last executing test programs: 1m48.83665908s ago: executing program 2 (id=1277): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0) 1m48.482983477s ago: executing program 2 (id=1280): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 1m47.592543529s ago: executing program 2 (id=1285): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023893) 1m47.052692605s ago: executing program 2 (id=1287): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1333406, 0x0) 1m46.453712503s ago: executing program 2 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x17987}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4) 1m45.716834378s ago: executing program 2 (id=1299): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2d, &(0x7f0000000140)={0x14, 0xffff, 0xfffffffb}, 0x0) 1m45.165168924s ago: executing program 32 (id=1299): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x2d, &(0x7f0000000140)={0x14, 0xffff, 0xfffffffb}, 0x0) 1m2.220156475s ago: executing program 3 (id=1606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x1c, r1, 0xb29, 0x0, 0x0, {{}, {@val={0x5}, @void}}}, 0x1c}}, 0x2404c044) 1m1.940710208s ago: executing program 3 (id=1608): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}]}]}, 0x50}}, 0x0) 1m1.770293386s ago: executing program 3 (id=1611): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={r1}, &(0x7f0000000780)=ANY=[], 0x0, 0x0) 1m1.459265941s ago: executing program 3 (id=1613): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m1.121138817s ago: executing program 3 (id=1615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 1m0.608795141s ago: executing program 3 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1m0.097106135s ago: executing program 33 (id=1619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 3.048536145s ago: executing program 4 (id=2055): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4004, @broadcast, 'macvlan1\x00'}}, 0x1e) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000240)='\x00W', 0x5ea}], 0x1) 2.924403331s ago: executing program 4 (id=2058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) 2.811931417s ago: executing program 1 (id=2059): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYBLOB="5ebd98d13dff6bef0f0096ce067953fbc3d8258d9cdf31b783566f484e1022ea948041d8a08f4832d16c86111814b6bc69cb82b44be5cd9158167840afc90c60fa9a1373efd470d9dba934c98683fb0dad08fbaf6d41c900b909b9840a9d6f6595fa629e436ffab309e206e506"], 0x1, 0x2c2, &(0x7f00000006c0)="$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") setresuid(0xee00, 0xee00, 0x0) utimensat(r0, 0x0, &(0x7f0000000580), 0x0) 2.770506229s ago: executing program 4 (id=2060): r0 = open(&(0x7f0000000000)='./bus\x00', 0x4141, 0x85) unshare(0x6020400) sendfile(0xffffffffffffffff, r0, 0x0, 0x4000000053d2) 2.53269591s ago: executing program 4 (id=2061): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xc], 0x0, [0x8, 0x4, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0xffff, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x100, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 2.449963774s ago: executing program 1 (id=2063): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, &(0x7f0000000200)="c54c", 0x0, 0x3}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r0, 0x18000000000002a0, 0x42, 0x2f, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x48) 2.212679915s ago: executing program 4 (id=2066): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x601, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 2.183442427s ago: executing program 1 (id=2067): r0 = syz_io_uring_setup(0xaa0, &(0x7f00000001c0)={0x0, 0x6b42, 0x2, 0x1, 0x10e}, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000300)={0x6, 0xffffffffffffffff, 0x5, {0xe}, 0x3}, 0x1) 1.600898534s ago: executing program 5 (id=2069): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000080)={[{@barrier}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x8}}, {@noblock_validity}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) getdents64(r0, 0x0, 0x0) 1.197297233s ago: executing program 0 (id=2071): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x200080c0) 1.099210208s ago: executing program 1 (id=2072): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) sync() 1.095449318s ago: executing program 0 (id=2073): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=cp861,iocharset=cp932,errors=continue,errors=remount-ro,errors=continue,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00'], 0x1, 0x151e, &(0x7f0000007640)="$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") read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 960.920424ms ago: executing program 5 (id=2074): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x20d3, &(0x7f0000000300)=[{&(0x7f0000000400)=""/110, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f00000006c0)=""/118, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x53}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000001fc0)=""/191, 0xffffffffffffff52}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 652.879599ms ago: executing program 5 (id=2075): r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) kcmp(r0, r0, 0x0, r1, r1) 603.595011ms ago: executing program 1 (id=2076): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x8, 0x0, 0x0}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000e5ff000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) 584.303532ms ago: executing program 0 (id=2077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54200010880cc000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff060005000b0a00001400040002000000ac1414aa00000000000000008000098028000080060001000a00000014000200ff02000000000000000000000000000105000300000000001c000080060001000200000008000200e000000105000300000000001c000080060001000a00000008000200e000000205000300010000001c000080060001000200000008000200ac14140005000300000000003000008008000a000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x15c}}, 0x0) 432.714ms ago: executing program 5 (id=2078): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xf, 0x3}, {0x1}, {0x300, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xa, 0x4}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008014}, 0x0) 370.990123ms ago: executing program 0 (id=2079): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000240)) 300.970416ms ago: executing program 1 (id=2080): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 216.6405ms ago: executing program 5 (id=2081): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xa}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@gettaction={0x20, 0x5a, 0xffffffffffffffff, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4000004) 160.289073ms ago: executing program 0 (id=2082): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x2}) 65.609977ms ago: executing program 0 (id=2083): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="520000002300010100020600"/41, 0x29) 228.24µs ago: executing program 4 (id=2084): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f000000ad00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1018056, &(0x7f00000065c0)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff1}}, {@grpquota}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@errors_remount}, {@usrquota}, {@discard_size={'discard', 0x3d, 0x8}}, {@errors_remount}, {@nointegrity}, {@errors_remount}]}, 0x24, 0x6260, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 5 (id=2085): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): peed USB device number 9 using dummy_hcd [ 205.436735][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.498381][ T6470] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 205.555447][ T6470] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 205.597386][ T6470] usb 2-1: config 0 interface 0 has no altsetting 0 [ 205.623869][ T6470] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 205.656077][ T6470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.700545][ T6470] usb 2-1: config 0 descriptor?? [ 205.706468][ T8583] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 205.966119][ T51] Bluetooth: hci2: command tx timeout [ 206.193401][ T6470] kye 0003:0458:501A.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 206.217420][ T6470] kye 0003:0458:501A.000F: unknown main item tag 0x7 [ 206.237698][ T6470] kye 0003:0458:501A.000F: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 206.253192][ T6470] kye 0003:0458:501A.000F: tablet-enabling feature report not found [ 206.263275][ T6470] kye 0003:0458:501A.000F: tablet enabling failed [ 206.499885][ T5776] usb 2-1: USB disconnect, device number 9 [ 206.618730][ T8632] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1179'. [ 206.960550][ T8645] loop2: detected capacity change from 0 to 512 [ 207.044373][ T8645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.048484][ T8646] loop3: detected capacity change from 0 to 4096 [ 207.088301][ T8645] ext4 filesystem being mounted at /356/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.171873][ T8645] EXT4-fs warning (device loop2): ext4_empty_dir:3156: inode #12: comm syz.2.1186: directory missing '..' [ 207.300290][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.530759][ T8663] loop0: detected capacity change from 0 to 64 [ 207.579255][ T8663] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 207.819999][ T8667] loop2: detected capacity change from 0 to 1024 [ 207.910351][ T8667] hfsplus: invalid length 1280 has been corrected to 255 [ 208.114887][ T8674] loop0: detected capacity change from 0 to 256 [ 208.126135][ T27] audit: type=1326 audit(2000000051.122:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.2.1198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743559e159 code=0x7ffc0000 [ 208.158399][ T8674] exfat: Deprecated parameter 'utf8' [ 208.172396][ T8674] exfat: Deprecated parameter 'utf8' [ 208.177870][ T8674] exfat: Deprecated parameter 'namecase' [ 208.189400][ T5782] Bluetooth: hci2: command tx timeout [ 208.195011][ T27] audit: type=1326 audit(2000000051.122:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.2.1198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743559e159 code=0x7ffc0000 [ 208.284344][ T8674] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 208.299685][ T27] audit: type=1326 audit(2000000051.150:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.2.1198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f743559e159 code=0x7ffc0000 [ 208.392425][ T27] audit: type=1326 audit(2000000051.150:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.2.1198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743559e159 code=0x7ffc0000 [ 208.465045][ T27] audit: type=1326 audit(2000000051.150:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.2.1198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743559e159 code=0x7ffc0000 [ 208.490755][ T8677] [U]  [ 208.561979][ T27] audit: type=1326 audit(2000000051.150:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.2.1198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f743559e159 code=0x7ffc0000 [ 208.636725][ T27] audit: type=1326 audit(2000000051.150:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.2.1198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743559e159 code=0x7ffc0000 [ 208.680316][ T8681] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1201'. [ 208.721987][ T27] audit: type=1326 audit(2000000051.150:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8673 comm="syz.2.1198" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f743559e159 code=0x7ffc0000 [ 208.749908][ T8669] loop3: detected capacity change from 0 to 32768 [ 208.891925][ T8669] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.025795][ T8669] XFS (loop3): Ending clean mount [ 209.233231][ T5775] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 209.485354][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 209.489239][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 209.521379][ T6470] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.661132][ T8714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1212'. [ 209.728977][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 209.736830][ T6470] usb 1-1: Using ep0 maxpacket: 32 [ 209.749254][ T6470] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 209.769484][ T6470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.793008][ T6470] usb 1-1: Product: syz [ 209.801861][ T6470] usb 1-1: Manufacturer: syz [ 209.809389][ T6470] usb 1-1: SerialNumber: syz [ 209.822130][ T6470] usb 1-1: config 0 descriptor?? [ 209.837929][ T6470] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 209.867037][ T6470] dvb-usb: bulk message failed: -22 (4/0) [ 209.874411][ T6470] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 209.885549][ T6470] dvb-usb: bulk message failed: -22 (5/0) [ 209.891697][ T6470] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 209.908351][ T6470] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.919494][ T6470] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 209.936433][ T8] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 209.956854][ T6470] usb 1-1: media controller created [ 209.968138][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.969345][ T8722] loop1: detected capacity change from 0 to 2048 [ 210.006785][ T8722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.034023][ T8] usb 3-1: config 0 descriptor?? [ 210.067213][ T8704] ttusb2: i2c rd len=59 too high [ 210.067454][ T8727] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1216'. [ 210.082602][ T8727] openvswitch: netlink: Tunnel attr 255 out of range max 16 [ 210.124766][ T6470] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.233040][ T6470] usb 1-1: selecting invalid altsetting 3 [ 210.238902][ T6470] ttusb2: set interface to alts=3 failed [ 210.266320][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.371277][ T6470] DVB: Unable to find symbol tda10086_attach() [ 210.389103][ T6470] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 210.422017][ T6470] dvb-usb: bulk message failed: -22 (4/0) [ 210.434238][ T6470] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 