last executing test programs: 3.373028486s ago: executing program 4 (id=20818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000540)={0x44, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x5, 0x5, 'A'}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 3.029242426s ago: executing program 4 (id=20821): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="230100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507020014814006090587", @ANYRES16=r1], 0x0) 2.706107243s ago: executing program 0 (id=20827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000540)="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", 0x7ff, r0}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f00000000c0)}, 0x20) 2.565631813s ago: executing program 0 (id=20831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048010000180090001006c6173740000c9002c0001800a0001006d617463680000001c00028006000300038b000008000240000000000800010074746c000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x448c0}, 0x40400c4) 2.152734039s ago: executing program 0 (id=20839): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x7}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.926826381s ago: executing program 0 (id=20843): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1.819876086s ago: executing program 0 (id=20845): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x6, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000580), 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.59535361s ago: executing program 3 (id=20851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1.537937431s ago: executing program 4 (id=20852): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r0, 0x0, 0x0) 1.409079196s ago: executing program 3 (id=20855): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000740)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000700)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000440)=[{0x2b, 0x0, [0x0, 0xfffff150, 0xfffffc01, 0xfffffffe, 0x7, 0x8001, 0x800, 0x8, 0x9, 0x3, 0x7, 0x8, 0x7, 0x1ff, 0x3, 0x1ff]}], r1, 0x1, 0x1, 0x48}}, 0x20) 1.127348152s ago: executing program 3 (id=20860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x9d6}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 952.21808ms ago: executing program 2 (id=20862): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="39fb030300"/14, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 952.081284ms ago: executing program 1 (id=20863): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000010c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xffffffff, 0x3, 0x4, 0x3bafcda2, 0x5, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x9, 0x9, 0x0, 0x8001, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000840}, 0x4c840) 920.051594ms ago: executing program 4 (id=20864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x800, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 859.454747ms ago: executing program 2 (id=20865): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 804.575677ms ago: executing program 1 (id=20866): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000740)='./file7\x00', 0x3142813, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 804.257422ms ago: executing program 0 (id=20867): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 804.007078ms ago: executing program 3 (id=20868): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) unshare(0x20060400) flock(0xffffffffffffffff, 0x8) 681.768968ms ago: executing program 1 (id=20869): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) 681.604104ms ago: executing program 2 (id=20870): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 564.000365ms ago: executing program 3 (id=20871): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00011700000000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x40841}, 0x0) 464.885614ms ago: executing program 1 (id=20872): prlimit64(0x0, 0x9, &(0x7f0000000040)={0x0, 0x7}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) 464.735747ms ago: executing program 2 (id=20873): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) 442.340124ms ago: executing program 3 (id=20874): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@i_version}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x4fe, &(0x7f0000000dc0)="$eJzs3E9sFFUcAODfbFta/klFREHUKhobiS0UFA4mitHEgyZGTNRj0xaCFGpoSYSgLhc8GhLvxqNXD17VCzGcTLzi0cSQEMMFMCGumd2Zdrvd3XbLtmvp9yXtvjezM++9efNm37y3swGsWwPpv6QSvh4R2yKiUPuGgcrLnVsXx+7eujgWxVLp2N9JebPbaTyT7SY2Z5HBQsTraSBZmO70+QunRicnJ85m8eGZ058OT5+/8NLJvmzJkSOHDh44/MrIy60Xqk56ablu7/5ias+utz++8u5Yd748T626HO0yEAP1slL2fLsT67CtVeGku4MZoSXp+Z9WV0+5/W+LrmhWecVVzBmw0kqlUqm38epiqdalBUuANSv6Op0DoDPyD/r0/jf/q9cR2LAy3Y+Ou3m0cgOUlvtO9hfxdHlhPg7SU3N/204DEfFR8Z9v079oNA7RtUKJAwDr0s9H855gTf+vvzIzcu/c1dfS14eyOZT+iHg4IrZHxCMRsSMiHo2InRHxWEQ8XrP/tOtSapL+QE18Nv3ZSajCjTYVta60//dqNrc11/+bl4H+riy2NSLvME/sz47JYPT0Hj85OXGgSRq/vPn7143Wlft/6c6zPmCaft4XzPJxo7tmgG58dGZ02QWucfNSxO7u2vIn3RHJ7ExAEhG7ImJ3C/vtrwqffPH7PbORnvnvq+7/1i9/WanuPFob5plK30W8EMm9O7cuFmNe/c+lmMybnzw9emLixMSZkdn5yeG+mJzYP5yeBfvrpnHtt8vvNUp/0fL/+GftJm8d/ulY224K0vrfVHX+Rz5/O1f+/iQimZ2vnW49jct/fNVwbnXx+q9//m9IPiiH8/vSz0ZnZs4eiNiQvLNw+cjctnk8fY1ipfyDe+u3/+3ZNumReCIi0pP4yYh4Kip3iGnen4mIZyNib5Py//rGc5+0XP5Ckx22UVr+8ZrrX6Xm59X/3Hx9o0CSzQ3WWdV1quf63QYXj6XV/6FyaDBbUv/6l8y7RDTKaf5ply75976PHgAAAKwNhYjYUjWWtCUKhaGhyhjQjthUmJyantl3fOrcmfF0XUR/9BTyka7KeHBPko9/9lfFR2riB7Nx42+6NpbjQ2NTk+MdLTmwudzmk8JQxIddVe0/9ZfvncCDz/NasH41a/9pJ37nlVXMDLCqlv75f/XzFc0IsOqq2n+jJ/yLy/jeF7AGuP8H5iz+Qz+uGbD2lbRlWNdaav/7/AggPEi64/3Z8Co9dwj8Tyy3//9lm/MBrKpFnuvvbfgg/ZICpd76q/pi4Zujr/kOu2J52dhYJ62OBNKeVUdS37icrfJfU2j4nii0tsPeaE+dHr/Po1E8O31i55JO/lYCpey78u2uwR8at9NrvU1q5/4DHbkcAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtN1/AQAA//8O/N2Z") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x80014) 293.665177ms ago: executing program 1 (id=20875): syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000300)='./file0\x00', 0x3200842, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x0, 0x8000}) 293.542589ms ago: executing program 2 (id=20876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2d, 0xe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}}, 0x20000000) 288.277475ms ago: executing program 4 (id=20877): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e1f, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @remote, 0x106}, 0x1c) 254.833µs ago: executing program 1 (id=20878): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4b0, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000002c0)="f48c", 0x2, 0x454) 124.464µs ago: executing program 2 (id=20879): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x4, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45bf3c16e68e268e}, 0x3000c000) 0s ago: executing program 4 (id=20880): unshare(0x26020480) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') setns(r0, 0x2000000) kernel console output (not intermixed with test programs): 404][ T5980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.197393][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1371.212081][ T5980] usb 4-1: config 0 descriptor?? [ 1371.314943][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1371.807833][T10948] tipc: Enabling of bearer rejected, failed to enable media [ 1371.976035][ T5980] uclogic 0003:2179:0053.0010: failed retrieving string descriptor #100: -71 [ 1371.976099][ T5980] uclogic 0003:2179:0053.0010: failed retrieving pen parameters: -71 [ 1371.976132][ T5980] uclogic 0003:2179:0053.0010: pen probing failed: -71 [ 1371.976149][ T5980] uclogic 0003:2179:0053.0010: failed probing parameters: -71 [ 1371.976256][ T5980] uclogic 0003:2179:0053.0010: probe with driver uclogic failed with error -71 [ 1372.061552][ T5980] usb 4-1: USB disconnect, device number 127 [ 1375.155098][T11103] loop3: detected capacity change from 0 to 1024 [ 1375.164215][T11103] EXT4-fs: Ignoring removed bh option [ 1375.297746][T11103] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1375.338435][T11103] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #12: block 7: comm syz.3.17584: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 1375.493805][T11103] EXT4-fs (loop3): Remounting filesystem read-only [ 1375.570649][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1375.698218][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1375.830957][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1375.997482][T11139] loop0: detected capacity change from 0 to 1764 [ 1376.218171][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1376.320817][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1376.435708][T11167] loop0: detected capacity change from 0 to 512 [ 1376.494542][T11164] loop3: detected capacity change from 0 to 2048 [ 1376.548381][T11164] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1376.611854][ T38] audit: type=1800 audit(2000000240.428:608): pid=11164 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.17613" name="file2" dev="loop3" ino=1416 res=0 errno=0 [ 1376.707444][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1376.810759][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1377.376317][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1377.467952][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1378.830825][T11265] nbd: must specify a size in bytes for the device [ 1379.526052][T11296] loop4: detected capacity change from 0 to 2048 [ 1379.587573][T11302] loop0: detected capacity change from 0 to 128 [ 1379.589902][T11296] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1379.621592][T11296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1379.800224][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1379.857671][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1380.003010][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1380.056464][ T6048] Flush: task=udevd[6048] dev=loop4 state=2 [ 1380.156439][ T6048] Teardown: task=udevd[6048] dev=loop4 state=2 [ 1380.277180][T11333] loop4: detected capacity change from 0 to 64 [ 1380.492018][ T6048] Flush: task=udevd[6048] dev=loop4 state=2 [ 1380.579552][ T6048] Teardown: task=udevd[6048] dev=loop4 state=2 [ 1380.903588][T11363] tunl0: Caught tx_queue_len zero misconfig [ 1382.551512][T11443] loop4: detected capacity change from 0 to 512 [ 1382.756133][ T6048] Flush: task=udevd[6048] dev=loop4 state=2 [ 1382.781998][T11449] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17750'. [ 1382.865887][ T6048] Teardown: task=udevd[6048] dev=loop4 state=2 [ 1383.128890][T11471] netlink: 'syz.0.17761': attribute type 66 has an invalid length. [ 1383.129170][T11472] Bluetooth: MGMT ver 1.23 [ 1383.373608][T11485] loop3: detected capacity change from 0 to 256 [ 1383.476902][T11490] loop0: detected capacity change from 0 to 2048 [ 1383.547399][T11490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1383.550506][T11490] ext4 filesystem being mounted at /2983/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1383.742449][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1383.856949][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1383.872080][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1383.944538][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1383.999198][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1384.045404][T11510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1384.146479][T11515] loop3: detected capacity change from 0 to 2048 [ 1384.155571][T11515] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1384.536561][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1384.626409][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1385.214526][ T5733] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1385.307609][T11557] netlink: 'syz.0.17804': attribute type 1 has an invalid length. [ 1385.307644][T11557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1385.376420][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.376453][ T5733] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.376488][ T5733] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1385.376510][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.408322][ T5733] usb 5-1: config 0 descriptor?? [ 1385.909881][ T5733] hid_parser_main: 23 callbacks suppressed [ 1385.909906][ T5733] pyra 0003:1E7D:2CF6.0011: unknown main item tag 0x2 [ 1385.941093][ T5733] pyra 0003:1E7D:2CF6.0011: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1386.013638][T11548] loop3: detected capacity change from 0 to 40427 [ 1386.021173][T11548] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 1386.021199][T11548] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1386.052606][T11548] F2FS-fs (loop3): invalid crc value [ 1386.116147][ T5733] pyra 0003:1E7D:2CF6.0011: couldn't init struct pyra_device [ 1386.116203][ T5733] pyra 0003:1E7D:2CF6.0011: couldn't install mouse [ 1386.155348][ T5733] pyra 0003:1E7D:2CF6.0011: probe with driver pyra failed with error -71 [ 1386.191757][ T5733] usb 5-1: USB disconnect, device number 2 [ 1386.289357][T11548] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1386.387792][T11584] fido_id[11584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1386.408733][T11548] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1386.408763][T11548] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1386.642315][T11598] loop0: detected capacity change from 0 to 2048 [ 1386.728434][T11598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1386.728532][T11598] ext4 filesystem being mounted at /2990/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1386.997349][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1387.000796][ T5794] syz-executor: attempt to access beyond end of device [ 1387.000796][ T5794] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1387.130949][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1387.231928][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1387.309478][ T5794] CPU: 0 UID: 0 PID: 5794 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1387.309512][ T5794] Tainted: [L]=SOFTLOCKUP [ 1387.309520][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1387.309531][ T5794] Call Trace: [ 1387.309539][ T5794] [ 1387.309548][ T5794] dump_stack_lvl+0xe8/0x150 [ 1387.309584][ T5794] f2fs_stop_checkpoint+0x3f9/0x5e0 [ 1387.309617][ T5794] f2fs_write_end_io+0x124b/0x1710 [ 1387.309661][ T5794] __submit_merged_bio+0x258/0x6a0 [ 1387.309690][ T5794] ? rcu_is_watching+0x15/0xb0 [ 1387.309724][ T5794] __submit_merged_write_cond+0x3c9/0x4e0 [ 1387.309765][ T5794] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 1387.309819][ T5794] f2fs_write_data_pages+0x2a27/0x36f0 [ 1387.309886][ T5794] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1387.309961][ T5794] ? __lock_acquire+0x6df/0x2e40 [ 1387.310001][ T5794] ? do_raw_spin_lock+0x12b/0x2f0 [ 1387.310040][ T5794] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1387.310071][ T5794] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1387.310101][ T5794] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1387.310125][ T5794] do_writepages+0x338/0x560 [ 1387.310154][ T5794] ? rt_spin_unlock+0x157/0x200 [ 1387.310188][ T5794] filemap_fdatawrite+0x1ec/0x2f0 [ 1387.310219][ T5794] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 1387.310244][ T5794] ? do_raw_spin_lock+0x12b/0x2f0 [ 1387.310304][ T5794] ? rt_spin_unlock+0x157/0x200 [ 1387.310333][ T5794] ? rt_spin_unlock+0x163/0x200 [ 1387.310360][ T5794] f2fs_sync_dirty_inodes+0x30e/0x830 [ 1387.310399][ T5794] f2fs_write_checkpoint+0xa3d/0x2710 [ 1387.310458][ T5794] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 1387.310538][ T5794] kill_f2fs_super+0x2dd/0x700 [ 1387.310571][ T5794] ? __pfx_kill_f2fs_super+0x10/0x10 [ 1387.310606][ T5794] ? call_rcu+0x64b/0x8b0 [ 1387.310633][ T5794] ? lockdep_hardirqs_on+0x7a/0x110 [ 1387.310677][ T5794] deactivate_locked_super+0xbc/0x110 [ 1387.310703][ T5794] cleanup_mnt+0x3d3/0x460 [ 1387.310734][ T5794] task_work_run+0x1d9/0x270 [ 1387.310759][ T5794] ? __pfx_task_work_run+0x10/0x10 [ 1387.310791][ T5794] exit_to_user_mode_loop+0x1fa/0x730 [ 1387.310815][ T5794] ? rcu_is_watching+0x15/0xb0 [ 1387.310843][ T5794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.310872][ T5794] do_syscall_64+0x353/0x580 [ 1387.310901][ T5794] ? trace_irq_disable+0x3b/0x140 [ 1387.310924][ T5794] ? clear_bhb_loop+0x40/0x90 [ 1387.310950][ T5794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1387.310970][ T5794] RIP: 0033:0x7fbea1bdf097 [ 1387.310991][ T5794] Code: a2 c7 05 5c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1387.311009][ T5794] RSP: 002b:00007fff30910638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1387.311030][ T5794] RAX: 0000000000000000 RBX: 00007fbea1c732ca RCX: 00007fbea1bdf097 [ 1387.311045][ T5794] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff309106f0 [ 1387.311061][ T5794] RBP: 00007fff309106f0 R08: 00007fff309116f0 R09: 00000000ffffffff [ 1387.311075][ T5794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff30911780 [ 1387.311087][ T5794] R13: 00007fbea1c732ca R14: 000000000014127f R15: 00007fff309117c0 [ 1387.311121][ T5794] [ 1387.315556][ T5794] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 1387.432609][ T5733] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1387.636038][ T5733] usb 5-1: Using ep0 maxpacket: 32 [ 1387.640588][ T5733] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1387.640617][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.640637][ T5733] usb 5-1: Product: syz [ 1387.640651][ T5733] usb 5-1: Manufacturer: syz [ 1387.640665][ T5733] usb 5-1: SerialNumber: syz [ 1387.673904][ T5733] usb 5-1: config 0 descriptor?? [ 1387.942346][ T5733] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 003 [ 1388.125688][ T821] usb 5-1: USB disconnect, device number 3 [ 1388.624776][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1388.712844][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1388.874196][ T38] audit: type=1326 audit(2000000251.747:609): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1388.874467][ T38] audit: type=1326 audit(2000000251.747:610): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1388.876822][ T38] audit: type=1326 audit(2000000251.747:611): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1388.878851][ T38] audit: type=1326 audit(2000000251.747:612): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1388.878896][ T38] audit: type=1326 audit(2000000251.747:613): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1388.879299][ T38] audit: type=1326 audit(2000000251.747:614): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1388.879339][ T38] audit: type=1326 audit(2000000251.747:615): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1388.881183][ T38] audit: type=1326 audit(2000000251.747:616): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1388.881508][ T38] audit: type=1326 audit(2000000251.747:617): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=11675 comm="syz.0.17857" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1389.894777][T11687] loop3: detected capacity change from 0 to 32768 [ 1390.288800][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1390.379699][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1390.807327][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17882'. [ 1390.941416][ T1011] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1391.138319][ T1011] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 1391.138353][ T1011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 90, changing to 7 [ 1391.138391][ T1011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 50044, setting to 1024 [ 1391.138432][ T1011] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1391.138455][ T1011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.143683][ T1011] usb 5-1: config 0 descriptor?? [ 1391.295240][T11775] netlink: 'syz.0.17905': attribute type 10 has an invalid length. [ 1391.299545][T11775] netlink: 'syz.0.17905': attribute type 10 has an invalid length. [ 1391.369759][ T1011] ath6kl: Failed to submit usb control message: -71 [ 1391.369807][ T1011] ath6kl: unable to send the bmi data to the device: -71 [ 1391.369822][ T1011] ath6kl: Unable to send get target info: -71 [ 1391.487362][ T1011] ath6kl: Failed to init ath6kl core: -71 [ 1391.488800][ T1011] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1391.496270][ T1011] usb 5-1: USB disconnect, device number 4 [ 1391.586433][T11775] dummy0 (unregistering): left allmulticast mode [ 1393.370210][T11881] loop4: detected capacity change from 0 to 512 [ 1393.373139][T11881] EXT4-fs: Ignoring removed nobh option [ 1393.375690][T11881] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1393.511973][T11881] EXT4-fs (loop4): 1 truncate cleaned up [ 1393.557896][T11881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1393.591849][ T38] audit: type=1800 audit(2000000256.104:618): pid=11881 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.4.17957" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1394.337983][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1394.439296][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1394.527246][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1394.835666][T11951] loop0: detected capacity change from 0 to 1024 [ 1395.130219][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1395.223816][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1395.246323][T11973] loop4: detected capacity change from 0 to 64 [ 1395.474266][ T6363] Flush: task=udevd[6363] dev=loop4 state=2 [ 1395.534578][T27508] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1395.568023][ T6363] Teardown: task=udevd[6363] dev=loop4 state=2 [ 1395.698531][T27508] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 1395.698560][T27508] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1395.698578][T27508] usb 4-1: config 0 has no interface number 0 [ 1395.700797][T27508] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1395.700824][T27508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.700843][T27508] usb 4-1: Product: syz [ 1395.700853][T27508] usb 4-1: Manufacturer: syz [ 1395.700861][T27508] usb 4-1: SerialNumber: syz [ 1395.719947][T27508] usb 4-1: config 0 descriptor?? [ 1395.778091][T27508] hub 4-1:0.31: bad descriptor, ignoring hub [ 1395.778128][T27508] hub 4-1:0.31: probe with driver hub failed with error -5 [ 1395.787540][T27508] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1395.787632][T27508] uvcvideo 4-1:0.31: Entity type for entity Output 32774 was not initialized! [ 1395.787699][T27508] uvcvideo 4-1:0.31: Failed to create links for entity 32774 [ 1395.789873][T27508] uvcvideo 4-1:0.31: Failed to register entities (-22). [ 1396.087696][T27508] usb 4-1: USB disconnect, device number 2 [ 1396.826512][T12046] netlink: 'syz.3.18035': attribute type 4 has an invalid length. [ 1396.826535][T12046] netlink: 3649 bytes leftover after parsing attributes in process `syz.3.18035'. [ 1398.311307][T12079] loop0: detected capacity change from 0 to 32768 [ 1398.798602][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1398.842426][T12140] loop4: detected capacity change from 0 to 128 [ 1398.862467][T12140] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1398.862951][T12140] ext4 filesystem being mounted at /2934/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1398.928899][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1399.012538][ T5791] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1399.118770][T12144] loop0: detected capacity change from 0 to 256 [ 1399.143706][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1399.368154][T12144] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1399.390974][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1399.497455][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1399.619039][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1399.975328][T12193] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 1400.144666][T12201] loop0: detected capacity change from 0 to 256 [ 1400.164932][T12201] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 1400.187691][ T38] audit: type=1800 audit(2000000262.188:619): pid=12201 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.0.18111" name="file1" dev="loop0" ino=1048804 res=0 errno=0 [ 1400.368813][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1400.463171][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1400.681745][T12228] trusted_key: encrypted_key: master key parameter 'e' is invalid [ 1400.785286][T12184] loop4: detected capacity change from 0 to 32768 [ 1401.274075][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1401.351236][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1402.229004][ T5733] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1402.245653][T12313] vivid-000: disconnect [ 1402.246090][T12311] vivid-000: reconnect [ 1402.396574][ T5733] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1402.396605][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.396624][ T5733] usb 5-1: Product: syz [ 1402.396638][ T5733] usb 5-1: Manufacturer: syz [ 1402.396652][ T5733] usb 5-1: SerialNumber: syz [ 1402.409838][ T5733] usb 5-1: config 0 descriptor?? [ 1402.424843][ T5733] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1402.434092][T27508] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1402.608473][T27508] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1402.608504][T27508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.608524][T27508] usb 4-1: Product: syz [ 1402.608538][T27508] usb 4-1: Manufacturer: syz [ 1402.608553][T27508] usb 4-1: SerialNumber: syz [ 1402.675846][T12332] loop0: detected capacity change from 0 to 4096 [ 1402.702584][T27508] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1402.702611][T27508] r8152-cfgselector 4-1: config 0 descriptor?? [ 1402.732488][T12332] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1402.948718][T12332] ntfs3(loop0): ino=19, mi_enum_attr [ 1402.948752][T12332] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1402.950505][T12332] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 1403.118962][ T5733] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 1403.119135][ T5733] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1403.132675][ T5733] usb 5-1: USB disconnect, device number 5 [ 1403.218981][T27508] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 1403.415536][ T6062] Flush: task=udevd[6062] dev=loop0 state=2 [ 1403.495492][ T6062] Teardown: task=udevd[6062] dev=loop0 state=2 [ 1403.583733][T12369] loop0: detected capacity change from 0 to 512 [ 1403.617908][T12369] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1403.706905][T12369] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 1403.814326][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1404.048302][ T821] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 1404.108206][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1404.200296][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1404.224742][ T821] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1404.224784][ T821] usb 5-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00 [ 1404.224808][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.230070][ T821] usb 5-1: config 0 descriptor?? [ 1404.403647][T12401] loop0: detected capacity change from 0 to 512 [ 1404.495456][T12401] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1404.495871][T12401] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349) [ 1404.552652][T12401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0022] [ 1404.552782][T12401] System zones: 1-12 [ 1404.553074][T12401] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1404.560286][T12401] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.18195: Block bitmap for bg 0 marked uninitialized [ 1404.560310][T12401] loop0: lost filesystem error report for type 5 error -117 [ 1404.576227][ C0] EXT4-fs (loop0): initial error at time 2000000266: ext4_read_block_bitmap_nowait:517 [ 1404.576260][ C0] EXT4-fs (loop0): last error at time 2000000266: ext4_read_block_bitmap_nowait:517 [ 1404.692504][T12401] EXT4-fs (loop0): Remounting filesystem read-only [ 1404.692934][T12401] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1404.693067][T12401] EXT4-fs (loop0): 1 truncate cleaned up [ 1404.733813][ T821] logitech 0003:046D:C283.0012: reserved main item tag 0xd [ 1404.733850][ T821] logitech 0003:046D:C283.0012: unknown main item tag 0x0 [ 1404.733925][ T821] logitech 0003:046D:C283.0012: unknown main item tag 0x3 [ 1404.733951][ T821] logitech 0003:046D:C283.0012: unknown main item tag 0x6 [ 1404.748236][T12401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1404.794110][ T821] logitech 0003:046D:C283.0012: hidraw0: USB HID v0.09 Device [HID 046d:c283] on usb-dummy_hcd.4-1/input0 [ 1404.794225][ T821] logitech 0003:046D:C283.0012: no inputs found [ 1404.952591][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.059633][ T5733] usb 5-1: USB disconnect, device number 6 [ 1405.079083][T12415] fido_id[12415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1405.127190][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18216'. [ 1405.181037][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1405.276032][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1405.598101][ T5796] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1405.759317][ T5796] usb 4-1: Using ep0 maxpacket: 32 [ 1405.763624][ T5796] usb 4-1: config 0 has no interfaces? [ 1405.763800][T12461] loop4: detected capacity change from 0 to 256 [ 1405.797375][ T5796] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1405.797412][ T5796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1405.797433][ T5796] usb 4-1: Product: syz [ 1405.797447][ T5796] usb 4-1: Manufacturer: syz [ 1405.797461][ T5796] usb 4-1: SerialNumber: syz [ 1405.834497][ T5796] usb 4-1: config 0 descriptor?? [ 1406.066552][ T5796] usb 4-1: USB disconnect, device number 4 [ 1406.308348][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1406.610322][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1406.697969][T12495] netlink: 'syz.0.18251': attribute type 3 has an invalid length. [ 1406.926050][T12507] loop0: detected capacity change from 0 to 736 [ 1407.160218][T12507] iso9660: Corrupted directory entry in block 1 of inode 1483 [ 1407.416713][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1407.503339][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1407.622417][T27508] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1407.785740][T27508] usb 4-1: Using ep0 maxpacket: 32 [ 1407.789386][T27508] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1407.789434][T27508] usb 4-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1407.789457][T27508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.862859][T27508] usb 4-1: config 0 descriptor?? [ 1408.347392][T27508] apple 0003:05AC:027A.0013: unknown main item tag 0x4 [ 1408.347425][T27508] apple 0003:05AC:027A.0013: reserved main item tag 0xd [ 1408.394771][T27508] apple 0003:05AC:027A.0013: hidraw0: USB HID v0.81 Device [HID 05ac:027a] on usb-dummy_hcd.3-1/input0 [ 1408.534806][T12535] comedi comedi1: reset error (fatal) [ 1408.583004][T27508] usb 4-1: USB disconnect, device number 5 [ 1409.013052][T12598] loop0: detected capacity change from 0 to 2048 [ 1409.035464][T12598] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1409.036036][T12598] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1409.039630][T12598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1409.385129][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1409.548034][T12626] loop4: detected capacity change from 0 to 1024 [ 1409.661097][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1409.710671][T12636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18321'. [ 1409.710761][T12636] netlink: del zone limit has 8 unknown bytes [ 1409.978837][T12648] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18325'. [ 