last executing test programs: 18m42.823796199s ago: executing program 3 (id=10390): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r0, 0x0, 0x0) 18m42.637713385s ago: executing program 3 (id=10394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 18m42.44796021s ago: executing program 3 (id=10397): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x5}}) 18m42.246193135s ago: executing program 3 (id=10400): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000300)='./file0\x00', 0x2000004, &(0x7f0000000500)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 18m41.766877888s ago: executing program 3 (id=10407): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='./bus\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x693, &(0x7f0000000980)="$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") lstat(&(0x7f0000000140)='./file3\x00', 0x0) 18m40.96523796s ago: executing program 3 (id=10421): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000680)=0x8, 0x4) 18m40.488053883s ago: executing program 32 (id=10421): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0xd, &(0x7f0000000680)=0x8, 0x4) 5.185913089s ago: executing program 1 (id=28426): syz_clone(0x100, 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000340)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000140)="f4683315e7b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.13581693s ago: executing program 4 (id=28427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008081}, 0x40) 5.019113683s ago: executing program 4 (id=28428): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002880), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f00000028c0)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x200040c0) 4.262166364s ago: executing program 4 (id=28431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004010}, 0x8000000) 4.261647674s ago: executing program 0 (id=28441): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="2e0003000100c0", 0x7) 4.260669174s ago: executing program 1 (id=28432): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f000000cf00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x183b41, 0x51) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, 0x0) 4.154180527s ago: executing program 4 (id=28435): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x1, 0x159, &(0x7f00000004c0)="$eJzs27GKE0EcBvB/TKJRm9RisWBjFdQnUCSCuKAoKbRSiDaJBEyz2phH8QUFSZVuRPdI7nLJkRzs7ZH8fk0++GZgpsgOs7Af738dDSfTL5M38+g0GtF6GlksGtGNG9GM0iwAgEOySCn+pJTSrVnc/hUppXNDftayMACgMjuc/wDAgXH+A8Dxcf4DwPF59/7Dq2d53n+bZZ2I37NiUAzK37J/8TLvP8r+665mzYti0Fz2j8s+O9u3485J/2RjfzMePij7f93z1/lafzeG1W8fAAAAjkIvW9p4v+/1tvVlOvV+YO3+3op7rSvbBgCwh+n3H6NP4/Hnb3uFiMvMOojQjohrsAxBqDbU/WQCqrb609e9EgAAAAAAAAAAAAAAYJudvwfqXDx4kbZPr3uPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsO5vAAAA//9XS09N") r0 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./file0\x00', 0x20000, 0x83) open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x6c, 0x72, {0xc, 0x7}}, 0x0) 3.906363094s ago: executing program 4 (id=28437): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3.573231522s ago: executing program 4 (id=28440): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r0, 0x8910, &(0x7f00000011c0)={0x6, 0xffff, 0x0, 0xd, 0x0, "5dee000000594000"}) 3.572670973s ago: executing program 0 (id=28442): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2200018, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x6}}, {@norecovery}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@mblk_io_submit}, {@norecovery}]}, 0x3, 0x5a8, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000280)={0x0, 0xfb, 0x381, 0x4, 0x3, '\x00', "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"}, 0x381, 0x1) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000a00)='./file0/file0\x00') 3.547860923s ago: executing program 2 (id=28443): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan0\x00', @broadcast}) 2.885555472s ago: executing program 0 (id=28456): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x13, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.885249232s ago: executing program 2 (id=28448): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000002c0), 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5411, 0x0) 2.607815249s ago: executing program 0 (id=28450): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x20008800) 2.355096026s ago: executing program 1 (id=28461): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x18, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xe}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x23}, 0x94) 2.290511928s ago: executing program 0 (id=28452): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYRES32=0x0], 0xfd, 0x5519, &(0x7f00000014c0)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) fadvise64(r0, 0x400000006, 0x4, 0x5) 2.199768571s ago: executing program 2 (id=28453): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)="d3e5e1", 0x3}], 0x1}, 0x4015) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x14002) 1.631175676s ago: executing program 5 (id=28454): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x4, 0x0, 0x2}) 1.275033366s ago: executing program 5 (id=28455): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000300)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x3a3, {0x5, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x1c, 0x8, 0x33, 0x8, @empty, @remote}}}}}}, 0x0) 1.202422728s ago: executing program 5 (id=28457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f00000002c0), 0x0}, 0x20) 1.038988752s ago: executing program 1 (id=28458): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 931.683285ms ago: executing program 5 (id=28459): r0 = socket(0x200000000000011, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 776.130569ms ago: executing program 2 (id=28460): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, 0x0) 740.415791ms ago: executing program 5 (id=28462): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="666f7263652c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d6d6163696e7569742c666f7263652c666f7263652c00e4fc379f5d3b737931087563d08075a28550d98b7ceb93413b717546de81c69d046a7c7de8b7877acbd69ee6be03a2ee9a6f18a95984da551773b44694170cc523576b447ba266b98f316ea57b543f70ba341c31a3ebdda905e7fe6b43c2a3df705330ee5e204149ac4976e64dd1fadd4aa5366c443b6b98d34c"], 0x3, 0x6af, &(0x7f0000002200)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f00000005c0)=""/188, 0xbc) 528.375586ms ago: executing program 1 (id=28463): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) 470.477638ms ago: executing program 2 (id=28464): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000000c0)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 252.296564ms ago: executing program 5 (id=28465): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r0, 0x507, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8002}, 0x20000054) 11.73063ms ago: executing program 0 (id=28466): keyctl$clear(0x3, 0xfffffffffffffffc) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f00000001c0)='cifs.idmap\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000001240)='\vH\x81\xa2\xeb\x9e\x14\xd4\xe4\xc5\xce\xe69.\xba\xa2O\"\xda\x1b;\x93\xb4\xc6P\xd6\x01\x10\xa0\x12\xce9\xdb`1K\xa3\xa2N\xf8\x1b\x86>\xe8', 0x0) 11.56941ms ago: executing program 2 (id=28467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x5850}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000300004802c0001800a0001006d6174636800c9211c0002800800024000000002080003000000060008000100736574"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 1 (id=28468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x64, r1, 0x731, 0x70bd26, 0x40000000, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}, 0x1, 0x2, 0x0, 0x40}, 0x8000) kernel console output (not intermixed with test programs): ting: No such file or directory [ 2060.330569][ T4378] usb 1-1: MIDIStreaming interface descriptor not found [ 2060.411863][ T4378] usb 1-1: USB disconnect, device number 34 [ 2060.777464][T20748] loop4: detected capacity change from 0 to 1024 [ 2060.795321][T20748] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 2060.812063][T20748] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #32: comm syz.4.27060: iget: special inode unallocated [ 2060.858286][T20748] EXT4-fs (loop4): no journal found [ 2060.881935][T20748] EXT4-fs (loop4): can't get journal size [ 2060.883483][T20754] loop5: detected capacity change from 0 to 8 [ 2060.904896][T20748] EXT4-fs (loop4): filesystem is read-only [ 2060.920594][T20748] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2060.979381][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2061.594968][T20783] loop0: detected capacity change from 0 to 8192 [ 2061.646603][T20783] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2061.700761][T20783] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046) [ 2061.749630][T20783] FAT-fs (loop0): Filesystem has been set read-only [ 2061.886217][ T4283] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 1046) [ 2061.900755][T20817] netlink: 'syz.4.27080': attribute type 3 has an invalid length. [ 2062.210253][T20835] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2062.244333][T20827] loop5: detected capacity change from 0 to 4096 [ 2062.299202][T20827] __ntfs_error: 7 callbacks suppressed [ 2062.299221][T20827] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 2062.328749][T20827] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 2062.337615][T20841] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2062.369660][T20827] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 2062.387679][T20841] overlayfs: missing 'lowerdir' [ 2062.422184][T20827] ntfs: (device loop5): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 2062.462410][T20827] ntfs: (device loop5): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 2062.527058][T20827] ntfs: volume version 3.1. [ 2062.552589][T20827] ntfs: (device loop5): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 2062.588117][T20827] ntfs: (device loop5): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 2062.600531][T20852] SET target dimension over the limit! [ 2062.651308][T20827] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 2062.663903][T20827] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 2062.690153][T20827] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 2062.744771][ T4319] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 2062.807540][T20863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27095'. [ 2062.944637][ T4319] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2062.966720][ T4319] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.004950][ T4319] usb 1-1: Product: syz [ 2063.024464][ T4319] usb 1-1: Manufacturer: syz [ 2063.043851][ T4319] usb 1-1: SerialNumber: syz [ 2063.086936][ T4319] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2063.197150][ T4319] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2063.277933][ T4378] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2063.454412][ T4378] usb 3-1: Using ep0 maxpacket: 8 [ 2063.461367][ T4378] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2063.509483][ T4378] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2063.531277][T20938] loop1: detected capacity change from 0 to 64 [ 2063.540182][ T4378] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2063.560748][ T4378] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2063.600328][ T4378] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 2063.603988][ T2516] usb 1-1: USB disconnect, device number 35 [ 2063.625636][ T4378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2063.638813][ T4378] usb 3-1: Product: syz [ 2063.643026][ T4378] usb 3-1: Manufacturer: syz [ 2063.675066][ T4378] usb 3-1: SerialNumber: syz [ 2063.708219][ T4378] usb 3-1: config 0 descriptor?? [ 2063.734688][ T4378] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 2063.930379][ T4378] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 2063.951873][ T4378] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 2063.976342][ T4378] snd_usb_toneport: probe of 3-1:0.0 failed with error -22 [ 2064.150852][ T4378] usb 3-1: USB disconnect, device number 29 [ 2064.171637][T20977] loop4: detected capacity change from 0 to 512 [ 2064.227815][ T4319] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 2064.234840][ T4319] ath9k_htc: Failed to initialize the device [ 2064.255966][T20977] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2064.281332][ T2516] usb 1-1: ath9k_htc: USB layer deinitialized [ 2064.381920][T21000] loop0: detected capacity change from 0 to 64 [ 2064.478264][T20977] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2916: inode #15: comm syz.4.27117: corrupted xattr block 33 [ 2064.542403][T20977] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -74) [ 2064.549363][T21012] netlink: 256 bytes leftover after parsing attributes in process `syz.0.27122'. [ 2064.570548][T21013] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27123'. [ 2064.601949][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2064.792808][T21024] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 2065.100987][T21046] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27134'. [ 2065.456313][T21033] loop4: detected capacity change from 0 to 32768 [ 2065.463098][T21062] CIFS mount error: No usable UNC path provided in device string! [ 2065.463098][T21062] [ 2065.537987][T21062] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2065.664910][T21072] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 2066.079651][T21093] loop5: detected capacity change from 0 to 1024 [ 2066.126851][T21098] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬' [ 2066.183995][T21093] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 2066.219108][T21093] EXT4-fs error (device loop5): ext4_get_journal_inode:5762: inode #32: comm syz.5.27150: iget: special inode unallocated [ 2066.281462][T21093] EXT4-fs (loop5): no journal found [ 2066.312062][T21093] EXT4-fs (loop5): can't get journal size [ 2066.330648][T21093] EXT4-fs (loop5): filesystem is read-only [ 2066.350594][T21109] netlink: 'syz.1.27155': attribute type 3 has an invalid length. [ 2066.381669][T21109] netlink: 766 bytes leftover after parsing attributes in process `syz.1.27155'. [ 2066.389082][T21093] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2066.516333][T21116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2066.620341][T28045] EXT4-fs (loop5): unmounting filesystem. [ 2066.805695][T21136] device bridge_slave_0 entered promiscuous mode [ 2066.837507][T21136] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2067.139929][T21155] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2067.793826][T21201] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=io+mem:owns=io+mem [ 2067.937824][T21210] netlink: 144 bytes leftover after parsing attributes in process `syz.2.27190'. [ 2068.062751][T21221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27194'. [ 2068.100972][T21221] netlink: 'syz.4.27194': attribute type 3 has an invalid length. [ 2068.548734][T21245] loop0: detected capacity change from 0 to 4096 [ 2068.610460][T21245] __ntfs_error: 7 callbacks suppressed [ 2068.610479][T21245] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 2068.680639][T21245] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 2068.713895][T21245] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 2068.755092][T21245] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 2068.812775][T21245] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 2068.872217][T21245] ntfs: volume version 3.1. [ 2068.897082][T21245] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 2068.939546][T21245] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 2068.980223][T21245] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 2069.023498][T21245] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 2069.082459][T21245] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 2069.130041][T21266] loop5: detected capacity change from 0 to 512 [ 