last executing test programs: 1m18.002273909s ago: executing program 0 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000040000000400000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1, 0x1}, 0xc) 1m17.812345523s ago: executing program 0 (id=473): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000034000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000039"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 1m17.428142332s ago: executing program 0 (id=479): capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000080)={0x6, 0x4000006, 0x0, 0x8066, 0xfffffbff, 0x2}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560f, 0x0) 1m17.312273515s ago: executing program 0 (id=483): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000000c0)={[{@fat=@gid}, {@uni_xlateno}, {@utf8}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}, {@rodir}, {@utf8}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '775'}}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@shortname_win95}]}, 0x3, 0x29e, &(0x7f0000000800)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 1m17.061555692s ago: executing program 0 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, 0xff, 0x0, 0x0, 0xd}}, 0x1c}}, 0x0) 1m16.348982238s ago: executing program 0 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x28, r1, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) 1m16.125988494s ago: executing program 32 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x28, r1, 0x1, 0xfffffd, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) 14.828004137s ago: executing program 4 (id=1052): mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f0000000000)={0x0, 0x0}) 14.68938181s ago: executing program 4 (id=1055): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80006, 0x0, 0x5d, 0x300, 0x115, 0x530351}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1, 0x6, 0x0, 0x40, 0x400, 0x480000000000000a, 0x10201}) 14.558641443s ago: executing program 4 (id=1057): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000800)={[{@nobarrier}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@bh}, {@noload}]}, 0xfc, 0x56f, &(0x7f0000001500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x1) listxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)=""/19, 0x13) 13.935076039s ago: executing program 4 (id=1059): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x218018, &(0x7f0000001100)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYBLOB="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"], 0xff, 0xc2d, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x290d010, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x22, &(0x7f0000000ec0)={[], [{@dont_measure}]}) 13.208670326s ago: executing program 4 (id=1064): r0 = socket$inet(0x2, 0x3, 0x33) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 12.342223528s ago: executing program 4 (id=1073): setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b0", 0xfd}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11) 12.134838463s ago: executing program 33 (id=1073): setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) sendmmsg$unix(r0, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b0", 0xfd}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x841}}], 0x2, 0x11) 3.28284069s ago: executing program 3 (id=1146): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6112"], 0x0, 0x2, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file2\x00', 0x180c8, &(0x7f0000002780)=ANY=[], 0x1, 0x242, &(0x7f00000028c0)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) 3.133749963s ago: executing program 1 (id=1147): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000140)={{0x80}, 'port0\x00', 0x0, 0x20, 0x20003, 0x6, 0x3, 0x4, 0x1000, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000080)={0x800100, 0x7, 0x22, 0x10000, 0x82, 0x80003}) 2.936241498s ago: executing program 1 (id=1148): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000080)="45000000040000000000", 0xa) 2.915904629s ago: executing program 3 (id=1149): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000540000000000000000000000850000006300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9, 0x80}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="6e92eb6144cfdb2a7627f3625e0d487d25c2d4c52437c4a5db14bf521c757a614b24e4cd41425171a3f6efccd06647ec8bdb177adea17d701638e6987918ea0b7c91c3b8e46f3749e74cea23a3ed993b08151e6b00f0dc3ccad2e6fbfa06eb25a02ea347a265835d2ad918e472b8c030d97b974aaf76a1b9856cb7bc7a9200e59d7efa5d990e3dbf6cabbdc04a3e11f0b0fee5a29784ee28d35bed49a3174f9118dd134d992b2c488d46956f035f020303ae69017f6d5a7051a8f965c80e2b518a38be0ce193d45e05c8a9338b4c9fb30eca9d05e21f2bf06085c255d3c5fd6419901d9c10"}, {&(0x7f0000000300)="ed22d7024e1e6e9d642e18bd57d3dfac2277e5b560d30e963cc3fa3cb904b53f369bb68ce064ec4071c679ea9f8025c475a12173395abe87f83e95d2b917fcb61be6b0c9439f14fa509e7f2ea5b763a645a6d32569a78b1bf9dbe446c30e4d029d605b78f5a4bc1012b93b2a92fec3235e1a9b5b0c99049d665e53fde39bbc89ba44accae62082d0dec72754c119abc40bc7e29028d00d795da28a275fa1af6c89510f9742355256fa87bda4c814bd04ed175656a8b705ca00fa93fa6296e0ed90a4f0a7"}], 0x54}, 0x0) 2.776271842s ago: executing program 1 (id=1151): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) 2.641510925s ago: executing program 3 (id=1153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='+3 +4\n', 0x6) 2.514464488s ago: executing program 1 (id=1155): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0xb3) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 2.367912592s ago: executing program 3 (id=1157): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r0, 0x8de13c6b70ae92c3, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008810}, 0x0) 2.272900254s ago: executing program 1 (id=1158): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r0, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}]}]}]}, 0x2c}}, 0x800) 2.121031588s ago: executing program 3 (id=1159): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x2, 0x2, 0x2, 0x3, 0xb}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.963061622s ago: executing program 1 (id=1161): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") pselect6(0x40, &(0x7f0000000080)={0x2, 0x7, 0x7fff, 0x3, 0x9, 0x6, 0x8c95, 0x7}, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0xc4089434, &(0x7f0000000080)={0x1}) 1.890469494s ago: executing program 3 (id=1162): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406d0432c500000000000109022400210000f0490904000801"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32, @ANYBLOB="10001b"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1.823404735s ago: executing program 2 (id=1163): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1.61871304s ago: executing program 2 (id=1165): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)) 1.399538316s ago: executing program 2 (id=1167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2, 0x0, 0x0, 0x0, 0x2}, [@mark={0xc, 0x15, {0x350759, 0x401}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.21947717s ago: executing program 2 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.21491946s ago: executing program 5 (id=1169): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) 1.020401625s ago: executing program 2 (id=1170): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.011012045s ago: executing program 5 (id=1171): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0x4000000}, {@my=0x1, 0x800}, 0x400, "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"}, 0x418, 0xfffffffe}) 854.767619ms ago: executing program 2 (id=1172): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa8000, 0x0) close(r0) syz_usb_connect$lan78xx(0x2, 0xfffffffffffffe0e, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b05b5, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0x4004550e, 0x80000023) 547.348567ms ago: executing program 5 (id=1173): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) 397.43518ms ago: executing program 5 (id=1174): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}]}}, 0x0, 0x42}, 0x28) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) 202.272875ms ago: executing program 5 (id=1175): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/usb5/bConfigurationValue\x00', 0x1, 0x0) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) 0s ago: executing program 5 (id=1176): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702"], 0x0, 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): [ 90.991328][ T4950] hfsplus: invalid length 32517 has been corrected to 255 [ 91.036572][ T4942] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 91.158243][ T4963] loop4: detected capacity change from 0 to 64 [ 91.386912][ T4961] loop1: detected capacity change from 0 to 4096 [ 91.443712][ T4961] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 91.524595][ T4961] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 91.535646][ T4961] ntfs3: loop1: Failed to load $Extend. [ 91.608650][ T26] audit: type=1800 audit(1792029945.547:4): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.222" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 91.857231][ T4986] loop3: detected capacity change from 0 to 512 [ 92.068342][ T4999] loop1: detected capacity change from 0 to 512 [ 92.122465][ T5001] netlink: 'syz.4.241': attribute type 3 has an invalid length. [ 92.150898][ T4999] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 92.230776][ T4999] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.305858][ T5008] loop4: detected capacity change from 0 to 128 [ 92.387791][ T5007] loop3: detected capacity change from 0 to 1024 [ 92.410423][ T5008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.442760][ T5013] binder: 5010:5013 ioctl 541b 0 returned -22 [ 92.452450][ T5008] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.600803][ T5007] EXT4-fs (loop3): inline encryption not supported [ 92.637634][ T5007] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 92.674529][ T5007] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.738599][ T5007] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 92.784679][ T5007] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.806685][ T5007] EXT4-fs error (device loop3): ext4_get_first_dir_block:3621: inode #12: comm syz.3.242: directory missing '..' [ 92.829270][ T5031] loop0: detected capacity change from 0 to 1024 [ 92.844553][ T5032] loop1: detected capacity change from 0 to 1024 [ 92.860246][ T5007] EXT4-fs (loop3): Remounting filesystem read-only [ 92.956816][ T5031] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 93.107918][ T5040] loop1: detected capacity change from 0 to 1024 [ 93.212249][ T5040] hfsplus: xattr searching failed [ 93.462699][ T5068] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'. [ 93.526319][ T5065] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.549780][ T5065] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.569069][ T5070] hfsplus: unable to parse mount options [ 93.591313][ T5065] EXT4-fs (loop0): 1 truncate cleaned up [ 93.632853][ T5065] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 93.784839][ T5065] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #12: comm syz.0.265: bad extra_isize 62 (inode size 256) [ 93.817546][ T5065] EXT4-fs (loop0): Remounting filesystem read-only [ 93.954791][ T5089] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.964418][ T5089] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.973222][ T5089] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.981989][ T5089] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.025494][ T5089] Zero length message leads to an empty skb [ 94.277029][ T5099] exfat: Deprecated parameter 'utf8' [ 94.296851][ T5099] exfat: Deprecated parameter 'namecase' [ 94.324979][ T5099] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 94.412015][ T5085] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 94.449451][ T5085] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 94.462195][ T5097] SQUASHFS error: lzo decompression failed, data probably corrupt [ 94.488748][ T5085] F2FS-fs (loop2): invalid crc value [ 94.506716][ T5097] SQUASHFS error: Failed to read block 0x1c0: -5 [ 94.519876][ T5085] F2FS-fs (loop2): Found nat_bits in checkpoint [ 94.552872][ T5097] SQUASHFS error: Unable to read metadata cache entry [1be] [ 94.652050][ T5108] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 94.687503][ T5085] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 94.695065][ T5085] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.887021][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 95.002856][ T5093] XFS (loop4): Mounting V5 Filesystem [ 95.123969][ T5093] XFS (loop4): Ending clean mount [ 95.169631][ T4296] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 95.207341][ T5131] device vlan2 entered promiscuous mode [ 95.223308][ T5131] device bridge0 entered promiscuous mode [ 95.224864][ T4191] XFS (loop4): Unmounting Filesystem [ 95.559739][ T4296] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 95.585808][ T4296] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 95.719772][ T4296] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.757101][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.766112][ T4296] usb 2-1: SerialNumber: syz [ 95.800469][ T5119] XFS (loop0): Mounting V5 Filesystem [ 95.811816][ T4296] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 95.918496][ T26] audit: type=1326 audit(1792029949.857:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5164 comm="syz.2.305" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f183adca559 code=0x0 [ 95.949065][ T5167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 95.974620][ T5119] XFS (loop0): Ending clean mount [ 95.998387][ T5170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.307'. [ 96.008721][ T5119] XFS (loop0): Quotacheck needed: Please wait. [ 96.031187][ T4261] usb 2-1: USB disconnect, device number 3 [ 96.159679][ T5119] XFS (loop0): Quotacheck: Done. [ 96.173042][ T5178] Bluetooth: hci0: unsupported parameter 5135 [ 96.187912][ T5178] Bluetooth: hci0: invalid len left 4, exp >= 20 [ 96.244400][ T4189] XFS (loop0): Unmounting Filesystem [ 96.410806][ T4665] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 96.424196][ T5188] binder_alloc: binder_alloc_mmap_handler: 5187 200000ffe000-200001000000 already mapped failed -16 [ 96.513019][ T5190] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 96.520840][ T5190] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 96.527504][ T5190] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 96.534587][ T5190] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 96.542009][ T5190] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 96.549278][ T5190] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 96.556068][ T5190] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 96.568680][ T5190] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 96.575442][ T5190] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 96.582191][ T5190] comedi comedi3: 8255: I/O port conflict (0x81,4) [ 96.588959][ T5190] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 96.595722][ T5190] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 96.609212][ T5190] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 96.633056][ T5190] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 96.709561][ T5196] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 96.727955][ T5199] set_capacity_and_notify: 7 callbacks suppressed [ 96.727973][ T5199] loop3: detected capacity change from 0 to 256 [ 96.779853][ T4665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.800215][ T4665] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.820935][ T4665] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.889872][ T5199] FAT-fs (loop3): Directory bread(block 64) failed [ 96.894995][ T4665] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.896731][ T5199] FAT-fs (loop3): Directory bread(block 65) failed [ 96.936736][ T4665] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.969610][ T5199] FAT-fs (loop3): Directory bread(block 66) failed [ 96.976207][ T5199] FAT-fs (loop3): Directory bread(block 67) failed [ 96.988953][ T4665] usb 5-1: config 0 descriptor?? [ 97.019555][ T5199] FAT-fs (loop3): Directory bread(block 68) failed [ 97.026708][ T5199] FAT-fs (loop3): Directory bread(block 69) failed [ 97.045264][ T5199] FAT-fs (loop3): Directory bread(block 