1410.150352][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1410.223632][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1410.305748][T12662] loop4: detected capacity change from 0 to 512 [ 1410.307497][T12662] EXT4-fs: Ignoring removed orlov option [ 1410.338269][T12665] loop0: detected capacity change from 0 to 1024 [ 1410.349301][T12665] EXT4-fs: Ignoring removed bh option [ 1410.420484][T12662] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1410.420604][T12662] ext4 filesystem being mounted at /2949/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1410.472298][T12665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1410.514793][T12673] EXT4-fs error (device loop4): ext4_get_verity_descriptor_location:337: inode #15: comm syz.4.18331: verity file corrupted; can't find descriptor [ 1410.515452][T12673] EXT4-fs (loop4): Remounting filesystem read-only [ 1410.515472][T12673] fs-verity (loop4, inode 15): Error -117 getting verity descriptor size [ 1410.577514][T12665] EXT4-fs error (device loop0): ext4_check_all_de:659: inode #12: block 7: comm syz.0.18333: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 1410.608544][T12665] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 1410.651607][T12662] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1410.686747][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1410.953945][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1410.972637][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1411.094265][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1411.135204][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1411.176151][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1411.361414][T12700] loop4: detected capacity change from 0 to 2048 [ 1411.481229][T12711] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1411.578893][T12700] syz.4.18342: attempt to access beyond end of device [ 1411.578893][T12700] loop4: rw=0, sector=18441677524128759844, nr_sectors = 2 limit=2048 [ 1411.579182][T12700] NILFS error (device loop4): nilfs_readdir: bad page in #2 [ 1411.715388][T12700] Remounting filesystem read-only [ 1411.851294][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1411.946830][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1411.970632][T12687] loop3: detected capacity change from 0 to 32768 [ 1412.007127][T12725] loop0: detected capacity change from 0 to 128 [ 1412.062113][T12687] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1412.201323][T12735] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1412.285143][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1412.410173][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1412.604186][T12745] loop4: detected capacity change from 0 to 4096 [ 1412.752458][T12750] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1412.835590][ T5794] ocfs2: Unmounting device (7,3) on (node local) [ 1412.862046][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1413.083570][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1413.196091][T12745] NILFS (loop4): nilfs_sufile_do_free: segment 9 is already clean [ 1413.608376][T12747] loop0: detected capacity change from 0 to 32768 [ 1413.892501][T12770] loop3: detected capacity change from 0 to 4096 [ 1414.282118][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1414.414706][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1414.421241][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1414.501514][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1414.567467][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1414.653897][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1415.453688][T12836] netlink: 248 bytes leftover after parsing attributes in process `syz.4.18414'. [ 1415.453724][T12836] NCSI netlink: No device for ifindex 0 [ 1415.862491][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18426'. [ 1415.865020][T12859] netlink: 64 bytes leftover after parsing attributes in process `syz.4.18426'. [ 1416.513346][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513385][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513410][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513432][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513456][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513479][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513502][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513532][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513557][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.513581][T27508] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 1416.644579][T27508] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1416.786230][T12901] fido_id[12901]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1417.014185][T12911] sock: sock_timestamping_bind_phc: sock not bind to device [ 1417.813725][T12952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18468'. [ 1418.060917][T12964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18475'. [ 1419.108760][T13015] tmpfs: Cannot change global quota limit on remount [ 1419.649065][ T5796] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1419.810493][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.810527][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.810563][ T5796] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1419.810586][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.834174][ T5796] usb 4-1: config 0 descriptor?? [ 1420.053876][T13049] bridge_slave_0: default FDB implementation only supports local addresses [ 1420.235167][T13021] loop4: detected capacity change from 0 to 32768 [ 1420.288924][T13057] nbd: couldn't find a device at index 65553 [ 1420.331495][ T5796] playstation 0003:054C:0DF2.0015: unbalanced delimiter at end of report description [ 1420.335499][ T5796] playstation 0003:054C:0DF2.0015: Parse failed [ 1420.335600][ T5796] playstation 0003:054C:0DF2.0015: probe with driver playstation failed with error -22 [ 1420.549405][ T5796] usb 4-1: USB disconnect, device number 6 [ 1420.666046][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1420.774333][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1421.014369][T13085] loop0: detected capacity change from 0 to 512 [ 1421.025105][T13085] EXT4-fs: Ignoring removed orlov option [ 1421.104596][T13085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1421.104720][T13085] ext4 filesystem being mounted at /3086/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1421.293638][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.404647][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1421.475496][T13106] netlink: 'syz.3.18541': attribute type 1 has an invalid length. [ 1421.475517][T13106] netlink: 248 bytes leftover after parsing attributes in process `syz.3.18541'. [ 1421.509411][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1422.443038][T13162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.145507][T27508] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1423.361823][T27508] usb 4-1: Using ep0 maxpacket: 16 [ 1423.364647][T27508] usb 4-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 1423.364676][T27508] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.379372][T27508] usb 4-1: config 0 descriptor?? [ 1423.868523][T27508] hid_parser_main: 73 callbacks suppressed [ 1423.868547][T27508] elecom 0003:056E:00FD.0016: unknown main item tag 0x4 [ 1423.868575][T27508] elecom 0003:056E:00FD.0016: reserved main item tag 0xd [ 1424.009360][T27508] elecom 0003:056E:00FD.0016: hidraw0: USB HID v0.09 Device [HID 056e:00fd] on usb-dummy_hcd.3-1/input0 [ 1424.118632][T27508] usb 4-1: USB disconnect, device number 7 [ 1424.147836][T13228] fido_id[13228]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1424.219346][T13235] netlink: 'syz.0.18605': attribute type 1 has an invalid length. [ 1424.219385][T13235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1424.514358][T13249] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18614'. [ 1424.514390][T13249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18614'. [ 1425.451787][T27508] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1425.614369][T27508] usb 4-1: Using ep0 maxpacket: 16 [ 1425.616790][T27508] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.616816][T27508] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1425.619853][T27508] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1425.619889][T27508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.619908][T27508] usb 4-1: Product: syz [ 1425.619922][T27508] usb 4-1: Manufacturer: syz [ 1425.619936][T27508] usb 4-1: SerialNumber: syz [ 1425.671530][T27508] usb 4-1: 0:2 : does not exist [ 1425.838740][T13316] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.18646'. [ 1426.305342][T27508] usb 4-1: USB disconnect, device number 8 [ 1426.471140][ T6048] udevd[6048]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1426.497822][ T1011] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1426.654037][ T1011] usb 1-1: Using ep0 maxpacket: 32 [ 1426.661380][ T1011] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.661435][ T1011] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1426.661458][ T1011] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1426.661484][ T1011] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1426.670057][ T1011] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1426.670087][ T1011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.670104][ T1011] usb 1-1: Product: syz [ 1426.670118][ T1011] usb 1-1: Manufacturer: syz [ 1426.670132][ T1011] usb 1-1: SerialNumber: syz [ 1426.688684][ T1011] usb 1-1: config 0 descriptor?? [ 1426.701915][ T1011] gs_usb 1-1:0.0: Required endpoints not found [ 1426.751606][T13363] netlink: 68 bytes leftover after parsing attributes in process `syz.4.18670'. [ 1426.751637][T13363] netlink: 'syz.4.18670': attribute type 1 has an invalid length. [ 1426.902632][T13371] loop4: detected capacity change from 0 to 8 [ 1426.926252][T27508] usb 1-1: USB disconnect, device number 121 [ 1426.967859][ T6048] udevd[6048]: incorrect cramfs checksum on /dev/loop4 [ 1427.080498][ T6048] udevd[6048]: incorrect cramfs checksum on /dev/loop4 [ 1427.113082][T13378] loop3: detected capacity change from 0 to 8 [ 1427.115884][T13378] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1427.222270][ T6048] udevd[6048]: incorrect cramfs checksum on /dev/loop3 [ 1427.222474][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1427.287593][ T6048] udevd[6048]: incorrect cramfs checksum on /dev/loop3 [ 1427.315303][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1427.470484][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1427.553504][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1427.863183][T13413] loop4: detected capacity change from 0 to 1024 [ 1427.886970][T13413] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1427.949165][T13413] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.18695: lblock 2 mapped to illegal pblock 2 (length 1) [ 1427.949205][T13413] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1427.953835][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1427.953858][ C1] EXT4-fs (loop4): initial error at time 2000000287: ext4_map_blocks:791: inode 3: block 2 [ 1427.953891][ C1] EXT4-fs (loop4): last error at time 2000000287: ext4_map_blocks:791: inode 3: block 2 [ 1427.953985][T13413] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 1427.954039][T13413] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.18695: lblock 0 mapped to illegal pblock 48 (length 1) [ 1427.954072][T13413] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1427.964394][T13413] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 1427.964423][T13413] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.18695: Failed to acquire dquot type 0 [ 1427.964447][T13413] loop4: lost filesystem error report for type 5 error -117 [ 1427.966383][T13413] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1427.966409][T13413] loop4: lost filesystem error report for type 5 error -117 [ 1427.976971][T13413] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.18695: mark_inode_dirty error [ 1427.977004][T13413] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1427.977314][T13413] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 1427.977412][T13413] EXT4-fs (loop4): 1 orphan inode deleted [ 1427.985997][T13413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1428.031040][ T42] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 1428.046670][ T42] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1428.046729][ T42] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 0 [ 1428.330826][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1428.367309][ T67] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 1428.367348][ T67] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1428.368989][ T67] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 1428.369026][ T67] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 1428.369041][ T67] loop4: lost filesystem error report for type 5 error -117 [ 1428.369963][ T5791] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1428.369984][ T5791] loop4: lost filesystem error report for type 5 error -117 [ 1428.370218][ T5791] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 1428.370233][ T5791] loop4: lost filesystem error report for type 5 error -117 [ 1428.372745][ T5791] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 1428.372771][ T5791] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1428.596364][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1428.614662][T27508] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1428.777177][T27508] usb 1-1: Using ep0 maxpacket: 16 [ 1428.788178][T27508] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.788230][T27508] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1428.788246][T27508] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1428.788265][T27508] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1428.788277][T27508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.793583][T27508] usb 1-1: config 0 descriptor?? [ 1428.822875][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1428.942897][T13456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18704'. [ 1429.354198][T27508] petalynx 0003:18B1:0037.0017: reserved main item tag 0xd [ 1429.354235][T27508] petalynx 0003:18B1:0037.0017: unknown main item tag 0x0 [ 1429.354261][T27508] petalynx 0003:18B1:0037.0017: unknown main item tag 0x1 [ 1429.354286][T27508] petalynx 0003:18B1:0037.0017: unknown main item tag 0x0 [ 1429.354312][T27508] petalynx 0003:18B1:0037.0017: unknown main item tag 0x0 [ 1429.354337][T27508] petalynx 0003:18B1:0037.0017: unknown main item tag 0x3 [ 1429.354381][T27508] petalynx 0003:18B1:0037.0017: item fetching failed at offset 43/44 [ 1429.355082][T27508] petalynx 0003:18B1:0037.0017: parse failed [ 1429.355152][T27508] petalynx 0003:18B1:0037.0017: probe with driver petalynx failed with error -22 [ 1429.602539][T27508] usb 1-1: USB disconnect, device number 122 [ 1429.881354][T13500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18736'. [ 1429.961388][T13505] loop3: detected capacity change from 0 to 1024 [ 1430.048281][T13508] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18739'. [ 1430.048306][T13508] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18739'. [ 1430.048322][T13508] netlink: 'syz.4.18739': attribute type 5 has an invalid length. [ 1430.048335][T13508] netlink: 43 bytes leftover after parsing attributes in process `syz.4.18739'. [ 1430.371724][T13515] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1430.414036][ T6048] Flush: task=udevd[6048] dev=loop3 state=2 [ 1430.507182][ T6048] Teardown: task=udevd[6048] dev=loop3 state=2 [ 1431.295482][T13566] netlink: 'syz.3.18768': attribute type 9 has an invalid length. [ 1431.572305][T13581] netlink: 'syz.0.18774': attribute type 8 has an invalid