2069.212165][T21266] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2069.341893][T21266] EXT4-fs error (device loop5): ext4_acquire_dquot:6841: comm syz.5.27209: Failed to acquire dquot type 0 [ 2069.492179][T21247] loop4: detected capacity change from 0 to 32768 [ 2069.512890][T21247] (syz.4.27203,21247,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2069.534051][T28045] EXT4-fs (loop5): unmounting filesystem. [ 2069.534467][T21247] (syz.4.27203,21247,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2069.646146][T21247] JBD2: Ignoring recovery information on journal [ 2069.782642][T21247] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 2070.049010][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 2070.288665][ T4378] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2070.484989][ T4378] usb 3-1: Using ep0 maxpacket: 16 [ 2070.492490][ T4378] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2070.535508][ T4378] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2070.592643][ T4378] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2070.630938][ T4378] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 2070.646220][ T4378] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2070.669522][T21354] netlink: 6716 bytes leftover after parsing attributes in process `syz.0.27232'. [ 2070.673035][ T4378] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2070.716040][ T4378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2070.753523][ T4378] usb 3-1: Product: syz [ 2070.760661][ T4378] usb 3-1: Manufacturer: syz [ 2070.767660][ T4378] usb 3-1: SerialNumber: syz [ 2070.809584][T21364] netlink: 32 bytes leftover after parsing attributes in process `syz.4.27235'. [ 2070.882323][T21367] loop0: detected capacity change from 0 to 512 [ 2070.968001][T21367] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2070.985405][ T4378] usb 3-1: MIDIStreaming interface descriptor not found [ 2071.047852][T21367] EXT4-fs warning (device loop0): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2071.143896][ T4378] usb 3-1: USB disconnect, device number 30 [ 2071.190250][T21367] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 2071.224140][T21367] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.27236: bad orphan inode 14 [ 2071.278258][T21367] ext4_test_bit(bit=13, block=18) = 1 [ 2071.304117][T21367] is_bad_inode(inode)=0 [ 2071.330410][T21367] NEXT_ORPHAN(inode)=0 [ 2071.360638][T21367] max_ino=32 [ 2071.363895][T21367] i_nlink=1 [ 2071.367074][T21367] EXT4-fs (loop0): 1 truncate cleaned up [ 2071.389960][T21367] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2071.590262][T21355] loop5: detected capacity change from 0 to 32768 [ 2071.609665][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 2071.620553][T21355] (syz.5.27233,21355,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2071.649453][T21427] loop4: detected capacity change from 0 to 16 [ 2071.691147][T21430] loop1: detected capacity change from 0 to 512 [ 2071.697796][T21355] (syz.5.27233,21355,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2071.720002][T21427] erofs: (device loop4): mounted with root inode @ nid 36. [ 2071.785160][T21430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2071.875373][T21355] JBD2: Ignoring recovery information on journal [ 2071.918202][T21430] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2916: inode #15: comm syz.1.27245: corrupted xattr block 33 [ 2071.957461][T21430] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -74) [ 2072.038250][T21355] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2072.072718][T21453] loop4: detected capacity change from 0 to 128 [ 2072.097221][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 2072.129746][T21453] EXT4-fs: inline encryption not supported [ 2072.169973][T21453] EXT4-fs (loop4): Test dummy encryption mode enabled [ 2072.202427][T21453] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2072.282396][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2072.402386][T28045] ocfs2: Unmounting device (7,5) on (node local) [ 2072.756382][T21437] loop0: detected capacity change from 0 to 32768 [ 2072.858992][T21437] jfs_strtoUCS: char2uni returned -22. [ 2072.880719][T21437] charset = cp869, char = 0x83 [ 2073.027887][ T4319] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2073.085852][T21510] netlink: 144 bytes leftover after parsing attributes in process `syz.5.27266'. [ 2073.199197][ T4319] usb 5-1: Using ep0 maxpacket: 16 [ 2073.207231][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2073.252703][ T4319] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 2073.284985][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.313646][ T4319] usb 5-1: Product: syz [ 2073.317868][ T4319] usb 5-1: Manufacturer: syz [ 2073.322488][ T4319] usb 5-1: SerialNumber: syz [ 2073.361283][ T4319] usb 5-1: config 0 descriptor?? [ 2073.396989][ T4319] hub 5-1:0.0: bad descriptor, ignoring hub [ 2073.416176][ T4319] hub: probe of 5-1:0.0 failed with error -5 [ 2073.472186][ T4319] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input121 [ 2073.815884][ T2516] usb 5-1: USB disconnect, device number 41 [ 2074.198120][T21589] loop1: detected capacity change from 0 to 1764 [ 2074.838617][T21636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.27304'. [ 2075.183566][T21650] netlink: 'syz.5.27309': attribute type 10 has an invalid length. [ 2075.219121][T21650] team0: Cannot enslave team device to itself [ 2075.224268][T21652] loop4: detected capacity change from 0 to 512 [ 2075.259981][T21652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2075.363087][T21652] EXT4-fs warning (device loop4): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 2075.386879][T21618] loop0: detected capacity change from 0 to 32768 [ 2075.421418][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2075.556814][T21618] XFS (loop0): Mounting V5 Filesystem [ 2075.766882][T21618] XFS (loop0): Ending clean mount [ 2075.786880][T21618] XFS (loop0): Quotacheck needed: Please wait. [ 2075.931950][T21618] XFS (loop0): Quotacheck: Done. [ 2076.036637][ T4283] XFS (loop0): Unmounting Filesystem [ 2076.150028][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27324'. [ 2076.159387][T21704] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 2076.488094][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 2076.488110][ T26] audit: type=1326 audit(2137.180:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2076.593183][ T26] audit: type=1326 audit(2137.180:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2076.720906][ T26] audit: type=1326 audit(2137.222:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2076.800116][ T26] audit: type=1326 audit(2137.222:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2076.888243][T21749] loop4: detected capacity change from 0 to 64 [ 2076.892850][ T26] audit: type=1326 audit(2137.222:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2077.000239][ T26] audit: type=1326 audit(2137.222:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2077.038195][ T4319] usb 6-1: new full-speed USB device number 49 using dummy_hcd [ 2077.096074][ T26] audit: type=1326 audit(2137.222:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2077.163510][T21760] loop1: detected capacity change from 0 to 8 [ 2077.194166][ T26] audit: type=1326 audit(2137.233:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2077.219612][T21760] SQUASHFS error: Failed to read block 0x62: -5 [ 2077.225925][T21760] squashfs image failed sanity check [ 2077.235495][ T4319] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2077.238653][T21764] xt_time: unknown flags 0xc [ 2077.245460][ T4319] usb 6-1: not running at top speed; connect to a high speed hub [ 2077.285786][ T26] audit: type=1326 audit(2137.233:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21724 comm="syz.5.27331" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2077.300776][ T4319] usb 6-1: config 5 has an invalid interface number: 246 but max is 0 [ 2077.332525][T21760] Invalid option length (1047337) for dns_resolver key [ 2077.389777][ T4319] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 2077.424595][ T4319] usb 6-1: config 5 has no interface number 0 [ 2077.444147][ T4319] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 2077.513856][ T4319] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2077.552400][ T4319] usb 6-1: config 5 interface 246 has no altsetting 0 [ 2077.570043][ T4319] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 2077.599893][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2077.624007][T21740] loop0: detected capacity change from 0 to 32768 [ 2077.647830][ T4319] usb 6-1: Product: syz [ 2077.652090][ T4319] usb 6-1: Manufacturer: syz [ 2077.656709][ T4319] usb 6-1: SerialNumber: syz [ 2077.785199][T21740] XFS (loop0): Mounting V5 Filesystem [ 2077.859811][T21803] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2077.953410][ T4319] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2077.957925][ T4326] usb 6-1: Failed to submit usb control message: -71 [ 2077.996345][ T4326] usb 6-1: unable to send the bmi data to the device: -71 [ 2078.006358][ T4319] usb 6-1: USB disconnect, device number 49 [ 2078.058517][T21740] XFS (loop0): Ending clean mount [ 2078.062729][ T4326] usb 6-1: unable to get target info from device [ 2078.096692][ T4326] usb 6-1: could not get target info (-71) [ 2078.112768][ T4326] usb 6-1: could not probe fw (-71) [ 2078.332360][ T4283] XFS (loop0): Unmounting Filesystem [ 2079.204954][T21890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.27374'. [ 2079.225607][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27375'. [ 2079.247989][T21890] netlink: 19 bytes leftover after parsing attributes in process `syz.4.27374'. [ 2079.408923][T21902] usb usb8: usbfs: process 21902 (syz.4.27378) did not claim interface 0 before use [ 2079.558995][T21910] loop0: detected capacity change from 0 to 256 [ 2080.347345][T21905] loop1: detected capacity change from 0 to 40427 [ 2080.384712][T21905] F2FS-fs (loop1): invalid crc value [ 2080.397806][T21954] loop0: detected capacity change from 0 to 1024 [ 2080.421904][T21954] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 2080.439596][T21905] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 2080.495736][T21954] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 2080.504732][T21954] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2080.600125][T21954] EXT4-fs error (device loop0): ext4_read_inode_bitmap:168: comm syz.0.27394: Inode bitmap for bg 0 marked uninitialized [ 2080.618707][T21954] EXT4-fs (loop0): Remounting filesystem read-only [ 2080.680700][T21905] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2080.693467][T21954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2080.886473][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 2080.974928][T21990] CIFS: VFS: Malformed UNC in devname [ 2081.293292][T22008] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27411'. [ 2081.500309][T22024] loop4: detected capacity change from 0 to 256 [ 2081.524655][T15865] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2081.551105][T22024] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 2081.715438][T15865] usb 3-1: Using ep0 maxpacket: 16 [ 2081.728662][T15865] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 2081.775555][T15865] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2081.804769][T15865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2081.840491][T15865] usb 3-1: Product: syz [ 2081.844734][T15865] usb 3-1: Manufacturer: syz [ 2081.857463][T15865] usb 3-1: SerialNumber: syz [ 2081.873148][T15865] r8152-cfgselector 3-1: config 0 descriptor?? [ 2081.921062][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27424'. [ 2081.960476][T22053] netlink: 19 bytes leftover after parsing attributes in process `syz.1.27424'. [ 2082.287584][T15865] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2082.314546][T15865] r8152-cfgselector 3-1: USB disconnect, device number 31 [ 2082.515602][ T4378] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 2082.726672][ T4378] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.744210][ T4378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 2082.810515][ T4378] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2082.862549][ T4378] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 2082.886732][ T4378] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 2082.904944][ T4378] usb 6-1: Product: syz [ 2082.914857][ T4378] usb 6-1: Manufacturer: syz [ 2082.924298][ T4378] usb 6-1: SerialNumber: syz [ 2082.948435][ T4378] usb 6-1: config 0 descriptor?? [ 2082.980035][ T4378] usb 6-1: no audio or video endpoints found [ 2083.173881][ T4378] usb 6-1: USB disconnect, device number 50 [ 2083.227078][T22156] loop4: detected capacity change from 0 to 128 [ 2083.269752][T22156] VFS: Found a Xenix FS (block size = 1024) on device loop4 [ 2083.406846][ T4278] sysv_free_block: flc_count > flc_size [ 2083.416168][ T4278] sysv_free_block: flc_count > flc_size [ 2083.430419][ T4278] sysv_free_block: flc_count > flc_size [ 2083.445920][ T4278] sysv_free_block: flc_count > flc_size [ 2083.458138][ T4278] sysv_free_block: flc_count > flc_size [ 2083.500524][ T4278] sysv_free_block: flc_count > flc_size [ 2083.526556][ T4278] sysv_free_block: flc_count > flc_size [ 2083.532154][ T4278] sysv_free_block: flc_count > flc_size [ 2083.545617][ T4278] sysv_free_block: flc_count > flc_size [ 2083.551273][ T4278] sysv_free_block: flc_count > flc_size [ 2083.557937][ T4278] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2083.907646][T22197] netlink: 'syz.0.27466': attribute type 1 has an invalid length. [ 2083.915576][T22197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27466'. [ 2084.275760][T22222] loop5: detected capacity change from 0 to 64 [ 2084.425331][T22235] CIFS: VFS: Malformed UNC in devname [ 2085.179558][T22283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27494'. [ 2085.728795][T22270] loop1: detected capacity change from 0 to 32768 [ 2085.879918][T22270] XFS (loop1): Mounting V5 Filesystem [ 2086.023668][T22341] loop0: detected capacity change from 0 to 24 [ 2086.034871][T22270] XFS (loop1): Ending clean mount [ 2086.047516][T22341] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 2086.050327][T22343] netlink: 'syz.5.27512': attribute type 3 has an invalid length. [ 2086.075775][T22270] XFS (loop1): Quotacheck needed: Please wait. [ 2086.101970][T22341] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 2086.109962][T22343] netlink: 232 bytes leftover after parsing attributes in process `syz.5.27512'. [ 2086.136106][T22351] cgroup: name respecified [ 2086.177213][T22341] VFS: Lookup of 'file0' in romfs loop0 would have caused loop [ 2086.246097][T22270] XFS (loop1): Quotacheck: Done. [ 2086.534629][ T4273] XFS (loop1): Unmounting Filesystem [ 2086.886355][T22388] loop5: detected capacity change from 0 to 128 [ 2086.992830][T22388] VFS: Found a Xenix FS (block size = 1024) on device loop5 [ 2087.158479][T28045] sysv_free_block: flc_count > flc_size [ 2087.185234][T28045] sysv_free_block: flc_count > flc_size [ 2087.191155][T28045] sysv_free_block: flc_count > flc_size [ 2087.211307][T28045] sysv_free_block: flc_count > flc_size [ 2087.229795][T28045] sysv_free_block: flc_count > flc_size [ 2087.268349][T28045] sysv_free_block: flc_count > flc_size [ 2087.274599][T28045] sysv_free_block: flc_count > flc_size [ 2087.285816][T28045] sysv_free_block: flc_count > flc_size [ 2087.295662][T28045] sysv_free_block: flc_count > flc_size [ 2087.344866][T28045] sysv_free_block: flc_count > flc_size [ 2087.351000][T28045] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2087.777934][T22449] loop0: detected capacity change from 0 to 128 [ 2087.800045][T22449] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 2087.840162][ T2516] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2087.858835][ T4283] sysv_free_block: flc_count > flc_size [ 2087.864498][ T4283] sysv_free_block: flc_count > flc_size [ 2087.876923][ T4283] sysv_free_block: flc_count > flc_size [ 2087.895163][ T4283] sysv_free_block: flc_count > flc_size [ 2087.909275][ T4283] sysv_free_block: flc_count > flc_size [ 2087.914866][ T4283] sysv_free_block: flc_count > flc_size [ 2087.940751][ T4283] sysv_free_block: flc_count > flc_size [ 2087.955096][ T4283] sysv_free_block: flc_count > flc_size [ 2087.964605][ T4283] sysv_free_block: flc_count > flc_size [ 2087.970415][ T4283] sysv_free_block: flc_count > flc_size [ 2088.001987][ T4283] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 2088.030548][ T2516] usb 5-1: Using ep0 maxpacket: 32 [ 2088.037731][ T2516] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 2088.073577][ T2516] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2088.104246][ T2516] usb 5-1: config 0 has no interface number 0 [ 2088.116189][ T2516] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2088.159293][ T2516] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2088.178428][ T2516] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.196666][ T2516] usb 5-1: Product: syz [ 2088.211052][ T2516] usb 5-1: Manufacturer: syz [ 2088.220966][ T2516] usb 5-1: SerialNumber: syz [ 2088.241196][ T2516] usb 5-1: config 0 descriptor?? [ 2088.272380][ T2516] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 2088.309361][ T2516] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 2088.454090][T22443] loop1: detected capacity change from 0 to 32768 [ 2088.468802][ T2516] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 2088.607018][T22443] XFS (loop1): Mounting V5 Filesystem [ 2088.615680][T22494] netlink: 'syz.0.27558': attribute type 2 has an invalid length. [ 2088.675120][ T2516] radio-raremono 5-1:0.35: raremono_cmd_main failed (-71) [ 2088.690819][ T2516] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 2088.752500][ T2516] usb 5-1: USB disconnect, device number 42 [ 2088.775030][ T2516] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 2088.839747][T22443] XFS (loop1): Ending clean mount [ 2089.028295][ T4273] XFS (loop1): Unmounting Filesystem [ 2089.043538][T22523] loop5: detected capacity change from 0 to 4096 [ 2089.268953][T22537] IPv6: NLM_F_CREATE should be specified when creating new route [ 2089.473908][ T26] audit: type=1400 audit(2150.806:1153): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=22546 comm="syz.0.27573" [ 2089.726445][T22567] netlink: 'syz.0.27579': attribute type 3 has an invalid length. [ 2089.956923][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27584'. [ 2089.966282][T22579] loop0: detected capacity change from 0 to 256 [ 2089.981451][T22580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27584'. [ 2090.007605][T22580] netlink: 7 bytes leftover after parsing attributes in process `syz.2.27584'. [ 2090.026620][T22579] FAT-fs (loop0): Directory bread(block 64) failed [ 2090.059968][T22579] FAT-fs (loop0): Directory bread(block 65) failed [ 2090.069813][T22579] FAT-fs (loop0): Directory bread(block 66) failed [ 2090.076374][T22579] FAT-fs (loop0): Directory bread(block 67) failed [ 2090.134721][T22579] FAT-fs (loop0): Directory bread(block 68) failed [ 2090.154294][T22579] FAT-fs (loop0): Directory bread(block 69) failed [ 2090.163659][T22579] FAT-fs (loop0): Directory bread(block 70) failed [ 2090.194901][T22579] FAT-fs (loop0): Directory bread(block 71) failed [ 2090.222034][T22579] FAT-fs (loop0): Directory bread(block 72) failed [ 2090.251573][T22579] FAT-fs (loop0): Directory bread(block 73) failed [ 2090.357186][T22590] loop5: detected capacity change from 0 to 1024 [ 2090.402827][T22590] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 2090.457352][T22562] loop4: detected capacity change from 0 to 32768 [ 2090.649520][T22562] XFS (loop4): Mounting V5 Filesystem [ 2090.883815][T22562] XFS (loop4): Ending clean mount [ 2091.076858][ T4278] XFS (loop4): Unmounting Filesystem [ 2091.617118][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27609'. [ 2091.652054][T22665] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27609'. [ 2091.828742][T22677] netlink: 'syz.5.27611': attribute type 21 has an invalid length. [ 2091.861156][T22677] netlink: 132 bytes leftover after parsing attributes in process `syz.5.27611'. [ 2092.361443][T22710] loop5: detected capacity change from 0 to 64 [ 2092.637949][ T26] audit: type=1326 audit(2154.134:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22725 comm="syz.5.27625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2092.729025][ T26] audit: type=1326 audit(2154.134:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22725 comm="syz.5.27625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2092.743040][T22733] netlink: 'syz.0.27628': attribute type 21 has an invalid length. [ 2092.793649][T22733] netlink: 128 bytes leftover after parsing attributes in process `syz.0.27628'. [ 2092.802846][T22733] netlink: 'syz.0.27628': attribute type 4 has an invalid length. [ 2092.846293][ T26] audit: type=1326 audit(2154.187:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22725 comm="syz.5.27625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2092.879536][T22733] netlink: 'syz.0.27628': attribute type 5 has an invalid length. [ 2092.903639][T22733] netlink: 3 bytes leftover after parsing attributes in process `syz.0.27628'. [ 2092.933837][T22742] infiniband syz2: set down [ 2092.938513][ T26] audit: type=1326 audit(2154.187:1157): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=22725 comm="syz.5.27625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2092.953798][T22742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2093.015273][ T26] audit: type=1326 audit(2154.187:1158): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=22725 comm="syz.5.27625" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9e619cdd9 code=0x7ffc0000 [ 2093.099444][ T2516] lo speed is unknown, defaulting to 1000 [ 2093.105296][ T2516] lo speed is unknown, defaulting to 1000 [ 2093.819326][T22786] loop0: detected capacity change from 0 to 1024 [ 2093.961891][ T26] audit: type=1800 audit(2155.520:1159): pid=22786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.27644" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 2094.113219][T22754] loop5: detected capacity change from 0 to 32768 [ 2094.272659][T22754] XFS (loop5): Mounting V5 Filesystem [ 2094.316566][T22817] openvswitch: netlink: Message has 4 unknown bytes. [ 2094.361829][T22811] loop0: detected capacity change from 0 to 4096 [ 2094.391511][T22754] XFS (loop5): Ending clean mount [ 2094.425206][T22811] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 2094.439818][T22754] XFS (loop5): Quotacheck needed: Please wait. [ 2094.556952][T22754] XFS (loop5): Quotacheck: Done. [ 2094.617357][T22811] ntfs3: loop0: ino=1e, "file1" attr_set_size [ 2094.664368][T28045] XFS (loop5): Unmounting Filesystem [ 2095.252890][T22799] loop1: detected capacity change from 0 to 40427 [ 2095.276384][T22799] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 2095.306544][T22799] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 2095.341260][T22799] F2FS-fs (loop1): invalid crc value [ 2095.373769][T22799] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 2095.589530][T22832] loop4: detected capacity change from 0 to 32768 [ 2095.604512][T22799] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 2095.611583][T22799] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2095.668148][T22832] XFS (loop4): Mounting V5 Filesystem [ 2095.681459][T22799] fscrypt (loop1, inode 3): Error -61 getting encryption context [ 2095.749664][T22864] loop0: detected capacity change from 0 to 4096 [ 2095.769388][T22832] XFS (loop4): Ending clean mount [ 2095.985467][ T4278] XFS (loop4): Unmounting Filesystem [ 2096.525721][T22906] netlink: 'syz.1.27669': attribute type 1 has an invalid length. [ 2096.566164][T22909] Cannot find set identified by id 0 to match [ 2096.573916][T22906] netlink: 228 bytes leftover after parsing attributes in process `syz.1.27669'. [ 2096.931808][T22930] sctp: [Deprecated]: syz.1.27681 (pid 22930) Use of int in max_burst socket option deprecated. [ 2096.931808][T22930] Use struct sctp_assoc_value instead [ 2097.365862][T22954] loop5: detected capacity change from 0 to 512 [ 2097.406075][T22954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2097.455226][T22954] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 2097.537439][T22954] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8800c01d, mo2=0102] [ 2097.585465][T22954] EXT4-fs (loop5): couldn't mount RDWR because of unsupported optional features (80) [ 2097.610968][T22954] EXT4-fs (loop5): Skipping orphan cleanup due to unknown ROCOMPAT features [ 2097.630294][T22954] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2097.668415][T22954] EXT4-fs error (device loop5): __ext4_remount:6650: comm syz.5.27688: Abort forced by user [ 2097.690065][T22975] loop4: detected capacity change from 0 to 512 [ 2097.696373][T22954] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 2097.825747][T28045] EXT4-fs (loop5): unmounting filesystem. [ 2097.839530][ T26] audit: type=1326 audit(2159.593:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2097.947604][ T26] audit: type=1326 audit(2159.593:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2098.022555][ T26] audit: type=1326 audit(2159.625:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2098.106593][ T26] audit: type=1326 audit(2159.625:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2098.167504][ T26] audit: type=1326 audit(2159.625:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2098.265054][ T26] audit: type=1326 audit(2159.625:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2098.289166][ T4319] usb 6-1: new full-speed USB device number 51 using dummy_hcd [ 2098.363920][ T26] audit: type=1326 audit(2159.625:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2098.445255][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.452166][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.460245][ T1267] aoe: packet could not be sent on 4. consider increasing tx_queue_len [ 2098.468742][ T26] audit: type=1326 audit(2159.625:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2098.491427][ T4319] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2098.520461][ T4319] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2098.546155][ T4319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.555314][T23020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27708'. [ 2098.574446][ T26] audit: type=1326 audit(2159.625:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22982 comm="syz.0.27698" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2098.575691][ T4319] usb 6-1: Product: syz [ 2098.624083][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27708'. [ 2098.639764][T22985] loop1: detected capacity change from 0 to 32768 [ 2098.665469][T22985] [ 2098.665469][T22985] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2098.665469][T22985] [ 2098.676337][T23020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27708'. [ 2098.701144][ T4319] usb 6-1: Manufacturer: syz [ 2098.705794][ T4319] usb 6-1: SerialNumber: syz [ 2098.707368][T22985] JFS: metapage_get_blocks failed [ 2098.726260][T22985] ERROR: (device loop1): release_metapage: write_one_page() failed [ 2098.726260][T22985] [ 2098.753843][ T4319] usb 6-1: config 0 descriptor?? [ 2098.757401][T22985] ERROR: (device loop1): remounting filesystem as read-only [ 2098.778401][ T4319] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 2098.799892][T22985] ERROR: (device loop1): diWrite: ixpxd invalid [ 2098.799892][T22985] [ 2098.851896][T22985] ERROR: (device loop1): txCommit: [ 2098.851896][T22985] [ 2098.974741][ T4319] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 2098.985824][ T4319] gspca_pac7302: probe of 6-1:0.0 failed with error -71 [ 2099.036001][ T4319] usb 6-1: USB disconnect, device number 51 [ 2099.855363][T23091] netlink: 'syz.5.27728': attribute type 39 has an invalid length. [ 2100.036043][T23105] loop0: detected capacity change from 0 to 128 [ 2100.265491][T23116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27736'. [ 2100.451160][T23126] netlink: 'syz.5.27739': attribute type 1 has an invalid length. [ 2100.531921][T23129] netlink: 'syz.0.27740': attribute type 10 has an invalid length. [ 2100.566564][T23129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27740'. [ 2100.575803][T23129] device team0 entered promiscuous mode [ 2100.604301][T23129] device team_slave_0 entered promiscuous mode [ 2100.610731][T23129] device team_slave_1 entered promiscuous mode [ 2100.642879][T23129] device macvlan0 entered promiscuous mode [ 2100.648939][T23129] device geneve0 entered promiscuous mode [ 2100.684402][T23129] 8021q: adding VLAN 0 to HW filter on device team0 [ 2100.711175][T23129] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2100.739844][T23088] loop4: detected capacity change from 0 to 40427 [ 2100.760923][T23088] F2FS-fs (loop4): invalid crc value [ 2100.794367][T23098] loop1: detected capacity change from 0 to 32768 [ 2100.803231][T23088] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2100.895677][T23088] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2100.955809][T23098] XFS (loop1): Mounting V5 Filesystem [ 2101.035933][T23098] XFS (loop1): Ending clean mount [ 2101.063164][T23098] XFS (loop1): Quotacheck needed: Please wait. [ 2101.149071][T23098] XFS (loop1): Quotacheck: Done. [ 2101.252111][ T4273] XFS (loop1): Unmounting Filesystem [ 2101.694531][T23183] loop4: detected capacity change from 0 to 512 [ 2101.764959][T23192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27750'. [ 2101.802353][T23183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2101.821548][T23155] loop0: detected capacity change from 0 to 32768 [ 2101.838027][T23192] netlink: 'syz.1.27750': attribute type 1 has an invalid length. [ 2101.862398][T23183] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.27754: corrupted xattr block 33 [ 2101.893810][T23155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.27745 (23155) [ 2101.999008][T23155] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2102.054970][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2102.062253][T23155] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 2102.120064][T23155] BTRFS info (device loop0): using free space tree [ 2102.421472][T23155] BTRFS info (device loop0): enabling ssd optimizations [ 2102.548241][ T4283] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2102.773257][T23243] loop4: detected capacity change from 0 to 4096 [ 2102.813235][T23243] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 2103.141615][T23243] ntfs3: loop4: ntfs_evict_inode r=6 failed, -22. [ 2103.147672][T23250] loop5: detected capacity change from 0 to 4096 [ 2103.170265][T23243] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 2103.240568][T23250] ntfs: volume version 3.1. [ 2103.267985][T23250] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 2103.304240][T23215] loop1: detected capacity change from 0 to 32768 [ 2103.316266][T23250] ntfs: (device loop5): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 2103.364502][T23215] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.27758 (23215) [ 2103.392140][T23250] ntfs: (device loop5): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 2103.422299][T23215] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2103.436693][T23250] ntfs: (device loop5): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 2103.498427][T23215] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 2103.522176][T23215] BTRFS info (device loop1): setting nodatacow, compression disabled [ 2103.536542][T23250] ntfs: (device loop5): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 2103.566969][T23215] BTRFS info (device loop1): turning on flush-on-commit [ 2103.586144][T23250] ntfs: (device loop5): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 2103.605015][T23215] BTRFS info (device loop1): trying to use backup root at mount time [ 2103.624305][T23215] BTRFS info (device loop1): max_inline at 0 [ 2103.630344][T23215] BTRFS info (device loop1): using free