210.451325][ T6470] dvb-usb: bulk message failed: -22 (5/0) [ 210.458377][ T6470] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 210.475458][ T6470] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 210.495714][ T6470] usb 1-1: USB disconnect, device number 11 [ 210.571130][ T8] hackrf 3-1:0.0: Board ID: 00 [ 210.589374][ T8] hackrf 3-1:0.0: Firmware version: [ 210.644820][ T8] hackrf 3-1:0.0: Registered as swradio24 [ 210.667550][ T6470] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 210.680578][ T8] videodev: could not get a free minor [ 210.681877][ T8734] loop1: detected capacity change from 0 to 512 [ 210.686083][ T8] hackrf 3-1:0.0: Failed to register as video device (-23) [ 210.727271][ T8] hackrf: probe of 3-1:0.0 failed with error -23 [ 210.728062][ T8734] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 210.823477][ T8734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c018, mo2=0002] [ 210.921485][ T9] usb 3-1: USB disconnect, device number 10 [ 210.946320][ T8734] System zones: 1-12 [ 210.981602][ T8734] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1219: bad orphan inode 16 [ 210.996972][ T8734] ext4_test_bit(bit=15, block=4) = 0 [ 211.006250][ T8734] EXT4-fs (loop1): 1 orphan inode deleted [ 211.033193][ T8734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.045390][ T8729] loop3: detected capacity change from 0 to 40427 [ 211.093045][ T8729] F2FS-fs (loop3): invalid crc value [ 211.150274][ T8729] F2FS-fs (loop3): Found nat_bits in checkpoint [ 211.155449][ T8734] EXT4-fs error (device loop1): __ext4_new_inode:1083: comm syz.1.1219: reserved inode found cleared - inode=9 [ 211.272663][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.288523][ T8729] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 211.455990][ T27] audit: type=1800 audit(2000000054.237:79): pid=8729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1217" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 211.505790][ T8729] syz.3.1217: attempt to access beyond end of device [ 211.505790][ T8729] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.589443][ T8729] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 211.925999][ T8755] loop1: detected capacity change from 0 to 4096 [ 212.062874][ T8755] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 212.082761][ T8755] ntfs3: loop1: Failed to load $Extend (-22). [ 212.088926][ T8755] ntfs3: loop1: Failed to initialize $Extend. [ 212.147108][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.187422][ T8759] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 212.194894][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.240814][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.268347][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.279839][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.284732][ T8759] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 212.297420][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.338182][ T8761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.357463][ T8761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.370694][ T8759] ntfs3: loop2: ino=5, "/" directory corrupted [ 212.376980][ T8759] ntfs3: loop2: ino=5, "/" directory corrupted [ 212.416094][ T8761] batadv_slave_1: entered promiscuous mode [ 212.483245][ T8761] batadv_slave_1: left promiscuous mode [ 212.509608][ T8763] set_capacity_and_notify: 1 callbacks suppressed [ 212.509627][ T8763] loop3: detected capacity change from 0 to 256 [ 212.613794][ T8763] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 213.259095][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1238'. [ 213.944164][ T8806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1251'. [ 213.994155][ T23] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 214.090394][ T8812] loop3: detected capacity change from 0 to 512 [ 214.117839][ T8812] EXT4-fs: Ignoring removed nobh option [ 214.225957][ T23] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.236644][ T8812] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 214.282629][ T23] usb 3-1: config 0 has no interface number 0 [ 214.335002][ T23] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 214.368074][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.389413][ T8812] EXT4-fs (loop3): Remounting filesystem read-only [ 214.418260][ T23] usb 3-1: Product: syz [ 214.426477][ T23] usb 3-1: Manufacturer: syz [ 214.430053][ T8812] EXT4-fs (loop3): 1 truncate cleaned up [ 214.442118][ T23] usb 3-1: SerialNumber: syz [ 214.463620][ T23] usb 3-1: config 0 descriptor?? [ 214.476355][ T8812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.478489][ T23] usb 3-1: selecting invalid altsetting 1 [ 214.512145][ T23] dvb_ttusb_budget: ttusb_init_controller: error [ 214.521399][ T23] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 214.535006][ T8828] loop0: detected capacity change from 0 to 2048 [ 214.634313][ T8830] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 214.689239][ T23] DVB: Unable to find symbol stv0299_attach() [ 214.712528][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.809754][ T23] DVB: Unable to find symbol tda8083_attach() [ 214.815916][ T23] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 214.853595][ T23] usb 3-1: USB disconnect, device number 11 [ 215.573600][ T8849] loop1: detected capacity change from 0 to 128 [ 215.599643][ T8849] EXT4-fs: Ignoring removed nobh option [ 215.639213][ T8851] loop2: detected capacity change from 0 to 1024 [ 215.667168][ T8849] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 215.727505][ T8849] ext4 filesystem being mounted at /297/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 215.791199][ T8843] loop3: detected capacity change from 0 to 32768 [ 215.804256][ T8843] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1267 (8843) [ 215.846681][ T8843] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 215.869170][ T8843] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 215.880194][ T8843] BTRFS info (device loop3): using free space tree [ 216.053180][ T8843] BTRFS info (device loop3): enabling ssd optimizations [ 216.068085][ T8839] loop0: detected capacity change from 0 to 40427 [ 216.092870][ T8843] BTRFS info (device loop3): auto enabling async discard [ 216.139893][ T8839] F2FS-fs (loop0): invalid crc value [ 216.174646][ T8839] F2FS-fs (loop0): Found nat_bits in checkpoint [ 216.180022][ T5773] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 216.422655][ T8839] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 216.605916][ T27] audit: type=1800 audit(2000000059.045:80): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1265" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 216.629461][ T5775] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 216.668578][ T8839] syz.0.1265: attempt to access beyond end of device [ 216.668578][ T8839] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 216.702809][ T8882] netlink: 'syz.2.1277': attribute type 2 has an invalid length. [ 216.711178][ T8839] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 216.737631][ T8884] loop1: detected capacity change from 0 to 1024 [ 216.763835][ T8884] EXT4-fs: Ignoring removed bh option [ 216.773252][ T8884] EXT4-fs: Ignoring removed nobh option [ 216.812983][ T8884] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 216.995805][ T8888] loop2: detected capacity change from 0 to 512 [ 217.006063][ T8888] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 217.027948][ T8884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.044655][ T7775] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop3 scanned by udevd (7775) [ 217.078739][ T8888] EXT4-fs error (device loop2): ext4_orphan_get:1434: comm syz.2.1280: bad orphan inode 131083 [ 217.151261][ T8888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.264518][ T27] audit: type=1800 audit(2000000059.663:81): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1280" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 217.288107][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.811176][ T8898] loop1: detected capacity change from 0 to 512 [ 217.818932][ T8898] EXT4-fs: Ignoring removed nobh option [ 217.851430][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.870866][ T27] audit: type=1326 audit(2000000060.234:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 217.957134][ T8898] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 217.977104][ T27] audit: type=1326 audit(2000000060.234:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 218.039796][ T8898] EXT4-fs (loop1): Remounting filesystem read-only [ 218.052064][ T8898] EXT4-fs (loop1): 1 truncate cleaned up [ 218.106844][ T27] audit: type=1326 audit(2000000060.280:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 218.183534][ T8898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.235608][ T27] audit: type=1326 audit(2000000060.280:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 218.246998][ T8905] loop0: detected capacity change from 0 to 4096 [ 218.318494][ T8905] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 218.344627][ T27] audit: type=1326 audit(2000000060.290:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 218.481014][ T27] audit: type=1326 audit(2000000060.290:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 218.497615][ T8909] loop2: detected capacity change from 0 to 164 [ 218.582172][ T27] audit: type=1326 audit(2000000060.290:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 218.616834][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.661637][ T8905] ntfs3: loop0: failed to convert "c46c" to iso8859-3 [ 218.705686][ T27] audit: type=1326 audit(2000000060.290:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8899 comm="syz.3.1284" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 218.942128][ T5774] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 219.017914][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1291'. [ 219.044456][ T5774] ISOFS: unable to read i-node block [ 219.077774][ T5774] ISOFS: unable to read i-node block [ 219.752552][ T8931] loop3: detected capacity change from 0 to 512 [ 219.781250][ T8931] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 219.831352][ T8931] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.862964][ T8931] EXT4-fs (loop3): The Hurd can't support 64-bit file systems [ 220.015815][ T8915] loop1: detected capacity change from 0 to 32768 [ 220.071955][ T1129] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.106347][ T8915] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.230120][ T1129] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.240784][ T8915] XFS (loop1): Ending clean mount [ 220.439457][ T1129] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.459673][ T8946] loop0: detected capacity change from 0 to 128 [ 220.467161][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.512472][ T8946] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 220.534735][ T8946] hpfs: filesystem error: improperly stopped [ 220.543619][ T8946] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 220.556341][ T8946] hpfs: You really don't want any checks? You are crazy... [ 220.565067][ T8946] hpfs: Code page index out of array [ 220.584653][ T8946] hpfs: code page support is disabled [ 220.591784][ T8946] hpfs: hpfs_map_4sectors(): unaligned read [ 220.615426][ T8946] hpfs: hpfs_map_4sectors(): unaligned read [ 220.634583][ T8946] hpfs: filesystem error: unable to find root dir [ 220.651058][ T1129] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.101357][ T8948] loop0: detected capacity change from 0 to 256 [ 221.154368][ T8948] exfat: Deprecated parameter 'namecase' [ 221.233579][ T8948] exfat: Deprecated parameter 'utf8' [ 221.270039][ T8948] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xea424414, utbl_chksum : 0xe619d30d) [ 221.297545][ T1129] tipc: Left network mode [ 221.419504][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.432032][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.443944][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.459439][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.482584][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 221.491083][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.619354][ T8961] loop1: detected capacity change from 0 to 256 [ 221.627117][ T8961] exfat: Deprecated parameter 'utf8' [ 221.632475][ T8961] exfat: Deprecated parameter 'utf8' [ 221.681874][ T8961] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 221.841072][ T8961] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 221.988122][ T8961] exFAT-fs (loop1): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 222.055020][ T8952] lo speed is unknown, defaulting to 1000 [ 222.304288][ T8976] loop3: detected capacity change from 0 to 2048 [ 222.394372][ T8976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.596736][ T8976] EXT4-fs (loop3): stripe (227) is not aligned with cluster size (16), stripe is disabled [ 222.610157][ T8986] nbd: socks must be embedded in a SOCK_ITEM attr [ 222.673263][ T8976] EXT4-fs error (device loop3): __ext4_remount:6756: comm syz.3.1313: Abort forced by user [ 222.738520][ T8976] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 222.911189][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.109662][ T8973] loop0: detected capacity change from 0 to 32768 [ 223.171182][ T8973] (syz.0.1312,8973,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 223.255148][ T8973] (syz.0.1312,8973,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 223.337819][ T8973] JBD2: Ignoring recovery information on journal [ 223.447111][ T8973] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 223.538627][ T8997] loop1: detected capacity change from 0 to 4096 [ 223.664158][ T9001] loop3: detected capacity change from 0 to 4096 [ 223.697353][ T51] Bluetooth: hci3: command tx timeout [ 223.769845][ T8973] ocfs2: Unmounting device (7,0) on (node local) [ 223.789260][ T9001] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 223.865714][ T27] kauditd_printk_skb: 7 callbacks suppressed [ 223.865730][ T27] audit: type=1800 