length. [ 1432.026138][T13554] loop4: detected capacity change from 0 to 40427 [ 1432.043032][T13554] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 1432.043057][T13554] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 1432.099463][T13554] F2FS-fs (loop4): invalid crc_offset: 1 [ 1432.626848][T13554] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1432.735415][T13629] loop3: detected capacity change from 0 to 1024 [ 1433.011667][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1433.016055][T13554] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 1433.016093][T13554] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1433.095468][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1433.239957][ T821] usb 1-1: new full-speed USB device number 123 using dummy_hcd [ 1433.421023][ T821] usb 1-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 1433.421070][ T821] usb 1-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1433.421098][ T821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1433.421130][ T821] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1433.421151][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.428092][ T821] usb 1-1: config 0 descriptor?? [ 1433.884564][ T821] uclogic 0003:28BD:0094.0018: interface is invalid, ignoring [ 1434.090761][T13675] netlink: 332 bytes leftover after parsing attributes in process `syz.3.18821'. [ 1434.146570][ T821] usb 1-1: USB disconnect, device number 123 [ 1434.607613][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1434.713488][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1434.833805][T13703] loop3: detected capacity change from 0 to 8 [ 1434.863373][T13703] SQUASHFS error: xz decompression failed, data probably corrupt [ 1434.863406][T13703] SQUASHFS error: Failed to read block 0x108: -5 [ 1434.863423][T13703] SQUASHFS error: Unable to read metadata cache entry [106] [ 1434.863437][T13703] SQUASHFS error: Unable to read inode 0x11f [ 1434.903128][T13703] Flush: task=syz.3.18834[13703] dev=loop3 state=2 [ 1434.985056][T13703] Teardown: task=syz.3.18834[13703] dev=loop3 state=2 [ 1435.077120][T13715] loop0: detected capacity change from 0 to 1024 [ 1435.116563][T13715] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1435.275451][T13724] netlink: 'syz.4.18807': attribute type 1 has an invalid length. [ 1435.275473][T13724] netlink: 5120 bytes leftover after parsing attributes in process `syz.4.18807'. [ 1435.345358][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.487817][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1435.582422][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1436.411646][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1436.411741][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1436.415794][ T6571] kworker/1:8 (6571) used greatest stack depth: 18784 bytes left [ 1436.474064][T13782] loop0: detected capacity change from 0 to 4096 [ 1436.731397][T13795] loop3: detected capacity change from 0 to 1024 [ 1436.739081][T13795] EXT4-fs: Ignoring removed i_version option [ 1436.757293][T13795] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1436.774637][T13798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18878'. [ 1436.774690][T13798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18878'. [ 1436.774709][T13798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1436.813917][T13800] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1436.831279][T13795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1437.033000][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1437.162408][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1437.315082][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1437.460625][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1437.510314][T13825] netlink: 6 bytes leftover after parsing attributes in process `syz.4.18889'. [ 1437.598605][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1438.138667][T13860] loop3: detected capacity change from 0 to 128 [ 1438.150910][T13860] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1438.173758][T13860] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1438.439534][ T42] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1438.447011][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1438.537010][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1438.683396][ T38] audit: type=1326 audit(2000000297.732:620): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=13836 comm="syz.0.18887" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7fc00000 [ 1439.181981][T13908] loop3: detected capacity change from 0 to 16 [ 1439.185380][T13908] erofs (device loop3): mounted with root inode @ nid 36. [ 1439.231405][T13907] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18930'. [ 1439.337740][ T6048] Flush: task=udevd[6048] dev=loop3 state=2 [ 1439.448309][ T6048] Teardown: task=udevd[6048] dev=loop3 state=2 [ 1440.309554][T13914] loop3: detected capacity change from 0 to 32768 [ 1440.321101][T13914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.18934 (13914) [ 1440.365823][T13914] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1440.365860][T13914] BTRFS info (device loop3): using crc32c checksum algorithm [ 1440.521337][T13914] BTRFS info (device loop3): enabling ssd optimizations [ 1440.521364][T13914] BTRFS info (device loop3): disabling tree log [ 1440.521381][T13914] BTRFS info (device loop3): turning on flush-on-commit [ 1440.521398][T13914] BTRFS info (device loop3): turning on async discard [ 1440.521414][T13914] BTRFS info (device loop3): enabling free space tree [ 1440.521430][T13914] BTRFS info (device loop3): enabling auto defrag [ 1440.521448][T13914] BTRFS info (device loop3): force zlib compression, level 3 [ 1440.521469][T13914] BTRFS info (device loop3): max_inline set to 0 [ 1440.663217][ T38] audit: type=1800 audit(2000000299.550:621): pid=13914 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.3.18934" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 1441.582535][T13955] loop4: detected capacity change from 0 to 32768 [ 1441.665493][T13955] JBD2: Ignoring recovery information on journal [ 1441.813815][T13955] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1442.889141][ T5791] ocfs2: Unmounting device (7,4) on (node local) [ 1443.012615][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1443.316469][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1443.417790][ T5794] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1443.652196][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1443.812147][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1444.240719][T14050] loop0: detected capacity change from 0 to 32768 [ 1444.434689][T14050] jfs_lookup: iget failed on inum 5 [ 1444.665450][T14096] use of bytesused == 0 is deprecated and will be removed in the future, [ 1444.665467][T14096] use the actual size instead. [ 1444.672352][T14050] jfs_lookup: iget failed on inum 5 [ 1445.587758][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1445.725505][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1446.145038][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19045'. [ 1446.432280][T14172] loop3: detected capacity change from 0 to 4096 [ 1446.449551][T14172] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1446.462917][T14172] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1446.482899][T14172] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 1446.483035][T14172] System zones: 0-5 [ 1446.497548][T14172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1446.875892][ T38] audit: type=1326 audit(2000000305.293:622): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1446.905490][ T38] audit: type=1326 audit(2000000305.293:623): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1446.952264][ T38] audit: type=1326 audit(2000000305.357:624): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1446.952390][ T38] audit: type=1326 audit(2000000305.357:625): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1446.959580][ T38] audit: type=1326 audit(2000000305.376:626): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1446.959699][ T38] audit: type=1326 audit(2000000305.376:627): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1446.960808][ T38] audit: type=1326 audit(2000000305.376:628): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1446.961142][ T38] audit: type=1326 audit(2000000305.376:629): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1446.961459][ T38] audit: type=1326 audit(2000000305.376:630): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14187 comm="syz.4.19057" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1447.296539][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1447.436030][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1447.560456][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1449.162171][T14278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19101'. [ 1449.595368][T14298] loop4: detected capacity change from 0 to 1024 [ 1449.613780][T14298] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 1449.690530][T14305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19114'. [ 1449.842864][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1449.921082][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1450.426992][T14336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19130'. [ 1450.427024][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19130'. [ 1450.779385][T14361] loop4: detected capacity change from 0 to 128 [ 1450.880309][T14361] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1450.880747][T14361] ext4 filesystem being mounted at /3050/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.118867][ T5791] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1451.139297][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1451.276863][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1451.315824][T14381] loop4: detected capacity change from 0 to 512 [ 1451.363164][T14381] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.363405][T14381] ext4 filesystem being mounted at /3051/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.558336][T14393] loop0: detected capacity change from 0 to 256 [ 1451.560259][T14382] loop3: detected capacity change from 0 to 4096 [ 1451.582969][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.600894][T14382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.719062][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1451.846542][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.852096][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1451.879494][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1452.111807][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1452.149118][ T6062] Flush: task=udevd[6062] dev=loop3 state=2 [ 1452.242062][ T6062] Teardown: task=udevd[6062] dev=loop3 state=2 [ 1453.074478][T14417] loop3: detected capacity change from 0 to 32768 [ 1453.100185][T14417] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1453.262472][T14417] XFS (loop3): Ending clean mount [ 1453.422851][ T5794] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1454.055945][T14498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19204'. [ 1454.055974][T14498] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1454.148433][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1454.254700][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1454.795300][ T821] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1454.971127][ T821] usb 1-1: Using ep0 maxpacket: 32 [ 1454.976856][ T821] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1454.976889][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1454.976907][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1454.976931][ T821] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1454.976943][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.995630][ T821] usb 1-1: config 0 descriptor?? [ 1455.202927][T14513] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1455.238660][ T821] hub 1-1:0.0: USB hub found [ 1455.487752][ T821] hub 1-1:0.0: 2 ports detected [ 1456.024056][ T821] hub 1-1:0.0: set hub depth failed [ 1456.033912][ T821] usb 1-1: USB disconnect, device number 124 [ 1456.189247][T14573] loop4: detected capacity change from 0 to 512 [ 1456.220240][T14573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1456.220368][T14573] ext4 filesystem being mounted at /3065/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1456.292891][T14573] EXT4-fs: Ignoring sb option on remount [ 1456.293046][T14573] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1456.419032][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1456.617543][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1456.636795][ T5733] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1456.702426][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1456.799173][ T5733] usb 4-1: Using ep0 maxpacket: 8 [ 1456.801434][ T5733] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1456.801482][ T5733] usb 4-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 1456.801505][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.806733][ T5733] usb 4-1: config 0 descriptor?? [ 1457.065798][T14606] loop4: detected capacity change from 0 to 256 [ 1457.083830][T14606] exfat: Deprecated parameter 'utf8' [ 1457.131902][T14606] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1457.247541][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1457.295472][ T5733] itetech 0003:258A:6A88.0019: unknown main item tag 0x3 [ 1457.295507][ T5733] itetech 0003:258A:6A88.0019: unknown main item tag 0x0 [ 1457.295533][ T5733] itetech 0003:258A:6A88.0019: unknown main item tag 0x0 [ 1457.295558][ T5733] itetech 0003:258A:6A88.0019: unknown main item tag 0x0 [ 1457.295582][ T5733] itetech 0003:258A:6A88.0019: unknown main item tag 0x0 [ 1457.295607][ T5733] itetech 0003:258A:6A88.0019: unknown main item tag 0x0 [ 1457.295632][ T5733] itetech 0003:258A:6A88.0019: unknown main item tag 0x0 [ 1457.295668][ T5733] itetech 0003:258A:6A88.0019: unknown main item tag 0x0 [ 1457.419890][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1457.448580][ T5733] itetech 0003:258A:6A88.0019: hidraw0: USB HID v10.05 Device [HID 258a:6a88] on usb-dummy_hcd.3-1/input0 [ 1457.489471][ T5733] usb 4-1: USB disconnect, device number 9 [ 1457.587869][T14621] loop4: detected capacity change from 0 to 4096 [ 1457.657803][T14624] fido_id[14624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1457.778104][T14630] loop0: detected capacity change from 0 to 256 [ 1457.779461][T14630] exfat: Deprecated parameter 'namecase' [ 1457.789943][T14629] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1457.876245][T14630] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d) [ 1458.143553][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1458.150198][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1458.231565][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1458.251218][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1458.419388][T14655] openvswitch: netlink: Actions may not be safe on all matching packets [ 1459.329217][T14706] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1459.832232][ T5733] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1459.881939][T14735] loop4: detected capacity change from 0 to 256 [ 1460.020223][ T5733] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1460.020283][ T5733] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1460.020311][ T5733] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1460.020344][ T5733] usb 1-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00 [ 1460.020367][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.043863][ T5733] usb 1-1: config 0 descriptor?? [ 1460.264003][T14722] syz.3.19308 (14722) used greatest stack depth: 18568 bytes left [ 1460.472421][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1460.533426][ T5733] hid (null): invalid report_size 