space tree [ 2103.691012][T23250] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 2103.747759][T23250] ntfs: (device loop5): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 2103.774109][T23267] loop4: detected capacity change from 0 to 4096 [ 2103.786750][T23250] ntfs: (device loop5): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 2103.829684][T23267] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 2103.964004][ T56] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2103.989885][T23267] ntfs: volume version 3.1. [ 2104.023073][T23215] BTRFS error (device loop1): failed to load root extent [ 2104.052954][T23215] BTRFS warning (device loop1): try to load backup roots slot 1 [ 2104.060974][ T56] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2104.129334][T23215] BTRFS warning (device loop1): couldn't read tree root [ 2104.146666][T23215] BTRFS warning (device loop1): try to load backup roots slot 2 [ 2104.192198][T23215] BTRFS error (device loop1): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 2104.239875][T23215] BTRFS warning (device loop1): couldn't read tree root [ 2104.251007][T23259] loop0: detected capacity change from 0 to 32768 [ 2104.290784][T23215] BTRFS warning (device loop1): try to load backup roots slot 3 [ 2104.328437][T23259] [ 2104.328437][T23259] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 2104.328437][T23259] [ 2104.366948][T23215] BTRFS info (device loop1): enabling ssd optimizations [ 2104.394946][T23259] JFS: metapage_get_blocks failed [ 2104.398824][T23215] BTRFS info (device loop1): rebuilding free space tree [ 2104.433636][T23259] ERROR: (device loop0): release_metapage: write_one_page() failed [ 2104.433636][T23259] [ 2104.447501][T23215] BTRFS info (device loop1): checking UUID tree [ 2104.466334][T23259] ERROR: (device loop0): remounting filesystem as read-only [ 2104.513234][T23259] ERROR: (device loop0): diWrite: ixpxd invalid [ 2104.513234][T23259] [ 2104.573344][T23259] ERROR: (device loop0): txCommit: [ 2104.573344][T23259] [ 2104.699709][T23316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27777'. [ 2104.729404][T23316] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 2104.763177][ T4273] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2104.879688][T23311] xt_CT: No such helper "snmp_trap" [ 2105.619169][T23352] loop1: detected capacity change from 0 to 2048 [ 2105.674152][T23352] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2105.792371][T23361] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2105.792995][T23352] syz.1.27779: attempt to access beyond end of device [ 2105.792995][T23352] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 2106.133976][T23381] loop1: detected capacity change from 0 to 512 [ 2106.254409][T23381] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2106.297627][T23391] loop4: detected capacity change from 0 to 256 [ 2106.314851][T23342] loop5: detected capacity change from 0 to 40427 [ 2106.346640][T23342] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 2106.359928][T23342] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2106.391494][T23391] exfat: Deprecated parameter 'utf8' [ 2106.415334][T23342] F2FS-fs (loop5): invalid crc value [ 2106.452406][T23391] exfat: Deprecated parameter 'namecase' [ 2106.461040][T23342] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 2106.468978][T23391] exfat: Deprecated parameter 'namecase' [ 2106.498377][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 2106.532398][T23391] exfat: Deprecated parameter 'utf8' [ 2106.605056][T23391] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 2106.786472][T23342] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2106.799417][T23342] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2106.941307][T23342] fscrypt (loop5, inode 3): Error -61 getting encryption context [ 2107.227509][T23437] netlink: 'syz.4.27811': attribute type 5 has an invalid length. [ 2107.628428][T23418] loop0: detected capacity change from 0 to 32768 [ 2107.770608][T23418] XFS (loop0): Mounting V5 Filesystem [ 2107.884121][T23418] XFS (loop0): Ending clean mount [ 2107.958236][ T4378] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 2108.009054][ T4283] XFS (loop0): Unmounting Filesystem [ 2108.162278][ T4378] usb 6-1: Using ep0 maxpacket: 16 [ 2108.181345][ T4378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2108.210283][ T4378] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2108.220543][ T4378] usb 6-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 2108.229908][ T4378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2108.263416][ T4378] usb 6-1: config 0 descriptor?? [ 2108.691056][ T4378] razer 0003:1532:011B.0001: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.5-1/input0 [ 2108.751135][T23488] loop4: detected capacity change from 0 to 40427 [ 2108.770194][T23488] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2108.791031][T23488] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2108.839010][T23488] F2FS-fs (loop4): invalid crc value [ 2108.864517][T23488] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 2108.941215][T23524] loop0: detected capacity change from 0 to 128 [ 2108.955438][T18692] usb 6-1: USB disconnect, device number 52 [ 2109.135513][T23488] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2109.152632][T23488] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2109.161201][T23516] fido_id[23516]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2109.245459][T23488] fscrypt (loop4, inode 3): Error -61 getting encryption context [ 2109.364622][T23548] input input124: cannot allocate more than FF_MAX_EFFECTS effects [ 2109.504772][T23554] netlink: 'syz.0.27837': attribute type 3 has an invalid length. [ 2109.939509][ T4318] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2109.983505][T23579] loop0: detected capacity change from 0 to 512 [ 2110.038388][T23579] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2110.098827][T23579] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 2110.135398][T23579] EXT4-fs (loop0): Remounting filesystem read-only [ 2110.144183][ T4318] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2110.173276][T23579] EXT4-fs (loop0): 1 truncate cleaned up [ 2110.186615][ T4318] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2110.206306][T23579] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2110.250836][ T4318] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 2110.261411][T23575] loop5: detected capacity change from 0 to 32768 [ 2110.269416][T23575] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.27841 (23575) [ 2110.312827][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.363187][ T4318] usb 2-1: config 0 descriptor?? [ 2110.395648][T23575] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2110.406927][T23575] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 2110.415593][T23575] BTRFS info (device loop5): using free space tree [ 2110.434341][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 2110.650709][T23614] loop0: detected capacity change from 0 to 1024 [ 2110.704314][T23628] loop4: detected capacity change from 0 to 2048 [ 2110.726235][T23628] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 2110.750837][T23575] BTRFS info (device loop5): enabling ssd optimizations [ 2110.792493][ T4318] wacom 0003:056A:0333.0002: ignoring exceeding usage max [ 2110.800451][T23635] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2110.818029][T23614] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2110.818255][ T4318] wacom 0003:056A:0333.0002: unknown main item tag 0x0 [ 2110.854300][ T4408] udevd[4408]: incorrect nilfs2 checksum on /dev/loop4 [ 2110.876566][ T4318] wacom 0003:056A:0333.0002: unknown main item tag 0x0 [ 2110.921313][ T4318] wacom 0003:056A:0333.0002: unknown main item tag 0x0 [ 2110.958181][ T4318] wacom 0003:056A:0333.0002: unknown main item tag 0x0 [ 2110.986154][T28045] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2110.993665][ T4318] wacom 0003:056A:0333.0002: unknown main item tag 0x0 [ 2111.035100][ T4318] wacom 0003:056A:0333.0002: unknown main item tag 0x0 [ 2111.042771][ T4318] wacom 0003:056A:0333.0002: unknown main item tag 0x0 [ 2111.240816][ T4318] wacom 0003:056A:0333.0002: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0 [ 2111.265643][ T4318] usb 2-1: USB disconnect, device number 14 [ 2111.370618][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 2111.622692][T23673] loop0: detected capacity change from 0 to 64 [ 2111.644103][T23651] fido_id[23651]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2112.415731][T23686] loop1: detected capacity change from 0 to 32768 [ 2112.462356][T23686] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.27858 (23686) [ 2112.538984][T23686] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2112.598516][T23686] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 2112.655004][T23686] BTRFS info (device loop1): using free space tree [ 2112.719794][T23688] loop0: detected capacity change from 0 to 32768 [ 2112.849117][T23688] XFS (loop0): Mounting V5 Filesystem [ 2112.961648][T23686] BTRFS info (device loop1): enabling ssd optimizations [ 2113.000968][T23741] netlink: 24 bytes leftover after parsing attributes in process `syz.4.27867'. [ 2113.093021][T23746] loop4: detected capacity change from 0 to 736 [ 2113.110486][T23688] XFS (loop0): Ending clean mount [ 2113.191846][T23746] rock: directory entry would overflow storage [ 2113.211309][T23746] rock: sig=0x3b10, size=4, remaining=3 [ 2113.272235][ T4273] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2113.337855][ T4283] XFS (loop0): Unmounting Filesystem [ 2113.396282][ C0] vkms_vblank_simulate: vblank timer overrun [ 2114.187997][T23770] loop5: detected capacity change from 0 to 1024 [ 2114.383889][ T46] hfsplus: b-tree write err: -5, ino 25 [ 2114.389939][ T46] hfsplus: b-tree write err: -5, ino 4 [ 2114.395593][ T46] hfsplus: b-tree write err: -5, ino 2 [ 2114.435586][ T46] hfsplus: b-tree write err: -5, ino 26 [ 2114.511467][T23788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.27879'. [ 2114.716544][T23791] loop4: detected capacity change from 0 to 4096 [ 2114.784866][T23791] ntfs: volume version 3.1. [ 2114.812756][T23791] __ntfs_error: 5 callbacks suppressed [ 2114.812772][T23791] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 2114.844752][T23807] netlink: 36 bytes leftover after parsing attributes in process `syz.5.27883'. [ 2114.883905][T23791] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 2114.922374][T23791] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated. Mounting read-only. Run chkdsk. [ 2114.964433][T23791] ntfs: (device loop4): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4). Marking corrupt inode and base inode 0x1a as bad. Run chkdsk. [ 2115.035703][T23791] ntfs: (device loop4): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute. [ 2115.061717][T23815] CIFS mount error: No usable UNC path provided in device string! [ 2115.061717][T23815] [ 2115.084526][T23791] ntfs: (device loop4): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 2115.102360][T23815] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2115.170581][T23791] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net. [ 2115.266682][T23791] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 2115.298248][T23791] ntfs: (device loop4): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5. [ 2115.380687][T23827] loop1: detected capacity change from 0 to 8 [ 2115.503357][T23827] SQUASHFS error: zlib decompression failed, data probably corrupt [ 2115.511372][T23827] SQUASHFS error: Failed to read block 0x9b: -5 [ 2115.573268][T23827] SQUASHFS error: Unable to read metadata cache entry [99] [ 2115.595707][T23827] SQUASHFS error: Unable to read inode 0x127 [ 2115.814643][T23853] netlink: 4348 bytes leftover after parsing attributes in process `syz.4.27896'. [ 2115.987003][T23864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.27901'. [ 2116.023507][T23864] netlink: 'syz.4.27901': attribute type 14 has an invalid length. [ 2116.030041][T23861] loop5: detected capacity change from 0 to 2048 [ 2116.054522][T23864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.27901'. [ 2116.127965][ T26] audit: type=1326 audit(2178.794:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23872 comm="syz.1.27903" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91419cdd9 code=0x7ffc0000 [ 2116.168757][T23861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2116.290750][T28045] EXT4-fs (loop5): unmounting filesystem. [ 2116.528388][T23886] loop0: detected capacity change from 0 to 4096 [ 2116.600691][T23886] ntfs: volume version 3.1. [ 2116.938986][T23911] loop1: detected capacity change from 0 to 128 [ 2117.141644][T23881] loop4: detected capacity change from 0 to 32768 [ 2117.173708][T23881] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.27904 (23881) [ 2117.191214][ T5620] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 2117.242738][T23881] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2117.268397][T23881] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2117.281415][T23930] comedi comedi3: 8255: I/O port conflict (0x1004f27,4) [ 2117.284672][T23933] loop5: detected capacity change from 0 to 256 [ 2117.300474][T23881] BTRFS info (device loop4): setting nodatacow, compression disabled [ 2117.313557][T23933] exfat: Deprecated parameter 'namecase' [ 2117.319404][T23881] BTRFS info (device loop4): turning on flush-on-commit [ 2117.328223][T23933] exfat: Deprecated parameter 'utf8' [ 2117.334034][T23881] BTRFS info (device loop4): trying to use backup root at mount time [ 2117.348645][T23881] BTRFS info (device loop4): max_inline at 0 [ 2117.358757][T23930] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 2117.371333][T23881] BTRFS info (device loop4): using free space tree [ 2117.386397][T23933] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2117.389656][T23930] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2117.405351][ T5620] usb 1-1: Using ep0 maxpacket: 16 [ 2117.418522][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2117.464925][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2117.470569][T23930] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 2117.475644][ T5620] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 2117.490827][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2117.504662][ T5620] usb 1-1: config 0 descriptor?? [ 2117.526829][T23930] comedi comedi3: 8255: I/O port conflict (0xc9,4) [ 2117.599403][T23930] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 2117.609530][T23930] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2117.616052][T23930] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 2117.669793][T13832] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 2117.690591][T23881] BTRFS error (device loop4): failed to load root extent [ 2117.698168][T23881] BTRFS warning (device loop4): try to load backup roots slot 1 [ 2117.707405][ T8640] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 2117.776091][T23881] BTRFS warning (device loop4): couldn't read tree root [ 2117.783323][T23881] BTRFS warning (device loop4): try to load backup roots slot 2 [ 2117.798910][T23881] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 2117.810236][T23881] BTRFS warning (device loop4): couldn't read tree root [ 2117.817389][T23881] BTRFS warning (device loop4): try to load backup roots slot 3 [ 2117.855209][T23881] BTRFS info (device loop4): enabling ssd optimizations [ 2117.872991][T23881] BTRFS info (device loop4): rebuilding free space tree [ 2117.904207][T23881] BTRFS info (device loop4): checking UUID tree [ 2117.925910][ T5620] razer 0003:1532:011B.0003: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 2118.157296][ T4319] usb 1-1: USB disconnect, device number 36 [ 2118.222283][T24001] loop5: detected capacity change from 0 to 256 [ 2118.237957][T23984] fido_id[23984]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2118.345868][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 2118.514978][ T4406] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop4 scanned by udevd (4406) [ 2118.604021][T24011] loop1: detected capacity change from 0 to 512 [ 2118.646944][T24011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 2119.255180][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 2119.665964][ C0] vkms_vblank_simulate: vblank timer overrun [ 2119.880825][T24079] loop4: detected capacity change from 0 to 512 [ 2119.895145][T24079] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2119.995146][T24079] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.27949: iget: bad i_size value: 38620345925642 [ 2120.151766][T24079] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.27949: couldn't read orphan inode 15 (err -117) [ 2120.201020][T24079] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2120.340389][T24097] netlink: 388 bytes leftover after parsing attributes in process `syz.5.27954'. [ 2120.372680][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2120.410026][ C0] vkms_vblank_simulate: vblank timer overrun [ 2120.746099][T24118] netlink: 32 bytes leftover after parsing attributes in process `syz.5.27961'. [ 2120.811781][T24123] loop0: detected capacity change from 0 to 64 [ 2121.066565][T24132] loop5: detected capacity change from 0 to 764 [ 2121.115716][T24132] Symlink component flag not implemented [ 2121.121460][T24132] Symlink component flag not implemented (116) [ 2121.235829][T24149] loop0: detected capacity change from 0 to 512 [ 2121.300837][T24151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27971'. [ 2121.347562][T24149] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2121.374942][T24162] loop4: detected capacity change from 0 to 16 [ 2121.396638][T24162] erofs: (device loop4): mounted with root inode @ nid 36. [ 2121.415332][T24162] syz.4.27974: attempt to access beyond end of device [ 2121.415332][T24162] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 2121.457054][T24162] syz.4.27974: attempt to access beyond end of device [ 2121.457054][T24162] loop4: rw=0, sector=36, nr_sectors = 1 limit=16 [ 2121.652393][T24172] netlink: 16 bytes leftover after parsing attributes in process `syz.1.27975'. [ 2121.693540][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 2121.842592][T24187] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27976'. [ 2122.224079][T24211] loop5: detected capacity change from 0 to 512 [ 2122.282667][T24211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2122.750371][T28045] EXT4-fs (loop5): unmounting filesystem. [ 2123.086159][T24262] loop4: detected capacity change from 0 to 128 [ 2123.103586][T24262] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2123.134171][T24262] EXT4-fs error (device loop4): swap_inode_boot_loader:378: inode #5: comm syz.4.28005: iget: checksum invalid [ 2123.188726][T24269] loop5: detected capacity change from 0 to 512 [ 2123.211832][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2123.238984][T24269] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2123.321834][T24269] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.28004: inode has both inline data and extents flags [ 2123.336453][T24269] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.28004: couldn't read orphan inode 15 (err -117) [ 2123.352194][T24269] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2123.399395][ T5620] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 2123.407288][T28045] EXT4-fs (loop5): unmounting filesystem. [ 2123.523312][T24250] futex_wake_op: syz.1.28001 tries to shift op by 32; fix this program [ 2123.620021][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2123.641112][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2123.705846][ T5620] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2123.734527][ T5620] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2123.761264][ T5620] usb 1-1: Manufacturer: syz [ 2123.786906][ T5620] usb 1-1: config 0 descriptor?? [ 2123.788085][T24297] loop5: detected capacity change from 0 to 2048 [ 2123.863546][T24306] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2124.171082][T24325] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 2124.208518][ T5620] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 2124.224200][ T5620] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 2124.251832][ T5620] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 2124.287033][ T5620] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 2124.329485][ T5620] cougar 0003:060B:700A.0004: unknown main item tag 0x0 [ 2124.357547][ T5620] cougar 0003:060B:700A.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 2124.403540][T18693] usb 1-1: USB disconnect, device number 37 [ 2124.570179][T24347] fido_id[24347]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2124.649873][T24371] loop4: detected capacity change from 0 to 256 [ 2124.752144][ T5620] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2124.787074][T24377] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28031'. [ 2124.954499][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2124.991385][ T5620] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2125.053824][ T5620] usb 3-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 2125.063663][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.101765][ T5620] usb 3-1: config 0 descriptor?? [ 2125.209532][T24405] loop5: detected capacity change from 0 to 1024 [ 2125.332499][T24412] netlink: 'syz.0.28041': attribute type 2 has an invalid length. [ 2125.346669][ T46] hfsplus: b-tree write err: -5, ino 25 [ 2125.352984][ T46] hfsplus: b-tree write err: -5, ino 4 [ 2125.358701][ T46] hfsplus: b-tree write err: -5, ino 2 [ 2125.394179][T24413] netlink: 'syz.0.28041': attribute type 2 has an invalid length. [ 2125.522205][ T5620] wacom 0003:056A:0333.0005: ignoring exceeding usage max [ 2125.550150][ T5620] wacom 0003:056A:0333.0005: unknown main item tag 0x0 [ 2125.572277][ T5620] wacom 0003:056A:0333.0005: unknown main item tag 0x0 [ 2125.584137][ T5620] wacom 0003:056A:0333.0005: unknown main item tag 0x0 [ 2125.618529][ T5620] wacom 0003:056A:0333.0005: unknown main item tag 0x0 [ 2125.646416][ T5620] wacom 0003:056A:0333.0005: unknown main item tag 0x0 [ 2125.660481][T24428] loop5: detected capacity change from 0 to 16 [ 2125.665793][ T5620] wacom 0003:056A:0333.0005: unknown main item tag 0x0 [ 2125.685123][ T5620] wacom 0003:056A:0333.0005: unknown main item tag 0x0 [ 2125.700346][T24428] erofs: (device loop5): mounted with root inode @ nid 36. [ 2125.727620][ T5620] wacom 0003:056A:0333.0005: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.2-1/input0 [ 2125.750530][ T5620] usb 3-1: USB disconnect, device number 32 [ 2125.760582][T24428] syz.5.28045: attempt to access beyond end of device [ 2125.760582][T24428] loop5: rw=0, sector=36, nr_sectors = 1 limit=16 [ 2125.800748][T24428] syz.5.28045: attempt to access beyond end of device [ 2125.800748][T24428] loop5: rw=0, sector=36, nr_sectors = 1 limit=16 [ 2125.969561][T24448] fido_id[24448]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2126.004151][ T6444] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2126.006102][T24461] loop0: detected capacity change from 0 to 256 [ 2126.016461][T24460] loop4: detected capacity change from 0 to 128 [ 2126.059881][T24460] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 2126.077114][T24460] hpfs: filesystem error: improperly stopped [ 2126.096034][T24461] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 2126.110408][T24460] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 2126.132823][T24460] hpfs: You really don't want any checks? You are crazy... [ 2126.142213][T24460] hpfs: hpfs_map_sector(): read error [ 2126.154558][T24460] hpfs: code page support is disabled [ 2126.160858][T24460] hpfs: hpfs_map_4sectors(): unaligned read [ 2126.170549][T24460] hpfs: hpfs_map_4sectors(): unaligned read [ 2126.186489][T24460] hpfs: filesystem error: unable to find root dir [ 2126.209421][ T6444] usb 2-1: Using ep0 maxpacket: 32 [ 2126.218048][T24460] hpfs: hpfs_map_4sectors(): unaligned read [ 2126.231245][ T6444] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2126.257094][ T6444] usb 2-1: config 0 has no interface number 0 [ 2126.263250][ T6444] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.290805][ T6444] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2126.302974][ T6444] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2126.312334][ T6444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.328032][ T6444] usb 2-1: config 0 descriptor?? [ 2126.931965][ T6444] uclogic 0003:28BD:0094.0006: failed retrieving string descriptor #100: -71 [ 2126.958482][ T6444] uclogic 0003:28BD:0094.0006: failed retrieving pen parameters: -71 [ 2126.969791][T24515] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2126.976145][T24514] loop5: detected capacity change from 0 to 512 [ 2126.976362][ T6444] uclogic 0003:28BD:0094.0006: pen probing failed: -71 [ 2126.989830][T24515] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2126.997101][ T6444] uclogic 0003:28BD:0094.0006: failed probing parameters: -71 [ 2127.006344][T24515] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 2127.014271][ T6444] uclogic: probe of 0003:28BD:0094.0006 failed with error -71 [ 2127.022606][T24515] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2127.044691][T24514] EXT4-fs: Ignoring removed oldalloc option [ 2127.069559][ T6444] usb 2-1: USB disconnect, device number 15 [ 2127.086651][T24515] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 2127.157825][T24514] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.28060: inode #1: comm syz.5.28060: iget: illegal inode # [ 2127.180748][T24515] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2127.250881][T24515] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 2127.258410][T24514] EXT4-fs (loop5): Remounting filesystem read-only [ 2127.285713][T24514] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.28060: error while reading EA inode 1 err=-117 [ 2127.296034][T24515] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2127.309754][T24515] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2127.313379][T24514] EXT4-fs (loop5): Remounting filesystem read-only [ 2127.333906][T24514] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.28060: inode #1: comm syz.5.28060: iget: illegal inode # [ 2127.338665][T24515] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2127.362810][T24514] EXT4-fs (loop5): Remounting filesystem read-only [ 2127.369065][T24515] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2127.375925][T24514] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.28060: error while reading EA inode 1 err=-117 [ 2127.388864][T24514] EXT4-fs (loop5): Remounting filesystem read-only [ 2127.400323][T24514] EXT4-fs (loop5): 1 orphan inode deleted [ 2127.413846][T24514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 2127.568201][T24514] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.28060: deleted inode referenced: 15 [ 2127.649719][T24514] EXT4-fs (loop5): Remounting filesystem read-only [ 2127.656377][T24547] mkiss: ax0: crc mode is auto. [ 2127.700747][T24549] EXT4-fs error (device loop5): ext4_lookup:1862: inode #2: comm syz.5.28060: deleted inode referenced: 15 [ 2127.755462][T24549] EXT4-fs (loop5): Remounting filesystem read-only [ 2127.772499][T24553] loop4: detected capacity change from 0 to 8192 [ 2127.815835][T24553] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2127.838750][T24553] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 2127.847002][T28045] EXT4-fs (loop5): unmounting filesystem. [ 2127.860381][T24553] REISERFS (device loop4): using ordered data mode [ 2127.919322][T24553] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 2127.938793][T24553] REISERFS (device loop4): checking transaction log (loop4) [ 2127.947287][T24553] REISERFS (device loop4): Using r5 hash to sort names [ 2127.955211][T24553] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 2127.969119][T24553] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 2128.341063][T24594] netlink: 'syz.5.28081': attribute type 2 has an invalid length. [ 2128.382408][T24594] netlink: 'syz.5.28081': attribute type 2 has an invalid length. [ 2128.483074][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 2128.483089][ T26] audit: type=1326 audit(2191.759:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.521833][ T26] audit: type=1326 audit(2191.759:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.562865][ T26] audit: type=1326 audit(2191.759:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.590932][ T6444] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2128.601660][ T26] audit: type=1326 audit(2191.791:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.640204][ T26] audit: type=1326 audit(2191.791:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.646611][T24607] tipc: Started in network mode [ 2128.669314][ T26] audit: type=1326 audit(2191.791:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.686925][T24607] tipc: Node identity , cluster identity 4711 [ 2128.728704][ T26] audit: type=1326 audit(2191.791:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.739090][T24607] tipc: Failed to obtain node identity [ 2128.760237][ T26] audit: type=1326 audit(2191.791:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.770679][T24607] tipc: Enabling of bearer rejected, failed to enable media [ 2128.792817][ T6444] usb 5-1: Using ep0 maxpacket: 32 [ 2128.804984][ T6444] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 2128.826751][ T6444] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.843803][ T26] audit: type=1326 audit(2191.791:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.847705][ T6444] usb 5-1: config 0 has no interface number 0 [ 2128.894459][ T6444] usb 5-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2128.905166][ T26] audit: type=1326 audit(2191.791:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24601 comm="syz.0.28083" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2128.967447][ T6444] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2128.977884][ T6444] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.979320][T24618] loop1: detected capacity change from 0 to 4096 [ 2128.995930][ T6444] usb 5-1: Product: syz [ 2129.009753][ T5620] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2129.010788][ T6444] usb 5-1: Manufacturer: syz [ 2129.037994][ T6444] usb 5-1: SerialNumber: syz [ 2129.051746][ T6444] usb 5-1: config 0 descriptor?? [ 2129.065196][ T6444] radio-si470x 5-1:0.35: could not find interrupt in endpoint [ 2129.074857][ T6444] radio-si470x: probe of 5-1:0.35 failed with error -5 [ 2129.112691][T24618] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 2129.141185][T24618] ntfs3: loop1: failed to convert "0000" to iso8859-7 [ 2129.145814][T24630] loop0: detected capacity change from 0 to 128 [ 2129.168469][T24618] ntfs3: loop1: failed to convert name for inode 1e. [ 2129.193059][ T5620] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2129.222446][ T5620] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2129.247813][ T5620] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2129.258341][ T6444] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 2129.266847][ T5620] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2129.278803][ T5620] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2129.287276][T24630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2129.292137][ T5620] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2129.307980][ T5620] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2129.316071][ T5620] usb 3-1: Product: syz [ 2129.320399][ T5620] usb 3-1: Manufacturer: syz [ 2129.329568][ T5620] cdc_wdm 3-1:1.0: skipping garbage [ 2129.335048][ T5620] cdc_wdm 3-1:1.0: skipping garbage [ 2129.342718][ T5620] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2129.349536][ T5620] cdc_wdm 3-1:1.0: Unknown control protocol [ 2129.380207][T24630] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:406: inode #2: comm syz.0.28092: No space for directory leaf