audit(2000000065.846:97): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1318" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 224.288344][ T9015] loop1: detected capacity change from 0 to 512 [ 224.299776][ T9015] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.380748][ T8952] chnl_net:caif_netlink_parms(): no params data found [ 224.418945][ T9015] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.1321: bad orphan inode 131083 [ 224.519065][ T9015] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.674720][ T27] audit: type=1800 audit(2000000066.595:98): pid=9015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1321" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 225.207991][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.221173][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.250744][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.260702][ T8952] bridge_slave_0: entered allmulticast mode [ 225.311546][ T8952] bridge_slave_0: entered promiscuous mode [ 225.318613][ T9040] loop0: detected capacity change from 0 to 1024 [ 225.348618][ T9040] EXT4-fs: Ignoring removed orlov option [ 225.364120][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.395055][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.413729][ T9040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.445168][ T8952] bridge_slave_1: entered allmulticast mode [ 225.466805][ T8952] bridge_slave_1: entered promiscuous mode [ 225.580733][ T9040] EXT4-fs error (device loop0): ext4_lookup:1858: inode #16: comm syz.0.1329: unexpected EA_INODE flag [ 225.745202][ T1129] hsr_slave_0: left promiscuous mode [ 225.763134][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.784336][ T1129] hsr_slave_1: left promiscuous mode [ 225.805508][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.827849][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.850685][ T1129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.869079][ T1129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.891826][ T51] Bluetooth: hci3: command tx timeout [ 225.912921][ T1129] bridge_slave_1: left allmulticast mode [ 225.943725][ T1129] bridge_slave_1: left promiscuous mode [ 225.972117][ T1129] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.016439][ T1129] bridge_slave_0: left allmulticast mode [ 226.030930][ T1129] bridge_slave_0: left promiscuous mode [ 226.045066][ T1129] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.190999][ T1129] dummy0: left promiscuous mode [ 226.206835][ T1129] veth1_macvtap: left promiscuous mode [ 226.223591][ T1129] veth0_macvtap: left promiscuous mode [ 226.234101][ T1129] veth1_vlan: left promiscuous mode [ 226.239942][ T1129] veth0_vlan: left promiscuous mode [ 226.462038][ T9049] loop1: detected capacity change from 0 to 32768 [ 226.474425][ T9049] [ 226.474425][ T9049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.474425][ T9049] [ 226.582861][ T59] ERROR: (device loop1): diWrite: ixpxd invalid [ 226.582861][ T59] [ 226.616410][ T59] ERROR: (device loop1): txCommit: [ 226.616410][ T59] [ 226.638107][ T59] jfs_write_inode: jfs_commit_inode failed! [ 226.649666][ T5773] [ 226.649666][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.649666][ T5773] [ 226.682365][ T5773] [ 226.682365][ T5773] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 226.682365][ T5773] [ 226.746082][ T9047] loop3: detected capacity change from 0 to 40427 [ 226.757288][ T9047] F2FS-fs (loop3): invalid crc value [ 226.811735][ T9047] F2FS-fs (loop3): Found nat_bits in checkpoint [ 227.037590][ T9047] F2FS-fs (loop3): Start checkpoint disabled! [ 227.124541][ T9047] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 227.297088][ T9047] F2FS-fs (loop3): Checkpoint should be enabled. [ 227.518903][ T42] kworker/u4:2: attempt to access beyond end of device [ 227.518903][ T42] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 227.559609][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 227.567160][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 228.115735][ T51] Bluetooth: hci3: command tx timeout [ 228.350000][ T9072] loop1: detected capacity change from 0 to 32768 [ 228.367679][ T1129] team0 (unregistering): Port device team_slave_1 removed [ 228.448262][ T9078] loop3: detected capacity change from 0 to 4096 [ 228.463014][ T9072] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 228.493581][ T9078] NILFS (loop3): invalid segment: Checksum error in segment payload [ 228.519174][ T1129] team0 (unregistering): Port device team_slave_0 removed [ 228.520710][ T9078] NILFS (loop3): trying rollback from an earlier position [ 228.564242][ T9078] NILFS (loop3): recovery complete [ 228.594926][ T9087] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.614164][ T9072] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 228.700482][ T1129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.700541][ T9072] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30 [ 228.739970][ T9072] XFS (loop1): Ending clean mount [ 228.904015][ T1129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.020680][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 229.600352][ T9097] loop1: detected capacity change from 0 to 1024 [ 229.923913][ T1129] bond0 (unregistering): Released all slaves [ 230.102656][ T8952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.137498][ T8952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.307918][ T8952] team0: Port device team_slave_0 added [ 230.338874][ T51] Bluetooth: hci3: command tx timeout [ 230.358688][ T8952] team0: Port device team_slave_1 added [ 230.419171][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.435220][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.512143][ T8952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.530890][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.540076][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.600245][ T8952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.616839][ T5776] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 230.657804][ T23] IPVS: starting estimator thread 0... [ 230.755725][ T9122] IPVS: using max 19 ests per chain, 45600 per kthread [ 230.792685][ T8952] hsr_slave_0: entered promiscuous mode [ 230.842832][ T5776] usb 1-1: not running at top speed; connect to a high speed hub [ 230.863914][ T8952] hsr_slave_1: entered promiscuous mode [ 230.882155][ T5776] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.902786][ T8952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.916339][ T5776] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.917926][ T8952] Cannot create hsr debugfs directory [ 230.925287][ T5776] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 230.969788][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.017543][ T5776] usb 1-1: Found UVC 1.00 device (046d:0825) [ 231.285984][ T9135] loop1: detected capacity change from 0 to 512 [ 231.421332][ T9135] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.1358: bg 0: block 5: invalid block bitmap [ 231.472892][ T5776] usb 1-1: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 231.505538][ T5776] usb 1-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 231.524105][ T9135] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 231.550963][ T9135] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1358: invalid indirect mapped block 3 (level 2) [ 231.559187][ T5776] usb 1-1: No streaming interface found for terminal 2. [ 231.602939][ T5776] usb 1-1: USB disconnect, device number 12 [ 231.635664][ T9135] EXT4-fs (loop1): 1 orphan inode deleted [ 231.664530][ T9135] EXT4-fs (loop1): 1 truncate cleaned up [ 231.701629][ T9135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.891577][ T8952] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.918595][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.934081][ T8952] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.975079][ T8952] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 232.009004][ T8952] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 232.311602][ T8952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.396094][ T8952] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.439737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.447002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.494050][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.501284][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.558581][ T9156] loop3: detected capacity change from 0 to 512 [ 232.614685][ T9156] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 232.647273][ T9156] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.1365: bad orphan inode 131083 [ 232.674571][ T9156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.788292][ T27] audit: type=1800 audit(2000000074.191:99): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1365" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 233.122062][ T5775] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.340005][ T9147] loop1: detected capacity change from 0 to 32768 [ 233.416145][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.431802][ T27] audit: type=1800 audit(2000000074.799:100): pid=9147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1361" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 233.477324][ T9147] read_mapping_page failed! [ 233.484679][ T9147] ERROR: (device loop1): txCommit: [ 233.484679][ T9147] [ 233.543293][ T9158] loop0: detected capacity change from 0 to 32768 [ 233.591379][ T9158] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 233.821454][ T9178] loop3: detected capacity change from 0 to 1024 [ 233.866977][ T9178] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 233.883198][ T5784] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 233.953185][ T9183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1369'. [ 234.296608][ T9192] loop3: detected capacity change from 0 to 128 [ 234.365127][ T9192] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 234.401582][ T9192] hpfs: filesystem error: improperly stopped [ 234.408321][ T9192] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 234.474927][ T9192] hpfs: You really don't want any checks? You are crazy... [ 234.527032][ T9192] hpfs: Code page index out of array [ 234.561516][ T9192] hpfs: code page support is disabled [ 234.567146][ T9192] hpfs: hpfs_map_4sectors(): unaligned read [ 234.595642][ T9192] hpfs: hpfs_map_4sectors(): unaligned read [ 234.630996][ T9192] hpfs: filesystem error: unable to find root dir [ 234.917031][ T8952] veth0_vlan: entered promiscuous mode [ 234.984863][ T8952] veth1_vlan: entered promiscuous mode [ 235.066613][ T8952] veth0_macvtap: entered promiscuous mode [ 235.099193][ T8952] veth1_macvtap: entered promiscuous mode [ 235.156732][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.181528][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.191446][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.224124][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.234032][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.266876][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.290641][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.318589][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.341864][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.351761][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.385561][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.405961][ T8952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.427288][ T8952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.449585][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.478919][ T8952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.491365][ T8952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.500122][ T8952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.529865][ T8952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.693787][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.720398][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.721592][ T9200] loop1: detected capacity change from 0 to 40427 [ 235.736845][ T9200] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 235.746164][ T9200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 235.780702][ T9200] F2FS-fs (loop1): build fault injection attr: rate: 2, type: 0x7ffff [ 235.788966][ T9200] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 235.809971][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.821064][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.834035][ T9200] F2FS-fs (loop1): invalid crc value [ 235.889128][ T9200] F2FS-fs (loop1): Found nat_bits in checkpoint [ 236.146027][ T9200] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 236.172374][ T9200] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 236.728709][ T9244] loop0: detected capacity change from 0 to 1024 [ 236.822310][ T9244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.064126][ T9254] veth1_macvtap: left promiscuous mode [ 237.101638][ T9254] macsec0: entered promiscuous mode [ 237.120569][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.155292][ T9257] veth1_macvtap: entered promiscuous mode [ 237.191448][ T9257] macsec0: left promiscuous mode [ 237.354048][ T9236] loop4: detected capacity change from 0 to 32768 [ 237.438941][ T9236] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 237.754981][ T7775] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 238.132092][ T5818] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 238.360440][ T5818] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.376586][ T5818] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.437009][ T5818] usb 1-1: config 0 interface 0 has no altsetting 0 [ 238.446216][ T5818] usb 1-1: New USB device found, idVendor=04f2, idProduct=0618, bcdDevice= 0.00 [ 238.467005][ T5818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.489830][ T5818] usb 1-1: config 0 descriptor?? [ 238.962866][ T5818] topseed 0003:04F2:0618.0010: unknown main item tag 0x0 [ 239.013844][ T5818] input: HID 04f2:0618 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:04F2:0618.0010/input/input15 [ 