last executing test programs: 5m43.146570124s ago: executing program 0 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/fs/file-max\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd/3\x00') read$FUSE(r0, 0x0, 0x0) 5m43.028333307s ago: executing program 0 (id=198): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) r1 = syz_io_uring_setup(0xd3c, &(0x7f0000000080)={0x0, 0x2, 0x80, 0x3, 0x3}, &(0x7f00000004c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000840)=0x0) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x1009) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000440)={0x2e, 0xa, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x82a6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x800003, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0) io_uring_enter(r1, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 5m42.557848338s ago: executing program 0 (id=203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='m', 0x1}]) 5m41.479927175s ago: executing program 0 (id=206): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 5m40.805566861s ago: executing program 0 (id=211): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x6, 0x7, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x668, 0x8, 0xb5b}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x13, r0, 0x9f337000) 5m40.248226995s ago: executing program 0 (id=216): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='r', 0x1) 5m39.858199014s ago: executing program 32 (id=216): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='r', 0x1) 2m3.532441905s ago: executing program 4 (id=1998): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 2m3.35439183s ago: executing program 4 (id=2000): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2m3.157886534s ago: executing program 4 (id=2003): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000006a00830526bd7000fb"], 0x18}}, 0x0) r0 = socket(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) connect$unix(r0, &(0x7f00000003c0)=@abs={0xa}, 0x6e) getsockname$llc(r0, 0x0, &(0x7f0000000040)) 2m3.026435808s ago: executing program 4 (id=2005): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x4, 0x1f5, &(0x7f0000000600)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents64(r0, 0x0, 0x22) 2m2.847556422s ago: executing program 4 (id=2017): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x40d, &(0x7f0000000080)={[{@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x3334}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@jqfmt_vfsv1}, {@noinit_itable}, {@quota}, {@jqfmt_vfsold}]}, 0x3, 0x451, &(0x7f0000000780)="$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") socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000c00), 0x2, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000c80)='./cgroup.cpu/test\x00', 0x777) openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) 2m2.539396369s ago: executing program 4 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 2m2.146138639s ago: executing program 33 (id=2011): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x2c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) 1m2.303286773s ago: executing program 5 (id=2514): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r0, 0x402, 0x8000001c) creat(&(0x7f0000000200)='./bus\x00', 0x84) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') 1m2.129045388s ago: executing program 5 (id=2508): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xe81, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xe73, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xe5f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/69, 0xe56}], 0x10000000000000b7) 1m1.474721604s ago: executing program 5 (id=2525): mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x483, &(0x7f0000000580)="$eJzs201vG0Ucx/HfbGJ34xZwn9yCKmEJiaIiSuy0pE8ghZa0SH2gbYJAKEEhcYLVxInitGoqaCtx6BEoEgiJAxx6QagKElzgwAFuvAMu3HrggjlxAqHdzHrXjtuk+CFx8v1IiSe7/92dnZmdnc2OBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApJdf6evOmNXOBQAAaKWzFy90Z7n/AwCwoQzw/A8AALCRGDn6REY/floyZ/y/F7mn84XLVwdP9NferMv4W3b48d6Pm8n2HDj4Qu+h4PPB2zfa4zp3caAvfXx6amY2VyzmxtKDhfzo9FhuxXuod/tq+/wCSE9dujw2Pl5MZ/f3VKy+mry3aXMqebQ3dezpIHbwRH//xUhMZ+x/H32J+43w43J0S0alj++as5Ic1V8Wy7SdZuvyT2KffxKDJ/r9E5nMjxTmvJUmKAinskziQRm1oC7qskPy8mXijXlmi8lRUUY7UyVzTlJHUA7P+v8YXn4HTkOy8dC8fA5JSqsN6mwN2yRHB2V0+3BSr3llFtR/p/T+amcOTdcpR3dltPelkjnv9wfe9eR1m6dfT79aGJ+OxBpjr6h2vz+00hrvm1w5Outf8SVzYbUzg5bzBktDMjowcMUfV8gflz52tPfkqYHoCGPXMvvxYvfb9EruybHI0MGs0hgCAAAAAAAAWO9c42hYRp9/6/p/p+07IGwQxtHzMvrrVMl/NR6dl9ARmd9R1u7vfpqb/y73+PTM/Gx+4t25musTbt87xbnZkdHaq9XlXXwV/w5fbh5DnWLG0SEZ3fh3ITxu0nhp2w2EB7pzLMyba6rW+u3m0cX5LME7hCP9u6Lpmll+iPdjSXtc+iegMYxx1Cej8R9227kfCS3pg2zcdzL688s9Ns6Je0HBZZr0f7vj+clctxf7s4y++ieI9aeZabON3R7GZrxYR0YfnamM3WJjd4SxWS/2pIx+Ga4duzOM7fFiP5DRzB/pIDbhxT5pY1Nh7P7R6cmxphXwGuf1/9dltO3FtAnq0paX7WY7yrF33gv7+5vVO7pPn19v/5+MLLtp2+E9r70O7/bbnt9endrt9ZaMvvl+j41bbCtxu36r/ztsr2/IaOLXytiEjd0WxmZWXLBtwqv/t2WULSyUy8bWv62ByP0/Uv9PVLeOJtX/1siypD3upsacOiQV569dGpmczM2SIEGCRDmx2j0TWsG7/38mozfP/1Ye79j7vx1Wh+O/v6+H9/8j1Ttq0v1/W2TZETsaiXVK7tzUTCwlucX5a8/lp0YmchO5Qk82c7j78IHeTCwejO3CVN1FtS7F7LPalQ+/Lj+fVY7/ao//E9U7alL9b48sS1SMV+o+ddj6/11Gb/20UH6OftD4P3jOeuapxc/y9dmk+t8RWZa0x32kMacOAAAAAAAAAAAAAAAAAG0tZhzdlpE71GmC70atZP7fki9MNWn+VyqybKxF31eou1ABoA04cvSFjPaqZG54C7ZIZ6KfWNf+CwAA//8n8SDK") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m1.153116061s ago: executing program 5 (id=2527): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000002380)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64], 0x4, 0x1f5, &(0x7f0000000600)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='tracefs\x00', 0x400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) getdents64(r0, 0x0, 0x22) 1m0.927044857s ago: executing program 5 (id=2530): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x30000008}) dup3(r0, r1, 0x0) 1m0.480759777s ago: executing program 5 (id=2532): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 1m0.190511855s ago: executing program 34 (id=2532): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.537458349s ago: executing program 2 (id=3039): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000001180)='./file1\x00', 0x10, &(0x7f00000011c0)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f0000001200)="$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") r0 = open(&(0x7f0000001a00)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000001a40)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000001a80)=[{&(0x7f0000001ac0)="85", 0x78c00}], 0x18, 0x5a00, 0x0, 0x3) 2.340370174s ago: executing program 1 (id=3041): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x1, 0x7ffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20004055) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "cefdefd1e6e40343282126a9d0c1e2cd36752e514bf2e4d4e7b5e88b5efca630", "0d01331e456955a3a84517cd62870103", {"50715e9dd9a86bbf12f45cb27f7647a8", "f7da213f8cbef5b22b885391972f1257"}}}}}}}, 0x0) 1.907773074s ago: executing program 3 (id=3044): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000280)={[{0x2b, 'cpuset'}]}, 0x8) 1.897750604s ago: executing program 6 (id=3045): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xbd}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x32cbe4cd, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0x101, 0x8006, 0xe1d9, 0x7, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000700)={0x800100, 0x1080, 0xde, 0x7, 0x3, 0xd3}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x241, @time={0x4, 0x1}, 0x6, {0x5, 0x5}}) 1.694115709s ago: executing program 3 (id=3046): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x91}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) 1.616476381s ago: executing program 6 (id=3047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000380)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="0f2f", 0xffa6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)='_', 0xfe3c}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="19", 0x1}], 0x1}}, {{0x0, 0xfffffffffffffe7c, &(0x7f0000000740), 0x1}}], 0x4, 0x608d850) 1.392836007s ago: executing program 6 (id=3048): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0x19, &(0x7f00000015c0)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001700)={r2}, 0xc) 1.363115638s ago: executing program 3 (id=3049): r0 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20004, 0x3}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 1.203954161s ago: executing program 6 (id=3050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r1}, 0xc) 1.174363252s ago: executing program 1 (id=3051): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0x13ca78670876f9b3, 0x0, 0x25dfdc01, {{@in=@broadcast, @in=@local, 0x4e24, 0x0, 0x4e25, 0xffff, 0x2, 0x20, 0x20, 0xc6}, {0x14b6, 0x7, 0x100000000000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}, {0x3, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x48890, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) 1.116801284s ago: executing program 3 (id=3052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', 0x1}) read(r0, &(0x7f0000000040)=""/2, 0xfffffd54) 1.065517485s ago: executing program 2 (id=3053): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.039334915s ago: executing program 1 (id=3054): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010023bd7000fbdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="0c00508005000300"], 0x34}, 0x1, 0x0, 0x0, 0x2000c054}, 0x0) 988.943767ms ago: executing program 6 (id=3055): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40100, 0x0) 919.854888ms ago: executing program 2 (id=3056): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3c0, 0x0, 0x98, 0x130, 0x260, 0x328, 0x0, 0x98, 0x130, 0x1c8, 0x328, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x420) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 825.244791ms ago: executing program 6 (id=3057): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) 763.979782ms ago: executing program 1 (id=3058): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"/318, @ANYRES16=0x0], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) rmdir(&(0x7f0000000140)='./config\x00') 728.996963ms ago: executing program 3 (id=3059): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000840)=[{{0x0, 0x1}, {0x3, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x3}}], 0x10) bind$can_raw(r0, &(0x7f00000000c0), 0x8) 536.416507ms ago: executing program 3 (id=3060): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, 0x0) 516.436948ms ago: executing program 2 (id=3061): socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r0, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 508.990768ms ago: executing program 1 (id=3062): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r0 = open$dir(&(0x7f0000000180)='./config/nullb/nullb1/submit_queues\x00', 0x20000, 0xf0) readv(r0, &(0x7f00000017c0)=[{&(0x7f0000001880)=""/255, 0xff}], 0x1) 364.995462ms ago: executing program 1 (id=3063): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) exit(0x81) sendmmsg$unix(r1, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) 79.087929ms ago: executing program 2 (id=3064): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x404c2, 0x0) 0s ago: executing program 2 (id=3065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x49f81, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1032}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) write(r0, &(0x7f0000000500)="ffffffffffff00112233445508004500002c00024000400670c5640101026401010104d204d2000003e800000001501003e81194000061616161", 0x3a) kernel console output (not intermixed with test programs): fs3: loop1: ino=0, attr_set_size [ 294.441111][T10346] ntfs3: loop1: ino=0, attr_set_size [ 294.451980][T10346] ntfs3: loop1: ino=0, attr_set_size [ 294.462286][T10346] ntfs3: loop1: no free space to extend mft [ 294.588872][T10358] netlink: 'syz.1.1567': attribute type 3 has an invalid length. [ 294.601505][T10358] netlink: 'syz.1.1567': attribute type 7 has an invalid length. [ 294.610129][T10358] netlink: 198368 bytes leftover after parsing attributes in process `syz.1.1567'. [ 294.711334][T10360] kernel read not supported for file /file1 (pid: 10360 comm: syz.1.1568) [ 294.721451][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 294.721466][ T27] audit: type=1800 audit(1792583935.243:296): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.1568" name="file1" dev="mqueue" ino=22484 res=0 errno=0 [ 295.123931][ T27] audit: type=1326 audit(1792583935.643:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=10367 comm="syz.1.1572" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f63bc39f559 code=0x0 [ 295.180411][ T5845] usb 5-1: USB disconnect, device number 19 [ 295.279996][T10372] macsec0: entered promiscuous mode [ 295.287117][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1573'. [ 295.301606][T10372] veth1_macvtap: left promiscuous mode [ 295.356430][T10372] macsec0 (unregistering): left promiscuous mode [ 296.025716][ T5766] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 296.103984][T10390] jffs2: notice: (10390) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 296.218081][ T5766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.229517][ T5766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.241438][ T5766] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 296.250766][ T5766] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 296.259277][ T5766] usb 5-1: Manufacturer: syz [ 296.269510][ T5766] usb 5-1: config 0 descriptor?? [ 296.370522][T10395] loop1: detected capacity change from 0 to 8192 [ 296.895732][ T5845] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 297.085799][ T5845] usb 2-1: Using ep0 maxpacket: 32 [ 297.095495][ T5845] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.106896][ T5845] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.122036][ T5845] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 297.131532][ T5845] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 297.140133][ T5845] usb 2-1: Product: syz [ 297.144445][ T5845] usb 2-1: Manufacturer: syz [ 297.157390][ T5845] hub 2-1:4.0: USB hub found [ 297.320651][ T5766] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #100: -71 [ 297.347991][ T5766] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 297.356900][ T5766] uclogic 0003:256C:006D.0016: failed probing pen v1 parameters: -71 [ 297.365171][ T5766] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 297.378846][ T5766] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 297.393883][ T5766] usb 5-1: USB disconnect, device number 20 [ 297.423425][ T5845] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 297.494242][ T5845] usb 2-1: USB disconnect, device number 23 [ 297.587348][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 297.587452][ T5089] Bluetooth: hci4: command 0x1003 tx timeout [ 298.015716][ T5845] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 298.236979][ T5845] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.255695][ T5845] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.279576][ T5845] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 