last executing test programs: 8.252042898s ago: executing program 1 (id=1885): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 8.055523025s ago: executing program 1 (id=1888): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 7.833136483s ago: executing program 1 (id=1891): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}}, 0x9c) 7.695242435s ago: executing program 1 (id=1892): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) 7.506017741s ago: executing program 1 (id=1894): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x0, 0x0}) 4.866564802s ago: executing program 4 (id=1911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, "4ca5d64c44de37e1", "8fba7735d9949508d9e293d6e3a0b9126fd3f315cff5dba70094a4a00a30f36f", "34dec09e", "f9e6adb573fbfdd9"}, 0xd8) 4.710559125s ago: executing program 4 (id=1913): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) 4.582381626s ago: executing program 4 (id=1916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x1, 0x0, @pic={0x0, 0x3f}}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}}) 4.320225718s ago: executing program 4 (id=1917): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4044}, 0x0) 4.266647622s ago: executing program 2 (id=1918): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x708}], 0x1, 0x0, 0x0, 0x0) r1 = io_uring_setup(0x497c, &(0x7f00000001c0)) close_range(r1, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000001200)=""/4096, 0x1000) 4.198759418s ago: executing program 4 (id=1919): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000380)=ANY=[], 0xfeeb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x14a80, 0x12, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f00000001c0)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="4b000000020000"], 0x0) 3.750667135s ago: executing program 1 (id=1920): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x4, 0x1524, &(0x7f0000003200)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x72, @time={0x211}}) 3.261287996s ago: executing program 2 (id=1921): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 2.467797413s ago: executing program 0 (id=1923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000550001c0"]) 2.246863191s ago: executing program 0 (id=1924): syz_open_dev$usbmon(&(0x7f0000000100), 0x0, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000200)={0x0, 0x3, 0x0, 0x0, 0x18b}, &(0x7f00000003c0)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xd7e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x10, 0x0) 2.126561192s ago: executing program 0 (id=1925): r0 = io_uring_setup(0x257c, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000080)={0x0, 0x0, 0x3fe}, 0x1) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x2818c02, &(0x7f0000002580)=ANY=[], 0x1, 0xc3b, &(0x7f0000001940)="$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") mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200000, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000100)="b933ca8ab111ccc99ddbf6c0c89ec0125056c11593673db2961103754c7b90b447509ad687a5cf026bbb", 0x2a) 1.863144654s ago: executing program 0 (id=1926): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x10, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.701423827s ago: executing program 0 (id=1928): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendfile(r1, r0, 0x0, 0x578410eb) 1.603842365s ago: executing program 3 (id=1929): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x8000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.106612117s ago: executing program 4 (id=1930): r0 = io_uring_setup(0x30d3, &(0x7f0000001200)) io_setup(0x8, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) io_submit(r1, 0x2000012e, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r2, 0x0}]) close_range(r0, 0xffffffffffffffff, 0x0) 819.257881ms ago: executing program 2 (id=1931): syz_emit_ethernet(0x86, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbbbb"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r2}, &(0x7f0000000340)=0x8) 759.405516ms ago: executing program 0 (id=1932): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r2, 0x0, 0xfffd, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 681.403142ms ago: executing program 3 (id=1933): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 551.251814ms ago: executing program 2 (id=1934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000200)=@abs={0x1}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r2 = getpid() sendmmsg$unix(r1, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}}], 0x2, 0x0) 538.576305ms ago: executing program 3 (id=1935): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000040420f00b7030000001000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 388.026428ms ago: executing program 3 (id=1936): socketpair$unix(0x1, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r0, &(0x7f0000002f00)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 302.368945ms ago: executing program 2 (id=1937): setreuid(0xffffffffffffffff, 0xee00) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendmmsg$inet(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000c80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x92, 0x2}]}}}], 0x18}}], 0x2, 0x0) 249.525279ms ago: executing program 3 (id=1938): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x0, "1739a8ede61a0becbe10ae69ff96427e63de4b1b6613d9f0d3130f2141ad9c73", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000080)={"a7bef145bab20805d76e42ef0fd6d6c4a4e275eb4a1065e61c841e0f81db045f", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"37a55f2a0da8d08fa38543141176735721787aacf2b93ed2759f0960a3103d9f", r0}) 118.46882ms ago: executing program 3 (id=1939): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x1c, r1, 0x926fdb2c68a18847, 0x0, 0x0, {0x1d}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) 0s ago: executing program 2 (id=1940): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x100a}], 0x1, 0x0, 0x0, 0x407006}, 0x131) kernel console output (not intermixed with test programs): 949] netlink: 40 bytes leftover after parsing attributes in process `syz.3.611'. [ 152.091093][ T5958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'. [ 152.146189][ T5958] device bond_slave_0 entered promiscuous mode [ 152.153013][ T5958] device bond_slave_1 entered promiscuous mode [ 152.159311][ T5958] device syz_tun entered promiscuous mode [ 152.209842][ T5958] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 152.364685][ T5965] loop4: detected capacity change from 0 to 512 [ 152.410423][ T5969] loop3: detected capacity change from 0 to 64 [ 152.468179][ T5965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 152.535103][ T26] audit: type=1326 audit(1729290274.439:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5971 comm="syz.0.621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86e2876ff9 code=0x0 [ 152.621956][ T5965] EXT4-fs (loop4): 1 orphan inode deleted [ 152.627745][ T5965] EXT4-fs (loop4): 1 truncate cleaned up [ 152.694723][ T5965] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 152.766693][ T5965] EXT4-fs error (device loop4): ext4_search_dir:1549: inode #12: block 7: comm syz.4.618: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 152.812742][ T5965] EXT4-fs (loop4): Remounting filesystem read-only [ 153.244098][ T5954] loop1: detected capacity change from 0 to 32768 [ 153.436270][ T5991] loop0: detected capacity change from 0 to 512 [ 153.511123][ T5991] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.616828][ T5991] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 153.669773][ T5991] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 153.677891][ T5991] System zones: 0-2, 18-18, 34-34 [ 153.769337][ T5991] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.627: bad orphan inode 15 [ 153.858206][ T5991] ext4_test_bit(bit=14, block=18) = 1 [ 153.863931][ T5991] is_bad_inode(inode)=0 [ 153.867999][ T5987] loop4: detected capacity change from 0 to 32768 [ 153.912651][ T5991] NEXT_ORPHAN(inode)=2264924160 [ 153.917742][ T5991] max_ino=32 [ 153.928089][ T5991] i_nlink=0 [ 153.931604][ T5991] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.012057][ T5991] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.627: bg 0: block 80: padding at end of block bitmap is not set [ 154.016804][ T5987] XFS (loop4): Mounting V5 Filesystem [ 154.039924][ T5991] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 154.050635][ T5991] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none. [ 154.081371][ T6006] netlink: 'syz.2.631': attribute type 10 has an invalid length. [ 154.166179][ T5991] EXT4-fs (loop0): re-mounted. Opts: . Quota mode: none. [ 154.191727][ T6006] netlink: 40 bytes leftover after parsing attributes in process `syz.2.631'. [ 154.215132][ T5982] loop3: detected capacity change from 0 to 40427 [ 154.234283][ T5987] XFS (loop4): Ending clean mount [ 154.367393][ T5982] F2FS-fs (loop3): Found nat_bits in checkpoint [ 154.493081][ T5982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 154.554263][ T5533] XFS (loop4): Unmounting Filesystem [ 154.581374][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 154.697225][ T5524] attempt to access beyond end of device [ 154.697225][ T5524] loop3: rw=2049, want=45104, limit=40427 [ 155.251972][ T6030] loop4: detected capacity change from 0 to 256 [ 155.359257][ T6030] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 155.393923][ T6023] loop0: detected capacity change from 0 to 40427 [ 155.508290][ T6023] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 155.525604][ T6023] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 155.568727][ T6023] F2FS-fs (loop0): invalid crc value [ 155.624192][ T6023] F2FS-fs (loop0): Found nat_bits in checkpoint [ 155.733775][ T6023] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 155.750755][ T6023] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 156.221316][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'. [ 156.280540][ T6058] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 156.335043][ T6058] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 156.435009][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 156.529965][ T6061] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 156.603373][ T6070] loop3: detected capacity change from 0 to 128 [ 156.694025][ T6073] loop4: detected capacity change from 0 to 2048 [ 156.705045][ T6070] befs: (loop3): cannot parse mount options [ 156.752785][ T6075] loop1: detected capacity change from 0 to 64 [ 156.909402][ T6080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.225344][ T6088] netlink: 232 bytes leftover after parsing attributes in process `syz.0.662'. [ 157.238220][ T6088] netlink: 'syz.0.662': attribute type 9 has an invalid length. [ 157.388354][ T3924] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.458647][ T6094] loop0: detected capacity change from 0 to 1024 [ 157.518191][ T3926] Bluetooth: hci4: command 0x0405 tx timeout [ 157.524717][ T6096] netlink: 56 bytes leftover after parsing attributes in process `syz.4.667'. [ 157.572322][ T6094] EXT4-fs (loop0): Ignoring removed orlov option [ 157.598082][ T6094] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 157.678344][ T3924] usb 2-1: Using ep0 maxpacket: 16 [ 157.686928][ T6094] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 157.844508][ T3924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 157.857767][ T3924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 157.868539][ T3924] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 157.884244][ T3924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.897987][ T3924] usb 2-1: config 0 descriptor?? [ 157.939714][ T6114] loop4: detected capacity change from 0 to 64 [ 158.013164][ T6116] loop3: detected capacity change from 0 to 64 [ 158.055694][ T6114] Trying to free block not in datazone [ 158.062517][ T6114] Trying to free block not in datazone [ 158.118252][ T6114] Trying to free block not in datazone [ 158.336537][ T26] audit: type=1326 audit(1729290280.239:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa320905ff9 code=0x7ffc0000 [ 158.377917][ T6086] udc-core: couldn't find an available UDC or it's busy [ 158.390522][ T6086] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 158.425687][ T3924] hid-generic 0003:0158:0100.000F: unknown main item tag 0x1 [ 158.444756][ T26] audit: type=1326 audit(1729290280.269:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa320905ff9 code=0x7ffc0000 [ 158.477803][ T3924] hid-generic 0003:0158:0100.000F: unexpected long global item [ 158.486545][ T3924] hid-generic: probe of 0003:0158:0100.000F failed with error -22 [ 158.529328][ T26] audit: type=1326 audit(1729290280.279:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fa320905ff9 code=0x7ffc0000 [ 158.572777][ T26] audit: type=1326 audit(1729290280.279:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa320905ff9 code=0x7ffc0000 [ 158.618331][ T26] audit: type=1326 audit(1729290280.279:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6118 comm="syz.3.