27446 [ 1460.575643][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1460.601392][ T5733] lg-g15 0003:046D:C22D.001A: unknown main item tag 0x1 [ 1460.601467][ T5733] lg-g15 0003:046D:C22D.001A: invalid report_size 27446 [ 1460.601483][ T5733] lg-g15 0003:046D:C22D.001A: item 0 4 1 7 parsing failed [ 1460.705721][ T5733] lg-g15 0003:046D:C22D.001A: probe with driver lg-g15 failed with error -22 [ 1460.764343][ T5733] usb 1-1: USB disconnect, device number 125 [ 1460.899150][T14770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19334'. [ 1461.442939][T14798] loop4: detected capacity change from 0 to 1024 [ 1461.577887][ T6062] Flush: task=udevd[6062] dev=loop4 state=2 [ 1461.678982][ T6062] Teardown: task=udevd[6062] dev=loop4 state=2 [ 1462.342067][ T38] audit: type=1326 audit(2000000319.574:631): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.342218][ T38] audit: type=1326 audit(2000000319.574:632): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.344278][ T38] audit: type=1326 audit(2000000319.574:633): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.344323][ T38] audit: type=1326 audit(2000000319.574:634): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.347362][ T38] audit: type=1326 audit(2000000319.584:635): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.347407][ T38] audit: type=1326 audit(2000000319.584:636): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.347446][ T38] audit: type=1326 audit(2000000319.584:637): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.349110][ T38] audit: type=1326 audit(2000000319.584:638): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.349165][ T38] audit: type=1326 audit(2000000319.584:639): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=14851 comm="syz.4.19371" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1462.663537][T14864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19377'. [ 1463.419344][T14911] loop3: detected capacity change from 0 to 256 [ 1463.616977][T14916] loop4: detected capacity change from 0 to 4096 [ 1463.647339][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1463.684959][T14916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1463.748331][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1464.135256][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1464.213255][T14951] loop3: detected capacity change from 0 to 512 [ 1464.229054][T14951] EXT4-fs: Ignoring removed bh option [ 1464.269264][T14951] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1464.269296][T14951] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 1464.269312][T14951] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.19419: Corrupt directory, running e2fsck is recommended [ 1464.271183][T14951] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 1464.271313][T14951] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.19419: corrupted in-inode xattr: e_name out of bounds [ 1464.271341][T14951] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1464.273124][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1464.273144][ C1] EXT4-fs (loop3): initial error at time 2000000321: ext4_iget_extra_inode:5180: inode 15 [ 1464.273173][ C1] EXT4-fs (loop3): last error at time 2000000321: ext4_iget_extra_inode:5180: inode 15 [ 1464.366382][T14951] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.19419: couldn't read orphan inode 15 (err -117) [ 1464.366422][T14951] loop3: lost filesystem error report for type 5 error -117 [ 1464.388192][T14951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1464.521551][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.542332][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.659356][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1464.682454][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1464.807418][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1464.845585][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1465.443716][T15002] atomic_op ffff88806371f218 conn xmit_atomic 0000000000000000 [ 1465.671738][T15015] loop4: detected capacity change from 0 to 8 [ 1465.981197][ T6048] Flush: task=udevd[6048] dev=loop4 state=2 [ 1466.075077][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19457'. [ 1466.096197][ T6048] Teardown: task=udevd[6048] dev=loop4 state=2 [ 1466.598390][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19467'. [ 1466.598418][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19467'. [ 1466.598495][T15051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19467'. [ 1466.988386][T15069] loop3: detected capacity change from 0 to 1024 [ 1467.008254][T15069] EXT4-fs: inline encryption not supported [ 1467.017374][T15071] netlink: 348 bytes leftover after parsing attributes in process `syz.4.19475'. [ 1467.067463][T15069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1467.267288][T15069] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 50331673 free clusters [ 1467.444466][T15086] veth1_macvtap: left promiscuous mode [ 1467.444498][T15086] macsec0: entered promiscuous mode [ 1467.471425][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.630485][T15087] veth1_macvtap: entered promiscuous mode [ 1467.637162][T15087] macsec0: left promiscuous mode [ 1467.817392][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1467.891745][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1468.035408][T15113] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1468.395577][T15130] loop4: detected capacity change from 0 to 1024 [ 1468.401311][T15130] EXT4-fs: Ignoring removed bh option [ 1468.539665][T15130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.759938][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.882210][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1468.977184][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1469.823651][T15199] loop4: detected capacity change from 0 to 4096 [ 1470.291506][ T6048] Flush: task=udevd[6048] dev=loop4 state=2 [ 1470.642672][T15194] loop3: detected capacity change from 0 to 40427 [ 1470.662819][T15194] F2FS-fs (loop3): Image doesn't support compression [ 1470.662841][T15194] F2FS-fs (loop3): build fault injection rate: 690 [ 1470.666813][T15194] F2FS-fs (loop3): build fault injection type: 0x4 [ 1470.673984][T15194] F2FS-fs (loop3): invalid crc value [ 1470.929973][ T6048] Teardown: task=udevd[6048] dev=loop4 state=2 [ 1471.051889][T15245] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 1471.159672][T15194] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1471.477145][T15194] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1471.613200][T15194] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 1472.058898][T15282] loop4: detected capacity change from 0 to 64 [ 1472.407886][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1472.494079][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1472.611129][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1472.714181][T15299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19585'. [ 1472.714204][T15299] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19585'. [ 1472.714221][T15299] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19585'. [ 1472.734580][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1472.967711][T15310] loop0: detected capacity change from 0 to 256 [ 1473.018157][T15310] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 1473.037555][T15310] netlink: 84 bytes leftover after parsing attributes in process `syz.0.19588'. [ 1473.188612][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1473.285711][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1473.829337][T15349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19606'. [ 1474.285811][T15369] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1474.371211][T15369] overlayfs: overlapping lowerdir path [ 1474.831425][T15392] loop4: detected capacity change from 0 to 16 [ 1474.834073][T15392] erofs (device loop4): mounted with root inode @ nid 36. [ 1474.970152][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1475.073591][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1475.349754][T15356] loop3: detected capacity change from 0 to 40427 [ 1475.356437][T15356] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1475.356461][T15356] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1475.358055][T15356] F2FS-fs (loop3): invalid crc value [ 1475.702530][T15356] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1476.026401][T15356] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1476.026431][T15356] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1478.119410][ T1030] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.153319][T15519] Zero length message leads to an empty skb [ 1478.189387][ T1030] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.189418][ T1030] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1478.189438][ T1030] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1479.488181][ T1011] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1479.795794][ T1011] usb 1-1: Using ep0 maxpacket: 16 [ 1479.797905][ T1011] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 1479.800269][ T1011] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1479.800296][ T1011] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.800316][ T1011] usb 1-1: Product: syz [ 1479.800330][ T1011] usb 1-1: Manufacturer: syz [ 1479.800344][ T1011] usb 1-1: SerialNumber: syz [ 1479.806386][ T1011] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1479.806410][ T1011] r8152-cfgselector 1-1: config 0 descriptor?? [ 1479.869183][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1479.977037][T15592] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 1479.994399][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1480.288908][ T5733] r8152-cfgselector 1-1: USB disconnect, device number 126 [ 1480.876761][T15634] loop4: detected capacity change from 0 to 64 [ 1481.181496][T15643] sctp: [Deprecated]: syz.0.19746 (pid 15643) Use of int in maxseg socket option. [ 1481.181496][T15643] Use struct sctp_assoc_value instead [ 1481.352514][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1481.468367][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1482.394989][T15686] loop4: detected capacity change from 0 to 4096 [ 1482.557806][T15697] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1482.919102][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1483.066925][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1483.292326][T15723] netlink: 'syz.0.19785': attribute type 1 has an invalid length. [ 1483.292348][T15723] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.19785'. [ 1483.292389][T15723] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.19785'. [ 1483.950911][T15759] loop3: detected capacity change from 0 to 256 [ 1484.137204][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1484.215138][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1484.289956][T15771] netlink: 'syz.4.19807': attribute type 1 has an invalid length. [ 1484.289981][T15771] netlink: 220 bytes leftover after parsing attributes in process `syz.4.19807'. [ 1484.383720][T15774] loop3: detected capacity change from 0 to 1024 [ 1484.645350][T27508] kernel write not supported for file [eventfd] (pid: 27508 comm: kworker/0:0) [ 1484.775616][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1484.792319][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19819'. [ 1484.856368][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1485.124987][T15813] loop4: detected capacity change from 0 to 1024 [ 1485.165059][T15813] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1485.165092][T15813] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1485.165201][T15813] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1485.165551][T15813] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.19826: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1485.165591][T15813] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1485.167552][T15813] EXT4-fs (loop4): no journal found [ 1485.167570][T15813] EXT4-fs (loop4): can't get journal size [ 1485.178664][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 1485.178685][ C1] EXT4-fs (loop4): initial error at time 2000000340: ext4_ext_check_inode:521: inode 3 [ 1485.178713][ C1] EXT4-fs (loop4): last error at time 2000000340: ext4_ext_check_inode:521: inode 3 [ 1485.270824][T15813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1485.447569][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1485.552284][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1485.679912][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1486.048490][T15857] loop0: detected capacity change from 0 to 164 [ 1486.070297][T15857] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1486.187128][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1486.261943][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1486.631286][ T5733] kernel read not supported for file /vga_arbiter (pid: 5733 comm: kworker/0:4) [ 1487.247733][ T5733] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 1487.410213][T27508] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1487.413831][ T5733] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 1487.413864][ T5733] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1487.413891][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1487.413923][ T5733] usb 4-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1487.413946][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.474546][ T5733] usb 4-1: config 0 descriptor?? [ 1487.476061][T15906] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1487.586446][T27508] usb 1-1: too many endpoints for config 0 interface 0 altsetting 15: 254, using maximum allowed: 30 [ 1487.586552][T27508] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 1487.586582][T27508] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1487.586608][T27508] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1487.586641][T27508] usb 1-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 1487.586664][T27508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.660645][T27508] usb 1-1: config 0 descriptor?? [ 1487.972136][ T5733] kye 0003:0458:5019.001B: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1487.978862][T15954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19894'. [ 1488.002407][ T5733] kye 0003:0458:5019.001B: unknown main item tag 0x7 [ 1488.002445][ T5733] kye 0003:0458:5019.001B: unknown main item tag 0x0 [ 1488.002582][ T5733] kye 0003:0458:5019.001B: unknown main item tag 0x1 [ 1488.002610][ T5733] kye 0003:0458:5019.001B: reserved main item tag 0xd [ 1488.002686][ T5733] kye 0003:0458:5019.001B: item fetching failed at offset 38/41 [ 1488.042031][ T5733] kye 0003:0458:5019.001B: parse failed [ 1488.042152][ T5733] kye 0003:0458:5019.001B: probe with driver kye failed with error -22 [ 1488.107054][T27508] hid (null): unknown global tag 0xd [ 1488.113405][T27508] wacom 0003:056A:0026.001C: collection stack underflow [ 1488.113437][T27508] wacom 0003:056A:0026.001C: item 0 1 0 12 parsing failed [ 1488.123309][T27508] wacom 0003:056A:0026.001C: parse failed [ 1488.123431][T27508] wacom 0003:056A:0026.001C: probe with driver wacom failed with error -22 [ 1488.161305][ T5796] usb 4-1: USB disconnect, device number 10 [ 1488.361374][T27508] usb 1-1: USB disconnect, device number 127 [ 1488.628588][T15984] loop4: detected capacity change from 0 to 512 [ 1488.651307][T15984] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c019, mo2=0002] [ 1488.651454][T15984] System zones: 1-12 [ 1488.653592][T15984] EXT4-fs warning (device loop4): ext4_xattr_inode_get:546: inode #11: comm syz.4.19910: ea_inode file size=0 entry size=6 [ 1488.653892][T15984] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.19910: iget: bad extra_isize 90 (inode size 256) [ 1488.653921][T15984] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1488.659430][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 