239.248429][ T5818] topseed 0003:04F2:0618.0010: input,hidraw0: USB HID v0.40 Device [HID 04f2:0618] on usb-dummy_hcd.0-1/input0 [ 239.313863][ T5818] usb 1-1: USB disconnect, device number 13 [ 239.539411][ T9301] loop3: detected capacity change from 0 to 32768 [ 239.544351][ T9312] fido_id[9312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 239.670053][ T9301] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 239.739481][ T9326] Bluetooth: hci0: unsupported parameter 5135 [ 239.764276][ T9326] Bluetooth: hci0: unsupported parameter 8192 [ 239.783607][ T9326] Bluetooth: hci0: unsupported parameter 5135 [ 239.799843][ T9326] Bluetooth: hci0: unsupported parameter 8192 [ 239.864137][ T9301] XFS (loop3): Ending clean mount [ 240.011079][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 240.066326][ T9339] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1415'. [ 240.234776][ T9342] loop0: detected capacity change from 0 to 512 [ 240.250413][ T9342] EXT4-fs: Ignoring removed oldalloc option [ 240.437052][ T9342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.791355][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.403214][ T9371] program syz.1.1418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.686953][ T9356] loop4: detected capacity change from 0 to 32768 [ 241.720955][ T9356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1412 (9356) [ 241.823294][ T9356] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.868150][ T9356] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 241.902101][ T9356] BTRFS info (device loop4): using free space tree [ 242.194215][ T9356] BTRFS info (device loop4): enabling ssd optimizations [ 242.242367][ T9356] BTRFS info (device loop4): auto enabling async discard [ 242.632664][ T8952] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 242.806019][ T9424] loop0: detected capacity change from 0 to 256 [ 242.815327][ T9424] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 242.849297][ T9424] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 243.805142][ T9449] loop0: detected capacity change from 0 to 1024 [ 243.863950][ T9449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.887306][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1445'. [ 244.031828][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.267979][ T5776] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 244.288099][ T27] audit: type=1326 audit(2000000084.948:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 244.329940][ T9466] loop3: detected capacity change from 0 to 256 [ 244.341129][ T27] audit: type=1326 audit(2000000084.976:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 244.351292][ T9466] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 244.439242][ T27] audit: type=1326 audit(2000000084.986:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 244.473068][ T9465] loop1: detected capacity change from 0 to 4096 [ 244.503705][ T5776] usb 5-1: Using ep0 maxpacket: 16 [ 244.510026][ T27] audit: type=1326 audit(2000000084.986:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 244.535072][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.554210][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.587250][ T27] audit: type=1326 audit(2000000084.986:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb250d9e159 code=0x7ffc0000 [ 244.627528][ T5776] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.691097][ T9465] ntfs3: loop1: failed to convert "0080" to cp864 [ 244.693575][ T5776] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.698745][ T27] audit: type=1326 audit(2000000084.986:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb250d9dec2 code=0x7ffc0000 [ 244.708046][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.730904][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.815165][ T5776] usb 5-1: config 0 descriptor?? [ 244.822768][ T27] audit: type=1326 audit(2000000084.986:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb250d5e98e code=0x7ffc0000 [ 244.902178][ T27] audit: type=1326 audit(2000000084.986:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb250d9df87 code=0x7ffc0000 [ 244.926174][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.959502][ T27] audit: type=1326 audit(2000000084.986:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb250d5e98e code=0x7ffc0000 [ 244.983570][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.996389][ T27] audit: type=1326 audit(2000000084.986:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9464 comm="syz.3.1450" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb250d9ddeb code=0x7ffc0000 [ 245.020324][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.041855][ T9473] loop0: detected capacity change from 0 to 4096 [ 245.101914][ T9478] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 245.300624][ T5776] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 245.358238][ T5776] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0011/input/input16 [ 245.416361][ T5776] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 245.549691][ T5776] usb 5-1: USB disconnect, device number 2 [ 245.675038][ T9489] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1459'. [ 245.719882][ T9485] fido_id[9485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 245.951334][ T9497] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1464'. [ 246.045079][ T9499] loop0: detected capacity change from 0 to 128 [ 246.307378][ T9506] loop3: detected capacity change from 0 to 1024 [ 246.494473][ T9515] loop1: detected capacity change from 0 to 8 [ 246.550860][ T9515] SQUASHFS error: Unable to read inode 0x11f [ 246.641301][ T7775] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.662193][ T9515] netlink: 4208 bytes leftover after parsing attributes in process `syz.1.1471'. [ 246.722528][ T9520] netlink: 'syz.3.1474': attribute type 5 has an invalid length. [ 246.972466][ T9215] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 247.186526][ T9215] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.196310][ T9215] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 247.245497][ T9215] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 247.278832][ T9215] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 247.311233][ T9215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.330943][ T9215] usb 5-1: Product: syz [ 247.339409][ T9215] usb 5-1: Manufacturer: syz [ 247.344293][ T9215] usb 5-1: SerialNumber: syz [ 247.364409][ T9215] hub 5-1:1.0: bad descriptor, ignoring hub [ 247.375690][ T9215] hub: probe of 5-1:1.0 failed with error -5 [ 247.530629][ T9546] syz_tun: entered promiscuous mode [ 247.536661][ T9546] macsec2: entered promiscuous mode [ 247.553521][ T9546] macsec2: entered allmulticast mode [ 247.560604][ T9546] syz_tun: entered allmulticast mode [ 247.574714][ T9546] syz_tun: left allmulticast mode [ 247.601401][ T5818] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 247.603479][ T9546] syz_tun: left promiscuous mode [ 247.623483][ T9215] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 247.819882][ T5818] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 247.863445][ T5818] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 247.896936][ T5818] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 247.918964][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.937858][ T9540] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 247.959857][ T5818] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 248.234766][ T23] usb 5-1: USB disconnect, device number 3 [ 248.254324][ T23] usblp0: removed [ 248.557991][ T9215] usb 4-1: USB disconnect, device number 10 [ 248.685560][ T9555] loop1: detected capacity change from 0 to 32768 [ 248.743274][ T9555] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 248.861690][ T9555] XFS (loop1): Ending clean mount [ 249.082521][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.305606][ T9564] loop0: detected capacity change from 0 to 32768 [ 249.337472][ T9564] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1495 (9564) [ 249.387266][ T9564] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.397697][ T9584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1498'. [ 249.416831][ T9584] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1498'. [ 249.424900][ T9564] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 249.475594][ T9564] BTRFS info (device loop0): using free space tree [ 249.748735][ T9606] ip6gre2: entered promiscuous mode [ 249.759176][ T9564] BTRFS info (device loop0): enabling ssd optimizations [ 249.781866][ T9606] ip6gre2: entered allmulticast mode [ 249.789063][ T9564] BTRFS info (device loop0): auto enabling async discard [ 250.020428][ T9564] BTRFS warning (device loop0): get dev_stats failed, device not found [ 250.143112][ T9619] nftables ruleset with unbound set [ 250.158356][ T5772] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.021217][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'. [ 251.043845][ T9643] netlink: 'syz.0.1518': attribute type 13 has an invalid length. [ 251.053648][ T9643] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1518'. [ 251.304704][ T9651] loop3: detected capacity change from 0 to 256 [ 251.346241][ T9651] FAT-fs (loop3): Directory bread(block 64) failed [ 251.366632][ T9651] FAT-fs (loop3): Directory bread(block 65) failed [ 251.373337][ T9651] FAT-fs (loop3): Directory bread(block 66) failed [ 251.404901][ T9651] FAT-fs (loop3): Directory bread(block 67) failed [ 251.417411][ T9651] FAT-fs (loop3): Directory bread(block 68) failed [ 251.426087][ T9651] FAT-fs (loop3): Directory bread(block 69) failed [ 251.436754][ T9651] FAT-fs (loop3): Directory bread(block 70) failed [ 251.445837][ T9651] FAT-fs (loop3): Directory bread(block 71) failed [ 251.462670][ T9651] FAT-fs (loop3): Directory bread(block 72) failed [ 251.470366][ T9651] FAT-fs (loop3): Directory bread(block 73) failed [ 251.533885][ T9655] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1524'. [ 251.559166][ T28] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 251.750826][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 251.759020][ T28] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 251.775680][ T28] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 251.804406][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.816254][ T28] usb 1-1: Product: syz [ 251.820503][ T28] usb 1-1: Manufacturer: syz [ 251.836629][ T28] usb 1-1: SerialNumber: syz [ 251.853258][ T9639] loop1: detected capacity change from 0 to 32768 [ 251.861170][ T28] usb 1-1: config 0 descriptor?? [ 251.871637][ T28] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 251.885070][ T28] dvb-usb: bulk message failed: -22 (2/0) [ 251.932819][ T9639] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 251.951010][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 251.965449][ T28] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 251.974143][ T28] usb 1-1: media controller created [ 252.004591][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.046320][ T28] usb 1-1: selecting invalid altsetting 7 [ 252.056714][ T28] cxusb: set interface failed [ 252.072086][ T28] dvb-usb: bulk message failed: -22 (1/0) [ 252.121979][ T9639] XFS (loop1): Ending clean mount [ 252.127888][ T9649] cxusb: i2c rd: len=80 is too big! [ 252.127888][ T9649] [ 252.234581][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 252.234600][ T27] audit: type=1800 audit(2000000092.385:129): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1516" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 252.274739][ T28] DVB: Unable to find symbol lgdt330x_attach() [ 252.280967][ T28] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 252.492169][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 252.534278][ T28] rc_core: IR keymap rc-dvico-portable not found [ 252.540693][ T28] Registered IR keymap rc-empty [ 252.596968][ T28] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 252.636390][ T28] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input17 [ 252.677632][ T28] dvb-usb: schedule remote query interval to 100 msecs. [ 252.690367][ T28] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 252.724395][ T28] usb 1-1: USB disconnect, device number 14 [ 252.927163][ T28] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 253.183105][ T9660] loop3: detected capacity change from 0 to 32768 [ 253.291370][ T9660] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 253.395931][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1533'. [ 253.485417][ T9660] XFS (loop3): Ending clean mount [ 253.695632][ T5775] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 255.045226][ T9712] loop0: detected capacity change from 0 to 32768 [ 255.793511][ T9770] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1557'. [ 255.860604][ T9770] netlink: 'syz.0.1557': attribute type 2 has an invalid length. [ 256.076807][ T9744] loop1: detected capacity change from 0 to 32768 [ 256.089408][ T9777] loop3: detected capacity change from 0 to 128 [ 256.138836][ T9777] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 256.170585][ T9777] hpfs: filesystem error: improperly stopped [ 256.200053][ T9777] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 256.207889][ T9777] hpfs: You really don't want any checks? You are crazy... [ 256.272733][ T9777] hpfs: Code page index out of array [ 256.295250][ T9777] hpfs: code page support is disabled [ 256.300869][ T9777] hpfs: hpfs_map_4sectors(): unaligned read [ 256.348804][ T9777] hpfs: hpfs_map_4sectors(): unaligned read [ 256.356533][ T9779] loop0: detected capacity change from 0 to 4096 [ 256.363710][ T9777] hpfs: filesystem error: unable to find root dir [ 256.451837][ T9779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.478635][ T9777] hpfs: hpfs_map_4sectors(): unaligned read [ 256.637737][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.777105][ T9795] loop4: detected capacity change from 0 to 8 [ 256.948333][ T9795] SQUASHFS error: Unable to read directory block [629:46] [ 257.309635][ T28] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 257.512804][ T28] usb 2-1: Using ep0 