last executing test programs: 31.457006802s ago: executing program 3 (id=1383): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x2000775) write$binfmt_elf64(r0, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x2, 0x0, 0x40, 0x7fff, 0x2, 0x3e, 0xfffbffed, 0x294, 0x40, 0xcf, 0xf, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0xe6, 0x1004, 0x3}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 31.351774806s ago: executing program 3 (id=1384): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x5) unshare(0xc040400) fcntl$notify(r1, 0x402, 0x8000003d) getdents64(r0, &(0x7f0000001f80)=""/4108, 0x100c) 31.305637458s ago: executing program 3 (id=1386): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf80, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x102b, &(0x7f0000002c40)=ANY=[], 0x0) 31.099965197s ago: executing program 3 (id=1389): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x3, 0x25a, &(0x7f0000000240)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x2a14b58) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f00000002c0)={0x7f, 0x1}, 0x0) 30.947167163s ago: executing program 3 (id=1393): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x5, &(0x7f0000000040)=0x640, 0x4) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{&(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @broadcast}}}], 0x20}}], 0x1, 0x14) 29.266885226s ago: executing program 3 (id=1400): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 29.068583905s ago: executing program 32 (id=1400): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.593282245s ago: executing program 4 (id=1622): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000090a010400000000000000000a0000090900010073797a3100000000080005400000002b080009"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.102626156s ago: executing program 4 (id=1623): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0x1e8}}}}, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.680108598s ago: executing program 0 (id=1636): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, &(0x7f0000004500)=[{&(0x7f0000000200)=""/241, 0xf1}], 0x1}, 0x3ff}], 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x4008af13, &(0x7f0000000280)) 1.62610232s ago: executing program 0 (id=1637): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.580752482s ago: executing program 0 (id=1638): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r2, r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 1.501507215s ago: executing program 0 (id=1640): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'dh\x00', 0x11, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0x3, 0x80012d58, 0x2}}, 0x44) 1.351422102s ago: executing program 0 (id=1643): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0xf, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) unshare(0x28000600) syz_clone3(&(0x7f0000000080)={0x801000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) sync_file_range(r0, 0x9, 0x10, 0x3) 1.221604287s ago: executing program 1 (id=1647): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 1.1680897s ago: executing program 5 (id=1648): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x40, r2, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffc}]}, 0x40}}, 0x0) 910.94037ms ago: executing program 5 (id=1649): r0 = socket$inet_udp(0x2, 0x2, 0x0) setuid(0xee01) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) 839.382403ms ago: executing program 0 (id=1651): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ppoll(&(0x7f0000000200)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r2}}, 0x48) 813.843935ms ago: executing program 5 (id=1652): socket$inet6(0xa, 0x3, 0x8000000003c) close(0xffffffffffffffff) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0xfffffffffffffe6c, 0x0, &(0x7f00000003c0)="ae7c18bc5a99ca36edfb2a8877ed05e0ac0cf1da03b371515d915d060d67ab3b904c15ed561cc257709744dadc1b3a34e826c29c", 0x5, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 714.857729ms ago: executing program 1 (id=1653): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={0x0, 0xf39, 0x1, [0x40]}, 0xa) 714.491929ms ago: executing program 2 (id=1654): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000300), 0x4) sendmmsg$inet_sctp(r0, &(0x7f0000003780)=[{&(0x7f0000000bc0)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c00)="9f", 0x1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0xc044) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0x7f, 0x4) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000000) 637.713682ms ago: executing program 5 (id=1655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000001740), 0xe2803, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 591.328204ms ago: executing program 4 (id=1656): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 498.807158ms ago: executing program 2 (id=1657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='Iuxx', @ANYBLOB="b860eb49c54512c27512526da850d95309732bf316ed144e06ba56f95b910bd4372f8f2f4977dca084f5541d42fa424f2c4b4082c61d6e4279a8a3dfbd132a5376e5fa4e273756284fbc01bc8e8b0f0d51f965ea018db60ef203b323b3"], 0x38}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x75f, 0x1, 0x8, 0x7, 0xb], 0x0, 0x0}, 0xba8) 495.603359ms ago: executing program 4 (id=1658): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f909000000210002"], 0x1c}}, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x31, @loopback, 0x9}, 0x1c) 473.291769ms ago: executing program 5 (id=1659): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file1\x00', 0x2818c02, &(0x7f0000002580)=ANY=[], 0x1, 0xc3b, &(0x7f0000001940)="$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") mount$nfs(&(0x7f0000000100)='..y', 0x0, 0x0, 0x1200004, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x3a0, 0x5}, 0x48) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 472.125579ms ago: executing program 1 (id=1669): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x3e, 0x229, 0x0, 0xfffffffd, {0xa}}, 0x14}, 0x1, 0x6000000}, 0x0) 392.554223ms ago: executing program 2 (id=1660): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000040)='.\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x200cc18, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r2, r1, 0x0, 0x80000000) 349.079735ms ago: executing program 4 (id=1661): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(0x0, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000000c0)={@map, 0x12, 0x1, 0x10102, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xffffffffffffff80, 0x9, 0x0) 261.040939ms ago: executing program 1 (id=1662): prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x26000400) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x0, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)='./file0\x00', 0x1bf, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 260.460198ms ago: executing program 4 (id=1663): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) 195.721971ms ago: executing program 2 (id=1664): r0 = gettid() writev(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0x0, 0x0, 0x1}) 191.097212ms ago: executing program 1 (id=1665): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 66.865007ms ago: executing program 2 (id=1666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0) 66.522057ms ago: executing program 1 (id=1667): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000001200)='./file0\x00', 0x1200000, &(0x7f0000000380)=ANY=[@ANYBLOB="666d61736b3d30303030303030303030303030303030303030303030312c6572726f72733d636f6e74696e75652c64656275672c6e6f646f74732c636865636b3d72656c617865642c666c7573682c00ae074f98d1b9346667e288c05bc5980f839b9c674e3c093268aee8c58355bf270e5e58f7b8cc8d6d0f"], 0x1, 0x11d9, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x201, 0x4000003e, r1, 0x0) pwritev2(r0, &(0x7f0000001140)=[{&(0x7f00000004c0)='\'', 0x1}], 0x1, 0x17ff, 0xdf, 0x2) 40.684588ms ago: executing program 5 (id=1668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000200)="b700000000000000000000d1dd0fccd5de059daf79f3", 0x27}, {&(0x7f0000000540)="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", 0x18e}, {&(0x7f00000029c0)="3de496b26cb156fc17de651bc2059979575c10b710b18f6a6eb3e0edacecac6e537e292fa84729d0f9307c991d2dcd08f489b6f01443bea0160d4611573a3da03d088a33db59ac98a334c635c5d036662c3b23e27854dbc6c163d718b4c7abbea840f975cceb9ace04893f367724b01266748ec2aa05aabb345fb3bdeec4b44af54866383c500e53f38217a45b37414a6d48adbb4e7dafc07e90b5596424efc201cff679e3b190cc2e0ff7cf943e65cb300f296e", 0xb4}], 0x4) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=1670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x22020600) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r3, r0}, 0xc) kernel console output (not intermixed with test programs): usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 129.828756][ T6543] loop4: detected capacity change from 0 to 128 [ 129.958879][ T5460] usb 3-1: USB disconnect, device number 13 [ 130.012369][ T5460] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 130.032803][ T5460] ftdi_sio 3-1:0.0: device disconnected [ 130.303299][ T6545] loop3: detected capacity change from 0 to 65536 [ 130.337587][ T6543] FAT-fs (loop4): Directory bread(block 414) failed [ 130.337616][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 130.352873][ T21] ath9k_htc: Failed to initialize the device [ 130.365889][ T5023] usb 1-1: ath9k_htc: USB layer deinitialized [ 130.404471][ T6543] FAT-fs (loop4): Directory bread(block 415) failed [ 130.432644][ T6543] FAT-fs (loop4): Directory bread(block 416) failed [ 130.462363][ T6545] XFS (loop3): Mounting V5 Filesystem [ 130.486618][ T6543] FAT-fs (loop4): Directory bread(block 417) failed [ 130.562023][ T6543] FAT-fs (loop4): Directory bread(block 418) failed [ 130.637478][ T6543] FAT-fs (loop4): Directory bread(block 419) failed [ 130.690080][ T6543] FAT-fs (loop4): Directory bread(block 420) failed [ 130.749507][ T6543] FAT-fs (loop4): Directory bread(block 421) failed [ 130.907707][ T6543] FAT-fs (loop4): Directory bread(block 414) failed [ 130.929538][ T4250] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 130.941238][ T6543] FAT-fs (loop4): Directory bread(block 415) failed [ 130.982462][ T6576] netlink: 104 bytes leftover after parsing attributes in process `syz.2.851'. [ 130.992816][ T6545] XFS (loop3): Ending clean mount [ 131.072469][ T4186] XFS (loop3): Unmounting Filesystem [ 131.374350][ T6595] device wlan0 entered promiscuous mode [ 131.406290][ T6595] device wlan0 left promiscuous mode [ 131.406793][ T4250] usb 2-1: config 8 interface 0 has no altsetting 0 [ 131.468199][ T4250] usb 2-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc [ 131.478477][ T4250] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.783749][ T4250] usb 2-1: string descriptor 0 read error: -71 [ 131.803367][ T4250] pwc: Logitech QuickCam detected (reserved ID). [ 131.850299][ T6607] block nbd2: shutting down sockets [ 131.850681][ T4250] pwc: Failed to set LED on/off time (-71) [ 131.889956][ T4250] pwc: send_video_command error -71 [ 131.917951][ T4250] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 131.949538][ T4250] Philips webcam: probe of 2-1:8.0 failed with error -71 [ 131.997137][ T4250] usb 2-1: USB disconnect, device number 14 [ 132.028556][ T5457] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 132.450303][ T5457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.481762][ T5457] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.512492][ T5457] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.549538][ T5457] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.568839][ T5457] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.584547][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.590901][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.603469][ T5457] usb 5-1: config 0 descriptor?? [ 132.717066][ T6630] block device autoloading is deprecated and will be removed. [ 133.101976][ T5457] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 133.129882][ T5457] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 133.415753][ T5023] usb 5-1: USB disconnect, device number 13 [ 133.687403][ T5019] kernel read not supported for file /dsp (pid: 5019 comm: kworker/1:8) [ 133.784554][ T6641] loop3: detected capacity change from 0 to 40427 [ 133.813163][ T6656] input: syz0 as /devices/virtual/input/input18 [ 133.832049][ T6641] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 133.876395][ T6641] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.040445][ T6641] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.162070][ T6641] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.169341][ T6641] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.246478][ T6641] attempt to access beyond end of device [ 134.246478][ T6641] loop3: rw=10241, want=53256, limit=40427 [ 134.304984][ T6668] loop4: detected capacity change from 0 to 32768 [ 134.658602][ T6668] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 134.681852][ T6682] user requested TSC rate below hardware speed [ 134.780592][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 134.857130][ T6690] loop2: detected capacity change from 0 to 512 [ 134.966703][ T6696] sock: sock_set_timeout: `syz.0.905' (pid 6696) tries to set negative timeout [ 135.151094][ T6706] loop4: detected capacity change from 0 to 512 [ 135.189714][ T6690] EXT4-fs (loop2): Test dummy encryption mode enabled [ 135.198147][ T6690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.285015][ T6690] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.902: bad orphan inode 131083 [ 135.339798][ T6690] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 135.736700][ T6734] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 135.736700][ T6734] The task syz.3.916 (6734) triggered the difference, watch for misbehavior. [ 135.886343][ T6738] loop4: detected capacity change from 0 to 256 [ 135.985791][ T5460] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 136.038286][ T6742] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 136.038286][ T6742] [ 136.065649][ T6738] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 136.299510][ T5460] usb 1-1: Using ep0 maxpacket: 8 [ 136.479640][ T5460] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.560081][ T5460] usb 1-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 136.601233][ T5460] usb 1-1: config 12 interface 0 has no altsetting 0 [ 136.743633][ T6764] loop3: detected capacity change from 0 to 256 [ 136.772160][ T5460] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 136.809386][ T5460] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.817857][ T5460] usb 1-1: Product: syz [ 136.837946][ T5460] usb 1-1: Manufacturer: syz [ 136.868434][ T5460] usb 1-1: SerialNumber: syz [ 137.849366][ C0] sched: RT throttling activated [ 138.038921][ T6782] device vlan2 entered promiscuous mode [ 138.068209][ T6782] device ip6gretap0 entered promiscuous mode [ 138.161802][ T5460] usb 1-1: selecting invalid altsetting 0 [ 138.185865][ T5460] usb 1-1: USB disconnect, device number 13 [ 138.344402][ T6789] cgroup: fork rejected by pids controller in /syz1 [ 138.362238][ T6784] loop2: detected capacity change from 0 to 65536 [ 138.415627][ T4569] udevd[4569]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.691778][ T6784] XFS (loop2): Mounting V5 Filesystem [ 138.994657][ T6812] input: syz0 as /devices/virtual/input/input19 [ 