298.289030][ T5845] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 298.309327][ T5845] usb 2-1: Product: syz [ 298.319463][ T5845] usb 2-1: Manufacturer: syz [ 298.348014][ T5845] hub 2-1:4.0: USB hub found [ 298.549267][T10424] loop3: detected capacity change from 0 to 512 [ 298.555979][ T5845] hub 2-1:4.0: 1 port detected [ 298.776063][ T5845] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 298.783420][ T5845] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 298.857025][ T5845] usb 2-1: USB disconnect, device number 24 [ 299.895710][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 300.092161][ T8] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 300.115011][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 300.145890][ T8] usb 4-1: Product: syz [ 300.150131][ T8] usb 4-1: Manufacturer: syz [ 300.236760][T10458] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 300.670470][ T8] scsi host1: uas [ 300.922932][ C1] usb 4-1: stat urb: status -71 [ 300.923232][ T5840] usb 4-1: USB disconnect, device number 17 [ 300.929846][ C1] usb 4-1: cmd cmplt err -71 [ 300.952280][ T5840] scsi 1:0:0:0: tag#8 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 300.960877][ T5840] scsi 1:0:0:0: tag#8 CDB: Inquiry 12 00 00 00 24 00 [ 301.008817][T10473] loop1: detected capacity change from 0 to 16 [ 301.045651][T10473] erofs: (device loop1): mounted with root inode @ nid 36. [ 301.083403][T10473] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 301.435720][T10491] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1622'. [ 301.463877][T10491] gretap0: entered promiscuous mode [ 301.511083][T10491] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1622'. [ 301.539075][T10491] 0ªî{X¹¦: renamed from gretap0 [ 301.558129][T10491] 0ªî{X¹¦: left promiscuous mode [ 301.563529][T10491] 0ªî{X¹¦: entered allmulticast mode [ 301.571891][T10491] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 301.678781][T10500] netlink: 'syz.2.1625': attribute type 2 has an invalid length. [ 301.722073][ T5766] kernel write not supported for file bpf-prog (pid: 5766 comm: kworker/1:3) [ 301.756612][T10498] syz.3.1624: attempt to access beyond end of device [ 301.756612][T10498] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 301.882354][T10506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1627'. [ 302.035449][T10509] loop4: detected capacity change from 0 to 4096 [ 302.086500][T10509] NILFS (loop4): invalid segment: Checksum error in segment payload [ 302.101901][T10509] NILFS (loop4): trying rollback from an earlier position [ 302.141951][T10509] NILFS (loop4): recovery complete [ 302.159492][T10517] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 302.423223][T10522] batadv_slave_1: entered promiscuous mode [ 302.432615][T10520] batadv_slave_1: left promiscuous mode [ 302.549415][T10511] loop3: detected capacity change from 0 to 32768 [ 302.570016][T10511] [ 302.570016][T10511] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.570016][T10511] [ 302.619896][T10511] ERROR: (device loop3): diWrite: ixpxd invalid [ 302.619896][T10511] [ 302.629835][T10527] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1637'. [ 302.644142][T10511] ERROR: (device loop3): remounting filesystem as read-only [ 302.661890][T10511] ERROR: (device loop3): txCommit: [ 302.661890][T10511] [ 302.690346][T10511] jfs_readdir: bad index table [ 303.090978][T10534] loop1: detected capacity change from 0 to 1024 [ 303.151409][T10534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.043976][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.008553][T10589] netlink: 'syz.1.1657': attribute type 3 has an invalid length. [ 306.202258][T10597] loop1: detected capacity change from 0 to 512 [ 306.310117][T10597] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 306.334856][T10597] FAT-fs (loop1): Filesystem has been set read-only [ 306.383705][T10597] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 306.397392][T10597] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 307.172059][T10640] loop1: detected capacity change from 0 to 512 [ 307.190792][T10640] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 307.375716][ T5840] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 307.402609][T10646] overlayfs: failed to resolve './cgroup': -2 [ 307.439703][ T5766] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 307.485454][ T5766] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.570093][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.588490][ T5840] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.618340][ T5840] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.635694][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.665816][ T5840] usb 4-1: SerialNumber: syz [ 307.904464][ T5840] usb 4-1: 0:2 : does not exist [ 307.917026][ T5840] usb 4-1: usbmixer: too many channels (61) in unit 5 [ 307.986609][ T5840] usb 4-1: USB disconnect, device number 18 [ 308.034072][ T5777] udevd[5777]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.097676][T10664] loop4: detected capacity change from 0 to 1024 [ 308.162725][T10664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 308.184215][T10664] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.210435][T10663] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #15: comm syz.4.1695: lblock 0 mapped to illegal pblock 0 (length 1) [ 308.236774][T10663] EXT4-fs error (device loop4): ext4_map_blocks:610: inode #15: comm syz.4.1695: lblock 0 mapped to illegal pblock 0 (length 1) [ 308.262983][T10664] EXT4-fs error (device loop4): ext4_free_blocks:6694: comm syz.4.1695: Freeing blocks not in datazone - block = 0, count = 1 [ 308.281404][T10669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1696'. [ 308.339899][ T6492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 308.422342][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1698'. [ 309.912687][T10732] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1724'. [ 310.106567][T10744] loop4: detected capacity change from 0 to 128 [ 310.282334][T10750] syz.4.1729: attempt to access beyond end of device [ 310.282334][T10750] loop4: rw=2049, sector=145, nr_sectors = 376 limit=128 [ 310.494023][ T1325] kworker/u4:7: attempt to access beyond end of device [ 310.494023][ T1325] loop4: rw=1, sector=521, nr_sectors = 520 limit=128 [ 310.672613][T10758] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 311.224747][T10773] loop1: detected capacity change from 0 to 4096 [ 311.236999][T10773] EXT4-fs: Ignoring removed nobh option [ 311.269700][T10773] EXT4-fs: Ignoring removed bh option [ 311.290021][T10773] EXT4-fs (loop1): Test dummy encryption mode enabled [ 311.327694][T10773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.470676][T10773] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 311.627145][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.773824][T10793] loop4: detected capacity change from 0 to 7 [ 311.800931][T10793] Dev loop4: unable to read RDB block 7 [ 311.813212][T10793] loop4: unable to read partition table [ 311.823867][T10793] loop4: partition table beyond EOD, truncated [ 311.835598][ T5766] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 311.859980][T10793] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 311.900464][ T5143] Dev loop4: unable to read RDB block 7 [ 311.907248][ T5143] loop4: unable to read partition table [ 311.914441][ T5143] loop4: partition table beyond EOD, truncated [ 312.068663][ T5766] usb 4-1: unable to get BOS descriptor or descriptor too short [ 312.086841][ T5766] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.105613][ T5766] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 312.122682][ T5766] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 312.139220][ T5766] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 312.154500][ T5766] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 312.166239][ T5766] usb 4-1: config 1 interface 1 has no altsetting 0 [ 312.193721][ T5766] usb 4-1: string descriptor 0 read error: -22 [ 312.205568][ T5766] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 312.225385][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.669957][ T5766] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 313.146192][ T5766] usb 4-1: 2:0: failed to get current value for ch 1 (-71) [ 313.218222][ T5766] usb 4-1: USB disconnect, device number 19 [ 313.699256][T10810] loop4: detected capacity change from 0 to 131072 [ 313.709810][T10810] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (512, 24) [ 313.717814][T10810] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 313.726173][T10810] F2FS-fs (loop4): Test dummy encryption mode enabled [ 313.740034][T10810] F2FS-fs (loop4): invalid crc value [ 313.775645][T10810] F2FS-fs (loop4): Found nat_bits in checkpoint [ 313.822800][T10810] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 313.844020][T10810] F2FS-fs (loop4): Start checkpoint disabled! [ 313.864830][T10810] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 313.872257][T10810] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 314.083164][T10825] loop3: detected capacity change from 0 to 1024 [ 314.320709][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'. [ 314.496047][ T5861] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 314.646211][T10832] loop1: detected capacity change from 0 to 128 [ 314.687457][ T5861] usb 4-1: unable to get BOS descriptor or descriptor too short [ 314.699982][T10832] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 314.712309][ T5861] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 314.737456][T10832] ext4 filesystem being mounted at /432/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 314.765985][ T5861] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 314.775091][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.795343][ T5861] usb 4-1: Product: syz [ 314.800193][ T5861] usb 4-1: Manufacturer: syz [ 314.804844][ T5861] usb 4-1: SerialNumber: syz [ 314.814395][T10832] fscrypt (loop1, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 314.941423][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 315.073792][ T5861] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input26 [ 315.083352][T10838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1766'. [ 315.178058][ T5128] bcm5974 4-1:1.0: could not read from device [ 315.268722][ T5128] bcm5974 4-1:1.0: could not read from device [ 315.281701][ T5128] bcm5974 4-1:1.0: could not read from device [ 315.288966][ T5861] usb 4-1: USB disconnect, device number 20 [ 315.312646][ T5128] bcm5974 4-1:1.0: could not read from device [ 315.656379][ T1333] hfsplus: b-tree write err: -5, ino 25 [ 315.662238][ T1333] hfsplus: b-tree write err: -5, ino 4 [ 315.678514][ T1333] hfsplus: b-tree write err: -5, ino 2 [ 315.700489][ T1333] hfsplus: b-tree write err: -5, ino 17 [ 315.827999][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1772'. [ 316.123622][T10852] team0: Port device team_slave_0 removed [ 316.693532][T10862] loop1: detected capacity change from 0 to 32768 [ 316.703501][T10878] loop4: detected capacity change from 0 to 128 [ 316.716740][T10878] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 316.741568][T10862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1776 (10862) [ 316.773052][T10878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.835016][T10862] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 316.864702][T10862] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 316.875483][T10862] BTRFS info (device loop1): setting nodatasum [ 316.905826][T10862] BTRFS info (device loop1): using free space tree [ 317.042392][T10862] BTRFS info (device loop1): enabling ssd optimizations [ 317.056135][T10862] BTRFS info (device loop1): auto enabling async discard [ 317.273571][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.284895][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.583062][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 317.619592][T10912] bond0: option miimon: invalid value (18446744073681218854) [ 317.647691][T10912] bond0: option miimon: allowed values 0 - 2147483647 [ 317.655778][ T5788] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 317.871437][T10920] sctp: [Deprecated]: syz.2.1794 (pid 10920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 317.871437][T10920] Use struct sctp_sack_info instead [ 317.901120][ T5777] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop1 scanned by udevd (5777) [ 319.782485][T10986] loop4: detected capacity change from 0 to 512 [ 319.848310][T10986] EXT4-fs (loop4): 1 truncate cleaned up [ 319.855414][T10986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.944383][ T27] audit: type=1800 audit(1792583960.463:298): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.1820" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 320.007513][ T27] audit: type=1800 audit(1792583960.523:299): pid=10993 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.4.1820" name="file1" dev="loop4" ino=13 res=0 errno=0 [ 320.032496][T10993] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.1820: bg 0: block 465: padding at end of block bitmap is not set [ 320.057877][T10993] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 320.077333][T10993] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1820: invalid indirect mapped block 234881024 (level 0) [ 320.153841][ T6492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.163240][ T5845] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 320.345685][ T5845] usb 4-1: Using ep0 maxpacket: 16 [ 320.361935][ T5845] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.378601][ T5845] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 320.393906][ T5845] usb 4-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 320.409604][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.418192][ T5845] usb 4-1: Product: syz [ 320.422432][ T5845] usb 4-1: Manufacturer: syz [ 320.430184][ T5845] usb 4-1: SerialNumber: syz [ 320.681403][ T5845] usb 4-1: USB disconnect, device number 21 [ 320.843661][T10999] loop4: detected capacity change from 0 to 40427 [ 320.883042][T10999] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 320.902165][T10999] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 320.938807][T10999] F2FS-fs (loop4): invalid crc value [ 320.960664][T10999] F2FS-fs (loop4): Found nat_bits in checkpoint [ 321.112456][T10999] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 321.136839][T10999] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 321.333244][T11028] loop1: detected capacity change from 0 to 128 [ 321.372185][T11028] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 321.423735][T11028] hpfs: filesystem error: improperly stopped [ 321.439879][T11028] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 321.492791][T11028] hpfs: You really don't want any checks? You are crazy... [ 321.525639][T11028] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 321.550004][T11028] hpfs: code page support is disabled [ 321.556265][T11028] hpfs: hpfs_map_4sectors(): unaligned read [ 321.569171][T11028] hpfs: hpfs_map_4sectors(): unaligned read [ 