last executing test programs: 36.489532806s ago: executing program 3 (id=8873): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d40)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) 36.401572443s ago: executing program 3 (id=8875): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x9, 0x0, 0x0) 36.143838279s ago: executing program 3 (id=8879): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x101a02, 0x0) sendfile(r0, r0, 0x0, 0x9) 35.990100364s ago: executing program 3 (id=8883): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000280)={@caif=@dbg={0x25, 0x4a, 0x81}, {0x0}, 0x0, 0x11}, 0xa0) 35.575321276s ago: executing program 3 (id=8890): syz_mount_image$jfs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x1014084, &(0x7f0000000200)={[{@nointegrity}, {@uid}, {@grpquota}, {@errors_continue}, {@gid}, {@errors_remount}, {@discard}, {@noquota}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@errors_continue}, {@grpquota}]}, 0x23, 0x6305, &(0x7f00000002c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000006600)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000006640)='./file1\x00', 0x0) 34.365158517s ago: executing program 3 (id=8906): r0 = syz_open_dev$loop(&(0x7f00000019c0), 0x93, 0x80b02) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000001a00)) 18.227252731s ago: executing program 32 (id=8906): r0 = syz_open_dev$loop(&(0x7f00000019c0), 0x93, 0x80b02) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000001a00)) 5.035040886s ago: executing program 6 (id=9375): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000004840)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000007100)=0x772, 0x12) 4.648536307s ago: executing program 6 (id=9382): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_setup(0xffff, &(0x7f0000000140)) 3.935073857s ago: executing program 6 (id=9392): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.153505098s ago: executing program 6 (id=9417): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @empty}, 0x1, 0x0, 0x1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 1.965124249s ago: executing program 5 (id=9421): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_setup(0xffff, &(0x7f0000000140)) 1.963424399s ago: executing program 6 (id=9423): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffa, 0x40001) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x3e, 0x7ff, 0x9}) 1.734533863s ago: executing program 2 (id=9426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c000000100019002cbd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a70d040069920700280012800e0001006970366772657461700000001400028006000e000219d96a3bd5746e050000001400030069703667726574617030"], 0x5c}}, 0x8040) 1.731899328s ago: executing program 6 (id=9428): r0 = syz_usb_connect(0x5, 0xc7, &(0x7f0000000140)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d24010001340000000000010112240201010200000000000000000300003d7924030201010003"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x21b6, 0x8, 0x1, {0x22, 0x785}}}}, &(0x7f0000000400)={0x2c, &(0x7f00000001c0)={0x0, 0xe, 0xdf, "93e0ef43c5d799e26b185e70c64d0c3eeb917d501202ee9a44521a33d5c712a6ae241011a0fb8688037a2d3671c04e875d4622c46e52f83f18cf74d67c74e2df31160372b0be0c45637e00731ace2f0452abced4906addf3182c1ca4ace29cfec7e57b9f95cb9cc4c5aca8ce7e55d3832b4235ddc1cc16993a8f8da60a23ae8b32ebc97490a6570537ef4612816833ed1bf7699acf6fba6d0cf38cda138f3d49c61acb3f4061a8846dbee1636d75c8ebcf5f5c915e1fce097f6877a5497236527aafa2b801a521d1b94a4fbdbb18c2847d0126970a1133c0878aa0ebcb9afd"}, 0x0, 0x0, 0x0, 0x0}) 1.589052621s ago: executing program 1 (id=9430): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x1, 0x20000000}, {0x66, 0x0, 0x0, 0x256c6c64}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x15}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 1.490845191s ago: executing program 2 (id=9432): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) 1.464668946s ago: executing program 5 (id=9434): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0x20, &(0x7f00000007c0)={0xfffffffffffffffc, 0x10, 0x0, 0x0}}, 0x10) 1.286897837s ago: executing program 4 (id=9435): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect(r0, &(0x7f0000000040)=@llc={0x1a, 0x308, 0x7d, 0x4, 0xf7, 0x1, @broadcast}, 0x80) 1.286036562s ago: executing program 2 (id=9436): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, 0x0, &(0x7f00000000c0)) 1.208506127s ago: executing program 5 (id=9437): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffd}}}}}}]}, 0x48}}, 0x0) 1.208160784s ago: executing program 1 (id=9438): r0 = syz_open_dev$usbfs(&(0x7f0000000280), 0x76, 0x160341) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000340)={0x8000000, "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"}) 1.207930873s ago: executing program 2 (id=9439): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000000002000100010000000000031600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) 983.227526ms ago: executing program 1 (id=9440): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000000100)) 965.380801ms ago: executing program 0 (id=9441): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4000084) 908.575006ms ago: executing program 4 (id=9442): r0 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000005c0)={{0x200002, 0x0, 0x5, 0xfffffffe, 'syz0\x00', 0xf5}, 0x3, 0x40, 0x3e, 0x0, 0x1, 0x2, 'syz1\x00', &(0x7f0000000700)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3\xc2E{=8\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe}) 803.830567ms ago: executing program 4 (id=9443): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x30, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x4}]}, 0x10) 794.07653ms ago: executing program 5 (id=9444): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x1fffc) 779.949852ms ago: executing program 0 (id=9445): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d1104000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0xfffffffd, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xfffd, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370) 686.829416ms ago: executing program 1 (id=9446): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x5) 597.224399ms ago: executing program 0 (id=9447): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 584.813455ms ago: executing program 4 (id=9448): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x20000}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 421.139526ms ago: executing program 1 (id=9449): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x5) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000380)="aa1d484e0a4e000000008133d576983340cb31a5fc977c2e4891f7c08bfcd111fbdf23ea32db0e8f20d5", 0x2a}], 0x2) 419.453695ms ago: executing program 5 (id=9450): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x7ffffffc}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 382.231446ms ago: executing program 0 (id=9451): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x238, 0x18c, 0x203, 0x238, 0x19030000, 0x328, 0x2e0, 0x2e0, 0x328, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x33, 0x7, 0x2, 0x55}, 0x300, 0x110, 0x238, 0x0, {0x1000000}, [@common=@unspec=@physdev={{0x68}, {'ip_vti0\x00', {}, 'veth0_macvtap\x00', {0xff}, 0x1c}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:nvram_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'wg2\x00', {0x800}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 316.735055ms ago: executing program 2 (id=9452): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x3, 0x130, 0x3, 0x4bcfbda9285ec008}}) 271.996472ms ago: executing program 4 (id=9453): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x64, 0x10, 0x401, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0xffff, 0x0, 0x1d188, 0x40548}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xe}}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x84, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x440d1}, 0x0) 245.50954ms ago: executing program 0 (id=9454): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x5452, &(0x7f0000000200)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) 187.199316ms ago: executing program 5 (id=9455): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e3, &(0x7f00000000c0)) 122.990203ms ago: executing program 1 (id=9456): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x105101, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="e406247cce54f1bf1e68fde89a67b3dfea3060f92bb7f4243fda118f4f153550b02022b6f8d5148b465b98fd98f7bd9cc44c9631e975f0552476c44f6c2e85c70acfd0ee1d4a2486d002534cf671599667b69c27d027198b6e4369905809d7df3c37513302ccaf882c23b2ddc05506f68d138c17c039f397c4d0c911c794cb1e7edb8e9d822f3409078cad3ec5f1b3c04ea91cf1371d13496bf89170b951b39ee0a60c91a0c9e339165c209da032c42733c037e500a37c14c9c092ff95988e88d79fd27a90968b436dd98f842300c363878a55b86f0caf802c06ca3c69bcbfff80c9492d264c4e90c0758cbbf313c3824b97af8a787ac54aea77f1128e2b65c13cb6d8f465f2da8d1b6b5c871a14647244e3f4f44241a02e49ae978c1a5a8a78bd727455136f9524d086ee15d3d5b29ca5d2b112136fa5663c0fcdec7e491d0eae70dad83bb95100e05619fdce4b689cd98a13c281f0c0f0358631f3789f982e9ead2881377b706a198a85c65a0b4473e96adc7b8d247df03db08ee9c3eb966db91b1248174389ad7591c00e8862c604b99c69d6e8410d26fb467056d64794c9feec3b8a90180d57922dd4684d6b39b454aba577ec24da7a957366803fc8083573e7aed698172719a4968fa8e9e23ec939ba27eaeabb3bb2d1e0112f4e3b2ef9d68d808dcb1f4c6cb60aa659f26e8e1682ad13d85a3a3147415a18c1bb746bbf", 0x20000}, {0x0, 0x20000}], 0x2) 115.371853ms ago: executing program 2 (id=9457): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffffa, 0x40001) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x3e, 0x7ff, 0x9}) 84.169807ms ago: executing program 4 (id=9458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x20008091}, 0x0) 0s ago: executing program 0 (id=9459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000001400078008000840000000000800174000000004050005000a000000050001000700000005000400000000000900020073513d31000000000d0003006c6973743a736574"], 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008114) kernel console output (not intermixed with test programs): 0x1985 not found at 0x0001a03c: 0x01d5 instead [ 934.306932][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 934.307024][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 934.307059][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x2c3f instead [ 934.307096][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x01d5 instead [ 934.321085][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 934.321125][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 934.321219][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x2c3f instead [ 934.321257][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x01d5 instead [ 934.321438][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 934.321611][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 934.321647][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x2c3f instead [ 934.321685][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x01d5 instead [ 934.323979][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 934.324014][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 934.324108][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x2c3f instead [ 934.324146][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x01d5 instead [ 934.324294][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 934.331766][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 934.331805][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x2c3f instead [ 934.331841][T23378] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x01d5 instead [ 934.331976][T23378] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 934.331993][T23378] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 934.490148][ T6299] gspca_spca501: reg write: error -71 [ 934.490172][ T6299] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 934.490323][ T6299] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 934.514837][ T6299] usb 2-1: USB disconnect, device number 94 [ 934.614622][ T6202] ath6kl: Failed to submit usb control message: -110 [ 934.614738][ T6202] ath6kl: unable to send the bmi data to the device: -110 [ 934.614783][ T6202] ath6kl: Unable to send get target info: -110 [ 934.677916][ T6202] ath6kl: Failed to init ath6kl core: -110 [ 935.117709][ T6202] ath6kl_usb 4-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 935.135803][T23389] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7887'. [ 935.387600][T23391] loop2: detected capacity change from 0 to 2048 [ 935.468176][T23391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 935.738226][ T6202] usb 4-1: USB disconnect, device number 100 [ 936.367546][T23414] bond1: entered promiscuous mode [ 936.368157][T23414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.368567][T23416] netlink: 'syz.2.7901': attribute type 63 has an invalid length. [ 936.564126][T23400] loop3: detected capacity change from 0 to 32768 [ 936.580528][T23400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.7893 (23400) [ 936.608799][T23400] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 936.608853][T23400] BTRFS info (device loop3): using crc32c checksum algorithm [ 936.733961][T23400] BTRFS info (device loop3): setting nodatasum [ 936.734003][T23400] BTRFS info (device loop3): enabling ssd optimizations [ 936.734035][T23400] BTRFS info (device loop3): disabling tree log [ 936.734066][T23400] BTRFS info (device loop3): turning on async discard [ 936.734096][T23400] BTRFS info (device loop3): enabling free space tree [ 936.734126][T23400] BTRFS info (device loop3): enabling auto defrag [ 936.781688][ T6299] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 936.852062][ T6067] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 936.957308][ T6299] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 936.972050][ T6299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 936.972209][ T6299] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.972252][ T6299] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 937.017629][ T6299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.017677][ T6299] usb 1-1: Product: syz [ 937.017706][ T6299] usb 1-1: Manufacturer: syz [ 937.017733][ T6299] usb 1-1: SerialNumber: syz [ 937.210991][T23452] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7911'. [ 937.211079][T23452] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7911'. [ 937.299530][ T6299] usb 1-1: Unknown endpoint type found, address 0x81 [ 937.299570][ T6299] usb 1-1: Not enough endpoints found in device, aborting! [ 937.584547][ T6299] usb 1-1: USB disconnect, device number 100 [ 937.783362][T23466] syz.5.7916: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 937.783571][T23466] CPU: 0 UID: 0 PID: 23466 Comm: syz.5.7916 Not tainted syzkaller #0 PREEMPT(full) [ 937.783624][T23466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 937.783650][T23466] Call Trace: [ 937.783720][T23466] [ 937.783736][T23466] dump_stack_lvl+0x100/0x190 [ 937.783799][T23466] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 937.783878][T23466] warn_alloc.cold+0x9e/0xb2 [ 937.783925][T23466] ? __pfx_warn_alloc+0x10/0x10 [ 937.783985][T23466] ? __lock_acquire+0x5c0/0x1f40 [ 937.784062][T23466] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 937.784128][T23466] __vmalloc_node_range_noprof+0x11f2/0x1440 [ 937.784178][T23466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.784227][T23466] ? rcu_is_watching+0x13/0xc0 [ 937.784289][T23466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.784338][T23466] ? trace_contention_end+0x126/0x160 [ 937.784392][T23466] ? __mutex_lock+0x267/0x1c10 [ 937.784436][T23466] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 937.784504][T23466] ? lockdep_hardirqs_on+0x7d/0x110 [ 937.784567][T23466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.784623][T23466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.784676][T23466] ? __pfx___mutex_lock+0x10/0x10 [ 937.784715][T23466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.784762][T23466] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 937.784813][T23466] ? tomoyo_path_number_perm+0x188/0x580 [ 937.784880][T23466] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 937.784943][T23466] __vmalloc_node_noprof+0xad/0xf0 [ 937.784988][T23466] ? dvb_demux_do_ioctl+0x9e0/0x1200 [ 937.785059][T23466] dvb_demux_do_ioctl+0x9e0/0x1200 [ 937.785125][T23466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.785173][T23466] ? do_vfs_ioctl+0x226/0x13e0 [ 937.785248][T23466] dvb_usercopy+0x167/0x340 [ 937.785304][T23466] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 937.785373][T23466] ? __pfx_dvb_usercopy+0x10/0x10 [ 937.785429][T23466] ? __fget_files+0x34/0x3d0 [ 937.785494][T23466] ? srso_alias_return_thunk+0x5/0xfbef5 [ 937.785541][T23466] ? __fget_files+0x21f/0x3d0 [ 937.785600][T23466] dvb_demux_ioctl+0x29/0x40 [ 937.785666][T23466] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 937.785741][T23466] __x64_sys_ioctl+0x18e/0x210 [ 937.785812][T23466] do_syscall_64+0x123/0x790 [ 937.785857][T23466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.785900][T23466] RIP: 0033:0x7f992959f559 [ 937.785931][T23466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.785971][T23466] RSP: 002b:00007f992a3f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.786009][T23466] RAX: ffffffffffffffda RBX: 00007f9929825fa0 RCX: 00007f992959f559 [ 937.786037][T23466] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000003 [ 937.786063][T23466] RBP: 00007f9929636b20 R08: 0000000000000000 R09: 0000000000000000 [ 937.786089][T23466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.786114][T23466] R13: 00007f9929826038 R14: 00007f9929825fa0 R15: 00007ffe7d2620f8 [ 937.786170][T23466] [ 937.815677][T23466] Mem-Info: [ 937.815702][T23466] active_anon:11521 inactive_anon:0 isolated_anon:0 [ 937.815702][T23466] active_file:0 inactive_file:56361 isolated_file:0 [ 937.815702][T23466] unevictable:0 dirty:433 writeback:75 [ 937.815702][T23466] slab_reclaimable:12134 slab_unreclaimable:104994 [ 937.815702][T23466] mapped:36356 shmem:3770 pagetables:1445 [ 937.815702][T23466] sec_pagetables:0 bounce:0 [ 937.815702][T23466] kernel_misc_reclaimable:0 [ 937.815702][T23466] free:1225608 free_pcp:11325 free_cma:0 [ 937.815802][T23466] Node 0 active_anon:46084kB inactive_anon:0kB active_file:0kB inactive_file:225244kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145424kB dirty:1728kB writeback:300kB shmem:15080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12604kB pagetables:5620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 937.815908][T23466] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 937.816005][T23466] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 937.816115][T23466] lowmem_reserve[]: 0 2448 2450 2450 2450 [ 937.816180][T23466] Node 0 DMA32 free:945096kB boost:0kB min:33788kB low:42232kB high:50676kB reserved_highatomic:0kB free_highatomic:0kB active_anon:46084kB inactive_anon:0kB active_file:0kB inactive_file:225244kB unevictable:0kB writepending:2028kB zspages:0kB present:3129332kB managed:2507076kB mlocked:0kB bounce:0kB free_pcp:44740kB local_pcp:24256kB free_cma:0kB [ 937.816292][T23466] lowmem_reserve[]: 0 0 1 1 1 [ 937.816356][T23466] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1784kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 937.816470][T23466] lowmem_reserve[]: 0 0 0 0 0 [ 937.816535][T23466] Node 1 Normal free:3941980kB boost:0kB min:56088kB low:70108kB high:84128kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:556kB local_pcp:248kB free_cma:0kB [ 937.816662][T23466] lowmem_reserve[]: 0 0 0 0 0 [ 937.816728][T23466] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 937.817045][T23466] Node 0 DMA32: 886*4kB (UME) 826*8kB (UME) 278*16kB (UME) 335*32kB (UME) 379*64kB (UME) 233*128kB (UME) 102*256kB (UM) 34*512kB (UM) 19*1024kB (UM) 12*2048kB (UME) 190*4096kB (UM) = 945192kB [ 937.827785][T23466] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 937.827975][T23466] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 3*16kB (UM) 8*32kB (UM) 9*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3942032kB [ 937.843475][T23466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 937.844897][T23466] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 937.844932][T23466] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 937.844961][T23466] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 937.844992][T23466] 59854 total pagecache pages [ 937.845006][T23466] 0 pages in swap cache [ 937.845019][T23466] Free swap = 124996kB [ 937.845033][T23466] Total swap = 124996kB [ 937.845050][T23466] 2097051 pages RAM [ 937.845063][T23466] 0 pages HighMem/MovableOnly [ 937.845076][T23466] 438220 pages reserved [ 937.845108][T23466] 0 pages cma reserved [ 939.452580][ T6299] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 939.618884][ T6299] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 939.622410][ T6299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 939.622459][ T6299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1152, setting to 1024 [ 939.661481][ T6299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.661527][ T6299] usb 5-1: Product: syz [ 939.661555][ T6299] usb 5-1: Manufacturer: syz [ 939.661583][ T6299] usb 5-1: SerialNumber: syz [ 939.691466][ T6299] usb 5-1: config 0 descriptor?? [ 939.763021][ T6223] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 939.865333][T23527] bond2: entered promiscuous mode [ 939.866678][T23527] 8021q: adding VLAN 0 to HW filter on device bond2 [ 939.924305][ T6223] usb 6-1: New USB device found: idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 939.936614][ T6223] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 939.936662][ T6223] usb 6-1: config 0 has no interface number 0 [ 939.936715][ T6223] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 939.936756][ T6223] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 939.936805][ T6223] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 939.936851][ T6223] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 939.936917][ T6223] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 939.936964][ T6223] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 939.937031][ T6223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.961654][ T6223] usb 6-1: config 0 descriptor?? [ 939.964297][T23517] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 939.964475][T23517] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 940.012337][ T6223] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 940.124510][ T6299] usb 5-1: USB disconnect, device number 104 [ 940.261039][ T6397] udevd[6397]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.400445][ T9] usb 6-1: USB disconnect, device number 93 [ 940.433561][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 940.622831][T23537] loop2: detected capacity change from 0 to 32768 [ 940.636249][T23537] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7952 (23537) [ 940.664993][T23537] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 940.665048][T23537] BTRFS info (device loop2): using crc32c checksum algorithm [ 940.714142][T23544] loop3: detected capacity change from 0 to 4096 [ 940.808631][T23544] ntfs3(loop3): ino=9, mi_enum_attr [ 940.808677][T23544] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 940.827251][T23544] ntfs3(loop3): ino=9, mi_enum_attr [ 940.827384][T23544] ntfs3(loop3): ino=b, mi_enum_attr [ 940.827483][T23544] ntfs3(loop3): Failed to load $Extend (-22). [ 940.827513][T23544] ntfs3(loop3): Failed to initialize $Extend. [ 940.849166][T23537] BTRFS info (device loop2): enabling ssd optimizations [ 940.849204][T23537] BTRFS info (device loop2): turning on flush-on-commit [ 940.849235][T23537] BTRFS info (device loop2): enabling free space tree [ 940.849264][T23537] BTRFS info (device loop2): enabling auto defrag [ 940.849294][T23537] BTRFS info (device loop2): use lzo compression, level 1 [ 940.849330][T23537] BTRFS info (device loop2): max_inline set to 4096 [ 940.952378][T23537] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 940.952599][T23537] BTRFS error (device loop2 state M): nologreplay must be used with ro mount option [ 941.173487][ T6065] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 942.206634][T23602] vers=2.0 not permitted when mounting with smb3 [ 942.206634][T23602] [ 942.206888][T23602] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 942.288735][T23607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7979'. [ 942.616849][T23617] netlink: 'syz.5.7984': attribute type 1 has an invalid length. [ 942.656099][T23623] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 943.249101][T23643] xt_hashlimit: size too large, truncated to 1048576 [ 943.249131][T23643] xt_hashlimit: max too large, truncated to 1048576 [ 943.249234][T23643] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 944.429922][T23647] loop5: detected capacity change from 0 to 32768 [ 944.482821][T23647] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 944.557009][T23647] XFS (loop5): Ending clean mount [ 944.580998][T23656] loop3: detected capacity change from 0 to 32768 [ 944.593238][T23656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8001 (23656) [ 944.633905][T23656] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 944.633962][T23656] BTRFS info (device loop3): using crc32c checksum algorithm [ 944.726639][T23656] BTRFS info (device loop3): turning on async discard [ 944.726681][T23656] BTRFS info (device loop3): enabling free space tree [ 944.726712][T23656] BTRFS info (device loop3): enabling auto defrag [ 944.726741][T23656] BTRFS info (device loop3): force zlib compression, level 3 [ 944.726777][T23656] BTRFS info (device loop3): max_inline set to 0 [ 944.786747][T23647] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 [ 944.786827][T23647] XFS (loop5): Unmount and run xfs_repair [ 944.786852][T23647] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 944.786885][T23647] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff AB3B............ [ 944.786916][T23647] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 944.786946][T23647] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a .7.nt.N..._.'K.: [ 944.786977][T23647] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01 .....;%......... [ 944.787007][T23647] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 944.787036][T23647] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 944.787078][T23647] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 944.787106][T23647] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 944.787414][T23647] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x256/0x520" at daddr 0x4 len 4 error 74 [ 944.908639][T23647] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c5/0x8b0 (fs/xfs/xfs_trans_buf.c:280). Shutting down filesystem. [ 944.908740][T23647] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 945.017456][ T6066] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 945.025138][ T6067] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 945.390192][T23716] ebt_among: dst integrity fail: 300 [ 945.527295][T23721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8022'. [ 945.806532][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 945.806581][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 945.806616][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0x2c3f instead [ 945.806653][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x01d5 instead [ 945.806685][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 945.806717][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 945.806749][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 945.806789][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 945.806853][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 945.806916][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 945.808688][T23732] jffs2: Further such events for this erase block will not be printed [ 945.811108][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 945.811147][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 945.811182][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0x2c3f instead [ 945.811218][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x01d5 instead [ 945.811245][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 945.811275][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 945.811307][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 945.811348][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 945.811406][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 945.811465][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 945.811495][T23732] jffs2: Further such events for this erase block will not be printed [ 945.812197][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0x4255 instead [ 945.812229][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0x0001 instead [ 945.812263][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002018: 0x2c3f instead [ 945.812299][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000203c: 0x01d5 instead [ 945.824577][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0x4255 instead [ 945.824616][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0x0001 instead [ 945.824651][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003018: 0x2c3f instead [ 945.824688][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000303c: 0x01d5 instead [ 945.824783][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0x4255 instead [ 945.824815][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0x0001 instead [ 945.824849][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004018: 0x2c3f instead [ 945.824886][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000403c: 0x01d5 instead [ 945.824975][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0x4255 instead [ 945.825007][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0x0001 instead [ 945.825040][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005018: 0x2c3f instead [ 945.825083][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000503c: 0x01d5 instead [ 945.825172][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0x4255 instead [ 945.825204][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0x0001 instead [ 945.825238][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006018: 