checksum. Please run e2fsck -D. [ 2129.458941][ T6444] radio-raremono 5-1:0.35: V4L2 device registered as radio48 [ 2129.505144][T24630] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.28092: Directory block failed checksum [ 2129.660597][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 2129.721287][ T6444] usb 5-1: USB disconnect, device number 43 [ 2129.757862][ T6444] radio-raremono 5-1:0.35: Thanko's Raremono disconnected [ 2129.769568][T24666] loop1: detected capacity change from 0 to 256 [ 2129.818969][ C1] cdc_wdm 3-1:1.0: unknown notification 129 received: index 49755 len 0 [ 2129.858038][T18693] usb 3-1: USB disconnect, device number 33 [ 2130.056030][T24694] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2130.063043][T24694] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2130.070828][T24694] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 2130.078301][T24694] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2130.084919][T24694] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 2130.092541][T24694] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 2130.099453][T24694] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 2130.106473][T24694] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 2130.113050][T24694] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2130.119846][T24694] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2130.126878][T24694] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 2130.610303][ T6444] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 2130.715013][T24732] netlink: 19 bytes leftover after parsing attributes in process `syz.1.28112'. [ 2130.802136][ T6444] usb 5-1: config 0 has an invalid interface number: 221 but max is 0 [ 2130.829297][ T6444] usb 5-1: config 0 has no interface number 0 [ 2130.829343][ T6444] usb 5-1: config 0 interface 221 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2130.829371][ T6444] usb 5-1: config 0 interface 221 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2130.829393][ T6444] usb 5-1: config 0 interface 221 has no altsetting 0 [ 2130.829424][ T6444] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice=10.00 [ 2130.829448][ T6444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.836902][ T6444] usb 5-1: config 0 descriptor?? [ 2131.234967][ T6444] uclogic 0003:5543:0522.0007: item fetching failed at offset 0/3 [ 2131.235432][ T6444] uclogic 0003:5543:0522.0007: parse failed [ 2131.235460][ T6444] uclogic: probe of 0003:5543:0522.0007 failed with error -22 [ 2131.296024][T24761] loop5: detected capacity change from 0 to 128 [ 2131.324461][T24761] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 2131.324515][T24761] hpfs: filesystem error: improperly stopped [ 2131.324533][T24761] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 2131.324550][T24761] hpfs: You really don't want any checks? You are crazy... [ 2131.324856][T24761] hpfs: hpfs_map_sector(): read error [ 2131.324867][T24761] hpfs: code page support is disabled [ 2131.325534][T24761] hpfs: hpfs_map_4sectors(): unaligned read [ 2131.436076][ T6444] usb 5-1: USB disconnect, device number 44 [ 2131.443624][T24761] hpfs: hpfs_map_4sectors(): unaligned read [ 2131.443639][T24761] hpfs: filesystem error: unable to find root dir [ 2131.510920][T24761] hpfs: hpfs_map_4sectors(): unaligned read [ 2131.515620][T24774] tipc: Started in network mode [ 2131.515656][T24774] tipc: Node identity 0000000000002d000000000000000001, cluster identity 4711 [ 2131.515695][T24774] tipc: Enabling of bearer rejected, failed to enable media [ 2131.637315][T24747] loop0: detected capacity change from 0 to 32768 [ 2131.645234][T24747] XFS: attr2 mount option is deprecated. [ 2131.704566][T24747] XFS (loop0): Mounting V5 Filesystem [ 2131.795079][T24747] XFS (loop0): Ending clean mount [ 2131.802294][T24747] XFS (loop0): Quotacheck needed: Please wait. [ 2131.938133][T24747] XFS (loop0): Quotacheck: Done. [ 2132.036057][ T4283] XFS (loop0): Unmounting Filesystem [ 2132.252185][ C0] vkms_vblank_simulate: vblank timer overrun [ 2133.611108][T24836] loop1: detected capacity change from 0 to 40427 [ 2133.668167][T24836] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 2133.674566][T24836] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 2133.739556][T24836] F2FS-fs (loop1): invalid crc value [ 2133.745231][T24846] futex_wake_op: syz.4.28141 tries to shift op by 32; fix this program [ 2133.841907][T24836] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 2133.890280][T24887] devpts: called with bogus options [ 2134.011961][T24836] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 2134.065175][T24836] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 2134.224749][T24904] loop4: detected capacity change from 0 to 256 [ 2134.302840][T24904] FAT-fs (loop4): Directory bread(block 64) failed [ 2134.306298][ T4273] syz-executor: attempt to access beyond end of device [ 2134.306298][ T4273] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2134.325419][T24904] FAT-fs (loop4): Directory bread(block 65) failed [ 2134.359362][T24904] FAT-fs (loop4): Directory bread(block 66) failed [ 2134.399383][T24904] FAT-fs (loop4): Directory bread(block 67) failed [ 2134.429390][T24904] FAT-fs (loop4): Directory bread(block 68) failed [ 2134.462093][T24904] FAT-fs (loop4): Directory bread(block 69) failed [ 2134.481961][T24904] FAT-fs (loop4): Directory bread(block 70) failed [ 2134.506619][T24904] FAT-fs (loop4): Directory bread(block 71) failed [ 2134.513285][T24904] FAT-fs (loop4): Directory bread(block 72) failed [ 2134.563621][T24904] FAT-fs (loop4): Directory bread(block 73) failed [ 2134.912511][T24922] loop0: detected capacity change from 0 to 8192 [ 2134.950827][T24922] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 2134.964546][T24899] loop5: detected capacity change from 0 to 32768 [ 2135.001819][T24922] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 2135.011708][T24922] REISERFS (device loop0): using ordered data mode [ 2135.027680][T24922] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 2135.044334][T24922] REISERFS (device loop0): checking transaction log (loop0) [ 2135.052575][T24922] REISERFS (device loop0): Using r5 hash to sort names [ 2135.060511][T24922] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 2135.075092][T24922] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 2135.121955][T24945] devpts: called with bogus options [ 2135.131417][T24899] XFS (loop5): Mounting V5 Filesystem [ 2135.184517][T24899] XFS (loop5): Ending clean mount [ 2135.191950][T24899] XFS (loop5): Quotacheck needed: Please wait. [ 2135.273775][T24899] XFS (loop5): Quotacheck: Done. [ 2135.316285][ C0] vkms_vblank_simulate: vblank timer overrun [ 2135.521745][T28045] XFS (loop5): Unmounting Filesystem [ 2136.346976][T24962] futex_wake_op: syz.0.28169 tries to shift op by 32; fix this program [ 2136.380851][T25001] program syz.2.28184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2136.600673][T24975] loop4: detected capacity change from 0 to 32768 [ 2136.733096][T24975] XFS (loop4): DAX unsupported by block device. Turning off DAX. [ 2136.756400][T24975] XFS (loop4): Mounting V5 Filesystem [ 2136.860245][T24975] XFS (loop4): Ending clean mount [ 2136.898342][T24975] XFS (loop4): Quotacheck needed: Please wait. [ 2136.993165][T25033] loop1: detected capacity change from 0 to 4096 [ 2137.021722][T24975] XFS (loop4): Quotacheck: Done. [ 2137.114612][T24996] loop5: detected capacity change from 0 to 32768 [ 2137.206297][ T4278] XFS (loop4): Unmounting Filesystem [ 2137.304284][T24996] XFS (loop5): Mounting V5 Filesystem [ 2137.417207][T25048] loop1: detected capacity change from 0 to 4096 [ 2137.425650][T24996] XFS (loop5): Ending clean mount [ 2137.441793][T25048] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 2137.475430][T24996] XFS (loop5): Quotacheck needed: Please wait. [ 2137.549517][T24996] XFS (loop5): Quotacheck: Done. [ 2137.593112][T25048] ntfs3: loop1: failed to convert "c46c" to cp855 [ 2137.716452][T28045] XFS (loop5): Unmounting Filesystem [ 2138.493234][T25097] loop0: detected capacity change from 0 to 1024 [ 2138.554291][ C0] vkms_vblank_simulate: vblank timer overrun [ 2138.564943][T25103] loop5: detected capacity change from 0 to 512 [ 2138.577692][T25097] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 2138.729599][T25103] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 2138.927029][T28045] EXT4-fs (loop5): unmounting filesystem. [ 2139.021212][ T6444] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 2139.222853][ T6444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2139.244458][ T6444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2139.291519][ T6444] usb 5-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 2139.316516][ T6444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2139.342489][ T6444] usb 5-1: config 0 descriptor?? [ 2139.551710][T25123] loop1: detected capacity change from 0 to 32768 [ 2139.552398][T25138] loop5: detected capacity change from 0 to 32768 [ 2139.591977][T25123] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 ./bus scanned by syz.1.28212 (25123) [ 2139.619297][T25123] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2139.631036][T18693] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 2139.646232][T25138] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 2139.646793][T25123] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 2139.654419][T16456] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 2139.664969][T25138] XFS (loop5): Mounting V5 Filesystem [ 2139.719520][T25138] XFS (loop5): Ending clean mount [ 2139.745094][T25123] BTRFS error (device loop1): superblock checksum mismatch [ 2139.761587][ T6444] wacom 0003:056A:0333.0008: ignoring exceeding usage max [ 2139.779926][ T4404] udevd[4404]: incorrect btrfs checksum on /dev/loop1 [ 2139.780609][T28045] XFS (loop5): Unmounting Filesystem [ 2139.789181][ T6444] wacom 0003:056A:0333.0008: unknown main item tag 0x0 [ 2139.801460][T25123] BTRFS error (device loop1): open_ctree failed: -22 [ 2139.811982][ T6444] wacom 0003:056A:0333.0008: unknown main item tag 0x0 [ 2139.818929][ T6444] wacom 0003:056A:0333.0008: unknown main item tag 0x0 [ 2139.827089][T18693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2139.838722][T16456] usb 1-1: Using ep0 maxpacket: 32 [ 2139.841394][ T6444] wacom 0003:056A:0333.0008: unknown main item tag 0x0 [ 2139.849497][T16456] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 2139.859782][ T6444] wacom 0003:056A:0333.0008: unknown main item tag 0x0 [ 2139.868466][ T6444] wacom 0003:056A:0333.0008: unknown main item tag 0x0 [ 2139.874770][T18693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2139.885471][T16456] usb 1-1: config 0 has no interface number 0 [ 2139.902932][ T6444] wacom 0003:056A:0333.0008: unknown main item tag 0x0 [ 2139.931795][T18693] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2139.933069][ T6444] wacom 0003:056A:0333.0008: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.4-1/input0 [ 2139.942322][T18693] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2139.942521][T16456] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2139.970256][T18693] usb 3-1: Manufacturer: syz [ 2139.976318][T16456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2139.985363][T18693] usb 3-1: config 0 descriptor?? [ 2139.994384][T16456] usb 1-1: Product: syz [ 2139.998643][T16456] usb 1-1: Manufacturer: syz [ 2140.003156][ T4404] udevd[4404]: incorrect btrfs checksum on /dev/loop1 [ 2140.003535][T16456] usb 1-1: SerialNumber: syz [ 2140.019368][T16456] usb 1-1: config 0 descriptor?? [ 2140.027928][ T6444] usb 5-1: USB disconnect, device number 45 [ 2140.117394][T16456] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2140.145981][T16456] usb 1-1: selecting invalid altsetting 1 [ 2140.162175][T16456] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2140.197851][T16456] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2140.246791][T25183] fido_id[25183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2140.247854][T16456] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2140.297511][T16456] usb 1-1: media controller created [ 2140.321792][T16456] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2140.392281][T18693] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 2140.401921][T18693] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 2140.409057][T18693] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 2140.417291][T18693] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 2140.426955][T16456] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2140.434803][T16456] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2140.442318][T18693] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 2140.453216][T18693] cougar 0003:060B:700A.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 2140.464669][T16456] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2140.566893][T16456] usb 1-1: USB disconnect, device number 38 [ 2140.635704][ T6444] usb 3-1: USB disconnect, device number 34 [ 2140.736981][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 2140.736996][ T26] audit: type=1326 audit(2204.630:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.1.28224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91419cdd9 code=0x7ffc0000 [ 2140.853533][T25210] fido_id[25210]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 2140.870434][ T26] audit: type=1326 audit(2204.640:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.1.28224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff91419bc47 code=0x7ffc0000 [ 2140.894160][ C0] vkms_vblank_simulate: vblank timer overrun [ 2140.904595][T25234] loop5: detected capacity change from 0 to 4096 [ 2140.960248][T25234] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 2141.002465][ T26] audit: type=1326 audit(2204.640:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.1.28224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91419cdd9 code=0x7ffc0000 [ 2141.096697][ T26] audit: type=1326 audit(2204.640:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.1.28224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91419cdd9 code=0x7ffc0000 [ 2141.162305][T25251] loop4: detected capacity change from 0 to 512 [ 2141.188819][T25253] loop1: detected capacity change from 0 to 512 [ 2141.188954][ T26] audit: type=1326 audit(2204.640:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.1.28224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7ff91419cdd9 code=0x7ffc0000 [ 2141.225364][ T26] audit: type=1326 audit(2204.640:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.1.28224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91419cdd9 code=0x7ffc0000 [ 2141.250577][ T26] audit: type=1326 audit(2204.640:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25231 comm="syz.1.28224" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff91419cdd9 code=0x7ffc0000 [ 2141.274299][ C0] vkms_vblank_simulate: vblank timer overrun [ 2141.285706][T25251] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.28230: inode has both inline data and extents flags [ 2141.307777][T25251] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.28230: couldn't read orphan inode 15 (err -117) [ 2141.326147][T25251] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2141.346191][T25253] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 2141.354136][T25253] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 2141.401839][T25234] ntfs3: Cannot use different iocharset when remounting! [ 2141.410922][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2141.439054][T25253] System zones: 0-1, 15-15, 18-18, 34-34 [ 2141.446430][T25253] EXT4-fs (loop1): orphan cleanup on readonly fs [ 2141.507687][T25253] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 2141.526196][T25253] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 2141.582250][T25253] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 2141.615734][T25253] EXT4-fs (loop1): 1 truncate cleaned up [ 