321.575134][T11028] hpfs: filesystem error: unable to find root dir [ 321.599544][T11028] hpfs: hpfs_map_4sectors(): unaligned read [ 321.611175][T11028] hpfs: hpfs_map_sector(): read error [ 322.200191][T11048] loop3: detected capacity change from 0 to 256 [ 322.817035][T11054] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.827307][T11054] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.839964][T11054] bridge0: entered allmulticast mode [ 322.889162][T11056] bridge_slave_1: left allmulticast mode [ 322.911673][T11056] bridge_slave_1: left promiscuous mode [ 322.933273][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.980572][T11056] bridge_slave_0: left allmulticast mode [ 322.986823][T11056] bridge_slave_0: left promiscuous mode [ 322.993549][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.154457][T11061] Invalid argument reading file caps for ./file0 [ 323.469288][T11070] loop4: detected capacity change from 0 to 1024 [ 323.487493][T11070] EXT4-fs: Ignoring removed bh option [ 323.525881][T11070] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.604045][T11070] EXT4-fs error (device loop4): ext4_map_blocks:720: inode #3: block 1: comm syz.4.1855: lblock 1 mapped to illegal pblock 1 (length 1) [ 323.621230][T11070] EXT4-fs (loop4): Remounting filesystem read-only [ 323.629207][T11070] Quota error (device loop4): write_blk: dquota write failed [ 323.638801][T11070] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 323.649571][T11070] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 323.661526][T11070] EXT4-fs (loop4): 1 orphan inode deleted [ 323.672197][T11070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.818700][ T6492] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.991957][T11088] overlayfs: failed to clone upperpath [ 324.010282][T11088] overlayfs: failed to clone upperpath [ 324.535814][T11114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 324.573208][T11114] ipvlan2: entered allmulticast mode [ 324.603799][T11114] syz_tun: entered allmulticast mode [ 326.000401][ T27] audit: type=1326 audit(1792583966.523:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11174 comm="syz.2.1899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cb979f559 code=0x0 [ 327.205779][ T9] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 327.397698][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.407985][ T9] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 327.425361][ T9] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 327.434675][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.442824][ T9] usb 4-1: Product: syz [ 327.447329][ T5845] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 327.455079][ T9] usb 4-1: Manufacturer: syz [ 327.460280][ T9] usb 4-1: SerialNumber: syz [ 327.637741][ T5845] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 327.648865][ T5845] usb 2-1: config 0 has no interface number 0 [ 327.657691][ T5845] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 327.670521][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.678982][ T5845] usb 2-1: Product: syz [ 327.683220][ T5845] usb 2-1: Manufacturer: syz [ 327.693586][ T5845] usb 2-1: SerialNumber: syz [ 327.702535][ T5845] usb 2-1: config 0 descriptor?? [ 328.252112][T11211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.263713][T11211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.493627][ C0] usb 4-1: received EP1 urb->status = -71 [ 328.514728][ T9] input: as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 328.546063][ T5845] asix 2-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 227 [ 328.559308][ T5840] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 328.633459][ T9] usb 4-1: USB disconnect, device number 22 [ 328.765779][ T23] usb 2-1: USB disconnect, device number 25 [ 328.776811][ T5840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.791709][ T5840] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.836505][ T5840] usb 5-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 328.863981][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.127672][T11238] overlayfs: failed to clone upperpath [ 329.552408][T11252] loop3: detected capacity change from 0 to 2048 [ 329.580753][T11252] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 329.640859][T11252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.667150][ T9] usb 5-1: USB disconnect, device number 21 [ 330.137499][T11270] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 330.177436][T11270] CIFS mount error: No usable UNC path provided in device string! [ 330.177436][T11270] [ 330.194135][T11270] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 330.554405][ T5845] IPVS: starting estimator thread 0... [ 330.666118][T11288] IPVS: using max 17 ests per chain, 40800 per kthread [ 331.001132][T11303] sctp: [Deprecated]: syz.4.1950 (pid 11303) Use of int in max_burst socket option deprecated. [ 331.001132][T11303] Use struct sctp_assoc_value instead [ 331.064302][T11281] loop3: detected capacity change from 0 to 32768 [ 331.074867][T11305] netlink: 'syz.1.1951': attribute type 12 has an invalid length. [ 331.085866][T11305] netlink: 'syz.1.1951': attribute type 29 has an invalid length. [ 331.100419][T11281] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 331.114735][T11305] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1951'. [ 331.133120][T11305] netlink: 'syz.1.1951': attribute type 1 has an invalid length. [ 331.141745][T11305] netlink: 35 bytes leftover after parsing attributes in process `syz.1.1951'. [ 331.297627][ T5777] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 331.516045][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1954'. [ 332.285651][ T5845] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 332.469522][ T5845] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.480955][ T5845] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 332.495195][ T5845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 332.505042][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.514033][ T5845] usb 5-1: Product: syz [ 332.520651][ T5845] usb 5-1: Manufacturer: syz [ 332.525394][ T5845] usb 5-1: SerialNumber: syz [ 332.541583][ T5845] cdc_mbim 5-1:1.0: skipping garbage [ 332.665705][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 332.753113][T11339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 332.856102][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 332.908810][ T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 332.918264][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.945623][ T9] usb 4-1: Product: syz [ 332.950776][ T9] usb 4-1: Manufacturer: syz [ 332.955479][ T9] usb 4-1: SerialNumber: syz [ 332.976649][ T9] usb 4-1: config 0 descriptor?? [ 333.380108][T11339] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 333.387955][ T5845] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 333.396323][ T5845] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 333.404668][ T9] airspy 4-1:0.0: Board ID: 00 [ 333.412830][ T9] airspy 4-1:0.0: Firmware version: [ 333.418624][ T5845] wwan wwan0: port wwan0mbim0 attached [ 333.438572][ T5845] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 26:fa:c7:cd:51:5b [ 333.659185][ T5845] usb 5-1: USB disconnect, device number 22 [ 333.684693][ T5845] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 333.765040][ T5845] wwan wwan0: port wwan0mbim0 disconnected [ 334.016328][ T9] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 334.042162][ T9] airspy 4-1:0.0: Registered as swradio24 [ 334.048936][ T9] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 334.068105][ T9] usb 4-1: USB disconnect, device number 23 [ 334.363337][ T5842] IPVS: starting estimator thread 0... [ 334.465796][T11380] IPVS: using max 18 ests per chain, 43200 per kthread [ 334.590964][T11389] ip6erspan0: entered allmulticast mode [ 334.707540][ T23] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 334.915774][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 334.928208][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 334.946351][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 334.958134][T11400] loop1: detected capacity change from 0 to 2048 [ 334.968879][ T23] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.979227][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.992609][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 335.007539][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.032827][T11400] GPT:first_usable_lbas don't match. [ 335.042834][T11400] GPT:34 != 290 [ 335.063411][T11400] GPT: Use GNU Parted to correct GPT errors. [ 335.074027][T11400] loop1: p1 p2 p3 [ 335.100667][T11404] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1976'. [ 335.293079][ T23] usb 5-1: GET_CAPABILITIES returned 0 [ 335.309855][ T23] usbtmc 5-1:16.0: can't read capabilities [ 335.527863][ T9] usb 5-1: USB disconnect, device number 23 [ 336.422095][T11454] CacheFiles: Failed to register: -95 [ 337.033896][T11473] loop4: detected capacity change from 0 to 256 [ 337.045702][ T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 337.238408][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 337.251533][ T23] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 337.270989][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 337.282784][ T23] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.293187][ T23] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.306668][ T23] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.325406][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.395786][ T5861] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 337.528370][ T991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.566767][ T23] usb 4-1: GET_CAPABILITIES returned 0 [ 337.582697][ T23] usbtmc 4-1:16.0: can't read capabilities [ 337.595844][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 337.612672][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.625365][ T5861] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 337.639126][ T5861] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.661567][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.680083][ T5861] usb 2-1: Product: syz [ 337.684337][ T5861] usb 2-1: Manufacturer: syz [ 337.700362][ T5861] usb 2-1: SerialNumber: syz [ 337.711942][ T991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.818093][ T991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.833854][ T8] usb 4-1: USB disconnect, device number 24 [ 337.923615][T11475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 337.968466][ T991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.019225][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'. [ 338.431252][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.448984][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.459626][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.470137][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.481417][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.490484][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.550091][ T5861] cdc_ncm 2-1:1.0: SET_CRC_MODE failed [ 338.556080][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.575769][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.585846][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.611130][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.622067][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 338.630338][ T5861] cdc_ncm 2-1:1.0: bind() failure [ 338.639070][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.654678][ T5861] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 338.662481][ T5861] cdc_ncm 2-1:1.1: bind() failure [ 338.705916][ T5861] usb 2-1: USB disconnect, device number 26 [ 338.794567][T11488] rxe_eth0 speed is unknown, defaulting to 1000 [ 338.837328][ T27] audit: type=1326 audit(1792583979.353:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11491 comm="syz.3.2014" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb30299f559 code=0x0 [ 339.241568][T11505] syzkaller1: entered promiscuous mode [ 339.247712][T11505] syzkaller1: entered allmulticast mode [ 339.835004][T11488] chnl_net:caif_netlink_parms(): no params data found [ 340.127310][T11514] loop1: detected capacity change from 0 to 32768 [ 340.174780][T11514] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 340.201993][T11526] netlink: 'syz.3.2020': attribute type 4 has an invalid length. [ 340.216109][T11526] netlink: 'syz.3.2020': attribute type 4 has an invalid length. [ 340.224141][T11526] netlink: 203268 bytes leftover after parsing attributes in process `syz.3.2020'. [ 340.279373][T11514] XFS (loop1): Ending clean mount [ 340.389198][ T27] audit: type=1800 audit(1792583980.913:302): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.1.2018" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 340.558589][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.606462][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.619398][T11488] bridge_slave_0: entered allmulticast mode [ 340.641311][T11488] bridge_slave_0: entered promiscuous mode [ 340.661116][T11488] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.692002][ T5788] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 340.705709][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.705714][ T8] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 340.720794][ T5779] Bluetooth: hci1: command tx timeout [ 340.782287][T11488] bridge_slave_1: entered allmulticast mode [ 340.825980][T11488] bridge_slave_1: entered promiscuous mode [ 340.890314][ T8] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 340.952521][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.996083][ T8] usb 4-1: Product: syz [ 341.007797][ T8] usb 4-1: Manufacturer: syz [ 341.045713][ T8] usb 4-1: SerialNumber: syz [ 341.112020][T11488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.170723][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.178921][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.220367][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.228093][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.294671][ T991] veth1_macvtap: left promiscuous mode [ 341.300854][ T991] veth1_vlan: left promiscuous mode [ 341.313804][ T991] veth0_vlan: left promiscuous mode [ 341.679809][ T5861] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 341.920038][ T5861] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 341.934684][ T5861] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 341.947424][ T5861] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 341.978438][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 341.992188][ T5861] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 342.021847][ T5861] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 342.031071][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 342.045949][ T5861] usb 2-1: Product: syz [ 342.050184][ T5861] usb 2-1: Manufacturer: syz [ 342.069830][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 342.075109][ T5861] cdc_wdm 2-1:1.0: skipping garbage [ 342.090239][ T5861] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 342.096871][ T5861] cdc_wdm 2-1:1.0: Unknown control protocol [ 342.363094][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.369815][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.384972][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.391640][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.399343][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.406001][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.412378][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.419042][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.425374][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.432027][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.438336][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.444976][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.451284][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.457924][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.464303][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.470955][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.478111][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.484807][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.492772][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 342.499428][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 342.506584][ T5845] usb 2-1: USB disconnect, device number 27 [ 342.512589][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 342.522709][ T991] team0 (unregistering): Port device team_slave_1 removed [ 342.614567][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.626072][ T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: be:7e:c2:c4:a9:33 [ 342.684138][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.791197][ T5779] Bluetooth: hci1: command tx timeout [ 343.189355][ T991] bond0 (unregistering): Released all slaves [ 343.288337][T11488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.370874][ T8] rtl8150 4-1:1.0: eth9: rtl8150 is detected [ 343.396014][ T8] usb 4-1: USB disconnect, device number 25 [ 343.450976][T11488] team0: Port device team_slave_0 added [ 343.493298][T11488] team0: Port device team_slave_1 added [ 343.550367][T11488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.563647][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.590259][T11488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.622196][T11488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.632796][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.665271][T11488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.725903][ T5845] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 343.741100][T11488] hsr_slave_0: entered promiscuous mode [ 343.763380][T11488] hsr_slave_1: entered promiscuous mode [ 343.776030][T11488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.783710][T11488] Cannot create hsr debugfs directory [ 343.862228][ T991] IPVS: stop unused estimator thread 0... [ 343.937489][ T5845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.969725][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 344.000066][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.038384][ T5845] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 344.047893][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.065914][ T5845] usb 2-1: Product: syz [ 344.070261][ T5845] usb 2-1: Manufacturer: syz [ 344.074901][ T5845] usb 2-1: SerialNumber: syz [ 344.108404][ T5845] usb 2-1: config 0 descriptor?? [ 344.337454][T11488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.371197][T11488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.417812][T11488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.436544][ T5845] usb 2-1: USB disconnect, device number 28 [ 344.546110][T11488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.811407][T11488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.869320][ T5779] Bluetooth: hci1: command tx timeout [ 344.913042][T11488] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.973921][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.981203][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.016014][T11590] input: syz0 as /devices/virtual/input/input28 [ 345.052687][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.059948][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.377412][T11488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.544464][T11488] veth0_vlan: entered promiscuous mode [ 345.583590][T11488] veth1_vlan: entered promiscuous mode [ 345.690577][T11488] veth0_macvtap: entered promiscuous mode [ 345.728840][T11488] veth1_macvtap: entered promiscuous mode [ 345.771280][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.786538][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.812467][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.824875][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.835834][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.847446][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.889788][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.918407][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.951129][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.971651][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.995532][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.026105][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.046624][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.077725][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.108986][T11488] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.131004][T11594] loop1: detected capacity change from 0 to 40427 [ 346.148951][T11488] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.165638][T11488] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.184655][T11488] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.205223][T11594] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 346.220180][T11594] F2FS-fs (loop1): Image doesn't support compression [ 346.259636][T11594] F2FS-fs (loop1): Image doesn't support compression [ 346.285342][T11594] F2FS-fs (loop1): invalid crc value [ 346.344077][T11594] F2FS-fs (loop1): Found nat_bits in checkpoint [ 346.406900][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.414799][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.548328][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.573947][T11594] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 346.600696][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.731048][T11594] F2FS-fs (loop1): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0 [ 346.932404][ T5788] syz-executor: attempt to access beyond end of device [ 346.932404][ T5788] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 346.956020][ T5779] Bluetooth: hci1: command tx timeout [ 346.966023][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 347.384793][T11641] netlink: 'syz.3.2043': attribute type 3 has an invalid length. [ 347.432810][T11641] netlink: 'syz.3.2043': attribute type 7 has an invalid length. [ 347.444002][T11643] kernel read not supported for file /file1 (pid: 11643 comm: syz.2.2044) [ 347.458096][ T27] audit: type=1800 audit(1792583987.983:303): pid=11643 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.2.2044" name="file1" dev="mqueue" ino=26863 res=0 errno=0 [ 347.503039][T11641] netlink: 198368 bytes leftover after parsing attributes in process `syz.3.2043'. [ 347.755230][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2045'. [ 347.781162][T11648] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2045'. [ 347.923633][T11629] loop5: detected capacity change from 0 to 40427 [ 347.952437][T11654] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'gid' [ 347.952437][T11654] [ 347.982294][T11629] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 348.004803][T11629] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 348.051078][ T27] audit: type=1326 audit(1792583988.573:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11655 comm="syz.2.2047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cb979f559 code=0x0 [ 348.075699][ T5840] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 348.089177][T11629] F2FS-fs (loop5): invalid crc value [ 348.255842][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 348.272930][ T5840] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 348.304880][ T5840] usb 4-1: config 0 has no interface number 0 [ 348.336372][ T5840] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 348.358348][ T5840] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 348.383027][ T5840] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 348.393197][T11629] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 348.401001][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.409665][T11629] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 348.419331][ T5840] usb 4-1: Product: syz [ 348.424545][ T5840] usb 4-1: Manufacturer: syz [ 348.433982][ T5840] usb 4-1: SerialNumber: syz [ 348.449701][ T5840] usb 4-1: config 0 descriptor?? [ 348.460109][T11652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.472453][T11652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.604642][T11488] syz-executor: attempt to access beyond end of device [ 348.604642][T11488] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 348.638376][T11488] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 348.732303][T11652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 348.756010][T11652] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 349.016393][ T5840] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 349.631856][ T5840] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 349.685309][ T5840] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 349.736099][ T5840] asix: probe of 4-1:0.34 failed with error -71 [ 349.777258][ T5840] usb 4-1: USB disconnect, device number 26 [ 350.154822][T11683] loop5: detected capacity change from 0 to 40427 [ 350.175654][T11683] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 350.184088][T11683] F2FS-fs (loop5): Image doesn't support compression [ 350.225046][T11683] F2FS-fs (loop5): Image doesn't support compression [ 350.252415][T11683] F2FS-fs (loop5): invalid crc value [ 350.286851][T11683] F2FS-fs (loop5): Found nat_bits in checkpoint [ 350.445967][T11683] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 350.491315][T11709] macsec0: entered promiscuous mode [ 350.516071][T11709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2054'. [ 350.563528][T11709] veth1_macvtap: left promiscuous mode [ 350.611025][T11683] F2FS-fs (loop5): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x13a/0xbc0 [ 350.706702][T11715] kernel read not supported for file /file1 (pid: 11715 comm: syz.3.2055) [ 350.727314][T11488] syz-executor: attempt to access beyond end of device [ 350.727314][T11488] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 350.730539][T11709] macsec0 (unregistering): left promiscuous mode [ 350.755021][ T27] audit: type=1800 audit(1792583991.273:305): pid=11715 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2055" name="file1" dev="mqueue" ino=26911 res=0 errno=0 [ 350.781687][T11488] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 350.943941][T11722] jffs2: notice: (11722) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 352.209485][T11759] jffs2: notice: (11759) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 352.232673][T11731] loop3: detected capacity change from 0 to 40427 [ 352.256603][T11731] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 352.270184][T11731] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 352.313815][T11731] F2FS-fs (loop3): invalid crc value [ 352.453205][T11771] macsec0: entered promiscuous mode [ 352.479347][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2071'. [ 352.511828][T11771] veth1_macvtap: left promiscuous mode [ 352.621443][T11731] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 352.627465][T11771] macsec0 (unregistering): left promiscuous mode [ 352.637604][T11731] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 352.716650][ T27] audit: type=1800 audit(1792583993.243:306): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.2060" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 352.753064][T11731] syz.3.2060: attempt to access beyond end of device [ 352.753064][T11731] loop3: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 352.781285][ T27] audit: type=1800 audit(1792583993.273:307): pid=11731 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.2060" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 352.858623][ T5786] syz-executor: attempt to access beyond end of device [ 352.858623][ T5786] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 352.915993][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 354.128297][T11792] loop5: detected capacity change from 0 to 40427 [ 354.161786][T11792] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 354.177933][T11792] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 354.206494][T11792] F2FS-fs (loop5): invalid crc value [ 354.208402][T11796] loop1: detected capacity change from 0 to 40427 [ 354.231464][T11796] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 354.248250][T11796] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 354.258433][T11796] F2FS-fs (loop1): invalid crc value [ 354.507016][T11792] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 354.531209][T11792] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 354.555717][T11796] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 354.575664][T11796] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 354.625458][ T27] audit: type=1800 audit(1792583995.143:308): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.2086" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 354.666947][T11792] syz.5.2086: attempt to access beyond end of device [ 354.666947][T11792] loop5: rw=34817, sector=77824, nr_sectors = 8 limit=40427 [ 354.671586][ T27] audit: type=1800 audit(1792583995.183:309): pid=11792 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.2086" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 354.760369][T11488] syz-executor: attempt to access beyond end of device [ 354.760369][T11488] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.815546][T11488] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 354.869420][ T5788] syz-executor: attempt to access beyond end of device [ 354.869420][ T5788] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 354.899473][ T5788] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 355.505375][T11834] jffs2: notice: (11834) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 355.563194][T11837] loop1: detected capacity change from 0 to 512 [ 355.735381][ T27] audit: type=1326 audit(1792583996.253:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11838 comm="syz.2.2096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb979f559 code=0x7ffc0000 [ 355.795556][ T27] audit: type=1326 audit(1792583996.253:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11838 comm="syz.2.2096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb979f559 code=0x7ffc0000 [ 355.831699][ T27] audit: type=1326 