maxpacket: 32 [ 257.528784][ T28] usb 2-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40 [ 257.549223][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.581649][ T28] usb 2-1: Product: syz [ 257.585900][ T28] usb 2-1: Manufacturer: syz [ 257.620713][ T28] usb 2-1: SerialNumber: syz [ 257.972513][ T5776] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 258.090212][ T28] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 258.119075][ T28] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 258.183920][ T5776] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 258.195441][ T28] usb 2-1: USB disconnect, device number 10 [ 258.207575][ T5776] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 258.227631][ T5776] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 258.260573][ T5776] usb 1-1: config 220 has no interface number 2 [ 258.285235][ T5776] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 258.319346][ T5776] usb 1-1: config 220 interface 0 has no altsetting 0 [ 258.342393][ T5776] usb 1-1: config 220 interface 76 has no altsetting 0 [ 258.360704][ T5776] usb 1-1: config 220 interface 1 has no altsetting 0 [ 258.391703][ T5776] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 258.409481][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.421286][ T5776] usb 1-1: Product: syz [ 258.425516][ T5776] usb 1-1: Manufacturer: syz [ 258.441457][ T5776] usb 1-1: SerialNumber: syz [ 258.716393][ T5776] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 258.731646][ T5776] usb 1-1: No valid video chain found. [ 258.737247][ T5776] usb 1-1: selecting invalid altsetting 0 [ 258.819721][ T5776] usb 1-1: selecting invalid altsetting 0 [ 258.825585][ T5776] usbtest: probe of 1-1:220.1 failed with error -22 [ 258.865460][ T9848] netem: change failed [ 258.874526][ T5776] usb 1-1: USB disconnect, device number 15 [ 258.936121][ T9852] Bluetooth: hci0: invalid length 0, exp 2 for type 27 [ 259.646683][ T9872] loop1: detected capacity change from 0 to 128 [ 260.075839][ T9858] loop3: detected capacity change from 0 to 32768 [ 260.097535][ T9858] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1584 (9858) [ 260.180843][ T9858] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 260.236194][ T9858] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 260.263262][ T9858] BTRFS info (device loop3): setting nodatasum [ 260.313686][ T9858] BTRFS info (device loop3): force zlib compression, level 3 [ 260.357342][ T9858] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 260.384952][ T9858] BTRFS info (device loop3): use lzo compression, level 0 [ 260.409498][ T9858] BTRFS info (device loop3): turning on flush-on-commit [ 260.417889][ T9858] BTRFS info (device loop3): enabling auto defrag [ 260.431805][ T9858] BTRFS info (device loop3): turning off barriers [ 260.438304][ T9858] BTRFS info (device loop3): using free space tree [ 260.676477][ T9858] BTRFS info (device loop3): enabling ssd optimizations [ 260.719790][ T9858] BTRFS info (device loop3): auto enabling async discard [ 261.051298][ T5775] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.154800][ T9886] loop1: detected capacity change from 0 to 32768 [ 261.354925][ T9859] loop4: detected capacity change from 0 to 65536 [ 261.440519][ T7775] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (7775) [ 261.523121][ T9859] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 261.672957][ T9859] XFS (loop4): Ending clean mount [ 261.743546][ T9859] XFS (loop4): Quotacheck needed: Please wait. [ 261.971773][ T9859] XFS (loop4): Quotacheck: Done. [ 262.326964][ T8952] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 262.537020][ T9943] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 263.270214][ T9966] netlink: 'syz.3.1606': attribute type 3 has an invalid length. [ 263.408531][ T5776] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 263.619852][ T5776] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 263.638029][ T5776] usb 2-1: config 0 has no interface number 0 [ 263.670153][ T5776] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.709910][ T5776] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 263.735055][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.761581][ T5776] usb 2-1: Product: syz [ 263.784254][ T5776] usb 2-1: Manufacturer: syz [ 263.804997][ T5776] usb 2-1: SerialNumber: syz [ 263.838743][ T5776] usb 2-1: config 0 descriptor?? [ 263.867271][ T5776] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 264.177641][ T9992] netlink: 'syz.0.1614': attribute type 5 has an invalid length. [ 264.196083][ T5776] usb 2-1: USB disconnect, device number 11 [ 264.227617][ T5776] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 264.982004][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.196704][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.326596][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.542465][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.899843][T10034] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.077699][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.108153][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.117295][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.127734][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.168387][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.194822][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.233842][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1629'. [ 266.327362][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1629'. [ 266.460645][T10044] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1629'. [ 266.499947][T10036] lo speed is unknown, defaulting to 1000 [ 266.524508][ T5776] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 266.544768][T10051] loop4: detected capacity change from 0 to 128 [ 266.744173][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 266.769335][ T5776] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 266.801787][ T5776] usb 2-1: config 0 has no interface number 0 [ 266.811419][ T5776] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 266.854945][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.865351][ T5776] usb 2-1: Product: syz [ 266.874355][ T5776] usb 2-1: Manufacturer: syz [ 266.895728][ T5776] usb 2-1: SerialNumber: syz [ 266.932254][ T5776] usb 2-1: config 0 descriptor?? [ 266.974806][ T5776] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 267.004551][ T5776] usb 2-1: selecting invalid altsetting 1 [ 267.036916][ T5776] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 267.059847][ T5776] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 267.133098][ T5776] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 267.145097][ T5776] usb 2-1: media controller created [ 267.218239][ T5776] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.250038][T10063] loop4: detected capacity change from 0 to 128 [ 267.316459][ T5776] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 267.345318][ T5776] zl10353_read_register: readreg error (reg=127, ret==-71) [ 267.380493][ T5776] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 267.461486][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.540471][ T5776] usb 2-1: USB disconnect, device number 12 [ 267.890314][T10054] loop0: detected capacity change from 0 to 32768 [ 267.988999][T10054] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 268.162025][T10054] XFS (loop0): Ending clean mount [ 268.166371][T10036] chnl_net:caif_netlink_parms(): no params data found [ 268.395345][ T51] Bluetooth: hci2: command tx timeout [ 268.445611][ T5772] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 269.024871][T10110] loop0: detected capacity change from 0 to 256 [ 269.210310][T10036] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.266381][T10036] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.297408][T10036] bridge_slave_0: entered allmulticast mode [ 269.343383][T10036] bridge_slave_0: entered promiscuous mode [ 269.361562][T10036] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.390883][T10036] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.427355][T10036] bridge_slave_1: entered allmulticast mode [ 269.454965][T10036] bridge_slave_1: entered promiscuous mode [ 269.510435][ T59] hsr_slave_0: left promiscuous mode [ 269.553973][ T59] hsr_slave_1: left promiscuous mode [ 269.560819][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.579613][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.600071][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.609726][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.628813][ T59] bridge_slave_1: left allmulticast mode [ 269.634613][ T59] bridge_slave_1: left promiscuous mode [ 269.645609][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.673191][ T59] bridge_slave_0: left allmulticast mode [ 269.694929][ T59] bridge_slave_0: left promiscuous mode [ 269.711639][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.785943][ T59] veth1_macvtap: left promiscuous mode [ 269.791656][ T59] veth0_macvtap: left promiscuous mode [ 269.798758][T10124] loop1: detected capacity change from 0 to 128 [ 269.807756][ T59] veth1_vlan: left promiscuous mode [ 269.813290][ T59] veth0_vlan: left promiscuous mode [ 270.076715][T10106] loop4: detected capacity change from 0 to 32768 [ 270.098206][T10106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1643 (10106) [ 270.136825][T10106] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 270.161471][T10106] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 270.183546][T10106] BTRFS info (device loop4): using free space tree [ 270.204539][ T59] bond1 (unregistering): Released all slaves [ 270.346496][T10106] BTRFS info (device loop4): enabling ssd optimizations [ 270.362364][T10106] BTRFS info (device loop4): auto enabling async discard [ 270.618829][ T51] Bluetooth: hci2: command tx timeout [ 270.717084][ T8952] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 271.000279][T10145] loop1: detected capacity change from 0 to 32768 [ 271.145198][T10145] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 271.437760][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 272.162033][ T59] team0 (unregistering): Port device team_slave_1 removed [ 272.230959][ T59] team0 (unregistering): Port device team_slave_0 removed [ 272.292981][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.355486][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.815467][ T59] bond0 (unregistering): Released all slaves [ 272.844196][ T51] Bluetooth: hci2: command tx timeout [ 272.985428][T10168] infiniband syz1: set active [ 272.990494][T10168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.038625][T10036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.081635][T10036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.102327][ T9] lo speed is unknown, defaulting to 1000 [ 273.189730][T10036] team0: Port device team_slave_0 added [ 273.255187][T10036] team0: Port device team_slave_1 added [ 273.434452][T10178] loop4: detected capacity change from 0 to 512 [ 273.446469][T10036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.477266][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.541626][T10036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.590725][T10178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.633326][T10036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.653621][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.684359][T10178] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 273.736164][T10036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.758791][T10178] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #2: block 3: comm syz.4.1666: lblock 8 mapped to illegal pblock 3 (length 26) [ 273.790537][T10178] EXT4-fs (loop4): Remounting filesystem read-only [ 273.910105][ T59] IPVS: stop unused estimator thread 0... [ 273.947220][ T8952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.986550][T10036] hsr_slave_0: entered promiscuous mode [ 274.021814][T10036] hsr_slave_1: entered promiscuous mode [ 274.076040][T10036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.107053][T10036] Cannot create hsr debugfs directory [ 274.284050][T10200] netlink: 'syz.0.1670': attribute type 16 has an invalid length. [ 274.367553][T10200] netlink: 'syz.0.1670': attribute type 3 has an invalid length. [ 274.396251][T10200] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1670'. [ 274.811649][T10036] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 274.862101][T10036] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 274.900973][T10036] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 274.945123][T10036] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 275.066661][ T51] Bluetooth: hci2: command tx timeout [ 275.144896][T10036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.184510][T10036] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.230933][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.238186][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.265394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.272739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.470872][T10194] loop1: detected capacity change from 0 to 40427 [ 275.526968][T10194] F2FS-fs (loop1): invalid crc value [ 275.567338][T10194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 275.655424][T10194] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 275.794547][T10194] syz.1.1668: attempt to access beyond end of device [ 275.794547][T10194] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 275.941702][ T5773] syz-executor: attempt to access beyond end of device [ 275.941702][ T5773] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 276.000346][ T5773] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 276.083914][T10036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.184410][T10036] veth0_vlan: entered promiscuous mode [ 277.275249][T10036] veth1_vlan: entered promiscuous mode [ 277.498507][T10036] veth0_macvtap: entered promiscuous mode [ 277.592012][T10036] veth1_macvtap: entered promiscuous mode [ 