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa320905ff9 code=0x7ffc0000 [ 158.647124][ T4425] usb 2-1: USB disconnect, device number 6 [ 158.898324][ T3924] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.945578][ T6133] loop3: detected capacity change from 0 to 1024 [ 159.106402][ T154] hfsplus: b-tree write err: -5, ino 4 [ 159.163300][ T3924] usb 5-1: Using ep0 maxpacket: 8 [ 159.335292][ T3924] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.350434][ T3924] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.370613][ T3924] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.404060][ T3924] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.426189][ T3924] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.443265][ T3924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.620907][ T6137] loop3: detected capacity change from 0 to 32768 [ 159.678504][ T6137] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.683 (6137) [ 159.719484][ T6137] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 159.731611][ T3924] usb 5-1: GET_CAPABILITIES returned 0 [ 159.737358][ T3924] usbtmc 5-1:16.0: can't read capabilities [ 159.758194][ T6137] BTRFS info (device loop3): using free space tree [ 159.794244][ T6137] BTRFS info (device loop3): has skinny extents [ 159.953353][ T4424] usb 5-1: USB disconnect, device number 4 [ 160.014992][ T6137] BTRFS info (device loop3): enabling ssd optimizations [ 160.052683][ T26] audit: type=1800 audit(1729290281.959:35): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.683" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 160.671257][ T6174] loop1: detected capacity change from 0 to 64 [ 160.772979][ T6174] Trying to free block not in datazone [ 160.826925][ T6174] Trying to free block not in datazone [ 160.843105][ T6174] Trying to free block not in datazone [ 161.046958][ T6184] netlink: 'syz.1.691': attribute type 10 has an invalid length. [ 161.064592][ T6184] netlink: 40 bytes leftover after parsing attributes in process `syz.1.691'. [ 161.515678][ T6191] loop1: detected capacity change from 0 to 256 [ 161.570150][ T6180] loop4: detected capacity change from 0 to 32768 [ 161.585616][ T6177] loop3: detected capacity change from 0 to 32768 [ 161.596063][ T6191] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 161.692541][ T26] audit: type=1800 audit(1729290283.599:36): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.703" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 161.716256][ T26] audit: type=1800 audit(1729290283.619:37): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.703" name="bus" dev="loop4" ino=7 res=0 errno=0 [ 161.783996][ T6177] XFS (loop3): Mounting V5 Filesystem [ 162.048618][ T6177] XFS (loop3): Ending clean mount [ 162.079393][ T6177] XFS (loop3): Quotacheck needed: Please wait. [ 162.160091][ T6177] XFS (loop3): Quotacheck: Done. [ 162.362812][ T5524] XFS (loop3): Unmounting Filesystem [ 162.466032][ T6205] sctp: [Deprecated]: syz.2.696 (pid 6205) Use of int in max_burst socket option. [ 162.466032][ T6205] Use struct sctp_assoc_value instead [ 162.978537][ T6219] loop3: detected capacity change from 0 to 256 [ 163.019054][ T6224] loop1: detected capacity change from 0 to 256 [ 163.110090][ T6224] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 163.132149][ T6219] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 163.153504][ T6219] attempt to access beyond end of device [ 163.153504][ T6219] loop3: rw=524288, want=34359738491, limit=256 [ 163.165621][ T6219] attempt to access beyond end of device [ 163.165621][ T6219] loop3: rw=0, want=34359738491, limit=256 [ 163.179310][ T26] audit: type=1800 audit(1729290285.089:38): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.694" name="file0" dev="loop3" ino=1048631 res=0 errno=0 [ 163.182812][ T6219] [syz.3.694/6219] FS: loop3 File: /file0/file0 would truncate fibmap result [ 163.359334][ T6226] netlink: 'syz.2.707': attribute type 10 has an invalid length. [ 163.373275][ T6228] loop1: detected capacity change from 0 to 512 [ 163.430582][ T6230] loop3: detected capacity change from 0 to 64 [ 163.458132][ T6226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.707'. [ 163.527751][ T6228] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,,errors=continue. Quota mode: writeback. [ 163.548304][ T6228] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.594378][ T26] audit: type=1800 audit(1729290285.499:39): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.706" name="bus" dev="loop3" ino=21 res=0 errno=0 [ 163.951811][ T6222] loop4: detected capacity change from 0 to 32768 [ 164.071996][ T6222] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.702 (6222) [ 164.142567][ T6222] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 164.169798][ T6222] BTRFS info (device loop4): using free space tree [ 164.178451][ T6222] BTRFS info (device loop4): has skinny extents [ 164.510158][ T6222] BTRFS info (device loop4): enabling ssd optimizations [ 164.533241][ T6239] loop3: detected capacity change from 0 to 32768 [ 164.571211][ T26] audit: type=1800 audit(1729290286.479:40): pid=6222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.702" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 164.658895][ T26] audit: type=1800 audit(1729290286.569:41): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.711" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 164.766668][ T26] audit: type=1800 audit(1729290286.589:42): pid=6239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.711" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 164.812839][ T6272] sctp: [Deprecated]: syz.1.719 (pid 6272) Use of int in max_burst socket option. [ 164.812839][ T6272] Use struct sctp_assoc_value instead [ 165.462669][ T6276] loop3: detected capacity change from 0 to 64 [ 166.162633][ T6284] loop4: detected capacity change from 0 to 256 [ 166.204180][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 166.252597][ T6284] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 166.273190][ T6284] attempt to access beyond end of device [ 166.273190][ T6284] loop4: rw=524288, want=34359738491, limit=256 [ 166.285261][ T6284] attempt to access beyond end of device [ 166.285261][ T6284] loop4: rw=0, want=34359738491, limit=256 [ 166.297228][ T26] audit: type=1800 audit(1729290288.199:43): pid=6284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.721" name="file0" dev="loop4" ino=1048633 res=0 errno=0 [ 166.307749][ T6284] [syz.4.721/6284] FS: loop4 File: /file0/file0 would truncate fibmap result [ 166.362786][ T6289] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 166.398192][ T6289] netlink: 40 bytes leftover after parsing attributes in process `syz.3.725'. [ 166.868737][ T6308] loop1: detected capacity change from 0 to 64 [ 167.020583][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.737'. [ 167.434843][ T6293] loop4: detected capacity change from 0 to 40427 [ 167.477595][ T6293] F2FS-fs (loop4): invalid crc value [ 167.503996][ T6293] F2FS-fs (loop4): Found nat_bits in checkpoint [ 167.588693][ T6293] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 167.637858][ T26] audit: type=1800 audit(1729290289.539:44): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.726" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 167.670995][ T6293] attempt to access beyond end of device [ 167.670995][ T6293] loop4: rw=2049, want=45112, limit=40427 [ 167.688153][ T26] audit: type=1800 audit(1729290289.569:45): pid=6293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.726" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 167.691052][ T6293] attempt to access beyond end of device [ 167.691052][ T6293] loop4: rw=2049, want=77936, limit=40427 [ 167.763454][ T6320] attempt to access beyond end of device [ 167.763454][ T6320] loop4: rw=0, want=45112, limit=40427 [ 167.806731][ T6320] attempt to access beyond end of device [ 167.806731][ T6320] loop4: rw=0, want=45112, limit=40427 [ 167.849829][ T6320] attempt to access beyond end of device [ 167.849829][ T6320] loop4: rw=0, want=45112, limit=40427 [ 167.951337][ T5533] attempt to access beyond end of device [ 167.951337][ T5533] loop4: rw=2049, want=45120, limit=40427 [ 168.320958][ T6338] loop3: detected capacity change from 0 to 2048 [ 168.508426][ T6338] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.523740][ T6338] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.547678][ T26] audit: type=1800 audit(1729290290.449:46): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.749" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 168.557430][ T6338] fs-verity: sha512 using implementation "sha512-avx2" [ 168.769486][ T6334] chnl_net:caif_netlink_parms(): no params data found [ 169.053170][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.104426][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.148286][ T6334] device bridge_slave_0 entered promiscuous mode [ 169.186860][ T6364] netlink: 'syz.4.755': attribute type 10 has an invalid length. [ 169.226039][ T6358] loop3: detected capacity change from 0 to 8192 [ 169.254204][ T6364] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 169.285779][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.298195][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.344007][ T6334] device bridge_slave_1 entered promiscuous mode [ 169.372382][ T6365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.427266][ T6365] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 169.604134][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.642717][ T6367] loop1: detected capacity change from 0 to 8192 [ 169.656956][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.767589][ T6367] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 169.833434][ T6367] REISERFS (device loop1): using ordered data mode [ 169.878273][ T6367] reiserfs: using flush barriers [ 169.889489][ T6334] team0: Port device team_slave_0 added [ 169.937103][ T6334] team0: Port device team_slave_1 added [ 169.975482][ T6367] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 170.066990][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.088940][ T6367] REISERFS (device loop1): checking transaction log (loop1) [ 170.110584][ T6372] loop3: detected capacity change from 0 to 40427 [ 170.119970][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.150534][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.163568][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.193051][ T6372] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 170.203484][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.204259][ T6367] REISERFS (device loop1): Using r5 hash to sort names [ 170.238842][ T3924] Bluetooth: hci6: command 0x0409 tx timeout [ 170.252957][ T6372] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 170.285770][ T6372] F2FS-fs (loop3): invalid crc value [ 170.307768][ T6367] REISERFS (device loop1): using 3.5.x disk format [ 170.320062][ T6372] F2FS-fs (loop3): Found nat_bits in checkpoint [ 170.327871][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.452416][ T6372] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 170.462175][ T6372] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 170.542371][ T6334] device hsr_slave_0 entered promiscuous mode [ 170.550057][ T5524] attempt to access beyond end of device [ 170.550057][ T5524] loop3: rw=2049, want=45104, limit=40427 [ 170.564909][ T6334] device hsr_slave_1 entered promiscuous mode [ 170.620052][ T6334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.645150][ T6334] Cannot create hsr debugfs directory [ 171.000937][ T6334] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.092108][ T6334] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.191811][ T6334] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.330809][ T6400] loop4: detected capacity change from 0 to 8 [ 171.402315][ T6334] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.684022][ T6334] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.752546][ T6334] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.773513][ T6394] loop1: detected capacity change from 0 to 32768 [ 171.799499][ T6334] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.832990][ T6334] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.858935][ T6394] XFS: ikeep mount option is deprecated. [ 172.046603][ T6394] XFS (loop1): Mounting V5 Filesystem [ 172.246885][ T6420] loop4: detected capacity change from 0 to 32768 [ 172.265003][ T6394] XFS (loop1): Ending clean mount [ 172.301792][ T6420] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.774 (6420) [ 172.304282][ T6394] XFS (loop1): Quotacheck needed: Please wait. [ 172.318143][ T4469] Bluetooth: hci6: command 0x041b tx timeout [ 172.351443][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.380073][ T6420] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 172.389064][ T6420] BTRFS info (device loop4): use zlib compression, level 3 [ 172.396389][ T6420] BTRFS info (device loop4): using free space tree [ 172.402990][ T6420] BTRFS info (device loop4): has skinny extents [ 172.411458][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.490152][ T6404] loop3: detected capacity change from 0 to 32768 [ 172.497581][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.510372][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.529639][ T6394] XFS (loop1): Quotacheck: Done. [ 172.540820][ T6404] (syz.3.771,6404,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "heabtbeat=none" or missing value [ 172.625662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.634588][ T6404] (syz.3.771,6404,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 172.649429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.687976][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.695204][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.754952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.790527][ T4277] XFS (loop1): Unmounting Filesystem [ 172.817703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.841865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.857265][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.864508][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.883381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.888184][ T6420] BTRFS info (device loop4): enabling ssd optimizations [ 172.904631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.922417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.982647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.045399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.078169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.111969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.198858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.207536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.279633][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.294513][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.364683][ T6334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.718429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.726140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.786351][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.890268][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.910240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 174.062116][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.089373][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.127428][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.135713][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.174820][ T6334] device veth0_vlan entered promiscuous mode [ 174.257724][ T6334] device veth1_vlan entered promiscuous mode [ 174.335668][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.351656][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.373306][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.389311][ T3926] Bluetooth: hci6: command 0x040f tx timeout [ 174.407215][ T6448] loop3: detected capacity change from 0 to 32768 [ 174.411792][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.445653][ T6334] device veth0_macvtap entered promiscuous mode [ 174.480298][ T6334] device veth1_macvtap entered promiscuous mode [ 174.509141][ T6448] XFS: ikeep mount option is deprecated. [ 174.582195][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.624820][ T6448] XFS (loop3): Mounting V5 Filesystem [ 174.630961][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.641369][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.652109][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.663186][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.674325][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.685022][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.695706][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.705680][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.716771][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.729025][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.738277][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 174.774254][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 174.829767][ T6448] XFS (loop3): Ending clean mount [ 174.839156][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.862555][ T6448] XFS (loop3): Quotacheck needed: Please wait. [ 174.879194][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.925310][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.952398][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.969237][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.984399][ T6448] XFS (loop3): Quotacheck: Done. [ 175.002441][ T6448] XFS (loop3): User initiated shutdown received. [ 175.009317][ T6448] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 175.023302][ T6448] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 175.061527][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.083790][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.099603][ T6460] loop4: detected capacity change from 0 to 32768 [ 175.113000][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.123869][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.134931][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.145388][ T6334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.168731][ T6334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.190644][ T5524] XFS (loop3): Unmounting Filesystem [ 175.193093][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.208230][ T6478] netlink: 'syz.2.784': attribute type 10 has an invalid length. [ 175.220038][ T6460] XFS: noikeep mount option is deprecated. [ 175.299765][ T6478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.310321][ T6478] team0: Port device batadv0 added [ 175.322726][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.335742][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 175.353874][ T6334] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.365499][ T6334] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.380310][ T6334] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.381266][ T6460] XFS (loop4): Mounting V5 Filesystem [ 175.389289][ T6334] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.616757][ T3848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.656512][ T3848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.660730][ T6460] XFS (loop4): Ending clean mount [ 175.689716][ T6460] XFS (loop4): Quotacheck needed: Please wait. [ 175.729716][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.775427][ T3848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.790675][ T6460] XFS (loop4): Quotacheck: Done. [ 175.811510][ T3848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.828459][ T4424] Bluetooth: hci0: command 0x0406 tx timeout [ 175.829099][ T4473] Bluetooth: hci2: command 0x0406 tx timeout [ 175.851236][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.856716][ T5533] XFS (loop4): Unmounting Filesystem [ 176.050086][ T6497] loop1: detected capacity change from 0 to 64 [ 176.458296][ T4469] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.479390][ T3926] Bluetooth: hci6: command 0x0419 tx timeout [ 176.748236][ T4469] usb 4-1: Using ep0 maxpacket: 8 [ 176.888469][ T4469] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.896525][ T4469] usb 4-1: config 0 has no interface number 0 [ 176.914262][ T4469] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.946640][ T6523] loop4: detected capacity change from 0 to 16 [ 176.954457][ T4469] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.985469][ T4469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.025355][ T4469] usb 4-1: config 0 descriptor?? [ 177.051056][ T6523] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 177.100161][ T4469] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 177.328906][ T4469] usb 4-1: USB disconnect, device number 5 [ 177.337628][ T26] audit: type=1326 audit(1729290299.239:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6352eff9 code=0x7ffc0000 [ 177.363239][ T4469] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected [ 177.404536][ T6505] loop1: detected capacity change from 0 to 40427 [ 177.427027][ T26] audit: type=1326 audit(1729290299.279:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f6f6352eff9 code=0x7ffc0000 [ 177.488075][ T26] audit: type=1326 audit(1729290299.279:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6536 comm="syz.4.807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6352eff9 code=0x7ffc0000 [ 177.548056][ T6505] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 177.578725][ T6505] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 177.609799][ T6505] F2FS-fs (loop1): invalid crc value [ 177.679146][ T6505] F2FS-fs (loop1): Found nat_bits in checkpoint [ 177.914804][ T6505] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 177.927434][ T6505] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 178.596350][ T6577] ieee802154 phy0 wpan0: encryption failed: -22 [ 178.666290][ T6578] sp0: Synchronizing with TNC [ 178.967855][ T6583] loop4: detected capacity change from 0 to 1764 [ 179.510241][ T4473] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 179.755284][ T6613] loop3: detected capacity change from 0 to 64 [ 179.776174][ T4473] usb 1-1: Using ep0 maxpacket: 16 [ 179.884110][ T6613] nullb0: [CUMANA/ADFS] p1 [ 179.886334][ T6617] loop4: detected capacity change from 0 to 1024 [ 179.937830][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.962539][ T4473] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.987313][ T4473] usb 1-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 180.002531][ T4473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.017638][ T4473] usb 1-1: config 0 descriptor?? [ 180.108880][ T3660] hfsplus: b-tree write err: -5, ino 4 [ 180.456189][ T6633] loop4: detected capacity change from 0 to 256 [ 180.530712][ T4473] hid-alps 0003:044E:120C.0010: unknown main item tag 0x0 [ 180.555686][ T4473] hid-alps 0003:044E:120C.0010: item fetching failed at offset 2/5 [ 180.567031][ T6633] FAT-fs (loop4): Directory bread(block 64) failed [ 180.579772][ T4473] hid-alps 0003:044E:120C.0010: parse failed [ 180.586054][ T6633] FAT-fs (loop4): Directory bread(block 65) failed [ 180.603575][ T4473] hid-alps: probe of 0003:044E:120C.0010 failed with error -22 [ 180.614004][ T6633] FAT-fs (loop4): Directory bread(block 66) failed [ 180.628306][ T6633] FAT-fs (loop4): Directory bread(block 67) failed [ 180.647768][ T6633] FAT-fs (loop4): Directory bread(block 68) failed [ 180.659981][ T6633] FAT-fs (loop4): Directory bread(block 69) failed [ 180.666700][ T6633] FAT-fs (loop4): Directory bread(block 70) failed [ 180.680552][ T6633] FAT-fs (loop4): Directory bread(block 71) failed [ 180.687613][ T6633] FAT-fs (loop4): Directory bread(block 72) failed [ 180.701208][ T6633] FAT-fs (loop4): Directory bread(block 73) failed [ 180.753505][ T4469] usb 1-1: USB disconnect, device number 11 [ 180.758181][ T4409] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.128321][ T4409] usb 2-1: config index 0 descriptor too short (expected 44, got 36) [ 181.137066][ T6646] loop4: detected capacity change from 0 to 2048 [ 181.143627][ T4409] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 181.158076][ T4409] usb 2-1: config 0 has no interface number 0 [ 181.175593][ T4409] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.197111][ T4409] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.207370][ T4409] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 181.227051][ T6646] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.249733][ T4409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.278294][ T4409] usb 2-1: config 0 descriptor?? [ 181.484644][ T6650] loop3: detected capacity change from 0 to 1024 [ 181.677178][ T6650] hfsplus: b-tree write err: -5, ino 3 [ 181.766145][ T4409] uclogic 0003:5543:0781.0011: unknown main item tag 0x0 [ 181.791446][ T4409] uclogic 0003:5543:0781.0011: unknown main item tag 0x0 [ 181.813459][ T4409] uclogic 0003:5543:0781.0011: unknown main item tag 0x0 [ 181.826819][ T4409] uclogic 0003:5543:0781.0011: unknown main item tag 0x0 [ 181.847130][ T4409] uclogic 0003:5543:0781.0011: unknown main item tag 0x0 [ 181.876435][ T4409] uclogic 0003:5543:0781.0011: No inputs registered, leaving [ 181.888225][ T4469] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 181.896603][ T4409] uclogic 0003:5543:0781.0011: hidraw0: USB HID v0.00 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input16 [ 181.963812][ T4409] usb 2-1: USB disconnect, device number 7 [ 182.136146][ T6654] loop4: detected capacity change from 0 to 32768 [ 182.213125][ T6654] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.858 (6654) [ 182.259712][ T6654] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 182.278444][ T4469] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 182.287554][ T6654] BTRFS info (device loop4): use zlib compression, level 3 [ 182.303121][ T4469] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 182.314103][ T6654] BTRFS info (device loop4): using free space tree [ 182.330399][ T4469] usb 1-1: config 0 has no interface number 0 [ 182.336543][ T4469] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 182.352896][ T6654] BTRFS info (device loop4): has skinny extents [ 182.362108][ T4469] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 182.372852][ T4469] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 182.383532][ T4469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.395302][ T4469] usb 1-1: config 0 descriptor?? [ 182.483273][ T6654] BTRFS info (device loop4): enabling ssd optimizations [ 182.571694][ T26] audit: type=1800 audit(1729290304.479:50): pid=6654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.858" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 183.127656][ T4469] usb 1-1: USB disconnect, device number 12 [ 183.626947][ T6703] loop3: detected capacity change from 0 to 128 [ 183.714535][ T6707] bond0: (slave syz_tun): Error: Slave has XDP program loaded, please unload before enslaving [ 183.728154][ T4424] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 183.822140][ T26] audit: type=1326 audit(1729290305.729:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6708 comm="syz.4.874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f6352eff9 code=0x0 [ 183.928177][ T4415] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 183.960648][ T6712] loop3: detected capacity change from 0 to 256 [ 183.993816][ T4424] usb 2-1: Using ep0 maxpacket: 8 [ 184.126363][ T4424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.199756][ T4415] usb 1-1: Using ep0 maxpacket: 8 [ 184.220941][ T4424] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 184.244576][ T4424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 184.283602][ T4424] usb 2-1: SerialNumber: syz [ 184.293336][ T4424] usb 2-1: config 0 descriptor?? [ 184.318717][ T4415] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 184.560020][ T4424] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 184.567010][ T4424] usb 2-1: No streaming interface found for terminal 36. [ 184.575113][ T4415] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 184.585525][ T4415] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 184.596637][ T4415] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.613530][ T4415] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.623348][ T4415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.730652][ T6721] loop4: detected capacity change from 0 to 16 [ 184.761963][ T4416] usb 2-1: USB disconnect, device number 8 [ 184.785164][ T6721] erofs: (device loop4): mounted with root inode @ nid 36. [ 184.818247][ T6721] erofs: (device loop4): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 283 of nid 36 [ 184.888356][ T4415] usb 1-1: usb_control_msg returned -32 [ 184.893994][ T4415] usbtmc 1-1:16.0: can't read capabilities [ 185.179656][ T6737] ieee802154 phy0 wpan0: encryption failed: -22 [ 185.248206][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 185.258348][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 185.276626][ T6740] usbtmc 1-1:16.0: Unable to send data, error -71 [ 185.331035][ T6744] loop3: detected capacity change from 0 to 256 [ 185.403525][ T6746] tipc: Enabling of bearer rejected, failed to enable media [ 185.516345][ T6744] FAT-fs (loop3): Directory bread(block 64) failed [ 185.551109][ T6744] FAT-fs (loop3): Directory bread(block 65) failed [ 185.583912][ T6744] FAT-fs (loop3): Directory bread(block 66) failed [ 185.611059][ T6744] FAT-fs (loop3): Directory bread(block 67) failed [ 185.632324][ T6744] FAT-fs (loop3): Directory bread(block 68) failed [ 185.665245][ T6744] FAT-fs (loop3): Directory bread(block 69) failed [ 185.692478][ T6744] FAT-fs (loop3): Directory bread(block 70) failed [ 185.726815][ T6744] FAT-fs (loop3): Directory bread(block 71) failed [ 185.755335][ T6744] FAT-fs (loop3): Directory bread(block 72) failed [ 185.779561][ T6744] FAT-fs (loop3): Directory bread(block 73) failed [ 186.155344][ T6774] loop3: detected capacity change from 0 to 1764 [ 186.413760][ T6759] loop4: detected capacity change from 0 to 32768 [ 186.497786][ T6759] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.898 (6759) [ 186.579137][ T6759] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 186.628233][ T6759] BTRFS info (device loop4): force zlib compression, level 3 [ 186.639743][ T6759] BTRFS info (device loop4): using free space tree [ 186.669668][ T6759] BTRFS info (device loop4): has skinny extents [ 186.677836][ T4415] usb 1-1: USB disconnect, device number 13 [ 186.950838][ T6759] BTRFS info (device loop4): enabling ssd optimizations [ 187.168843][ T6826] loop3: detected capacity change from 0 to 2048 [ 187.231213][ T6826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.549056][ T6841] loop1: detected capacity change from 0 to 512 [ 187.644111][ T6845] loop3: detected capacity change from 0 to 1024 [ 187.811293][ T6841] EXT4-fs (loop1): 1 orphan inode deleted [ 187.825291][ T6850] Cannot find set identified by id 0 to match [ 187.830968][ T6845] EXT4-fs (loop3): Ignoring removed orlov option [ 187.838171][ T6841] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 187.843939][ T6845] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 187.869015][ T6841] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.908617][ T6845] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 188.462044][ T6859] team0: Port device team_slave_1 removed [ 188.623368][ T6869] bond0: (slave syz_tun): Error: Slave has XDP program loaded, please unload before enslaving [ 188.711728][ T6871] loop4: detected capacity change from 0 to 256 [ 188.942504][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.938'. [ 189.615703][ T6900] netlink: 28 bytes leftover after parsing attributes in process `syz.0.949'. [ 190.159267][ T6916] input: syz1 as /devices/virtual/input/input15 [ 190.472277][ T6928] loop1: detected capacity change from 0 to 256 [ 190.548996][ T6928] exfat: Unknown parameter 'er\ors' [ 190.988179][ T3926] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.268263][ T3926] usb 2-1: Using ep0 maxpacket: 8 [ 191.410187][ T3926] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 191.434859][ T6943] Cannot find set identified by id 0 to match [ 191.436851][ T3926] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 191.465223][ T3926] usb 2-1: config 135 has no interface number 0 [ 191.483918][ T3926] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.689857][ T6952] tipc: Started in network mode [ 191.694776][ T6952] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 191.706679][ T3926] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 191.728234][ T3926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.736433][ T3926] usb 2-1: Product: syz [ 191.742033][ T6952] tipc: Enabled bearer , priority 0 [ 191.756646][ T3926] usb 2-1: Manufacturer: syz [ 191.768205][ T3926] usb 2-1: SerialNumber: syz [ 191.834232][ T3926] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 191.852027][ T3926] usb 2-1: No valid video chain found. [ 191.995072][ T6961] loop4: detected capacity change from 0 to 64 [ 192.063911][ T4415] usb 2-1: USB disconnect, device number 9 [ 192.570515][ T6975] Cannot find set identified by id 0 to match [ 192.808632][ T6983] loop4: detected capacity change from 0 to 1024 [ 192.868942][ T3920] tipc: Node number set to 11578026 [ 192.989147][ T6985] loop1: detected capacity change from 0 to 4096 [ 193.239105][ T6985] Cannot load nls iso9859d [ 193.270364][ T6997] loop4: detected capacity change from 0 to 2048 [ 193.389324][ T6997] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.495409][ T6997] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 193.609938][ T7005] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 193.616429][ T6997] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 193.706780][ T6997] EXT4-fs (loop4): This should not happen!! Data will be lost [ 193.706780][ T6997] [ 193.709168][ T7005] EXT4-fs (loop4): This should not happen!! Data will be lost [ 193.709168][ T7005] [ 193.768155][ T7005] EXT4-fs (loop4): Total free blocks count 0 [ 193.788229][ T7005] EXT4-fs (loop4): Free/Dirty block details [ 193.794706][ T6997] EXT4-fs (loop4): Total free blocks count 0 [ 193.819032][ T7005] EXT4-fs (loop4): free_blocks=66060288 [ 193.838215][ T6997] EXT4-fs (loop4): Free/Dirty block details [ 193.866651][ T6985] loop1: detected capacity change from 0 to 32768 [ 193.878246][ T6997] EXT4-fs (loop4): free_blocks=66060288 [ 193.953992][ T6985] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.983 (6985) [ 194.059223][ T6985] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 194.125663][ T6985] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 194.140826][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.993'. [ 194.161935][ T6985] BTRFS info (device loop1): use zstd compression, level 3 [ 194.198498][ T7015] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 194.215289][ T6985] BTRFS info (device loop1): using free space tree [ 194.222815][ T6985] BTRFS info (device loop1): has skinny extents [ 194.231281][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231386][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.573634][ T6985] BTRFS info (device loop1): enabling ssd optimizations [ 194.590202][ T6985] BTRFS info (device loop1): checking UUID tree [ 196.297450][ T7060] loop4: detected capacity change from 0 to 32768 [ 196.439151][ T7060] XFS (loop4): Mounting V5 Filesystem [ 196.854019][ T7060] XFS (loop4): Ending clean mount [ 196.870005][ T7060] XFS (loop4): Quotacheck needed: Please wait. [ 196.983461][ T7060] XFS (loop4): Quotacheck: Done. [ 197.147433][ T5533] XFS (loop4): Unmounting Filesystem [ 197.158452][ T7071] loop1: detected capacity change from 0 to 32768 [ 197.449711][ T7071] XFS (loop1): Mounting V5 Filesystem [ 197.630824][ T7071] XFS (loop1): Ending clean mount [ 197.638561][ T7071] XFS (loop1): Quotacheck needed: Please wait. [ 197.774984][ T7071] XFS (loop1): Quotacheck: Done. [ 197.909878][ T4277] XFS (loop1): Unmounting Filesystem [ 198.474022][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 198.878100][ T3920] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 198.969679][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.990981][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.039077][ T7099] device bridge_slave_0 entered promiscuous mode [ 199.091866][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.106353][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.119379][ T7099] device bridge_slave_1 entered promiscuous mode [ 199.265339][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.288316][ T3920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 12592, setting to 64 [ 199.310971][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.320159][ T4465] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 199.528338][ T3920] usb 1-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=82.8f [ 199.548614][ T3920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.578100][ T4465] usb 2-1: Using ep0 maxpacket: 8 [ 199.588071][ T3920] usb 1-1: Product: syz [ 199.592575][ T3920] usb 1-1: Manufacturer: syz [ 199.613815][ T3920] usb 1-1: SerialNumber: syz [ 199.630391][ T3920] usb 1-1: config 0 descriptor?? [ 199.654608][ T7099] team0: Port device team_slave_0 added [ 199.662521][ T7108] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 199.683288][ T7099] team0: Port device team_slave_1 added [ 199.709498][ T3920] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 199.738477][ T3920] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 199.849207][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.856192][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.918392][ T4465] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 199.927489][ T4465] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.968104][ T4465] usb 2-1: Product: syz [ 199.972350][ T4465] usb 2-1: Manufacturer: syz [ 199.977198][ T4465] usb 2-1: SerialNumber: syz [ 199.997827][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.009595][ T4465] usb 2-1: config 0 descriptor?? [ 200.015825][ T23] usb 1-1: USB disconnect, device number 14 [ 200.033411][ T23] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 200.050499][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.060455][ T4465] gspca_main: sq930x-2.14.0 probing 2770:930c [ 200.079412][ T23] kobil_sct 1-1:0.0: device disconnected [ 200.089267][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.167206][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.318139][ T3920] Bluetooth: hci7: command 0x0409 tx timeout [ 200.338080][ T7099] device hsr_slave_0 entered promiscuous mode [ 200.356913][ T7099] device hsr_slave_1 entered promiscuous mode [ 200.373762][ T7099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.414852][ T7099] Cannot create hsr debugfs directory [ 200.901150][ T7099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.051657][ T7099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.177160][ T7099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.188242][ T4465] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 201.194274][ T4465] sq930x: probe of 2-1:0.0 failed with error -71 [ 201.232201][ T4465] usb 2-1: USB disconnect, device number 10 [ 201.246574][ T7144] loop4: detected capacity change from 0 to 32768 [ 201.302164][ T7099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.399554][ T7144] XFS (loop4): Mounting V5 Filesystem [ 201.556083][ T7144] XFS (loop4): Ending clean mount [ 201.673444][ T7099] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 201.702992][ T7099] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 201.714348][ T5533] XFS (loop4): Unmounting Filesystem [ 201.754983][ T7099] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 201.813272][ T7099] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.055362][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.106403][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.115099][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.162065][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.189070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.204423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.235441][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.242627][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.288623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.330551][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.348981][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.388680][ T23] Bluetooth: hci7: command 0x041b tx timeout [ 202.395446][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.402610][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.448825][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.472383][ T7161] loop1: detected capacity change from 0 to 32768 [ 202.493494][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.503908][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.524956][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.558331][ T7161] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1038 (7161) [ 202.569124][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.599928][ T7169] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 202.612355][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.653552][ T7169] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 202.678839][ T7161] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 202.704874][ T7099] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.709601][ T7161] BTRFS info (device loop1): using free space tree [ 202.743262][ T7099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.769733][ T7161] BTRFS info (device loop1): has skinny extents [ 202.790347][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.802828][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.830788][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.849650][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.878344][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 202.887619][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 202.902272][ T7170] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 202.939147][ T7173] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 202.975947][ T7169] netlink: 'syz.4.1041': attribute type 29 has an invalid length. [ 203.093114][ T7161] BTRFS info (device loop1): enabling ssd optimizations [ 203.315738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.324258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.362522][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.471211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.524663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.610382][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.643427][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.683627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.723870][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.771146][ T7099] device veth0_vlan entered promiscuous mode [ 203.805952][ T7099] device veth1_vlan entered promiscuous mode [ 203.911939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.928826][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.962261][ T7099] device veth0_macvtap entered promiscuous mode [ 203.981562][ T7099] device veth1_macvtap entered promiscuous mode [ 204.037931][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.059087][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.088210][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.109409][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.129656][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.158032][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.178212][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.198054][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.218079][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.238038][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.259001][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.279907][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.305469][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.344816][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 204.352649][ T4409] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 204.380487][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 204.408931][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 204.417833][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 204.464308][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.477292][ T3920] Bluetooth: hci7: command 0x040f tx timeout [ 204.538253][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.578119][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.598260][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.618074][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.638341][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.668058][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.696970][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.717359][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.748234][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.748422][ T4409] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.762002][ T7226] loop1: detected capacity change from 0 to 8192 [ 204.773781][ T7099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.784562][ T7099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.785728][ T4409] usb 5-1: config 0 has no interface number 0 [ 204.806563][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.817747][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.835795][ T4409] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 204.876910][ T3848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.906516][ T7226] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 204.916302][ T7226] REISERFS (device loop1): using ordered data mode [ 204.923146][ T7226] reiserfs: using flush barriers [ 204.933484][ T7226] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 204.951004][ T7226] REISERFS (device loop1): checking transaction log (loop1) [ 204.964665][ T4409] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.967142][ T7099] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.987171][ T7226] REISERFS (device loop1): Using tea hash to sort names [ 205.000548][ T7226] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 205.006068][ T4409] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.038103][ T7099] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.057498][ T7099] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.075040][ T7099] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.081912][ T4409] usb 5-1: config 0 descriptor?? [ 205.158360][ T4409] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 205.275208][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.286739][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.328724][ T7235] REISERFS warning (device loop1): jdm-20007 reiserfs_chown_xattrs: Couldn't chown all xattrs (-22) [ 205.328724][ T7235] [ 205.379840][ T1137] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.420601][ T23] usb 5-1: USB disconnect, device number 5 [ 205.439883][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.458670][ T4424] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 205.479641][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.480519][ T23] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 205.552200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.818180][ T4424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.839862][ T4424] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.875659][ T4424] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 205.938365][ T4424] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.002205][ T4424] usb 1-1: config 0 descriptor?? [ 206.479600][ T4424] holtek_kbd 0003:04D9:A055.0012: unknown main item tag 0x0 [ 206.502097][ T4424] holtek_kbd 0003:04D9:A055.0012: unknown main item tag 0x0 [ 206.513670][ T7264] overlayfs: missing 'lowerdir' [ 206.522535][ T4424] holtek_kbd 0003:04D9:A055.0012: item fetching failed at offset 2/5 [ 206.531172][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 206.548312][ T23] Bluetooth: hci7: command 0x0419 tx timeout [ 206.560134][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 206.565713][ T4424] holtek_kbd: probe of 0003:04D9:A055.0012 failed with error -22 [ 206.653754][ T7269] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 206.678325][ T7269] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 206.711361][ T4424] usb 1-1: USB disconnect, device number 15 [ 207.148389][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 207.391816][ T7298] overlayfs: missing 'lowerdir' [ 207.448040][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 207.588496][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.611056][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.691079][ T7310] loop4: detected capacity change from 0 to 1024 [ 207.711364][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.725336][ T7312] netlink: 'syz.0.1094': attribute type 39 has an invalid length. [ 207.750093][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.760821][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1094'. [ 207.762777][ T7314] loop1: detected capacity change from 0 to 1024 [ 207.770202][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.799944][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.807553][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.834184][ T7310] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 207.888457][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.932996][ T7314] EXT4-fs (loop1): Ignoring removed orlov option [ 207.938818][ T23] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.948083][ T7314] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 207.956219][ T23] usb 4-1: Manufacturer: syz [ 207.990897][ T23] usb 4-1: config 0 descriptor?? [ 208.006599][ T7314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec018, mo2=0002] [ 208.038241][ T7314] System zones: 0-1, 3-36 [ 208.054155][ T7314] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,orlov,nomblk_io_submit,block_validity,debug_want_extra_isize=0x0000000000000006,resuid=0x0000000000000000,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 208.389546][ T23] rc_core: IR keymap rc-hauppauge not found [ 208.395519][ T23] Registered IR keymap rc-empty [ 208.438550][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.488155][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.530465][ T23] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 208.566598][ T23] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 208.635930][ T7345] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1106'. [ 208.667784][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.718381][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.748450][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.753039][ T7350] loop1: detected capacity change from 0 to 512 [ 208.788605][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.828352][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.862400][ T7350] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1110: casefold flag without casefold feature [ 208.879078][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.920157][ T4424] kernel write not supported for file /vcs (pid: 4424 comm: kworker/0:19) [ 208.928193][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.943191][ T7350] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1110: couldn't read orphan inode 15 (err -117) [ 208.978180][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 208.986269][ T7350] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 208.997714][ T7329] loop4: detected capacity change from 0 to 32768 [ 209.008129][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.058267][ T23] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 209.110739][ T23] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 209.128108][ T23] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 209.160561][ T23] usb 4-1: USB disconnect, device number 6 [ 209.931249][ T7389] loop1: detected capacity change from 0 to 8 [ 210.037290][ T7391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.037325][ T7389] SQUASHFS error: lzo decompression failed, data probably corrupt [ 210.090044][ T7389] SQUASHFS error: Failed to read block 0x91: -5 [ 210.113641][ T7389] SQUASHFS error: Unable to read metadata cache entry [8f] [ 210.159611][ T7389] SQUASHFS error: Unable to read inode 0x11f [ 211.432275][ T7444] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.147549][ T7470] batman_adv: batadv0: Adding interface: gretap1 [ 212.170064][ T7470] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.199334][ T3618] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 212.207865][ T7470] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 212.639883][ T3618] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 212.673970][ T3618] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 212.728290][ T3618] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 212.748559][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.820194][ T7464] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.101290][ T3618] usb 2-1: USB disconnect, device number 11 [ 213.175760][ T7486] IPVS: Error connecting to the multicast addr [ 213.919526][ T7478] loop4: detected capacity change from 0 to 32768 [ 214.156633][ T7478] XFS (loop4): Mounting V5 Filesystem [ 214.364723][ T7478] XFS (loop4): Ending clean mount [ 214.431558][ T7478] XFS (loop4): Quotacheck needed: Please wait. [ 214.497603][ T7552] tun0: tun_chr_ioctl cmd 1074025675 [ 214.545306][ T7552] tun0: persist enabled [ 214.571449][ T7556] tun0: tun_chr_ioctl cmd 1074025675 [ 214.584855][ T7478] XFS (loop4): Quotacheck: Done. [ 214.586620][ T7556] tun0: persist enabled [ 214.629723][ T26] audit: type=1800 audit(1729290336.537:52): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1166" name="bus" dev="loop4" ino=9292 res=0 errno=0 [ 214.960651][ T5533] XFS (loop4): Unmounting Filesystem [ 215.390285][ T4465] kernel write not supported for file /uhid (pid: 4465 comm: kworker/1:15) [ 215.728852][ T7576] infiniband syz1: set down [ 215.747895][ T7576] infiniband syz1: added syzkaller0 [ 215.914791][ T7576] RDS/IB: syz1: added [ 216.002390][ T7576] smc: adding ib device syz1 with port count 1 [ 216.008861][ T7576] smc: ib device syz1 port 1 has pnetid [ 216.151703][ T144] smc: removing ib device syz1 [ 216.361581][ T4465] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 216.717638][ T7576] rdma_rxe: rxe_register_device failed with error -19 [ 216.735153][ T7576] rdma_rxe: failed to add syzkaller0 [ 216.781868][ T4465] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 216.808039][ T4465] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 216.852011][ T4465] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 216.880117][ T4465] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 216.931873][ T4465] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 217.101942][ T4465] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.122090][ T4465] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.130137][ T4465] usb 1-1: Product: syz [ 217.144734][ T4465] usb 1-1: Manufacturer: syz [ 217.212992][ T4465] cdc_wdm 1-1:1.0: skipping garbage [ 217.228631][ T4465] cdc_wdm 1-1:1.0: skipping garbage [ 217.251516][ T4465] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 217.273183][ T4465] cdc_wdm 1-1:1.0: Unknown control protocol [ 217.401722][ T7646] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 217.472243][ T7648] netlink: 376 bytes leftover after parsing attributes in process `syz.3.1240'. [ 217.508949][ T4465] usb 1-1: USB disconnect, device number 16 [ 217.639390][ T7633] loop4: detected capacity change from 0 to 32768 [ 217.746481][ T7633] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1233 (7633) [ 217.836832][ T7633] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 217.858014][ T7633] BTRFS info (device loop4): using free space tree [ 217.903180][ T7633] BTRFS info (device loop4): has skinny extents [ 217.937889][ T7664] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1246'. [ 218.145912][ T7633] BTRFS info (device loop4): enabling ssd optimizations [ 218.431134][ T7692] capability: warning: `syz.3.1250' uses 32-bit capabilities (legacy support in use) [ 219.051631][ T7720] process 'syz.3.1265' launched './file1' with NULL argv: empty string added [ 219.954388][ T7762] tipc: Started in network mode [ 219.955850][ T7766] xt_TPROXY: Can be used only with -p tcp or -p udp [ 219.975295][ T7770] loop4: detected capacity change from 0 to 128 [ 219.983675][ T7762] tipc: Node identity 7f000001, cluster identity 4711 [ 220.034965][ T7762] tipc: Enabled bearer , priority 10 [ 220.204209][ T7770] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.222733][ T7770] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 220.255297][ C0] vkms_vblank_simulate: vblank timer overrun [ 220.311970][ T7770] EXT4-fs error (device loop4): dx_make_map:1328: inode #2: block 18: comm syz.4.1287: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 220.474146][ T7770] EXT4-fs error (device loop4) in do_split:2095: Corrupt filesystem [ 220.697004][ T7797] netlink: 'syz.4.1294': attribute type 19 has an invalid length. [ 220.861559][ T7801] IPVS: Error connecting to the multicast addr [ 220.872614][ T7803] loop4: detected capacity change from 0 to 256 [ 221.026200][ T3029] udevd[3029]: worker [3561] terminated by signal 33 (Unknown signal 33) [ 221.055308][ T3029] udevd[3029]: worker [3561] failed while handling '/devices/virtual/block/loop4' [ 221.165016][ T4416] tipc: Node number set to 2130706433 [ 221.250223][ T7793] infiniband syz1: set down [ 221.261095][ T7779] loop1: detected capacity change from 0 to 32768 [ 221.284102][ T7793] infiniband syz1: added syzkaller0 [ 221.644773][ T7793] RDS/IB: syz1: added [ 221.654467][ T7793] smc: adding ib device syz1 with port count 1 [ 221.660717][ T7793] smc: ib device syz1 port 1 has pnetid [ 221.754150][ T144] smc: removing ib device syz1 [ 221.992709][ T7833] loop1: detected capacity change from 0 to 128 [ 222.105504][ T23] kernel write not supported for file [landlock-ruleset] (pid: 23 comm: kworker/1:1) [ 222.274867][ T7793] rdma_rxe: rxe_register_device failed with error -19 [ 222.324380][ T7793] rdma_rxe: failed to add syzkaller0 [ 222.473387][ T7813] loop4: detected capacity change from 0 to 32768 [ 222.493530][ T7858] loop1: detected capacity change from 0 to 64 [ 222.597999][ T7813] JBD2: Ignoring recovery information on journal [ 222.870480][ T7813] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 223.064547][ T5533] ocfs2: Unmounting device (7,4) on (node local) [ 223.888193][ T7894] input: syz0 as /devices/virtual/input/input17 [ 224.242326][ T7877] loop1: detected capacity change from 0 to 32768 [ 224.445217][ T7877] XFS (loop1): Mounting V5 Filesystem [ 224.652123][ T7877] XFS (loop1): Ending clean mount [ 224.669275][ T7877] XFS (loop1): Quotacheck needed: Please wait. [ 224.824257][ T7877] XFS (loop1): Quotacheck: Done. [ 224.883375][ T7896] loop4: detected capacity change from 0 to 32768 [ 224.985758][ T7927] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 225.013416][ T7896] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1339 (7896) [ 225.074065][ T7896] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 225.103250][ T7896] BTRFS info (device loop4): using free space tree [ 225.124420][ T7896] BTRFS info (device loop4): has skinny extents [ 225.202920][ T4277] XFS (loop1): Unmounting Filesystem [ 225.323019][ T7936] loop9: detected capacity change from 0 to 7 [ 225.337333][ T7936] Dev loop9: unable to read RDB block 7 [ 225.353285][ T7936] loop9: unable to read partition table [ 225.360774][ T7936] loop9: partition table beyond EOD, truncated [ 225.368453][ T7936] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.638429][ T7896] BTRFS info (device loop4): enabling ssd optimizations [ 227.377850][ T7979] loop4: detected capacity change from 0 to 256 [ 227.516855][ T7979] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 227.704382][ T7986] raw_sendmsg: syz.2.1365 forgot to set AF_INET. Fix it! [ 227.712769][ T7961] loop1: detected capacity change from 0 to 40427 [ 227.876481][ T7961] F2FS-fs (loop1): Found nat_bits in checkpoint [ 228.108607][ T7961] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 228.274871][ T4277] attempt to access beyond end of device [ 228.274871][ T4277] loop1: rw=2049, want=45112, limit=40427 [ 228.354069][ T4424] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 228.614219][ T4424] usb 4-1: Using ep0 maxpacket: 16 [ 228.717373][ T8013] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 228.734348][ T4424] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.797555][ T4424] usb 4-1: config 0 interface 0 has no altsetting 0 [ 228.814284][ T4424] usb 4-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 228.854171][ T4424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.914985][ T4424] usb 4-1: config 0 descriptor?? [ 229.414519][ T8007] loop4: detected capacity change from 0 to 32768 [ 229.529438][ T8007] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 229.635210][ T4424] usb 4-1: string descriptor 0 read error: -71 [ 229.657155][ T4424] uclogic 0003:5543:3031.0013: failed retrieving string descriptor #200: -71 [ 229.700304][ T4424] uclogic 0003:5543:3031.0013: failed retrieving pen parameters: -71 [ 229.744172][ T4424] uclogic 0003:5543:3031.0013: failed probing pen v2 parameters: -71 [ 229.775821][ T8007] (syz.4.1374,8007,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 229.786564][ T4401] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 229.795057][ T4424] uclogic 0003:5543:3031.0013: failed probing parameters: -71 [ 229.822047][ T4424] uclogic: probe of 0003:5543:3031.0013 failed with error -71 [ 229.872285][ T4424] usb 4-1: USB disconnect, device number 7 [ 229.987794][ T5533] ocfs2: Unmounting device (7,4) on (node local) [ 230.048533][ T4401] usb 2-1: Using ep0 maxpacket: 16 [ 230.174891][ T4401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.214099][ T4401] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.267658][ T4401] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.308126][ T4401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.364136][ T4401] usb 2-1: config 0 descriptor?? [ 230.550405][ T8041] loop4: detected capacity change from 0 to 4096 [ 230.641091][ T8041] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 230.802574][ T8048] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 231.304241][ T4401] usbhid 2-1:0.0: can't add hid device: -71 [ 231.314160][ T4401] usbhid: probe of 2-1:0.0 failed with error -71 [ 231.353513][ T4401] usb 2-1: USB disconnect, device number 12 [ 231.524091][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 231.787356][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 231.927532][ T8071] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 