0x2c3f instead [ 945.825274][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000603c: 0x01d5 instead [ 945.825363][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0x4255 instead [ 945.825394][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0x0001 instead [ 945.825427][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007018: 0x2c3f instead [ 945.825464][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000703c: 0x01d5 instead [ 945.825552][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0x4255 instead [ 945.825583][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0x0001 instead [ 945.825617][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008018: 0x2c3f instead [ 945.825654][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000803c: 0x01d5 instead [ 945.825758][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0x4255 instead [ 945.825789][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0x0001 instead [ 945.825824][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009018: 0x2c3f instead [ 945.825861][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000903c: 0x01d5 instead [ 945.825950][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0x4255 instead [ 945.825982][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0x0001 instead [ 945.826016][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a018: 0x2c3f instead [ 945.826053][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a03c: 0x01d5 instead [ 945.841604][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0x4255 instead [ 945.841643][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0x0001 instead [ 945.841678][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b018: 0x2c3f instead [ 945.841716][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b03c: 0x01d5 instead [ 945.841810][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0x4255 instead [ 945.841858][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0x0001 instead [ 945.841964][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c018: 0x2c3f instead [ 945.842002][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c03c: 0x01d5 instead [ 945.842100][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0x4255 instead [ 945.842132][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0x0001 instead [ 945.842166][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d018: 0x2c3f instead [ 945.842204][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d03c: 0x01d5 instead [ 945.842294][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0x4255 instead [ 945.842326][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0x0001 instead [ 945.842361][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e018: 0x2c3f instead [ 945.842398][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e03c: 0x01d5 instead [ 945.842488][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0x4255 instead [ 945.842521][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0x0001 instead [ 945.842556][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f018: 0x2c3f instead [ 945.842593][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f03c: 0x01d5 instead [ 945.842687][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0x4255 instead [ 945.842719][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0x0001 instead [ 945.842754][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010018: 0x2c3f instead [ 945.842792][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001003c: 0x01d5 instead [ 945.842882][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0x4255 instead [ 945.842914][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0x0001 instead [ 945.842948][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011018: 0x2c3f instead [ 945.842986][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001103c: 0x01d5 instead [ 945.843097][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x4255 instead [ 945.843130][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0x0001 instead [ 945.848343][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x2c3f instead [ 945.848383][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001203c: 0x01d5 instead [ 945.848474][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x4255 instead [ 945.848507][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x0001 instead [ 945.848542][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x2c3f instead [ 945.848579][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001303c: 0x01d5 instead [ 945.848669][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4255 instead [ 945.848701][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0x0001 instead [ 945.848736][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x2c3f instead [ 945.848773][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001403c: 0x01d5 instead [ 945.848863][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0x4255 instead [ 945.848895][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x0001 instead [ 945.848929][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0x2c3f instead [ 945.848967][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001503c: 0x01d5 instead [ 945.849080][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x4255 instead [ 945.849112][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x0001 instead [ 945.849146][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x2c3f instead [ 945.849184][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001603c: 0x01d5 instead [ 945.849281][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x4255 instead [ 945.849313][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x0001 instead [ 945.849347][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x2c3f instead [ 945.849385][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001703c: 0x01d5 instead [ 945.849475][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x4255 instead [ 945.849507][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x0001 instead [ 945.849541][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x2c3f instead [ 945.849579][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001803c: 0x01d5 instead [ 945.849673][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x4255 instead [ 945.849705][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0x0001 instead [ 945.849740][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x2c3f instead [ 945.849778][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001903c: 0x01d5 instead [ 945.849882][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x4255 instead [ 945.856770][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0x0001 instead [ 945.856808][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0x2c3f instead [ 945.856846][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a03c: 0x01d5 instead [ 945.856938][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x4255 instead [ 945.856970][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0x0001 instead [ 945.857003][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0x2c3f instead [ 945.857040][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b03c: 0x01d5 instead [ 945.857139][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0x4255 instead [ 945.857170][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0x0001 instead [ 945.857205][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x2c3f instead [ 945.857242][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c03c: 0x01d5 instead [ 945.857331][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x4255 instead [ 945.857363][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x0001 instead [ 945.857396][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x2c3f instead [ 945.857433][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d03c: 0x01d5 instead [ 945.857522][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x4255 instead [ 945.857553][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x0001 instead [ 945.857587][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x2c3f instead [ 945.857640][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e03c: 0x01d5 instead [ 945.857730][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0x4255 instead [ 945.857761][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x0001 instead [ 945.857795][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x2c3f instead [ 945.857832][T23732] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f03c: 0x01d5 instead [ 945.857935][T23732] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 945.857953][T23732] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 947.556703][T23749] loop2: detected capacity change from 0 to 2048 [ 947.616375][T23749] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 948.220331][T23766] bond2: entered promiscuous mode [ 948.220867][T23766] 8021q: adding VLAN 0 to HW filter on device bond2 [ 948.747530][T23761] loop4: detected capacity change from 0 to 40427 [ 948.754517][T23761] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 948.754557][T23761] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 948.757621][T23761] F2FS-fs (loop4): invalid crc value [ 949.163105][T23761] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 949.244610][T23761] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 949.244654][T23761] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 949.252730][T23771] loop5: detected capacity change from 0 to 32768 [ 949.276518][T23771] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.8045 (23771) [ 949.302513][T23771] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 949.302564][T23771] BTRFS info (device loop5): using blake2b checksum algorithm [ 949.330333][T23769] loop3: detected capacity change from 0 to 32768 [ 949.345114][T23769] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.8043 (23769) [ 949.378991][T23769] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 949.379047][T23769] BTRFS info (device loop3): using crc32c checksum algorithm [ 949.475197][T23801] loop2: detected capacity change from 0 to 4096 [ 949.545785][T23771] BTRFS info (device loop5 state EC): setting nodatasum [ 949.545833][T23771] BTRFS info (device loop5 state EC): setting nodatacow [ 949.545863][T23771] BTRFS info (device loop5 state EC): enabling free space tree [ 949.545895][T23771] BTRFS info (device loop5 state EC): force clearing of disk cache [ 949.545926][T23771] BTRFS info (device loop5 state EC): enabling auto defrag [ 949.545957][T23771] BTRFS info (device loop5 state EC): ignoring data csums [ 949.607938][T23769] BTRFS info (device loop3): enabling ssd optimizations [ 949.607978][T23769] BTRFS info (device loop3): turning on flush-on-commit [ 949.608013][T23769] BTRFS info (device loop3): enabling free space tree [ 949.608044][T23769] BTRFS info (device loop3): enabling auto defrag [ 949.608075][T23769] BTRFS info (device loop3): use lzo compression, level 1 [ 949.608113][T23769] BTRFS info (device loop3): max_inline set to 4096 [ 949.620313][T23832] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 949.725369][T23769] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 949.725550][T23769] BTRFS error (device loop3 state M): nologreplay must be used with ro mount option [ 949.802344][T23771] BTRFS error (device loop5 state EMC): ignoredatacsums must be used with ro mount option [ 949.811719][T23801] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 950.012883][T23801] Remounting filesystem read-only [ 950.012921][T23801] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 950.073012][ T6067] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 950.108611][ T6066] BTRFS info (device loop5 state EC): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 951.688794][T23865] AppArmor: change_hat: Invalid input '0' [ 952.226583][T23878] loop3: detected capacity change from 0 to 4096 [ 952.310855][T23884] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 952.360300][T23885] loop2: detected capacity change from 0 to 64 [ 952.400810][T23885] hfs: unable to locate alternate MDB [ 952.400833][T23885] hfs: continuing without an alternate MDB [ 952.413402][T23878] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 952.439974][T23878] Remounting filesystem read-only [ 952.439997][T23878] NILFS error (device loop3): nilfs_readdir: bad page in #2 [ 953.158441][T23902] Cannot find map_set index 135 as target [ 953.573928][T23925] loop4: detected capacity change from 0 to 64 [ 953.616079][T23925] hfs: unable to locate alternate MDB [ 953.616102][T23925] hfs: continuing without an alternate MDB [ 953.891056][T23931] xt_ipvs: protocol family 7 not supported [ 954.075243][T23942] netlink: 'syz.4.8110': attribute type 49 has an invalid length. [ 954.209868][T23942] bond0: (slave bond_slave_0): Releasing backup interface [ 954.400260][T23942] bond_slave_0: entered promiscuous mode [ 954.400296][T23942] bond_slave_0: entered allmulticast mode [ 955.001406][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 955.001490][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 955.001553][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 955.001615][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 955.001676][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 955.001738][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 955.001799][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 955.001860][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 955.001922][T23971] netlink: 'syz.3.8122': attribute type 3 has an invalid length. [ 956.355455][ T30] audit: type=1326 audit(2000525940.263:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24027 comm="syz.3.8149" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015c59f559 code=0x7ffc0000 [ 956.355548][ T30] audit: type=1326 audit(2000525940.263:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24027 comm="syz.3.8149" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015c59f559 code=0x7ffc0000 [ 956.426077][ T30] audit: type=1326 audit(2000525940.329:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24027 comm="syz.3.8149" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f015c59f559 code=0x7ffc0000 [ 956.426166][ T30] audit: type=1326 audit(2000525940.329:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24027 comm="syz.3.8149" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015c59f559 code=0x7ffc0000 [ 956.426242][ T30] audit: type=1326 audit(2000525940.329:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24027 comm="syz.3.8149" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f015c59f559 code=0x7ffc0000 [ 957.173140][T24059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 958.030884][T24100] xt_policy: too many policy elements [ 958.033503][ T6202] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 958.199296][ T6202] usb 2-1: Using ep0 maxpacket: 32 [ 958.203466][ T6202] usb 2-1: New USB device found: idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 958.205197][ T6202] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.205259][ T6202] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC3, changing to 0x83 [ 958.205305][ T6202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 