: 00007ffe5e5b2dd8 [ 1255.648727][ T1675] [ 1255.650279][ T1675] Kernel Offset: disabled