1488.659456][ C0] EXT4-fs (loop4): initial error at time 2000000343: ext4_xattr_inode_iget:441: inode 11 [ 1488.659486][ C0] EXT4-fs (loop4): last error at time 2000000343: ext4_xattr_inode_iget:441: inode 11 [ 1488.787574][T15984] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.19910: error while reading EA inode 11 err=-117 [ 1488.787608][T15984] loop4: lost filesystem error report for type 5 error -117 [ 1488.788697][T15984] EXT4-fs (loop4): 1 orphan inode deleted [ 1488.804529][T15984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1488.837330][T15984] EXT4-fs error (device loop4): ext4_nfs_get_inode:1578: inode #11: comm syz.4.19910: iget: bad extra_isize 90 (inode size 256) [ 1488.947771][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.135600][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1489.263204][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1489.899190][ T38] audit: type=1326 audit(2000000345.009:640): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.899735][T16043] loop4: detected capacity change from 0 to 2048 [ 1489.932477][ T38] audit: type=1326 audit(2000000345.009:641): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.964381][ T38] audit: type=1326 audit(2000000345.073:642): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.991158][ T38] audit: type=1326 audit(2000000345.073:643): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.991211][ T38] audit: type=1326 audit(2000000345.073:644): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.992282][ T38] audit: type=1326 audit(2000000345.101:645): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.992331][ T38] audit: type=1326 audit(2000000345.101:646): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.995555][ T38] audit: type=1326 audit(2000000345.101:647): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.995838][ T38] audit: type=1326 audit(2000000345.101:648): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1489.996322][ T38] audit: type=1326 audit(2000000345.101:649): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16047 comm="syz.0.19940" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f2c8d2ede59 code=0x7ffc0000 [ 1490.023506][T16043] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1490.328251][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1490.443920][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1490.467566][T16069] loop0: detected capacity change from 0 to 1024 [ 1490.512349][T16069] Flush: task=syz.0.19952[16069] dev=loop0 state=2 [ 1490.595753][T16069] Teardown: task=syz.0.19952[16069] dev=loop0 state=2 [ 1490.727062][T16079] usb usb7: usbfs: process 16079 (syz.3.19955) did not claim interface 0 before use [ 1490.959053][T16091] sctp: [Deprecated]: syz.3.19960 (pid 16091) Use of int in max_burst socket option. [ 1490.959053][T16091] Use struct sctp_assoc_value instead [ 1491.097756][T16101] loop0: detected capacity change from 0 to 128 [ 1491.134370][T16101] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1491.134406][T16101] hpfs: filesystem error: improperly stopped [ 1491.134420][T16101] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1491.134433][T16101] hpfs: You really don't want any checks? You are crazy... [ 1491.134447][T16101] hpfs: Code page index out of array [ 1491.134454][T16101] hpfs: code page support is disabled [ 1491.134575][T16101] hpfs: hpfs_map_4sectors(): unaligned read [ 1491.134656][T16101] hpfs: hpfs_map_4sectors(): unaligned read [ 1491.134667][T16101] hpfs: filesystem error: unable to find root dir [ 1491.184208][T16101] hpfs: hpfs_map_4sectors(): unaligned read [ 1491.492504][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1491.591792][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1491.598737][T16120] team0: entered allmulticast mode [ 1491.598760][T16120] team_slave_0: entered allmulticast mode [ 1491.598783][T16120] team_slave_1: entered allmulticast mode [ 1491.600587][T16120] team0: Cannot enslave team device to itself [ 1492.977445][T16192] gretap0: entered promiscuous mode [ 1493.606030][ T1011] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1493.705511][T16231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20029'. [ 1493.765679][T16231] veth4: entered promiscuous mode [ 1493.765701][T16231] veth4: entered allmulticast mode [ 1493.778967][ T1011] usb 5-1: Using ep0 maxpacket: 32 [ 1493.786615][ T1011] usb 5-1: config 0 has no interfaces? [ 1493.797275][ T1011] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1493.797301][ T1011] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.797311][ T1011] usb 5-1: Product: syz [ 1493.797319][ T1011] usb 5-1: Manufacturer: syz [ 1493.797326][ T1011] usb 5-1: SerialNumber: syz [ 1493.811220][ T1011] usb 5-1: config 0 descriptor?? [ 1494.078128][ T5733] usb 5-1: USB disconnect, device number 7 [ 1494.349250][T16259] loop0: detected capacity change from 0 to 4096 [ 1494.426817][T16259] NILFS (loop0): invalid segment: Checksum error in segment payload [ 1494.426844][T16259] NILFS (loop0): trying rollback from an earlier position [ 1494.526992][T16259] NILFS (loop0): recovery complete [ 1494.593764][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1494.775987][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1495.557940][T16317] loop0: detected capacity change from 0 to 1024 [ 1496.403335][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1496.499799][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1496.854092][T16371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20100'. [ 1497.008802][T16379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20104'. [ 1497.010878][T16379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.20104'. [ 1497.104666][ T5733] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 1497.180117][T16389] netlink: 'syz.4.20107': attribute type 1 has an invalid length. [ 1497.180154][T16389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1497.234742][T27508] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1497.281346][ T5733] usb 4-1: config 127 has an invalid interface number: 57 but max is 0 [ 1497.281375][ T5733] usb 4-1: config 127 has no interface number 0 [ 1497.281421][ T5733] usb 4-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1497.284379][ T5733] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 1497.284407][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.284424][ T5733] usb 4-1: Product: syz [ 1497.284437][ T5733] usb 4-1: Manufacturer: syz [ 1497.284449][ T5733] usb 4-1: SerialNumber: syz [ 1497.359183][T16369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1497.418233][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1497.456499][T27508] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.456527][T27508] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1497.456549][T27508] usb 1-1: config 1 has no interface number 0 [ 1497.456661][T27508] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1497.486497][T27508] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1497.486526][T27508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.486596][T27508] usb 1-1: Product: syz [ 1497.486610][T27508] usb 1-1: Manufacturer: syz [ 1497.486623][T27508] usb 1-1: SerialNumber: syz [ 1497.509500][T16402] netlink: 'syz.4.20115': attribute type 12 has an invalid length. [ 1497.509521][T16402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.20115'. [ 1497.809105][T16369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1497.842679][T27508] usb 1-1: selecting invalid altsetting 1 [ 1497.966078][T16417] loop4: detected capacity change from 0 to 4096 [ 1498.053005][ T5733] asix 4-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1498.070002][ T5733] asix 4-1:127.57: probe with driver asix failed with error -71 [ 1498.181134][ T5733] usb 4-1: USB disconnect, device number 11 [ 1498.294573][T27508] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 1498.294617][T27508] cdc_ncm 1-1:1.1: bind() failure [ 1498.333465][T16429] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1498.354073][T27508] usb 1-1: USB disconnect, device number 2 [ 1498.510326][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1498.600047][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1498.901091][T16458] loop4: detected capacity change from 0 to 1024 [ 1498.912852][T16458] EXT4-fs: Ignoring removed bh option [ 1499.009100][T16458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1499.047066][T16458] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=1024, device loop4 blocksize: 1024 [ 1499.047099][T16458] grow_buffers: requested out-of-range block 144115188075855872 for device loop4 [ 1499.047117][T16458] EXT4-fs warning (device loop4): ext4_resize_fs:2018: can't read last block, resize aborted [ 1499.136161][T16469] openvswitch: netlink: Unexpected mask (mask=4, allowed=10048) [ 1499.300237][T16478] netlink: 256 bytes leftover after parsing attributes in process `syz.0.20152'. [ 1499.300262][T16478] netlink: 56 bytes leftover after parsing attributes in process `syz.0.20152'. [ 1499.377889][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1499.614380][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1499.717255][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1500.296007][T16524] netlink: 'syz.0.20171': attribute type 4 has an invalid length. [ 1500.299431][T16524] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.20171'. [ 1500.476932][T16536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20180'. [ 1501.206573][T16573] loop0: detected capacity change from 0 to 256 [ 1501.355850][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1501.400240][T16578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1501.451113][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1501.565414][T16578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.894722][T16578] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1502.088008][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 1502.088026][ T38] audit: type=1326 audit(2000000356.272:654): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16601 comm="syz.3.20210" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1502.088137][ T38] audit: type=1326 audit(2000000356.272:655): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16601 comm="syz.3.20210" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1502.089203][ T38] audit: type=1326 audit(2000000356.272:656): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16601 comm="syz.3.20210" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1502.089824][ T38] audit: type=1326 audit(2000000356.272:657): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=16601 comm="syz.3.20210" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1502.478312][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20218'. [ 1502.485830][T16578] bond0 (unregistering): Released all slaves [ 1502.938629][ T5796] !yz!: Port: 1 Link DOWN [ 1502.962525][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 1502.962617][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 1503.290717][ T1653] smbdirect: ib_dev[!yz!] removed [ 1503.524005][T16674] loop3: detected capacity change from 0 to 64 [ 1503.554547][T16664] loop0: detected capacity change from 0 to 4096 [ 1503.574535][T16664] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 1503.689197][T16664] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 1503.698941][T16664] ntfs3(loop0): Inode r=b is not in use! [ 1503.699034][T16664] ntfs3(loop0): Failed to load $Extend (-116). [ 1503.699052][T16664] ntfs3(loop0): Failed to initialize $Extend. [ 1503.751217][ T6048] Flush: task=udevd[6048] dev=loop3 state=2 [ 1503.957532][ T6048] Teardown: task=udevd[6048] dev=loop3 state=2 [ 1504.190812][T16696] devpts: Bad value for 'uid' [ 1504.190832][T16696] devpts: Bad value for 'uid' [ 1504.306929][ T6062] Flush: task=udevd[6062] dev=loop0 state=2 [ 1504.416615][ T6062] Teardown: task=udevd[6062] dev=loop0 state=2 [ 1505.196001][T16726] bond0 (unregistering): Released all slaves [ 1505.660509][T16770] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 1505.804471][T16777] netlink: 'syz.3.20293': attribute type 1 has an invalid length. [ 1505.804495][T16777] netlink: 232 bytes leftover after parsing attributes in process `syz.3.20293'. [ 1505.804512][T16777] netlink: 'syz.3.20293': attribute type 1 has an invalid length. [ 1506.075106][ T821] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1506.238627][ T821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.238694][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1506.238718][ T821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1506.238738][ T821] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1506.238777][ T821] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1506.238799][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.257327][ T821] usb 1-1: config 0 descriptor?? [ 1506.415254][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20312'. [ 1506.594163][ T5796] usb 1-1: USB disconnect, device number 3 [ 1507.707462][T16876] netlink: 91 bytes leftover after parsing attributes in process `syz.4.20344'. [ 1507.907959][T16884] ptrace attach of "ci-upstream-linux-next-kasan-gce-root/syz-executor exec"[5791] was attempted by ""[16884] [ 1508.129403][T16893] loop3: detected capacity change from 0 to 64 [ 1508.386026][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1508.390024][T16894] loop4: detected capacity change from 0 to 4096 [ 1508.405562][T16894] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 1508.641474][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1508.668610][T16894] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 1508.790849][T16894] ntfs3(loop4): Inode r=b is not in use! [ 1508.790939][T16894] ntfs3(loop4): Failed to load $Extend (-116). [ 1508.790954][T16894] ntfs3(loop4): Failed to initialize $Extend. [ 1509.107415][ T6048] Flush: task=udevd[6048] dev=loop4 state=2 [ 1509.182908][ T6048] Teardown: task=udevd[6048] dev=loop4 state=2 [ 1509.222106][T16930] loop4: detected capacity change from 0 to 512 [ 1509.312441][T16930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.312576][T16930] ext4 filesystem being mounted at /3221/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1509.458802][T16930] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 1509.511642][T16930] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 1509.660347][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1509.660948][T16952] loop3: detected capacity change from 0 to 4096 [ 1509.758618][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1509.793688][T16952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1509.832676][T16952] __find_get_block_slow() failed. block=144115188075855872, b_blocknr=0, b_state=0x00000019, b_size=4096, device loop3 blocksize: 4096 [ 1509.832707][T16952] grow_buffers: requested out-of-range block 144115188075855872 for device loop3 [ 1509.832723][T16952] EXT4-fs warning (device loop3): ext4_resize_fs:2018: can't read last block, resize aborted [ 1509.887358][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1509.996763][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.336306][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1510.437849][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1510.571902][T16943] loop0: detected capacity change from 0 to 32768 [ 1510.863658][T16943] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 1511.643366][ T5790] ocfs2: Unmounting device (7,0) on (node local) [ 1511.731479][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1511.804358][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1512.299518][T17040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.20405'. [ 1512.301903][T17040] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20405'. [ 1512.508816][T17052] netlink: 'syz.4.20428': attribute type 32 has an invalid length. [ 1512.508845][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20428'. [ 