958.205352][ T6202] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 958.216825][ T6202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 958.216868][ T6202] usb 2-1: Product: syz [ 958.216895][ T6202] usb 2-1: Manufacturer: syz [ 958.216921][ T6202] usb 2-1: SerialNumber: syz [ 958.237317][ T6202] usb 2-1: config 0 descriptor?? [ 958.269069][ T6202] usb 2-1: no audio or video endpoints found [ 958.331818][T24110] netlink: 100 bytes leftover after parsing attributes in process `syz.0.8184'. [ 958.536847][T24112] loop4: detected capacity change from 0 to 4096 [ 958.548571][ T6202] usb 2-1: USB disconnect, device number 95 [ 958.608888][T24118] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 958.683723][T24112] NILFS error (device loop4): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0 [ 958.686693][T24112] Remounting filesystem read-only [ 958.686709][T24112] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 959.300242][T24143] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8196'. [ 959.320059][T24144] loop2: detected capacity change from 0 to 64 [ 959.627001][T24157] fuse: Invalid rootmode [ 959.663237][T24159] validate_nla: 92 callbacks suppressed [ 959.663271][T24159] netlink: 'syz.0.8204': attribute type 21 has an invalid length. [ 961.070838][T24223] netlink: 'syz.4.8234': attribute type 12 has an invalid length. [ 961.196287][ T6076] Bluetooth: hci5: command 0x0c1a tx timeout [ 961.239590][T24236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8240'. [ 961.239634][T24236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8240'. [ 961.239862][T24236] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8240'. [ 961.401132][T24240] mmap: syz.0.8246 (24240): VmData 37478400 exceed data ulimit 40588. Update limits or use boot option ignore_rlimit_data. [ 961.647089][T24252] loop3: detected capacity change from 0 to 64 [ 962.189946][T24276] netlink: 'syz.2.8260': attribute type 21 has an invalid length. [ 962.449460][T24288] rxe_eth0 speed is unknown, defaulting to 1000 [ 962.453053][T24289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8268'. [ 962.474057][T24289] ifb0: entered allmulticast mode [ 962.537084][T24294] netlink: 'syz.5.8271': attribute type 29 has an invalid length. [ 962.537118][T24294] netlink: 'syz.5.8271': attribute type 3 has an invalid length. [ 962.537143][T24294] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8271'. [ 962.620955][T24293] geneve2: entered allmulticast mode [ 963.052740][T24316] netlink: 'syz.1.8282': attribute type 61 has an invalid length. [ 963.148320][T24319] netlink: 388 bytes leftover after parsing attributes in process `syz.3.8286'. [ 963.230487][T24325] loop5: detected capacity change from 0 to 8 [ 963.246242][T24325] Filesystem uses "unknown" compression. This is not supported [ 963.380398][T24329] netlink: 820 bytes leftover after parsing attributes in process `syz.3.8289'. [ 963.380503][T24329] netlink: 820 bytes leftover after parsing attributes in process `syz.3.8289'. [ 963.546921][ T6285] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 963.667782][T24342] 9p: Unknown Cache mode or invalid value f [ 963.723698][ T6285] usb 6-1: not running at top speed; connect to a high speed hub [ 963.723749][ T6285] usb 6-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 963.725092][ T6285] usb 6-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 963.725154][ T6285] usb 6-1: config 1 interface 1 has no altsetting 0 [ 963.725205][ T6285] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.811740][ T6285] uvcvideo 6-1:1.0: Found UVC 1.00 device (046d:0825) [ 963.811834][ T6285] usb 6-1: selecting invalid altsetting 0 [ 964.020773][ T6285] uvcvideo 6-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 964.021220][ T6285] uvcvideo 6-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 964.021290][ T6285] uvcvideo 6-1:1.1: Failed to initialize the device (-71). [ 964.021415][ T6285] usb 6-1: selecting invalid altsetting 0 [ 964.022005][ T6285] uvcvideo 6-1:1.0: probe with driver uvcvideo failed with error -71 [ 964.027397][ T6285] usb 6-1: selecting invalid altsetting 0 [ 964.027438][ T6285] usbtest 6-1:1.1: probe with driver usbtest failed with error -22 [ 964.096290][ T6285] usb 6-1: USB disconnect, device number 94 [ 964.145245][T24125] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 964.306243][T24125] usb 5-1: New USB device found: idVendor=0489, idProduct=e057, bcdDevice=0.00 [ 964.310630][T24125] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.310668][T24125] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 964.310734][T24125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.356124][T24125] usb 5-1: config 0 descriptor?? [ 964.830256][T24125] Bluetooth: Can't get version to change to load ram patch err [ 964.830285][T24125] Bluetooth: Loading patch file failed [ 964.830322][T24125] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 964.838109][T24125] usb 5-1: USB disconnect, device number 105 [ 965.364244][T24404] xt_policy: neither incoming nor outgoing policy selected [ 965.402339][T24398] loop3: detected capacity change from 0 to 4096 [ 965.538919][T24398] ntfs3(loop3): ino=19, mi_enum_attr [ 965.538965][T24398] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 965.863841][T24421] netlink: 'syz.2.8332': attribute type 1 has an invalid length. [ 965.863875][T24421] netlink: 'syz.2.8332': attribute type 3 has an invalid length. [ 965.863899][T24421] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8332'. [ 966.903174][T24125] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 967.062795][T24125] usb 6-1: Using ep0 maxpacket: 32 [ 967.065046][T24125] usb 6-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 967.066396][T24125] usb 6-1: config index 0 descriptor too short (expected 539, got 27) [ 967.066461][T24125] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 967.066503][T24125] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 967.072292][T24125] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.072331][T24125] usb 6-1: Product: syz [ 967.072359][T24125] usb 6-1: Manufacturer: syz [ 967.072386][T24125] usb 6-1: SerialNumber: syz [ 967.148778][T24125] usb 6-1: config 0 descriptor?? [ 967.154166][T24125] hub 6-1:0.0: bad descriptor, ignoring hub [ 967.154209][T24125] hub 6-1:0.0: probe with driver hub failed with error -5 [ 967.185901][T24125] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input116 [ 967.203887][T24125] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 967.251553][T24125] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 967.378026][T24483] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8363'. [ 967.490240][T24125] usb 6-1: USB disconnect, device number 95 [ 967.829797][T24503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 967.916315][T24505] loop4: detected capacity change from 0 to 512 [ 967.932680][T24505] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 967.950472][T24505] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 967.950810][T24505] EXT4-fs (loop4): orphan cleanup on readonly fs [ 967.956400][T24505] EXT4-fs warning (device loop4): ext4_enable_quotas:7310: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 967.956453][T24505] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 967.963476][T24505] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #16: comm syz.4.8374: corrupted xattr block 31: invalid header [ 967.963532][T24505] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 967.970361][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 967.970394][ C1] EXT4-fs (loop4): initial error at time 2000525951: ext4_xattr_delete_inode:2933: inode 16 [ 967.970445][ C1] EXT4-fs (loop4): last error at time 2000525951: ext4_xattr_delete_inode:2933: inode 16 [ 967.975766][T24505] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 967.975906][T24505] EXT4-fs (loop4): 1 orphan inode deleted [ 967.984969][T24509] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8375'. [ 967.995922][T24505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 968.213649][ T6062] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.309483][T24517] netlink: 'syz.2.8383': attribute type 29 has an invalid length. [ 968.665107][T24532] netlink: 'syz.0.8385': attribute type 60 has an invalid length. [ 968.725772][T24534] netlink: 'syz.3.8386': attribute type 21 has an invalid length. [ 968.725873][T24534] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8386'. [ 968.767611][T24537] xt_l2tp: v2 doesn't support IP mode [ 968.874736][T24544] netlink: 'syz.2.8390': attribute type 1 has an invalid length. [ 969.180248][ T6195] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 969.342295][ T6195] usb 5-1: New USB device found: idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 969.353827][ T6195] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 969.353902][ T6195] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 969.353938][ T6195] usb 5-1: config 220 has no interface number 2 [ 969.354037][ T6195] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 56 [ 969.354083][ T6195] usb 5-1: config 220 interface 1 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 969.354123][ T6195] usb 5-1: config 220 interface 1 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 969.354172][ T6195] usb 5-1: config 220 interface 0 has no altsetting 0 [ 969.354209][ T6195] usb 5-1: config 220 interface 76 has no altsetting 0 [ 969.354243][ T6195] usb 5-1: config 220 interface 1 has no altsetting 0 [ 969.367725][ T6195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.367767][ T6195] usb 5-1: Product: syz [ 969.367795][ T6195] usb 5-1: Manufacturer: syz [ 969.367821][ T6195] usb 5-1: SerialNumber: syz [ 969.576725][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 969.576839][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 969.676220][ T6195] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22 [ 969.754009][ T6195] usb 5-1: USB disconnect, device number 106 [ 970.856907][T24625] comedi comedi1: Minor 3 could not be opened [ 970.948016][T24629] netlink: 'syz.1.8428': attribute type 1 has an invalid length. [ 971.141390][T24636] usb usb8: usbfs: process 24636 (syz.4.8430) did not claim interface 0 before use [ 971.596347][T24660] usb usb7: usbfs: process 24660 (syz.5.8443) did not claim interface 0 before use [ 971.668317][ T6195] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 971.827730][ T6195] usb 4-1: Using ep0 maxpacket: 8 [ 971.841065][ T6195] usb 4-1: unable to get BOS descriptor or descriptor too short [ 971.841134][ T6195] usb 4-1: New USB device found: idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 971.847989][ T6195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 971.848041][ T6195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 971.848090][ T6195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 971.848130][ T6195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 971.848178][ T6195] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 971.848221][ T6195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 971.848261][ T6195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 971.848300][ T6195] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 971.859967][ T6195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.860010][ T6195] usb 4-1: Product: syz [ 971.860037][ T6195] usb 4-1: Manufacturer: syz [ 971.860063][ T6195] usb 4-1: SerialNumber: syz [ 971.877904][ T6195] usb 4-1: config 0 descriptor?? [ 971.879452][T24653] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 971.905767][ T6195] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 972.288363][ T6195] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 972.316492][ T6195] usb 4-1: USB disconnect, device number 101 [ 972.422498][ T8422] udevd[8422]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 972.691600][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8461'. [ 972.792675][T24126] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 972.953724][T24126] usb 3-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 972.955073][T24126] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 972.955118][T24126] usb 3-1: config 0 has no interface number 0 [ 972.955173][T24126] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 972.955222][T24126] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 972.955278][T24126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.018017][T24126] usb 3-1: config 0 descriptor?? [ 973.039172][T24126] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 973.315053][T24693] iowarrior 3-1:0.1: Error -90 while submitting URB [ 973.320543][T24126] usb 3-1: USB disconnect, device number 99 [ 973.485009][T24733] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8474'. [ 973.588907][T24738] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8477'. [ 973.588947][T24738] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8477'. [ 973.699887][T24742] No source specified [ 973.914528][T24752] xt_connbytes: Forcing CT accounting to be enabled [ 974.216006][T24763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8486'. [ 974.271040][T24756] loop4: detected capacity change from 0 to 4096 [ 974.337871][T24768] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8487'. [ 974.421254][T24756] ntfs3(loop4): ino=19, mi_enum_attr [ 974.421300][T24756] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 974.556144][T24775] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 974.772652][T24782] SET target dimension over the limit! [ 974.945492][T24790] netlink: 'syz.4.8498': attribute type 2 has an invalid length. [ 974.965255][T24785] bond1: option arp_validate: invalid value (18446744073709551615) [ 974.993754][T24785] bond1 (unregistering): Released all slaves [ 975.045993][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 976.294037][ T6195] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 976.454212][ T6195] usb 2-1: Using ep0 maxpacket: 8 [ 976.455107][ T6195] usb 2-1: New USB device found: idVendor=0225, idProduct=0000, bcdDevice=0.00 [ 976.459119][ T6195] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.459161][ T6195] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 976.459225][ T6195] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 976.459271][ T6195] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 976.459322][ T6195] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 976.459388][ T6195] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.479235][ T6195] hub 2-1:1.0: bad descriptor, ignoring hub [ 976.479275][ T6195] hub 2-1:1.0: probe with driver hub failed with error -5 [ 976.480019][ T6195] cdc_wdm 2-1:1.0: skipping garbage [ 976.480046][ T6195] cdc_wdm 2-1:1.0: skipping garbage [ 976.480135][ T6195] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 976.511804][T24860] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8533'. [ 976.860657][ T6195] usb 2-1: USB disconnect, device number 96 [ 976.939123][T24877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8541'. [ 976.939182][T24877] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8541'. [ 977.066273][T24883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8543'. [ 