70) failed [ 97.064849][ T5199] FAT-fs (loop3): Directory bread(block 71) failed [ 97.075353][ T5199] FAT-fs (loop3): Directory bread(block 72) failed [ 97.096180][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 97.106429][ T5199] FAT-fs (loop3): Directory bread(block 73) failed [ 97.138036][ T5212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 97.160523][ T5215] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.404055][ T5223] loop3: detected capacity change from 0 to 1024 [ 97.496194][ T4665] input: HID 047f:ffff as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:047F:FFFF.0006/input/input5 [ 97.518515][ T5230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.335'. [ 97.570470][ T5230] netlink: 56 bytes leftover after parsing attributes in process `syz.0.335'. [ 97.613418][ T5230] netlink: 'syz.0.335': attribute type 10 has an invalid length. [ 97.652299][ T4665] plantronics 0003:047F:FFFF.0006: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 97.687506][ T5205] loop1: detected capacity change from 0 to 40427 [ 97.699127][ T4665] usb 5-1: USB disconnect, device number 4 [ 97.747973][ T5234] loop2: detected capacity change from 0 to 256 [ 97.767108][ T5205] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 97.779712][ T5205] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.800583][ T5205] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x1ffff [ 97.837395][ T5205] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x1f8 [ 97.873453][ T5205] F2FS-fs (loop1): invalid crc value [ 97.947205][ T5205] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.068406][ T5242] fido_id[5242]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 98.160075][ T5205] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 98.167278][ T5205] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.229105][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'. [ 98.269816][ T5247] loop2: detected capacity change from 0 to 4096 [ 98.311745][ T5247] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 98.367824][ T5247] ntfs: volume version 3.1. [ 98.398209][ T5205] attempt to access beyond end of device [ 98.398209][ T5205] loop1: rw=0, want=45072, limit=40427 [ 98.671490][ T370] attempt to access beyond end of device [ 98.671490][ T370] loop1: rw=2049, want=40968, limit=40427 [ 99.167458][ T5259] loop3: detected capacity change from 0 to 32768 [ 99.287920][ T5259] ERROR: (device loop3): diWrite: ixpxd invalid [ 99.287920][ T5259] [ 99.314997][ T5259] ERROR: (device loop3): remounting filesystem as read-only [ 99.332969][ T5259] ERROR: (device loop3): txCommit: [ 99.332969][ T5259] [ 99.532428][ T26] audit: type=1326 audit(1792029953.477:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5291 comm="syz.1.362" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2747c1a559 code=0x0 [ 99.628020][ T5288] loop0: detected capacity change from 0 to 4096 [ 99.645268][ T5295] netlink: 'syz.3.363': attribute type 2 has an invalid length. [ 99.713189][ T5279] loop2: detected capacity change from 0 to 32768 [ 99.805893][ T5279] add_index: next_index = 0. Resetting! [ 99.831439][ T5279] non-latin1 character 0x3ff found in JFS file name [ 99.838105][ T5279] mount with iocharset=utf8 to access [ 99.874230][ T5300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.928903][ T5299] sp0: Synchronizing with TNC [ 100.206078][ T5304] loop4: detected capacity change from 0 to 1024 [ 100.309465][ T5304] hfsplus: invalid length 2325 has been corrected to 255 [ 100.337882][ T5304] hfsplus: invalid length 2325 has been corrected to 255 [ 100.424605][ T5304] hfsplus: invalid length 2325 has been corrected to 255 [ 100.552767][ T5316] netlink: 6 bytes leftover after parsing attributes in process `syz.3.375'. [ 100.611098][ T5320] netlink: 'syz.2.374': attribute type 29 has an invalid length. [ 100.619199][ T5320] netlink: 'syz.2.374': attribute type 29 has an invalid length. [ 100.711981][ T5325] netlink: 'syz.2.374': attribute type 29 has an invalid length. [ 100.756335][ T5332] bridge0: port 3(bond0) entered blocking state [ 100.765272][ T5331] loop4: detected capacity change from 0 to 2048 [ 100.791052][ T5332] bridge0: port 3(bond0) entered disabled state [ 100.819374][ T5332] device bond0 entered promiscuous mode [ 100.835236][ T5332] device bond_slave_0 entered promiscuous mode [ 100.860296][ T5331] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.893868][ T5332] device bond_slave_1 entered promiscuous mode [ 100.902151][ T5332] bridge0: port 3(bond0) entered blocking state [ 100.909002][ T5332] bridge0: port 3(bond0) entered forwarding state [ 100.985658][ T5331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 101.145029][ T5344] SQUASHFS error: zlib decompression failed, data probably corrupt [ 101.164925][ T5344] SQUASHFS error: Failed to read block 0x9b: -5 [ 101.195554][ T5344] SQUASHFS error: Unable to read metadata cache entry [99] [ 101.225939][ T5344] SQUASHFS error: Unable to read inode 0x127 [ 101.746712][ T5356] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 101.817903][ T5372] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 101.836793][ T5356] REISERFS (device loop0): using ordered data mode [ 101.884287][ T5372] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 101.891405][ T5356] reiserfs: using flush barriers [ 101.913096][ T5376] set_capacity_and_notify: 3 callbacks suppressed [ 101.913112][ T5376] loop4: detected capacity change from 0 to 128 [ 101.948701][ T5356] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.022517][ T5356] REISERFS (device loop0): checking transaction log (loop0) [ 102.107483][ T5327] loop3: detected capacity change from 0 to 65536 [ 102.354358][ T5327] XFS (loop3): Mounting V5 Filesystem [ 102.417372][ T5398] loop4: detected capacity change from 0 to 8 [ 102.460262][ T5327] XFS (loop3): Ending clean mount [ 102.569083][ T4195] XFS (loop3): Unmounting Filesystem [ 102.772874][ T5356] REISERFS (device loop0): Using tea hash to sort names [ 102.845330][ T5356] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 103.187090][ T5399] loop2: detected capacity change from 0 to 32768 [ 103.297944][ T5399] JBD2: Ignoring recovery information on journal [ 103.468985][ T5430] ip_tables: iptables: counters copy to user failed while replacing table [ 103.490840][ T5430] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x1 [ 103.491604][ T5399] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 103.724724][ T5441] netlink: 104 bytes leftover after parsing attributes in process `syz.4.425'. [ 103.739742][ T4198] ocfs2: Unmounting device (7,2) on (node local) [ 103.802163][ T5444] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 103.858739][ T5444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.417'. [ 103.885333][ T5444] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 103.906626][ T5444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.417'. [ 103.935774][ T5448] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 103.983935][ T5448] netlink: 40 bytes leftover after parsing attributes in process `syz.0.417'. [ 104.027467][ T5452] loop1: detected capacity change from 0 to 512 [ 104.106464][ T5454] loop2: detected capacity change from 0 to 256 [ 104.116307][ T5457] loop4: detected capacity change from 0 to 256 [ 104.138442][ T5452] EXT4-fs (loop1): 1 truncate cleaned up [ 104.156325][ T5452] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 104.232798][ T5433] loop3: detected capacity change from 0 to 32768 [ 104.278163][ T26] audit: type=1800 audit(1792029958.217:7): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.430" name="file0" dev="loop1" ino=13 res=0 errno=0 [ 104.388629][ T5433] JBD2: Ignoring recovery information on journal [ 104.452885][ T5452] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.430: bg 0: block 465: padding at end of block bitmap is not set [ 104.472638][ T5452] EXT4-fs (loop1): Remounting filesystem read-only [ 104.580882][ T5467] loop4: detected capacity change from 0 to 1024 [ 104.634709][ T5433] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 104.694207][ T144] (kworker/u4:1,144,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1 [ 104.882761][ T370] hfsplus: b-tree write err: -5, ino 8 [ 104.931106][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 105.076409][ T5479] loop1: detected capacity change from 0 to 4096 [ 105.155174][ T5485] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.695549][ T5499] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 105.705033][ T5520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.458'. [ 105.729609][ T5499] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 105.768423][ T5499] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 105.782011][ T5499] ntfs: volume version 3.1. [ 105.883090][ T5523] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 2: comm syz.1.461: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.907626][ T5499] ntfs: (device loop4): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 105.954306][ T5526] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 105.999544][ T5499] ntfs: (device loop4): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 106.030187][ T5526] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.051919][ T5523] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 106.093128][ T5523] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 48: comm syz.1.461: lblock 0 mapped to illegal pblock 48 (length 1) [ 106.109696][ T5499] ntfs: (device loop4): load_and_init_quota(): Failed to load $Quota/$Q index. [ 106.139147][ T5499] ntfs: (device loop4): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 106.150944][ T5523] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 106.178336][ T5523] EXT4-fs error (device loop1): ext4_acquire_dquot:6236: comm syz.1.461: Failed to acquire dquot type 0 [ 106.260080][ T5523] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 106.338801][ T5523] EXT4-fs error (device loop1): ext4_evict_inode:284: inode #11: comm syz.1.461: mark_inode_dirty error [ 106.361313][ T5523] EXT4-fs warning (device loop1): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 106.377116][ T5523] EXT4-fs (loop1): 1 orphan inode deleted [ 106.385867][ T5523] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 106.410742][ T4273] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.495611][ T5530] JBD2: Ignoring recovery information on journal [ 106.562842][ T4273] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 106.617844][ T5530] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 106.767883][ T144] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 106.801106][ T144] EXT4-fs error (device loop1): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 106.817130][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 106.843293][ T4185] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 106.906332][ T4185] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 106.938083][ T5557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.475'. [ 106.995723][ T4185] EXT4-fs error (device loop1): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 107.277010][ T5576] netlink: 'syz.4.482': attribute type 3 has an invalid length. [ 107.295949][ T5573] set_capacity_and_notify: 5 callbacks suppressed [ 107.295966][ T5573] loop3: detected capacity change from 0 to 2048 [ 107.370744][ T5581] loop0: detected capacity change from 0 to 256 [ 107.415299][ T5585] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.509482][ T4665] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.531525][ T4189] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff) [ 107.561497][ T4189] FAT-fs (loop0): Filesystem has been set read-only [ 107.569124][ T4189] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 000000ff) [ 107.785823][ T4665] usb 2-1: Using ep0 maxpacket: 32 [ 107.915411][ T4665] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.935048][ T4665] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.965042][ T4665] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.995755][ T4665] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.029313][ T4665] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.067545][ T4665] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 108.107270][ T4665] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.116838][ T5611] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.152924][ T4665] usb 2-1: config 0 descriptor?? [ 108.208111][ T5611] Dead loop on virtual device ip6_vti0, fix it urgently! [ 108.427302][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.487625][ T5599] loop3: detected capacity change from 0 to 32768 [ 108.596461][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.634331][ T4665] corsair-cpro 0003:1B1C:0C10.0007: collection stack underflow [ 108.655460][ T4665] corsair-cpro 0003:1B1C:0C10.0007: item 0 1 0 12 parsing failed [ 108.667161][ T5627] netlink: 36 bytes leftover after parsing attributes in process `syz.2.499'. [ 108.687789][ T4665] corsair-cpro: probe of 0003:1B1C:0C10.0007 failed with error -22 [ 108.782760][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.869842][ T4665] usb 2-1: USB disconnect, device number 4 [ 109.002150][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.084913][ T5632] rxe_eth0 speed is unknown, defaulting to 1000 [ 109.092808][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 109.588475][ T5658] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.907332][ T5669] loop4: detected capacity change from 0 to 2048 [ 109.919410][ T4514] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 109.948632][ T5646] loop3: detected capacity change from 0 to 32768 [ 110.041708][ T5669] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.054384][ T5677] loop2: detected capacity change from 0 to 2048 [ 110.150801][ T5632] chnl_net:caif_netlink_parms(): no params data found [ 110.204398][ T5646] XFS (loop3): Mounting V5 Filesystem [ 110.248295][ T5677] UDF-fs: error (device loop2): udf_read_inode: (ino 1312) failed !bh [ 110.266138][ T5677] UDF-fs: Scanning with blocksize 512 failed [ 110.289943][ T4514] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 110.309810][ T4514] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 110.329433][ T4514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.395386][ T4514] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 110.396599][ T5677] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 110.467887][ T5677] UDF-fs: Scanning with blocksize 1024 failed [ 110.515314][ T5646] XFS (loop3): Ending clean mount [ 110.526214][ T5677] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 110.686413][ T5677] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 110.706707][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.732833][ T5677] UDF-fs: Scanning with blocksize 2048 failed [ 110.736989][ T4195] XFS (loop3): Unmounting Filesystem [ 110.745461][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.753292][ T5677] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 110.764940][ T5632] device bridge_slave_0 entered promiscuous mode [ 110.786957][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.798815][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.810745][ T5632] device bridge_slave_1 entered promiscuous mode [ 110.836865][ T5677] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 110.905166][ T4296] Bluetooth: hci1: command 0x0409 tx timeout [ 110.913703][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.937050][ T5677] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 110.967544][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.009308][ T5677] UDF-fs: Scanning with blocksize 4096 failed [ 111.009514][ T4665] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.029414][ T5677] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 111.066045][ T5632] team0: Port device team_slave_0 added [ 111.095286][ T5632] team0: Port device team_slave_1 added [ 111.126006][ T144] IPVS: stopping backup sync thread 4895 ... [ 111.143832][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.159428][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.185670][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.205235][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.243886][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.251624][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.305282][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.319583][ T4665] usb 5-1: Using ep0 maxpacket: 32 [ 111.439682][ T4665] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 111.458260][ T4665] usb 5-1: config 0 has no interface number 0 [ 111.482650][ T4665] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 111.499636][ T4514] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 111.542455][ T4514] stv0680 2-1:4.0: last error: 86, command = 0x58 [ 111.618192][ T5632] device hsr_slave_0 entered promiscuous mode [ 111.646121][ T5632] device hsr_slave_1 entered promiscuous mode [ 111.670834][ T5632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.687998][ T4665] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 111.717961][ T4665] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.726994][ T5632] Cannot create hsr debugfs directory [ 111.738154][ T4665] usb 5-1: Product: syz [ 111.756046][ T4665] usb 5-1: Manufacturer: syz [ 111.779506][ T4665] usb 5-1: SerialNumber: syz [ 111.793564][ T4664] usb 2-1: USB disconnect, device number 5 [ 111.832542][ T4665] usb 5-1: config 0 descriptor?? [ 111.852171][ T5693] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.943571][ T5717] netlink: 92 bytes leftover after parsing attributes in process `syz.3.521'. [ 111.954227][ T5717] netlink: 32 bytes leftover after parsing attributes in process `syz.3.521'. [ 111.963904][ T4514] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.119913][ T5693] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 112.219436][ T4514] usb 3-1: Using ep0 maxpacket: 8 [ 112.281321][ T5632] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.332541][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 112.359580][ T4514] usb 3-1: config index 0 descriptor too short (expected 1060, got 36) [ 112.375596][ T4514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.399470][ T5632] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.418408][ T4514] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.429758][ T4514] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.444139][ T4514] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 112.454276][ T4514] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.480887][ T4514] usb 3-1: config 0 descriptor?? [ 112.500618][ T144] device hsr_slave_0 left promiscuous mode [ 112.518204][ T144] device hsr_slave_1 left promiscuous mode [ 112.537270][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.559617][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.582946][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.592704][ T4665] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 112.614115][ T4665] asix: probe of 5-1:0.188 failed with error -71 [ 112.624186][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.649039][ T4665] usb 5-1: USB disconnect, device number 5 [ 112.659448][ T5734] mmap: syz.3.526 (5734) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 112.660202][ T4296] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 112.687095][ T144] device bridge_slave_1 left promiscuous mode [ 112.704285][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.770850][ T144] device bridge_slave_0 left promiscuous mode [ 112.779305][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.880752][ T144] device veth1_macvtap left promiscuous mode [ 112.888723][ T144] device veth0_macvtap left promiscuous mode [ 112.911625][ T144] device veth0_vlan left promiscuous mode [ 112.985008][ T4261] Bluetooth: hci1: command 0x041b tx timeout [ 113.123631][ T4296] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 113.147702][ T4296] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.180194][ T4514] sony 0003:1345:3008.0008: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 113.198552][ T4296] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.218842][ T4296] usb 2-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 113.239151][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.253187][ T4514] sony 0003:1345:3008.0008: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 113.281094][ T4514] sony 0003:1345:3008.0008: failed to claim input [ 113.297092][ T4296] usb 2-1: config 0 descriptor?? [ 113.375838][ T4514] usb 3-1: USB disconnect, device number 5 [ 113.499629][ T5748] fido_id[5748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 113.548340][ T5750] loop4: detected capacity change from 0 to 1024 [ 113.812828][ T4296] uclogic 0003:28BD:0074.0009: interface is invalid, ignoring [ 113.891940][ T144] team0 (unregistering): Port device team_slave_1 removed [ 113.939251][ T144] team0 (unregistering): Port device team_slave_0 removed [ 113.963281][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.984883][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.044026][ T4296] usb 2-1: USB disconnect, device number 6 [ 114.167461][ T144] bond0 (unregistering): Released all slaves [ 114.208247][ T5632] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.278300][ T5632] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.590332][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.644541][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.670285][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.690072][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.721936][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.768783][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.813382][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.820591][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.859661][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.894647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.909502][ T4666] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 114.948814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.975357][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.982559][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.005305][ T5761] loop2: detected capacity change from 0 to 40427 [ 115.020196][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.061029][ T4196] Bluetooth: hci1: command 0x040f tx timeout [ 115.086604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.100788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.140246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.161172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.174702][ T5766] loop3: detected capacity change from 0 to 32768 [ 115.183126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.226614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.269880][ T4666] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.284690][ T5761] F2FS-fs (loop2): Found nat_bits in checkpoint [ 115.339712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.347694][ T4666] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.394119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.411171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.429810][ T5761] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 115.432141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.456436][ T4666] usb 5-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 115.493383][ T4666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.505663][ T5632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.558327][ T5766] XFS (loop3): Mounting V5 Filesystem [ 115.580609][ T4666] usb 5-1: config 0 descriptor?? [ 115.846030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.860674][ T5766] XFS (loop3): Ending clean mount [ 115.876620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.898637][ T5766] XFS (loop3): Quotacheck needed: Please wait. [ 115.924950][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.113330][ T4666] wacom 0003:056A:0043.000A: item fetching failed at offset 6/8 [ 116.143639][ T4666] wacom 0003:056A:0043.000A: parse failed [ 116.171099][ T4666] wacom: probe of 0003:056A:0043.000A failed with error -22 [ 116.221636][ T5766] XFS (loop3): Quotacheck: Done. [ 116.332632][ T4665] usb 5-1: USB disconnect, device number 6 [ 116.381919][ T5817] device veth0_vlan left promiscuous mode [ 116.444696][ T5817] device veth0_vlan entered promiscuous mode [ 116.500113][ T5817] team0: Device veth0_vlan failed to register rx_handler [ 116.551484][ T4195] XFS (loop3): Unmounting Filesystem [ 116.826632][ T5817] syz.1.547 (5817) used greatest stack depth: 20464 bytes left [ 116.949577][ T1108] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.116651][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.131396][ T370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.149662][ T23] Bluetooth: hci1: command 0x0419 tx timeout [ 117.158549][ T5847] loop4: detected capacity change from 0 to 256 [ 117.225563][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.243803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.274371][ T5632] device veth0_vlan entered promiscuous mode [ 117.305961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.335555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.396279][ T5632] device veth1_vlan entered promiscuous mode [ 117.425585][ T1108] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE8, skipping [ 117.462300][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 117.492766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.501803][ T5854] loop4: detected capacity change from 0 to 8 [ 117.515447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.526567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.607325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.641187][ T5632] device veth0_macvtap entered promiscuous mode [ 117.649782][ T1108] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 117.665845][ T5858] loop1: detected capacity change from 0 to 256 [ 117.672602][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.681593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.698650][ T5632] device veth1_macvtap entered promiscuous mode [ 117.730340][ T1108] usb 3-1: Product: syz [ 117.738052][ T1108] usb 3-1: Manufacturer: syz [ 117.754293][ T5854] SQUASHFS error: xz decompression failed, data probably corrupt [ 117.776611][ T1108] usb 3-1: SerialNumber: syz [ 117.805809][ T1108] usb 3-1: config 0 descriptor?? [ 117.816189][ T5854] SQUASHFS error: Failed to read block 0xa8: -5 [ 117.822885][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.850936][ T5854] SQUASHFS error: xz decompression failed, data probably corrupt [ 117.870394][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.893391][ T5854] SQUASHFS error: Failed to read block 0xa8: -5 [ 117.904462][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.918220][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 117.918233][ T26] audit: type=1800 audit(1792029971.857:8): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.555" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 117.974577][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.004743][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.018155][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.034257][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.055177][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.099182][ T4261] usb 3-1: USB disconnect, device number 6 [ 118.119895][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.146080][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.193321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.246275][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.288661][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.321488][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.354318][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.389807][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.430057][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.471192][ T5873] loop1: detected capacity change from 0 to 8192 [ 118.477733][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.524747][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.546244][ T5873] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 118.564021][ T5873] REISERFS (device loop1): using ordered data mode [ 118.572685][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.584410][ T5873] reiserfs: using flush barriers [ 118.592556][ T5632] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.601521][ T5632] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.611676][ T5632] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.620980][ T5632] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.682317][ T5873] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 118.702705][ T5885] loop2: detected capacity change from 0 to 128 [ 118.709483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.729842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 118.754570][ T5885] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 118.814366][ T5885] hpfs: filesystem error: improperly stopped [ 118.821538][ T5873] REISERFS (device loop1): checking transaction log (loop1) [ 118.840856][ T5873] REISERFS (device loop1): Using r5 hash to sort names [ 118.898487][ T5885] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 118.913795][ T5873] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 118.934392][ T5885] hpfs: You really don't want any checks? You are crazy... [ 118.972647][ T5885] hpfs: Code page index out of array [ 119.014539][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.031741][ T5885] hpfs: code page support is disabled [ 119.037260][ T5885] hpfs: hpfs_map_4sectors(): unaligned read [ 119.062757][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.120402][ T5885] hpfs: hpfs_map_4sectors(): unaligned read [ 119.126383][ T5885] hpfs: filesystem error: unable to find root dir [ 119.134911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 119.172035][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.209379][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.242367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 119.790654][ T5909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.572'. [ 119.867435][ T5910] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 120.103487][ T5922] loop1: detected capacity change from 0 to 128 [ 120.190913][ T5922] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.268420][ T5922] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.509191][ T4663] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 120.758733][ T5949] loop4: detected capacity change from 0 to 256 [ 120.765195][ T5947] loop5: detected capacity change from 0 to 512 [ 120.810100][ T5949] exfat: Deprecated parameter 'utf8' [ 120.881218][ T5953] loop1: detected capacity change from 0 to 736 [ 120.913196][ T5949] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 121.031577][ T4663] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.047388][ T5947] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 121.065088][ T4663] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.148829][ T4663] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.175323][ T5947] EXT4-fs (loop5): orphan cleanup on readonly fs [ 121.189668][ T5947] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 121.206599][ T4663] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 121.295981][ T4663] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.306563][ T5947] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.586: attempt to clear invalid blocks 2 len 1 [ 121.330155][ T5947] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 121.351022][ T5947] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.586: invalid indirect mapped block 1819239214 (level 0) [ 121.370937][ T5947] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.586: invalid indirect mapped block 1819239214 (level 1) [ 121.405585][ T4663] usb 3-1: config 0 descriptor?? [ 121.444353][ T5947] EXT4-fs (loop5): 1 truncate cleaned up [ 121.461732][ T5947] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,init_itable=0x0000000000000001,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 121.608555][ T5947] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 121.697424][ T5974] device ip6_vti0 entered promiscuous mode [ 121.926944][ T4663] hid-multitouch 0003:0EEF:72C4.000B: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0 [ 121.959609][ T1108] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 122.172590][ T4663] usb 3-1: USB disconnect, device number 7 [ 122.395814][ T1108] usb 4-1: too many endpoints for config 0 interface 0 altsetting 7: 132, using maximum