232.104394][ T23] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 232.156986][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.210041][ T23] usb 5-1: Product: syz [ 232.226468][ T23] usb 5-1: Manufacturer: syz [ 232.231110][ T23] usb 5-1: SerialNumber: syz [ 232.266720][ T23] usb 5-1: config 0 descriptor?? [ 232.284445][ T3920] Bluetooth: hci5: command 0x0406 tx timeout [ 232.338279][ T23] gspca_main: sq930x-2.14.0 probing 2770:930c [ 232.524057][ T4424] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 232.774126][ T4424] usb 2-1: Using ep0 maxpacket: 8 [ 232.894280][ T4424] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.914064][ T4424] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 232.954188][ T4424] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.994053][ T4424] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.047765][ T4424] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.071540][ T4424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.275645][ T6851] Trying to write to read-only block-device loop3 [ 233.374244][ T4424] usb 2-1: GET_CAPABILITIES returned 0 [ 233.384130][ T4424] usbtmc 2-1:16.0: can't read capabilities [ 233.474226][ T23] gspca_sq930x: reg_w 0105 0f00 failed -71 [ 233.607531][ T4424] usb 2-1: USB disconnect, device number 13 [ 233.714286][ T23] gspca_sq930x: Sensor ov9630 not yet treated [ 233.724222][ T23] sq930x: probe of 5-1:0.0 failed with error -22 [ 233.750631][ T23] usb 5-1: USB disconnect, device number 6 [ 234.215193][ T8114] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1420'. [ 234.584267][ T8123] loop1: detected capacity change from 0 to 512 [ 234.725745][ T8128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.781954][ T8123] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,grpjquota=,nodelalloc,,errors=continue. Quota mode: writeback. [ 234.845934][ T8123] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.354265][ T8145] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1432'. [ 235.541232][ T4465] kernel write not supported for file /media0 (pid: 4465 comm: kworker/1:15) [ 235.708820][ T8153] loop1: detected capacity change from 0 to 4096 [ 235.790341][ T8153] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 235.863803][ T8169] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 235.946180][ T26] audit: type=1800 audit(1729290357.840:53): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1437" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 236.051512][ T26] audit: type=1800 audit(1729290357.900:54): pid=8153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1437" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 236.144068][ T4465] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 236.235207][ T3920] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 236.404044][ T4424] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 236.526684][ T8163] loop4: detected capacity change from 0 to 32768 [ 236.534447][ T3920] usb 3-1: Using ep0 maxpacket: 16 [ 236.560708][ T4465] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 236.574798][ T4465] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.587772][ T4465] usb 1-1: config 0 descriptor?? [ 236.604653][ T8163] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.1441 (8163) [ 236.626397][ T4465] cp210x 1-1:0.0: cp210x converter detected [ 236.664232][ T3920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.688771][ T3920] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 236.721346][ T8163] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 236.754092][ T8163] BTRFS info (device loop4): using free space tree [ 236.780557][ T8163] BTRFS info (device loop4): has skinny extents [ 236.784553][ T4424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.824291][ T4424] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.853161][ T4424] usb 4-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 236.884275][ T3920] usb 3-1: New USB device found, idVendor=0a46, idProduct=1269, bcdDevice=1a.0a [ 236.894828][ T3920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.903295][ T3920] usb 3-1: Product: syz [ 236.908040][ T4424] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.914701][ T3920] usb 3-1: Manufacturer: syz [ 236.924265][ T3920] usb 3-1: SerialNumber: syz [ 236.932222][ T3920] usb 3-1: config 0 descriptor?? [ 236.958260][ T4424] usb 4-1: config 0 descriptor?? [ 236.976411][ T3920] dm9601: probe of 3-1:0.0 failed with error -22 [ 237.047895][ T8163] BTRFS info (device loop4): enabling ssd optimizations [ 237.056630][ T4465] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 237.119097][ T4465] usb 1-1: cp210x converter now attached to ttyUSB0 [ 237.264371][ T4401] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 237.293640][ T4465] usb 3-1: USB disconnect, device number 8 [ 237.419834][ T23] usb 1-1: USB disconnect, device number 17 [ 237.452197][ T4424] hid-generic 0003:18D1:5030.0014: unbalanced delimiter at end of report description [ 237.483408][ T4424] hid-generic: probe of 0003:18D1:5030.0014 failed with error -22 [ 237.487475][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 237.667114][ T4401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.694126][ T4401] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.720822][ T23] cp210x 1-1:0.0: device disconnected [ 237.737609][ T4401] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.764654][ T4401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.796539][ T4401] usb 2-1: config 0 descriptor?? [ 237.796568][ T4464] usb 4-1: USB disconnect, device number 8 [ 238.059905][ T8222] loop4: detected capacity change from 0 to 64 [ 238.276690][ T4401] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 238.306320][ T4401] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 238.327103][ T6851] Trying to write to read-only block-device loop3 [ 238.356436][ T4401] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 238.382684][ T8235] Non-string source [ 238.630024][ T4416] usb 2-1: USB disconnect, device number 14 [ 239.302305][ T4401] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 239.558974][ T4401] usb 1-1: Using ep0 maxpacket: 8 [ 239.658243][ T8264] loop1: detected capacity change from 0 to 32768 [ 239.684520][ T4401] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.701592][ T4401] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.735453][ T4401] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.768372][ T4401] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.807858][ T4401] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.830656][ T4401] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.092501][ T8268] loop4: detected capacity change from 0 to 1024 [ 240.114232][ T4401] usb 1-1: GET_CAPABILITIES returned 0 [ 240.119878][ T4401] usbtmc 1-1:16.0: can't read capabilities [ 240.320454][ T4401] usb 1-1: USB disconnect, device number 18 [ 241.592954][ T8264] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 241.648825][ T8264] (syz.1.1479,8264,1):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume. [ 241.660838][ T8264] (syz.1.1479,8264,1):ocfs2_group_add:503 ERROR: status = -22 [ 241.733271][ T4277] ocfs2: Unmounting device (7,1) on (node local) [ 241.977248][ T8283] loop4: detected capacity change from 0 to 32768 [ 242.147187][ T8316] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1503'. [ 242.202226][ T8316] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1503'. [ 242.216256][ T8316] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1503'. [ 242.230862][ T8322] device vlan2 entered promiscuous mode [ 242.298618][ T8283] JBD2: Ignoring recovery information on journal [ 242.557348][ T8331] bridge0: port 3(syz_tun) entered blocking state [ 242.589544][ T8331] bridge0: port 3(syz_tun) entered disabled state [ 242.607086][ T8331] device syz_tun entered promiscuous mode [ 242.613711][ T8331] bridge0: port 3(syz_tun) entered blocking state [ 242.621086][ T8331] bridge0: port 3(syz_tun) entered forwarding state [ 242.695683][ T8283] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 242.834105][ T26] audit: type=1800 audit(1729290364.720:55): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1487" name="file1" dev="loop4" ino=16946 res=0 errno=0 [ 242.933784][ T26] audit: type=1800 audit(1729290364.720:56): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1487" name="file1" dev="loop4" ino=16946 res=0 errno=0 [ 242.979342][ T5533] ocfs2: Unmounting device (7,4) on (node local) [ 243.067760][ T26] audit: type=1800 audit(1729290364.720:57): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1487" name="file1" dev="loop4" ino=16946 res=0 errno=0 [ 243.242265][ T3618] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 243.374245][ T4416] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 243.397643][ T6851] Trying to write to read-only block-device loop3 [ 243.649175][ T3618] usb 4-1: Using ep0 maxpacket: 8 [ 243.744325][ T4416] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 243.759446][ T4416] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 243.876089][ T3618] usb 4-1: config 251 has an invalid interface number: 29 but max is 0 [ 243.884656][ T3618] usb 4-1: config 251 has no interface number 0 [ 243.891041][ T3618] usb 4-1: config 251 interface 29 altsetting 71 has an invalid endpoint with address 0x0, skipping [ 243.914514][ T4416] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 243.915848][ T3618] usb 4-1: config 251 interface 29 altsetting 71 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 243.944427][ T4416] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 243.952528][ T4416] usb 5-1: Product: syz [ 243.963758][ T4416] usb 5-1: SerialNumber: syz [ 243.990893][ T3618] usb 4-1: config 251 interface 29 has no altsetting 0 [ 243.999048][ T3618] usb 4-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice= a.8d [ 244.031548][ T4416] usb 5-1: bad CDC descriptors [ 244.031831][ T3618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.044220][ T4416] usb 5-1: bad CDC descriptors [ 244.050313][ T4416] option 5-1:7.0: GSM modem (1-port) converter detected [ 244.231018][ T4401] usb 5-1: USB disconnect, device number 7 [ 244.249431][ T4401] option 5-1:7.0: device disconnected [ 244.334020][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 244.450577][ T3618] usb 4-1: string descriptor 0 read error: -71 [ 244.458325][ T3618] usb-storage 4-1:251.29: USB Mass Storage device detected [ 244.495850][ T3618] usb-storage 4-1:251.29: Quirks match for vid 054c pid 0069: 1 [ 244.948129][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 244.958049][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 245.089258][ T8357] loop1: detected capacity change from 0 to 512 [ 245.259184][ T23] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 245.334018][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.352648][ T23] usb 3-1: Product: syz [ 245.372648][ T23] usb 3-1: Manufacturer: syz [ 245.437595][ T23] usb 3-1: SerialNumber: syz [ 245.445279][ T23] usb 3-1: config 0 descriptor?? [ 245.484391][ T8348] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 245.513078][ T8348] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 245.821882][ T8348] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 245.845625][ T8348] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 246.792440][ T8378] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1526'. [ 246.799054][ T23] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 246.847954][ T8378] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1526'. [ 246.893697][ T23] usb 3-1: USB disconnect, device number 9 [ 247.335619][ T8386] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1530'. [ 247.378550][ T3618] usb 4-1: USB disconnect, device number 9 [ 247.445564][ T8385] input: syz1 as /devices/virtual/input/input18 [ 247.598993][ T8357] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 247.681784][ T8357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 247.715547][ T8357] EXT4-fs (loop1): orphan cleanup on readonly fs [ 247.824984][ T8357] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1518: bg 0: block 361: padding at end of block bitmap is not set [ 247.933827][ T8357] EXT4-fs (loop1): Remounting filesystem read-only [ 247.960222][ T8357] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 247.991622][ T8357] EXT4-fs (loop1): Remounting filesystem read-only [ 248.026320][ T8357] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.1518: attempt to clear invalid blocks 33619980 len 1 [ 248.085287][ T8357] EXT4-fs (loop1): Remounting filesystem read-only [ 248.175700][ T8357] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1518: invalid indirect mapped block 1811939328 (level 0) [ 248.219421][ T8402] netlink: 'syz.2.1537': attribute type 5 has an invalid length. [ 248.235060][ T3613] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 248.263060][ T8357] EXT4-fs (loop1): Remounting filesystem read-only [ 248.300983][ T8357] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1518: invalid indirect mapped block 2185560079 (level 1) [ 248.387509][ T8357] EXT4-fs (loop1): Remounting filesystem read-only [ 248.407121][ T8357] EXT4-fs (loop1): 1 truncate cleaned up [ 248.434181][ T8357] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 248.440618][ T3618] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 248.504500][ T6851] Trying to write to read-only block-device loop3 [ 248.609161][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.630393][ T3613] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.661767][ T3613] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 248.689030][ T3613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.793128][ T3613] usb 1-1: config 0 descriptor?? [ 248.795881][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1540'. [ 249.110051][ T3618] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 249.121828][ T3618] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 249.246178][ T7] kernel write not supported for file bpf-prog (pid: 7 comm: kworker/0:0) [ 249.285524][ T3613] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 249.324252][ T3613] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0016/input/input19 [ 249.447795][ T4464] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 249.499371][ T3618] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 249.522434][ T3618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.530654][ T3618] usb 4-1: Product: syz [ 249.534886][ T3618] usb 4-1: Manufacturer: syz [ 249.539514][ T3618] usb 4-1: SerialNumber: syz [ 249.576077][ T3618] usb 4-1: config 0 descriptor?? [ 249.595732][ T8396] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 249.603199][ T3613] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 249.610281][ T8396] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 249.660376][ T3613] usb 1-1: USB disconnect, device number 19 [ 249.831083][ T4464] usb 2-1: Using ep0 maxpacket: 8 [ 249.870350][ T8396] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 249.906297][ T8396] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.068766][ T4464] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 250.370918][ T4464] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 