977.273176][T24892] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 977.598856][T24126] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 977.763899][T24126] usb 5-1: unable to get BOS descriptor or descriptor too short [ 977.763964][T24126] usb 5-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 977.765326][T24126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 977.765365][T24126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 977.771969][T24126] usb 5-1: string descriptor 0 read error: -22 [ 977.772129][T24126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.834539][T24126] usb 5-1: selecting invalid altsetting 1 [ 977.835316][T24126] usb 5-1: unit 3 not found! [ 978.069825][T24126] usb 5-1: cannot request logical cluster ID: 0 (err: -5) [ 978.069868][T24126] usb 5-1: invalid MIXER UNIT descriptor 6 [ 978.121302][ T6076] Bluetooth: hci5: command 0x0c1a tx timeout [ 978.196498][T24898] loop5: detected capacity change from 0 to 32768 [ 978.287695][ T30] audit: type=1800 audit(2000525960.787:61): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8552" name="file1" dev="loop5" ino=4 res=0 errno=-22 [ 978.381010][T24126] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -5 [ 978.404319][T24126] usb 5-1: USB disconnect, device number 107 [ 978.503452][T24933] __nla_validate_parse: 2 callbacks suppressed [ 978.503482][T24933] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8568'. [ 979.203211][T24953] bond1: entered allmulticast mode [ 979.451038][T24968] erspan1: entered allmulticast mode [ 979.939063][T24994] veth3: entered promiscuous mode [ 979.939098][T24994] veth3: entered allmulticast mode [ 980.001901][ T6195] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 980.169994][ T6195] usb 5-1: unable to get BOS descriptor or descriptor too short [ 980.170059][ T6195] usb 5-1: New USB device found: idVendor=1235, idProduct=0010, bcdDevice=0.40 [ 980.191269][ T6195] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 980.191313][ T6195] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 980.219037][ T6195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.219083][ T6195] usb 5-1: Product: syz [ 980.219112][ T6195] usb 5-1: Manufacturer: syz [ 980.219141][ T6195] usb 5-1: SerialNumber: syz [ 980.262652][ T6195] usb 5-1: selecting invalid altsetting 1 [ 980.263412][ T6195] usb 5-1: unit 6 not found! [ 980.417903][T25012] IPv6: NLM_F_CREATE should be specified when creating new route [ 980.934548][ T6195] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 980.940832][ T6195] usb 5-1: USB disconnect, device number 108 [ 981.090886][ T6398] udevd[6398]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 981.327694][ T6202] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 981.380399][ T6299] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 981.486815][ T6202] usb 4-1: Using ep0 maxpacket: 32 [ 981.487575][ T6202] usb 4-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 981.488907][ T6202] usb 4-1: config index 0 descriptor too short (expected 539, got 27) [ 981.488972][ T6202] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 981.489014][ T6202] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 981.493792][ T6202] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.493834][ T6202] usb 4-1: Product: syz [ 981.493862][ T6202] usb 4-1: Manufacturer: syz [ 981.493890][ T6202] usb 4-1: SerialNumber: syz [ 981.550686][ T6299] usb 6-1: New USB device found: idVendor=9710, idProduct=7840, bcdDevice=0.00 [ 981.561282][ T6299] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 981.561328][ T6299] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 981.598922][ T6299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.598967][ T6299] usb 6-1: Product: syz [ 981.598994][ T6299] usb 6-1: Manufacturer: syz [ 981.599022][ T6299] usb 6-1: SerialNumber: syz [ 981.634028][ T6202] usb 4-1: config 0 descriptor?? [ 981.645377][ T6202] hub 4-1:0.0: bad descriptor, ignoring hub [ 981.645416][ T6202] hub 4-1:0.0: probe with driver hub failed with error -5 [ 981.670915][ T6299] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 981.674277][ T6202] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input117 [ 981.716248][ T6202] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 981.762377][ T6202] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 982.000409][ T6202] usb 4-1: USB disconnect, device number 102 [ 982.118495][ T6299] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 982.123440][ T6299] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 982.136310][ T6299] mos7840 ttyUSB2: probe with driver mos7840 failed with error -71 [ 982.159028][ T6299] mos7840 ttyUSB3: probe with driver mos7840 failed with error -71 [ 982.182431][ T6299] usb 6-1: USB disconnect, device number 96 [ 982.205549][ T6299] mos7840 6-1:1.0: device disconnected [ 982.403408][T25070] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8636'. [ 982.403531][T25070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8636'. [ 983.251712][T25103] kAFS: unable to lookup cell 'mS²jË¡8' [ 983.378427][ T6299] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 983.543409][ T6299] usb 3-1: unable to get BOS descriptor or descriptor too short [ 983.544416][ T6299] usb 3-1: not running at top speed; connect to a high speed hub [ 983.544459][ T6299] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 983.556934][ T6299] usb 3-1: config 2 has an invalid interface number: 8 but max is 0 [ 983.556978][ T6299] usb 3-1: config 2 has no interface number 0 [ 983.557036][ T6299] usb 3-1: config 2 interface 8 has no altsetting 0 [ 983.605432][T25117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8659'. [ 983.616415][ T6299] usb 3-1: string descriptor 0 read error: -22 [ 983.616564][ T6299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.887404][ T6299] usbtest 3-1:2.8: Linux user mode ISO test driver [ 983.887441][ T6299] usbtest 3-1:2.8: full-speed {control iso-out} tests (+alt) [ 984.136462][ T6202] usb 3-1: USB disconnect, device number 100 [ 984.305834][T25150] loop3: detected capacity change from 0 to 16 [ 984.342920][T25150] erofs (device loop3): mounted with root inode @ nid 36. [ 984.359447][ T6299] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 984.369997][T25149] loop5: detected capacity change from 0 to 1024 [ 984.386846][T25149] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 984.405053][T25150] syz.3.8674: attempt to access beyond end of device [ 984.405053][T25150] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 984.428546][T25150] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 984.428602][T25150] erofs (device loop3): read error -117 @ 0 of nid 89 [ 984.432140][ T30] audit: type=1800 audit(2000525966.543:62): pid=25150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8674" name="file2" dev="loop3" ino=89 res=0 errno=-117 [ 984.439707][T25149] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.8672: lblock 2 mapped to illegal pblock 2 (length 1) [ 984.439769][T25149] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 984.440208][T25149] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 984.440263][T25149] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.8672: lblock 0 mapped to illegal pblock 48 (length 1) [ 984.440317][T25149] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 984.442343][T25149] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 984.442374][T25149] EXT4-fs error (device loop5): ext4_acquire_dquot:7077: comm syz.5.8672: Failed to acquire dquot type 0 [ 984.442413][T25149] loop5: lost filesystem error report for type 5 error -117 [ 984.443013][T25149] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6519: Corrupt filesystem [ 984.443048][T25149] loop5: lost filesystem error report for type 5 error -117 [ 984.453996][T25149] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.8672: mark_inode_dirty error [ 984.454045][T25149] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 984.454365][T25149] EXT4-fs warning (device loop5): ext4_evict_inode:271: couldn't mark inode dirty (err -117) [ 984.454481][T25149] EXT4-fs (loop5): 1 orphan inode deleted [ 984.460921][T25149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 984.469415][T19950] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 984.490117][T19950] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 984.490178][T19950] EXT4-fs error (device loop5): ext4_release_dquot:7113: comm kworker/u8:2: Failed to release dquot type 0 [ 984.605659][T25149] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.625175][T25149] EXT4-fs error (device loop5): __ext4_get_inode_loc:4915: comm syz.5.8672: Invalid inode table block 1 in block_group 0 [ 984.625226][T25149] loop5: lost filesystem error report for type 5 error -117 [ 984.631096][ T6299] usb 1-1: New USB device found: idVendor=18d1, idProduct=1eaf, bcdDevice=0.00 [ 984.675344][ T6299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.721853][T25149] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6519: Corrupt filesystem [ 984.721894][T25149] loop5: lost filesystem error report for type 5 error -117 [ 984.722607][ T6299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.722650][ T6299] usb 1-1: Product: syz [ 984.722677][ T6299] usb 1-1: Manufacturer: syz [ 984.722705][ T6299] usb 1-1: SerialNumber: syz [ 984.774927][T25149] EXT4-fs error (device loop5): ext4_quota_off:7363: inode #3: comm syz.5.8672: mark_inode_dirty error [ 984.774978][T25149] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 984.790281][T25149] EXT4-fs error (device loop5): __ext4_get_inode_loc:4915: comm syz.5.8672: Invalid inode table block 1 in block_group 0 [ 984.790335][T25149] loop5: lost filesystem error report for type 5 error -117 [ 985.022354][ T6299] usb 1-1: Invalid number of CPorts: 0 [ 985.022407][ T6299] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -22 [ 985.216734][T25171] bond2: entered allmulticast mode [ 985.257551][ T6299] usb 1-1: USB disconnect, device number 101 [ 985.313994][T25175] AppArmor: change_hat: Invalid input '' [ 985.650383][T25191] netlink: 'syz.4.8694': attribute type 22 has an invalid length. [ 985.650421][T25191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8694'. [ 985.687630][ T6285] usb 2-1: new full-speed USB device number 97 using dummy_hcd [ 985.869398][T24126] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 985.870345][ T6285] usb 2-1: New USB device found: idVendor=09e8, idProduct=0062, bcdDevice=0.40 [ 985.875109][ T6285] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 985.880979][ T6285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.881021][ T6285] usb 2-1: Product: syz [ 985.881048][ T6285] usb 2-1: Manufacturer: syz [ 985.881092][ T6285] usb 2-1: SerialNumber: syz [ 985.887939][T25181] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 986.051585][T24126] usb 3-1: Using ep0 maxpacket: 32 [ 986.055201][T24126] usb 3-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 986.057849][T24126] usb 3-1: config index 0 descriptor too short (expected 539, got 27) [ 986.057917][T24126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 986.057989][T24126] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 986.066547][T24126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.066590][T24126] usb 3-1: Product: syz [ 986.066625][T24126] usb 3-1: Manufacturer: syz [ 986.066683][T24126] usb 3-1: SerialNumber: syz [ 986.083993][T24126] usb 3-1: config 0 descriptor?? [ 986.094482][T24126] hub 3-1:0.0: bad descriptor, ignoring hub [ 986.094521][T24126] hub 3-1:0.0: probe with driver hub failed with error -5 [ 986.128816][T24126] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input118 [ 986.154236][T24126] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 986.171728][ T6285] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 986.379586][ T6285] usb 2-1: USB disconnect, device number 97 [ 986.405243][T25210] loop4: detected capacity change from 0 to 64 [ 986.430213][T25210] hfs: unable to locate alternate MDB [ 986.430234][T25210] hfs: continuing without an alternate MDB [ 986.474893][T24126] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 986.541161][T24126] usb 3-1: USB disconnect, device number 101 [ 986.633842][ T5635] udevd[5635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.032326][ T6299] usb 6-1: new full-speed USB device number 97 using dummy_hcd [ 987.202716][ T6299] usb 6-1: not running at top speed; connect to a high speed hub [ 987.202766][ T6299] usb 6-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 987.227011][ T6299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.227056][ T6299] usb 6-1: Product: syz [ 987.227083][ T6299] usb 6-1: Manufacturer: syz [ 987.227118][ T6299] usb 6-1: SerialNumber: syz [ 987.271653][ T6299] keyspan 6-1:1.0: Keyspan 4 port adapter converter detected [ 987.291438][ T6299] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 987.298940][ T6299] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 987.325153][ T6299] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 987.340135][ T6299] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 987.388872][T25241] netlink: 'syz.2.8718': attribute type 1 has an invalid length. [ 987.388957][T25241] netlink: 'syz.2.8718': attribute type 1 has an invalid length. [ 987.736056][ T6285] usb 6-1: USB disconnect, device number 97 [ 987.773612][ T6285] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 987.794399][ T6285] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 987.829845][ T6285] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 987.853844][ T6285] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 987.857067][ T6285] keyspan 6-1:1.0: device disconnected [ 987.914014][T25255] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8725'. [ 988.004423][T25259] kAFS: unable to lookup cell 'mS²jË¡8' [ 988.111139][T25265] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8730'. [ 988.258393][T25271] Cannot find del_set index 2 as target [ 988.998710][T25304] kAFS: unable to lookup cell 'mS²jË¡8' [ 989.140587][T25310] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8751'. [ 989.140722][T25310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8751'. [ 989.643098][T25335] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8765'. [ 989.913301][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8772'. [ 990.742758][T25391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8792'. [ 990.815616][T25394] program syz.0.8793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.921746][ T6299] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 991.082434][ T6299] usb 5-1: Using ep0 maxpacket: 32 [ 991.085938][ T6299] usb 5-1: New USB device found: idVendor=14c8, idProduct=0003, bcdDevice=5.6c [ 991.088663][ T6299] usb 5-1: config index 0 descriptor too short (expected 539, got 27) [ 991.088731][ T6299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 991.088774][ T6299] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 991.095613][ T6299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.095658][ T6299] usb 5-1: Product: syz [ 991.095686][ T6299] usb 5-1: Manufacturer: syz [ 991.095714][ T6299] usb 5-1: SerialNumber: syz [ 991.102188][ T6299] usb 5-1: config 0 descriptor?? [ 