audit(1792583996.253:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11838 comm="syz.2.2096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb979f559 code=0x7ffc0000 [ 355.859201][ T27] audit: type=1326 audit(1792583996.263:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11838 comm="syz.2.2096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb979f559 code=0x7ffc0000 [ 355.911728][ T27] audit: type=1326 audit(1792583996.263:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11838 comm="syz.2.2096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f2cb979f559 code=0x7ffc0000 [ 355.946240][ T27] audit: type=1326 audit(1792583996.263:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=11838 comm="syz.2.2096" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb979f559 code=0x7ffc0000 [ 357.386124][T11882] loop5: detected capacity change from 0 to 4096 [ 357.404039][T11882] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 357.477129][T11882] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 357.500279][T11882] ntfs3: loop5: Failed to load $Extend (-22). [ 357.509543][T11887] jffs2: notice: (11887) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 357.517373][T11882] ntfs3: loop5: Failed to initialize $Extend. [ 357.543359][ T5836] kernel write not supported for file bpf-prog (pid: 5836 comm: kworker/0:3) [ 357.605707][T11882] ntfs3: loop5: ino=0, attr_set_size [ 357.617527][T11882] ntfs3: loop5: ino=0, attr_set_size [ 357.629197][T11882] ntfs3: loop5: ino=0, attr_set_size [ 357.637644][T11882] ntfs3: loop5: no free space to extend mft [ 357.727412][T11892] netlink: 'syz.3.2109': attribute type 2 has an invalid length. [ 357.871752][T11899] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2113'. [ 357.921357][T11899] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2113'. [ 357.942370][T11899] 0ªî{X¹¦: renamed from gretap0 [ 357.963351][T11899] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 358.232976][T11913] loop5: detected capacity change from 0 to 4096 [ 358.283547][T11913] NILFS (loop5): invalid segment: Checksum error in segment payload [ 358.300876][T11913] NILFS (loop5): trying rollback from an earlier position [ 358.337277][T11913] NILFS (loop5): recovery complete [ 358.349564][T11916] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 358.553633][T11918] batadv_slave_1: entered promiscuous mode [ 358.562016][T11917] batadv_slave_1: left promiscuous mode [ 359.025839][ T5089] Bluetooth: hci4: command 0x1003 tx timeout [ 359.034256][ T5779] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 359.145844][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2130'. [ 359.172237][T11929] loop3: detected capacity change from 0 to 4096 [ 359.185914][T11929] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 359.274725][T11929] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 359.303447][T11929] ntfs3: loop3: Failed to load $Extend (-22). [ 359.313306][T11929] ntfs3: loop3: Failed to initialize $Extend. [ 359.385066][T11929] ntfs3: loop3: ino=0, attr_set_size [ 359.402250][T11929] ntfs3: loop3: ino=0, attr_set_size [ 359.414304][T11929] ntfs3: loop3: ino=0, attr_set_size [ 359.431335][T11929] ntfs3: loop3: no free space to extend mft [ 359.824860][T11953] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 360.089824][ T5861] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 360.309867][ T5861] usb 2-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 360.330734][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 360.344577][ T5861] usb 2-1: Product: syz [ 360.364222][ T5861] usb 2-1: Manufacturer: syz [ 360.454108][T11985] FAULT_INJECTION: forcing a failure. [ 360.454108][T11985] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 360.468493][T11985] CPU: 0 PID: 11985 Comm: syz.5.2144 Not tainted syzkaller #0 [ 360.476041][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 360.486147][T11985] Call Trace: [ 360.489483][T11985] [ 360.492451][T11985] dump_stack_lvl+0x18c/0x250 [ 360.497194][T11985] ? show_regs_print_info+0x20/0x20 [ 360.502450][T11985] ? load_image+0x420/0x420 [ 360.507006][T11985] ? __might_fault+0xaa/0x120 [ 360.511749][T11985] ? __lock_acquire+0x7eb0/0x7eb0 [ 360.516826][T11985] ? __virt_addr_valid+0x10c/0x380 [ 360.522010][T11985] should_fail_ex+0x394/0x4c0 [ 360.526748][T11985] _copy_from_user+0x2f/0xe0 [ 360.531400][T11985] strndup_user+0xb7/0x150 [ 360.535898][T11985] __se_sys_fsopen+0x3d/0x2c0 [ 360.540637][T11985] do_syscall_64+0x55/0xb0 [ 360.545123][T11985] ? clear_bhb_loop+0x40/0x90 [ 360.549852][T11985] ? clear_bhb_loop+0x40/0x90 [ 360.554592][T11985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.560577][T11985] RIP: 0033:0x7f749c79f559 [ 360.565062][T11985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.584722][T11985] RSP: 002b:00007f749d595028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 360.593193][T11985] RAX: ffffffffffffffda RBX: 00007f749ca25fa0 RCX: 00007f749c79f559 [ 360.601237][T11985] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 360.609256][T11985] RBP: 00007f749c836b20 R08: 0000000000000000 R09: 0000000000000000 [ 360.617272][T11985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.625281][T11985] R13: 00007f749ca26038 R14: 00007f749ca25fa0 R15: 00007ffdf31190a8 [ 360.633324][T11985] [ 360.843982][T11993] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2156'. [ 360.897146][ T5861] scsi host1: uas [ 361.132129][T11999] loop3: detected capacity change from 0 to 4096 [ 361.182442][ C1] usb 2-1: stat urb: status -71 [ 361.187456][ C1] usb 2-1: cmd cmplt err -71 [ 361.192534][T11999] NILFS (loop3): invalid segment: Checksum error in segment payload [ 361.193598][ T23] usb 2-1: USB disconnect, device number 29 [ 361.212975][T11999] NILFS (loop3): trying rollback from an earlier position [ 361.240822][ T23] scsi 1:0:0:0: tag#20 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 361.248767][ T23] scsi 1:0:0:0: tag#20 CDB: Inquiry 12 00 00 00 24 00 [ 361.282805][T11999] NILFS (loop3): recovery complete [ 361.337485][T12002] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 361.402999][T12004] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2151'. [ 361.421185][T12004] gretap0: entered promiscuous mode [ 361.472913][T12004] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2151'. [ 361.489088][T12004] 0ªî{X¹¦: renamed from gretap0 [ 361.498808][T12004] 0ªî{X¹¦: left promiscuous mode [ 361.504050][T12004] 0ªî{X¹¦: entered allmulticast mode [ 361.512436][T12004] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 361.583626][ T5840] kernel write not supported for file bpf-prog (pid: 5840 comm: kworker/0:4) [ 361.714020][T12012] syz.5.2154: attempt to access beyond end of device [ 361.714020][T12012] loop5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 361.986728][T12024] batadv_slave_1: entered promiscuous mode [ 361.994654][T12022] batadv_slave_1: left promiscuous mode [ 362.024506][T12023] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2161'. [ 362.174499][T12028] loop5: detected capacity change from 0 to 1024 [ 362.251368][T12028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.413569][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.529184][T12043] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2167'. [ 362.540689][T12043] gretap0: entered promiscuous mode [ 362.590149][T12043] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2167'. [ 362.600708][T12043] 0ªî{X¹¦: renamed from gretap0 [ 362.611321][T12043] 0ªî{X¹¦: left promiscuous mode [ 362.616564][T12043] 0ªî{X¹¦: entered allmulticast mode [ 362.623743][T12043] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 362.882651][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2171'. [ 363.026332][ T5861] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 363.249569][ T5861] usb 6-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 363.264651][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 363.285219][ T5861] usb 6-1: Product: syz [ 363.296602][ T5861] usb 6-1: Manufacturer: syz [ 363.759534][ T5861] scsi host1: uas [ 364.005496][ C0] usb 6-1: stat urb: status -71 [ 364.010553][ C0] usb 6-1: cmd cmplt err -71 [ 364.021290][ T5861] usb 6-1: USB disconnect, device number 2 [ 364.041903][ T5861] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 364.049821][ T5861] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 365.269379][T12130] loop3: detected capacity change from 0 to 512 [ 365.402063][T12130] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 365.462099][T12130] FAT-fs (loop3): Filesystem has been set read-only [ 365.487827][T12141] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 365.518644][T12141] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 366.045684][ T23] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 366.269773][ T23] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 366.285563][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 366.296884][ T23] usb 4-1: Product: syz [ 366.301117][ T23] usb 4-1: Manufacturer: syz [ 366.780740][ T23] scsi host1: uas [ 367.035060][ C1] usb 4-1: stat urb: status -71 [ 367.040079][ C1] usb 4-1: cmd cmplt err -71 [ 367.046429][ T23] usb 4-1: USB disconnect, device number 27 [ 367.082019][ T23] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 367.089962][ T23] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 370.716651][T12270] netlink: 'syz.3.2215': attribute type 3 has an invalid length. [ 370.789997][T12272] loop5: detected capacity change from 0 to 512 [ 370.817087][T12272] FAT-fs (loop5): Unrecognized mount option "ÿÿÿÿÿ01777777777777777777777" or missing value [ 373.250522][T12352] loop5: detected capacity change from 0 to 512 [ 373.360722][T12352] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960) [ 373.375275][T12352] FAT-fs (loop5): error, corrupted file size (i_pos 51, 8960) [ 373.580467][T12369] loop3: detected capacity change from 0 to 128 [ 373.644591][T12369] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 373.689791][T12369] ext4 filesystem being mounted at /563/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 373.775238][T12369] fscrypt (loop3, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 373.813321][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 374.590643][T12377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2265'. [ 375.644735][T12380] loop1: detected capacity change from 0 to 131072 [ 375.656046][T12380] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 375.663929][T12380] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 375.672312][T12380] F2FS-fs (loop1): Test dummy encryption mode enabled [ 375.694756][T12380] F2FS-fs (loop1): invalid crc value [ 375.732936][T12380] F2FS-fs (loop1): Found nat_bits in checkpoint [ 375.778803][T12380] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 375.808837][T12380] F2FS-fs (loop1): Start checkpoint disabled! [ 375.856211][T12380] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 375.863328][T12380] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 376.647632][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2275'. [ 376.965983][T12414] sctp: [Deprecated]: syz.3.2279 (pid 12414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.965983][T12414] Use struct sctp_sack_info instead [ 377.008673][T12416] loop5: detected capacity change from 0 to 128 [ 377.250033][T12421] loop1: detected capacity change from 0 to 512 [ 377.340930][T12416] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 377.375984][T12421] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 377.416160][T12421] FAT-fs (loop1): error, corrupted file size (i_pos 51, 8960) [ 377.435800][T12416] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 377.546116][T12416] fscrypt (loop5, inode 12): Unsupported encryption modes (contents 0, filenames 0) [ 377.634933][T11488] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 378.697234][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 378.723623][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.735721][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.809673][T12449] sctp: [Deprecated]: syz.1.2293 (pid 12449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.809673][T12449] Use struct sctp_sack_info instead [ 379.009626][T12446] team0: Port device team_slave_0 removed [ 379.016713][T12456] loop1: detected capacity change from 0 to 128 [ 379.046419][T12456] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 379.083719][T12456] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 379.614395][T12475] loop3: detected capacity change from 0 to 256 [ 380.329840][T12482] loop3: detected capacity change from 0 to 40427 [ 380.358718][T12482] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 380.374694][T12482] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 380.410926][T12482] F2FS-fs (loop3): invalid crc value [ 380.434309][T12482] F2FS-fs (loop3): Found nat_bits in checkpoint [ 380.504309][T12497] loop5: detected capacity change from 0 to 128 [ 380.550587][T12497] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 380.646829][T12497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.665751][T12482] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 380.673432][T12482] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 380.941768][T12507] overlayfs: failed to clone upperpath [ 381.727661][T12527] Invalid argument reading file caps for ./file0 [ 381.747989][T12529] loop3: detected capacity change from 0 to 128 [ 381.795147][T12529] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 381.845783][T12529] hpfs: filesystem error: improperly stopped [ 381.851939][T12529] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 381.875811][T12529] hpfs: You really don't want any checks? You are crazy... [ 381.883088][T12529] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 381.920118][T12529] hpfs: code page support is disabled [ 381.929602][T12529] hpfs: hpfs_map_4sectors(): unaligned read [ 381.949125][T12529] hpfs: hpfs_map_4sectors(): unaligned read [ 381.965590][T12529] hpfs: filesystem error: unable to find root dir [ 381.992243][T12520] loop5: detected capacity change from 0 to 32768 [ 382.009439][T12520] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 382.034537][T12529] hpfs: hpfs_map_4sectors(): unaligned read [ 382.066446][T12529] hpfs: hpfs_map_sector(): read error [ 382.262923][ T5777] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11 [ 382.295410][T12540] loop3: detected capacity change from 0 to 512 [ 382.335714][ T5842] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 382.354172][T12540] EXT4-fs (loop3): 1 truncate cleaned up [ 382.363593][T12540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.424428][ T27] kauditd_printk_skb: 42 callbacks suppressed [ 382.424444][ T27] audit: type=1800 audit(1792584022.943:358): pid=12540 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2328" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 382.538268][ T27] audit: type=1800 audit(1792584023.063:359): pid=12545 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.2328" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 382.557701][T12545] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.2328: bg 0: block 465: padding at end of block bitmap is not set [ 382.572900][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 382.581296][T12545] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 382.605827][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.631236][T12545] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.2328: invalid indirect mapped block 234881024 (level 0) [ 382.647052][ T5842] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 382.665264][ T5842] usb 2-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 382.674948][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.683237][ T5842] usb 2-1: Product: syz [ 382.687613][ T5842] usb 2-1: Manufacturer: syz [ 382.697186][ T5842] usb 2-1: SerialNumber: syz [ 382.767426][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.977483][ T5842] usb 2-1: USB disconnect, device number 30 [ 383.128351][T12557] Invalid argument reading file caps for ./file0 [ 383.605850][T12575] loop5: detected capacity change from 0 to 512 [ 383.659703][T12575] EXT4-fs (loop5): 1 truncate cleaned up [ 383.666910][T12575] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.705742][ T27] audit: type=1800 audit(1792584024.223:360): pid=12575 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.2341" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 383.838273][T12583] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.2341: bg 0: block 465: padding at end of block bitmap is not set [ 383.853247][ T27] audit: type=1800 audit(1792584024.363:361): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.5.2341" name="file1" dev="loop5" ino=13 res=0 errno=0 [ 383.913718][T12583] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 383.939983][T12583] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.2341: invalid indirect mapped block 234881024 (level 0) [ 384.025322][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.262087][T12597] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 384.731667][T12618] loop3: detected capacity change from 0 to 1024 [ 384.766419][T12618] EXT4-fs: Ignoring removed bh option [ 384.794922][T12618] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 384.818478][T12623] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.825957][T12623] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.838094][T12623] bridge0: entered allmulticast mode [ 384.854029][T12618] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #3: block 1: comm syz.3.2359: lblock 1 mapped to illegal pblock 1 (length 1) [ 384.896540][T12618] EXT4-fs (loop3): Remounting filesystem read-only [ 384.903149][T12618] Quota error (device loop3): write_blk: dquota write failed [ 384.954553][T12623] bridge_slave_1: left allmulticast mode [ 384.975767][T12618] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 384.994348][T12623] bridge_slave_1: left promiscuous mode [ 385.016554][T12623] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.023922][T12618] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 385.034075][T12618] EXT4-fs (loop3): 1 orphan inode deleted [ 385.041742][T12618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.058906][T12623] bridge_slave_0: left allmulticast mode [ 385.096337][T12623] bridge_slave_0: left promiscuous mode [ 385.102184][T12623] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.202476][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.264928][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2367'. [ 385.298559][T12635] ipvlan2: entered allmulticast mode [ 385.309167][T12635] syz_tun: entered allmulticast mode [ 385.966059][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.975168][T12665] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.000931][T12665] bridge0: entered allmulticast mode [ 386.069024][T12665] bridge_slave_1: left allmulticast mode [ 386.076727][T12665] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.092033][T12665] bridge_slave_0: left allmulticast mode [ 386.104591][T12665] bridge_slave_0: left promiscuous mode [ 386.111266][T12665] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.843469][T12699] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.850824][T12699] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.862589][T12699] bridge0: entered allmulticast mode [ 386.899862][T12702] bridge_slave_1: left allmulticast mode [ 386.906210][T12702] bridge_slave_1: left promiscuous mode [ 386.912839][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.929541][T12702] bridge_slave_0: left allmulticast mode [ 386.936597][T12702] bridge_slave_0: left promiscuous mode [ 386.942550][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.774655][T12727] syzkaller1: entered promiscuous mode [ 387.781763][T12727] syzkaller1: entered allmulticast mode [ 387.983703][T12732] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.990688][T12733] CIFS mount error: No usable UNC path provided in device string! [ 387.990688][T12733] [ 387.992897][T12732] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.011010][T12733] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 388.020903][T12732] bridge0: entered allmulticast mode [ 388.066956][T12734] bridge_slave_1: left allmulticast mode [ 388.083832][T12734] bridge_slave_1: left promiscuous mode [ 388.108856][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.144030][T12734] bridge_slave_0: left allmulticast mode [ 388.172281][T12734] bridge_slave_0: left promiscuous mode [ 388.225777][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.062610][T12764] CIFS mount error: No usable UNC path provided in device string! [ 389.062610][T12764] [ 389.079142][T12764] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 389.497553][T12767] loop5: detected capacity change from 0 to 32768 [ 389.514256][T12767] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 389.570876][T12767] XFS (loop5): Ending clean mount [ 389.629425][ T27] audit: type=1800 audit(1792584030.153:362): pid=12767 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.5.2422" name="file1" dev="loop5" ino=4422 res=0 errno=0 [ 390.152999][T11488] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 390.876461][T12810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2438'. [ 391.095745][ T5840] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 391.286785][ T5840] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.305649][ T5840] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 391.330027][ T5840] usb 6-1: New USB device found, idVendor=0471, idProduct=0608, bcdDevice= 0.00 [ 391.339626][ T5840] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.098054][ T5861] usb 6-1: USB disconnect, device number 3 [ 393.575418][T12871] sctp: [Deprecated]: syz.5.2464 (pid 12871) Use of int in max_burst socket option deprecated. [ 393.575418][T12871] Use struct sctp_assoc_value instead [ 395.025687][ T5861] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 395.209004][ T5861] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.229702][ T5861] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 395.263973][ T5861] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 395.278834][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.290339][ T5861] usb 2-1: Product: syz [ 395.294630][ T5861] usb 2-1: Manufacturer: syz [ 395.309567][ T5861] usb 2-1: SerialNumber: syz [ 395.462270][T12916] loop5: detected capacity change from 0 to 512 [ 395.469330][T12912] sctp: [Deprecated]: syz.3.2483 (pid 12912) Use of int in max_burst socket option deprecated. [ 395.469330][T12912] Use struct sctp_assoc_value instead [ 395.497484][T12916] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 395.525916][T12916] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 395.550790][T12916] EXT4-fs (loop5): 1 truncate cleaned up [ 395.572782][T12916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.670338][T11488] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.856115][T12925] ip6erspan0: entered allmulticast mode [ 395.955027][T12930] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 396.133530][T12891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.163727][T12891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.409518][ C1] usb 2-1: received EP1 urb->status = -71 [ 396.455728][ T5861] input: as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 396.585944][ T5861] usb 2-1: USB disconnect, device number 31 [ 396.847914][T12952] loop5: detected capacity change from 0 to 7 [ 396.880888][T12953] udevd[12953]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.904173][T12952] Dev loop5: unable to read RDB block 7 [ 396.913717][T12952] loop5: AHDI p2 [ 396.917890][T12952] loop5: partition table partially beyond EOD, truncated [ 397.357112][T12969] ip6erspan0: entered allmulticast mode [ 397.561694][T12976] loop1: detected capacity change from 0 to 512 [ 397.585166][T12976] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 397.615716][T12976] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 397.643255][T12976] EXT4-fs (loop1): 1 truncate cleaned up [ 397.657063][T12976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.757586][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.893044][T12983] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 398.671793][T13025] loop5: detected capacity change from 0 to 128 [ 398.701605][T13025] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 398.743078][T13025] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 398.990164][T13029] loop5: detected capacity change from 0 to 256 [ 399.644162][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.761589][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.865046][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.895659][ T8] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 399.998816][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.079160][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 400.102002][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 400.121215][T13051] loop1: detected capacity change from 0 to 256 [ 400.135265][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 400.169764][ T8] usb 4-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01 [ 400.209459][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.251797][T13043] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 400.745147][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 400.759503][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 400.768180][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 400.790309][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 400.799058][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 400.807550][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 400.904849][T13059] rxe_eth0 speed is unknown, defaulting to 1000 [ 401.222800][ T8] usb 4-1: USB disconnect, device number 28 [ 401.233723][ T5779] Bluetooth: hci1: Reading Intel version command failed (-71) [ 401.725262][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'. [ 401.991058][T13094] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2550'. [ 402.064018][T13094] loop3: detected capacity change from 0 to 256 [ 402.104212][T13094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2550'. [ 402.430755][T13102] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2559'. [ 402.509914][T13102] loop1: detected capacity change from 0 to 256 [ 402.579929][T12948] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 402.599547][T13102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2559'. [ 402.823181][T13059] chnl_net:caif_netlink_parms(): no params data found [ 402.875758][ T5779] Bluetooth: hci4: command tx timeout [ 403.410361][T13059] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.447646][T13059] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.454961][T13059] bridge_slave_0: entered allmulticast mode [ 403.468961][T13059] bridge_slave_0: entered promiscuous mode [ 403.504707][ T59] hsr_slave_0: left promiscuous mode [ 403.540428][ T59] hsr_slave_1: left promiscuous mode [ 403.571002][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.578826][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.593343][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.601154][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.691601][ T59] veth0_macvtap: left promiscuous mode [ 403.697623][ T59] veth1_vlan: left promiscuous mode [ 403.703937][ T59] veth0_vlan: left promiscuous mode [ 403.871542][ T59] bond1 (unregistering): Released all slaves [ 404.618614][ T59] team0 (unregistering): Port device team_slave_1 removed [ 404.691974][ T59] team0 (unregistering): Port device team_slave_0 removed [ 404.760877][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.829695][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.950163][ T5779] Bluetooth: hci4: command tx timeout [ 405.299625][ T59] bond0 (unregistering): Released all slaves [ 405.353828][T13059] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.361210][T13059] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.373064][T13059] bridge_slave_1: entered allmulticast mode [ 405.395839][T13059] bridge_slave_1: entered promiscuous mode [ 405.415277][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 405.567908][T13059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.581500][T13059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.679613][T13059] team0: Port device team_slave_0 added [ 405.734311][T13059] team0: Port device team_slave_1 added [ 405.760840][T13152] loop3: detected capacity change from 0 to 256 [ 405.864563][T13059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.921206][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.015697][T13059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.074807][T13059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.124320][T13059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.204208][T13059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.381174][T13059] hsr_slave_0: entered promiscuous mode [ 406.397783][T13059] hsr_slave_1: entered promiscuous mode [ 406.408575][T13059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.431993][T13059] Cannot create hsr debugfs directory [ 406.921829][T13172] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2563'. [ 406.978719][T13172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2563'. [ 407.025870][ T5779] Bluetooth: hci4: command tx timeout [ 407.056291][T13059] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 407.069158][T13059] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 407.101794][T13059] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 407.145737][T13059] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 407.407612][T13059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.456835][T13059] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.461214][T13188] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2574'. [ 407.481352][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.488561][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.523382][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.530653][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.784417][T13059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.871239][T13194] loop3: detected capacity change from 0 to 8192 [ 407.919531][T13059] veth0_vlan: entered promiscuous mode [ 407.968279][T13059] veth1_vlan: entered promiscuous mode [ 408.064568][T13059] veth0_macvtap: entered promiscuous mode [ 408.083051][T13059] veth1_macvtap: entered promiscuous mode [ 408.132953][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.162776][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.183126][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.212542][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.234703][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.265917][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.286301][T13059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.320171][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.333902][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.344796][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.355645][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.366182][T13059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.393338][T13059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.423943][T13059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.441236][T13059] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.450943][T13059] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.459890][T13059] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.472715][T13059] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.488669][ T27] audit: type=1326 audit(1792584049.013:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13218 comm="syz.3.2579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb30299f559 code=0x0 [ 408.729901][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.757833][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.823058][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.844506][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.107051][ T5779] Bluetooth: hci4: command tx timeout [ 410.419374][T13291] loop6: detected capacity change from 0 to 128 [ 410.475898][T13291] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 410.494121][T13291] System zones: 1-3, 19-19, 35-36 [ 410.506651][T13291] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 410.521701][T13291] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 410.553535][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.579726][T13291] EXT4-fs warning (device loop6): verify_group_input:151: Cannot add at group 1869770799 (only 1 groups) [ 410.659930][T13059] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.844196][ T27] audit: type=1326 audit(1792584053.363:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_unconfined pid=13388 comm="syz.2.2628" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cb979f559 code=0x0 [ 413.079321][T13398] loop1: detected capacity change from 0 to 128 [ 413.142251][T13398] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 413.222444][T13398] ext4 filesystem being mounted at /636/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 413.350059][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 415.051502][T13462] loop1: detected capacity change from 0 to 512 [ 415.082270][T13462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 415.113181][T13463] loop3: detected capacity change from 0 to 2048 [ 415.149952][T13462] EXT4-fs (loop1): 1 truncate cleaned up [ 415.167266][T13462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.231068][T13463] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 415.337072][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.619194][T13474] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 416.065732][ T5861] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 416.260039][ T5861] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.276952][ T5861] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 416.294399][ T5861] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.309802][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.319433][ T5861] usb 4-1: Product: syz [ 416.323657][ T5861] usb 4-1: Manufacturer: syz [ 416.336245][ T5861] usb 4-1: SerialNumber: syz [ 416.354442][ T5861] cdc_mbim 4-1:1.0: skipping garbage [ 416.558034][T13483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.172503][T13483] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.180206][ T5861] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 417.385754][ T5861] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 417.396476][ T5861] wwan wwan0: port wwan0mbim0 attached [ 417.409277][ T5861] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 76:cb:da:0c:71:55 [ 417.429739][ T5861] usb 4-1: USB disconnect, device number 29 [ 417.437035][ T5861] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 417.492705][ T5861] wwan wwan0: port wwan0mbim0 disconnected [ 418.562351][T13524] loop6: detected capacity change from 0 to 128 [ 418.606340][ T8] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 418.626242][T13524] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 418.650355][T13524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 418.833107][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.845294][ T27] audit: type=1804 audit(1792584059.353:365): pid=13528 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2676" name="/newroot/23/debug/tracing/options/context-info" dev="tracefs" ino=173 res=1 errno=0 [ 418.870088][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 418.900096][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 418.931977][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 418.955572][T13531] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 418.961121][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 419.005554][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 419.040862][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 419.065621][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 419.100263][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 419.111461][T13534] loop6: detected capacity change from 0 to 2048 [ 419.118577][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 419.134278][T13534] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.155282][ T8] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 419.200445][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 419.248041][ T8] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 419.265546][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.283897][ T8] usb 2-1: Product: syz [ 419.290453][ T8] usb 2-1: Manufacturer: syz [ 419.295436][ T8] usb 2-1: SerialNumber: syz [ 419.310773][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.322977][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.341982][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.351519][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.363557][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.391970][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.420699][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.450448][T13517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 419.488501][ T8] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 419.517469][ T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 7 [ 419.542935][ T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 5 [ 419.586066][ T8] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 419.608747][ T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 3 [ 419.625741][ T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 4 [ 419.634019][ T8] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 419.666799][ T8] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 420.542799][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2691'. [ 420.577170][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2691'. [ 420.682511][ T8] usb 2-1: USB disconnect, device number 32 [ 420.699163][T13567] geneve2: entered promiscuous mode [ 420.726861][T13567] geneve2: entered allmulticast mode [ 420.841955][T13550] loop6: detected capacity change from 0 to 131072 [ 420.849780][T13550] XFS: ikeep mount option is deprecated. [ 420.876464][ T8] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 420.893535][ T8] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 420.920139][ T8] keyspan 2-1:1.0: device disconnected [ 420.977323][T13550] XFS (loop6): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 421.117579][T13559] loop3: detected capacity change from 0 to 32768 [ 421.120881][T13550] XFS (loop6): Starting recovery (logdev: internal) [ 421.230074][T13550] XFS (loop6): Ending recovery (logdev: internal) [ 421.250649][T13559] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 421.262448][T13559] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 421.411839][T13559] XFS (loop3): Ending clean mount [ 421.500739][T13559] XFS (loop3): Quotacheck needed: Please wait. [ 421.582159][T13559] XFS (loop3): Quotacheck: Done. [ 421.707116][ T5786] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 421.724451][T13059] XFS (loop6): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 422.997545][T13602] loop3: detected capacity change from 0 to 32768 [ 423.036767][T13602] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 423.068074][T13624] netlink: 'syz.1.2707': attribute type 6 has an invalid length. [ 423.156184][T13602] XFS (loop3): Ending clean mount [ 423.198581][T13602] XFS (loop3): Quotacheck needed: Please wait. [ 423.298334][T13602] XFS (loop3): Quotacheck: Done. [ 423.429219][ T5786] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 423.438801][T13637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 423.451121][T13637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2710'. [ 423.467505][T13637] geneve2: entered promiscuous mode [ 423.474020][T13637] geneve2: entered allmulticast mode [ 424.118494][T13653] netlink: 'syz.3.2717': attribute type 6 has an invalid length. [ 424.796074][ T8] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 424.996960][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 425.004455][ T8] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 425.013928][ T8] usb 4-1: config 0 has no interface number 0 [ 425.020298][ T8] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.031661][ T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 425.040979][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.054738][ T8] usb 4-1: config 0 descriptor?? [ 425.079509][ T8] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 426.018784][T13716] Invalid argument reading file caps for ./file0 [ 426.062630][T13720] netlink: 'syz.6.2729': attribute type 6 has an invalid length. [ 426.320134][ T5836] usb 4-1: USB disconnect, device number 30 [ 427.697461][T13774] netlink: 'syz.2.2743': attribute type 6 has an invalid length. [ 427.891880][T13756] loop1: detected capacity change from 0 to 32768 [ 427.918367][T13784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2748'. [ 427.928520][T13784] netlink: 'syz.6.2748': attribute type 7 has an invalid length. [ 427.939934][T13784] netlink: 'syz.6.2748': attribute type 8 has an invalid length. [ 427.970022][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2748'. [ 428.037917][T13756] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 428.224458][T13756] XFS (loop1): Ending clean mount [ 428.309134][T13756] XFS (loop1): Quotacheck needed: Please wait. [ 428.433193][T13756] XFS (loop1): Quotacheck: Done. [ 428.597821][ T5788] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 429.966743][T13855] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2766'. [ 430.015689][T13855] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2766'. [ 430.266139][ T5779] Bluetooth: hci4: ISO packet too small [ 430.320444][T13868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2770'. [ 430.329683][T13868] netlink: 'syz.3.2770': attribute type 7 has an invalid length. [ 430.339016][T13868] netlink: 'syz.3.2770': attribute type 8 has an invalid length. [ 430.358269][T13868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2770'. [ 430.694852][T13881] tipc: Started in network mode [ 430.701070][T13881] tipc: Node identity 4, cluster identity 4711 [ 430.736663][T13881] tipc: Node number set to 4 [ 430.941001][T13892] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2778'. [ 430.959523][T13892] netlink: 6332 bytes leftover after parsing attributes in process `syz.6.2778'. [ 431.572926][T13910] netlink: 'syz.6.2792': attribute type 6 has an invalid length. [ 431.629546][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2782'. [ 431.655755][T13915] netlink: 'syz.1.2782': attribute type 7 has an invalid length. [ 431.685643][T13915] netlink: 'syz.1.2782': attribute type 8 has an invalid length. [ 431.706150][T13915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 432.342748][T13946] tipc: Cannot configure node identity twice [ 433.350567][T13982] loop6: detected capacity change from 0 to 256 [ 433.583641][T13982] syz.6.2808: attempt to access beyond end of device [ 433.583641][T13982] loop6: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 434.165124][T14012] loop3: detected capacity change from 0 to 256 [ 434.320953][T14012] syz.3.2825: attempt to access beyond end of device [ 434.320953][T14012] loop3: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 434.946010][ T5845] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 435.135675][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 435.138962][T14047] loop3: detected capacity change from 0 to 4096 [ 435.148534][ T5845] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 435.165584][ T5845] usb 7-1: config 0 has no interface number 0 [ 435.182059][ T5845] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 435.211421][ T5845] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 435.239101][T14050] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 435.252168][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.302246][ T5845] usb 7-1: config 0 descriptor?? [ 435.344222][ T5845] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 435.431616][ T27] audit: type=1800 audit(1792584075.943:366): pid=14047 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed(directio) comm="syz.3.2840" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 436.551424][T14083] loop3: detected capacity change from 0 to 4096 [ 436.567348][T14083] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 436.640648][ T5845] usb 7-1: USB disconnect, device number 2 [ 436.654747][T14083] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 436.676729][T14083] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 437.146754][T14102] 9pnet: p9_errstr2errno: server reported unknown error š¦#ò [ 437.146754][T14102] \,æÃ7Æ͈»Î^Õ [ 437.146754][T14102] d# [ 437.259271][T14107] loop1: detected capacity change from 0 to 128 [ 437.296515][T14109] __nla_validate_parse: 1 callbacks suppressed [ 437.296533][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 437.387005][T14107] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 437.428055][T14107] ext4 filesystem being mounted at /693/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 