250.390564][ T4464] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 250.399197][ T4464] usb 2-1: Product: syz [ 250.403394][ T4464] usb 2-1: Manufacturer: syz [ 250.464020][ T4464] usb 2-1: SerialNumber: syz [ 250.801783][ T4464] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 250.810321][ T4464] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 250.818627][ T4464] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 250.848553][ T4464] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 251.018452][ T4464] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 251.066970][ T4464] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 251.101841][ T4464] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 251.200432][ T3618] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 251.286764][ T3618] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 251.422049][ T4464] usb 2-1: USB disconnect, device number 15 [ 251.471666][ T4464] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 251.481206][ T3618] usb 4-1: USB disconnect, device number 10 [ 251.498553][ T3618] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 251.549705][ T4464] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 251.559859][ T4464] visor 2-1:1.0: device disconnected [ 251.614248][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 251.994449][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.034047][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.094134][ T7] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 252.116484][ T8454] netlink: 'syz.1.1560': attribute type 12 has an invalid length. [ 252.124406][ T8454] netlink: 'syz.1.1560': attribute type 29 has an invalid length. [ 252.132226][ T8454] netlink: 'syz.1.1560': attribute type 2 has an invalid length. [ 252.144026][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.183823][ T8454] netlink: 'syz.1.1560': attribute type 2 has an invalid length. [ 252.191904][ T8454] netlink: 'syz.1.1560': attribute type 1 has an invalid length. [ 252.206463][ T7] usb 5-1: config 0 descriptor?? [ 252.215499][ T8454] netlink: 'syz.1.1560': attribute type 37 has an invalid length. [ 252.223422][ T8454] netlink: 'syz.1.1560': attribute type 2 has an invalid length. [ 252.248252][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.306451][ T8454] netlink: 59 bytes leftover after parsing attributes in process `syz.1.1560'. [ 252.464354][ T4401] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 252.684822][ T7] hid (null): global environment stack underflow [ 252.711949][ T7] uclogic 0003:5543:0522.0017: global environment stack underflow [ 252.742063][ T7] uclogic 0003:5543:0522.0017: item 0 1 1 11 parsing failed [ 252.754197][ T4401] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 252.782928][ T7] uclogic 0003:5543:0522.0017: parse failed [ 252.802930][ T7] uclogic: probe of 0003:5543:0522.0017 failed with error -22 [ 252.917727][ T4416] usb 5-1: USB disconnect, device number 8 [ 252.984090][ T7] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 253.514214][ T6851] Trying to write to read-only block-device loop3 [ 253.521249][ T7] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 253.546256][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.580698][ T7] usb 2-1: Product: syz [ 253.594348][ T8468] netlink: 'syz.4.1566': attribute type 2 has an invalid length. [ 253.605875][ T7] usb 2-1: Manufacturer: syz [ 253.627398][ T7] usb 2-1: SerialNumber: syz [ 253.634662][ T4401] usb 3-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 253.664432][ T4401] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.681274][ T7] usb 2-1: config 0 descriptor?? [ 253.724706][ T4401] usb 3-1: Product: syz [ 253.728922][ T4401] usb 3-1: Manufacturer: syz [ 253.733536][ T4401] usb 3-1: SerialNumber: syz [ 253.813610][ T4401] usb 3-1: config 0 descriptor?? [ 253.876831][ T4401] go7007-loader 3-1:0.0: can't handle multiple config [ 253.895389][ T4401] go7007-loader 3-1:0.0: probe failed [ 254.016782][ T4401] usb 2-1: USB disconnect, device number 16 [ 254.186270][ T4411] usb 3-1: USB disconnect, device number 10 [ 254.633757][ T8492] loop4: detected capacity change from 0 to 128 [ 254.664569][ T8489] netlink: 'syz.3.1575': attribute type 29 has an invalid length. [ 254.692866][ T8489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1575'. [ 254.717237][ T8489] netlink: 'syz.3.1575': attribute type 29 has an invalid length. [ 254.751652][ T8489] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1575'. [ 254.795097][ T8494] netlink: 'syz.3.1575': attribute type 29 has an invalid length. [ 254.832096][ T8494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1575'. [ 255.019067][ T8502] netlink: 'syz.1.1582': attribute type 2 has an invalid length. [ 255.677807][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.684176][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.750790][ T8529] overlayfs: failed to clone lowerpath [ 255.771731][ T26] audit: type=1326 audit(1729290377.670:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8524 comm="syz.1.1594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63dac5fff9 code=0x0 [ 255.943940][ T8536] loop1: detected capacity change from 0 to 64 [ 256.121197][ T8540] syz.3.1600[8540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.121310][ T8540] syz.3.1600[8540] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.341728][ T8545] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 256.398490][ T8545] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 257.297497][ T8550] attempt to access beyond end of device [ 257.297497][ T8550] loop4: rw=2049, want=921, limit=128 [ 257.429076][ T144] attempt to access beyond end of device [ 257.429076][ T144] loop4: rw=1, want=1041, limit=128 [ 257.632443][ T8552] loop4: detected capacity change from 0 to 2048 [ 257.789417][ T3920] Bluetooth: hci3: command 0x0406 tx timeout [ 257.795567][ T3920] Bluetooth: hci4: command 0x0406 tx timeout [ 258.554538][ T6851] Trying to write to read-only block-device loop3 [ 259.934824][ T8552] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 259.947932][ T8552] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.458439][ T8574] syz.0.1615 sent an empty control message without MSG_MORE. [ 263.241155][ T8605] loop4: detected capacity change from 0 to 32768 [ 263.554074][ T4411] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 263.594242][ T6851] Trying to write to read-only block-device loop3 [ 263.914781][ T4411] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 263.936871][ T4411] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.972376][ T4411] usb 1-1: config 0 descriptor?? [ 264.371413][ T8627] loop1: detected capacity change from 0 to 40427 [ 264.460907][ T8627] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 264.469142][ T4411] gs_usb 1-1:0.0: Couldn't get device config: (err=-71) [ 264.486677][ T4411] gs_usb: probe of 1-1:0.0 failed with error -71 [ 264.500150][ T8627] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 264.515237][ T4411] usb 1-1: USB disconnect, device number 20 [ 264.705034][ T8627] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.884330][ T8627] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 264.908296][ T8627] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 265.803099][ T8658] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'gid' [ 265.803099][ T8658] [ 266.369862][ T8665] loop1: detected capacity change from 0 to 16 [ 266.486895][ T8665] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 266.646826][ T8673] loop4: detected capacity change from 0 to 512 [ 266.809601][ T8673] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,,errors=continue. Quota mode: writeback. [ 266.875293][ T8673] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.013575][ T8673] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 267.067502][ T8673] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 267.098417][ T8673] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.1651: Failed to acquire dquot type 0 [ 268.294168][ T7] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 268.472152][ T8706] loop4: detected capacity change from 0 to 40427 [ 268.637136][ T6851] Trying to write to read-only block-device loop3 [ 268.685090][ T7] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 268.713780][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 268.753501][ T7] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 268.783818][ T7] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 65339, setting to 64 [ 268.816785][ T7] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 268.853576][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 269.044267][ T7] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 269.072898][ T7] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 269.101976][ T7] usb 4-1: Product: syz [ 269.107587][ T7] usb 4-1: Manufacturer: syz [ 269.122483][ T7] usb 4-1: SerialNumber: syz [ 269.135153][ T7] usb 4-1: config 0 descriptor?? [ 269.174531][ T8719] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 269.195833][ T7] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 269.224859][ T7] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 269.623859][ T7] usb 4-1: USB disconnect, device number 11 [ 269.651813][ T7] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 271.748910][ T8741] loop1: detected capacity change from 0 to 1024 [ 272.029827][ T8735] loop4: detected capacity change from 0 to 40427 [ 273.044367][ T8762] device syzkaller1 entered promiscuous mode [ 273.687642][ T6851] Trying to write to read-only block-device loop3 [ 274.641681][ T8787] loop1: detected capacity change from 0 to 256 [ 276.296218][ T8735] F2FS-fs (loop4): invalid crc value [ 276.302919][ T8735] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 276.312149][ T8820] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 278.279286][ T4401] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 278.603652][ T4401] usb 4-1: Using ep0 maxpacket: 8 [ 278.722633][ T6851] Trying to write to read-only block-device loop3 [ 278.774046][ T4401] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 278.800429][ T4401] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 278.857377][ T4401] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 278.900764][ T4401] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.969563][ T4401] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 278.999119][ T4401] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.377336][ T4401] usb 4-1: GET_CAPABILITIES returned 0 [ 279.383204][ T4401] usbtmc 4-1:16.0: can't read capabilities [ 279.534011][ T3613] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 279.669239][ T4401] usb 4-1: USB disconnect, device number 12 [ 279.861948][ T3613] usb 3-1: Using ep0 maxpacket: 16 [ 279.906670][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1734'. [ 280.063333][ T3613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.097259][ T3613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.154021][ T3613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 280.209704][ T3613] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 280.297806][ T3613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.345061][ T3613] usb 3-1: config 0 descriptor?? [ 280.554714][ T3618] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 280.957889][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 280.962440][ T3618] usb 1-1: Using ep0 maxpacket: 8 [ 280.985568][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.026445][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.065935][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.073216][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.132668][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.163329][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.194016][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.218197][ T3618] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 281.232520][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.232573][ T3618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.262232][ T3613] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0 [ 281.293559][ T3613] microsoft 0003:045E:07DA.0018: No inputs registered, leaving [ 281.317920][ T3618] usb 1-1: config 0 descriptor?? [ 281.345857][ T3613] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 281.407384][ T3613] microsoft 0003:045E:07DA.0018: no inputs found [ 281.413779][ T3613] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway [ 281.567049][ T3613] usb 3-1: USB disconnect, device number 11 [ 282.611297][ T3618] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 282.634099][ T3618] asix: probe of 1-1:0.0 failed with error -71 [ 282.634519][ T8887] loop4: detected capacity change from 0 to 64 [ 282.703262][ T3618] usb 1-1: USB disconnect, device number 21 [ 283.814109][ T6851] Trying to write to read-only block-device loop3 [ 283.936189][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 284.447551][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.468055][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 284.528626][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.562039][ T7] usb 1-1: config 0 descriptor?? [ 284.900008][ T7] usb 1-1: USB disconnect, device number 22 [ 285.591576][ T8918] loop4: detected capacity change from 0 to 40427 [ 286.197026][ T8936] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1767'. [ 286.402806][ T3618] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 287.183083][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 287.196299][ T3618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 287.226043][ T3618] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 287.239177][ T8918] F2FS-fs (loop4): invalid crc value [ 287.245523][ T8918] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 287.291183][ T3618] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 287.316205][ T3618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.409840][ T3618] usb 2-1: config 0 descriptor?? [ 287.441127][ T8932] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 287.946588][ T3618] plantronics 0003:047F:FFFF.0019: unknown main item tag 0xd [ 287.955999][ T3618] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 288.007166][ T3618] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 288.184143][ T3920] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 288.287434][ T7] usb 2-1: USB disconnect, device number 17 [ 288.621627][ T3920] usb 1-1: Using ep0 maxpacket: 8 [ 288.837936][ T3920] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 288.864450][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'. [ 288.924247][ T6851] Trying to write to read-only block-device loop3 [ 289.234082][ T3920] usb 1-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 289.243267][ T3920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.248145][ T8961] loop1: detected capacity change from 0 to 2048 [ 289.259947][ T3920] usb 1-1: Product: syz [ 289.288825][ T3920] usb 1-1: Manufacturer: syz [ 289.293493][ T3920] usb 1-1: SerialNumber: syz [ 289.306706][ T3920] usb 1-1: config 0 descriptor?? [ 289.370984][ T3920] usb 1-1: bad CDC descriptors [ 289.377106][ T3920] usb 1-1: bad CDC descriptors [ 289.691593][ T3618] usb 1-1: USB disconnect, device number 23 [ 291.362704][ T8961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 292.809886][ T8986] loop4: detected capacity change from 0 to 32768 [ 293.619790][ T4401] Bluetooth: hci6: command 0x0406 tx timeout [ 293.951677][ T9015] loop1: detected capacity change from 0 to 64 [ 294.025735][ T6851] Trying to write to read-only block-device loop3 [ 295.822223][ T9029] hsr0: VLAN not yet supported [ 296.487986][ T4465] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 296.802999][ T9053] Illegal XDP return value 4294967274, expect packet loss! [ 297.006693][ T4465] usb 4-1: Using ep0 maxpacket: 16 [ 297.224210][ T4465] usb 4-1: config 0 has an invalid descriptor of length 110, skipping remainder of the config [ 297.242490][ T4465] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x1D, skipping [ 297.326057][ T4465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 118, changing to 10 [ 297.347428][ T4465] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 25956, setting to 1024 [ 297.403991][ T4465] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.657647][ T4465] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 297.681866][ T4465] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 297.729148][ T4465] usb 4-1: Manufacturer: syz [ 297.761997][ T4465] usb 4-1: config 0 descriptor?? [ 297.834095][ T9034] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 297.880878][ T4465] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 298.264084][ T4465] usb 4-1: USB disconnect, device number 13 [ 298.867477][ T9083] netlink: 'syz.0.1836': attribute type 11 has an invalid length. [ 299.055746][ T6851] Trying to write to read-only block-device loop3 [ 301.144265][ T9091] loop1: detected capacity change from 0 to 40427 [ 301.525187][ T9091] F2FS-fs (loop1): Found nat_bits in checkpoint [ 301.818220][ T9091] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 302.127216][ T4277] attempt to access beyond end of device [ 302.127216][ T4277] loop1: rw=2049, want=45104, limit=40427 [ 302.543455][ T3619] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 303.025527][ T3619] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 303.034595][ T3619] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.194045][ T3619] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 303.220059][ T3619] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 303.240356][ T3619] usb 5-1: Manufacturer: syz [ 303.272747][ T3619] usb 5-1: config 0 descriptor?? [ 303.359347][ T3619] igorplugusb 5-1:0.0: incorrect number of endpoints [ 303.644027][ T3619] usb 5-1: USB disconnect, device number 9 [ 304.103372][ T6851] Trying to write to read-only block-device loop3 [ 304.347912][ T9138] loop4: detected capacity change from 0 to 256 [ 304.489188][ T9109] block nbd3: NBD_DISCONNECT [ 304.509939][ T9109] block nbd3: Send disconnect failed -22 [ 304.565861][ T9109] block nbd3: Disconnected due to user request. [ 304.572949][ T9109] block nbd3: shutting down sockets [ 306.740358][ T9138] FAT-fs (loop4): Unrecognized mount option "utoõf8=1" or missing value [ 307.879618][ T9205] xt_recent: hitcount (16385) is larger than allowed maximum (255) [ 308.021783][ T9208] sctp: [Deprecated]: syz.3.1890 (pid 9208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.021783][ T9208] Use struct sctp_sack_info instead [ 308.488245][ T9218] loop1: detected capacity change from 0 to 2048 [ 308.764494][ T3580] Bluetooth: hci8: sending frame failed (-49) [ 309.123750][ T6851] Trying to write to read-only block-device loop3 [ 309.659168][ T9239] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 310.801387][ T4401] Bluetooth: hci8: command 0xfc11 tx timeout [ 310.830350][ T3575] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 311.837855][ T9276] loop4: detected capacity change from 0 to 1024 [ 313.169680][ T3619] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 313.648164][ T3619] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.689867][ T3619] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.841518][ T3619] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 313.860848][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.912435][ T3619] usb 3-1: SerialNumber: syz [ 314.187998][ T6851] Trying to write to read-only block-device loop3 [ 314.253093][ T3619] usb 3-1: 0:2 : does not exist [ 314.314977][ T3619] usb 3-1: USB disconnect, device number 12 [ 315.844465][ T27] INFO: task syz.0.665:6094 blocked for more than 143 seconds. [ 315.856822][ T27] Not tainted 5.15.168-syzkaller #0 [ 315.892490][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 315.953980][ T27] task:syz.0.665 state:D stack:24024 pid: 6094 ppid: 3569 flags:0x00004004 [ 315.963272][ T27] Call Trace: [ 315.991570][ T27] [ 315.994615][ T27] __schedule+0x12c4/0x45b0 [ 315.999182][ T27] ? release_firmware_map_entry+0x190/0x190 [ 316.061760][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 316.067355][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 316.072954][ T27] schedule+0x11b/0x1f0 [ 316.102687][ T27] schedule_preempt_disabled+0xf/0x20 [ 316.108235][ T27] __mutex_lock_common+0xe34/0x25a0 [ 316.113525][ T27] ? exfat_sync_fs+0x67/0x100 [ 316.131925][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 316.154580][ T27] ? __lock_acquire+0x1ff0/0x1ff0 [ 316.159644][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 316.179411][ T27] mutex_lock_nested+0x17/0x20 [ 316.184285][ T27] exfat_sync_fs+0x67/0x100 [ 316.188824][ T27] iterate_supers+0x127/0x1e0 [ 316.193535][ T27] ? sync_inodes_one_sb+0x60/0x60 [ 316.251139][ T27] ksys_sync+0xd7/0x1c0 [ 316.268817][ T27] ? sync_filesystem+0x220/0x220 [ 316.288273][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 316.337432][ T27] ? syscall_enter_from_user_mode+0x2e/0x240 [ 316.365086][ T27] __do_sys_sync+0xa/0x10 [ 316.369495][ T27] do_syscall_64+0x3b/0xb0 [ 316.373986][ T27] ? clear_bhb_loop+0x15/0x70 [ 316.378703][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 316.384689][ T27] RIP: 0033:0x7f86e2876ff9 [ 316.417850][ T27] RSP: 002b:00007f86e0cef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 316.433974][ T27] RAX: ffffffffffffffda RBX: 00007f86e2a2ef80 RCX: 00007f86e2876ff9 [ 316.442288][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.528300][ T27] RBP: 00007f86e28e9296 R08: 0000000000000000 R09: 0000000000000000 [ 316.573977][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.582225][ T27] R13: 0000000000000000 R14: 00007f86e2a2ef80 R15: 00007fff34d58908 [ 316.615056][ T27] [ 316.618243][ T27] [ 316.618243][ T27] Showing all locks held in the system: [ 316.665016][ T27] 1 lock held by khungtaskd/27: [ 316.669934][ T27] #0: ffffffff8c91fc20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 316.715908][ T27] 2 locks held by kworker/u4:2/154: [ 316.721285][ T27] #0: ffff888017079138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 316.771948][ T27] #1: ffffc90002017d20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 316.810436][ T27] 2 locks held by udevd/3029: [ 316.828505][ T27] #0: ffff8880211bc518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x14d/0xa50 [ 316.880964][ T27] #1: ffff888147463468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_open+0x68/0x100 [ 316.923989][ T27] 2 locks held by getty/3332: [ 316.928742][ T27] #0: ffff88802a1a3098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 316.983986][ T27] #1: ffffc9000208e2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0 [ 317.011525][ T27] 3 locks held by syz-executor/3571: [ 317.035157][ T27] 2 locks held by kworker/u4:6/3658: [ 317.040509][ T27] #0: ffff888017079138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 317.067827][ T9323] loop1: detected capacity change from 0 to 256 [ 317.123984][ T27] #1: ffffc90003157d20 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 317.184359][ T1388] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.190693][ T1388] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.200610][ T27] 2 locks held by kworker/1:14/4464: [ 317.210623][ T27] #0: ffff8880b913a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 317.253986][ T27] #1: ffff8880b9127848 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x53d/0x810 [ 317.313984][ T27] 3 locks held by kworker/1:15/4465: [ 317.319334][ T27] #0: ffff888017070938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0 [ 317.393490][ T27] #1: ffffc90003967d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0 [ 317.433991][ T27] #2: ffffffff8c9241e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740 [ 317.482256][ T27] 1 lock held by syz-executor/5533: [ 317.508475][ T27] #0: ffff888147463468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xa9/0xbe0 [ 317.573987][ T27] 2 locks held by syz.0.665/6094: [ 317.579070][ T27] #0: ffff888076d200e0 (&type->s_umount_key#99){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 317.623983][ T27] #1: ffff88805dde80e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 317.633405][ T27] 2 locks held by syz.3.928/6845: [ 317.683990][ T27] #0: ffff888076d200e0 (&type->s_umount_key#99){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 317.725439][ T27] #1: ffff88805dde80e0 (&sbi->s_lock#2){+.+.}-{3:3}, at: exfat_sync_fs+0x67/0x100 [ 317.743986][ T27] 2 locks held by syz.1.1920/9323: [ 317.749165][ T27] #0: ffff8880211ab118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xfb/0x790 [ 317.808973][ T27] #1: ffff88802148a468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 317.835160][ T27] [ 317.864838][ T27] ============================================= [ 317.864838][ T27] [ 317.890994][ T27] NMI backtrace for cpu 0 [ 317.895384][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 317.903386][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 317.913635][ T27] Call Trace: [ 317.916935][ T27] [ 317.919925][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 317.924716][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 317.930980][ T27] ? panic+0x860/0x860 [ 317.935083][ T27] ? nmi_cpu_backtrace+0x23b/0x4a0 [ 317.940242][ T27] nmi_cpu_backtrace+0x46a/0x4a0 [ 317.945209][ T27] ? __wake_up_klogd+0xd5/0x100 [ 317.950197][ T27] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 317.956465][ T27] ? _printk+0xd1/0x120 [ 317.960649][ T27] ? panic+0x860/0x860 [ 317.964951][ T27] ? __wake_up_klogd+0xcc/0x100 [ 317.969824][ T27] ? panic+0x860/0x860 [ 317.974005][ T27] ? __rcu_read_unlock+0x92/0x100 [ 317.979242][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 317.985341][ T27] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 317.991373][ T27] watchdog+0xe72/0xeb0 [ 317.995573][ T27] kthread+0x3f6/0x4f0 [ 317.999708][ T27] ? hungtask_pm_notify+0x50/0x50 [ 318.004766][ T27] ? kthread_blkcg+0xd0/0xd0 [ 318.009393][ T27] ret_from_fork+0x1f/0x30 [ 318.013853][ T27] [ 318.016974][ T27] Sending NMI from CPU 0 to CPUs 1: [ 318.022212][ C1] NMI backtrace for cpu 1 [ 318.022224][ C1] CPU: 1 PID: 3658 Comm: kworker/u4:6 Not tainted 5.15.168-syzkaller #0 [ 318.022242][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.022253][ C1] Workqueue: bat_events batadv_nc_worker [ 318.022280][ C1] RIP: 0010:check_preemption_disabled+0x19/0x110 [ 318.022305][ C1] Code: cc 48 c7 c7 20 02 d9 8a 48 c7 c6 60 02 d9 8a eb 00 41 57 41 56 41 54 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 <65> 8b 1d b8 b2 cd 75 65 8b 05 21 0d ce 75 a9 ff ff ff 7f 74 22 65 [ 318.022320][ C1] RSP: 0018:ffffc90003157a28 EFLAGS: 00000286 [ 318.022333][ C1] RAX: fb00c696fcfe5300 RBX: 0000000000000001 RCX: ffffffff8162bd8c [ 318.022345][ C1] RDX: 0000000000000000 RSI: ffffffff8ad90260 RDI: ffffffff8ad90220 [ 318.022357][ C1] RBP: ffffc90003157bd8 R08: dffffc0000000000 R09: fffffbfff1bd2cbe [ 318.022370][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff9200062af58 [ 318.022382][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888062ed4f80 [ 318.022394][ C1] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 318.022409][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 318.022421][ C1] CR2: 00007f63dae19a8c CR3: 00000000790fc000 CR4: 00000000003506e0 [ 318.022436][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 318.022445][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 318.022456][ C1] Call Trace: [ 318.022461][ C1] [ 318.022468][ C1] ? nmi_cpu_backtrace+0x39f/0x4a0 [ 318.022488][ C1] ? read_lock_is_recursive+0x10/0x10 [ 318.022507][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 318.022526][ C1] ? unknown_nmi_error+0xd0/0xd0 [ 318.022552][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 318.022570][ C1] ? nmi_handle+0xf7/0x370 [ 318.022588][ C1] ? check_preemption_disabled+0x19/0x110 [ 318.022607][ C1] ? default_do_nmi+0x62/0x150 [ 318.022631][ C1] ? exc_nmi+0xa8/0x100 [ 318.022647][ C1] ? end_repeat_nmi+0x16/0x31 [ 318.022666][ C1] ? lock_acquire+0xcc/0x4f0 [ 318.022682][ C1] ? check_preemption_disabled+0x19/0x110 [ 318.022707][ C1] ? check_preemption_disabled+0x19/0x110 [ 318.022728][ C1] ? check_preemption_disabled+0x19/0x110 [ 318.022748][ C1] [ 318.022753][ C1] [ 318.022760][ C1] rcu_is_watching+0x11/0xa0 [ 318.022778][ C1] lock_acquire+0xdd/0x4f0 [ 318.022796][ C1] ? read_lock_is_recursive+0x10/0x10 [ 318.022814][ C1] ? rcu_lock_release+0x5/0x20 [ 318.022832][ C1] ? __lock_acquire+0x1ff0/0x1ff0 [ 318.022850][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 318.022871][ C1] rcu_lock_acquire+0x2a/0x30 [ 318.022888][ C1] ? rcu_lock_acquire+0x5/0x30 [ 318.022904][ C1] batadv_nc_worker+0xc1/0x5b0 [ 318.022926][ C1] process_one_work+0x8a1/0x10c0 [ 318.022953][ C1] ? worker_detach_from_pool+0x260/0x260 [ 318.022980][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 318.023000][ C1] ? kthread_data+0x4e/0xc0 [ 318.023016][ C1] ? wq_worker_running+0x97/0x170 [ 318.023035][ C1] worker_thread+0xaca/0x1280 [ 318.023066][ C1] kthread+0x3f6/0x4f0 [ 318.023082][ C1] ? rcu_lock_release+0x20/0x20 [ 318.023099][ C1] ? kthread_blkcg+0xd0/0xd0 [ 318.023116][ C1] ret_from_fork+0x1f/0x30 [ 318.023153][ C1] [ 318.427967][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 318.434972][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.168-syzkaller #0 [ 318.442966][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 318.453225][ T27] Call Trace: [ 318.456532][ T27] [ 318.459481][ T27] dump_stack_lvl+0x1e3/0x2d0 [ 318.464213][ T27] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 318.470320][ T27] ? panic+0x860/0x860 [ 318.474447][ T27] panic+0x318/0x860 [ 318.478359][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 318.484009][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 318.490273][ T27] ? fb_is_primary_device+0xd0/0xd0 [ 318.495486][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 318.501570][ T27] ? nmi_trigger_cpumask_backtrace+0x221/0x2a0 [ 318.507737][ T27] ? nmi_trigger_cpumask_backtrace+0x281/0x2a0 [ 318.513992][ T27] ? nmi_trigger_cpumask_backtrace+0x286/0x2a0 [ 318.520167][ T27] watchdog+0xeb0/0xeb0 [ 318.524376][ T27] kthread+0x3f6/0x4f0 [ 318.528460][ T27] ? hungtask_pm_notify+0x50/0x50 [ 318.533497][ T27] ? kthread_blkcg+0xd0/0xd0 [ 318.538105][ T27] ret_from_fork+0x1f/0x30 [ 318.542549][ T27] [ 318.545678][ T27] Kernel Offset: disabled [ 318.550012][ T27] Rebooting in 86400 seconds..