991.113566][ T6299] hub 5-1:0.0: bad descriptor, ignoring hub [ 991.113603][ T6299] hub 5-1:0.0: probe with driver hub failed with error -5 [ 991.135740][ T6299] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input120 [ 991.158510][ T6299] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 991.229916][ T6299] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 991.536381][T25415] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967295 out of range (51000000..2150000000) [ 991.549893][T24126] usb 5-1: USB disconnect, device number 109 [ 992.205670][ T6195] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 992.307566][T25452] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 992.307612][T25452] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.325882][T25452] vhci_hcd vhci_hcd.0: Device attached [ 992.353940][T25455] vhci_hcd: connection closed [ 992.355298][ T152] vhci_hcd vhci_hcd.4: stop threads [ 992.355335][ T152] vhci_hcd vhci_hcd.4: release socket [ 992.355368][ T152] vhci_hcd vhci_hcd.4: disconnect device [ 992.368181][ T6195] usb 1-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.00 [ 992.371580][ T6195] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.371617][ T6195] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 992.377971][ T6195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 992.378011][ T6195] usb 1-1: SerialNumber: syz [ 992.446691][ T6195] usb 1-1: 0:2 : does not exist [ 992.945450][T24126] usb 1-1: USB disconnect, device number 102 [ 992.960113][T25477] loop3: detected capacity change from 0 to 512 [ 993.013046][T25477] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 993.640929][ T6067] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 993.813012][T25510] netlink: 'syz.0.8847': attribute type 10 has an invalid length. [ 994.053229][T25521] loop2: detected capacity change from 0 to 8 [ 994.129479][T25521] SQUASHFS error: Unable to read directory block [631:72] [ 994.557982][ T6195] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 994.564855][T25542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8862'. [ 994.718382][ T6195] usb 2-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 994.731134][ T6195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.731179][ T6195] usb 2-1: Product: syz [ 994.731207][ T6195] usb 2-1: Manufacturer: syz [ 994.731235][ T6195] usb 2-1: SerialNumber: syz [ 994.790851][ T6195] usb 2-1: USB2VGA dongle found at address 98 [ 994.809226][ T6195] usb 2-1: Allocated 8 output buffers [ 994.895752][ T6109] nvme nvme0: rdma_resolve_route failed (-110). [ 994.923674][T25544] nvme nvme0: rdma connection establishment failed (-19) [ 995.048783][ T6195] usb 2-1: Failed to early initialize device [ 995.084257][ T6195] usb 2-1: USB disconnect, device number 98 [ 995.206317][ T6285] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 995.357242][ T6299] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 995.376738][ T6285] usb 5-1: New USB device found: idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 995.387502][ T6285] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.402005][ T6285] usb 5-1: config 0 descriptor?? [ 995.449022][T25572] ªªªªª»: renamed from dummy0 (while UP) [ 995.516997][ T6299] usb 1-1: New USB device found: idVendor=046d, idProduct=08f0, bcdDevice=0.00 [ 995.518521][ T6299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.523214][ T6299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.523258][ T6299] usb 1-1: Product: syz [ 995.523286][ T6299] usb 1-1: Manufacturer: syz [ 995.523315][ T6299] usb 1-1: SerialNumber: syz [ 995.549937][ T6299] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 995.550029][ T6299] gspca_stv06xx: st6422 sensor detected [ 995.862323][ T6285] ath6kl: Failed to submit usb control message: -71 [ 995.862403][ T6285] ath6kl: unable to send the bmi data to the device: -71 [ 995.862431][ T6285] ath6kl: Unable to send get target info: -71 [ 995.865110][ T6285] ath6kl: Failed to init ath6kl core: -71 [ 995.882323][ T6285] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 995.930599][ T6285] usb 5-1: USB disconnect, device number 110 [ 996.052522][ T6299] STV06xx 1-1:1.0: probe with driver STV06xx failed with error -71 [ 996.079845][ T6299] usb 1-1: USB disconnect, device number 103 [ 996.266681][T25600] fuse: Bad value for 'fd' [ 996.456025][T25607] loop2: detected capacity change from 0 to 1024 [ 996.463344][T25607] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 996.492851][T25607] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.8892: lblock 2 mapped to illegal pblock 2 (length 1) [ 996.492918][T25607] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 996.493224][T25607] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 996.493279][T25607] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.8892: lblock 0 mapped to illegal pblock 48 (length 1) [ 996.493338][T25607] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 996.493995][T25607] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 996.494029][T25607] EXT4-fs error (device loop2): ext4_acquire_dquot:7077: comm syz.2.8892: Failed to acquire dquot type 0 [ 996.494070][T25607] loop2: lost filesystem error report for type 5 error -117 [ 996.494426][T25607] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6519: Corrupt filesystem [ 996.494463][T25607] loop2: lost filesystem error report for type 5 error -117 [ 996.499197][ C1] EXT4-fs (loop2): error count since last fsck: 4 [ 996.499228][ C1] EXT4-fs (loop2): initial error at time 2000525977: ext4_map_blocks:790: inode 3: block 2 [ 996.499286][ C1] EXT4-fs (loop2): last error at time 2000525977: ext4_reserve_inode_write:6519 [ 996.500770][T25607] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.8892: mark_inode_dirty error [ 996.500814][T25607] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 996.501541][T25607] EXT4-fs warning (device loop2): ext4_evict_inode:271: couldn't mark inode dirty (err -117) [ 996.501665][T25607] EXT4-fs (loop2): 1 orphan inode deleted [ 996.507835][T25607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 996.532220][ T160] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 996.532820][ T160] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 996.532869][ T160] EXT4-fs error (device loop2): ext4_release_dquot:7113: comm kworker/u8:7: Failed to release dquot type 0 [ 996.545908][T25607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 996.549915][T25607] EXT4-fs error (device loop2): __ext4_get_inode_loc:4915: comm syz.2.8892: Invalid inode table block 1 in block_group 0 [ 996.549964][T25607] loop2: lost filesystem error report for type 5 error -117 [ 996.551880][T25607] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6519: Corrupt filesystem [ 996.551917][T25607] loop2: lost filesystem error report for type 5 error -117 [ 996.552175][T25607] EXT4-fs error (device loop2): ext4_quota_off:7363: inode #3: comm syz.2.8892: mark_inode_dirty error [ 996.552220][T25607] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 996.553720][T25607] EXT4-fs error (device loop2): __ext4_get_inode_loc:4915: comm syz.2.8892: Invalid inode table block 1 in block_group 0 [ 996.553768][T25607] loop2: lost filesystem error report for type 5 error -117 [ 996.926841][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 997.012282][T25603] loop3: detected capacity change from 0 to 32768 [ 997.041673][T25618] xt_nat: multiple ranges no longer supported [ 997.071183][T25620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8895'. [ 997.194558][T25603] read_mapping_page failed! [ 997.202875][T25603] ERROR: (device loop3): txAbort: [ 997.202875][T25603] [ 997.286715][T25630] random: crng reseeded on system resumption [ 997.666251][ T30] audit: type=1326 audit(2000525978.934:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25643 comm="syz.2.8908" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f39f559 code=0x7ffc0000 [ 997.666337][ T30] audit: type=1326 audit(2000525978.934:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25643 comm="syz.2.8908" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f39f559 code=0x7ffc0000 [ 997.729628][ T30] audit: type=1326 audit(2000525978.981:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25643 comm="syz.2.8908" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f1a2f39f559 code=0x7ffc0000 [ 997.729717][ T30] audit: type=1326 audit(2000525978.991:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25643 comm="syz.2.8908" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f39f559 code=0x7ffc0000 [ 997.729809][ T30] audit: type=1326 audit(2000525978.991:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25643 comm="syz.2.8908" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a2f39f559 code=0x7ffc0000 [ 997.800455][T25649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8911'. [ 997.800496][T25649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8911'. [ 998.426264][T25677] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 998.711793][T25687] SET target dimension over the limit! [ 998.897036][T25695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8937'. [ 998.897072][T25695] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8937'. [ 998.940180][T25698] netlink: 'syz.4.8935': attribute type 10 has an invalid length. [ 998.992711][T25698] ipvlan0: entered allmulticast mode [ 998.992744][T25698] veth0_vlan: entered allmulticast mode [ 999.008806][T25698] team0: Device ipvlan0 failed to register rx_handler [ 999.545859][ T6195] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 999.673843][T25729] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8950'. [ 999.706818][ T6195] usb 6-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 999.708233][ T6195] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 999.708283][ T6195] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 999.716866][ T6195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.716909][ T6195] usb 6-1: Product: syz [ 999.716936][ T6195] usb 6-1: Manufacturer: syz [ 999.716963][ T6195] usb 6-1: SerialNumber: syz [ 999.737474][T25714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 999.737667][T25714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 999.749346][ T6195] mos7840 6-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 1000.271151][ T6285] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1000.313605][T24125] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1000.455617][ T6285] usb 5-1: not running at top speed; connect to a high speed hub [ 1000.455667][ T6285] usb 5-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 1000.460607][ T6285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.460650][ T6285] usb 5-1: Product: syz [ 1000.460678][ T6285] usb 5-1: Manufacturer: syz [ 1000.460706][ T6285] usb 5-1: SerialNumber: syz [ 1000.498427][T24125] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1000.536967][T24125] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.537013][T24125] usb 3-1: Product: syz [ 1000.537040][T24125] usb 3-1: Manufacturer: syz [ 1000.537068][T24125] usb 3-1: SerialNumber: syz [ 1000.562281][ T6285] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 1000.578315][ T6285] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1000.601776][ T6285] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1000.621413][ T6285] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1000.639583][ T6285] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1000.669640][T24125] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1001.002880][ T6285] usb 5-1: USB disconnect, device number 111 [ 1001.037901][ T6285] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1001.059244][ T6195] mos7840 6-1:1.0: probe with driver mos7840 failed with error -71 [ 1001.060949][ T6285] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1001.096170][ T6285] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1001.099322][ T6195] usb 6-1: USB disconnect, device number 98 [ 1001.135352][ T6285] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1001.157535][ T6285] keyspan 5-1:1.0: device disconnected [ 1001.191516][ T6299] usb 3-1: USB disconnect, device number 102 [ 1001.652215][T25763] netlink: 'syz.0.8967': attribute type 16 has an invalid length. [ 1001.652250][T25763] netlink: 'syz.0.8967': attribute type 17 has an invalid length. [ 1001.799870][T24125] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1001.800071][T24125] ath9k_htc: Failed to initialize the device [ 1001.801242][ T6299] usb 3-1: ath9k_htc: USB layer deinitialized [ 1001.963501][T25763] ip6gre1: left allmulticast mode [ 1001.964589][T25763] sit1: left allmulticast mode [ 1001.989857][T25763] bond1: left allmulticast mode [ 1001.990276][T25763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1002.293741][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1002.294003][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1002.323041][ T6299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1002.407954][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1002.706592][T19950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1002.706848][T19950] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1002.729068][T24125] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1002.737215][T25792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8983'. [ 1002.932958][ T6299] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1003.056473][T25810] random: crng reseeded on system resumption [ 1003.298046][T25820] loop4: detected capacity change from 0 to 128 [ 1003.337649][ T6195] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1003.342947][T25820] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1003.368656][T25820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1003.519464][ T6285] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1003.635547][T25834] netlink: 'syz.2.9000': attribute type 1 has an invalid length. [ 1003.933956][T25847] loop2: detected capacity change from 0 to 1024 [ 1003.989237][T25847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1004.085138][T25856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9011'. [ 1004.183723][ T6065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1004.408165][T25867] netlink: 45 bytes leftover after parsing attributes in process `syz.5.9016'. [ 1004.760868][T25883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9024'. [ 1005.112568][ T6299] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1005.207547][T24125] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1005.273996][ T6299] usb 6-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1005.277442][ T6299] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1005.277512][ T6299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.281820][ T6299] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1005.281862][ T6299] usb 6-1: Manufacturer: syz [ 1005.302854][ T6299] usb 6-1: config 0 descriptor?? [ 1005.402537][T24125] usb 2-1: not running at top speed; connect to a high speed hub [ 1005.402585][T24125] usb 2-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 1005.408832][T24125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.408878][T24125] usb 2-1: Product: syz [ 1005.408906][T24125] usb 2-1: Manufacturer: syz [ 1005.408934][T24125] usb 2-1: SerialNumber: syz [ 1005.431797][ T6299] rc_core: IR keymap rc-hauppauge not found [ 1005.431821][ T6299] Registered IR keymap rc-empty [ 1005.461070][ T6299] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1005.469981][ T6299] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input124 [ 1005.501925][T24125] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 1005.521569][T24125] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 1005.543287][T24125] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 1005.562019][T24125] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 1005.566701][T24125] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 1005.629840][ C1] igorplugusb 6-1:0.0: Error: urb status = -32 [ 1005.645054][ T6299] usb 6-1: USB disconnect, device number 99 [ 1005.734775][T25916] bridge2: entered allmulticast mode [ 1005.971030][T25924] dlm: no locking on control device [ 1006.016022][T24125] usb 2-1: USB disconnect, device number 99 [ 1006.054455][T24125] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1006.081884][T24125] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1006.111452][T24125] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1006.131806][T24125] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1006.133208][T24125] keyspan 2-1:1.0: device disconnected [ 1006.181005][T25929] loop2: detected capacity change from 0 to 256 [ 1006.184043][T25929] exfat: Deprecated parameter 'utf8' [ 1006.227286][T25929] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 1006.702462][T25947] loop5: detected capacity change from 0 to 512 [ 1006.712007][T25947] EXT4-fs: Ignoring removed oldalloc option [ 1006.743167][T25947] EXT4-fs (loop5): 1 truncate cleaned up [ 1006.750573][T25947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1006.825186][T25947] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm syz.5.9055: bg 0: block 491: padding at end of block bitmap is not set [ 1006.858086][T25947] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 1006.868692][T25947] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #13: comm syz.5.9055: invalid indirect mapped block 234881024 (level 0) [ 1006.868834][T25947] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1006.987856][T25957] block device autoloading is deprecated and will be removed. [ 1006.992093][ T6066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.150052][T25963] netlink: 'syz.4.9064': attribute type 3 has an invalid length. [ 1007.242782][T25965] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 1007.330540][T25971] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1007.851450][T25995] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1007.864223][T25997] loop5: detected capacity change from 0 to 256 [ 1007.902311][T25997] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 1008.421317][T26023] loop5: detected capacity change from 0 to 512 [ 1008.429239][T26023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1008.429396][T26023] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1008.433437][T26023] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 1008.456770][T26023] EXT4-fs (loop5): 1 truncate cleaned up [ 1008.480081][T26023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1008.563445][T26028] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9096'. [ 1008.563484][T26028] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9096'. [ 1008.660723][T26032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9098'. [ 1008.660758][T26032] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9098'. [ 1008.776268][ T6066] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.964590][T26045] netlink: 'syz.1.9103': attribute type 15 has an invalid length. [ 1009.166955][T26046] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 1009.271520][T26055] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1009.271520][T26055] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1009.531291][T26067] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 1009.733468][T26076] loop5: detected capacity change from 0 to 8 [ 1009.767007][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9115'. [ 1009.767041][T26081] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9115'. [ 1009.840386][T26076] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1009.840436][T26076] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1009.841368][ T30] audit: type=1800 audit(2000525990.324:68): pid=26076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9116" name="file1" dev="loop5" ino=5 res=0 errno=-5 [ 1009.906491][T26080] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 1010.309278][T26097] loop5: detected capacity change from 0 to 164 [ 1010.661117][T26112] trusted_key: encrypted_key: insufficient parameters specified [ 1010.850599][T26123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9139'. [ 1010.850638][T26123] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9139'. [ 1010.930503][T26126] trusted_key: encrypted_key: keylen parameter is missing [ 1010.965683][T26128] netlink: 'syz.5.9143': attribute type 1 has an invalid length. [ 1011.000682][T24125] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1011.032566][ T6299] usb 3-1: new full-speed USB device number 103 using dummy_hcd [ 1011.170757][T24125] usb 2-1: New USB device found: idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 1011.171974][T24125] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.172017][T24125] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1011.172098][T24125] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1011.172138][T24125] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1011.172164][T24125] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1011.174161][T24125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.174201][T24125] usb 2-1: Product: syz [ 1011.174227][T24125] usb 2-1: Manufacturer: syz [ 1011.174253][T24125] usb 2-1: SerialNumber: syz [ 1011.192531][ T6299] usb 3-1: not running at top speed; connect to a high speed hub [ 1011.192578][ T6299] usb 3-1: New USB device found: idVendor=0711, idProduct=0550, bcdDevice=0.00 [ 1011.194229][ T6299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 1011.194280][ T6299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1011.194328][ T6299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1011.194375][ T6299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1011.194422][ T6299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 1011.194470][ T6299] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1011.197696][ T6299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.197734][ T6299] usb 3-1: Product: syz [ 1011.197762][ T6299] usb 3-1: Manufacturer: syz [ 1011.197788][ T6299] usb 3-1: SerialNumber: syz [ 1011.208126][T26118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1011.208311][T26118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1011.208490][T26118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1011.208666][T26118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1011.208853][T26118] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1011.218021][ T6299] usb 3-1: USB2VGA dongle found at address 103 [ 1011.220590][ T6299] usb 3-1: Allocated 8 output buffers [ 1011.220621][ T6299] usb 3-1: Not attached to USB 2.0 hub, deferring init [ 1011.301450][ T6285] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1011.417145][T24125] uvcvideo 2-1:220.0: probe with driver uvcvideo failed with error -22 [ 1011.426275][T24125] usb 2-1: USB disconnect, device number 100 [ 1011.462308][T26118] usb 3-1: Device not attached to USB 2.0 hub [ 1011.464914][ T6299] usb 3-1: USB disconnect, device number 103 [ 1011.505810][ T6285] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1011.506478][ T6285] usb 5-1: not running at top speed; connect to a high speed hub [ 1011.506555][ T6285] usb 5-1: New USB device found: idVendor=09c4, idProduct=0011, bcdDevice=6.38 [ 1011.508219][ T6285] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 1011.508261][ T6285] usb 5-1: config 114 has no interface number 0 [ 1011.508316][ T6285] usb 5-1: config 114 interface 240 altsetting 232 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1011.508356][ T6285] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1011.508392][ T6285] usb 5-1: config 114 interface 240 has no altsetting 0 [ 1011.511068][ T6285] usb 5-1: string descriptor 0 read error: -22 [ 1011.511192][ T6285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.524435][T26130] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1011.527330][ T6285] ir_usb 5-1:114.240: IR Dongle converter detected [ 1011.752246][ T6285] usb 5-1: IR Dongle converter now attached to ttyUSB0 [ 1011.983910][ T6299] usb 5-1: USB disconnect, device number 112 [ 1012.012429][ T6299] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1012.024782][ T6299] ir_usb 5-1:114.240: device disconnected [ 1012.061057][T26133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9157'. [ 1012.793841][ T6299] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1012.954998][ T6299] usb 6-1: New USB device found: idVendor=1234, idProduct=5678, bcdDevice=0.00 [ 1012.960191][ T6299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1012.960232][ T6299] usb 6-1: Product: syz [ 1012.960260][ T6299] usb 6-1: Manufacturer: syz [ 1013.015456][ T6299] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input125 [ 1013.265474][T26178] comedi comedi1: comedi_parport: I/O port conflict (0x82f00,3) [ 1013.401430][ T6299] usb 6-1: USB disconnect, device number 100 [ 1013.897926][ T6076] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1013.904666][ T6076] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1013.918985][ T6076] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1013.928628][ T6076] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1013.929732][ T6076] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1014.144682][T26211] netlink: 'syz.0.9179': attribute type 1 has an invalid length. [ 1014.314479][T26217] program syz.5.9181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1014.536779][T26225] loop5: detected capacity change from 0 to 2048 [ 1014.614918][T26225] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 1014.625697][T26225] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1015.023781][T26202] rxe_eth0 speed is unknown, defaulting to 1000 [ 1015.025152][T26238] --map-set only usable from mangle table [ 1015.151294][T26242] loop2: detected capacity change from 0 to 256 [ 1015.776341][T26263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9204'. [ 1016.029840][T26274] loop2: detected capacity change from 0 to 512 [ 1016.046081][T26274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1016.046148][T26274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1016.074064][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 1016.074093][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1016.077020][T26274] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 1016.113043][T26274] EXT4-fs (loop2): 1 truncate cleaned up [ 1016.120944][T26274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1016.159440][T14210] Bluetooth: hci6: command tx timeout [ 1016.267431][T26285] netlink: 'syz.1.9212': attribute type 5 has an invalid length. [ 1016.307903][T26287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9211'. [ 1016.376678][ T6065] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.694535][T26202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.694736][T26202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.694922][T26202] bridge_slave_0: entered allmulticast mode [ 1016.697259][T26202] bridge_slave_0: entered promiscuous mode [ 1016.701083][T26202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.701288][T26202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.701825][T26202] bridge_slave_1: entered allmulticast mode [ 1016.703920][T26202] bridge_slave_1: entered promiscuous mode [ 1016.757823][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1016.848643][T26202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.860964][T26202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.864001][ T6202] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1017.022261][T26202] team0: Port device team_slave_0 added [ 1017.044520][T26202] team0: Port device team_slave_1 added [ 1017.046222][ T6202] usb 2-1: Using ep0 maxpacket: 8 [ 1017.058600][ T6202] usb 2-1: New USB device found: idVendor=0499, idProduct=1032, bcdDevice=79.02 [ 1017.072310][ T6202] usb 2-1: config 25 has an invalid interface number: 171 but max is 0 [ 1017.072361][ T6202] usb 2-1: config 25 has no interface number 0 [ 1017.072424][ T6202] usb 2-1: config 25 interface 171 has no altsetting 0 [ 1017.100387][ T6202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.100433][ T6202] usb 2-1: Product: syz [ 1017.100461][ T6202] usb 2-1: Manufacturer: syz [ 1017.100489][ T6202] usb 2-1: SerialNumber: syz [ 1017.186550][T26319] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1017.205572][T26202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.205599][T26202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.205647][T26202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.220069][T26202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.220096][T26202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.220150][T26202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.397011][ T6202] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1017.476030][ T6202] snd-usb-audio 2-1:25.171: probe with driver snd-usb-audio failed with error -2 [ 1017.482492][ T6202] usb 2-1: USB disconnect, device number 101 [ 1017.589981][ T6398] udevd[6398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:25.171/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1017.601056][T26202] hsr_slave_0: entered promiscuous mode [ 1017.607497][T26202] hsr_slave_1: entered promiscuous mode [ 1017.612265][T26202] debugfs: 'hsr0' already exists in 'hsr' [ 1017.612297][T26202] Cannot create hsr debugfs directory [ 1017.698872][T26333] loop2: detected capacity change from 0 to 2048 [ 1017.771383][T26336] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1017.838908][T26333] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 1017.864671][T26333] Remounting filesystem read-only [ 1017.886259][T26338] netlink: 'syz.5.9234': attribute type 4 has an invalid length. [ 1017.886294][T26338] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9234'. [ 1018.012972][T26342] loop4: detected capacity change from 0 to 1024 [ 1018.017121][T26342] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 1018.039918][T26338] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1018.072041][T26342] hfsplus: filesystem is marked journaled, leaving read-only. [ 1018.392868][T14210] Bluetooth: hci6: command tx timeout [ 