277.835274][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.903178][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.966701][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.003867][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.023027][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.054002][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.087670][T10036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.136785][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.187513][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.229990][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.271032][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.294123][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.315709][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.347128][T10036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.431974][T10036] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.441097][T10036] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.480578][T10036] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.490568][T10036] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.586090][T10343] loop0: detected capacity change from 0 to 1024 [ 278.689549][ T9215] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 278.718054][T10343] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1692'. [ 278.760160][T10343] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1692'. [ 278.760281][T10311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.820432][T10311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.898283][T10311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.919006][ T9215] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 278.927563][T10311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.956759][ T9215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.964847][ T9215] usb 2-1: Product: syz [ 279.001389][ T9215] usb 2-1: Manufacturer: syz [ 279.006241][ T9215] usb 2-1: SerialNumber: syz [ 279.037554][ T9215] usb 2-1: config 0 descriptor?? [ 279.056731][ T9215] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 279.068120][T10348] loop0: detected capacity change from 0 to 64 [ 279.300255][ T9215] usb 2-1: USB disconnect, device number 13 [ 279.514892][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.543956][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.565159][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.604221][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.618290][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.634233][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.649717][T10358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.651643][ T5776] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 279.664031][T10358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.719752][T10358] batadv_slave_1: entered promiscuous mode [ 279.881136][ T5776] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 279.904769][ T5776] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 279.961922][ T5776] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.011578][ T5776] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 280.029391][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.051615][ T5776] usb 6-1: Product: syz [ 280.055870][ T5776] usb 6-1: Manufacturer: syz [ 280.064662][ T5776] usb 6-1: SerialNumber: syz [ 280.083045][ T9] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 280.090529][ T5776] hub 6-1:1.0: bad descriptor, ignoring hub [ 280.096520][ T5776] hub: probe of 6-1:1.0 failed with error -5 [ 280.308488][ T9] usb 1-1: No LPM exit latency info found, disabling LPM. [ 280.347318][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 280.376309][ T5776] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 280.395555][ T9] usb 1-1: string descriptor 0 read error: -22 [ 280.403532][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.432049][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.490063][ T9] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 280.752797][ T9215] usb 1-1: USB disconnect, device number 16 [ 280.819369][ T23] usb 6-1: USB disconnect, device number 2 [ 280.865036][ T23] usblp0: removed [ 281.950310][T10417] loop1: detected capacity change from 0 to 1024 [ 281.957861][T10417] EXT4-fs: Ignoring removed orlov option [ 282.011372][ T27] audit: type=1326 audit(2000000120.234:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb759e159 code=0x7ffc0000 [ 282.093350][ T27] audit: type=1326 audit(2000000120.234:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb759e159 code=0x7ffc0000 [ 282.143842][T10417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.172157][ T27] audit: type=1326 audit(2000000120.262:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7feeb759e159 code=0x7ffc0000 [ 282.197838][ T27] audit: type=1326 audit(2000000120.262:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb759e159 code=0x7ffc0000 [ 282.226710][ T27] audit: type=1326 audit(2000000120.262:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb759e159 code=0x7ffc0000 [ 282.252203][ T27] audit: type=1326 audit(2000000120.262:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7feeb759e159 code=0x7ffc0000 [ 282.257014][T10415] loop0: detected capacity change from 0 to 8192 [ 282.367266][ T27] audit: type=1326 audit(2000000120.262:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb759e159 code=0x7ffc0000 [ 282.420302][ T27] audit: type=1326 audit(2000000120.280:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10418 comm="syz.4.1712" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feeb759e159 code=0x7ffc0000 [ 283.007199][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.394078][T10444] loop4: detected capacity change from 0 to 2048 [ 283.524846][T10444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 283.532116][ T9215] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 283.721479][T10459] loop0: detected capacity change from 0 to 64 [ 283.785407][ T9215] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 283.809992][ T9215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.830134][ T9215] usb 2-1: Product: syz [ 283.857435][ T9215] usb 2-1: Manufacturer: syz [ 283.873089][ T9215] usb 2-1: SerialNumber: syz [ 283.930726][ T9215] usb 2-1: config 0 descriptor?? [ 283.966603][ T9215] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 284.082711][ T9215] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.122112][ T9215] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 284.162276][ T9215] usb 2-1: media controller created [ 284.191335][T10442] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 284.226585][T10467] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 284.236513][T10442] dvb-usb: bulk message failed: -22 (7/0) [ 284.290276][ T9215] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.476036][ T9215] DVB: Unable to find symbol mt352_attach() [ 284.508700][ T23] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 284.636529][ T9215] DVB: Unable to find symbol nxt6000_attach() [ 284.664355][ T9215] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 284.699786][ T9215] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 284.749464][ T9215] dvb-usb: schedule remote query interval to 1000 msecs. [ 284.755287][ T23] usb 1-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.782775][ T9215] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 284.790151][ T23] usb 1-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 284.811671][ T9215] dvb-usb: bulk message failed: -22 (7/0) [ 284.846927][ T9215] dvb-usb: bulk message failed: -22 (7/0) [ 284.849446][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 284.885771][ T9215] usb 2-1: USB disconnect, device number 14 [ 284.890355][ T23] usb 1-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00 [ 284.948831][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.025967][ T23] usb 1-1: config 0 descriptor?? [ 285.218367][ T9215] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 285.563445][ T23] aquacomputer_d5next 0003:0C70:F011.0012: hidraw0: USB HID v80.00 Joystick [HID 0c70:f011] on usb-dummy_hcd.0-1/input0 [ 285.798641][ T23] usb 1-1: USB disconnect, device number 17 [ 285.837399][T10488] fido_id[10488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0C70:F011.0012/report_descriptor': No such device [ 286.053262][T10473] loop5: detected capacity change from 0 to 32768 [ 286.139620][T10473] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 286.411871][T10473] XFS (loop5): Ending clean mount [ 286.465276][T10473] XFS (loop5): EXPERIMENTAL online scrub feature in use. Use at your own risk! [ 286.643435][T10036] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 286.958736][T10516] loop0: detected capacity change from 0 to 2048 [ 287.022920][T10516] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 287.092328][T10516] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.305210][T10524] loop5: detected capacity change from 0 to 512 [ 287.324090][T10524] EXT4-fs: Ignoring removed oldalloc option [ 287.406662][T10524] EXT4-fs (loop5): Test dummy encryption mode enabled [ 287.492793][T10524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.535149][T10534] devpts: called with bogus options [ 287.744291][T10036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.903249][T10543] syz.5.1748 uses obsolete (PF_INET,SOCK_PACKET) [ 288.076710][T10547] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 288.604194][T10565] loop4: detected capacity change from 0 to 512 [ 288.633333][T10565] EXT4-fs: Ignoring removed oldalloc option [ 288.666282][T10565] EXT4-fs (loop4): Test dummy encryption mode enabled [ 288.728832][T10565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.750146][T10567] loop1: detected capacity change from 0 to 4096 [ 288.914109][ T8952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.204338][T10581] loop4: detected capacity change from 0 to 512 [ 289.282277][T10581] EXT4-fs (loop4): orphan cleanup on readonly fs [ 289.337358][T10581] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.1763: Unrecognised inode hash code 255 [ 289.439437][T10581] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1763: Corrupt directory, running e2fsck is recommended [ 289.488775][T10581] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 289.529350][T10581] EXT4-fs error (device loop4): ext4_iget_extra_inode:4740: inode #15: comm syz.4.1763: corrupted in-inode xattr: invalid ea_ino [ 289.562418][T10581] EXT4-fs error (device loop4): ext4_orphan_get:1413: comm syz.4.1763: couldn't read orphan inode 15 (err -117) [ 289.590198][T10581] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 289.638925][T10592] loop1: detected capacity change from 0 to 512 [ 289.677232][T10592] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 289.771150][T10592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.786771][T10592] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.814064][ T8952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.961925][T10598] loop4: detected capacity change from 0 to 8 [ 290.107130][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.118383][T10583] loop5: detected capacity change from 0 to 32768 [ 290.134178][T10583] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1766 (10583) [ 290.197819][T10583] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 290.229511][T10583] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 290.270325][T10583] BTRFS info (device loop5): metadata ratio 0 [ 290.309170][T10583] BTRFS info (device loop5): turning on sync discard [ 290.319649][T10583] BTRFS info (device loop5): using free space tree [ 290.357029][T10602] loop4: detected capacity change from 0 to 1764 [ 290.544430][T10583] BTRFS info (device loop5): enabling ssd optimizations [ 290.684035][ T27] audit: type=1800 audit(2000000128.335:138): pid=10583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1766" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 291.046511][T10036] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 291.597185][T10624] loop1: detected capacity change from 0 to 32768 [ 291.603558][T10628] loop4: detected capacity change from 0 to 32768 [ 291.734983][T10628] JBD2: Ignoring recovery information on journal [ 291.940186][T10628] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 292.696773][ T8952] ocfs2: Unmounting device (7,4) on (node local) [ 292.826606][T10674] loop5: detected capacity change from 0 to 512 [ 292.850226][T10674] EXT4-fs: Ignoring removed i_version option [ 292.857742][T10674] EXT4-fs: Ignoring removed bh option [ 292.904794][T10674] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1796: inode #13: comm syz.5.1796: iget: illegal inode # [ 292.957250][T10674] EXT4-fs (loop5): Remounting filesystem read-only [ 292.980800][T10674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.161348][T10036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.558783][T10696] loop0: detected capacity change from 0 to 512 [ 293.629165][T10696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.674065][T10696] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.855934][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.035850][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 294.070216][T10715] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1811'. [ 294.104727][T10715] netlink: 'syz.0.1811': attribute type 15 has an invalid length. [ 294.131298][T10715] netlink: 'syz.0.1811': attribute type 18 has an invalid length. [ 294.738742][T10711] loop1: detected capacity change from 0 to 32768 [ 294.794983][T10713] loop5: detected capacity change from 0 to 32768 [ 294.812371][T10725] UHID_CREATE from different security context by process 243 (syz.4.1817), this is not allowed. [ 294.840186][T10711] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 294.920058][T10713] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 295.028807][T10711] XFS (loop1): Ending clean mount [ 295.109094][T10713] XFS (loop5): Ending clean mount [ 295.244559][ T5773] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 295.321083][T10748] can0: slcan on ttyS3. [ 295.494755][T10747] can0 (unregistered): slcan off ttyS3. [ 295.572425][T10036] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 295.996920][ T23] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 296.044391][T10760] loop0: detected capacity change from 0 to 1024 [ 296.137667][T10760] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 296.180881][T10760] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.212918][ T23] usb 5-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 296.238443][ T23] usb 5-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 296.292667][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.307020][ T23] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 296.323339][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.350497][ T23] usb 5-1: config 0 descriptor?? [ 296.530891][T10780] loop5: detected capacity change from 0 to 1024 [ 296.550820][T10780] EXT4-fs: Ignoring removed bh option [ 296.563253][ T28] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 296.580126][T10780] EXT4-fs: inline encryption not supported [ 296.597472][T10780] EXT4-fs: Ignoring removed i_version option [ 296.605513][T10780] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.625572][T10780] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 296.663313][T10780] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #3: block 1: comm syz.5.1828: lblock 1 mapped to illegal pblock 1 (length 1) [ 296.688020][T10780] Quota error (device loop5): write_blk: dquota write failed [ 296.696481][T10780] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 296.707400][T10780] EXT4-fs error (device loop5): ext4_acquire_dquot:6953: comm syz.5.1828: Failed to acquire dquot type 0 [ 296.724471][T10780] EXT4-fs error (device loop5): ext4_free_blocks:6694: comm syz.5.1828: Freeing blocks not in datazone - block = 0, count = 4096 [ 296.754885][T10780] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1828: Invalid inode bitmap blk 0 in block_group 0 [ 296.768796][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.782238][T10780] EXT4-fs error (device loop5) in ext4_free_inode:363: Corrupt filesystem [ 296.787156][T10303] EXT4-fs error (device loop5): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 296.807332][T10780] EXT4-fs (loop5): 1 orphan inode deleted [ 296.815623][ T28] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 296.821006][T10780] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.832032][ T23] hid (null): usage index exceeded [ 296.851983][T10303] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 296.861105][ T23] hid (null): usage index exceeded [ 296.872937][ T28] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 296.889568][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.899302][T10303] EXT4-fs error (device loop5): ext4_release_dquot:6989: comm kworker/u4:13: Failed to release dquot type 0 [ 296.920455][ T23] wacom 0003:056A:030C.0013: ignoring exceeding usage max [ 296.940588][ T28] usb 1-1: Product: syz [ 296.949638][T10780] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.1828: Invalid block bitmap block 0 in block_group 0 [ 296.970204][ T28] usb 1-1: Manufacturer: syz [ 296.981635][ T23] wacom 0003:056A:030C.0013: usage index exceeded [ 296.988635][ T28] usb 1-1: SerialNumber: syz [ 297.005088][T10036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.008620][ T23] wacom 0003:056A:030C.0013: item 0 4 2 0 parsing failed [ 297.046645][ T23] wacom 0003:056A:030C.0013: parse failed [ 297.052939][ T23] wacom: probe of 0003:056A:030C.0013 failed with error -22 [ 297.104459][ T23] usb 5-1: USB disconnect, device number 4 [ 297.320270][ T28] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 297.611991][ T28] usb 1-1: USB disconnect, device number 18 [ 297.919885][T10807] loop1: detected capacity change from 0 to 64 [ 297.944676][T10807] hfs: uid requires an argument [ 297.949608][T10807] hfs: unable to parse mount options [ 297.999942][ T7770] udevd[7770]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.042948][ T6138] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 298.138966][T10810] loop4: detected capacity change from 0 to 1024 [ 298.192280][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 298.209803][T10812] loop5: detected capacity change from 0 to 256 [ 298.936455][ T28] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 298.949532][T10837] loop5: detected capacity change from 0 to 16 [ 298.984288][T10837] erofs: (device loop5): mounted with root inode @ nid 36. [ 299.050841][T10837] syz.5.1844: attempt to access beyond end of device [ 299.050841][T10837] loop5: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 299.109498][T10837] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 299.134368][ T27] audit: type=1800 audit(2000000136.258:139): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1844" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 299.170754][T10837] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 299.212960][ T28] usb 2-1: not running at top speed; connect to a high speed hub [ 299.229846][ T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 299.267908][ T28] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.302141][ T28] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 1.00 [ 299.321491][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.408384][ T1209] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 299.626420][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.684908][ T1209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.707114][ T1209] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 299.721103][ T1209] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 299.744283][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.767323][ T1209] usb 1-1: config 0 descriptor?? [ 299.862745][ T28] petalynx 0003:18B1:0037.0014: unknown main item tag 0x0 [ 299.888169][ T28] petalynx 0003:18B1:0037.0014: unknown main item tag 0x0 [ 299.907522][ T28] petalynx 0003:18B1:0037.0014: unexpected long global item [ 299.919066][ T28] petalynx 0003:18B1:0037.0014: parse failed [ 299.933727][ T28] petalynx: probe of 0003:18B1:0037.0014 failed with error -22 [ 300.135317][ T5818] usb 2-1: USB disconnect, device number 15 [ 300.255598][ T1209] plantronics 0003:047F:FFFF.0015: unbalanced delimiter at end of report description [ 300.303780][ T1209] plantronics 0003:047F:FFFF.0015: parse failed [ 300.313103][ T1209] plantronics: probe of 0003:047F:FFFF.0015 failed with error -22 [ 300.533836][ T1209] usb 1-1: USB disconnect, device number 19 [ 301.222012][T10907] loop5: detected capacity change from 0 to 64 [ 301.450040][T10912] bond1 (unregistering): Released all slaves [ 301.569133][T10913] loop0: detected capacity change from 0 to 4096 [ 301.616336][T10913] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 301.620578][T10920] netlink: 580 bytes leftover after parsing attributes in process `syz.4.1869'. [ 301.678192][T10920] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1869'. [ 301.692617][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'. [ 301.743202][T10913] ntfs: volume version 3.1. [ 301.966573][ T27] audit: type=1800 audit(2000000138.905:140): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1872" name="trace_pipe" dev="tracefs" ino=1260 res=0 errno=0 [ 302.645863][ T1209] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 302.747831][T10951] loop4: detected capacity change from 0 to 256 [ 302.871845][ T1209] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.902356][ T1209] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 302.911359][ T1209] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.983687][ T1209] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 303.008221][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.024800][ T1209] usb 2-1: Product: syz [ 303.029050][ T1209] usb 2-1: Manufacturer: syz [ 303.044213][ T1209] usb 2-1: SerialNumber: syz [ 303.072556][ T1209] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 303.086760][ T1209] usb 2-1: No valid video chain found. [ 303.317466][ T1209] usb 2-1: USB disconnect, device number 16 [ 303.836442][T10978] loop5: detected capacity change from 0 to 1024 [ 303.918240][T10978] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 304.570511][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 304.655885][ T5818] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 304.717182][T10976] loop0: detected capacity change from 0 to 32768 [ 304.775128][ T23] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 304.803559][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.825597][T10976] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 304.838648][ T23] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 304.867757][ T23] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 304.883656][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 304.901316][ T23] usb 5-1: Manufacturer: syz [ 304.909134][ T5818] usb 6-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 304.930444][ T23] usb 5-1: config 0 descriptor?? [ 304.970021][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.023280][ T5818] usb 6-1: config 0 descriptor?? [ 305.053804][ T23] rc_core: IR keymap rc-hauppauge not found [ 305.066879][T10976] XFS (loop0): Ending clean mount [ 305.093839][ T23] Registered IR keymap rc-empty [ 305.104684][ T23] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 305.137660][ T23] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 305.358934][ T5772] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 305.527860][ T5818] waltop 0003:172F:0502.0016: unbalanced collection at end of report description [ 305.557687][ T5818] waltop: probe of 0003:172F:0502.0016 failed with error -22 [ 305.741592][ T23] usb 5-1: USB disconnect, device number 5 [ 305.841162][ T5818] usb 6-1: USB disconnect, device number 3 [ 306.194290][T11039] [U]  [ 306.869192][T11060] loop5: detected capacity change from 0 to 4096 [ 306.891605][T11060] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 307.056532][T11060] ntfs: volume version 3.1. [ 307.072714][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1912'. [ 307.806538][T11061] loop4: detected capacity change from 0 to 32768 [ 307.923423][T11097] loop5: detected capacity change from 0 to 164 [ 307.987123][T11061] JBD2: Ignoring recovery information on journal [ 308.027481][T11061] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 308.037252][T11061] JBD2: bad block at offset 32 [ 308.079109][T11061] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 308.082055][T11105] syz.1.1922 (11105): attempted to duplicate a private mapping with mremap. This is not supported. [ 308.357146][T11111] binder: 11110:11111 ioctl c018620b 200000000240 returned -14 [ 308.412931][ T8952] ocfs2: Unmounting device (7,4) on (node local) [ 308.589514][ T789] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 308.837274][ T789] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 308.873632][ T789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.891306][ T789] usb 1-1: config 0 descriptor?? [ 308.909724][ T789] cp210x 1-1:0.0: cp210x converter detected [ 309.120083][T11135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1933'. [ 309.416349][ T789] usb 1-1: cp210x converter now attached to ttyUSB0 [ 309.679588][ T789] usb 1-1: USB disconnect, device number 20 [ 309.707775][ T789] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 309.739057][ T789] cp210x 1-1:0.0: device disconnected [ 310.140782][T11147] loop5: detected capacity change from 0 to 32768 [ 310.181846][T11147] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 310.204992][ T1209] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 310.253395][T11152] loop1: detected capacity change from 0 to 32768 [ 310.262934][T11147] XFS (loop5): Ending clean mount [ 310.379438][T11152] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 310.420653][ T1209] usb 5-1: Using ep0 maxpacket: 32 [ 310.447959][ T1209] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.469671][T10036] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 310.495251][ T1209] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 310.524860][ T1209] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.532408][ T1209] usb 5-1: New USB device found, idVendor=05ac, idProduct=021c, bcdDevice= 0.00 [ 310.546395][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.561331][ T1209] usb 5-1: config 0 descriptor?? [ 310.695415][T11152] XFS (loop1): Ending clean mount [ 310.819307][ T27] audit: type=1800 audit(2000000147.175:141): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1939" name="file1" dev="loop1" ino=7430 res=0 errno=0 [ 310.824400][T11152] syz.1.1939: attempt to access beyond end of device [ 310.824400][T11152] loop1: rw=4096, sector=17179869171, nr_sectors = 1 limit=32768 [ 311.033293][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1943'. [ 311.042753][ T1209] apple 0003:05AC:021C.0017: unknown main item tag 0x0 [ 311.042795][ T1209] apple 0003:05AC:021C.0017: unknown main item tag 0x0 [ 311.042821][ T1209] apple 0003:05AC:021C.0017: unexpected long global item [ 311.043507][ T1209] apple 0003:05AC:021C.0017: parse failed [ 311.073641][ T1209] apple: probe of 0003:05AC:021C.0017 failed with error -22 [ 311.085664][ T5773] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 311.199742][T11187] loop5: detected capacity change from 0 to 136 [ 311.348715][ T28] usb 5-1: USB disconnect, device number 6 [ 311.981594][T11186] loop0: detected capacity change from 0 to 32768 [ 312.012506][T11186] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.1948 (11186) [ 312.079189][T11186] BTRFS info (device loop0): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 312.101567][T11186] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 312.115220][T11186] BTRFS info (device loop0): using free space tree [ 312.221031][T11186] BTRFS info (device loop0): enabling ssd optimizations [ 312.251450][T11186] BTRFS info (device loop0): auto enabling async discard [ 312.488472][T11193] loop1: detected capacity change from 0 to 32768 [ 312.513929][ T5772] BTRFS info (device loop0): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 