2141.640842][T25253] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2141.741658][T25253] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 2141.778941][T25253] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 2141.843177][T25289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28238'. [ 2141.869469][T25289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28238'. [ 2141.908604][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 2142.116658][T25305] netlink: 'syz.0.28245': attribute type 11 has an invalid length. [ 2142.328437][T25321] loop0: detected capacity change from 0 to 256 [ 2142.394453][T25321] FAT-fs (loop0): Directory bread(block 64) failed [ 2142.425933][T25321] FAT-fs (loop0): Directory bread(block 65) failed [ 2142.438260][T25319] loop4: detected capacity change from 0 to 4096 [ 2142.447071][T25327] loop5: detected capacity change from 0 to 64 [ 2142.448261][T25321] FAT-fs (loop0): Directory bread(block 66) failed [ 2142.467661][T25319] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 2142.477889][T25321] FAT-fs (loop0): Directory bread(block 67) failed [ 2142.496627][T25321] FAT-fs (loop0): Directory bread(block 68) failed [ 2142.559999][T25321] FAT-fs (loop0): Directory bread(block 69) failed [ 2142.606540][T25321] FAT-fs (loop0): Directory bread(block 70) failed [ 2142.616042][T25319] ntfs3: loop4: failed to convert "c46c" to cp855 [ 2142.640018][T25321] FAT-fs (loop0): Directory bread(block 71) failed [ 2142.650579][T25334] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000..2150000) [ 2142.671629][T25321] FAT-fs (loop0): Directory bread(block 72) failed [ 2142.697492][T25321] FAT-fs (loop0): Directory bread(block 73) failed [ 2142.868874][T25344] netlink: 'syz.4.28255': attribute type 5 has an invalid length. [ 2143.075185][T25354] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0xd9218ae8, utbl_chksum : 0xe619d30d) [ 2143.888075][T25358] set_capacity_and_notify: 1 callbacks suppressed [ 2143.888093][T25358] loop4: detected capacity change from 0 to 32768 [ 2143.985026][T25358] XFS (loop4): Mounting V5 Filesystem [ 2144.042936][T25373] loop5: detected capacity change from 0 to 40427 [ 2144.065427][T25373] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 2144.075150][T25373] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 2144.095586][T25373] F2FS-fs (loop5): invalid crc value [ 2144.103754][T25358] XFS (loop4): Ending clean mount [ 2144.145195][T25373] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 2144.149349][T25358] XFS (loop4): Quotacheck needed: Please wait. [ 2144.293243][T25373] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 2144.304291][T25373] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2144.304616][T25358] XFS (loop4): Quotacheck: Done. [ 2144.542653][ T4278] XFS (loop4): Unmounting Filesystem [ 2144.562048][T28045] syz-executor: attempt to access beyond end of device [ 2144.562048][T28045] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2144.810587][ C0] vkms_vblank_simulate: vblank timer overrun [ 2145.675430][T18693] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 2145.755395][T25491] loop5: detected capacity change from 0 to 256 [ 2145.862457][T18693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2145.887741][T18693] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2145.937013][T18693] usb 1-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00 [ 2145.970698][T18693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.011594][T18693] usb 1-1: config 0 descriptor?? [ 2146.021919][T25466] loop4: detected capacity change from 0 to 32768 [ 2146.229070][T25471] loop1: detected capacity change from 0 to 32768 [ 2146.315685][T25471] XFS (loop1): Mounting V5 Filesystem [ 2146.410034][T25471] XFS (loop1): Ending clean mount [ 2146.424654][T18693] wacom 0003:056A:0333.000A: ignoring exceeding usage max [ 2146.486422][T18693] wacom 0003:056A:0333.000A: unknown main item tag 0x0 [ 2146.505018][T18693] wacom 0003:056A:0333.000A: unknown main item tag 0x0 [ 2146.556143][T18693] wacom 0003:056A:0333.000A: unknown main item tag 0x0 [ 2146.576616][T18693] wacom 0003:056A:0333.000A: unknown main item tag 0x0 [ 2146.604708][T18693] wacom 0003:056A:0333.000A: unknown main item tag 0x0 [ 2146.622110][T18693] wacom 0003:056A:0333.000A: unknown main item tag 0x0 [ 2146.639564][T18693] wacom 0003:056A:0333.000A: unknown main item tag 0x0 [ 2146.658330][T25507] loop5: detected capacity change from 0 to 32768 [ 2146.680947][T25471] XFS (loop1): Quotacheck needed: Please wait. [ 2146.710682][T18693] wacom 0003:056A:0333.000A: hidraw0: USB HID v0.04 Device [HID 056a:0333] on usb-dummy_hcd.0-1/input0 [ 2146.723411][T25507] (syz.5.28299,25507,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2146.745015][T25507] (syz.5.28299,25507,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 2146.767055][T25471] XFS (loop1): Quotacheck: Done. [ 2146.778112][T18693] usb 1-1: USB disconnect, device number 39 [ 2146.882960][T25507] JBD2: Ignoring recovery information on journal [ 2147.031208][ T4273] XFS (loop1): Unmounting Filesystem [ 2147.047908][T25507] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 2147.234901][T25553] fido_id[25553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 2147.351374][T28045] ocfs2: Unmounting device (7,5) on (node local) [ 2147.498136][T25576] program syz.2.28313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2147.775765][T25590] loop4: detected capacity change from 0 to 4096 [ 2147.864992][T25590] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 2148.058502][T25590] ntfs3: Cannot use different iocharset when remounting! [ 2148.265080][T25606] loop4: detected capacity change from 0 to 64 [ 2148.593725][T25622] loop0: detected capacity change from 0 to 2048 [ 2148.666387][T25625] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2148.818650][T25628] loop1: detected capacity change from 0 to 1024 [ 2149.061480][T25636] netlink: 'syz.2.28327': attribute type 3 has an invalid length. [ 2149.404487][T25653] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28332'. [ 2149.445469][T25653] netlink: 16 bytes leftover after parsing attributes in process `syz.5.28332'. [ 2149.680614][T25668] sp0: Synchronizing with TNC [ 2149.801026][T25684] tipc: Enabling of bearer rejected, failed to enable media [ 2150.077136][ T26] audit: type=1326 audit(2214.424:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25696 comm="syz.2.28345" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f066499cdd9 code=0x0 [ 2150.100366][ C0] vkms_vblank_simulate: vblank timer overrun [ 2150.338480][T25663] loop4: detected capacity change from 0 to 40427 [ 2150.379020][T25663] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2150.456683][T25663] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2150.532209][ T4278] syz-executor: attempt to access beyond end of device [ 2150.532209][ T4278] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2150.572782][T25722] loop1: detected capacity change from 0 to 4096 [ 2150.579647][T25719] loop0: detected capacity change from 0 to 4096 [ 2150.674915][T25719] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 2150.717082][T25731] loop5: detected capacity change from 0 to 8 [ 2150.816379][ T4273] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 2150.861605][ T4273] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 2151.145298][T25719] ntfs3: Cannot use different iocharset when remounting! [ 2151.186677][T25750] Bluetooth: MGMT ver 1.22 [ 2151.290342][ T6444] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2151.490273][ T6444] usb 6-1: Using ep0 maxpacket: 8 [ 2151.502597][ T6444] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 2151.531489][ T6444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 2151.556471][T25773] loop0: detected capacity change from 0 to 256 [ 2151.572647][ T6444] usb 6-1: Product: syz [ 2151.581659][ T6444] usb 6-1: Manufacturer: syz [ 2151.586705][ T6444] usb 6-1: SerialNumber: syz [ 2151.602109][ T6444] usb 6-1: config 0 descriptor?? [ 2151.630147][ T6444] gspca_main: sq905-2.14.0 probing 2770:9120 [ 2151.641296][T25780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28368'. [ 2151.669017][T25773] FAT-fs (loop0): Directory bread(block 64) failed [ 2151.700441][T25773] FAT-fs (loop0): Directory bread(block 65) failed [ 2151.707102][T25773] FAT-fs (loop0): Directory bread(block 66) failed [ 2151.785483][T25773] FAT-fs (loop0): Directory bread(block 67) failed [ 2151.792133][T25773] FAT-fs (loop0): Directory bread(block 68) failed [ 2151.837185][T25773] FAT-fs (loop0): Directory bread(block 69) failed [ 2151.852918][T25791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28370'. [ 2151.881746][T25773] FAT-fs (loop0): Directory bread(block 70) failed [ 2151.891532][T25791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28370'. [ 2151.897792][T25773] FAT-fs (loop0): Directory bread(block 71) failed [ 2151.908778][T25773] FAT-fs (loop0): Directory bread(block 72) failed [ 2151.915662][T25773] FAT-fs (loop0): Directory bread(block 73) failed [ 2152.171565][T25806] loop4: detected capacity change from 0 to 64 [ 2152.195868][ T6444] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 2152.203202][ T6444] sq905: probe of 6-1:0.0 failed with error -71 [ 2152.241583][ T6444] usb 6-1: USB disconnect, device number 53 [ 2153.090439][T25847] loop1: detected capacity change from 0 to 32768 [ 2153.100660][T18693] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2153.113156][T25847] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 2153.121440][T25847] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 2153.133816][T25847] syz.1.28383: attempt to access beyond end of device [ 2153.133816][T25847] loop1: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 2153.148594][T25847] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 2153.154545][T25828] loop0: detected capacity change from 0 to 32768 [ 2153.271744][T18693] usb 3-1: Using ep0 maxpacket: 8 [ 2153.281611][T18693] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 2153.293093][T18693] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 2153.301524][T18693] usb 3-1: Product: syz [ 2153.305711][T18693] usb 3-1: Manufacturer: syz [ 2153.310960][T18693] usb 3-1: SerialNumber: syz [ 2153.324518][T18693] usb 3-1: config 0 descriptor?? [ 2153.336231][T18693] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 2153.347907][T25828] JBD2: Ignoring recovery information on journal [ 2153.526513][T25828] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 2153.628197][T16456] kernel read not supported for file /video7 (pid: 16456 comm: kworker/1:20) [ 2153.725379][T25885] CUSE: info not properly terminated [ 2153.743873][ T4283] ocfs2: Unmounting device (7,0) on (node local) [ 2153.913514][T18693] gspca_zc3xx: reg_w_i err -71 [ 2153.925328][T18693] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 2153.982093][T18693] usb 3-1: USB disconnect, device number 35 [ 2154.700609][T25937] sch_tbf: burst 4 is lower than device wg0 mtu (1420) ! [ 2154.861354][T25908] futex_wake_op: syz.5.28395 tries to shift op by 32; fix this program [ 2154.898286][T25912] loop0: detected capacity change from 0 to 32768 [ 2155.001188][T18693] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 2155.030995][T25956] loop1: detected capacity change from 0 to 1024 [ 2155.200707][T18693] usb 3-1: Using ep0 maxpacket: 16 [ 2155.209159][T18693] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2155.224218][ T6444] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 2155.245111][T18693] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2155.299696][T18693] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2155.344548][T18693] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2155.365945][T18693] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 2155.386927][T18693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.394971][T18693] usb 3-1: Product: syz [ 2155.405497][ T6444] usb 5-1: Using ep0 maxpacket: 16 [ 2155.413411][ T6444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2155.421442][T18693] usb 3-1: Manufacturer: syz [ 2155.430939][T18693] usb 3-1: SerialNumber: syz [ 2155.434716][T25971] loop0: detected capacity change from 0 to 1024 [ 2155.459725][ T6444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2155.471343][ T6444] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2155.480752][T25971] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 2155.484910][T18693] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input138 [ 2155.503601][ T6444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.514743][ T6444] usb 5-1: config 0 descriptor?? [ 2155.680204][ T3624] bcm5974 3-1:1.0: could not read from device [ 2155.713317][T18693] bcm5974 3-1:1.0: could not read from device [ 2155.932952][ T6444] hid-multitouch 0003:1FD2:6007.000B: bogus close delimiter [ 2155.964035][ T6444] hid-multitouch 0003:1FD2:6007.000B: item 0 1 2 10 parsing failed [ 2156.000243][ T6444] hid-multitouch: probe of 0003:1FD2:6007.000B failed with error -22 [ 2156.046802][T25999] loop5: detected capacity change from 0 to 32768 [ 2156.075348][T25999] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 2156.083934][T25999] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 2156.103251][T25999] syz.5.28417: attempt to access beyond end of device [ 2156.103251][T25999] loop5: rw=12288, sector=549755814040, nr_sectors = 8 limit=32768 [ 2156.117972][T25999] gfs2: fsid=syz:syz.0: can't acquire journal inode glock: -5 [ 2156.137609][ T6444] usb 5-1: USB disconnect, device number 46 [ 2156.148858][ T3624] bcm5974 3-1:1.0: could not read from device [ 2156.192495][T26009] loop0: detected capacity change from 0 to 4096 [ 2156.203811][T18693] input: failed to attach handler mousedev to device input138, error: -5 [ 2156.226061][T18693] usb 3-1: USB disconnect, device number 36 [ 2156.235974][ T3624] bcm5974 3-1:1.0: could not read from device [ 2156.970609][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2156.976953][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2156.988132][ T1267] aoe: packet could not be sent on 4. consider increasing tx_queue_len [ 2157.334793][T26058] loop0: detected capacity change from 0 to 32768 [ 2157.396913][T26058] UFO tlock:0xffffc900028aa0d8 [ 2157.448710][T26059] futex_wake_op: syz.2.28423 tries to shift op by 32; fix this program [ 2157.850289][T26087] loop4: detected capacity change from 0 to 128 [ 2158.118168][T26095] loop4: detected capacity change from 0 to 512 [ 2158.152884][T26095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 2158.200383][T26095] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.28437: bad orphan inode 131083 [ 2158.221565][T26095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2158.247635][T26095] overlayfs: upper fs needs to support d_type. [ 2158.294888][ T4278] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /5880/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 2158.449134][T26112] loop0: detected capacity change from 0 to 1024 [ 2158.481473][T26112] EXT4-fs: inline encryption not supported [ 2158.495449][T26112] EXT4-fs: Ignoring removed mblk_io_submit option [ 2158.577620][T26112] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2158.597695][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 2158.658603][T26079] loop1: detected capacity change from 0 to 40427 [ 2158.756497][T26079] F2FS-fs (loop1): invalid crc value [ 2158.824117][T26079] F2FS-fs (loop1): Found nat_bits in checkpoint [ 2158.993414][ T4283] EXT4-fs (loop0): unmounting filesystem. [ 2159.068387][T26079] F2FS-fs (loop1): Start checkpoint disabled! [ 2159.140707][T26079] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 2159.193173][ T26] audit: type=1326 audit(2223.999:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2159.335394][ T26] audit: type=1326 audit(2224.009:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2159.491321][ T26] audit: type=1326 audit(2224.009:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2159.515152][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.620190][ T46] kworker/u4:3: attempt to access beyond end of device [ 2159.620190][ T46] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 2159.636632][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.697768][ T26] audit: type=1326 audit(2224.009:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2159.721422][ C0] vkms_vblank_simulate: vblank timer overrun [ 2159.801459][ T26] audit: type=1326 audit(2224.009:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2159.907343][ T26] audit: type=1326 audit(2224.009:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2159.912306][T26170] loop5: detected capacity change from 0 to 4096 [ 2159.986902][ C0] vkms_vblank_simulate: vblank timer overrun [ 2160.050923][ T26] audit: type=1326 audit(2224.009:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2160.167355][ T26] audit: type=1326 audit(2224.009:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2160.280145][T28045] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 2160.286395][ T26] audit: type=1326 audit(2224.009:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2160.307641][T28045] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 2160.310201][ C0] vkms_vblank_simulate: vblank timer overrun [ 2160.398571][ C0] vkms_vblank_simulate: vblank timer overrun [ 2160.414797][ T26] audit: type=1326 audit(2224.009:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26143 comm="syz.0.28456" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332679cdd9 code=0x7ffc0000 [ 2160.527911][T28047] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2160.542486][T28047] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2160.568808][T28047] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2160.579819][T28047] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2160.590883][T28047] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2160.598292][T28047] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2160.634936][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2160.644826][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2160.660356][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2160.724976][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2160.738494][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2160.759170][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2161.004240][T26244] loop1: detected capacity change from 0 to 512 [ 2161.108580][T26244] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 2161.178012][T26244] EXT4-fs (loop1): re-mounted. Quota mode: writeback. [ 2161.272252][T26169] loop0: detected capacity change from 0 to 40427 [ 2161.318564][T26169] F2FS-fs (loop0): invalid crc value [ 2161.328281][ T4273] EXT4-fs (loop1): unmounting filesystem. [ 2161.339131][T26258] loop5: detected capacity change from 0 to 1024 [ 2161.403929][T26169] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 2161.453406][T26258] hfsplus: bad catalog entry type [ 2161.592253][T26271] netlink: 332 bytes leftover after parsing attributes in process `syz.1.28463'. [ 2161.634972][T26271] netlink: 'syz.1.28463': attribute type 9 has an invalid length. [ 2161.673297][T26271] netlink: 108 bytes leftover after parsing attributes in process `syz.1.28463'. [ 2161.687206][T26169] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2161.698900][ T4326] hfsplus: b-tree write err: -5, ino 25 [ 2161.714709][ T4326] hfsplus: b-tree write err: -5, ino 4 [ 2161.720304][ T4326] hfsplus: b-tree write err: -5, ino 2 [ 2161.736317][T26271] netlink: 32 bytes leftover after parsing attributes in process `syz.1.28463'. [ 2161.828919][T26182] lo speed is unknown, defaulting to 1000 [ 2161.842378][ T4283] syz-executor: attempt to access beyond end of device [ 2161.842378][ T4283] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2161.891433][ C0] vkms_vblank_simulate: vblank timer overrun [ 2162.046157][T26280] [ 2162.048543][T26280] ====================================================== [ 2162.056352][T26280] WARNING: possible circular locking dependency detected [ 2162.063401][T26280] syzkaller #0 Not tainted [ 2162.067826][T26280] ------------------------------------------------------ [ 2162.074857][T26280] syz.2.28467/26280 is trying to acquire lock: [ 2162.081014][T26280] ffffffff97023038 (nfnl_subsys_ipset){+.+.}-{3:3}, at: ip_set_nfnl_get_byindex+0x63/0x230 [ 2162.091068][T26280] [ 2162.091068][T26280] but task is already holding lock: [ 2162.098445][T26280] ffff8881457caab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 2162.108750][T26280] [ 2162.108750][T26280] which lock already depends on the new lock. [ 2162.108750][T26280] [ 2162.119166][T26280] [ 2162.119166][T26280] the existing dependency chain (in reverse order) is: [ 2162.128199][T26280] [ 2162.128199][T26280] -> #2 (&nft_net->commit_mutex){+.+.}-{3:3}: [ 2162.136485][T26280] __mutex_lock+0x12d/0xaf0 [ 2162.141631][T26280] nf_tables_dumpreset_obj+0x6e/0x90 [ 2162.147465][T26280] netlink_dump+0x6a3/0xd00 [ 2162.152512][T26280] __netlink_dump_start+0x537/0x6f0 [ 2162.158258][T26280] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 2162.164442][T26280] nf_tables_getobj_reset+0x1cb/0x610 [ 2162.170364][T26280] nfnetlink_rcv_msg+0x8a0/0x12b0 [ 2162.175931][T26280] netlink_rcv_skb+0x1fb/0x450 [ 2162.181243][T26280] nfnetlink_rcv+0x2b0/0x2480 [ 2162.186463][T26280] netlink_unicast+0x74d/0x8d0 [ 2162.191769][T26280] netlink_sendmsg+0x8ad/0xbd0 [ 2162.197085][T26280] ____sys_sendmsg+0x5be/0x970 [ 2162.202399][T26280] ___sys_sendmsg+0x2a2/0x360 [ 2162.207627][T26280] __se_sys_sendmsg+0x1bb/0x2a0 [ 2162.213026][T26280] do_syscall_64+0x4c/0xa0 [ 2162.217987][T26280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2162.224434][T26280] [ 2162.224434][T26280] -> #1 (nlk_cb_mutex-NETFILTER){+.+.}-{3:3}: [ 2162.232705][T26280] __mutex_lock+0x12d/0xaf0 [ 2162.237761][T26280] __netlink_dump_start+0x11f/0x6f0 [ 2162.243510][T26280] ip_set_dump+0x152/0x1e0 [ 2162.248475][T26280] nfnetlink_rcv_msg+0xbec/0x12b0 [ 2162.254047][T26280] netlink_rcv_skb+0x1fb/0x450 [ 2162.259372][T26280] nfnetlink_rcv+0x2b0/0x2480 [ 2162.264593][T26280] netlink_unicast+0x74d/0x8d0 [ 2162.269908][T26280] netlink_sendmsg+0x8ad/0xbd0 [ 2162.275228][T26280] ____sys_sendmsg+0x5be/0x970 [ 2162.280538][T26280] ___sys_sendmsg+0x2a2/0x360 [ 2162.285768][T26280] __se_sys_sendmsg+0x1bb/0x2a0 [ 2162.291170][T26280] do_syscall_64+0x4c/0xa0 [ 2162.296137][T26280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2162.302571][T26280] [ 2162.302571][T26280] -> #0 (nfnl_subsys_ipset){+.+.}-{3:3}: [ 2162.310419][T26280] __lock_acquire+0x2d07/0x7d10 [ 2162.315998][T26280] lock_acquire+0x1bb/0x4a0 [ 2162.321057][T26280] __mutex_lock+0x12d/0xaf0 [ 2162.326114][T26280] ip_set_nfnl_get_byindex+0x63/0x230 [ 2162.332036][T26280] set_match_v1_checkentry+0x6d/0x220 [ 2162.337960][T26280] xt_check_match+0x4e6/0xc50 [ 2162.343181][T26280] __nft_match_init+0x663/0x890 [ 2162.348572][T26280] nf_tables_newrule+0x1731/0x2810 [ 2162.354226][T26280] nfnetlink_rcv+0x1124/0x2480 [ 2162.359535][T26280] netlink_unicast+0x74d/0x8d0 [ 2162.364843][T26280] netlink_sendmsg+0x8ad/0xbd0 [ 2162.369296][T26308] loop0: detected capacity change from 0 to 512 [ 2162.370131][T26280] ____sys_sendmsg+0x5be/0x970 [ 2162.381652][T26280] ___sys_sendmsg+0x2a2/0x360 [ 2162.386875][T26280] __se_sys_sendmsg+0x1bb/0x2a0 [ 2162.392276][T26280] do_syscall_64+0x4c/0xa0 [ 2162.397233][T26280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2162.403660][T26280] [ 2162.403660][T26280] other info that might help us debug this: [ 2162.403660][T26280] [ 2162.413875][T26280] Chain exists of: [ 2162.413875][T26280] nfnl_subsys_ipset --> nlk_cb_mutex-NETFILTER --> &nft_net->commit_mutex [ 2162.413875][T26280] [ 2162.428294][T26280] Possible unsafe locking scenario: [ 2162.428294][T26280] [ 2162.435733][T26280] CPU0 CPU1 [ 2162.441088][T26280] ---- ---- [ 2162.446443][T26280] lock(&nft_net->commit_mutex); [ 2162.451459][T26280] lock(nlk_cb_mutex-NETFILTER); [ 2162.458992][T26280] lock(&nft_net->commit_mutex); [ 2162.466531][T26280] lock(nfnl_subsys_ipset); [ 2162.471116][T26280] [ 2162.471116][T26280] *** DEADLOCK *** [ 2162.471116][T26280] [ 2162.479245][T26280] 1 lock held by syz.2.28467/26280: [ 2162.484430][T26280] #0: ffff8881457caab8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x37/0x100 [ 2162.495131][T26280] [ 2162.495131][T26280] stack backtrace: [ 2162.501005][T26280] CPU: 1 PID: 26280 Comm: syz.2.28467 Not tainted syzkaller #0 [ 2162.508536][T26280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2162.518583][T26280] Call Trace: [ 2162.521856][T26280] [ 2162.524779][T26280] dump_stack_lvl+0x188/0x24e [ 2162.529464][T26280] ? load_image+0x400/0x400 [ 2162.533961][T26280] ? show_regs_print_info+0x12/0x12 [ 2162.539162][T26280] ? print_circular_bug+0x12b/0x1a0 [ 2162.544369][T26280] check_noncircular+0x296/0x330 [ 2162.549307][T26280] ? add_chain_block+0x940/0x940 [ 2162.554245][T26280] ? lockdep_lock+0xf1/0x1f0 [ 2162.558835][T26280] ? _find_first_zero_bit+0xcf/0x100 [ 2162.564117][T26280] __lock_acquire+0x2d07/0x7d10 [ 2162.568973][T26280] ? mark_lock+0x94/0x320 [ 2162.573304][T26280] ? verify_lock_unused+0x140/0x140 [ 2162.578501][T26280] ? __lock_acquire+0x12f4/0x7d10 [ 2162.583530][T26280] lock_acquire+0x1bb/0x4a0 [ 2162.588031][T26280] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 2162.593580][T26280] ? __might_sleep+0xd0/0xd0 [ 2162.598163][T26280] ? read_lock_is_recursive+0x10/0x10 [ 2162.603536][T26280] __mutex_lock+0x12d/0xaf0 [ 2162.608039][T26280] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 2162.613584][T26280] ? ip_set_pernet+0x23/0x230 [ 2162.618257][T26280] ? ip_set_nfnl_get_byindex+0x63/0x230 [ 2162.623801][T26280] ? mutex_lock_nested+0x10/0x10 [ 2162.628738][T26280] ? __flush_work+0x10d/0xae0 [ 2162.633409][T26280] ? ip_set_pernet+0x23/0x230 [ 2162.638085][T26280] ? ip_set_pernet+0x23/0x230 [ 2162.642765][T26280] ip_set_nfnl_get_byindex+0x63/0x230 [ 2162.648141][T26280] set_match_v1_checkentry+0x6d/0x220 [ 2162.653512][T26280] xt_check_match+0x4e6/0xc50 [ 2162.658185][T26280] ? xt_check_proc_name+0x270/0x270 [ 2162.663380][T26280] ? __stack_depot_save+0x35/0x460 [ 2162.668497][T26280] __nft_match_init+0x663/0x890 [ 2162.673343][T26280] ? ___sys_sendmsg+0x2a2/0x360 [ 2162.678197][T26280] ? nft_match_large_dump+0x40/0x40 [ 2162.683396][T26280] ? __kmem_cache_alloc_node+0x140/0x260 [ 2162.689023][T26280] ? nf_tables_newrule+0x1503/0x2810 [ 2162.694306][T26280] ? rcu_is_watching+0x11/0xa0 [ 2162.699081][T26280] ? nf_tables_newrule+0x1503/0x2810 [ 2162.704361][T26280] ? __kmalloc+0xe1/0x240 [ 2162.708691][T26280] nf_tables_newrule+0x1731/0x2810 [ 2162.713805][T26280] ? nf_tables_delchain+0xf00/0xf00 [ 2162.719001][T26280] ? __lock_acquire+0x7d10/0x7d10 [ 2162.724027][T26280] ? mutex_unlock+0x10/0x10 [ 2162.728532][T26280] ? __nla_parse+0x3c/0x50 [ 2162.732940][T26280] nfnetlink_rcv+0x1124/0x2480 [ 2162.737709][T26280] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 2162.743257][T26280] ? ref_tracker_free+0x68c/0x840 [ 2162.748289][T26280] ? netlink_deliver_tap+0x2e/0x1b0 [ 2162.753499][T26280] ? netlink_deliver_tap+0x2e/0x1b0 [ 2162.758701][T26280] netlink_unicast+0x74d/0x8d0 [ 2162.763467][T26280] netlink_sendmsg+0x8ad/0xbd0 [ 2162.768235][T26280] ? netlink_getsockopt+0x550/0x550 [ 2162.773436][T26280] ? aa_sock_msg_perm+0x94/0x150 [ 2162.778366][T26280] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2162.783648][T26280] ? security_socket_sendmsg+0x7c/0xa0 [ 2162.789111][T26280] ? netlink_getsockopt+0x550/0x550 [ 2162.794308][T26280] ____sys_sendmsg+0x5be/0x970 [ 2162.799080][T26280] ? __sys_sendmsg_sock+0x30/0x30 [ 2162.804100][T26280] ? __import_iovec+0x315/0x500 [ 2162.808945][T26280] ? import_iovec+0x6f/0xa0 [ 2162.813442][T26280] ___sys_sendmsg+0x2a2/0x360 [ 2162.818124][T26280] ? try_to_wake_up+0x67c/0x1080 [ 2162.823057][T26280] ? __sys_sendmsg+0x290/0x290 [ 2162.827836][T26280] __se_sys_sendmsg+0x1bb/0x2a0 [ 2162.832685][T26280] ? __x64_sys_sendmsg+0x80/0x80 [ 2162.837628][T26280] ? lockdep_hardirqs_on+0x94/0x140 [ 2162.842825][T26280] do_syscall_64+0x4c/0xa0 [ 2162.847242][T26280] ? clear_bhb_loop+0x60/0xb0 [ 2162.851918][T26280] ? clear_bhb_loop+0x60/0xb0 [ 2162.856591][T26280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2162.862483][T26280] RIP: 0033:0x7f066499cdd9 [ 2162.866891][T26280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2162.886489][T26280] RSP: 002b:00007f0665934028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2162.894900][T26280] RAX: ffffffffffffffda RBX: 00007f0664c15fa0 RCX: 00007f066499cdd9 [ 2162.902863][T26280] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 2162.910827][T26280] RBP: 00007f0664a32d69 R08: 0000000000000000 R09: 0000000000000000 [ 2162.918790][T26280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2162.926758][T26280] R13: 00007f0664c16038 R14: 00007f0664c15fa0 R15: 00007ffde1a06928 [ 2162.934729][T26280] [ 2162.938463][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 2162.966376][T26308] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2163.065036][T26308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 2163.111648][T26308] EXT4-fs: failed to create workqueue [ 2163.117065][T26308] EXT4-fs (loop0): mount failed [ 2163.607621][ C0] vkms_vblank_simulate: vblank timer overrun [ 2163.866248][ T56] IPVS: stopping backup sync thread 32509 ... [ 2164.699345][ T56] device hsr_slave_0 left promiscuous mode [ 2164.706862][ T56] device hsr_slave_1 left promiscuous mode [ 2164.732599][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2164.749427][ C0] vkms_vblank_simulate: vblank timer overrun [ 2164.757234][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2164.780498][ T56] batman_adv: batadv0: Removing interface: vlan1 [ 2164.802595][ T56] bond6 (unregistering): Released all slaves [ 2164.896196][ T56] bond5 (unregistering): Released all slaves [ 2164.917918][ T56] bond4 (unregistering): Released all slaves [ 2164.990896][ T56] bond3 (unregistering): Released all slaves [ 2165.025267][ T56] bond2 (unregistering): Released all slaves [ 2165.340332][ T56] bond1 (unregistering): Released all slaves [ 2165.447726][ T56] team0 (unregistering): Port device macvlan0 removed [ 2165.853882][ T56] team0 (unregistering): Port device team_slave_1 removed [ 2165.973791][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2166.039495][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2166.471187][ T56] bond0 (unregistering): Released all slaves [ 2166.521133][T13832] smc: removing ib device syz2 [ 2167.197226][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.207708][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40803 - 0 [ 2167.218509][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 44444 - 0 [ 2167.260720][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.273305][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40803 - 0 [ 2167.284880][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 44444 - 0 [ 2167.325838][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.337251][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40803 - 0 [ 2167.349167][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 44444 - 0 [ 2167.458056][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.468407][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40803 - 0 [ 2167.480299][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 44444 - 0 [ 2167.592575][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.638116][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.732732][ C0] vkms_vblank_simulate: vblank timer overrun [ 2167.743042][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.811007][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2167.913912][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.002937][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.066853][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.141531][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.535201][ T56] device .d left promiscuous mode [ 2168.590527][ T56] device .*! left promiscuous mode [ 2168.656233][ T56] device  left promiscuous mode [ 2168.761135][ T56] tipc: Left network mode [ 2168.987507][ C0] vkms_vblank_simulate: vblank timer overrun