1512.677430][T17052] bond0: Setting coupled_control to off (0) [ 1513.288389][ T821] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1513.448230][T17100] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 1513.448230][T17100] program syz.4.20451 not setting count and/or reply_len properly [ 1513.464394][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 1513.477850][ T821] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1513.477879][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.477898][ T821] usb 4-1: Product: syz [ 1513.477911][ T821] usb 4-1: Manufacturer: syz [ 1513.477925][ T821] usb 4-1: SerialNumber: syz [ 1513.512372][ T821] usb 4-1: config 0 descriptor?? [ 1513.562145][ T821] gspca_main: se401-2.14.0 probing 047d:5003 [ 1513.709488][T17110] loop4: detected capacity change from 0 to 1024 [ 1514.016995][ T821] gspca_se401: Wrong descriptor type [ 1514.259453][ T821] usb 4-1: USB disconnect, device number 12 [ 1514.554786][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1514.633639][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1515.111454][T17162] loop4: detected capacity change from 0 to 512 [ 1515.170637][T17162] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1515.196027][T17162] EXT4-fs (loop4): 1 truncate cleaned up [ 1515.218234][T17162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1515.342222][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.377490][T17173] netlink: 56 bytes leftover after parsing attributes in process `syz.3.20486'. [ 1515.456173][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1515.564983][T17182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20491'. [ 1515.566075][T17182] netlink: 'syz.3.20491': attribute type 14 has an invalid length. [ 1515.566091][T17182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20491'. [ 1515.566419][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1516.036992][T17204] loop0: detected capacity change from 0 to 136 [ 1516.052170][T17192] loop4: detected capacity change from 0 to 8192 [ 1516.169041][T17210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20504'. [ 1516.317186][ T5790] Flush: task=syz-executor[5790] dev=loop0 state=2 [ 1516.350674][ T38] audit: type=1326 audit(2000000369.427:658): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.354010][ T38] audit: type=1326 audit(2000000369.427:659): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.362166][ T38] audit: type=1326 audit(2000000369.446:660): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.362215][ T38] audit: type=1326 audit(2000000369.446:661): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.364661][ T38] audit: type=1326 audit(2000000369.455:662): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.364705][ T38] audit: type=1326 audit(2000000369.455:663): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.364745][ T38] audit: type=1326 audit(2000000369.455:664): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.365686][ T38] audit: type=1326 audit(2000000369.455:665): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.365732][ T38] audit: type=1326 audit(2000000369.455:666): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.368292][ T38] audit: type=1326 audit(2000000369.455:667): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17214 comm="syz.3.20507" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fbea1bdde59 code=0x7ffc0000 [ 1516.436856][ T6363] Flush: task=udevd[6363] dev=loop4 state=2 [ 1516.495271][ T5790] Teardown: task=syz-executor[5790] dev=loop0 state=2 [ 1516.646153][ T6363] Teardown: task=udevd[6363] dev=loop4 state=2 [ 1516.909599][T17238] loop4: detected capacity change from 0 to 512 [ 1516.997533][T17238] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.997621][T17238] ext4 filesystem being mounted at /3243/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.076760][T17238] EXT4-fs: Cannot change journaled quota options when quota turned on [ 1517.228634][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.376274][T17260] netlink: 88 bytes leftover after parsing attributes in process `syz.0.20528'. [ 1517.423860][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1517.555616][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1517.890445][T17274] wireguard: wg2: Could not create IPv4 socket [ 1518.929183][T17336] netlink: 'syz.4.20565': attribute type 8 has an invalid length. [ 1519.618879][T17371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20582'. [ 1520.263216][ T5733] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1520.425766][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 1520.427448][ T5733] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1520.427473][ T5733] usb 4-1: config 0 has no interface number 0 [ 1520.429845][ T5733] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1520.429871][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.429891][ T5733] usb 4-1: Product: syz [ 1520.429901][ T5733] usb 4-1: Manufacturer: syz [ 1520.429908][ T5733] usb 4-1: SerialNumber: syz [ 1520.446310][ T5733] usb 4-1: config 0 descriptor?? [ 1520.518046][ T5733] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1520.518076][ T5733] usb 4-1: selecting invalid altsetting 1 [ 1520.518092][ T5733] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1520.588833][ T5733] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1520.589046][ T5733] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1520.589612][ T5733] usb 4-1: media controller created [ 1520.824374][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1521.121877][ T5733] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1521.121933][ T5733] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1521.122389][ T5733] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1521.428043][ T5733] usb 4-1: USB disconnect, device number 13 [ 1521.470289][ T6048] udevd[6048]: setting owner of /dev/bus/usb/004/013 to uid=0, gid=0 failed: No such file or directory [ 1521.942180][ T5796] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 1522.103504][T17498] netlink: 260 bytes leftover after parsing attributes in process `syz.4.20644'. [ 1522.116263][ T5796] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1522.116303][ T5796] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1522.116326][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.156434][ T5796] usb 4-1: config 0 descriptor?? [ 1522.291166][T17503] netlink: 56 bytes leftover after parsing attributes in process `syz.4.20647'. [ 1522.615446][ T5796] microsoft 0003:045E:00F9.001D: unknown main item tag 0x0 [ 1522.615480][ T5796] microsoft 0003:045E:00F9.001D: unknown main item tag 0x0 [ 1522.615508][ T5796] microsoft 0003:045E:00F9.001D: unknown main item tag 0x0 [ 1522.615534][ T5796] microsoft 0003:045E:00F9.001D: unknown main item tag 0x0 [ 1522.615560][ T5796] microsoft 0003:045E:00F9.001D: unknown main item tag 0x0 [ 1522.615586][ T5796] microsoft 0003:045E:00F9.001D: unknown main item tag 0x0 [ 1522.615611][ T5796] microsoft 0003:045E:00F9.001D: unknown main item tag 0x0 [ 1522.615636][ T5796] microsoft 0003:045E:00F9.001D: unknown main item tag 0x0 [ 1522.615709][ T5796] microsoft 0003:045E:00F9.001D: item fetching failed at offset 38/39 [ 1522.618241][ T5796] microsoft 0003:045E:00F9.001D: parse failed [ 1522.618358][ T5796] microsoft 0003:045E:00F9.001D: probe with driver microsoft failed with error -22 [ 1522.831067][ T5796] usb 4-1: USB disconnect, device number 14 [ 1522.915902][T17533] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1523.824501][T17564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20676'. [ 1524.533330][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 1524.533349][ T38] audit: type=1326 audit(2000000376.988:672): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.535406][ T38] audit: type=1326 audit(2000000376.988:673): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.536183][ T38] audit: type=1326 audit(2000000376.988:674): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.536510][ T38] audit: type=1326 audit(2000000376.988:675): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.536880][ T38] audit: type=1326 audit(2000000376.988:676): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.537129][ T38] audit: type=1326 audit(2000000376.988:677): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.537399][ T38] audit: type=1326 audit(2000000376.988:678): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.539920][ T38] audit: type=1326 audit(2000000376.988:679): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.540332][ T38] audit: type=1326 audit(2000000376.988:680): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1524.540376][ T38] audit: type=1326 audit(2000000376.988:681): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=17603 comm="syz.4.20693" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f138e0cde59 code=0x7ffc0000 [ 1525.244248][T17630] loop0: detected capacity change from 0 to 512 [ 1525.256923][T17630] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1525.401933][ T6048] Flush: task=udevd[6048] dev=loop0 state=2 [ 1525.474839][ T6048] Teardown: task=udevd[6048] dev=loop0 state=2 [ 1525.607101][T17648] loop4: detected capacity change from 0 to 128 [ 1525.981833][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1526.065731][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1527.195990][T27508] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1527.358090][T27508] usb 1-1: Using ep0 maxpacket: 16 [ 1527.359926][T27508] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 1527.359952][T27508] usb 1-1: config 0 has no interface number 0 [ 1527.359995][T27508] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1527.360020][T27508] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1527.364697][T27508] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1527.364725][T27508] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1527.364745][T27508] usb 1-1: Product: syz [ 1527.364758][T27508] usb 1-1: Manufacturer: syz [ 1527.364772][T27508] usb 1-1: SerialNumber: syz [ 1527.384369][T27508] usb 1-1: config 0 descriptor?? [ 1527.397673][T17703] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1527.397813][T17703] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1527.693263][T27508] asix 1-1:0.34: probe with driver asix failed with error -71 [ 1527.733335][T27508] usb 1-1: USB disconnect, device number 4 [ 1527.861763][T17739] loop3: detected capacity change from 0 to 4096 [ 1527.936669][T17739] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1528.045541][T17739] ntfs3(loop3): ino=1a, mi_enum_attr [ 1528.045695][T17739] ntfs3(loop3): ino=1a, mi_enum_attr [ 1528.045712][T17739] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1528.049696][T17746] netlink: 'syz.4.20764': attribute type 1 has an invalid length. [ 1529.292542][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1529.364569][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1529.411970][T17795] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20789'. [ 1529.856670][T17816] loop4: detected capacity change from 0 to 1024 [ 1530.143249][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1530.243667][T17833] loop3: detected capacity change from 0 to 512 [ 1530.282322][T17833] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 1530.282395][T17833] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 1530.308140][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1530.377027][T17833] EXT4-fs (loop3): 1 truncate cleaned up [ 1530.387516][T17833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1530.596273][ T5794] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.843506][ T5794] Flush: task=syz-executor[5794] dev=loop3 state=2 [ 1531.170683][ T5794] Teardown: task=syz-executor[5794] dev=loop3 state=2 [ 1531.398602][ T821] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1531.563894][ T821] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 1531.563922][ T821] usb 5-1: config 0 has no interface number 0 [ 1531.563967][ T821] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 1531.563994][ T821] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 1531.564019][ T821] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1531.564040][ T821] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x87 has invalid maxpacket 0 [ 1531.564063][ T821] usb 5-1: config 0 interface 11 has no altsetting 0 [ 1531.564094][ T821] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1531.564117][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.656889][ T821] usb 5-1: config 0 descriptor?? [ 1531.673070][ T821] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 1531.677473][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 1531.677569][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 1531.677649][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 1531.677727][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 1531.677799][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 1531.728829][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 1531.748478][ T821] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1531.752923][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 1531.753010][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 1531.753088][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 1531.753168][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 1531.753248][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 1531.753324][ T821] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 1531.811634][ T821] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1531.893057][ T821] usb 5-1: USB disconnect, device number 8 [ 1531.978017][ T821] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1532.000372][ T821] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1532.001477][ T821] keyspan 5-1:0.11: device disconnected [ 1532.632089][T17930] loop4: detected capacity change from 0 to 256 [ 1532.692318][T17930] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 1532.732827][T17930] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 1532.733474][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 1532.733488][ T38] audit: type=1800 audit(2000000384.558:686): pid=17930 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed(directio) comm="syz.4.20852" name="file1" dev="loop4" ino=1048823 res=0 errno=0 [ 1533.426013][ T5791] Flush: task=syz-executor[5791] dev=loop4 state=2 [ 1533.546398][ T5791] Teardown: task=syz-executor[5791] dev=loop4 state=2 [ 1533.576145][T17964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20871'. [ 1533.651628][T17970] loop3: detected capacity change from 0 to 512 [ 1533.652680][T17970] EXT4-fs: Ignoring removed i_version option [ 1533.653649][T17970] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1533.855929][T17970] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.20874: invalid block [ 1533.855964][T17970] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1533.857155][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 1533.857175][ C1] EXT4-fs (loop3): initial error at time 2000000385: ext4_get_branch:178: inode 11: block 4294967295 [ 1533.857208][ C1] EXT4-fs (loop3): last error at time 2000000385: ext4_get_branch:178: inode 11: block 4294967295 [ 1533.913372][T17970] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.20874: invalid indirect mapped block 4294967295 (level 1) [ 1533.913410][T17970] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1533.914256][T17970] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.20874: invalid indirect mapped block 4294967295 (level 1) [ 1533.914288][T17970] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1534.032220][T17970] EXT4-fs (loop3): 2 truncates cleaned up [ 1534.048492][T17970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.133545][T17970] [ 1534.133545][T17970] [ 1534.133556][T17970] ====================================================== [ 1534.133576][T17970] WARNING: possible circular locking dependency detected [ 1534.133632][T17970] syzkaller #0 Tainted: G L [ 1534.133643][T17970] ------------------------------------------------------ [ 1534.133682][T17970] syz.3.20874/17970 is trying to acquire lock: [ 1534.133724][T17970] ffff888029c7c800 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x426/0x10c0 [ 1534.133811][T17970] [ 1534.133811][T17970] but task is already holding lock: [ 1534.133818][T17970] ffff88803e418cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1534.133862][T17970] [ 1534.133862][T17970] which lock already depends on the new lock. [ 1534.133862][T17970] [ 1534.133869][T17970] [ 1534.133869][T17970] the existing dependency chain (in reverse order) is: [ 1534.133876][T17970] [ 1534.133876][T17970] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 1534.133935][T17970] percpu_down_read_internal+0x48/0x1d0 [ 1534.133966][T17970] ext4_writepages+0x205/0x3b0 [ 1534.133988][T17970] do_writepages+0x338/0x560 [ 1534.134010][T17970] __writeback_single_inode+0x12e/0xf90 [ 1534.134030][T17970] writeback_single_inode+0x4dd/0xe10 [ 1534.134058][T17970] write_inode_now+0x1c2/0x290 [ 1534.134083][T17970] iput+0x98b/0xf00 [ 1534.134100][T17970] ext4_xattr_block_set+0x1b0c/0x2a80 [ 1534.134129][T17970] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 1534.134146][T17970] __ext4_expand_extra_isize+0x30d/0x400 [ 1534.134174][T17970] __ext4_mark_inode_dirty+0x455/0x700 [ 1534.134196][T17970] ext4_evict_inode+0x976/0x10c0 [ 1534.134216][T17970] evict+0x624/0xb50 [ 1534.134239][T17970] ext4_orphan_cleanup+0xc7a/0x14c0 [ 1534.134261][T17970] ext4_fill_super+0x5cc5/0x65d0 [ 1534.134280][T17970] get_tree_bdev_flags+0x430/0x4f0 [ 1534.134313][T17970] vfs_get_tree+0x92/0x2a0 [ 1534.134334][T17970] do_new_mount+0x319/0xdc0 [ 1534.134351][T17970] __se_sys_mount+0x31d/0x420 [ 1534.134367][T17970] do_syscall_64+0x174/0x580 [ 1534.134394][T17970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.134415][T17970] [ 1534.134415][T17970] -> #0 (sb_internal){.