1018.581828][T26202] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1018.600684][T26202] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1018.603439][T26202] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1018.626676][T26202] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1018.636511][T26202] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1018.690143][T26202] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1018.699180][T26202] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1018.717983][T26202] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1018.838171][T26374] netlink: 'syz.5.9248': attribute type 2 has an invalid length. [ 1019.020359][T26202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.117257][T26202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.156274][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.156417][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.220241][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.220370][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.255611][T26416] loop4: detected capacity change from 0 to 8 [ 1020.387316][T26419] bridge3: entered allmulticast mode [ 1020.616215][T14210] Bluetooth: hci6: command tx timeout [ 1021.210994][T26202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1021.628378][T26463] bridge2: entered allmulticast mode [ 1022.155451][ T6299] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1022.239678][T26202] veth0_vlan: entered promiscuous mode [ 1022.271529][T26202] veth1_vlan: entered promiscuous mode [ 1022.316993][ T6299] usb 6-1: New USB device found: idVendor=17cc, idProduct=1969, bcdDevice=1.00 [ 1022.322420][ T6299] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.322487][ T6299] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1022.322534][ T6299] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1022.322590][ T6299] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.322631][ T6299] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 0 [ 1022.322674][ T6299] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1022.322714][ T6299] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 1022.322757][ T6299] usb 6-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1022.329110][ T6299] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.329160][ T6299] usb 6-1: Product: syz [ 1022.329187][ T6299] usb 6-1: Manufacturer: syz [ 1022.329214][ T6299] usb 6-1: SerialNumber: syz [ 1022.350928][T26479] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1022.351109][T26479] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1022.432475][T26494] netlink: 'syz.0.9301': attribute type 2 has an invalid length. [ 1022.432539][T26494] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9301'. [ 1022.511950][T26202] veth0_macvtap: entered promiscuous mode [ 1022.550835][T26202] veth1_macvtap: entered promiscuous mode [ 1022.632092][ T6299] usb 6-1: unable to init card! (ret=-5) [ 1022.632697][ T6299] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 1022.670986][T26202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.713091][T26202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1022.812595][ T152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.813058][ T152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.813359][ T152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.825818][ T152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1022.845846][ T6299] usb 6-1: USB disconnect, device number 101 [ 1022.845856][T14210] Bluetooth: hci6: command tx timeout [ 1023.160635][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.160669][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.281810][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.281844][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.751429][T26537] loop5: detected capacity change from 0 to 8 [ 1023.791162][T26537] unable to read xattr id index table [ 1024.151808][T24125] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1024.214014][T26555] bridge3: entered allmulticast mode [ 1024.312214][T24125] usb 6-1: Using ep0 maxpacket: 32 [ 1024.312991][T24125] usb 6-1: New USB device found: idVendor=0545, idProduct=8080, bcdDevice=3.01 [ 1024.314329][T24125] usb 6-1: config 0 has an invalid interface number: 130 but max is 0 [ 1024.314370][T24125] usb 6-1: config 0 has no interface number 0 [ 1024.314413][T24125] usb 6-1: too many endpoints for config 0 interface 130 altsetting 50: 167, using maximum allowed: 30 [ 1024.314470][T24125] usb 6-1: config 0 interface 130 altsetting 50 has 0 endpoint descriptors, different from the interface descriptor's value: 167 [ 1024.314522][T24125] usb 6-1: config 0 interface 130 has no altsetting 0 [ 1024.314572][T24125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.320274][T24125] usb 6-1: config 0 descriptor?? [ 1024.565169][T24125] usb 6-1: string descriptor 0 read error: -71 [ 1024.577341][T24125] usb 6-1: USB disconnect, device number 102 [ 1024.737788][T26576] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9341'. [ 1025.369986][ T6299] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1025.554945][ T6299] usb 2-1: New USB device found: idVendor=2c7c, idProduct=0125, bcdDevice=0.00 [ 1025.559888][ T6299] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1025.559954][ T6299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.654464][T26611] loop6: detected capacity change from 0 to 8 [ 1025.942084][T26621] xt_hashlimit: max too large, truncated to 1048576 [ 1026.058997][ T6299] qmi_wwan 2-1:1.0: probe with driver qmi_wwan failed with error -22 [ 1026.093255][ T6299] usb 2-1: USB disconnect, device number 102 [ 1026.586425][T26642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9370'. [ 1026.629487][T26644] netlink: 'syz.0.9371': attribute type 1 has an invalid length. [ 1026.629520][T26644] netlink: 'syz.0.9371': attribute type 2 has an invalid length. [ 1026.685170][T26646] bond1: entered allmulticast mode [ 1026.685777][T26646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1026.757350][T26649] loop4: detected capacity change from 0 to 1024 [ 1026.952714][T26626] nvme nvme0: failed to connect socket: -512 [ 1027.228504][T26663] ip6gre1: entered promiscuous mode [ 1027.228539][T26663] ip6gre1: entered allmulticast mode [ 1027.303708][ T9] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1027.463980][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1027.464807][ T9] usb 1-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1027.466163][ T9] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1027.466203][ T9] usb 1-1: config 0 has no interface number 0 [ 1027.466258][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1027.466304][ T9] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1027.473410][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.473451][ T9] usb 1-1: Product: syz [ 1027.473478][ T9] usb 1-1: Manufacturer: syz [ 1027.473507][ T9] usb 1-1: SerialNumber: syz [ 1027.553899][ T9] usb 1-1: config 0 descriptor?? [ 1027.555645][T26657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1027.555831][T26657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1027.701875][T24126] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1027.719433][T26681] loop4: detected capacity change from 0 to 4096 [ 1027.731534][T26681] EXT4-fs: Ignoring removed mblk_io_submit option [ 1027.739373][T26681] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1027.782212][T26681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1027.826463][T26657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1027.826659][T26657] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1027.860017][T24126] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 1027.866004][T24126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.866048][T24126] usb 3-1: Product: syz [ 1027.866108][T24126] usb 3-1: Manufacturer: syz [ 1027.866136][T24126] usb 3-1: SerialNumber: syz [ 1027.928706][ T6285] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1028.061495][ T6062] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1028.074637][ T9] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1028.075187][ T9] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1028.123782][ T9] usb 1-1: USB disconnect, device number 104 [ 1028.168825][ T6398] udevd[6398]: setting mode of /dev/bus/usb/001/104 to 020664 failed: No such file or directory [ 1028.168970][ T6398] udevd[6398]: setting owner of /dev/bus/usb/001/104 to uid=0, gid=0 failed: No such file or directory [ 1028.278574][T26691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1028.298663][ T6299] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1028.462211][ T6299] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 1028.463599][ T6299] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.463664][ T6299] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1028.463706][ T6299] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1028.463751][ T6299] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1028.463818][ T6299] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.966903][ T6299] usb 7-1: USB disconnect, device number 2 [ 1029.067130][ T6285] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1029.067339][ T6285] ath9k_htc: Failed to initialize the device [ 1029.129712][ T6285] usb 3-1: ath9k_htc: USB layer deinitialized [ 1029.251783][T26719] veth0_vlan: left promiscuous mode [ 1029.251899][T26719] vlan0: entered promiscuous mode [ 1029.251924][T26719] veth0_vlan: entered promiscuous mode [ 1029.380951][ T6299] usb 3-1: USB disconnect, device number 104 [ 1030.162579][T26759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9426'. [ 1030.455950][ T6165] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1030.631002][ T6165] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1030.631066][ T6165] usb 7-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 1030.634882][ T6165] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.634924][ T6165] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1030.634987][ T6165] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.637008][ T6165] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1030.637048][ T6165] usb 7-1: Product: syz [ 1030.637076][ T6165] usb 7-1: Manufacturer: syz [ 1030.707434][T26777] veth2: entered promiscuous mode [ 1030.707470][T26777] veth2: entered allmulticast mode [ 1030.737033][ T6165] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1030.897134][T26787] netlink: 'syz.0.9441': attribute type 21 has an invalid length. [ 1031.205912][ T6165] uvcvideo 7-1:1.0: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1). [ 1031.206120][ T6165] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 1031.245731][ T6165] usb 7-1: USB disconnect, device number 3 [ 1031.639905][T26817] vlan0: entered promiscuous mode [ 1031.808037][T26826] [ 1031.810417][T26826] ============================================ [ 1031.816575][T26826] WARNING: possible recursive locking detected [ 1031.822742][T26826] syzkaller #0 Tainted: G L [ 1031.828821][T26826] -------------------------------------------- [ 1031.834982][T26826] syz.1.9456/26826 is trying to acquire lock: [ 1031.841065][T26826] ffff8880260b1368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0xd12/0x11d0 [ 1031.851690][T26826] [ 1031.851690][T26826] but task is already holding lock: [ 1031.859064][T26826] ffff8880260b1368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 1031.869683][T26826] [ 1031.869683][T26826] other info that might help us debug this: [ 1031.877791][T26826] Possible unsafe locking scenario: [ 1031.877791][T26826] [ 1031.885260][T26826] CPU0 [ 1031.888551][T26826] ---- [ 1031.891834][T26826] lock(&sb->s_type->i_mutex_key#10); [ 1031.897321][T26826] lock(&sb->s_type->i_mutex_key#10); [ 1031.902848][T26826] [ 1031.902848][T26826] *** DEADLOCK *** [ 1031.902848][T26826] [ 1031.911026][T26826] May be due to missing lock nesting notation [ 1031.911026][T26826] [ 1031.919347][T26826] locks held by syz.1.9456/26826: 1, last CPU#1: [ 1031.925689][T26826] #0: ffff8880260b1368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0xc5e/0x11d0 [ 1031.936739][T26826] [ 1031.936739][T26826] stack backtrace: [ 1031.942641][T26826] CPU: 1 UID: 0 PID: 26826 Comm: syz.1.9456 Tainted: G L syzkaller #0 PREEMPT(full) [ 1031.953719][T26826] Tainted: [L]=SOFTLOCKUP [ 1031.958066][T26826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1031.968142][T26826] Call Trace: [ 1031.971431][T26826] [ 1031.974365][T26826] dump_stack_lvl+0x100/0x190 [ 1031.979073][T26826] print_deadlock_bug.cold+0xbd/0xca [ 1031.984409][T26826] __lock_acquire+0x13f4/0x1f40 [ 1031.989301][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1031.994956][T26826] ? blkdev_direct_IO+0x8de/0x1d00 [ 1032.000103][T26826] lock_acquire+0x1d1/0x380 [ 1032.004629][T26826] ? blkdev_write_iter+0xd12/0x11d0 [ 1032.009855][T26826] ? __pfx___might_resched+0x10/0x10 [ 1032.015165][T26826] down_read+0x94/0x4c0 [ 1032.019339][T26826] ? blkdev_write_iter+0xd12/0x11d0 [ 1032.024564][T26826] ? __pfx_down_read+0x10/0x10 [ 1032.029355][T26826] ? filemap_check_errors+0xa9/0x150 [ 1032.034675][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.040344][T26826] ? iov_iter_revert+0x252/0x5b0 [ 1032.045320][T26826] blkdev_write_iter+0xd12/0x11d0 [ 1032.050379][T26826] do_iter_readv_writev+0x6f7/0x930 [ 1032.055617][T26826] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1032.061374][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.067037][T26826] ? apparmor_file_permission+0x1f9/0x4d0 [ 1032.072796][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.078453][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.084143][T26826] ? security_file_permission+0x76/0x210 [ 1032.089814][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.095517][T26826] ? rw_verify_area+0xce/0x6d0 [ 1032.100353][T26826] vfs_writev+0x360/0xdd0 [ 1032.104726][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.110383][T26826] ? __lock_acquire+0x5c0/0x1f40 [ 1032.115362][T26826] ? __pfx_vfs_writev+0x10/0x10 [ 1032.120256][T26826] ? lock_acquire+0x1d1/0x380 [ 1032.124953][T26826] ? __fget_files+0x34/0x3d0 [ 1032.129574][T26826] ? __fget_files+0x21f/0x3d0 [ 1032.134278][T26826] ? do_writev+0x13e/0x340 [ 1032.138731][T26826] do_writev+0x13e/0x340 [ 1032.143012][T26826] ? __pfx_do_writev+0x10/0x10 [ 1032.147814][T26826] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1032.153475][T26826] do_syscall_64+0x123/0x790 [ 1032.158082][T26826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.164024][T26826] RIP: 0033:0x7fc675f9f559 [ 1032.168448][T26826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1032.188166][T26826] RSP: 002b:00007fc676f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1032.196595][T26826] RAX: ffffffffffffffda RBX: 00007fc676225fa0 RCX: 00007fc675f9f559 [ 1032.204573][T26826] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 1032.212552][T26826] RBP: 00007fc676036b20 R08: 0000000000000000 R09: 0000000000000000 [ 1032.220526][T26826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.228501][T26826] R13: 00007fc676226038 R14: 00007fc676225fa0 R15: 00007ffe642e7a18 [ 1032.236494][T26826] [ 1034.538481][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1035.222996][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1035.223063][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1035.905656][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!