allowed: 30 [ 122.428157][ T1108] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 122.502490][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 122.519890][ T1108] usb 4-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 122.549436][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.587900][ T1108] usb 4-1: config 0 descriptor?? [ 122.748160][ T6008] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 122.775630][ T6011] loop2: detected capacity change from 0 to 512 [ 122.839249][ T6011] EXT4-fs (loop2): Ignoring removed nobh option [ 122.885363][ T6011] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.953657][ T6011] EXT4-fs (loop2): 1 truncate cleaned up [ 122.969602][ T6011] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,max_batch_time=0x0000000000000007,dioread_lock,. Quota mode: none. [ 123.076618][ T1108] saitek 0003:06A3:0CCD.000C: hidraw0: USB HID v28.a9 Device [HID 06a3:0ccd] on usb-dummy_hcd.3-1/input0 [ 123.295248][ T4296] usb 4-1: USB disconnect, device number 3 [ 123.319919][ T5994] loop5: detected capacity change from 0 to 32768 [ 123.337403][ T6028] ip_tables: iptables: counters copy to user failed while replacing table [ 123.401951][ T6023] fido_id[6023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 123.556828][ T6037] loop4: detected capacity change from 0 to 64 [ 123.580408][ T5994] XFS: attr2 mount option is deprecated. [ 123.893161][ T5994] XFS (loop5): Mounting V5 Filesystem [ 124.090578][ T5994] XFS (loop5): Ending clean mount [ 124.830732][ T5632] XFS (loop5): Unmounting Filesystem [ 125.465143][ T4665] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.689621][ T1108] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.737381][ T6107] loop5: detected capacity change from 0 to 64 [ 125.764640][ T6107] hfs: uid requires an argument [ 125.786885][ T6107] hfs: unable to parse mount options [ 125.967451][ T4665] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 125.979348][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.995416][ T4665] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 126.064017][ T6099] loop4: detected capacity change from 0 to 32768 [ 126.108842][ T6113] loop5: detected capacity change from 0 to 1024 [ 126.116169][ T1108] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.133180][ T1108] usb 4-1: config 0 interface 0 has no altsetting 0 [ 126.164412][ T1108] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 126.174572][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.193242][ T1108] usb 4-1: config 0 descriptor?? [ 126.233685][ T6099] JBD2: Ignoring recovery information on journal [ 126.257138][ T6113] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 126.302304][ T4665] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 126.314410][ T4665] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.359198][ T4665] usb 3-1: Product: syz [ 126.386414][ T4665] usb 3-1: Manufacturer: syz [ 126.412027][ T6099] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 126.438208][ T4665] usb 3-1: SerialNumber: syz [ 126.464179][ T4665] usb 3-1: config 0 descriptor?? [ 126.491701][ T6087] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.498832][ T6087] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 126.701635][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.709030][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.724959][ T6130] loop5: detected capacity change from 0 to 256 [ 126.725213][ T6132] loop1: detected capacity change from 0 to 256 [ 126.743802][ T4191] ocfs2: Unmounting device (7,4) on (node local) [ 126.767491][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.789289][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.802056][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.810565][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.818317][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.851475][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.859286][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.870205][ T4665] dm9601: probe of 3-1:0.0 failed with error -71 [ 126.878617][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.903179][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.916791][ T4665] usb 3-1: USB disconnect, device number 8 [ 126.931419][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 126.949252][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 127.035178][ T1108] gt683r_led 0003:1770:FF00.000D: unknown main item tag 0x0 [ 127.066657][ T6130] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 127.139097][ T1108] gt683r_led 0003:1770:FF00.000D: unbalanced collection at end of report description [ 127.190473][ T1108] gt683r_led 0003:1770:FF00.000D: hid parsing failed [ 127.218545][ T1108] gt683r_led: probe of 0003:1770:FF00.000D failed with error -22 [ 127.281327][ T1108] usb 4-1: USB disconnect, device number 4 [ 127.528552][ T6146] loop4: detected capacity change from 0 to 1764 [ 127.782170][ T6160] loop2: detected capacity change from 0 to 1024 [ 127.943033][ T6168] loop4: detected capacity change from 0 to 256 [ 128.030162][ T6168] exfat: Deprecated parameter 'utf8' [ 128.037418][ T6168] exfat: Deprecated parameter 'utf8' [ 128.049582][ T6168] exfat: Deprecated parameter 'utf8' [ 128.074006][ T6168] exfat: Deprecated parameter 'namecase' [ 128.128973][ T6168] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 128.379441][ T6160] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.643: lblock 2 mapped to illegal pblock 2 (length 1) [ 128.572261][ T6160] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 128.615853][ T6160] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 48: comm syz.2.643: lblock 0 mapped to illegal pblock 48 (length 1) [ 128.699554][ T6160] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 128.765075][ T6160] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.643: Failed to acquire dquot type 0 [ 128.820268][ T6160] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 128.875173][ T6199] loop5: detected capacity change from 0 to 256 [ 128.907769][ T6197] netlink: 'syz.1.659': attribute type 29 has an invalid length. [ 128.916009][ T6160] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.643: mark_inode_dirty error [ 128.934646][ T6197] netlink: 'syz.1.659': attribute type 29 has an invalid length. [ 128.981746][ T6156] loop3: detected capacity change from 0 to 32768 [ 129.006713][ T6201] netlink: 'syz.1.659': attribute type 29 has an invalid length. [ 129.019169][ T6160] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 129.056688][ T6160] EXT4-fs (loop2): 1 orphan inode deleted [ 129.098906][ T6160] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 129.129699][ T4273] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.150385][ T4273] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 129.159047][ T4273] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 129.236593][ T6156] JBD2: Ignoring recovery information on journal [ 129.287670][ T144] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.332633][ T6156] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 129.411863][ T144] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 129.420517][ T144] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0 [ 129.532663][ T4198] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 129.558095][ T4198] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 129.606491][ T4198] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 129.686488][ T4195] ocfs2: Unmounting device (7,3) on (node local) [ 129.975426][ T6219] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 129.985650][ T6219] REISERFS (device loop4): using ordered data mode [ 129.992757][ T6219] reiserfs: using flush barriers [ 130.035088][ T6219] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 130.079880][ T6219] REISERFS (device loop4): checking transaction log (loop4) [ 130.147431][ T6219] REISERFS (device loop4): Using r5 hash to sort names [ 130.188307][ T6219] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 130.456176][ T6235] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.155195][ T6223] JBD2: Ignoring recovery information on journal [ 131.254977][ T6260] set_capacity_and_notify: 4 callbacks suppressed [ 131.254998][ T6260] loop4: detected capacity change from 0 to 1024 [ 131.300751][ T6223] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 131.386560][ T6260] EXT4-fs (loop4): inline encryption not supported [ 131.413980][ T6260] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 131.450818][ T6260] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 131.622924][ T6260] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,auto_da_alloc,noblock_validity,grpquota,inlinecrypt,delalloc,nomblk_io_submit,errors=remount-ro,dioread_nolock,. Quota mode: writeback. [ 131.665584][ T5632] ocfs2: Unmounting device (7,5) on (node local) [ 131.672271][ T6260] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.755079][ T6260] EXT4-fs error (device loop4): ext4_get_first_dir_block:3621: inode #12: comm syz.4.681: directory missing '..' [ 131.814838][ T6260] EXT4-fs (loop4): Remounting filesystem read-only [ 131.829574][ T4261] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 131.899036][ T6267] loop2: detected capacity change from 0 to 32768 [ 131.940812][ T6275] netlink: 'syz.3.699': attribute type 29 has an invalid length. [ 131.974161][ T6275] netlink: 'syz.3.699': attribute type 29 has an invalid length. [ 132.012983][ T6280] netlink: 'syz.3.699': attribute type 29 has an invalid length. [ 132.127203][ T6284] loop5: detected capacity change from 0 to 1024 [ 132.179786][ T6267] XFS (loop2): Mounting V5 Filesystem [ 132.253263][ T6284] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 2: comm syz.5.687: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.319884][ T4261] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 132.345379][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.354770][ T6284] Quota error (device loop5): qtree_write_dquot: dquota write failed [ 132.365035][ T6284] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 48: comm syz.5.687: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.390374][ T4261] usb 2-1: config 0 descriptor?? [ 132.405046][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.692'. [ 132.414660][ T6284] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 132.451061][ T6284] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.687: Failed to acquire dquot type 0 [ 132.492352][ T6284] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 132.533334][ T6267] XFS (loop2): Ending clean mount [ 132.539545][ T6284] EXT4-fs error (device loop5): ext4_evict_inode:284: inode #11: comm syz.5.687: mark_inode_dirty error [ 132.556899][ T6284] EXT4-fs warning (device loop5): ext4_evict_inode:287: couldn't mark inode dirty (err -117) [ 132.605942][ T6284] EXT4-fs (loop5): 1 orphan inode deleted [ 132.631049][ T6284] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,noblock_validity,data_err=ignore,max_batch_time=0x00000000000008c9,nodiscard,stripe=0x0000000000000004,nombcache,,errors=continue. Quota mode: none. [ 132.634331][ T4273] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.652914][ C1] vkms_vblank_simulate: vblank timer overrun [ 132.677375][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.683818][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.729671][ T4261] [drm] vendor descriptor length:6 data:06 5f 01 02 00 00 00 00 00 00 00 [ 132.754110][ T4261] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 132.788307][ T4273] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 132.793551][ T4198] XFS (loop2): Unmounting Filesystem [ 132.815990][ T6303] device vlan2 entered promiscuous mode [ 132.835216][ T6303] device bridge0 entered promiscuous mode [ 132.843823][ T4273] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 132.911044][ T4273] EXT4-fs error (device loop5): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.939836][ T4261] [drm:udl_init] *ERROR* Selecting channel failed [ 133.026747][ T4273] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 133.050700][ T4273] EXT4-fs error (device loop5): ext4_release_dquot:6272: comm kworker/u4:5: Failed to release dquot type 0 [ 133.064221][ T4261] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 133.082758][ T4261] [drm] Initialized udl on minor 2 [ 133.095966][ T5632] EXT4-fs error (device loop5): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 133.123060][ T4261] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 133.137389][ T4261] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 133.139884][ T5632] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 133.185799][ T4261] usb 2-1: USB disconnect, device number 7 [ 133.199443][ T5632] EXT4-fs error (device loop5): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error [ 133.232982][ T4196] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 133.294491][ T4196] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 133.324510][ T4196] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 133.334068][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 133.592577][ T6318] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.601702][ T6318] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.610740][ T6318] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.619653][ T6318] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.706000][ T4665] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 133.897108][ T13] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.169793][ T4665] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.181110][ T4665] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.223309][ T4665] usb 4-1: config 0 interface 0 has no altsetting 0 [ 134.230399][ T4665] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 134.273889][ T4665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.300699][ T4665] usb 4-1: config 0 descriptor?? [ 134.355016][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.371823][ T13] usb 5-1: config 1 interface 1 has no altsetting 0 [ 134.413361][ T13] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 134.427293][ T6321] loop1: detected capacity change from 0 to 32768 [ 134.434253][ T6340] netlink: 'syz.2.711': attribute type 1 has an invalid length. [ 134.434516][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.546572][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.713'. [ 134.623461][ T6321] XFS (loop1): Mounting V5 Filesystem [ 134.653785][ T6358] loop5: detected capacity change from 0 to 512 [ 134.760291][ T13] usb 5-1: selecting invalid altsetting 0 [ 134.794547][ T4665] uclogic 0003:28BD:0074.000E: interface is invalid, ignoring [ 134.925155][ T6358] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 134.983252][ T6358] EXT4-fs (loop5): 1 truncate cleaned up [ 135.009424][ T6358] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 135.053946][ T4292] usb 4-1: USB disconnect, device number 5 [ 135.085353][ T13] usb 5-1: USB disconnect, device number 7 [ 135.134676][ T6358] EXT4-fs error (device loop5): __ext4_expand_extra_isize:5893: inode #12: comm syz.5.716: bad extra_isize 62 (inode size 256) [ 135.195741][ T6358] EXT4-fs (loop5): Remounting filesystem read-only [ 135.215108][ T6363] loop2: detected capacity change from 0 to 32768 [ 135.380063][ T6321] XFS (loop1): Ending clean mount [ 135.398278][ T6363] XFS (loop2): Mounting V5 Filesystem [ 135.557660][ T6363] XFS (loop2): Ending clean mount [ 135.563957][ T4185] XFS (loop1): Unmounting Filesystem [ 135.592403][ T6363] XFS (loop2): Quotacheck needed: Please wait. [ 135.766994][ T6363] XFS (loop2): Quotacheck: Done. [ 135.914443][ T4198] XFS (loop2): Unmounting Filesystem [ 135.931713][ T6384] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 136.154836][ T13] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.311407][ T26] audit: type=1326 audit(1792029990.257:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6392 comm="syz.3.725" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89c0396559 code=0x0 [ 136.487449][ T6373] loop5: detected capacity change from 0 to 40427 [ 136.526355][ T6398] loop1: detected capacity change from 0 to 16 [ 136.554224][ T6373] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 136.580372][ T6373] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 136.624087][ T6373] F2FS-fs (loop5): invalid crc value [ 136.633394][ T6398] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.693489][ T13] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 136.705769][ T13] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 19 [ 136.725668][ T6373] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.850236][ T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.877498][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 136.919524][ T13] usb 5-1: SerialNumber: syz [ 136.972658][ T6373] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 136.991029][ T6373] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 137.002213][ T13] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 137.170641][ T6408] loop1: detected capacity change from 0 to 4096 [ 137.254628][ T13] usb 5-1: USB disconnect, device number 8 [ 137.290938][ T6408] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 137.436589][ T6408] ntfs3: loop1: Failed to load root. [ 137.745649][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 137.989676][ T4196] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.155102][ T6447] loop1: detected capacity change from 0 to 256 [ 138.174110][ T6449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.750'. [ 138.191606][ T6449] netlink: 56 bytes leftover after parsing attributes in process `syz.2.750'. [ 138.217267][ T6449] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 138.433388][ T4196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.505206][ T4196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.575578][ T4196] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.634643][ T4196] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 138.671401][ T4196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.712933][ T4196] usb 4-1: config 0 descriptor?? [ 138.835137][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 138.963752][ T6430] loop4: detected capacity change from 0 to 40427 [ 139.074221][ T6430] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 139.107110][ T6430] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.144954][ T6430] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1ffff [ 139.184761][ T6430] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x1f8 [ 139.185618][ T4196] input: HID 047f:ffff as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:047F:FFFF.000F/input/input7 [ 139.277307][ T6430] F2FS-fs (loop4): invalid crc value [ 139.302153][ T6487] device ip6_vti0 entered promiscuous mode [ 139.355479][ T6430] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.380346][ T4196] plantronics 0003:047F:FFFF.000F: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 139.488473][ T4196] usb 4-1: USB disconnect, device number 6 [ 139.645504][ T6430] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.676165][ T6430] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.705495][ T6497] fido_id[6497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 139.970225][ T6430] attempt to access beyond end of device [ 139.970225][ T6430] loop4: rw=0, want=45072, limit=40427 [ 140.082260][ T6515] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 140.123306][ T6515] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 140.173936][ T6516] netlink: 'syz.2.771': attribute type 29 has an invalid length. [ 140.229096][ T370] attempt to access beyond end of device [ 140.229096][ T370] loop4: rw=2049, want=40968, limit=40427 [ 140.592303][ T6529] netlink: 292 bytes leftover after parsing attributes in process `syz.1.775'. [ 141.007864][ T6538] loop1: detected capacity change from 0 to 764 [ 141.350426][ T6471] loop5: detected capacity change from 0 to 65536 [ 141.479658][ T6471] XFS (loop5): Mounting V5 Filesystem [ 141.498196][ T6561] loop3: detected capacity change from 0 to 512 [ 141.515918][ T6561] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.735949][ T6561] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 141.768110][ T6568] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 141.781536][ T4666] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.836189][ T6471] XFS (loop5): Ending clean mount [ 141.844128][ T6471] XFS (loop5): Quotacheck needed: Please wait. [ 141.973326][ T6471] XFS (loop5): Quotacheck: Done. [ 141.998066][ T6575] ip_tables: iptables: counters copy to user failed while replacing table [ 142.036823][ T5632] XFS (loop5): Unmounting Filesystem [ 142.265938][ T4666] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.425307][ T4666] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.444398][ T4666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.987614][ T4666] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 143.041529][ T4666] usb 5-1: USB disconnect, device number 9 [ 143.673466][ T6632] loop2: detected capacity change from 0 to 4096 [ 143.851417][ T4665] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 143.967939][ T6643] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.178311][ T4665] usb 4-1: Using ep0 maxpacket: 32 [ 144.254803][ T6651] loop2: detected capacity change from 0 to 2048 [ 144.378195][ T4665] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.393273][ T4665] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.426318][ T4665] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.475728][ T4665] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.507545][ T4665] usb 4-1: config 0 interface 0 has no altsetting 0 [ 144.535639][ T4665] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 144.571604][ T6666] loop4: detected capacity change from 0 to 736 [ 144.582940][ T4665] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.633082][ T4665] usb 4-1: config 0 descriptor?? [ 144.740278][ T6651] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.823242][ T6651] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 145.244954][ T4665] corsair-cpro 0003:1B1C:0C10.0010: collection stack underflow [ 145.299403][ T4665] corsair-cpro 0003:1B1C:0C10.0010: item 0 1 0 12 parsing failed [ 145.307857][ T4665] corsair-cpro: probe of 0003:1B1C:0C10.0010 failed with error -22 [ 145.484209][ T1108] usb 4-1: USB disconnect, device number 7 [ 145.639604][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 146.059708][ T23] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.130633][ T6723] loop3: detected capacity change from 0 to 512 [ 146.180554][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.210958][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.407839][ T6675] loop1: detected capacity change from 0 to 32768 [ 146.514269][ T6675] XFS: attr2 mount option is deprecated. [ 146.778549][ T6675] XFS (loop1): Mounting V5 Filesystem [ 146.789965][ T23] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 146.826350][ T23] usb 6-1: USB disconnect, device number 2 [ 147.149639][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.3.832'. [ 147.217385][ T6675] XFS (loop1): Ending clean mount [ 147.413519][ T4185] XFS (loop1): Unmounting Filesystem [ 147.492286][ T6765] loop5: detected capacity change from 0 to 512 [ 147.515705][ T6709] loop4: detected capacity change from 0 to 65536 [ 147.634052][ T6765] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 147.689749][ T6765] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.729841][ T6709] XFS (loop4): Mounting V5 Filesystem [ 147.886878][ T6709] XFS (loop4): Ending clean mount [ 148.220448][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.2.844'. [ 148.230314][ T4191] XFS (loop4): Unmounting Filesystem [ 148.366010][ T6795] loop3: detected capacity change from 0 to 1024 [ 148.373813][ T6793] loop5: detected capacity change from 0 to 2048 [ 148.511410][ T6793] UDF-fs: error (device loop5): udf_read_inode: (ino 1312) failed !bh [ 148.561051][ T6793] UDF-fs: Scanning with blocksize 512 failed [ 148.672116][ T6793] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 148.704183][ T6793] UDF-fs: Scanning with blocksize 1024 failed [ 148.749891][ T6795] hfsplus: invalid length 32517 has been corrected to 255 [ 148.762912][ T6799] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.773364][ T6793] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 148.838580][ T6793] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 148.883985][ T6793] UDF-fs: Scanning with blocksize 2048 failed [ 148.955906][ T6793] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 149.008342][ T6793] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 149.035872][ T6793] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 149.073500][ T6801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.837'. [ 149.076018][ T6793] UDF-fs: Scanning with blocksize 4096 failed [ 149.102175][ T6793] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 149.479581][ T6809] loop2: detected capacity change from 0 to 8 [ 149.578200][ T6809] SQUASHFS error: zlib decompression failed, data probably corrupt [ 149.625023][ T6809] SQUASHFS error: Failed to read block 0x9b: -5 [ 149.674999][ T6809] SQUASHFS error: Unable to read metadata cache entry [99] [ 149.709370][ T6809] SQUASHFS error: Unable to read inode 0x127 [ 149.909202][ T4665] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 149.996954][ T6817] loop2: detected capacity change from 0 to 512 [ 150.164902][ T6817] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 150.255550][ T6817] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.307777][ T4665] usb 6-1: Using ep0 maxpacket: 8 [ 150.487443][ T6803] loop1: detected capacity change from 0 to 40427 [ 150.520702][ T4665] usb 6-1: config index 0 descriptor too short (expected 1060, got 36) [ 150.530624][ T4665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.563333][ T4665] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.579368][ T4665] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.606050][ T6803] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.609567][ T4665] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 150.669374][ T4665] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.735940][ T4665] usb 6-1: config 0 descriptor?? [ 150.825014][ T6829] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 150.856407][ T6803] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.109646][ T4261] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.158174][ T6836] bridge0: port 3(bond0) entered blocking state [ 151.165270][ T6836] bridge0: port 3(bond0) entered disabled state [ 151.181644][ T6836] device bond0 entered promiscuous mode [ 151.187404][ T6836] device bond_slave_0 entered promiscuous mode [ 151.201063][ T6836] device bond_slave_1 entered promiscuous mode [ 151.207888][ T6836] bridge0: port 3(bond0) entered blocking state [ 151.214292][ T6836] bridge0: port 3(bond0) entered forwarding state [ 151.439684][ T4665] sony 0003:1345:3008.0011: failed to retrieve feature report 0xf2 with the Sixaxis MAC address [ 151.450314][ T4666] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 151.476327][ T4665] sony 0003:1345:3008.0011: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.5-1/input0 [ 151.502997][ T4665] sony 0003:1345:3008.0011: failed to claim input [ 151.554383][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.586319][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.593853][ T4665] usb 6-1: USB disconnect, device number 3 [ 151.637705][ T4261] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.680159][ T4261] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.717080][ T4261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.734365][ T6845] fido_id[6845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 151.767372][ T4261] usb 3-1: config 0 descriptor?? [ 151.984482][ T4666] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.122323][ T4666] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.159641][ T4666] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.264180][ T4261] input: HID 047f:ffff as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:047F:FFFF.0012/input/input9 [ 152.377298][ T4261] plantronics 0003:047F:FFFF.0012: input,hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 152.379664][ T4666] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 152.458468][ T4666] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.490744][ T6847] loop1: detected capacity change from 0 to 32768 [ 152.510102][ T4666] usb 5-1: Product: syz [ 152.514326][ T4666] usb 5-1: Manufacturer: syz [ 152.518984][ T4666] usb 5-1: SerialNumber: syz [ 152.586715][ T13] usb 3-1: USB disconnect, device number 9 [ 152.607145][ T6860] fido_id[6860]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 152.634410][ T4666] usb 5-1: selecting invalid altsetting 1 [ 152.646354][ T4666] usb 5-1: unit 6 not found! [ 152.784867][ T6847] XFS (loop1): Mounting V5 Filesystem [ 152.885377][ T4666] usb 5-1: cannot get ctl value: req = 0x83, wValue = 0x100, wIndex = 0x200, type = 3 [ 152.898591][ T4666] usb 5-1: 2:0: cannot get min/max values for control 1 (id 2) [ 152.991791][ T4666] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 153.016801][ T6875] bridge0: port 3(bond0) entered blocking state [ 153.056340][ T6875] bridge0: port 3(bond0) entered disabled state [ 153.123904][ T6875] device bond0 entered promiscuous mode [ 153.157781][ T6875] device bond_slave_0 entered promiscuous mode [ 153.185365][ T4402] udevd[4402]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.197947][ T6875] device bond_slave_1 entered promiscuous mode [ 153.228880][ T4196] usb 5-1: USB disconnect, device number 10 [ 153.278032][ T6875] bridge0: port 3(bond0) entered blocking state [ 153.284526][ T6875] bridge0: port 3(bond0) entered forwarding state [ 153.379475][ T6847] XFS (loop1): Ending clean mount [ 153.397695][ T6847] XFS (loop1): Quotacheck needed: Please wait. [ 153.535089][ T6847] XFS (loop1): Quotacheck: Done. [ 153.654030][ T4185] XFS (loop1): Unmounting Filesystem [ 154.090616][ T6892] loop5: detected capacity change from 0 to 32768 [ 154.166369][ T6892] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.882 (6892) [ 154.240851][ T6892] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 154.265422][ T6892] BTRFS info (device loop5): force clearing of disk cache [ 154.279444][ T6892] BTRFS info (device loop5): use zlib compression, level 3 [ 154.286711][ T6892] BTRFS info (device loop5): enabling ssd optimizations [ 154.309469][ T6892] BTRFS info (device loop5): using spread ssd allocation scheme [ 154.317186][ T6892] BTRFS info (device loop5): using free space tree [ 154.339370][ T6892] BTRFS info (device loop5): has skinny extents [ 154.586527][ T6892] BTRFS info (device loop5): clearing free space tree [ 154.608319][ T6892] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.629693][ T6892] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.675992][ T6892] BTRFS info (device loop5): creating free space tree [ 154.715945][ T6892] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 154.755249][ T6892] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 154.837993][ T6892] BTRFS info (device loop5): checking UUID tree [ 154.994207][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.890'. [ 155.293025][ T6937] ip_tables: iptables: counters copy to user failed while replacing table [ 155.471907][ T6935] loop1: detected capacity change from 0 to 4096 [ 155.592160][ T6935] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 155.631378][ T6935] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0xa as bad. Run chkdsk. [ 155.686541][ T6935] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 155.742171][ T6935] ntfs: volume version 3.1. [ 155.780908][ T6935] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 155.824528][ T6935] ntfs: (device loop1): ntfs_read_locked_index_inode(): Failed with error code -5 while reading index inode (mft_no 0x18, name_len 2. [ 155.897733][ T6935] ntfs: (device loop1): load_and_init_quota(): Failed to load $Quota/$Q index. [ 155.941773][ T6935] ntfs: (device loop1): load_system_files(): Failed to load $Quota. Mounting read-only. Run chkdsk. [ 156.043043][ T6935] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is an extent inode! [ 156.066301][ T6935] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x44 as bad. Run chkdsk. [ 156.119498][ T6952] netlink: 36 bytes leftover after parsing attributes in process `syz.2.899'. [ 156.143441][ T6954] CUSE: unknown device info "n|zQC*" [ 156.172537][ T6954] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 156.254558][ T6954] CUSE: unknown device info "" [ 156.315542][ T6954] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 