+.+}-{0:0}: [ 1534.134442][T17970] __lock_acquire+0x15ff/0x2e40 [ 1534.134462][T17970] lock_acquire+0x115/0x350 [ 1534.134479][T17970] percpu_down_read_internal+0x48/0x1d0 [ 1534.134506][T17970] ext4_evict_inode+0x426/0x10c0 [ 1534.134529][T17970] evict+0x624/0xb50 [ 1534.134549][T17970] ext4_ext_migrate+0xddf/0x10e0 [ 1534.134566][T17970] ext4_fileattr_set+0xf41/0x16e0 [ 1534.134585][T17970] vfs_fileattr_set+0x9f5/0xc90 [ 1534.134605][T17970] ioctl_setflags+0x305/0x370 [ 1534.134624][T17970] do_vfs_ioctl+0x9f5/0x1550 [ 1534.134647][T17970] __se_sys_ioctl+0x82/0x170 [ 1534.134668][T17970] do_syscall_64+0x174/0x580 [ 1534.134695][T17970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.134714][T17970] [ 1534.134714][T17970] other info that might help us debug this: [ 1534.134714][T17970] [ 1534.134721][T17970] Possible unsafe locking scenario: [ 1534.134721][T17970] [ 1534.134728][T17970] CPU0 CPU1 [ 1534.134735][T17970] ---- ---- [ 1534.134741][T17970] lock(&sbi->s_writepages_rwsem); [ 1534.134755][T17970] lock(sb_internal); [ 1534.134770][T17970] lock(&sbi->s_writepages_rwsem); [ 1534.134785][T17970] rlock(sb_internal); [ 1534.134810][T17970] [ 1534.134810][T17970] *** DEADLOCK *** [ 1534.134810][T17970] [ 1534.134816][T17970] 3 locks held by syz.3.20874/17970: [ 1534.134827][T17970] #0: ffff888029c7c510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x210 [ 1534.134885][T17970] #1: ffff8880673a1bd8 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x160/0xc90 [ 1534.134937][T17970] #2: ffff88803e418cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x317/0x10e0 [ 1534.134979][T17970] [ 1534.134979][T17970] stack backtrace: [ 1534.134994][T17970] CPU: 1 UID: 0 PID: 17970 Comm: syz.3.20874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1534.135021][T17970] Tainted: [L]=SOFTLOCKUP [ 1534.135028][T17970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1534.135042][T17970] Call Trace: [ 1534.135049][T17970] [ 1534.135058][T17970] dump_stack_lvl+0xe8/0x150 [ 1534.135089][T17970] print_circular_bug+0x2e2/0x300 [ 1534.135119][T17970] check_noncircular+0x12f/0x150 [ 1534.135149][T17970] __lock_acquire+0x15ff/0x2e40 [ 1534.135176][T17970] ? __lock_acquire+0x6df/0x2e40 [ 1534.135200][T17970] ? __asan_memset+0x22/0x50 [ 1534.135225][T17970] lock_acquire+0x115/0x350 [ 1534.135246][T17970] ? ext4_evict_inode+0x426/0x10c0 [ 1534.135272][T17970] percpu_down_read_internal+0x48/0x1d0 [ 1534.135308][T17970] ? ext4_evict_inode+0x426/0x10c0 [ 1534.135333][T17970] ext4_evict_inode+0x426/0x10c0 [ 1534.135356][T17970] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1534.135385][T17970] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1534.135407][T17970] ? rt_spin_unlock+0x157/0x200 [ 1534.135432][T17970] ? rt_spin_unlock+0x163/0x200 [ 1534.135453][T17970] ? __pfx_ext4_evict_inode+0x10/0x10 [ 1534.135475][T17970] evict+0x624/0xb50 [ 1534.135504][T17970] ? __pfx_evict+0x10/0x10 [ 1534.135526][T17970] ? rt_spin_unlock+0x163/0x200 [ 1534.135548][T17970] ? iput+0xb84/0xf00 [ 1534.135568][T17970] ext4_ext_migrate+0xddf/0x10e0 [ 1534.135593][T17970] ? __pfx_ext4_ext_migrate+0x10/0x10 [ 1534.135611][T17970] ? inode_maybe_inc_iversion+0x18f/0x200 [ 1534.135635][T17970] ? ext4_reserve_inode_write+0x2ef/0x360 [ 1534.135664][T17970] ? ext4_set_inode_flags+0x249/0x5b0 [ 1534.135690][T17970] ? __ext4_journal_stop+0x34/0x1a0 [ 1534.135720][T17970] ext4_fileattr_set+0xf41/0x16e0 [ 1534.135746][T17970] ? __pfx_ext4_fileattr_set+0x10/0x10 [ 1534.135771][T17970] ? rcu_is_watching+0x15/0xb0 [ 1534.135795][T17970] ? cap_capable+0x123/0x460 [ 1534.135816][T17970] ? bpf_lsm_capable+0x9/0x20 [ 1534.135839][T17970] ? security_capable+0x74/0x280 [ 1534.135862][T17970] ? fscrypt_prepare_setflags+0x62/0x3c0 [ 1534.135890][T17970] vfs_fileattr_set+0x9f5/0xc90 [ 1534.135912][T17970] ? mnt_get_write_access+0x66/0x2d0 [ 1534.135940][T17970] ? __pfx_vfs_fileattr_set+0x10/0x10 [ 1534.135966][T17970] ? mnt_want_write_file+0x17e/0x210 [ 1534.135992][T17970] ioctl_setflags+0x305/0x370 [ 1534.136013][T17970] ? __pfx_ioctl_setflags+0x10/0x10 [ 1534.136034][T17970] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1534.136057][T17970] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1534.136080][T17970] do_vfs_ioctl+0x9f5/0x1550 [ 1534.136107][T17970] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1534.136137][T17970] ? do_futex+0x3e7/0x4e0 [ 1534.136172][T17970] ? __fget_files+0x2a/0x420 [ 1534.136191][T17970] ? __fget_files+0x2a/0x420 [ 1534.136210][T17970] ? __fget_files+0x3a8/0x420 [ 1534.136229][T17970] ? __fget_files+0x2a/0x420 [ 1534.136251][T17970] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1534.136273][T17970] __se_sys_ioctl+0x82/0x170 [ 1534.136307][T17970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.136329][T17970] do_syscall_64+0x174/0x580 [ 1534.136358][T17970] ? trace_irq_disable+0x3b/0x140 [ 1534.136381][T17970] ? clear_bhb_loop+0x40/0x90 [ 1534.136403][T17970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.136424][T17970] RIP: 0033:0x7fbea1bdde59 [ 1534.136442][T17970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1534.136459][T17970] RSP: 002b:00007fbe9fe36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1534.136485][T17970] RAX: ffffffffffffffda RBX: 00007fbea1e65fa0 RCX: 00007fbea1bdde59 [ 1534.136499][T17970] RDX: 00002000000000c0 RSI: 0000000040086602 RDI: 0000000000000004 [ 1534.136511][T17970] RBP: 00007fbea1c73e6f R08: 0000000000000000 R09: 0000000000000000 [ 1534.136524][T17970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1534.136537][T17970] R13: 00007fbea1e66038 R14: 00007fbea1e65fa0 R15: 00007fff309113c8 [ 1534.136561][T17970] [ 1534.138292][T17980] ------------[ cut here ]------------ [ 1534.138304][T17980] mas->ld_seq != lock_sequence(map) [ 1534.138317][T17980] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#0: syz.1.20878/17980 [ 1534.138366][T17980] Modules linked in: [ 1534.138391][T17980] CPU: 0 UID: 0 PID: 17980 Comm: syz.1.20878 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1534.138418][T17980] Tainted: [L]=SOFTLOCKUP [ 1534.138425][T17980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1534.138453][T17980] RIP: 0010:mas_find+0xa02/0xca0 [ 1534.138482][T17980] Code: 74 08 4c 89 f7 e8 7e 56 f5 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 5b 69 89 f6 31 c0 e9 0a fd ff ff e8 4f 69 89 f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 41 69 89 f6 31 c0 e9 f0 fc ff ff e8 35 [ 1534.138499][T17980] RSP: 0018:ffffc9001d3bf658 EFLAGS: 00010293 [ 1534.138515][T17980] RAX: ffffffff8b3bb221 RBX: 1ffff92003a77f2d RCX: ffff88802c97be00 [ 1534.138530][T17980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1534.138542][T17980] RBP: 0000000000000085 R08: 0000000000000000 R09: 0000000000000000 [ 1534.138554][T17980] R10: dffffc0000000000 R11: ffffed100cb1767d R12: 00000000ffffffff [ 1534.138568][T17980] R13: ffffc9001d3bf974 R14: ffffc9001d3bf920 R15: ffffc9001d3bf968 [ 1534.138583][T17980] FS: 0000000000000000(0000) GS:ffff888125c4e000(0000) knlGS:0000000000000000 [ 1534.138600][T17980] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1534.138614][T17980] CR2: 000055557c5ed7d0 CR3: 0000000044066000 CR4: 00000000003526f0 [ 1534.138632][T17980] Call Trace: [ 1534.138640][T17980] [ 1534.138652][T17980] unmap_vmas+0x43e/0x550 [ 1534.138680][T17980] ? __pfx_unmap_vmas+0x10/0x10 [ 1534.138742][T17980] exit_mmap+0x293/0x9f0 [ 1534.138760][T17980] ? __pfx_exit_mmap+0x10/0x10 [ 1534.138775][T17980] ? do_raw_spin_lock+0x12b/0x2f0 [ 1534.138813][T17980] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1534.138839][T17980] ? __pfx_exit_aio+0x10/0x10 [ 1534.138861][T17980] ? uprobe_clear_state+0x2a7/0x3e0 [ 1534.138882][T17980] __mmput+0xcb/0x3e0 [ 1534.138905][T17980] exit_mm+0x186/0x240 [ 1534.138924][T17980] do_exit+0x6cd/0x2360 [ 1534.138940][T17980] ? lockdep_hardirqs_on+0x7a/0x110 [ 1534.138965][T17980] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1534.138995][T17980] ? __pfx_do_exit+0x10/0x10 [ 1534.139012][T17980] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1534.139038][T17980] ? rt_spin_unlock+0x157/0x200 [ 1534.139060][T17980] do_group_exit+0x22d/0x2f0 [ 1534.139078][T17980] ? rt_spin_unlock+0x163/0x200 [ 1534.139100][T17980] get_signal+0x121b/0x12c0 [ 1534.139132][T17980] arch_do_signal_or_restart+0xbb/0x860 [ 1534.139161][T17980] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1534.139196][T17980] exit_to_user_mode_loop+0x104/0x730 [ 1534.139216][T17980] ? rcu_is_watching+0x15/0xb0 [ 1534.139242][T17980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.139261][T17980] do_syscall_64+0x353/0x580 [ 1534.139288][T17980] ? trace_irq_disable+0x3b/0x140 [ 1534.139309][T17980] ? clear_bhb_loop+0x40/0x90 [ 1534.139330][T17980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.139349][T17980] RIP: 0033:0x7f284b9ede59 [ 1534.139364][T17980] Code: Unable to access opcode bytes at 0x7f284b9ede2f. [ 1534.139374][T17980] RSP: 002b:00007ffd2384e6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1534.139393][T17980] RAX: fffffffffffffdfc RBX: 0000000000162665 RCX: 00007f284b9ede59 [ 1534.139407][T17980] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f284bc75fac [ 1534.139420][T17980] RBP: 0000000000000fd2 R08: 3fffffffffffffff R09: 0000000000000000 [ 1534.139433][T17980] R10: 00007ffd2384e7d0 R11: 0000000000000246 R12: 00007ffd2384e7f0 [ 1534.139446][T17980] R13: 00007f284bc75fac R14: 0000000000163637 R15: 00007ffd2384e7d0 [ 1534.139466][T17980] [ 1534.139477][T17980] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1534.139494][T17980] CPU: 0 UID: 0 PID: 17980 Comm: syz.1.20878 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1534.139519][T17980] Tainted: [L]=SOFTLOCKUP [ 1534.139527][T17980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1534.139538][T17980] Call Trace: [ 1534.139545][T17980] [ 1534.139552][T17980] vpanic+0x5d9/0xad0 [ 1534.139571][T17980] ? lock_release+0x4b/0x3c0 [ 1534.139592][T17980] ? __pfx_vpanic+0x10/0x10 [ 1534.139610][T17980] ? __pfx__printk+0x10/0x10 [ 1534.139631][T17980] ? is_bpf_text_address+0x292/0x2b0 [ 1534.139656][T17980] ? is_bpf_text_address+0x26/0x2b0 [ 1534.139682][T17980] panic+0xc5/0xd0 [ 1534.139699][T17980] ? __pfx_panic+0x10/0x10 [ 1534.139723][T17980] __warn+0x315/0x4c0 [ 1534.139739][T17980] ? mas_find+0xa02/0xca0 [ 1534.139767][T17980] ? mas_find+0xa02/0xca0 [ 1534.139799][T17980] __report_bug+0x331/0x530 [ 1534.139829][T17980] ? mas_find+0xa02/0xca0 [ 1534.139856][T17980] ? __pfx___report_bug+0x10/0x10 [ 1534.139889][T17980] ? mas_find+0xa02/0xca0 [ 1534.139915][T17980] report_bug+0x16a/0x220 [ 1534.139942][T17980] ? mas_find+0xa02/0xca0 [ 1534.139967][T17980] ? mas_find+0xa04/0xca0 [ 1534.139993][T17980] handle_bug+0x9c/0x200 [ 1534.140011][T17980] exc_invalid_op+0x1a/0x50 [ 1534.140033][T17980] asm_exc_invalid_op+0x1a/0x20 [ 1534.140051][T17980] RIP: 0010:mas_find+0xa02/0xca0 [ 1534.140079][T17980] Code: 74 08 4c 89 f7 e8 7e 56 f5 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 5b 69 89 f6 31 c0 e9 0a fd ff ff e8 4f 69 89 f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 41 69 89 f6 31 c0 e9 f0 fc ff ff e8 35 [ 1534.140095][T17980] RSP: 0018:ffffc9001d3bf658 EFLAGS: 00010293 [ 1534.140110][T17980] RAX: ffffffff8b3bb221 RBX: 1ffff92003a77f2d RCX: ffff88802c97be00 [ 1534.140125][T17980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1534.140137][T17980] RBP: 0000000000000085 R08: 0000000000000000 R09: 0000000000000000 [ 1534.140149][T17980] R10: dffffc0000000000 R11: ffffed100cb1767d R12: 00000000ffffffff [ 1534.140163][T17980] R13: ffffc9001d3bf974 R14: ffffc9001d3bf920 R15: ffffc9001d3bf968 [ 1534.140181][T17980] ? mas_find+0xa01/0xca0 [ 1534.140209][T17980] ? mas_find+0xa01/0xca0 [ 1534.140238][T17980] unmap_vmas+0x43e/0x550 [ 1534.140263][T17980] ? __pfx_unmap_vmas+0x10/0x10 [ 1534.140294][T17980] exit_mmap+0x293/0x9f0 [ 1534.140311][T17980] ? __pfx_exit_mmap+0x10/0x10 [ 1534.140327][T17980] ? do_raw_spin_lock+0x12b/0x2f0 [ 1534.140350][T17980] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1534.140380][T17980] ? __pfx_exit_aio+0x10/0x10 [ 1534.140405][T17980] ? uprobe_clear_state+0x2a7/0x3e0 [ 1534.140425][T17980] __mmput+0xcb/0x3e0 [ 1534.140447][T17980] exit_mm+0x186/0x240 [ 1534.140464][T17980] do_exit+0x6cd/0x2360 [ 1534.140481][T17980] ? lockdep_hardirqs_on+0x7a/0x110 [ 1534.140507][T17980] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1534.140536][T17980] ? __pfx_do_exit+0x10/0x10 [ 1534.140554][T17980] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1534.140580][T17980] ? rt_spin_unlock+0x157/0x200 [ 1534.140602][T17980] do_group_exit+0x22d/0x2f0 [ 1534.140619][T17980] ? rt_spin_unlock+0x163/0x200 [ 1534.140641][T17980] get_signal+0x121b/0x12c0 [ 1534.140672][T17980] arch_do_signal_or_restart+0xbb/0x860 [ 1534.140700][T17980] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1534.140734][T17980] exit_to_user_mode_loop+0x104/0x730 [ 1534.140755][T17980] ? rcu_is_watching+0x15/0xb0 [ 1534.140779][T17980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.140805][T17980] do_syscall_64+0x353/0x580 [ 1534.140831][T17980] ? trace_irq_disable+0x3b/0x140 [ 1534.140852][T17980] ? clear_bhb_loop+0x40/0x90 [ 1534.140873][T17980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.140891][T17980] RIP: 0033:0x7f284b9ede59 [ 1534.140906][T17980] Code: Unable to access opcode bytes at 0x7f284b9ede2f. [ 1534.140916][T17980] RSP: 002b:00007ffd2384e6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1534.140934][T17980] RAX: fffffffffffffdfc RBX: 0000000000162665 RCX: 00007f284b9ede59 [ 1534.140948][T17980] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f284bc75fac [ 1534.140961][T17980] RBP: 0000000000000fd2 R08: 3fffffffffffffff R09: 0000000000000000 [ 1534.140974][T17980] R10: 00007ffd2384e7d0 R11: 0000000000000246 R12: 00007ffd2384e7f0 [ 1534.140987][T17980] R13: 00007f284bc75fac R14: 0000000000163637 R15: 00007ffd2384e7d0 [ 1534.141008][T17980] [ 1534.141285][T17980] Kernel Offset: disabled