139.104134][ T6784] XFS (loop2): Ending clean mount [ 139.227794][ T4190] XFS (loop2): Unmounting Filesystem [ 139.374771][ T6822] loop3: detected capacity change from 0 to 2048 [ 139.750090][ T6822] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 139.786586][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 140.118689][ T4250] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 140.277645][ T6847] loop3: detected capacity change from 0 to 2048 [ 140.302380][ T6834] chnl_net:caif_netlink_parms(): no params data found [ 140.388661][ T6847] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 140.412866][ T4250] usb 1-1: Using ep0 maxpacket: 32 [ 140.528925][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.546927][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.558519][ T6834] device bridge_slave_0 entered promiscuous mode [ 140.585472][ T4250] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.598208][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.617576][ T4250] usb 1-1: config 0 has no interface number 0 [ 140.651114][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.675330][ T6834] device bridge_slave_1 entered promiscuous mode [ 140.691317][ T6860] loop3: detected capacity change from 0 to 4096 [ 140.737179][ T6834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.750350][ T6834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.800261][ T4250] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.812468][ T6834] team0: Port device team_slave_0 added [ 140.818423][ T4250] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.829294][ T6834] team0: Port device team_slave_1 added [ 140.835588][ T4250] usb 1-1: Product: syz [ 140.840289][ T4250] usb 1-1: Manufacturer: syz [ 140.851525][ T4250] usb 1-1: SerialNumber: syz [ 140.878698][ T4250] usb 1-1: config 0 descriptor?? [ 140.903802][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.919326][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.950989][ T4250] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 140.966992][ T6834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.002238][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.009661][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.046893][ T6834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.132376][ T6834] device hsr_slave_0 entered promiscuous mode [ 141.171680][ T4250] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.204644][ T4250] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.217399][ T6834] device hsr_slave_1 entered promiscuous mode [ 141.261853][ T6834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.271250][ T6834] Cannot create hsr debugfs directory [ 141.304337][ T4186] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 141.323314][ T4186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 141.475603][ T6872] netlink: 40 bytes leftover after parsing attributes in process `syz.2.973'. [ 141.490716][ T6872] netlink: 2 bytes leftover after parsing attributes in process `syz.2.973'. [ 141.608378][ T6877] loop3: detected capacity change from 0 to 512 [ 141.622579][ T4250] usb 1-1: USB disconnect, device number 14 [ 141.629538][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.670501][ T4250] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.688958][ T6877] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 141.730836][ T4250] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.761660][ T4250] quatech2 1-1:0.51: device disconnected [ 141.815331][ T6877] EXT4-fs (loop3): orphan cleanup on readonly fs [ 141.845659][ T6834] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.887684][ T6877] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.971: bg 0: block 248: padding at end of block bitmap is not set [ 141.929665][ T5460] Bluetooth: hci0: command 0x0409 tx timeout [ 141.951986][ T6877] Quota error (device loop3): write_blk: dquota write failed [ 141.987324][ T6877] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 141.999819][ T6877] EXT4-fs error (device loop3): ext4_acquire_dquot:6209: comm syz.3.971: Failed to acquire dquot type 1 [ 142.061763][ T6877] EXT4-fs (loop3): 1 truncate cleaned up [ 142.078066][ T6834] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.090280][ T6877] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,resgid=0x0000000000000000,noblock_validity,grpjquota=,grpjquota=,resuid=0x0000000000000000,auto_da_alloc,noload,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 142.112895][ C1] vkms_vblank_simulate: vblank timer overrun [ 142.216723][ T6894] loop2: detected capacity change from 0 to 512 [ 142.303240][ T6894] EXT4-fs (loop2): Ignoring removed nobh option [ 142.333101][ T6834] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.451469][ T6894] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 142.506240][ T6834] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.557422][ T6894] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.672345][ T6894] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.980: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 142.930724][ T6834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.957079][ T6904] loop3: detected capacity change from 0 to 8192 [ 142.965594][ T6834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 142.988929][ T6834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.007290][ T6908] device hsr0 entered promiscuous mode [ 143.015253][ T6834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.087037][ T6904] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 143.096823][ T6908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 143.116232][ T6911] loop2: detected capacity change from 0 to 512 [ 143.124380][ T6904] REISERFS (device loop3): using ordered data mode [ 143.130950][ T6908] device hsr_slave_0 left promiscuous mode [ 143.164871][ T6904] reiserfs: using flush barriers [ 143.181797][ T6908] device hsr_slave_1 left promiscuous mode [ 143.211201][ T6904] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 143.229416][ T6904] REISERFS (device loop3): checking transaction log (loop3) [ 143.243838][ T6904] REISERFS (device loop3): Using r5 hash to sort names [ 143.256189][ T6908] device hsr0 left promiscuous mode [ 143.266625][ T6904] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 143.501157][ T6911] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,. Quota mode: writeback. [ 143.554177][ T6834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.595461][ T6911] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.684277][ T6834] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.731913][ T25] audit: type=1800 audit(1763558798.871:41): pid=6911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.987" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 143.761436][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.769311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 143.834518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 143.917023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 143.966648][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.973764][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.045948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.065831][ T5019] Bluetooth: hci0: command 0x041b tx timeout [ 144.066831][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.131200][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.138294][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.213085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.260959][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.290690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.329201][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.361736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.403282][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.437562][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.464897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.496863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.521751][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.720922][ T6924] loop4: detected capacity change from 0 to 32768 [ 144.848492][ T6924] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.991 (6924) [ 145.515125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.550135][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.575554][ T6924] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 145.591739][ T6924] BTRFS info (device loop4): using free space tree [ 145.625285][ T6924] BTRFS info (device loop4): has skinny extents [ 145.636532][ T6834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.926899][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.936276][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.988204][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.027126][ T6986] loop2: detected capacity change from 0 to 8 [ 146.092609][ T6924] BTRFS info (device loop4): enabling ssd optimizations [ 146.096832][ T5027] Bluetooth: hci0: command 0x040f tx timeout [ 146.155665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.194909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.334080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.361195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.406242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.422115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.475111][ T6834] device veth0_vlan entered promiscuous mode [ 146.515257][ T6834] device veth1_vlan entered promiscuous mode [ 146.626535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.636681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 146.676661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 146.720060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 146.778468][ T6834] device veth0_macvtap entered promiscuous mode [ 146.802743][ T6834] device veth1_macvtap entered promiscuous mode [ 146.865045][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.957570][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.988515][ T6965] loop3: detected capacity change from 0 to 40427 [ 147.009401][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.032873][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.045843][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.060364][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.076006][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.087797][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.103260][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.117178][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.138305][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.155955][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.187822][ T5634] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 147.216591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 147.235960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.259706][ T7003] loop2: detected capacity change from 0 to 32768 [ 147.280776][ T6965] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1ffff [ 147.289163][ T6965] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x35f7 [ 147.318829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.358843][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.372070][ T6965] F2FS-fs (loop3): invalid crc value [ 147.385879][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.409978][ T6965] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.501993][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.571422][ T7003] XFS (loop2): Mounting V5 Filesystem [ 147.625011][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.666308][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.691826][ T6965] F2FS-fs (loop3): Start checkpoint disabled! [ 147.712218][ T6965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 147.740095][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.791443][ T7003] XFS (loop2): Ending clean mount [ 147.809877][ T5634] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 147.819394][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.837482][ T5634] usb 1-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 147.864263][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.876516][ T5634] usb 1-1: Product: syz [ 147.889054][ T6834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.896748][ T5634] usb 1-1: Manufacturer: syz [ 147.905056][ T5634] usb 1-1: SerialNumber: syz [ 147.922619][ T6834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.944110][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.952126][ T5634] usb 1-1: config 0 descriptor?? [ 147.996660][ T4190] XFS (loop2): Unmounting Filesystem [ 148.008328][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.027623][ T5634] ch341 1-1:0.0: ch341-uart converter detected [ 148.050740][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.121353][ T6834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.163910][ T6834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.175096][ T5019] Bluetooth: hci0: command 0x0419 tx timeout [ 148.203377][ T6834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.241207][ T6834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.466413][ T7018] loop4: detected capacity change from 0 to 40427 [ 148.504464][ T4718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.529207][ T4718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.564839][ T7018] F2FS-fs (loop4): invalid crc value [ 148.595937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 148.623982][ T7018] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.664972][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.707592][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.782516][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 148.821180][ T7018] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 149.157904][ T5634] usb 1-1: failed to send control message: -71 [ 149.166932][ T5634] ch341-uart: probe of ttyUSB0 failed with error -71 [ 149.204054][ T5634] usb 1-1: USB disconnect, device number 15 [ 149.230539][ T5634] ch341 1-1:0.0: device disconnected [ 149.466592][ T5019] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 149.807072][ T25] audit: type=1326 audit(1763558804.941:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.1.1027" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0899fca749 code=0x0 [ 150.139721][ T5019] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 150.148876][ T5019] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.169420][ T5019] usb 3-1: Product: syz [ 150.173717][ T5019] usb 3-1: Manufacturer: syz [ 150.184023][ T5019] usb 3-1: SerialNumber: syz [ 150.207312][ T5019] usb 3-1: config 0 descriptor?? [ 150.427277][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 150.436289][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 150.445257][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 150.454234][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 150.467601][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 150.476584][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #30a!!! [ 150.485567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 150.494525][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 150.503492][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 150.512447][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 150.883985][ T5019] airspy 3-1:0.0: Board ID: 00 [ 150.888792][ T5019] airspy 3-1:0.0: Firmware version: [ 150.940032][ T7075] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1040'. [ 151.020393][ T21] kernel write not supported for file bpf-prog (pid: 21 comm: kworker/1:0) [ 151.147812][ T7079] loop4: detected capacity change from 0 to 128 [ 151.502477][ T7070] loop3: detected capacity change from 0 to 131072 [ 151.604300][ T7070] F2FS-fs (loop3): invalid crc value [ 151.632719][ T7079] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 151.680579][ T7070] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.730649][ T7070] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 151.736426][ T7079] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.744811][ T7070] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 151.769594][ T5019] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 151.810625][ T5019] airspy 3-1:0.0: Registered as swradio24 [ 151.816392][ T5019] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 151.919117][ T5019] usb 3-1: USB disconnect, device number 14 [ 152.306234][ T5634] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 152.415654][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 152.697122][ T5634] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 152.711005][ T5634] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 152.746476][ T5634] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 152.778317][ T5634] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 152.817939][ T5634] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 152.838352][ T5634] usb 2-1: config 0 interface 0 has no altsetting 0 [ 153.036515][ T5634] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 153.050234][ T5634] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 153.098041][ T5634] usb 2-1: Product: syz [ 153.122604][ T5634] usb 2-1: Manufacturer: syz [ 153.136186][ T5634] usb 2-1: SerialNumber: syz [ 153.155469][ T5634] usb 2-1: config 0 descriptor?? [ 153.213279][ T7124] loop3: detected capacity change from 0 to 128 [ 153.219727][ T7099] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.235774][ T5634] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 153.276867][ T5634] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 153.417448][ T7124] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.487617][ T7124] ext4 filesystem being mounted at /213/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.737214][ T5634] usb 2-1: USB disconnect, device number 15 [ 153.825669][ T5634] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 153.993390][ T7146] tipc: Started in network mode [ 154.008619][ T7146] tipc: Node identity 0000000000000000005885d6a76549cc, cluster identity 4711 [ 154.028962][ T7146] tipc: Enabling of bearer rejected, failed to enable media [ 154.302901][ T7122] loop4: detected capacity change from 0 to 40427 [ 154.313963][ T5019] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 154.360076][ T7122] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1ffff [ 154.398243][ T7122] F2FS-fs (loop4): invalid crc value [ 154.428378][ T7156] loop2: detected capacity change from 0 to 512 [ 154.457689][ T7122] F2FS-fs (loop4): Found nat_bits in checkpoint [ 154.578550][ T7156] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.627125][ T7122] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.652632][ T5019] usb 4-1: Using ep0 maxpacket: 8 [ 154.692049][ T25] audit: type=1800 audit(1763558809.831:43): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1057" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 154.757294][ T4189] attempt to access beyond end of device [ 154.757294][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 154.848878][ T7170] device syzkaller1 entered promiscuous mode [ 154.883977][ T5019] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 154.897379][ T5019] usb 4-1: config 0 has no interface number 0 [ 155.089533][ T5019] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 155.098639][ T5019] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.098665][ T5019] usb 4-1: Product: syz [ 155.098680][ T5019] usb 4-1: Manufacturer: syz [ 155.098694][ T5019] usb 4-1: SerialNumber: syz [ 155.110543][ T5019] usb 4-1: config 0 descriptor?? [ 155.144197][ T7177] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 155.218748][ T7179] syz.1.1079 sent an empty control message without MSG_MORE. [ 155.423824][ T7184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.436065][ T7185] loop2: detected capacity change from 0 to 4096 [ 155.452418][ T7185] ntfs3: Unknown parameter 'windows_names' [ 155.544334][ T5019] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 155.557507][ T5019] usb 4-1: No valid video chain found. [ 155.629554][ T5019] usb 4-1: USB disconnect, device number 11 [ 155.679023][ T7184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.846588][ T7184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.942528][ T5634] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 155.985191][ T7184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.153676][ T7184] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.200754][ T5634] usb 5-1: Using ep0 maxpacket: 16 [ 156.214663][ T7184] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.293238][ T7184] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.320233][ T5634] usb 5-1: config 0 has an invalid interface number: 180 but max is 0 [ 156.336253][ T7184] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.347037][ T5634] usb 5-1: config 0 has no interface number 0 [ 156.549728][ T5634] usb 5-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 156.573405][ T5634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.590454][ T5634] usb 5-1: Product: syz [ 156.603527][ T5634] usb 5-1: Manufacturer: syz [ 156.617977][ T5634] usb 5-1: SerialNumber: syz [ 156.676919][ T5634] usb 5-1: config 0 descriptor?? [ 156.753654][ T5634] usb 5-1: bad CDC descriptors [ 156.769263][ T5634] usb 5-1: bad CDC descriptors [ 156.968958][ T7240] loop3: detected capacity change from 0 to 512 [ 157.034448][ T21] usb 5-1: USB disconnect, device number 14 [ 157.154233][ T7240] EXT4-fs (loop3): Unrecognized mount option "smackfshat=" or missing value [ 157.385989][ T7250] loop2: detected capacity change from 0 to 2048 [ 157.796143][ T7259] loop4: detected capacity change from 0 to 2048 [ 157.890407][ T7259] UDF-fs: bad mount option "gidêÍ ÜFêÖ£=00000000000000000000" or missing value [ 158.017955][ T7250] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.055619][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 159.106659][ T7277] netlink: 'syz.1.1112': attribute type 15 has an invalid length. [ 159.124823][ T7277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 159.162364][ T7277] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.171256][ T7277] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.179623][ T7277] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.187800][ T7277] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.548101][ T7298] netlink: 'syz.1.1116': attribute type 1 has an invalid length. [ 159.564698][ T7298] netlink: 'syz.1.1116': attribute type 2 has an invalid length. [ 159.627763][ T21] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 159.890760][ T7307] program syz.3.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.950069][ T7310] program syz.3.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.998549][ T7282] loop2: detected capacity change from 0 to 32768 [ 160.006299][ T7310] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 160.066376][ T7282] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1113 (7282) [ 160.107159][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.125236][ T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.148088][ T21] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.177479][ T21] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.208392][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.231189][ T21] usb 1-1: config 0 descriptor?? [ 160.249437][ T7282] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 160.319672][ T7282] BTRFS info (device loop2): turning on sync discard [ 160.326402][ T7282] BTRFS info (device loop2): enabling ssd optimizations [ 160.426314][ T7282] BTRFS info (device loop2): using spread ssd allocation scheme [ 160.445786][ T7282] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 160.459308][ T7282] BTRFS info (device loop2): trying to use backup root at mount time [ 160.470478][ T7282] BTRFS info (device loop2): metadata ratio 6 [ 160.476640][ T7282] BTRFS info (device loop2): enabling auto defrag [ 160.495202][ T7282] BTRFS info (device loop2): enabling disk space caching [ 160.506546][ T7282] BTRFS info (device loop2): max_inline at 0 [ 160.516235][ T7282] BTRFS error (device loop2): unrecognized mount option 'fsmagic=0x0000000000000008' [ 160.529149][ T7282] BTRFS error (device loop2): cannot disable free space tree [ 160.558725][ T7282] BTRFS error (device loop2): open_ctree failed: -22 [ 160.722568][ T21] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 160.759566][ T5634] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 160.762673][ T21] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 161.060247][ T5634] usb 5-1: Using ep0 maxpacket: 32 [ 161.189772][ T5634] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 161.207717][ T5634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.248697][ T5634] usb 5-1: config 0 descriptor?? [ 161.320962][ T7333] loop2: detected capacity change from 0 to 8192 [ 161.371344][ T7333] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 161.397148][ T7333] REISERFS (device loop2): using ordered data mode [ 161.467406][ T7333] reiserfs: using flush barriers [ 161.488878][ T7333] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.519744][ T5634] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 161.551398][ T5634] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.585944][ T7333] REISERFS (device loop2): checking transaction log (loop2) [ 161.594757][ T5461] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 161.608249][ T5634] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 161.617991][ T5634] usb 5-1: media controller created [ 161.670055][ T5634] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.760899][ T5634] az6027: usb out operation failed. (-71) [ 161.800037][ T5634] az6027: usb out operation failed. (-71) [ 161.806054][ T5634] stb0899_attach: Driver disabled by Kconfig [ 161.825291][ T5634] az6027: no front-end attached [ 161.825291][ T5634] [ 161.839654][ T7333] REISERFS (device loop2): Using tea hash to sort names [ 161.857689][ T7333] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 161.869447][ T5634] az6027: usb out operation failed. (-71) [ 161.876414][ T5634] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 161.891473][ T5634] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input20 [ 161.910820][ T5634] dvb-usb: schedule remote query interval to 400 msecs. [ 161.918935][ T5634] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 161.931332][ T5634] usb 5-1: USB disconnect, device number 15 [ 162.021960][ T5461] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.039455][ T5634] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 162.066987][ T5461] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.099497][ T5461] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.115908][ T25] audit: type=1800 audit(1763558817.251:44): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1131" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 162.161262][ T5461] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.171978][ T25] audit: type=1800 audit(1763558817.281:45): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1131" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 162.177900][ T5461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.218987][ T5461] usb 2-1: config 0 descriptor?? [ 162.474677][ T7360] loop4: detected capacity change from 0 to 256 [ 162.547158][ T7360] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 162.695787][ T7362] Bluetooth: hci0: invalid len left 7, exp >= 258 [ 162.721849][ T5461] plantronics 0003:047F:FFFF.0018: unbalanced delimiter at end of report description [ 162.751423][ T5461] plantronics 0003:047F:FFFF.0018: parse failed [ 162.767822][ T5461] plantronics: probe of 0003:047F:FFFF.0018 failed with error -22 [ 162.968553][ T4243] usb 1-1: USB disconnect, device number 16 [ 163.001180][ T7371] loop3: detected capacity change from 0 to 256 [ 163.015336][ T7372] loop4: detected capacity change from 0 to 512 [ 163.044929][ T5461] usb 2-1: USB disconnect, device number 16 [ 163.088262][ T7372] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1145: inode has both inline data and extents flags [ 163.109639][ T7372] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1145: couldn't read orphan inode 15 (err -117) [ 163.128260][ T7372] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,,errors=continue. Quota mode: writeback. [ 163.660278][ T7393] Illegal XDP return value 4052355577, expect packet loss! [ 163.723070][ T25] audit: type=1804 audit(1763558818.861:46): pid=7371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1146" name="/newroot/230/file0/bus" dev="loop3" ino=1048599 res=1 errno=0 [ 164.329781][ T5461] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 164.478610][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1161'. [ 164.493244][ T7410] device bond_slave_0 entered promiscuous mode [ 164.500047][ T7410] device bond_slave_1 entered promiscuous mode [ 164.512601][ T7410] device macvlan2 entered promiscuous mode [ 164.518725][ T7410] device bond0 entered promiscuous mode [ 164.531477][ T7410] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 164.732937][ T5461] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.758035][ T5461] usb 3-1: config 0 interface 0 has no altsetting 0 [ 164.792613][ T7417] netlink: 35 bytes leftover after parsing attributes in process `syz.3.1164'. [ 164.826458][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 164.949752][ T5461] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.969228][ T5461] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 164.999433][ T5461] usb 3-1: Product: syz [ 165.007955][ T5027] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 165.010511][ T5461] usb 3-1: Manufacturer: syz [ 165.034819][ T5461] usb 3-1: SerialNumber: syz [ 165.064891][ T5461] usb 3-1: config 0 descriptor?? [ 165.136994][ T5461] usb 3-1: selecting invalid altsetting 0 [ 165.378944][ T5634] usb 3-1: USB disconnect, device number 15 [ 165.446126][ T5027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.488456][ T5027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.513699][ T5027] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 165.532123][ T5027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.569844][ T5027] usb 5-1: config 0 descriptor?? [ 165.590909][ T7419] loop3: detected capacity change from 0 to 32768 [ 165.638961][ T7419] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1166 (7419) [ 165.674197][ T7419] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 165.686288][ T7419] BTRFS info (device loop3): force zlib compression, level 3 [ 165.698166][ T7419] BTRFS info (device loop3): enabling ssd optimizations [ 165.709044][ T7419] BTRFS info (device loop3): allowing degraded mounts [ 165.717874][ T7419] BTRFS info (device loop3): force clearing of disk cache [ 165.726978][ T7419] BTRFS info (device loop3): using free space tree [ 165.733855][ T7419] BTRFS info (device loop3): has skinny extents [ 165.968416][ T7419] BTRFS info (device loop3): clearing free space tree [ 165.985434][ T7419] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.012356][ T7419] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.080500][ T5027] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 166.087943][ T5027] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 166.113783][ T7419] BTRFS info (device loop3): creating free space tree [ 166.134379][ T7419] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 166.156375][ T5027] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 166.180553][ T5027] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 166.184830][ T7419] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 166.187987][ T5027] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 166.229940][ T4250] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 166.266178][ T7459] loop2: detected capacity change from 0 to 1024 [ 166.266959][ T5023] Bluetooth: hci0: command 0x1407 tx timeout [ 166.279847][ T5027] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 166.280251][ T7419] BTRFS info (device loop3): checking UUID tree [ 166.666907][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.688245][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.715933][ T4250] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 166.734004][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.750553][ T4250] usb 1-1: config 0 descriptor?? [ 166.877693][ T5027] playstation 0003:054C:0DF2.0019: Failed to retrieve feature with reportID 5: -71 [ 166.900466][ T5027] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense calibration info: -71 [ 166.919693][ T5027] playstation 0003:054C:0DF2.0019: Failed to get calibration data from DualSense [ 166.960761][ T5027] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 166.990472][ T5027] playstation: probe of 0003:054C:0DF2.0019 failed with error -71 [ 167.067192][ T5027] usb 5-1: USB disconnect, device number 16 [ 167.225486][ T7463] fido_id[7463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 167.358263][ T4250] sony 0003:054C:024B.001A: unexpected long global item [ 167.386369][ T4250] sony 0003:054C:024B.001A: parse failed [ 167.399441][ T4250] sony: probe of 0003:054C:024B.001A failed with error -22 [ 167.599773][ T5027] usb 1-1: USB disconnect, device number 17 [ 167.817010][ T7482] loop2: detected capacity change from 0 to 128 [ 167.911858][ T7482] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 167.941484][ T7482] hpfs: filesystem error: improperly stopped [ 167.968974][ T7482] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 167.986321][ T7482] hpfs: You really don't want any checks? You are crazy... [ 168.000835][ T7482] hpfs: hpfs_map_sector(): read error [ 168.011152][ T7482] hpfs: code page support is disabled [ 168.030909][ T7482] hpfs: hpfs_map_4sectors(): unaligned read [ 168.036865][ T7482] hpfs: hpfs_map_4sectors(): unaligned read [ 168.070830][ T7482] hpfs: filesystem error: unable to find root dir [ 168.321173][ T7495] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 168.452387][ T25] audit: type=1326 audit(1763558823.591:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7497 comm="syz.0.1190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3b4953749 code=0x0 [ 168.659156][ T7504] loop4: detected capacity change from 0 to 512 [ 168.762191][ T7507] loop3: detected capacity change from 0 to 2048 [ 168.833857][ T7507] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 168.852270][ T7507] UDF-fs: Scanning with blocksize 512 failed [ 168.973703][ T7507] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.266319][ T4718] attempt to access beyond end of device [ 169.266319][ T4718] loop3: rw=1, want=2050, limit=2048 [ 169.298255][ T4718] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 169.336668][ T4718] attempt to access beyond end of device [ 169.336668][ T4718] loop3: rw=1, want=2050, limit=2048 [ 169.374798][ T4718] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 169.404555][ T4718] attempt to access beyond end of device [ 169.404555][ T4718] loop3: rw=1, want=2050, limit=2048 [ 169.434627][ T7512] block device autoloading is deprecated and will be removed. [ 169.443323][ T4718] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 169.462438][ T4718] attempt to access beyond end of device [ 169.462438][ T4718] loop3: rw=1, want=2050, limit=2048 [ 169.501852][ T4718] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 169.527680][ T4718] attempt to access beyond end of device [ 169.527680][ T4718] loop3: rw=1, want=2052, limit=2048 [ 169.565745][ T4718] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 169.595438][ T4718] attempt to access beyond end of device [ 169.595438][ T4718] loop3: rw=1, want=2052, limit=2048 [ 169.641011][ T4718] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 169.681714][ T4718] attempt to access beyond end of device [ 169.681714][ T4718] loop3: rw=1, want=2052, limit=2048 [ 169.725251][ T7504] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 169.759166][ T4718] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 169.774415][ T7504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.798678][ T4718] attempt to access beyond end of device [ 169.798678][ T4718] loop3: rw=1, want=2052, limit=2048 [ 169.852889][ T4718] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 169.940889][ T4718] attempt to access beyond end of device [ 169.940889][ T4718] loop3: rw=1, want=2054, limit=2048 [ 169.963014][ T7504] EXT4-fs (loop4): 1 truncate cleaned up [ 169.968694][ T7504] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_ioprio=0x0000000000000002,noauto_da_alloc,lazytime,noquota,quota,,errors=continue. Quota mode: writeback. [ 170.059552][ T4718] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 170.068222][ T4718] attempt to access beyond end of device [ 170.068222][ T4718] loop3: rw=1, want=2054, limit=2048 [ 170.153081][ T4718] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 171.414606][ T7560] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 171.438574][ T7560] netlink: 'syz.1.1212': attribute type 2 has an invalid length. [ 171.481662][ T7562] loop4: detected capacity change from 0 to 16 [ 171.787398][ T7575] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 171.816042][ T7576] netlink: 'syz.2.1217': attribute type 9 has an invalid length. [ 171.851674][ T7576] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1217'. [ 172.113644][ T1109] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.271870][ T7578] overlayfs: failed to resolve './file0': -2 [ 172.484351][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1226'. [ 172.500497][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.518556][ T1109] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.537496][ T1109] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.561154][ T1109] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.580879][ T1109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.591076][ T1109] usb 4-1: config 0 descriptor?? [ 172.739501][ T5633] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 172.766051][ T4250] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 172.802191][ T7562] erofs: (device loop4): mounted with root inode @ nid 36. [ 172.835562][ T7562] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 172.885521][ T7562] erofs: (device loop4): z_erofs_lz4_decompress: failed to decompress -29 in[58, 4038] out[1851] [ 172.927826][ T7562] erofs: (device loop4): z_erofs_readpage: failed to read, err [-117] [ 173.000017][ T5633] usb 1-1: Using ep0 maxpacket: 8 [ 173.051331][ T7594] loop2: detected capacity change from 0 to 32768 [ 173.087968][ T1109] plantronics 0003:047F:FFFF.001B: unbalanced delimiter at end of report description [ 173.108468][ T1109] plantronics 0003:047F:FFFF.001B: parse failed [ 173.118189][ T1109] plantronics: probe of 0003:047F:FFFF.001B failed with error -22 [ 173.149593][ T5633] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 173.160145][ T5633] usb 1-1: config 179 has no interface number 0 [ 173.166426][ T5633] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 173.179264][ T5633] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 173.191970][ T5633] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 173.206445][ T5633] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 173.218954][ T4250] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 173.229031][ T4250] usb 2-1: config 1 has no interface number 0 [ 173.247603][ T4250] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.259419][ T5633] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 173.273562][ T4250] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 173.284783][ T5633] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 173.309399][ T4250] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 173.318868][ T5633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.331919][ T4250] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 173.345440][ T4250] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.365836][ T1109] usb 4-1: USB disconnect, device number 12 [ 173.372829][ T7584] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 173.519788][ T4250] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.533218][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.550974][ T4250] usb 2-1: Product: syz [ 173.555165][ T4250] usb 2-1: Manufacturer: syz [ 173.565443][ T4250] usb 2-1: SerialNumber: syz [ 173.591053][ T7590] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 173.672762][ T1109] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input21 [ 173.754655][ T7594] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1227 (7594) [ 173.807966][ T7594] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 173.827033][ T7590] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 173.839455][ T7594] BTRFS info (device loop2): using free space tree [ 173.846062][ T7594] BTRFS info (device loop2): has skinny extents [ 173.853342][ T1109] usb 1-1: USB disconnect, device number 18 [ 173.859644][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 173.859685][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 174.037985][ T1109] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 174.103447][ T7590] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 174.125912][ T7618] loop3: detected capacity change from 0 to 512 [ 174.217514][ T7618] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 174.283713][ T7618] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 174.290695][ T7594] BTRFS info (device loop2): enabling ssd optimizations [ 174.311831][ T7618] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 174.322297][ T7618] System zones: 0-2, 18-18, 34-35 [ 174.362267][ T7618] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 174.552338][ T7590] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 174.571991][ T4250] cdc_ncm 2-1:1.1: bind() failure [ 174.884782][ T5027] usb 2-1: USB disconnect, device number 17 [ 175.054936][ T7642] loop3: detected capacity change from 0 to 512 [ 175.197353][ T7642] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.281955][ T7642] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.629000][ T7659] loop2: detected capacity change from 0 to 4096 [ 175.656838][ T4243] Bluetooth: hci3: command 0x0406 tx timeout [ 175.713817][ T4243] Bluetooth: hci1: command 0x0406 tx timeout [ 175.729525][ T4243] Bluetooth: hci2: command 0x0406 tx timeout [ 175.839738][ T7677] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.861759][ T7676] netlink: 'syz.4.1253': attribute type 9 has an invalid length. [ 175.872730][ T7676] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1253'. [ 177.172973][ T7681] loop4: detected capacity change from 0 to 40427 [ 177.213752][ T4243] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 177.227365][ T7681] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 177.243605][ T7681] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 177.257955][ T7681] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6 [ 177.276066][ T7681] F2FS-fs (loop4): invalid crc value [ 177.306957][ T7681] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.400965][ T7681] F2FS-fs (loop4): Start checkpoint disabled! [ 177.438759][ T7681] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 177.458546][ T7681] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 177.673071][ T7733] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 177.703371][ T4243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.737712][ T4243] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.800587][ T4307] attempt to access beyond end of device [ 177.800587][ T4307] loop4: rw=2049, want=40984, limit=40427 [ 177.810919][ T4243] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.851379][ T4243] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.860505][ T4243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.898973][ T4243] usb 3-1: config 0 descriptor?? [ 178.288114][ T7744] loop3: detected capacity change from 0 to 8192 [ 178.325780][ T7746] loop0: detected capacity change from 0 to 32768 [ 178.398430][ T4243] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 178.414638][ T7744] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 178.423998][ T7744] REISERFS (device loop3): using ordered data mode [ 178.443040][ T7744] reiserfs: using flush barriers [ 178.451806][ T7744] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 178.468445][ T4243] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 178.468753][ T7744] REISERFS (device loop3): checking transaction log (loop3) [ 178.549116][ T5027] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 178.630921][ T7744] REISERFS (device loop3): Using tea hash to sort names [ 178.646724][ T7744] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 178.724593][ T7744] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 178.857958][ T5027] usb 2-1: Using ep0 maxpacket: 16 [ 178.942908][ T7762] loop3: detected capacity change from 0 to 128 [ 178.985492][ T7762] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 179.038581][ T5027] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 179.046910][ T5027] usb 2-1: config 0 has no interface number 0 [ 179.047744][ T7762] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 179.073512][ T5027] usb 2-1: config 0 interface 119 has no altsetting 0 [ 179.082028][ C1] plantronics 0003:047F:FFFF.001C: hid_field_extract() called with n (132) > 32! (ksoftirqd/1) [ 179.270083][ T5027] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 179.284743][ T5027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.359391][ T5027] usb 2-1: Product: syz [ 179.363588][ T5027] usb 2-1: Manufacturer: syz [ 179.379590][ T7767] loop3: detected capacity change from 0 to 32768 [ 179.387812][ T5465] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 179.389109][ T5027] usb 2-1: SerialNumber: syz [ 179.441215][ T7767] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.1292 (7767) [ 179.471025][ T7746] XFS (loop0): Mounting V5 Filesystem [ 179.477122][ T21] usb 3-1: USB disconnect, device number 16 [ 179.484304][ T5027] usb 2-1: config 0 descriptor?? [ 179.520950][ T7767] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 179.529875][ T7767] BTRFS info (device loop3): using free space tree [ 179.536389][ T7767] BTRFS info (device loop3): has skinny extents [ 179.620616][ T7746] XFS (loop0): Ending clean mount [ 179.662721][ T7776] fido_id[7776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 179.676977][ T5465] usb 5-1: Using ep0 maxpacket: 8 [ 179.704394][ T7746] XFS (loop0): Quotacheck needed: Please wait. [ 179.811306][ T5465] usb 5-1: config 0 has no interfaces? [ 179.825796][ T7746] XFS (loop0): Quotacheck: Done. [ 179.919526][ T5465] usb 5-1: config 0 has no interfaces? [ 179.935447][ T7767] BTRFS info (device loop3): enabling ssd optimizations [ 179.989413][ T25] audit: type=1800 audit(1763559091.127:48): pid=7767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1292" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 180.017920][ T5465] usb 5-1: config 0 has no interfaces? [ 180.030267][ T5027] usb 2-1: USB disconnect, device number 18 [ 180.119988][ T5465] usb 5-1: config 0 has no interfaces? [ 180.132653][ T5465] usb 5-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 180.179478][ T5465] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.240811][ T5465] usb 5-1: config 0 descriptor?? [ 180.537092][ T4200] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop3 scanned by udevd (4200) [ 180.732306][ T5465] usb 5-1: USB disconnect, device number 17 [ 180.842990][ T4183] XFS (loop0): Unmounting Filesystem [ 181.145635][ T5634] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.344793][ T7802] loop2: detected capacity change from 0 to 32768 [ 181.417871][ T7802] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1296 (7802) [ 181.472034][ T7802] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 181.525771][ T7802] BTRFS info (device loop2): using free space tree [ 181.550182][ T5634] usb 4-1: config 6 has an invalid interface number: 57 but max is 0 [ 181.562084][ T5634] usb 4-1: config 6 has no interface number 0 [ 181.568592][ T7802] BTRFS info (device loop2): has skinny extents [ 181.602840][ T5634] usb 4-1: config 6 interface 57 has no altsetting 0 [ 181.809753][ T5634] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 181.868398][ T5634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.929288][ T5634] usb 4-1: Product: syz [ 181.945291][ T5634] usb 4-1: Manufacturer: syz [ 181.960315][ T7802] BTRFS info (device loop2): enabling ssd optimizations [ 181.979267][ T5634] usb 4-1: SerialNumber: syz [ 182.195981][ T7860] loop0: detected capacity change from 0 to 1024 [ 182.249040][ T4200] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (4200) [ 182.301148][ T5634] usb-storage 4-1:6.57: USB Mass Storage device detected [ 182.991410][ T7888] loop3: detected capacity change from 0 to 64 [ 183.032646][ T7889] loop2: detected capacity change from 0 to 2048 [ 183.104789][ T25] audit: type=1800 audit(1763559094.247:49): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1322" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 183.162424][ T25] audit: type=1800 audit(1763559094.247:50): pid=7888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1322" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 183.338012][ T7895] loop3: detected capacity change from 0 to 2048 [ 183.417629][ T7895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.666391][ T5634] usb 4-1: USB disconnect, device number 13 [ 183.805790][ T7904] loop3: detected capacity change from 0 to 512 [ 183.873315][ T7908] binder: 7907:7908 unknown command 0 [ 183.881221][ T7908] binder: 7907:7908 ioctl c0306201 200000000080 returned -22 [ 183.891165][ T7908] binder: 7907:7908 ioctl c0306201 200000000180 returned -14 [ 183.931176][ T7904] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 183.961487][ T7904] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.259442][ T5634] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 184.272490][ T7889] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.334219][ T7922] loop3: detected capacity change from 0 to 1024 [ 184.444976][ T7922] EXT4-fs (loop3): Ignoring removed nobh option [ 184.454896][ T7922] EXT4-fs (loop3): Ignoring removed bh option [ 184.467759][ T7922] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.589553][ T5634] usb 2-1: Using ep0 maxpacket: 32 [ 184.640922][ T7922] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,journal_dev=0x0000000000000043,data_err=ignore,resgid=0x0000000000000000,data_err=ignore,jqfmt=vfsv0,nobh,errors=remount-ro,bh,dioread_nolock,. Quota mode: none. [ 184.749681][ T5634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.770700][ T5634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.798158][ T5634] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 184.807792][ T5634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.856910][ T5634] usb 2-1: config 0 descriptor?? [ 185.165951][ T7926] loop0: detected capacity change from 0 to 40427 [ 185.203491][ T7926] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 185.226717][ T7926] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 185.283942][ T7926] F2FS-fs (loop0): Found nat_bits in checkpoint [ 185.347017][ T5634] savu 0003:1E7D:2D5A.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 185.382444][ T7926] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 185.394439][ T7926] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 185.459410][ T5465] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 185.589842][ T4183] attempt to access beyond end of device [ 185.589842][ T4183] loop0: rw=2049, want=45104, limit=40427 [ 185.605815][ T5634] usb 2-1: USB disconnect, device number 19 [ 185.729587][ T5465] usb 5-1: Using ep0 maxpacket: 32 [ 185.760311][ T7940] loop3: detected capacity change from 0 to 512 [ 185.849751][ T5465] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 185.870307][ T5465] usb 5-1: config 0 has no interface number 0 [ 185.876451][ T5465] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 185.947558][ T5465] usb 5-1: config 0 interface 196 has no altsetting 0 [ 185.976373][ T7942] loop3: detected capacity change from 0 to 4096 [ 186.047704][ T7942] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 186.160064][ T5465] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 186.197353][ T5465] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.220509][ T5465] usb 5-1: Product: syz [ 186.224734][ T5465] usb 5-1: Manufacturer: syz [ 186.279378][ T5465] usb 5-1: SerialNumber: syz [ 186.306992][ T5465] usb 5-1: config 0 descriptor?? [ 186.340329][ T7935] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 186.448710][ T4186] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 186.464537][ T4186] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 186.485537][ T4186] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 186.615655][ T5465] ipheth 5-1:0.196: Unable to find endpoints [ 186.648672][ T5465] usb 5-1: USB disconnect, device number 18 [ 186.762913][ T7952] loop2: detected capacity change from 0 to 64 [ 188.109913][ T5466] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 188.186384][ T7964] loop4: detected capacity change from 0 to 32768 [ 188.268113][ T7964] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1353 (7964) [ 188.490344][ T5466] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 188.512417][ T5466] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.554495][ T5466] usb 4-1: config 0 descriptor?? [ 188.898353][ T7984] loop1: detected capacity change from 0 to 131072 [ 188.932390][ T7964] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 188.992595][ T7964] BTRFS info (device loop4): using free space tree [ 188.999141][ T7964] BTRFS info (device loop4): has skinny extents [ 189.118979][ T7982] loop2: detected capacity change from 0 to 32768 [ 189.190906][ T7964] BTRFS info (device loop4): enabling ssd optimizations [ 189.431695][ T8015] loop0: detected capacity change from 0 to 1024 [ 189.860920][ T7984] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 189.867642][ T7984] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 189.894269][ T7984] F2FS-fs (loop1): invalid crc value [ 189.937780][ T7984] F2FS-fs (loop1): Found nat_bits in checkpoint [ 189.956308][ T5466] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 189.974437][ T5466] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 189.992030][ T5466] asix: probe of 4-1:0.0 failed with error -71 [ 190.011137][ T5466] usb 4-1: USB disconnect, device number 14 [ 190.028234][ T7984] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 190.035292][ T7984] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 190.059491][ T13] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 190.129193][ T7982] XFS (loop2): Mounting V5 Filesystem [ 190.197248][ T7982] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 190.226701][ T7982] XFS (loop2): Starting recovery (logdev: internal) [ 190.259206][ T7982] XFS (loop2): Ending recovery (logdev: internal) [ 190.275300][ T7982] XFS (loop2): Quotacheck needed: Please wait. [ 190.353498][ T7982] XFS (loop2): Quotacheck: Done. [ 190.469673][ T13] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 190.505332][ T13] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 190.533826][ T13] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 190.549798][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.590345][ T8017] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 190.646701][ T4190] XFS (loop2): Unmounting Filesystem [ 190.674265][ T8033] loop3: detected capacity change from 0 to 256 [ 190.796864][ T8033] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18d7c, utbl_chksum : 0xe619d30d) [ 190.859223][ T8038] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 190.972856][ T13] usb 5-1: USB disconnect, device number 19 [ 191.055543][ T7808] kernel write not supported for file /snd/seq (pid: 7808 comm: kworker/1:19) [ 191.423047][ T4519] udevd[4519]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.655175][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.727575][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.755100][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.768412][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.788508][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.796591][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.808606][ T8063] loop4: detected capacity change from 0 to 2048 [ 191.823123][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.834909][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.846459][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.873880][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.896844][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.910316][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.924217][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.932371][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.940558][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.948364][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.973692][ T5466] hid-generic 0002:0004:0009.001E: unknown main item tag 0x0 [ 191.998881][ T5466] hid-generic 0002:0004:0009.001E: hidraw0: HID v0.04 Device [syz1] on syz0 [ 192.094687][ T8079] loop3: detected capacity change from 0 to 128 [ 192.450035][ T5466] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 192.846407][ T5466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.864134][ T8063] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 192.886651][ T5466] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.924463][ T5466] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.945401][ T5466] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.956013][ T5466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.966150][ T5466] usb 1-1: config 0 descriptor?? [ 192.973515][ T8063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 192.997362][ T8093] loop2: detected capacity change from 0 to 32768 [ 193.091911][ T8094] fido_id[8094]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 193.205388][ T8098] loop4: detected capacity change from 0 to 256 [ 193.255309][ T8098] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.276755][ T8098] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 193.299177][ T8098] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 193.412641][ T8098] exFAT-fs (loop4): abnormal access to deleted dentry [ 193.443164][ T5466] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 193.463752][ T5466] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 193.733067][ T5466] usb 1-1: USB disconnect, device number 19 [ 193.969422][ T5027] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 193.979682][ T8093] XFS (loop2): Mounting V5 Filesystem [ 194.019624][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.025938][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.069820][ T4307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.187719][ T8093] XFS (loop2): Ending clean mount [ 194.241272][ T4307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.349694][ T5027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.383828][ T5027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.424811][ T5027] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.450507][ T8119] fido_id[8119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 194.481541][ T5027] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.529532][ T5027] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.562860][ T4190] XFS (loop2): Unmounting Filesystem [ 194.584816][ T4307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.596329][ T5027] usb 5-1: config 0 descriptor?? [ 194.752492][ T8133] IPVS: sh: FWM 3 0x00000003 - no destination available [ 194.769544][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 194.791297][ T8138] loop0: detected capacity change from 0 to 128 [ 194.920783][ T8138] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 194.970562][ T8138] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.050631][ T4307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.091609][ T5027] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 195.155387][ T5027] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 195.358748][ T8147] loop1: detected capacity change from 0 to 4096 [ 195.384929][ T8147] EXT4-fs (loop1): Test dummy encryption mode enabled [ 195.421773][ T8147] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,noauto_da_alloc,dioread_nolock,test_dummy_encryption,nobarrier,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 195.500908][ T5466] usb 5-1: USB disconnect, device number 20 [ 195.654789][ T8128] chnl_net:caif_netlink_parms(): no params data found [ 195.926152][ T8128] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.941492][ T8128] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.955016][ T8128] device bridge_slave_0 entered promiscuous mode [ 196.006875][ T8128] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.020048][ T8128] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.042698][ T8128] device bridge_slave_1 entered promiscuous mode [ 196.069639][ T4234] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 196.134922][ T8179] loop1: detected capacity change from 0 to 2048 [ 196.183879][ T8128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.200248][ T8184] loop0: detected capacity change from 0 to 256 [ 196.201993][ T8179] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 196.232449][ T8187] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 196.260379][ T8184] FAT-fs (loop0): Directory bread(block 1285) failed [ 196.267112][ T8184] FAT-fs (loop0): Directory bread(block 1286) failed [ 196.292021][ T8128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.306075][ T8184] FAT-fs (loop0): Directory bread(block 1287) failed [ 196.339883][ T4234] usb 3-1: Using ep0 maxpacket: 8 [ 196.349002][ T8184] FAT-fs (loop0): Directory bread(block 1288) failed [ 196.397032][ T8184] FAT-fs (loop0): Directory bread(block 1285) failed [ 196.430961][ T8184] FAT-fs (loop0): Directory bread(block 1286) failed [ 196.447378][ T8128] team0: Port device team_slave_0 added [ 196.465831][ T8184] FAT-fs (loop0): Directory bread(block 1287) failed [ 196.486610][ T4234] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 196.491848][ T8184] FAT-fs (loop0): Directory bread(block 1288) failed [ 196.518675][ T8128] team0: Port device team_slave_1 added [ 196.524858][ T8194] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 196.532481][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.536389][ T8184] FAT-fs (loop0): FAT read failed (blocknr 1281) [ 196.612688][ T4234] pvrusb2: Hardware description: Terratec Grabster AV400 [ 196.640450][ T4234] pvrusb2: ********** [ 196.644530][ T4234] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 196.668097][ T4234] pvrusb2: Important functionality might not be entirely working. [ 196.676741][ T4234] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 196.695852][ T4234] pvrusb2: ********** [ 196.705911][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.729106][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.755767][ T5466] Bluetooth: hci2: command 0x0409 tx timeout [ 196.767066][ T8128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.781201][ T8128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.788334][ T8128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.815908][ T8128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.833995][ T2420] pvrusb2: Invalid write control endpoint [ 196.878735][ T8199] netlink: 'syz.1.1423': attribute type 2 has an invalid length. [ 196.897572][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1423'. [ 197.045583][ T2420] pvrusb2: Invalid write control endpoint [ 197.065459][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 197.111296][ T4227] usb 3-1: USB disconnect, device number 17 [ 197.124502][ T8203] loop0: detected capacity change from 0 to 4096 [ 197.132851][ T8128] device hsr_slave_0 entered promiscuous mode [ 197.143529][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 197.155035][ T8128] device hsr_slave_1 entered promiscuous mode [ 197.168308][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 197.195130][ T2420] pvrusb2: Device being rendered inoperable [ 197.245163][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 197.316479][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 197.413376][ T2420] pvrusb2: Attached sub-driver cx25840 [ 197.419260][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 197.433816][ T4183] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 197.451922][ T4183] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 197.507740][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 197.681894][ T5023] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 197.770182][ T5023] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.783434][ T8208] loop1: detected capacity change from 0 to 32768 [ 197.854866][ T8208] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1428 (8208) [ 197.920196][ T8128] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.938487][ T8208] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 197.997454][ T8208] BTRFS info (device loop1): turning on sync discard [ 198.024140][ T8208] BTRFS info (device loop1): setting nodatacow, compression disabled [ 198.088503][ T4307] device hsr_slave_0 left promiscuous mode [ 198.120013][ T8208] BTRFS info (device loop1): turning off barriers [ 198.148457][ T8208] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 198.176854][ T4307] device hsr_slave_1 left promiscuous mode [ 198.186984][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.209100][ T8208] BTRFS info (device loop1): trying to use backup root at mount time [ 198.226662][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.237749][ T8208] BTRFS info (device loop1): metadata ratio 32769 [ 198.257534][ T8208] BTRFS info (device loop1): max_inline at 0 [ 198.284504][ T8208] BTRFS info (device loop1): using free space tree [ 198.292588][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.317808][ T8208] BTRFS info (device loop1): has skinny extents [ 198.319772][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.356390][ T4307] device bridge_slave_1 left promiscuous mode [ 198.408780][ T4307] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.439961][ T4307] device bridge_slave_0 left promiscuous mode [ 198.463553][ T4307] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.491351][ T7852] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 198.549763][ T8208] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 198.566169][ T3091] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 198.621559][ T8208] BTRFS warning (device loop1): couldn't read tree root [ 198.632168][ T4307] device bond0 left promiscuous mode [ 198.640187][ T8208] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 198.659417][ T4307] device bond_slave_0 left promiscuous mode [ 198.659647][ T8208] BTRFS warning (device loop1): couldn't read tree root [ 198.665823][ T4307] device bond_slave_1 left promiscuous mode [ 198.706109][ T4307] device veth1_macvtap left promiscuous mode [ 198.717495][ T8208] BTRFS info (device loop1): enabling ssd optimizations [ 198.734900][ T8208] BTRFS info (device loop1): clearing free space tree [ 198.743759][ T4307] device veth0_macvtap left promiscuous mode [ 198.755085][ T8208] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.771265][ T4307] device veth1_vlan left promiscuous mode [ 198.775202][ T8208] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 198.810816][ T5027] Bluetooth: hci2: command 0x041b tx timeout [ 198.812318][ T4307] device veth0_vlan left promiscuous mode [ 198.828491][ T8208] BTRFS info (device loop1): creating free space tree [ 198.843145][ T8208] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 198.872021][ T8208] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 199.052568][ T25] audit: type=1800 audit(1763559110.197:51): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1428" name="bus" dev="loop1" ino=257 res=0 errno=0 [ 199.367673][ T8288] loop0: detected capacity change from 0 to 8192 [ 199.463275][ T8288] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 199.479526][ T8288] REISERFS (device loop0): using ordered data mode [ 199.496492][ T8288] reiserfs: using flush barriers [ 199.508158][ T8288] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.548798][ T8288] REISERFS (device loop0): checking transaction log (loop0) [ 199.601627][ T8288] REISERFS (device loop0): Using r5 hash to sort names [ 199.608797][ T8288] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 199.649157][ T8290] loop4: detected capacity change from 0 to 32768 [ 199.728322][ T8290] loop4: p1 p3 < > [ 199.791567][ T8295] loop1: detected capacity change from 0 to 512 [ 199.960509][ T8299] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 200.055954][ T8299] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 200.201745][ T4307] team0 (unregistering): Port device team_slave_1 removed [ 200.216672][ T4307] team0 (unregistering): Port device team_slave_0 removed [ 200.233149][ T4307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.251173][ T8047] udevd[8047]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 200.261421][ T4307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.271092][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 200.293966][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 200.307598][ T8047] udevd[8047]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 200.381156][ T4307] bond0 (unregistering): Released all slaves [ 200.424430][ T8128] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 200.429483][ T5457] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 200.445842][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1439'. [ 200.472961][ T8128] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.505850][ T8128] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.767116][ T8128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.789893][ T5457] usb 5-1: config 0 has no interfaces? [ 200.860344][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.892993][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.918809][ T5027] Bluetooth: hci2: command 0x040f tx timeout [ 200.932279][ T8128] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.937096][ T8335] loop1: detected capacity change from 0 to 512 [ 200.949721][ T5457] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 200.958779][ T5457] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.982392][ T8335] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.989580][ T5457] usb 5-1: Product: syz [ 200.996387][ T5457] usb 5-1: Manufacturer: syz [ 201.003786][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.021226][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.031868][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.036613][ T5457] usb 5-1: SerialNumber: syz [ 201.038955][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.072632][ T5457] r8152-cfgselector 5-1: config 0 descriptor?? [ 201.082542][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.091607][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.100889][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.109664][ T8335] EXT4-fs (loop1): 1 truncate cleaned up [ 201.115573][ T8335] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,errors=remount-ro,debug_want_extra_isize=0x0000000000000066,nodioread_nolock,nodiscard,noquota,. Quota mode: none. [ 201.129827][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.140710][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.161236][ T25] audit: type=1800 audit(1763559112.307:52): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1460" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 201.175847][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.214798][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.251962][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.275728][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.296963][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.328069][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.344078][ T5457] usbip-host 5-1: 5-1 is not in match_busid table... skip! [ 201.368869][ T8128] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.396654][ T8128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.436017][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.446414][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.480121][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.500126][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.508392][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.525565][ T8326] loop2: detected capacity change from 0 to 40427 [ 201.533298][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.633630][ T8326] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x1ffff [ 201.639827][ T5027] usb 5-1: USB disconnect, device number 21 [ 201.698632][ T8326] F2FS-fs (loop2): invalid crc value [ 201.738006][ T8326] F2FS-fs (loop2): Found nat_bits in checkpoint [ 201.912931][ T8326] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 201.952555][ T7808] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 201.996539][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.005143][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.025259][ T8128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.239457][ T7808] usb 2-1: Using ep0 maxpacket: 32 [ 202.272495][ T8382] loop4: detected capacity change from 0 to 512 [ 202.314405][ T8382] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.354487][ T8382] EXT4-fs (loop4): 1 truncate cleaned up [ 202.369546][ T7808] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 202.395086][ T7808] usb 2-1: config 1 has no interface number 0 [ 202.423589][ T8382] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 202.443529][ T25] audit: type=1800 audit(1763559113.587:53): pid=8326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1458" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 202.459081][ T8326] attempt to access beyond end of device [ 202.459081][ T8326] loop2: rw=16812033, want=78672, limit=40427 [ 202.480150][ T7808] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.516424][ T7808] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.574816][ T7808] usb 2-1: config 1 interface 236 has no altsetting 0 [ 202.643576][ T4190] attempt to access beyond end of device [ 202.643576][ T4190] loop2: rw=2049, want=45104, limit=40427 [ 202.661844][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.670195][ T7808] usb 2-1: config 1 has an invalid interface number: 236 but max is 0 [ 202.678346][ T7808] usb 2-1: config 1 has no interface number 0 [ 202.705971][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.724487][ T7808] usb 2-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.752633][ T7808] usb 2-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.767144][ T7808] usb 2-1: config 1 interface 236 has no altsetting 0 [ 202.784856][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 202.807348][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.842095][ T8128] device veth0_vlan entered promiscuous mode [ 202.864004][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.882329][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.922297][ T8128] device veth1_vlan entered promiscuous mode [ 202.967480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.980909][ T7808] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 203.002114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.010098][ T7808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.026595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.034892][ T7808] usb 2-1: Product: syz [ 203.039063][ T7808] usb 2-1: Manufacturer: syz [ 203.051662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.064993][ T7808] usb 2-1: SerialNumber: syz [ 203.072005][ T5023] Bluetooth: hci2: command 0x0419 tx timeout [ 203.089816][ T8128] device veth0_macvtap entered promiscuous mode [ 203.100985][ T8128] device veth1_macvtap entered promiscuous mode [ 203.132305][ T7808] ti_usb_3410_5052 2-1:1.236: TI USB 5052 2 port adapter converter detected [ 203.154947][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.217329][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.301120][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.337669][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.364520][ T13] usb 2-1: USB disconnect, device number 20 [ 203.408854][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.436128][ T8403] loop0: detected capacity change from 0 to 32768 [ 