156.366135][ T6954] CUSE: DEVNAME unspecified [ 156.916349][ T6982] netlink: 36 bytes leftover after parsing attributes in process `syz.4.912'. [ 157.047624][ T6988] CUSE: unknown device info "n|zQC*" [ 157.087760][ T6988] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0KV,${\d+" [ 157.132661][ T6988] CUSE: unknown device info "" [ 157.160228][ T6988] CUSE: unknown device info "LPt|%IOKu GǪ|QU˜DvF,*p(o9{u[赨gIPYV" [ 157.221879][ T6988] CUSE: DEVNAME unspecified [ 157.381302][ T6996] netlink: 64 bytes leftover after parsing attributes in process `syz.2.919'. [ 157.589251][ T7008] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.923'. [ 157.640671][ T7008] netlink: del zone limit has 8 unknown bytes [ 157.752202][ T6974] loop5: detected capacity change from 0 to 32768 [ 157.773030][ T6974] XFS: ikeep mount option is deprecated. [ 157.839558][ T4196] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 157.901470][ T6974] XFS (loop5): Mounting V5 Filesystem [ 158.017344][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.928'. [ 158.078212][ T6974] XFS (loop5): Ending clean mount [ 158.100380][ T6974] XFS (loop5): Quotacheck needed: Please wait. [ 158.219645][ T4196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.230729][ T4196] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.241073][ T4196] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.254439][ T4196] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.264633][ T4196] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.268038][ T6974] XFS (loop5): Quotacheck: Done. [ 158.289712][ T4196] usb 3-1: config 0 descriptor?? [ 158.313243][ T7035] loop3: detected capacity change from 0 to 4096 [ 158.410138][ T7035] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 158.426717][ T5632] XFS (loop5): Unmounting Filesystem [ 158.491433][ T7035] ntfs3: loop3: Failed to load $Extend. [ 158.630377][ T7041] loop1: detected capacity change from 0 to 4096 [ 158.668339][ T7041] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 158.788536][ T7045] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.938'. [ 158.812238][ T4196] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 158.821066][ T7045] netlink: del zone limit has 8 unknown bytes [ 158.848102][ T4196] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 159.071440][ T6939] usb 3-1: USB disconnect, device number 10 [ 159.162207][ T7049] loop4: detected capacity change from 0 to 4096 [ 159.213289][ T7050] fido_id[7050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 159.254305][ T7049] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 159.408234][ T4273] ntfs3: loop1: ntfs3_write_inode r=1a failed, -22. [ 159.417891][ T4185] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22. [ 159.466741][ T7059] loop3: detected capacity change from 0 to 8 [ 159.507568][ T4273] ntfs3: loop4: ino=1e, Internal error [ 159.535851][ T4185] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22. [ 159.544238][ T4273] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 159.552697][ T4185] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 159.598531][ T7059] SQUASHFS error: xz decompression failed, data probably corrupt [ 159.612171][ T7059] SQUASHFS error: Failed to read block 0xa8: -5 [ 159.652280][ T7059] SQUASHFS error: xz decompression failed, data probably corrupt [ 159.674617][ T7059] SQUASHFS error: Failed to read block 0xa8: -5 [ 159.688554][ T26] audit: type=1800 audit(1792030013.627:10): pid=7059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.942" name="file0" dev="loop3" ino=3 res=0 errno=0 [ 159.713838][ T7064] loop2: detected capacity change from 0 to 256 [ 160.378332][ T7091] loop3: detected capacity change from 0 to 8 [ 160.444590][ T7091] unable to read fragment index table [ 160.566142][ T7071] loop4: detected capacity change from 0 to 32768 [ 160.604894][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 160.629172][ T7071] XFS: ikeep mount option is deprecated. [ 160.781269][ T7071] XFS (loop4): Mounting V5 Filesystem [ 160.825817][ T7083] loop5: detected capacity change from 0 to 40427 [ 160.912717][ T7076] loop2: detected capacity change from 0 to 32768 [ 160.926559][ T7083] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 160.940547][ T7083] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 160.973379][ T7083] F2FS-fs (loop5): build fault injection attr: rate: 17008, type: 0x1ffff [ 161.003773][ T7083] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x1f8 [ 161.019652][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.043833][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.064278][ T1108] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.087911][ T1108] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.101244][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.114702][ T7083] F2FS-fs (loop5): invalid crc value [ 161.203286][ T7076] XFS (loop2): Mounting V5 Filesystem [ 161.238855][ T1108] usb 2-1: config 0 descriptor?? [ 161.275487][ T7083] F2FS-fs (loop5): Found nat_bits in checkpoint [ 161.327024][ T7076] XFS (loop2): Ending clean mount [ 161.425266][ T7071] XFS (loop4): Ending clean mount [ 161.451778][ T7091] loop3: detected capacity change from 0 to 32768 [ 161.463537][ T4198] XFS (loop2): Unmounting Filesystem [ 161.502164][ T7071] XFS (loop4): Quotacheck needed: Please wait. [ 161.533757][ T7083] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 161.562408][ T7083] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 161.669151][ T7083] attempt to access beyond end of device [ 161.669151][ T7083] loop5: rw=0, want=45072, limit=40427 [ 161.721141][ T7091] [ 161.721141][ T7091] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 161.721141][ T7091] [ 161.745754][ T7071] XFS (loop4): Quotacheck: Done. [ 161.785623][ T1108] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 161.822152][ T7091] read_mapping_page failed! [ 161.827084][ T7091] ERROR: (device loop3): txCommit: [ 161.827084][ T7091] [ 161.854146][ T1108] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 161.963412][ T4273] ERROR: (device loop3): diWrite: ixpxd invalid [ 161.963412][ T4273] [ 161.977012][ T4273] ERROR: (device loop3): txCommit: [ 161.977012][ T4273] [ 161.977235][ T1269] attempt to access beyond end of device [ 161.977235][ T1269] loop5: rw=2049, want=40968, limit=40427 [ 162.008946][ T1108] usb 2-1: USB disconnect, device number 8 [ 162.031743][ T4191] XFS (loop4): Unmounting Filesystem [ 162.048702][ T4273] jfs_write_inode: jfs_commit_inode failed! [ 162.089809][ T4195] [ 162.089809][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.089809][ T4195] [ 162.102670][ T4195] [ 162.102670][ T4195] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 162.102670][ T4195] [ 162.187330][ T7114] fido_id[7114]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 162.420873][ T7116] loop2: detected capacity change from 0 to 8 [ 162.546744][ T7116] SQUASHFS error: xz decompression failed, data probably corrupt [ 162.586360][ T7116] SQUASHFS error: Failed to read block 0xa8: -5 [ 162.604003][ T7116] SQUASHFS error: xz decompression failed, data probably corrupt [ 162.699590][ T7116] SQUASHFS error: Failed to read block 0xa8: -5 [ 162.720158][ T26] audit: type=1800 audit(1792030016.667:11): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.959" name="file0" dev="loop2" ino=3 res=0 errno=0 [ 162.781813][ T7122] loop1: detected capacity change from 0 to 8 [ 162.884507][ T7122] SQUASHFS error: Failed to read block 0x1ec: -5 [ 162.917065][ T7122] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 163.090618][ T7126] SQUASHFS error: lzo decompression failed, data probably corrupt [ 163.159643][ T7126] SQUASHFS error: Failed to read block 0x1c0: -5 [ 163.166032][ T7126] SQUASHFS error: Unable to read metadata cache entry [1be] [ 163.502702][ T7142] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 163.559094][ T7118] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.961 (7118) [ 163.574705][ T7142] hpfs: filesystem error: improperly stopped [ 163.581109][ T7142] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 163.609622][ T7142] hpfs: You really don't want any checks? You are crazy... [ 163.648031][ T7142] hpfs: hpfs_map_sector(): read error [ 163.684631][ T7118] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 163.700096][ T7142] hpfs: code page support is disabled [ 163.706133][ T7142] hpfs: hpfs_map_4sectors(): unaligned read [ 163.715994][ T7118] BTRFS info (device loop3): setting nodatasum [ 163.735264][ T7142] hpfs: hpfs_map_4sectors(): unaligned read [ 163.747492][ T7142] hpfs: filesystem error: unable to find root dir [ 163.759581][ T7118] BTRFS info (device loop3): force zlib compression, level 3 [ 163.798329][ T7118] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 163.833526][ T7118] BTRFS info (device loop3): use lzo compression, level 0 [ 163.861230][ T7118] BTRFS info (device loop3): turning on flush-on-commit [ 163.868251][ T7118] BTRFS info (device loop3): enabling auto defrag [ 163.923936][ T7118] BTRFS info (device loop3): max_inline at 4096 [ 163.942460][ T7118] BTRFS info (device loop3): using free space tree [ 163.949041][ T7118] BTRFS info (device loop3): has skinny extents [ 164.414208][ T7186] set_capacity_and_notify: 3 callbacks suppressed [ 164.414225][ T7186] loop4: detected capacity change from 0 to 4096 [ 164.450531][ T7144] loop2: detected capacity change from 0 to 32768 [ 164.520328][ T7186] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 164.545652][ T7144] XFS: ikeep mount option is deprecated. [ 164.551286][ T7118] BTRFS info (device loop3): enabling ssd optimizations [ 164.603203][ T26] audit: type=1800 audit(1792030018.547:12): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.961" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 164.720701][ T7144] XFS (loop2): Mounting V5 Filesystem [ 164.729062][ T7167] loop5: detected capacity change from 0 to 32768 [ 164.879355][ T7144] XFS (loop2): Ending clean mount [ 164.928694][ T7167] XFS (loop5): Mounting V5 Filesystem [ 165.086051][ T7167] XFS (loop5): Ending clean mount [ 165.087851][ T154] ntfs3: loop4: ntfs3_write_inode r=1a failed, -22. [ 165.125325][ T4191] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 165.158611][ T7144] XFS (loop2): Quotacheck needed: Please wait. [ 165.264407][ T5632] XFS (loop5): Unmounting Filesystem [ 165.273619][ T7144] XFS (loop2): Quotacheck: Done. [ 165.292962][ T4191] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 165.304348][ T4191] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 165.364017][ T26] audit: type=1326 audit(1792030019.307:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7212 comm="syz.3.986" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89c0396559 code=0x0 [ 165.470904][ T4198] XFS (loop2): Unmounting Filesystem [ 166.441174][ T7221] Set syz1 is full, maxelem 6117 reached [ 166.498894][ T6939] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 166.555506][ T6939] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 166.773524][ T7240] fido_id[7240]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 166.928856][ T7255] loop2: detected capacity change from 0 to 512 [ 167.020052][ T7267] loop3: detected capacity change from 0 to 64 [ 167.156080][ T7255] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 167.190191][ T7255] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.331135][ T7282] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.412737][ T7282] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.499128][ T7284] device veth0_vlan left promiscuous mode [ 167.534947][ T7284] device veth0_vlan entered promiscuous mode [ 167.585120][ T7284] team0: Device veth0_vlan failed to register rx_handler [ 167.867326][ T7295] loop3: detected capacity change from 0 to 512 [ 168.035430][ T7295] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 168.082874][ T7295] FAT-fs (loop3): Filesystem has been set read-only [ 168.277874][ T7305] loop1: detected capacity change from 0 to 64 [ 168.296915][ T7279] Set syz1 is full, maxelem 6117 reached [ 168.563389][ T7317] siw: device registration error -23 [ 168.633432][ T7313] loop3: detected capacity change from 0 to 4096 [ 168.737019][ T7297] loop2: detected capacity change from 0 to 32768 [ 168.822621][ T7313] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 168.891022][ T7297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1023 (7297) [ 168.957399][ T7297] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 169.036866][ T7297] BTRFS info (device loop2): setting nodatasum [ 169.046388][ T7297] BTRFS info (device loop2): force zlib compression, level 3 [ 169.059595][ T4512] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 169.075082][ T7297] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 169.126351][ T7297] BTRFS info (device loop2): use lzo compression, level 0 [ 169.167724][ T7297] BTRFS info (device loop2): turning on flush-on-commit [ 169.188025][ T7297] BTRFS info (device loop2): enabling auto defrag [ 169.200928][ T7297] BTRFS info (device loop2): max_inline at 4096 [ 169.262325][ T7297] BTRFS info (device loop2): using free space tree [ 169.285558][ T7297] BTRFS info (device loop2): has skinny extents [ 169.375991][ T4512] usb 6-1: Using ep0 maxpacket: 32 [ 169.549111][ T4512] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 169.558337][ T4512] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.671059][ T4512] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 169.868528][ T7297] BTRFS info (device loop2): enabling ssd optimizations [ 169.969613][ T1108] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 169.980901][ T26] audit: type=1800 audit(1792030023.917:14): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1023" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 170.070627][ T7387] loop4: detected capacity change from 0 to 1024 [ 170.131014][ T7387] EXT4-fs (loop4): Ignoring removed bh option [ 170.158345][ T7387] EXT4-fs (loop4): Ignoring removed bh option [ 170.220396][ T4261] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 170.266519][ T7387] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsv1,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,bh,noload,. Quota mode: none. [ 170.348458][ T4512] gspca_nw80x: reg_w err -71 [ 170.360813][ T4512] nw80x: probe of 6-1:3.0 failed with error -71 [ 170.379044][ T4512] usb 6-1: USB disconnect, device number 4 [ 170.418401][ T1108] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.461782][ T1108] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.478346][ T1108] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.488640][ T1108] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.504077][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 170.516691][ T7387] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 170.546960][ T7368] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 170.656275][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.680016][ T4261] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.697133][ T4261] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 170.708240][ T4261] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 170.718467][ T4261] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 170.732083][ T4261] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 170.741507][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.760666][ T4261] usb 2-1: config 0 descriptor?? [ 171.065324][ T4516] usb 4-1: USB disconnect, device number 8 [ 171.066394][ T4261] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 171.190727][ T7409] loop4: detected capacity change from 0 to 2048 [ 171.247877][ T7411] loop5: detected capacity change from 0 to 512 [ 171.350598][ T7409] UDF-fs: bad mount option "dont_measure" or missing value [ 171.451148][ T4191] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 171.495570][ T4191] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 171.548918][ T7418] loop2: detected capacity change from 0 to 24 [ 171.756247][ T7419] loop5: detected capacity change from 0 to 4096 [ 171.882341][ T7424] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 172.008353][ T7428] loop2: detected capacity change from 0 to 128 [ 172.130060][ T7428] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 172.165564][ T7428] hpfs: filesystem error: improperly stopped [ 172.241688][ T7428] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 