312.554547][T11193] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 312.587986][T11193] JBD2: Ignoring recovery information on journal [ 312.653355][T11193] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 312.966614][T11193] syz.1.1946 (11193) used greatest stack depth: 19208 bytes left [ 313.137116][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 313.274561][T11230] tipc: Enabling of bearer rejected, failed to enable media [ 313.578973][T11238] netlink: 'syz.4.1963': attribute type 9 has an invalid length. [ 313.578996][T11238] netlink: 155304 bytes leftover after parsing attributes in process `syz.4.1963'. [ 313.920074][ T28] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz0 [ 314.119696][T11251] fido_id[11251]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 314.436828][ T28] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 314.539819][T11235] loop0: detected capacity change from 0 to 40427 [ 314.560799][T11235] F2FS-fs (loop0): invalid crc value [ 314.609232][T11235] F2FS-fs (loop0): Found nat_bits in checkpoint [ 314.660329][ T28] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 314.704032][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.739045][ T28] usb 2-1: config 0 descriptor?? [ 314.757067][ T28] cp210x 2-1:0.0: cp210x converter detected [ 314.822095][T11235] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 315.077126][ T5772] syz-executor: attempt to access beyond end of device [ 315.077126][ T5772] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 315.113577][ T5772] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 315.243947][ T28] usb 2-1: cp210x converter now attached to ttyUSB0 [ 315.482024][ T28] usb 2-1: USB disconnect, device number 17 [ 315.521972][ T28] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 315.568097][ T28] cp210x 2-1:0.0: device disconnected [ 315.945232][T11293] bond0: option ad_select: unable to set because the bond device is up [ 316.673444][T11310] loop5: detected capacity change from 0 to 512 [ 316.734741][T11310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.758806][T11310] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.846512][T11318] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1993'. [ 316.890204][T11300] loop0: detected capacity change from 0 to 40427 [ 316.903364][T11318] netlink: 'syz.4.1993': attribute type 4 has an invalid length. [ 316.915233][T11300] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64) [ 316.959934][T11300] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 316.993388][T11300] F2FS-fs (loop0): Image doesn't support compression [ 317.027413][T11300] F2FS-fs (loop0): Image doesn't support compression [ 317.041752][T11300] F2FS-fs (loop0): invalid crc value [ 317.134834][T10036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.307134][T11300] F2FS-fs (loop0): Start checkpoint disabled! [ 317.418574][T11300] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 317.443705][T11300] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 317.643803][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 317.679383][ T11] kworker/u4:0: attempt to access beyond end of device [ 317.679383][ T11] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 317.694940][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 317.709784][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 317.838555][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.857543][ T9] usb 6-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 317.866895][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.880411][ T9] usb 6-1: config 0 descriptor?? [ 317.944440][ T5818] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 318.121522][T11342] Bluetooth: MGMT ver 1.22 [ 318.170944][ T5818] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 318.194884][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 318.210600][ T5818] usb 2-1: New USB device found, idVendor=046d, idProduct=c517, bcdDevice= 0.00 [ 318.241725][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.276265][ T5818] usb 2-1: config 0 descriptor?? [ 318.333279][ T9] speedlink 0003:1AE7:9001.0019: unbalanced collection at end of report description [ 318.350909][ T9] speedlink: probe of 0003:1AE7:9001.0019 failed with error -22 [ 318.584871][ T5776] usb 6-1: USB disconnect, device number 4 [ 318.881541][T11353] loop4: detected capacity change from 0 to 32768 [ 318.907379][T11353] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.2010 (11353) [ 318.934105][T11353] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 318.945437][T11353] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 318.955919][T11353] BTRFS info (device loop4): using free space tree [ 319.015835][ T5776] usb 2-1: USB disconnect, device number 18 [ 319.033987][T11353] BTRFS info (device loop4): enabling ssd optimizations [ 319.041000][T11353] BTRFS info (device loop4): auto enabling async discard [ 319.198985][ T8952] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 319.307016][T11372] loop5: detected capacity change from 0 to 256 [ 319.713403][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 319.994753][T11389] program syz.0.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 320.199812][T11396] loop5: detected capacity change from 0 to 512 [ 320.286217][T11396] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:478: comm syz.5.2022: Invalid block bitmap block 0 in block_group 0 [ 320.393943][T11404] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 320.396903][T11396] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 320.440739][T11406] overlayfs: workdir and upperdir must be separate subtrees [ 320.468922][T11396] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2022: attempt to clear invalid blocks 983261 len 1 [ 320.534709][T11396] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2022: invalid indirect mapped block 2683928664 (level 0) [ 320.587060][T11396] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.2022: Invalid inode table block 0 in block_group 0 [ 320.636701][T11396] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 320.658062][T11396] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 320.709219][T11396] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.2022: Invalid inode table block 0 in block_group 0 [ 320.754014][T11396] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 320.767617][T11396] EXT4-fs error (device loop5): ext4_truncate:4302: inode #13: comm syz.5.2022: mark_inode_dirty error [ 320.797554][T11396] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 320.814422][T11396] EXT4-fs error (device loop5): __ext4_get_inode_loc:4497: comm syz.5.2022: Invalid inode table block 0 in block_group 0 [ 320.873081][T11396] EXT4-fs (loop5): 1 truncate cleaned up [ 320.896720][T11396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.939503][T11418] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2034'. [ 321.125721][T10036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.257497][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 321.266329][T11430] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2040'. [ 321.275445][T11430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2040'. [ 321.286625][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2040'. [ 321.451700][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 321.498725][ T9] usb 1-1: New USB device found, idVendor=172f, idProduct=0502, bcdDevice= 0.00 [ 321.539726][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.575461][ T9] usb 1-1: config 0 descriptor?? [ 321.592550][T11440] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2044'. [ 322.050127][ T9] waltop 0003:172F:0502.001B: unbalanced collection at end of report description [ 322.070345][ T9] waltop: probe of 0003:172F:0502.001B failed with error -22 [ 322.094082][T11453] loop5: detected capacity change from 0 to 1024 [ 322.113673][T11453] EXT4-fs: Ignoring removed i_version option [ 322.119777][T11453] EXT4-fs: Ignoring removed i_version option [ 322.159364][T11453] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 322.250393][T11453] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.294368][ T9] usb 1-1: USB disconnect, device number 21 [ 322.435158][T10036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.483276][T11468] loop1: detected capacity change from 0 to 64 [ 322.626228][T11471] loop5: detected capacity change from 0 to 256 [ 322.675285][T11471] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 322.688150][T11474] loop1: detected capacity change from 0 to 256 [ 322.694760][T11471] FAT-fs (loop5): Filesystem has been set read-only [ 322.717771][T11474] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 322.720688][T11471] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 322.779260][T11474] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 323.247704][T11485] (null): rxe_set_mtu: Set mtu to 1024 [ 323.280549][T11488] loop5: detected capacity change from 0 to 64 [ 323.310744][ T27] audit: type=1326 audit(2000000158.877:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11487 comm="syz.1.2067" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3de4d9e159 code=0x0 [ 323.583778][T11485] infiniband syz0: set active [ 323.583890][T11485] infiniband syz0: added bond0 [ 323.626621][T11485] RDS/IB: syz0: added [ 323.626714][T11485] smc: adding ib device syz0 with port count 1 [ 323.626736][T11485] smc: ib device syz0 port 1 has pnetid [ 323.915011][T11498] loop5: detected capacity change from 0 to 512 [ 323.968405][T11498] EXT4-fs (loop5): orphan cleanup on readonly fs [ 324.004872][T11498] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 324.013541][T11498] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 324.053770][T11498] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.2069: attempt to clear invalid blocks 33619980 len 1 [ 324.084766][T11498] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2069: invalid indirect mapped block 1819239214 (level 0) [ 324.137971][T11498] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2069: invalid indirect mapped block 1819239214 (level 1) [ 324.220385][T11498] EXT4-fs (loop5): 1 truncate cleaned up [ 324.234634][T11498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 324.384393][T11505] jffs2: notice: (11505) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 324.434417][T10036] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.499889][T11507] loop0: detected capacity change from 0 to 256 [ 324.573462][T11507] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 325.258926][T11524] netlink: 'syz.5.2081': attribute type 2 has an invalid length. [ 325.405639][ T51] list_del corruption, ffff88807dea4880->next is LIST_POISON1 (dead000000000100) [ 325.418832][ T51] ------------[ cut here ]------------ [ 325.424354][ T51] kernel BUG at lib/list_debug.c:58! [ 325.430385][ T51] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 325.436487][ T51] CPU: 0 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 325.443892][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.453973][ T51] Workqueue: hci0 hci_cmd_sync_work [ 325.459194][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 325.466142][ T51] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 325.485758][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 325.491834][ T51] RAX: 000000000000004e RBX: ffff88807dea4880 RCX: cca1a3945d215300 [ 325.499813][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 325.507788][ T51] RBP: 1ffff1100fbd4913 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 325.515766][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 325.523742][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 325.531717][ T51] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 325.540650][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.547242][ T51] CR2: 0000200000000000 CR3: 000000002f81b000 CR4: 00000000003506f0 [ 325.555223][ T51] Call Trace: [ 325.558509][ T51] [ 325.561443][ T51] mgmt_pending_remove+0x53/0x1f0 [ 325.566488][ T51] mgmt_add_adv_patterns_monitor_complete+0x45d/0x730 [ 325.573264][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 325.579688][ T51] ? msft_monitor_supported+0x69/0x80 [ 325.585068][ T51] ? hci_add_adv_monitor+0x17d/0x2a0 [ 325.590363][ T51] ? mgmt_add_adv_patterns_monitor_sync+0x90/0x90 [ 325.596782][ T51] hci_cmd_sync_work+0x24b/0x380 [ 325.601733][ T51] ? process_scheduled_works+0x975/0x1600 [ 325.607462][ T51] process_scheduled_works+0xa60/0x1600 [ 325.613025][ T51] ? worker_attach_to_pool+0x370/0x370 [ 325.618498][ T51] ? assign_work+0x3cc/0x5d0 [ 325.623096][ T51] worker_thread+0xa5e/0xfe0 [ 325.627702][ T51] kthread+0x2fa/0x390 [ 325.631797][ T51] ? pr_cont_work+0x550/0x550 [ 325.636484][ T51] ? kthread_blkcg+0xd0/0xd0 [ 325.641079][ T51] ret_from_fork+0x48/0x80 [ 325.645503][ T51] ? kthread_blkcg+0xd0/0xd0 [ 325.650103][ T51] ret_from_fork_asm+0x11/0x20 [ 325.654887][ T51] [ 325.657930][ T51] Modules linked in: [ 325.661964][ T5776] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 325.666163][ T51] ---[ end trace 0000000000000000 ]--- [ 325.681955][ T51] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 325.681994][ T51] Code: 48 89 de e8 69 78 49 06 0f 0b 48 c7 c7 60 39 1d 8b 48 89 de e8 58 78 49 06 0f 0b 48 c7 c7 c0 39 1d 8b 48 89 de e8 47 78 49 06 <0f> 0b 48 c7 c7 20 3a 1d 8b 48 89 de e8 36 78 49 06 0f 0b 48 c7 c7 [ 325.682011][ T51] RSP: 0018:ffffc90000bbfa00 EFLAGS: 00010246 [ 325.682030][ T51] RAX: 000000000000004e RBX: ffff88807dea4880 RCX: cca1a3945d215300 [ 325.682062][ T51] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 325.682077][ T51] RBP: 1ffff1100fbd4913 R08: ffffc90000bbf707 R09: 1ffff92000177ee0 [ 325.682091][ T51] R10: dffffc0000000000 R11: fffff52000177ee1 R12: dffffc0000000000 [ 325.682105][ T51] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 325.682118][ T51] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 325.682134][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.682147][ T51] CR2: 0000200000000000 CR3: 000000002dee3000 CR4: 00000000003506f0 [ 325.682168][ T51] Kernel panic - not syncing: Fatal exception [ 325.682433][ T51] Kernel Offset: disabled