437.579073][T14119] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2872'. [ 438.046373][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 438.958397][T14158] erspan0: entered promiscuous mode [ 438.991671][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2888'. [ 439.243990][T14149] loop3: detected capacity change from 0 to 40427 [ 439.266332][T14149] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288) [ 439.298205][T14149] F2FS-fs (loop3): invalid crc value [ 439.315859][T14149] F2FS-fs (loop3): Found nat_bits in checkpoint [ 439.472490][T14149] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 439.561026][T14149] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0 [ 439.603847][T14174] f2fs_ckpt-7:3: attempt to access beyond end of device [ 439.603847][T14174] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 439.624001][T14174] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 439.660193][T14176] loop6: detected capacity change from 0 to 256 [ 439.681716][T14176] FAT-fs (loop6): Unrecognized mount option "non" or missing value [ 439.758104][T14176] device-mapper: ioctl: Invalid ioctl structure: uuid ¿pƒrèñ¹“>ÅwC¾"devtmpfs, name , dev f3 [ 440.030768][T14178] loop6: detected capacity change from 0 to 1024 [ 440.076786][T14178] EXT4-fs: Ignoring removed orlov option [ 440.120599][T14178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.156931][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.163901][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.456183][T13059] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.670804][T14200] loop3: detected capacity change from 0 to 512 [ 440.751533][T14200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.765876][T14200] ext4 filesystem being mounted at /722/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 441.012178][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.260116][T14217] loop1: detected capacity change from 0 to 4096 [ 441.626100][T14217] ntfs3: loop1: failed to convert "0080" to koi8-ru [ 441.689031][T14217] ntfs3: loop1: failed to convert name for inode 1e. [ 441.744927][T14217] ntfs3: loop1: ino=1f, mi_enum_attr [ 441.781756][T14217] ntfs3: loop1: failed to convert "256c" to koi8-ru [ 441.832199][T14222] ntfs3: loop1: failed to convert "256c" to koi8-ru [ 442.302026][T14214] loop6: detected capacity change from 0 to 32768 [ 442.433498][T14214] JBD2: Ignoring recovery information on journal [ 442.488569][T14214] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 442.561203][T14219] loop3: detected capacity change from 0 to 131072 [ 442.569583][T14219] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 442.576618][T14219] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 442.593714][T14219] F2FS-fs (loop3): invalid crc value [ 442.624531][T14230] overlayfs: failed to clone upperpath [ 442.635338][T14219] F2FS-fs (loop3): Found nat_bits in checkpoint [ 442.709371][T14219] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 442.716910][T14219] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 443.099947][T14245] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 443.126516][T13059] ocfs2: Unmounting device (7,6) on (node local) [ 444.865774][ T8] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 445.072141][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 445.118851][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 445.152547][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 445.195754][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.314700][T14270] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 445.368063][ T8] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 445.944245][ T5836] usb 7-1: USB disconnect, device number 3 [ 446.566008][ T27] audit: type=1400 audit(1792584087.083:367): apparmor="STATUS" operation="profile_replace" info="not policy admin" error=-13 profile="unconfined" pid=14309 comm="syz.1.2943" [ 447.562659][T14332] loop3: detected capacity change from 0 to 4096 [ 447.702534][T14335] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 447.940945][T14341] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 448.009285][T14332] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 448.091215][T14332] Remounting filesystem read-only [ 448.118412][T14346] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 448.200520][ T5786] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 448.235735][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 448.242501][ T5786] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 448.252897][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 448.262784][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 448.276535][ T5786] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 448.292207][ T5786] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 448.392778][T14355] loop6: detected capacity change from 0 to 512 [ 448.480510][T14355] EXT4-fs error (device loop6): ext4_quota_enable:7136: comm syz.6.2971: Bad quota inum: 5, type: 0 [ 448.508878][T14355] EXT4-fs (loop6): Remounting filesystem read-only [ 448.515426][T14355] EXT4-fs warning (device loop6): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-117, ino=5). Please run e2fsck to fix. [ 448.550815][T14355] EXT4-fs (loop6): mount failed [ 448.899062][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'. [ 448.912411][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2970'. [ 449.137474][T14382] netlink: 'syz.2.2981': attribute type 1 has an invalid length. [ 449.155687][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 449.163710][T14384] loop3: detected capacity change from 0 to 1024 [ 449.171069][T14382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.179377][T14382] IPv6: NLM_F_CREATE should be set when creating new route [ 449.359250][ T23] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 449.369640][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.395413][ T991] hfsplus: found bad thread record in catalog [ 449.417126][ T23] usb 7-1: config 0 descriptor?? [ 449.427869][ T23] cp210x 7-1:0.0: cp210x converter detected [ 449.590523][T14394] loop3: detected capacity change from 0 to 512 [ 449.728880][T14394] FAT-fs (loop3): error, invalid access to FAT (entry 0x00020000) [ 449.750319][T14394] FAT-fs (loop3): Filesystem has been set read-only [ 449.758336][T14394] FAT-fs (loop3): error, invalid access to FAT (entry 0x00020000) [ 449.848698][ T23] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 449.887204][ T23] usb 7-1: cp210x converter now attached to ttyUSB0 [ 450.075016][ T23] usb 7-1: USB disconnect, device number 4 [ 450.117722][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 450.139891][ T23] cp210x 7-1:0.0: device disconnected [ 451.103963][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2995'. [ 451.301812][T14434] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2996'. [ 451.392061][T14436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2997'. [ 451.791133][T14426] loop6: detected capacity change from 0 to 131072 [ 451.801438][T14426] F2FS-fs (loop6): Invalid log sectorsize (67108873) [ 451.808710][T14426] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 451.832527][T14426] F2FS-fs (loop6): invalid crc value [ 451.842902][T14426] F2FS-fs (loop6): Found nat_bits in checkpoint [ 451.913608][T14426] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 451.920853][T14426] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 451.980400][T14448] loop1: detected capacity change from 0 to 256 [ 452.216347][ T5843] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 452.428281][ T5843] usb 4-1: config 0 has an invalid interface number: 6 but max is 0 [ 452.441204][ T5843] usb 4-1: config 0 has no interface number 0 [ 452.447881][ T5843] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 452.464355][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.477341][ T5843] usb 4-1: config 0 descriptor?? [ 452.492807][ T5843] ums-realtek 4-1:0.6: USB Mass Storage device detected [ 452.696321][ T5843] usb 4-1: USB disconnect, device number 31 [ 453.857827][T14460] loop1: detected capacity change from 0 to 32768 [ 453.912835][T14460] JBD2: Ignoring recovery information on journal [ 454.051302][T14465] loop6: detected capacity change from 0 to 128 [ 454.072852][T14460] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 454.167328][T14465] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 454.228353][T14465] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.361631][T13059] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 454.641651][ T5788] ocfs2: Unmounting device (7,1) on (node local) [ 454.730518][T14479] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3012'. [ 454.854304][T14477] rxe_eth0 speed is unknown, defaulting to 1000 [ 455.332303][T14491] loop5: detected capacity change from 0 to 7 [ 455.354033][T14491] Dev loop5: unable to read RDB block 7 [ 455.360550][T14491] loop5: unable to read partition table [ 455.367039][T14491] loop5: partition table beyond EOD, truncated [ 455.383522][T14491] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 455.819407][T14503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.009345][T14509] loop6: detected capacity change from 0 to 128 [ 456.046601][T14509] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 456.868747][T14511] loop1: detected capacity change from 0 to 32768 [ 456.879070][T14511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3026 (14511) [ 456.991431][T14511] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 457.036942][T14511] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 457.085840][T14511] BTRFS info (device loop1): setting nodatasum [ 457.095330][T14511] BTRFS info (device loop1): force zlib compression, level 3 [ 457.126405][T14511] BTRFS info (device loop1): use no compression [ 457.134043][T14511] BTRFS info (device loop1): turning on flush-on-commit [ 457.183251][T14511] BTRFS info (device loop1): enabling auto defrag [ 457.193208][T14530] netlink: 'syz.6.3035': attribute type 11 has an invalid length. [ 457.212340][T14511] BTRFS info (device loop1): max_inline at 4096 [ 457.219703][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3035'. [ 457.253151][T14511] BTRFS info (device loop1): using free space tree [ 457.528487][T14511] BTRFS info (device loop1): enabling ssd optimizations [ 457.647348][ T5788] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 457.901858][T13984] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop1 scanned by udevd (13984) [ 458.445314][T14572] loop3: detected capacity change from 0 to 2048 [ 458.516059][T14572] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 459.088353][T14588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3054'. [ 459.151476][T14592] ip_tables: iptables: counters copy to user failed while replacing table [ 459.196917][T14588] netlink: 'syz.1.3054': attribute type 3 has an invalid length. [ 459.351986][T14596] loop1: detected capacity change from 0 to 512 [ 459.556716][ T5845] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 459.611618][ T27] audit: type=1800 audit(1792584100.133:368): pid=14604 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.1.3062" name="submit_queues" dev="configfs" ino=36127 res=0 errno=0 [ 459.755574][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 459.763511][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.774892][ T5845] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 459.784271][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.809560][ T5845] usb 7-1: config 0 descriptor?? [ 460.046063][ T5845] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 460.094790][T14614] [ 460.097350][T14614] ============================= [ 460.102216][T14614] WARNING: suspicious RCU usage [ 460.107194][T14614] syzkaller #0 Not tainted [ 460.111618][T14614] ----------------------------- [ 460.116553][T14614] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 460.125013][T14614] [ 460.125013][T14614] other info that might help us debug this: [ 460.125013][T14614] [ 460.136272][T14614] [ 460.136272][T14614] rcu_scheduler_active = 2, debug_locks = 1 [ 460.144393][T14614] 1 lock held by syz.2.3065/14614: [ 460.149950][T14614] #0: ffffffff8f1c8648 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2fc/0x1d70 [ 460.159395][T14614] [ 460.159395][T14614] stack backtrace: [ 460.165327][T14614] CPU: 0 PID: 14614 Comm: syz.2.3065 Not tainted syzkaller #0 [ 460.172837][T14614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 460.183031][T14614] Call Trace: [ 460.186335][T14614] [ 460.189282][T14614] dump_stack_lvl+0x18c/0x250 [ 460.194007][T14614] ? load_image+0x420/0x420 [ 460.198543][T14614] ? show_regs_print_info+0x20/0x20 [ 460.203767][T14614] ? load_image+0x420/0x420 [ 460.208346][T14614] ? print_tainted+0x14c/0x170 [ 460.213181][T14614] lockdep_rcu_suspicious+0x1e1/0x300 [ 460.218623][T14614] ieee80211_check_concurrent_iface+0x46b/0x950 [ 460.224935][T14614] ieee80211_open+0xc1/0x200 [ 460.229591][T14614] __dev_open+0x2cb/0x430 [ 460.233988][T14614] ? dev_open+0x190/0x190 [ 460.238386][T14614] __dev_change_flags+0x1e8/0x6a0 [ 460.243469][T14614] ? dev_get_flags+0x1c0/0x1c0 [ 460.248294][T14614] ? apparmor_capable+0x137/0x1a0 [ 460.253396][T14614] dev_change_flags+0x7c/0x1a0 [ 460.258270][T14614] devinet_ioctl+0x949/0x1d70 [ 460.263027][T14614] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 460.268206][T14614] ? _copy_from_user+0xa5/0xe0 [ 460.273035][T14614] ? get_user_ifreq+0x12b/0x180 [ 460.277947][T14614] inet_ioctl+0x42b/0x560 [ 460.282328][T14614] ? tomoyo_path_number_perm+0x217/0x5e0 [ 460.288014][T14614] ? inet_shutdown+0x370/0x370 [ 460.292819][T14614] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 460.298485][T14614] ? __kmem_cache_free+0xba/0x1f0 [ 460.303581][T14614] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 460.309107][T14614] sock_do_ioctl+0xfc/0x310 [ 460.313682][T14614] ? sock_show_fdinfo+0xb0/0xb0 [ 460.318609][T14614] sock_ioctl+0x5be/0x7e0 [ 460.323001][T14614] ? sock_poll+0x3e0/0x3e0 [ 460.327503][T14614] ? bpf_lsm_file_ioctl+0x9/0x10 [ 460.332508][T14614] ? security_file_ioctl+0x80/0xa0 [ 460.337678][T14614] ? sock_poll+0x3e0/0x3e0 [ 460.342155][T14614] __se_sys_ioctl+0xfd/0x170 [ 460.346814][T14614] do_syscall_64+0x55/0xb0 [ 460.351294][T14614] ? clear_bhb_loop+0x40/0x90 [ 460.356033][T14614] ? clear_bhb_loop+0x40/0x90 [ 460.360782][T14614] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.366742][T14614] RIP: 0033:0x7f2cb979f559 [ 460.371210][T14614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.390874][T14614] RSP: 002b:00007f2cba6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.399358][T14614] RAX: ffffffffffffffda RBX: 00007f2cb9a25fa0 RCX: 00007f2cb979f559 [ 460.407419][T14614] RDX: 0000200000000200 RSI: 0000000000008914 RDI: 0000000000000003 [ 460.415445][T14614] RBP: 00007f2cb9836b20 R08: 0000000000000000 R09: 0000000000000000 [ 460.423464][T14614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.431499][T14614] R13: 00007f2cb9a26038 R14: 00007f2cb9a25fa0 R15: 00007ffd554f96a8 [ 460.439567][T14614] [ 460.518423][ T5766] usb 7-1: USB disconnect, device number 5