203.464205][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.495410][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.534521][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.562173][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.575408][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.589061][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.608256][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.630561][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 203.706831][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.754189][ T8403] XFS (loop0): Mounting V5 Filesystem [ 203.839142][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.880307][ T8403] XFS (loop0): Ending clean mount [ 203.887098][ T8403] XFS (loop0): Quotacheck needed: Please wait. [ 203.929424][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.974282][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.049437][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.060600][ T8403] XFS (loop0): Quotacheck: Done. [ 204.089603][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.135739][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.151702][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.196127][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.227317][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.251380][ T8128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.265473][ T8442] loop2: detected capacity change from 0 to 1024 [ 204.296402][ T8442] EXT4-fs (loop2): Test dummy encryption mode enabled [ 204.296670][ T8128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.335641][ T8442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 204.357512][ T4183] XFS (loop0): Unmounting Filesystem [ 204.367209][ T8442] System zones: 0-1, 3-36 [ 204.381456][ T8128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.457569][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 204.475933][ T8442] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000004,nojournal_checksum,stripe=0x0000000000000007,nobarrier,data=ordered,test_dummy_encryption,nogrpid,debug,,errors=continue. Quota mode: writeback. [ 204.491344][ T7852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 204.592149][ T8128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.612658][ T8442] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 204.634495][ T8128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.637541][ T8445] loop1: detected capacity change from 0 to 4096 [ 204.665889][ T8128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.705829][ T8442] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c018, mo2=0002] [ 204.709424][ T8128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.883799][ T8442] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 204.899781][ T8447] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 204.971431][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.999119][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.036893][ T8427] loop4: detected capacity change from 0 to 40427 [ 205.076022][ T8449] syz.1.1480 (8449) used greatest stack depth: 20048 bytes left [ 205.129893][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.154421][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.182754][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 205.199144][ T8427] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 205.210502][ T8427] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 205.248759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 205.400037][ T8427] F2FS-fs (loop4): Found nat_bits in checkpoint [ 205.723025][ T8427] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 205.760923][ T8427] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 205.857754][ T8427] F2FS-fs (loop4): switch extent_cache option is not allowed [ 205.902493][ T8427] attempt to access beyond end of device [ 205.902493][ T8427] loop4: rw=524288, want=45072, limit=40427 [ 205.970251][ T8427] attempt to access beyond end of device [ 205.970251][ T8427] loop4: rw=0, want=45072, limit=40427 [ 206.109183][ T4189] attempt to access beyond end of device [ 206.109183][ T4189] loop4: rw=2049, want=45104, limit=40427 [ 206.147958][ T8504] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 206.176824][ T8504] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 206.276815][ T8504] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 206.347839][ T8504] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 206.388248][ T8504] overlayfs: d_ino too big (359, ino=9223372036854777717, xinobits=3) [ 206.448088][ T8504] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 206.498668][ T8504] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 206.572294][ T8504] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 206.600513][ T8504] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 206.611457][ T8463] loop2: detected capacity change from 0 to 32768 [ 206.631935][ T8504] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 206.685279][ T8504] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 206.718666][ T8504] overlayfs: d_ino too big (uprobe_profile, ino=4611686018427413453, xinobits=3) [ 207.957921][ T8546] loop0: detected capacity change from 0 to 32768 [ 207.973280][ T8537] loop4: detected capacity change from 0 to 32768 [ 208.048994][ T8546] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1508 (8546) [ 208.158993][ T8537] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.1506 (8537) [ 208.159244][ T8546] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 208.231284][ T8546] BTRFS info (device loop0): using free space tree [ 208.254576][ T8546] BTRFS info (device loop0): has skinny extents [ 208.254626][ T8537] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 208.369849][ T8537] BTRFS info (device loop4): enabling auto defrag [ 208.376317][ T8537] BTRFS info (device loop4): force clearing of disk cache [ 208.442136][ T8537] BTRFS info (device loop4): enabling disk space caching [ 208.515587][ T8537] BTRFS info (device loop4): max_inline at 0 [ 208.563524][ T8537] BTRFS info (device loop4): disk space caching is enabled [ 208.609454][ T8537] BTRFS info (device loop4): has skinny extents [ 208.657710][ T8645] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1523'. [ 208.749811][ T8546] BTRFS info (device loop0): enabling ssd optimizations [ 208.774496][ T8649] netlink: 'syz.1.1522': attribute type 5 has an invalid length. [ 208.890163][ T8575] loop2: detected capacity change from 0 to 40427 [ 208.913514][ T8575] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x35f7 [ 208.931378][ T25] audit: type=1800 audit(1763559120.067:54): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1508" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 208.951825][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.013452][ T8575] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1ffff [ 209.071220][ T8575] F2FS-fs (loop2): invalid crc value [ 209.094775][ T8575] F2FS-fs (loop2): Found nat_bits in checkpoint [ 209.299461][ T8537] BTRFS info (device loop4): enabling ssd optimizations [ 209.322923][ T8537] BTRFS info (device loop4): clearing free space tree [ 209.339793][ T8537] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 209.373533][ T8537] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 209.442521][ T8575] F2FS-fs (loop2): Start checkpoint disabled! [ 209.496773][ T8575] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 209.531676][ T8664] loop5: detected capacity change from 0 to 32768 [ 209.739156][ T8664] XFS (loop5): Mounting V5 Filesystem [ 209.899975][ T8664] XFS (loop5): Ending clean mount [ 209.908002][ T3091] attempt to access beyond end of device [ 209.908002][ T3091] loop2: rw=2049, want=40984, limit=40427 [ 209.975555][ T25] audit: type=1804 audit(1763559121.117:55): pid=8692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1506" name="/newroot/289/file0/file2" dev="loop4" ino=261 res=1 errno=0 [ 210.030125][ T8664] XFS (loop5): Quotacheck needed: Please wait. [ 210.166448][ T8664] XFS (loop5): Quotacheck: Done. [ 210.321618][ T25] audit: type=1800 audit(1763559121.467:56): pid=8664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1524" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 210.444427][ T8703] loop0: detected capacity change from 0 to 512 [ 210.459884][ T4227] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 210.478518][ T8706] XFS (loop5): User initiated shutdown received. [ 210.486973][ T25] audit: type=1800 audit(1763559121.627:57): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1524" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 210.520788][ T8706] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 210.556481][ T8703] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 210.583383][ T8703] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a80ce01c, mo2=0002] [ 210.626265][ T8703] System zones: 1-12 [ 210.640612][ T8703] EXT4-fs (loop0): orphan cleanup on readonly fs [ 210.648102][ T8703] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1531: invalid indirect mapped block 12 (level 1) [ 210.664297][ T8706] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 210.719399][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 210.839471][ T4227] usb 2-1: config index 0 descriptor too short (expected 17170, got 18) [ 210.868292][ T4227] usb 2-1: config 0 has too many interfaces: 63, using maximum allowed: 32 [ 210.874200][ T8703] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1531: invalid indirect mapped block 2 (level 2) [ 210.879851][ T4227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 63 [ 210.928539][ T8128] XFS (loop5): Unmounting Filesystem [ 210.946926][ T8713] loop4: detected capacity change from 0 to 136 [ 210.958210][ T8703] EXT4-fs (loop0): 1 truncate cleaned up [ 210.967887][ T8703] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,nobarrier,,,errors=continue. Quota mode: writeback. [ 211.050754][ T8713] Attempt to read inode for relocated directory [ 211.109661][ T4227] usb 2-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=8d.90 [ 211.125758][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.161979][ T4227] usb 2-1: Product: syz [ 211.166245][ T4227] usb 2-1: Manufacturer: syz [ 211.170970][ T4227] usb 2-1: SerialNumber: syz [ 211.178710][ T4227] usb 2-1: config 0 descriptor?? [ 211.221859][ T4227] ums-freecom 2-1:0.0: USB Mass Storage device detected [ 211.573877][ T7] usb 2-1: USB disconnect, device number 21 [ 211.873441][ T8722] loop0: detected capacity change from 0 to 40427 [ 211.897629][ T8722] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 211.922402][ T8722] F2FS-fs (loop0): invalid crc value [ 211.951644][ T8743] loop5: detected capacity change from 0 to 16 [ 211.956164][ T8722] F2FS-fs (loop0): Found nat_bits in checkpoint [ 212.006093][ T8743] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 212.049555][ T26] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 212.096476][ T8722] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 212.431758][ T8753] loop1: detected capacity change from 0 to 128 [ 212.489724][ T26] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.540247][ T26] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.602209][ T25] audit: type=1800 audit(1763559123.747:58): pid=8753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1545" name="file2" dev="loop1" ino=1048615 res=0 errno=0 [ 212.603841][ T8752] loop4: detected capacity change from 0 to 8192 [ 212.637651][ T8753] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 212.670118][ T8753] FAT-fs (loop1): Filesystem has been set read-only [ 212.676896][ T8753] attempt to access beyond end of device [ 212.676896][ T8753] loop1: rw=0, want=2073, limit=128 [ 212.752287][ T8752] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 212.779792][ T26] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.799878][ T8752] REISERFS (device loop4): using ordered data mode [ 212.806408][ T8752] reiserfs: using flush barriers [ 212.827565][ T8752] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 212.844413][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.903153][ T26] usb 3-1: Product: syz [ 212.915370][ T26] usb 3-1: Manufacturer: syz [ 212.925727][ T26] usb 3-1: SerialNumber: syz [ 212.966025][ T8752] REISERFS (device loop4): checking transaction log (loop4) [ 212.988749][ T8752] REISERFS (device loop4): Using r5 hash to sort names [ 212.998940][ T8752] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 213.043544][ T25] audit: type=1804 audit(1763559124.187:59): pid=8752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1546" name=2F6E6577726F6F742F3239342F2E022F66696C6531 dev="loop4" ino=2 res=1 errno=0 [ 213.688554][ T8791] netlink: 'syz.4.1561': attribute type 39 has an invalid length. [ 213.847344][ T8798] loop1: detected capacity change from 0 to 2048 [ 213.866083][ T8775] loop5: detected capacity change from 0 to 40427 [ 213.964973][ T8775] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 213.996004][ T8775] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 214.053577][ T8775] F2FS-fs (loop5): Found nat_bits in checkpoint [ 214.129485][ T26] cdc_ncm 3-1:1.0: bind() failure [ 214.148739][ T26] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 214.157597][ T26] cdc_ncm 3-1:1.1: bind() failure [ 214.217815][ T8775] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 214.229909][ T8775] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 214.378923][ T26] usb 3-1: USB disconnect, device number 18 [ 214.898654][ T8841] loop0: detected capacity change from 0 to 1024 [ 215.122028][ T8845] loop2: detected capacity change from 0 to 2048 [ 215.174917][ T4200] loop2: p1 < > p4 < > [ 215.270493][ T8845] loop2: p1 < > p4 < > [ 215.280755][ T154] hfsplus: b-tree write err: -5, ino 3 [ 215.459650][ T8859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1580'. [ 215.534488][ T4200] udevd[4200]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 215.535491][ T8047] udevd[8047]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 215.789055][ T8837] loop1: detected capacity change from 0 to 32768 [ 215.849748][ T8837] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.1573 (8837) [ 215.889661][ T26] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 215.916270][ T8837] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 215.948550][ T8837] BTRFS info (device loop1): force zlib compression, level 3 [ 215.969591][ T8837] BTRFS info (device loop1): allowing degraded mounts [ 215.976661][ T8837] BTRFS info (device loop1): max_inline at 4096 [ 216.003554][ T8837] BTRFS info (device loop1): using free space tree [ 216.019871][ T8837] BTRFS info (device loop1): has skinny extents [ 216.179759][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 216.225373][ T8837] BTRFS info (device loop1): enabling ssd optimizations [ 216.283073][ T8880] loop2: detected capacity change from 0 to 32768 [ 216.309952][ T26] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 216.329657][ T26] usb 6-1: config 0 has no interface number 0 [ 216.439761][ T8880] XFS (loop2): Mounting V5 Filesystem [ 216.529685][ T26] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 216.543036][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.552763][ T26] usb 6-1: Product: syz [ 216.557045][ T26] usb 6-1: Manufacturer: syz [ 216.568446][ T26] usb 6-1: SerialNumber: syz [ 216.577519][ T26] usb 6-1: config 0 descriptor?? [ 216.614010][ T26] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 