172.285061][ T7428] hpfs: You really don't want any checks? You are crazy... [ 172.327339][ T7428] hpfs: hpfs_map_sector(): read error [ 172.345184][ T7428] hpfs: code page support is disabled [ 172.360446][ T4273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.375475][ T7428] hpfs: hpfs_map_4sectors(): unaligned read [ 172.395891][ T4273] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.401211][ T7428] hpfs: hpfs_map_4sectors(): unaligned read [ 172.442579][ T7428] hpfs: filesystem error: unable to find root dir [ 172.539076][ T4273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.587780][ T4273] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.773755][ T4273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.829788][ T4273] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.966455][ T4273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.009111][ T7402] usb 2-1: USB disconnect, device number 9 [ 173.086319][ T7402] usblp0: removed [ 173.126431][ T4273] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.242129][ T7457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1083'. [ 173.286831][ T7448] rxe_eth0 speed is unknown, defaulting to 1000 [ 173.406347][ T7432] loop3: detected capacity change from 0 to 40427 [ 173.479008][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1086'. [ 173.789407][ T7432] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 173.805724][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 173.815844][ T7432] F2FS-fs (loop3): invalid crc value [ 173.842210][ T7478] netlink: 'syz.2.1090': attribute type 22 has an invalid length. [ 173.872445][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1090'. [ 173.929001][ T7432] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.120818][ T7432] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 174.154082][ T7485] loop2: detected capacity change from 0 to 512 [ 174.325134][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 174.788297][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.836475][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.869499][ T7448] device bridge_slave_0 entered promiscuous mode [ 174.993286][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.009781][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.069740][ T7402] Bluetooth: hci2: command 0x0409 tx timeout [ 175.076563][ T7448] device bridge_slave_1 entered promiscuous mode [ 175.306165][ T7514] loop2: detected capacity change from 0 to 16 [ 175.334708][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.385264][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.513385][ T7448] team0: Port device team_slave_0 added [ 175.523782][ T7514] erofs: (device loop2): mounted with root inode @ nid 36. [ 175.579431][ T26] audit: type=1800 audit(1792030029.517:15): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1098" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 175.612591][ T7448] team0: Port device team_slave_1 added [ 175.859867][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.907370][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.027639][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.079697][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.086699][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.216564][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.393602][ T7448] device hsr_slave_0 entered promiscuous mode [ 176.460849][ T7448] device hsr_slave_1 entered promiscuous mode [ 176.514555][ T7519] loop3: detected capacity change from 0 to 32768 [ 176.600792][ T7533] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1104'. [ 176.661899][ T7517] loop5: detected capacity change from 0 to 32768 [ 176.840198][ T4273] device hsr_slave_0 left promiscuous mode [ 176.855244][ T4273] device hsr_slave_1 left promiscuous mode [ 176.918207][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.937988][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.965588][ T7530] loop1: detected capacity change from 0 to 32768 [ 176.985169][ T4273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.009887][ T4273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.025150][ T7517] ea_get: invalid extended attribute [ 177.047441][ T4273] device bridge_slave_1 left promiscuous mode [ 177.060212][ T4273] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.086636][ T4273] device bridge_slave_0 left promiscuous mode [ 177.110803][ T4273] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.151337][ T4261] Bluetooth: hci2: command 0x041b tx timeout [ 177.164403][ T26] audit: type=1800 audit(1792030031.107:16): pid=7530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1103" name=E91F7189591E9233614B dev="loop1" ino=7 res=0 errno=0 [ 177.238599][ T4273] device veth1_macvtap left promiscuous mode [ 177.259187][ T4273] device veth0_macvtap left promiscuous mode [ 177.281683][ T4273] device veth1_vlan left promiscuous mode [ 177.307995][ T4273] device veth0_vlan left promiscuous mode [ 177.867278][ T7561] loop5: detected capacity change from 0 to 256 [ 177.994755][ T7561] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.044938][ T7561] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 178.075365][ T7561] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 178.541699][ T4273] team0 (unregistering): Port device team_slave_1 removed [ 178.617686][ T4273] team0 (unregistering): Port device team_slave_0 removed [ 178.658725][ T4273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.757143][ T4273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.789154][ T7559] loop3: detected capacity change from 0 to 40427 [ 178.850457][ T7559] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 178.883995][ T7559] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 178.934820][ T7559] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 179.034568][ T7559] F2FS-fs (loop3): Found nat_bits in checkpoint [ 179.044249][ T4273] bond0 (unregistering): Released all slaves [ 179.219932][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 179.319286][ T7559] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 179.326481][ T7559] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 179.492055][ T7448] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.565918][ T7448] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.625334][ T7448] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 179.703302][ T7448] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.938040][ T7607] loop1: detected capacity change from 0 to 512 [ 180.062382][ T7448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.205527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.240105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.308664][ T7448] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.397811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.430571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.459362][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.466541][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.483621][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.496076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.529931][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.537051][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.560064][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1135'. [ 180.598834][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.615894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.655436][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.703325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.743156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.776157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.809704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.856154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.896207][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.916283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.986033][ T7448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.031620][ T7448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.044812][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.054770][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.306503][ T7658] kernel read not supported for file /& (pid: 7658 comm: syz.5.1144) [ 181.312258][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 181.364406][ T7656] usb3503 0-0008: unknown mode is requested [ 181.374195][ T26] audit: type=1800 audit(1792030035.317:17): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1144" name="&" dev="mqueue" ino=41514 res=0 errno=0 [ 181.375793][ T7663] 9pnet: Insufficient options for proto=fd [ 181.417089][ T7656] usb3503 0-0008: usb3503_probe: probed in standby mode [ 181.431958][ T7660] loop3: detected capacity change from 0 to 512 [ 181.501942][ T7656] i2c i2c-0: new_device: Instantiated device usb3503 at 0x08 [ 181.680488][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.688585][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.731075][ T7448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.837671][ T7672] loop2: detected capacity change from 0 to 1024 [ 182.293488][ T7689] loop5: detected capacity change from 0 to 2048 [ 182.369893][ T7689] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 182.485864][ T7705] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.496995][ T7689] attempt to access beyond end of device [ 182.496995][ T7689] loop5: rw=524288, want=33554432, limit=2048 [ 182.618348][ T5751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 182.676628][ T5751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 182.769046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.798458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.878098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.929851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.971626][ T7448] device veth0_vlan entered promiscuous mode [ 183.012681][ T7448] device veth1_vlan entered promiscuous mode [ 183.140177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.144091][ T4512] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 183.180373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.215946][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.287041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.330721][ T7448] device veth0_macvtap entered promiscuous mode [ 183.460868][ T7448] device veth1_macvtap entered promiscuous mode [ 183.520792][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.573518][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.595170][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.637845][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.699379][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.719352][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.752616][ T7713] loop1: detected capacity change from 0 to 32768 [ 183.759586][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.784143][ T4512] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32 [ 183.800324][ T7713] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1161 (7713) [ 183.813356][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.823686][ T4512] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.847947][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.861150][ T4512] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 33 [ 183.895977][ T4512] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 183.910787][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.931791][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.942124][ T4512] usb 4-1: config 0 interface 0 has no altsetting 0 [ 183.948786][ T4512] usb 4-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 183.968997][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.007806][ T4512] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.030780][ T4512] usb 4-1: config 0 descriptor?? [ 184.035894][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.061099][ T7713] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 184.074147][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.088298][ T7713] BTRFS info (device loop1): using free space tree [ 184.106692][ T7713] BTRFS info (device loop1): has skinny extents [ 184.113630][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.129544][ T4261] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 184.159167][ T7448] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.227445][ T7448] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.310545][ T7448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.338441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.380097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.405463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.435069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.485556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.533713][ T7713] BTRFS info (device loop1): enabling ssd optimizations [ 184.553754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.590243][ T4261] usb 3-1: too many configurations: 181, using maximum allowed: 8 [ 184.642631][ T7448] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.659138][ T7448] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.679583][ T7764] BTRFS info (device loop1): device stats zeroed by syz.1.1161 (7764) [ 184.686166][ T7448] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.697357][ T7448] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.706995][ T4261] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 184.736869][ T4261] usb 3-1: can't read configurations, error -71 [ 184.765740][ T4292] usb 4-1: USB disconnect, device number 9 [ 184.975803][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.019384][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.063729][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.161938][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.179371][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.216058][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 191.059923][ T7403] Bluetooth: hci3: command 0x0406 tx timeout [ 191.066165][ T7403] Bluetooth: hci4: command 0x0406 tx timeout [ 194.104445][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.110827][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 232.019540][ T7403] Bluetooth: hci1: command 0x0406 tx timeout [ 255.544211][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.550575][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 289.861019][ T254] ODEBUG: Out of memory. ODEBUG disabled [ 303.699445][ T23] Bluetooth: hci2: command 0x0406 tx timeout [ 316.984875][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.991247][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.499733][ T27] INFO: task syz-executor:4173 blocked for more than 143 seconds. [ 328.507611][ T27] Not tainted syzkaller #0 [ 328.526036][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.539491][ T27] task:syz-executor state:D stack:22896 pid: 4173 ppid: 4172 flags:0x00004002 [ 328.548793][ T27] Call Trace: [ 328.566651][ T27] [ 328.575869][ T27] __schedule+0x11c3/0x4350 [ 328.591929][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 328.598030][ T27] ? lock_chain_count+0x20/0x20 [ 328.616148][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 328.623710][ T27] ? release_firmware_map_entry+0x190/0x190 [ 328.632961][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 328.638926][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 328.646476][ T27] schedule+0x11b/0x1e0 [ 328.654975][ T27] io_schedule+0x7c/0xd0 [ 328.662491][ T27] bit_wait_io+0xd/0xc0 [ 328.666708][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 328.675988][ T27] ? bit_wait+0xc0/0xc0 [ 328.684282][ T27] ? __wait_on_bit+0x170/0x170 [ 328.689117][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 328.697578][ T27] ? bit_waitqueue+0x30/0x30 [ 328.704429][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 328.713086][ T27] do_get_write_access+0x134/0xe40 [ 328.718355][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 328.726619][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 328.736109][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 328.744719][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 328.753287][ T27] ? jbd2__journal_start+0x13c/0x5a0 [ 328.759625][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 328.765237][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 328.776610][ T27] ext4_dirty_inode+0xbf/0x100 [ 328.782180][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 328.788046][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 328.800144][ T27] generic_update_time+0x1cd/0x1f0 [ 328.805336][ T27] file_update_time+0x3c0/0x440 [ 328.815715][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 328.824700][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 328.854948][ T27] ? wp_page_shared+0x15b/0x6c0 [ 328.860846][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 328.867189][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 328.877618][ T27] do_page_mkwrite+0x168/0x3c0 [ 328.882644][ T27] wp_page_shared+0x163/0x6c0 [ 328.887372][ T27] handle_mm_fault+0x1fbd/0x4440 [ 328.898657][ T27] ? get_page+0xe0/0xe0 [ 328.903826][ T27] ? vmacache_find+0x53c/0x590 [ 328.908643][ T27] ? vmacache_update+0xa0/0x100 [ 328.920020][ T27] ? find_vma+0x1df/0x230 [ 328.924433][ T27] do_user_addr_fault+0x494/0xc90 [ 328.935412][ T27] exc_page_fault+0x60/0x100 [ 328.940190][ T27] ? clear_bhb_loop+0x30/0x80 [ 328.944915][ T27] asm_exc_page_fault+0x22/0x30 [ 328.968004][ T27] RIP: 0033:0x7fa8d6f615e3 [ 328.981084][ T27] RSP: 002b:00007ffeeb9142a0 EFLAGS: 00010212 [ 328.987231][ T27] RAX: 00007fa8d30e6654 RBX: 00007ffeeb9143d0 RCX: 0000000000000000 [ 329.002569][ T27] RDX: 00007fa8d30e6650 RSI: 0000000000000008 RDI: 00007ffeeb9143d0 [ 329.013415][ T27] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 329.024969][ T27] R10: 00007ffeeb9143b0 R11: 0000000000000000 R12: 0000000000000000 [ 329.036495][ T27] R13: 000000000000a9ac R14: ffffffffffff5654 R15: 0000000000000000 [ 329.047986][ T27] [ 329.053345][ T27] INFO: task syz.3.1162:7714 blocked for more than 143 seconds. [ 329.065269][ T27] Not tainted syzkaller #0 [ 329.072558][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.084683][ T27] task:syz.3.1162 state:D stack:27408 pid: 7714 ppid: 4195 flags:0x00004004 [ 329.096914][ T27] Call Trace: [ 329.103659][ T27] [ 329.106647][ T27] __schedule+0x11c3/0x4350 [ 329.121344][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 329.127399][ T27] ? lock_chain_count+0x20/0x20 [ 329.138649][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 329.150931][ T27] ? release_firmware_map_entry+0x190/0x190 [ 329.156905][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 329.169298][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 329.174630][ T27] schedule+0x11b/0x1e0 [ 329.178827][ T27] io_schedule+0x7c/0xd0 [ 329.188857][ T27] bit_wait_io+0xd/0xc0 [ 329.193596][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 329.199108][ T27] ? bit_wait+0xc0/0xc0 [ 329.208835][ T27] ? __wait_on_bit+0x170/0x170 [ 329.213729][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 329.218806][ T27] ? bit_waitqueue+0x30/0x30 [ 329.230898][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 329.236168][ T27] do_get_write_access+0x134/0xe40 [ 329.245230][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 329.253632][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 329.264316][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 329.273735][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 329.279094][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 329.288161][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 329.295915][ T27] ext4_dirty_inode+0xbf/0x100 [ 329.324920][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 329.331024][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 329.336104][ T27] generic_update_time+0x1cd/0x1f0 [ 329.361759][ T27] file_update_time+0x3c0/0x440 [ 329.366689][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 329.381639][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 329.386756][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 329.401696][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 329.408012][ T27] ? count_memcg_event_mm+0x324/0x370 [ 329.432832][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 329.439063][ T27] ? verify_lock_unused+0x140/0x140 [ 329.459482][ T27] do_page_mkwrite+0x168/0x3c0 [ 329.464333][ T27] handle_mm_fault+0x1e47/0x4440 [ 329.490194][ T27] ? get_page+0xe0/0xe0 [ 329.494449][ T27] ? vmacache_find+0x238/0x590 [ 329.513062][ T27] ? find_vma+0xd2/0x230 [ 329.517410][ T27] do_user_addr_fault+0x494/0xc90 [ 329.522543][ T27] exc_page_fault+0x60/0x100 [ 329.527181][ T27] ? clear_bhb_loop+0x30/0x80 [ 329.534687][ T27] asm_exc_page_fault+0x22/0x30 [ 329.544180][ T27] RIP: 0033:0x7f89c026b332 [ 329.548642][ T27] RSP: 002b:00007ffc92950eb0 EFLAGS: 00010202 [ 329.557379][ T27] RAX: 000000000000b008 RBX: 00007f89c114d720 RCX: 0000000000000000 [ 329.569026][ T27] RDX: 0000001b32919000 RSI: 0000000000000008 RDI: 00007f89c114d720 [ 329.581434][ T27] RBP: 0000000000000055 R08: 00007f89c0608000 R09: 00007f89c061df40 [ 329.594219][ T27] R10: 0000000000000000 R11: 00000000000000ff R12: ffffffff814de776 [ 329.604913][ T27] R13: 00007f89c061df40 R14: 000000000000004e R15: ffffffffffff5000 [ 329.618470][ T27] ? queue_work_on+0x176/0x1f0 [ 329.626716][ T27] [ 329.633413][ T27] INFO: task syz.5.1176:7763 blocked for more than 144 seconds. [ 329.643724][ T27] Not tainted syzkaller #0 [ 329.648699][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 329.661275][ T27] task:syz.5.1176 state:D stack:27408 pid: 7763 ppid: 5632 flags:0x00004004 [ 329.675138][ T27] Call Trace: [ 329.679569][ T27] [ 329.682552][ T27] __schedule+0x11c3/0x4350 [ 329.687111][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 329.699647][ T27] ? lock_chain_count+0x20/0x20 [ 329.704559][ T27] ? lockdep_hardirqs_off+0x70/0x100 [ 329.717093][ T27] ? release_firmware_map_entry+0x190/0x190 [ 329.726248][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 329.736883][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 329.743501][ T27] schedule+0x11b/0x1e0 [ 329.747704][ T27] io_schedule+0x7c/0xd0 [ 329.756721][ T27] bit_wait_io+0xd/0xc0 [ 329.763080][ T27] out_of_line_wait_on_bit+0x173/0x230 [ 329.768596][ T27] ? bit_wait+0xc0/0xc0 [ 329.777552][ T27] ? __wait_on_bit+0x170/0x170 [ 329.784695][ T27] ? do_raw_spin_lock+0x128/0x2f0 [ 329.794585][ T27] ? bit_waitqueue+0x30/0x30 [ 329.802069][ T27] ? do_raw_spin_unlock+0x11d/0x230 [ 329.807332][ T27] do_get_write_access+0x134/0xe40 [ 329.817354][ T27] jbd2_journal_get_write_access+0x108/0x140 [ 329.825511][ T27] __ext4_journal_get_write_access+0x24d/0x6e0 [ 329.837612][ T27] ? __ext4_journal_ensure_credits+0x450/0x450 [ 329.846137][ T27] ? slab_post_alloc_hook+0x68/0x380 [ 329.856191][ T27] ext4_reserve_inode_write+0x203/0x2e0 [ 329.864219][ T27] __ext4_mark_inode_dirty+0x13b/0x6c0 [ 329.874646][ T27] ext4_dirty_inode+0xbf/0x100 [ 329.881735][ T27] ? __ext4_expand_extra_isize+0x3e0/0x3e0 [ 329.887609][ T27] __mark_inode_dirty+0x2c8/0xc90 [ 329.898128][ T27] generic_update_time+0x1cd/0x1f0 [ 329.905246][ T27] file_update_time+0x3c0/0x440 [ 329.914903][ T27] ? file_remove_privs+0x5d0/0x5d0 [ 329.921383][ T27] ? mark_lock+0x94/0x320 [ 329.925766][ T27] ext4_page_mkwrite+0x1bc/0x1250 [ 329.936288][ T27] ? mapping_seek_hole_data+0x1300/0x1300 [ 329.945525][ T27] ? pte_alloc_one+0x287/0x310 [ 329.955738][ T27] ? ext4_change_inode_journal_flag+0x710/0x710 [ 329.963462][ T27] ? count_memcg_event_mm+0x324/0x370 [ 329.968889][ T27] ? remove_device_exclusive_entry+0xac0/0xac0 [ 329.979863][ T27] ? verify_lock_unused+0x140/0x140 [ 329.986046][ T27] do_page_mkwrite+0x168/0x3c0 [ 329.996446][ T27] handle_mm_fault+0x1e47/0x4440 [ 330.001766][ T27] ? get_page+0xe0/0xe0 [ 330.005977][ T27] ? vmacache_find+0x4e3/0x590 [ 330.011159][ T27] ? vmacache_update+0xa0/0x100 [ 330.016181][ T27] ? find_vma+0x1df/0x230 [ 330.021349][ T27] do_user_addr_fault+0x494/0xc90 [ 330.026435][ T27] exc_page_fault+0x60/0x100 [ 330.031379][ T27] asm_exc_page_fault+0x22/0x30 [ 330.036276][ T27] RIP: 0033:0x7fdaab44cc09 [ 330.041666][ T27] RSP: 002b:00007ffdc6448670 EFLAGS: 00010202 [ 330.047781][ T27] RAX: 0000001b34824000 RBX: 0000000000000000 RCX: 00000000005ffde8 [ 330.058075][ T27] RDX: 0000001b34823ffc RSI: 00000000005ffde8 RDI: 00007fdaac32f700 [ 330.066322][ T27] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fdaab7ec000 [ 330.074609][ T27] R10: 00007fdaac32f700 R11: 0000000000000000 R12: 0000000000000000 [ 330.082853][ T27] R13: 00000000000000da R14: ffffffff819d82f4 R15: 00007fdaac32f720 [ 330.091572][ T27] ? trace_user_enter+0x74/0x190 [ 330.096581][ T27] [ 330.099939][ T27] [ 330.099939][ T27] Showing all locks held in the system: [ 330.108176][ T27] 1 lock held by khungtaskd/27: [ 330.113395][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 330.123245][ T27] 2 locks held by kworker/u4:4/1269: [ 330.128590][ T27] 2 locks held by getty/3947: [ 330.133590][ T27] #0: ffff88802d07e098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 330.144562][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 330.159026][ T27] 3 locks held by syz-executor/4173: [ 330.166066][ T27] #0: ffff88807a3a5c28 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 330.182860][ T27] #1: ffff88814d20a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 330.201816][ T27] #2: ffff88814d20e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 330.216125][ T27] 4 locks held by kworker/u4:5/4273: [ 330.223925][ T27] #0: ffff88801a3a0138 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 330.239677][ T27] #1: ffffc900031afd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 330.256272][ T27] #2: ffff88814d20a0e0 (&type->s_umount_key#32){++++}-{3:3}, at: trylock_super+0x1c/0xf0 [ 330.270039][ T27] #3: ffff88814d20cc58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x213/0x2d40 [ 330.287862][ T27] 3 locks held by syz.3.1162/7714: [ 330.294872][ T27] #0: ffff888076587828 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 330.310685][ T27] #1: ffff88814d20a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 330.325276][ T27] #2: ffff88814d20e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 330.337552][ T27] 3 locks held by syz.5.1176/7763: [ 330.354075][ T27] #0: ffff88801f33c728 (&mm->mmap_lock){++++}-{3:3}, at: do_user_addr_fault+0x2bb/0xc90 [ 330.370020][ T27] #1: ffff88814d20a558 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1a5/0x1250 [ 330.386041][ T27] #2: ffff88814d20e990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x12d5/0x1560 [ 330.399191][ T27] [ 330.406991][ T27] ============================================= [ 330.406991][ T27] [ 330.417471][ T27] NMI backtrace for cpu 1 [ 330.421844][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 330.429077][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.439161][ T27] Call Trace: [ 330.442474][ T27] [ 330.445437][ T27] dump_stack_lvl+0x188/0x250 [ 330.450157][ T27] ? show_regs_print_info+0x20/0x20 [ 330.455385][ T27] ? load_image+0x410/0x410 [ 330.459929][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 330.465339][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 330.470512][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 330.475486][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 330.481676][ T27] ? _printk+0xda/0x130 [ 330.485867][ T27] ? load_image+0x410/0x410 [ 330.490412][ T27] ? load_image+0x410/0x410 [ 330.494959][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 330.501059][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 330.507105][ T27] watchdog+0xe1b/0xe60 [ 330.511305][ T27] kthread+0x42e/0x520 [ 330.515401][ T27] ? hungtask_pm_notify+0x40/0x40 [ 330.520452][ T27] ? kthread_blkcg+0xd0/0xd0 [ 330.525072][ T27] ret_from_fork+0x1f/0x30 [ 330.529533][ T27] [ 330.533478][ T27] Sending NMI from CPU 1 to CPUs 0: [ 330.538726][ C0] NMI backtrace for cpu 0 [ 330.538738][ C0] CPU: 0 PID: 14 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 330.538754][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.538764][ C0] RIP: 0010:nft_do_chain+0x1ad/0x14d0 [ 330.538787][ C0] Code: 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 95 12 00 00 0f b6 03 88 44 24 07 0f b6 f0 31 ff e8 0b 8e 45 f9 41 c7 46 3a 00 00 00 00 <4c> 89 74 24 38 66 41 c7 46 3e 00 00 ba 30 00 00 00 4c 89 ff 31 f6 [ 330.538801][ C0] RSP: 0018:ffffc90000d37400 EFLAGS: 00000246 [ 330.538816][ C0] RAX: ffffffff883397b5 RBX: ffff88801afdc518 RCX: ffff88813fea9dc0 [ 330.538829][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 330.538839][ C0] RBP: ffffc90000d376f0 R08: ffffc90000d3760f R09: ffffc90000d37510 [ 330.538851][ C0] R10: dffffc0000000000 R11: fffff520001a6ec2 R12: ffffc90000d378c0 [ 330.538863][ C0] R13: dffffc0000000000 R14: fffff520001a6e90 R15: ffffc90000d37650 [ 330.538875][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 330.538889][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.538900][ C0] CR2: 00007f2f5d7c0700 CR3: 000000002b5ce000 CR4: 00000000003506f0 [ 330.538915][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.538925][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.538936][ C0] Call Trace: [ 330.538941][ C0] [ 330.538948][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 330.538971][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 330.538987][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.539011][ C0] ? __lock_acquire+0x12df/0x7d40 [ 330.539042][ C0] ? ipv6_find_tlv+0x270/0x270 [ 330.539058][ C0] ? ip6t_do_table+0x1350/0x1500 [ 330.539074][ C0] ? verify_lock_unused+0x140/0x140 [ 330.539096][ C0] ? nf_nat_ipv6_fn+0x223/0x2e0 [ 330.539118][ C0] nft_do_chain_ipv6+0x16f/0x1d0 [ 330.539134][ C0] ? nf_nat_ipv6_in+0xdb/0x2b0 [ 330.539153][ C0] ? nft_do_chain_ipv4+0x220/0x220 [ 330.539169][ C0] ? nf_nat_ipv6_in+0x1e8/0x2b0 [ 330.539188][ C0] ? nf_xfrm_me_harder+0x6a0/0x6a0 [ 330.539207][ C0] ? read_lock_is_recursive+0x10/0x10 [ 330.539232][ C0] ? ipv6_defrag+0xa7/0x3a0 [ 330.539249][ C0] ? nft_do_chain_ipv4+0x220/0x220 [ 330.539267][ C0] nf_hook_slow+0xb9/0x200 [ 330.539286][ C0] ? refcount_add+0x80/0x80 [ 330.539304][ C0] NF_HOOK+0x1f2/0x390 [ 330.539319][ C0] ? refcount_add+0x80/0x80 [ 330.539336][ C0] ? ip6_rcv_core+0x1600/0x1600 [ 330.539352][ C0] ? refcount_add+0x80/0x80 [ 330.539372][ C0] ? ip6_rcv_finish_core+0x420/0x420 [ 330.539391][ C0] __netif_receive_skb+0xcc/0x290 [ 330.539426][ C0] process_backlog+0x366/0x770 [ 330.539454][ C0] ? rps_trigger_softirq+0x210/0x210 [ 330.539472][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.539493][ C0] ? lock_chain_count+0x20/0x20 [ 330.539515][ C0] __napi_poll+0xbb/0x430 [ 330.539534][ C0] net_rx_action+0x522/0xa80 [ 330.539555][ C0] ? net_tx_action+0x880/0x880 [ 330.539571][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 330.539590][ C0] ? detach_timer+0x2b0/0x2b0 [ 330.539617][ C0] handle_softirqs+0x336/0x830 [ 330.539635][ C0] ? run_ksoftirqd+0xa4/0x100 [ 330.539653][ C0] ? do_softirq+0x210/0x210 [ 330.539669][ C0] ? run_ksoftirqd+0x81/0x100 [ 330.539684][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 330.539700][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 330.539721][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 330.539737][ C0] run_ksoftirqd+0xa4/0x100 [ 330.539752][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 330.539769][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 330.539789][ C0] ? smpboot_thread_fn+0x5d9/0x990 [ 330.539809][ C0] smpboot_thread_fn+0x520/0x990 [ 330.539832][ C0] kthread+0x42e/0x520 [ 330.539853][ C0] ? cpu_report_death+0x180/0x180 [ 330.539870][ C0] ? kthread_blkcg+0xd0/0xd0 [ 330.539885][ C0] ret_from_fork+0x1f/0x30 [ 330.539909][ C0] [ 330.569374][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 330.930978][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 330.938210][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 330.948295][ T27] Call Trace: [ 330.951612][ T27] [ 330.954568][ T27] dump_stack_lvl+0x188/0x250 [ 330.959283][ T27] ? show_regs_print_info+0x20/0x20 [ 330.964551][ T27] ? load_image+0x410/0x410 [ 330.969102][ T27] panic+0x2f8/0x850 [ 330.973028][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 330.978718][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 330.983257][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 330.988865][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 330.995069][ T27] watchdog+0xe5a/0xe60 [ 330.999275][ T27] kthread+0x42e/0x520 [ 331.003384][ T27] ? hungtask_pm_notify+0x40/0x40 [ 331.008469][ T27] ? kthread_blkcg+0xd0/0xd0 [ 331.013097][ T27] ret_from_fork+0x1f/0x30 [ 331.017561][ T27] [ 331.020892][ T27] Kernel Offset: disabled [ 331.025243][ T27] Rebooting in 86400 seconds..