216.831997][ T26] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 216.836002][ T8880] XFS (loop2): Ending clean mount [ 216.863159][ T8925] loop0: detected capacity change from 0 to 512 [ 216.865926][ T26] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 216.881945][ T8880] XFS (loop2): Quotacheck needed: Please wait. [ 216.942700][ T8925] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.054732][ T8880] XFS (loop2): Quotacheck: Done. [ 217.115907][ T8925] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #17: comm syz.0.1595: corrupted in-inode xattr [ 217.206703][ T8925] EXT4-fs (loop0): Remounting filesystem read-only [ 217.237610][ T8925] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1595: couldn't read orphan inode 17 (err -117) [ 217.264362][ T8925] EXT4-fs (loop0): Remounting filesystem read-only [ 217.273059][ T4190] XFS (loop2): Unmounting Filesystem [ 217.278495][ T8925] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,debug_want_extra_isize=0x000000000000006e,block_validity,block_validity,quota,. Quota mode: writeback. [ 217.379418][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 217.400628][ T5026] usb 6-1: USB disconnect, device number 2 [ 217.407502][ T8927] loop4: detected capacity change from 0 to 32768 [ 217.426715][ T5026] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 217.511757][ T5026] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 217.543808][ T5026] quatech2 6-1:0.51: device disconnected [ 217.724200][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.733914][ T8938] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 217.907162][ T8944] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 218.310599][ T8962] loop1: detected capacity change from 0 to 164 [ 219.279535][ T26] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 219.327154][ T8977] loop1: detected capacity change from 0 to 32768 [ 219.491993][ T8977] XFS (loop1): Mounting V5 Filesystem [ 219.585985][ T8968] loop2: detected capacity change from 0 to 40427 [ 219.658581][ T8968] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 219.676443][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 219.691171][ T26] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 219.714101][ T8968] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 219.718853][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 219.743855][ T8991] loop0: detected capacity change from 0 to 32768 [ 219.750521][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1622'. [ 219.759692][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 219.771959][ T26] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.788532][ T9017] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.795262][ T8968] F2FS-fs (loop2): invalid crc value [ 219.797404][ T9017] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.811322][ T9017] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.820104][ T9017] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.828911][ T26] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.839113][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.848720][ T8968] F2FS-fs (loop2): Found nat_bits in checkpoint [ 219.870431][ T8977] XFS (loop1): Ending clean mount [ 219.876877][ T26] usb 6-1: config 0 descriptor?? [ 219.900903][ T8977] XFS (loop1): Quotacheck needed: Please wait. [ 219.919700][ T8988] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 219.938868][ T8968] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 219.946203][ T8968] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 220.014681][ T8991] XFS (loop0): Mounting V5 Filesystem [ 220.103217][ T8977] XFS (loop1): Quotacheck: Done. [ 220.104622][ T8991] XFS (loop0): Ending clean mount [ 220.163873][ T8991] XFS (loop0): Quotacheck needed: Please wait. [ 220.245640][ T6834] XFS (loop1): Unmounting Filesystem [ 220.287969][ T8991] XFS (loop0): Quotacheck: Done. [ 220.339593][ T1109] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 220.461447][ T26] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 220.477196][ T26] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 220.512763][ T4183] XFS (loop0): Unmounting Filesystem [ 220.530886][ T26] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 220.700451][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.719428][ T1109] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.829707][ T1109] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 220.843079][ T1109] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 220.861603][ T26] usb 6-1: USB disconnect, device number 3 [ 220.865249][ T1109] usb 5-1: Manufacturer: syz [ 220.890584][ T1109] usb 5-1: config 0 descriptor?? [ 221.283552][ T9078] loop1: detected capacity change from 0 to 128 [ 221.355382][ T9078] EXT4-fs (loop1): Ignoring removed nobh option [ 221.447026][ T9078] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,abort,nogrpid,nodiscard,user_xattr,,errors=continue. Quota mode: none. [ 221.525969][ T9078] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.880027][ T1109] uclogic 0003:256C:006D.0023: interface is invalid, ignoring [ 221.892187][ T9110] loop0: detected capacity change from 0 to 256 [ 221.997488][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1646'. [ 222.027261][ T9118] loop2: detected capacity change from 0 to 2048 [ 222.085953][ T5457] usb 5-1: USB disconnect, device number 22 [ 222.091414][ T9118] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 222.883695][ T9164] loop5: detected capacity change from 0 to 2048 [ 223.220788][ T8128] [ 223.223155][ T8128] ====================================================== [ 223.230165][ T8128] WARNING: possible circular locking dependency detected [ 223.237185][ T8128] syzkaller #0 Not tainted [ 223.241587][ T8128] ------------------------------------------------------ [ 223.248600][ T8128] syz-executor/8128 is trying to acquire lock: [ 223.254740][ T8128] ffff8880221fb938 ((wq_completion)loop5){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 223.264478][ T8128] [ 223.264478][ T8128] but task is already holding lock: [ 223.271829][ T8128] ffff888147462468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 223.280693][ T8128] [ 223.280693][ T8128] which lock already depends on the new lock. [ 223.280693][ T8128] [ 223.291081][ T8128] [ 223.291081][ T8128] the existing dependency chain (in reverse order) is: [ 223.300078][ T8128] [ 223.300078][ T8128] -> #7 (&lo->lo_mutex){+.+.}-{3:3}: [ 223.307537][ T8128] __mutex_lock_common+0x1eb/0x2390 [ 223.313252][ T8128] mutex_lock_killable_nested+0x17/0x20 [ 223.319309][ T8128] lo_open+0x6a/0x100 [ 223.323827][ T8128] blkdev_get_whole+0x90/0x390 [ 223.329106][ T8128] blkdev_get_by_dev+0x2d0/0xa60 [ 223.334560][ T8128] blkdev_open+0x12d/0x2c0 [ 223.339486][ T8128] do_dentry_open+0x7ff/0xf80 [ 223.344678][ T8128] path_openat+0x2682/0x2f30 [ 223.349781][ T8128] do_filp_open+0x1b3/0x3e0 [ 223.354793][ T8128] do_sys_openat2+0x142/0x4a0 [ 223.359987][ T8128] __x64_sys_openat+0x135/0x160 [ 223.365352][ T8128] do_syscall_64+0x4c/0xa0 [ 223.370278][ T8128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.376686][ T8128] [ 223.376686][ T8128] -> #6 (&disk->open_mutex){+.+.}-{3:3}: [ 223.384499][ T8128] __mutex_lock_common+0x1eb/0x2390 [ 223.390219][ T8128] mutex_lock_nested+0x17/0x20 [ 223.395509][ T8128] blkdev_get_by_dev+0x157/0xa60 [ 223.400973][ T8128] swsusp_check+0x9b/0x2a0 [ 223.405909][ T8128] software_resume+0xc6/0x3b0 [ 223.411105][ T8128] resume_store+0xe4/0x130 [ 223.416039][ T8128] kernfs_fop_write_iter+0x379/0x4c0 [ 223.421845][ T8128] vfs_write+0x712/0xd00 [ 223.426606][ T8128] ksys_write+0x14d/0x250 [ 223.431457][ T8128] do_syscall_64+0x4c/0xa0 [ 223.436390][ T8128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.442801][ T8128] [ 223.442801][ T8128] -> #5 (system_transition_mutex/1){+.+.}-{3:3}: [ 223.443271][ T9186] loop1: detected capacity change from 0 to 8192 [ 223.451308][ T8128] __mutex_lock_common+0x1eb/0x2390 [ 223.451330][ T8128] mutex_lock_nested+0x17/0x20 [ 223.451344][ T8128] software_resume+0x7c/0x3b0 [ 223.451359][ T8128] resume_store+0xe4/0x130 [ 223.451372][ T8128] kernfs_fop_write_iter+0x379/0x4c0 [ 223.451387][ T8128] vfs_write+0x712/0xd00 [ 223.451399][ T8128] ksys_write+0x14d/0x250 [ 223.451409][ T8128] do_syscall_64+0x4c/0xa0 [ 223.451423][ T8128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.451437][ T8128] [ 223.451437][ T8128] -> #4 (&of->mutex){+.+.}-{3:3}: [ 223.451460][ T8128] __mutex_lock_common+0x1eb/0x2390 [ 223.451473][ T8128] mutex_lock_nested+0x17/0x20 [ 223.451485][ T8128] kernfs_seq_start+0x51/0x3c0 [ 223.451499][ T8128] seq_read_iter+0x3c4/0xd50 [ 223.451512][ T8128] vfs_read+0x725/0xcf0 [ 223.451524][ T8128] ksys_read+0x14d/0x250 [ 223.451536][ T8128] do_syscall_64+0x4c/0xa0 [ 223.451549][ T8128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.451564][ T8128] [ 223.451564][ T8128] -> #3 (&p->lock){+.+.}-{3:3}: [ 223.451586][ T8128] __mutex_lock_common+0x1eb/0x2390 [ 223.451602][ T8128] mutex_lock_nested+0x17/0x20 [ 223.451625][ T8128] seq_read_iter+0xad/0xd50 [ 223.451637][ T8128] generic_file_splice_read+0x3a2/0x590 [ 223.451651][ T8128] splice_direct_to_actor+0x417/0xbd0 [ 223.451664][ T8128] do_splice_direct+0x1b6/0x2c0 [ 223.451677][ T8128] do_sendfile+0x5d5/0xec0 [ 223.451690][ T8128] __se_sys_sendfile64+0x13b/0x190 [ 223.451705][ T8128] do_syscall_64+0x4c/0xa0 [ 223.451717][ T8128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.451732][ T8128] [ 223.451732][ T8128] -> #2 (sb_writers#3){.+.+}-{0:0}: [ 223.624293][ T8128] lo_write_bvec+0x193/0x770 [ 223.628131][ T9186] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000ff00) [ 223.629402][ T8128] loop_process_work+0x1d62/0x2480 [ 223.629423][ T8128] process_one_work+0x863/0x1000 [ 223.629438][ T8128] worker_thread+0xaa8/0x12a0 [ 223.629453][ T8128] kthread+0x436/0x520 [ 223.629467][ T8128] ret_from_fork+0x1f/0x30 [ 223.629482][ T8128] [ 223.629482][ T8128] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 223.629506][ T8128] process_one_work+0x7bf/0x1000 [ 223.629521][ T8128] worker_thread+0xaa8/0x12a0 [ 223.629535][ T8128] kthread+0x436/0x520 [ 223.629547][ T8128] ret_from_fork+0x1f/0x30 [ 223.629562][ T8128] [ 223.629562][ T8128] -> #0 ((wq_completion)loop5){+.+.}-{0:0}: [ 223.629584][ T8128] __lock_acquire+0x2c33/0x7c60 [ 223.629600][ T8128] lock_acquire+0x197/0x3f0 [ 223.639252][ T9186] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000ff00) [ 223.643005][ T8128] flush_workqueue+0x142/0x1380 [ 223.643024][ T8128] drain_workqueue+0xcf/0x380 [ 223.643035][ T8128] destroy_workqueue+0x7b/0xb20 [ 223.643048][ T8128] __loop_clr_fd+0x234/0xb90 [ 223.643062][ T8128] blkdev_put+0x53f/0x7d0 [ 223.643074][ T8128] deactivate_locked_super+0x93/0xf0 [ 223.750154][ T8128] cleanup_mnt+0x418/0x4d0 [ 223.755079][ T8128] task_work_run+0x125/0x1a0 [ 223.760174][ T8128] exit_to_user_mode_loop+0x10f/0x130 [ 223.766050][ T8128] exit_to_user_mode_prepare+0xee/0x180 [ 223.772095][ T8128] syscall_exit_to_user_mode+0x16/0x40 [ 223.778054][ T8128] do_syscall_64+0x58/0xa0 [ 223.782967][ T8128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.789359][ T8128] [ 223.789359][ T8128] other info that might help us debug this: [ 223.789359][ T8128] [ 223.799559][ T8128] Chain exists of: [ 223.799559][ T8128] (wq_completion)loop5 --> &disk->open_mutex --> &lo->lo_mutex [ 223.799559][ T8128] [ 223.812998][ T8128] Possible unsafe locking scenario: [ 223.812998][ T8128] [ 223.820425][ T8128] CPU0 CPU1 [ 223.825764][ T8128] ---- ---- [ 223.831102][ T8128] lock(&lo->lo_mutex); [ 223.835319][ T8128] lock(&disk->open_mutex); [ 223.842403][ T8128] lock(&lo->lo_mutex); [ 223.849140][ T8128] lock((wq_completion)loop5); [ 223.853967][ T8128] [ 223.853967][ T8128] *** DEADLOCK *** [ 223.853967][ T8128] [ 223.862090][ T8128] 2 locks held by syz-executor/8128: [ 223.867360][ T8128] #0: ffff888020037518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 223.876651][ T8128] #1: ffff888147462468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 223.885855][ T8128] [ 223.885855][ T8128] stack backtrace: [ 223.891724][ T8128] CPU: 1 PID: 8128 Comm: syz-executor Not tainted syzkaller #0 [ 223.899244][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.909292][ T8128] Call Trace: [ 223.912559][ T8128] [ 223.915471][ T8128] dump_stack_lvl+0x168/0x230 [ 223.920134][ T8128] ? load_image+0x3b0/0x3b0 [ 223.924621][ T8128] ? show_regs_print_info+0x20/0x20 [ 223.929804][ T8128] ? print_circular_bug+0x12b/0x1a0 [ 223.934982][ T8128] check_noncircular+0x274/0x310 [ 223.939900][ T8128] ? add_chain_block+0x940/0x940 [ 223.944814][ T8128] ? lockdep_lock+0xdc/0x1e0 [ 223.949391][ T8128] ? mark_lock+0x94/0x320 [ 223.953703][ T8128] __lock_acquire+0x2c33/0x7c60 [ 223.958548][ T8128] ? verify_lock_unused+0x140/0x140 [ 223.963760][ T8128] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 223.969721][ T8128] ? verify_lock_unused+0x140/0x140 [ 223.974899][ T8128] ? verify_lock_unused+0x140/0x140 [ 223.980076][ T8128] ? verify_lock_unused+0x140/0x140 [ 223.985251][ T8128] ? memset+0x1e/0x40 [ 223.989213][ T8128] lock_acquire+0x197/0x3f0 [ 223.993698][ T8128] ? flush_workqueue+0x126/0x1380 [ 223.998706][ T8128] ? __mutex_trylock_common+0x14f/0x250 [ 224.004230][ T8128] ? read_lock_is_recursive+0x10/0x10 [ 224.009587][ T8128] ? __init_swait_queue_head+0xa5/0x150 [ 224.015116][ T8128] flush_workqueue+0x142/0x1380 [ 224.019942][ T8128] ? flush_workqueue+0x126/0x1380 [ 224.024946][ T8128] ? __lock_acquire+0x7c60/0x7c60 [ 224.029948][ T8128] ? lock_chain_count+0x20/0x20 [ 224.034776][ T8128] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 224.040126][ T8128] ? lockdep_hardirqs_off+0x70/0x100 [ 224.045392][ T8128] ? rcu_work_rcufn+0x110/0x110 [ 224.050221][ T8128] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 224.055836][ T8128] ? finish_wait+0xc0/0x1d0 [ 224.060319][ T8128] drain_workqueue+0xcf/0x380 [ 224.064978][ T8128] destroy_workqueue+0x7b/0xb20 [ 224.069807][ T8128] __loop_clr_fd+0x234/0xb90 [ 224.074383][ T8128] ? lo_release+0x172/0x1f0 [ 224.078864][ T8128] ? lo_open+0x100/0x100 [ 224.083085][ T8128] blkdev_put+0x53f/0x7d0 [ 224.087397][ T8128] deactivate_locked_super+0x93/0xf0 [ 224.092661][ T8128] cleanup_mnt+0x418/0x4d0 [ 224.097059][ T8128] ? lockdep_hardirqs_on+0x94/0x140 [ 224.102236][ T8128] task_work_run+0x125/0x1a0 [ 224.106812][ T8128] exit_to_user_mode_loop+0x10f/0x130 [ 224.112200][ T8128] exit_to_user_mode_prepare+0xee/0x180 [ 224.117734][ T8128] syscall_exit_to_user_mode+0x16/0x40 [ 224.123174][ T8128] do_syscall_64+0x58/0xa0 [ 224.127567][ T8128] ? clear_bhb_loop+0x30/0x80 [ 224.132225][ T8128] ? clear_bhb_loop+0x30/0x80 [ 224.136887][ T8128] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 224.142857][ T8128] RIP: 0033:0x7ff81fba3a77 [ 224.147251][ T8128] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 224.166834][ T8128] RSP: 002b:00007ffdcda2f158 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 224.175228][ T8128] RAX: 0000000000000000 RBX: 00007ff81fc26d7d RCX: 00007ff81fba3a77 [ 224.183177][ T8128] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdcda2f210 [ 224.191130][ T8128] RBP: 00007ffdcda2f210 R08: 0000000000000000 R09: 0000000000000000 [ 224.199078][ T8128] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdcda302a0 [ 224.207028][ T8128] R13: 00007ff81fc26d7d R14: 0000000000036779 R15: 00007ffdcda302e0 [ 224.214984][ T8128]