last executing test programs: 39.596074844s ago: executing program 0 (id=1142): unshare(0x6a040000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002000010027bd700000000040020000000000000d00000000080018004e224e23"], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x40084) 38.710536234s ago: executing program 0 (id=1167): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 38.228757412s ago: executing program 0 (id=1158): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x11, 0x72, 0x80000}, 0x20) 37.768012876s ago: executing program 0 (id=1166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 36.759735806s ago: executing program 0 (id=1178): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2], [0x80000001, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x7, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 17.122245681s ago: executing program 0 (id=1178): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1, 0x2], [0x80000001, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x7, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) 4.281757279s ago: executing program 1 (id=1403): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) 3.681333808s ago: executing program 5 (id=1405): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x17}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040001}, 0x0) 3.635831861s ago: executing program 1 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x17a) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/kmsg\x00', 0x0, 0x24) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000300)=""/118, 0x76}], 0x1) 3.61258361s ago: executing program 3 (id=1407): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x47d, 0xdf1c, 0x800009, 0xfffffffffffff7f7}) 3.001276871s ago: executing program 1 (id=1408): openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x2982, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000140), &(0x7f00000001c0)=0x40) 2.969872342s ago: executing program 5 (id=1409): setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x70}}], 0x1, 0x40) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000140)=0x1) 2.968112195s ago: executing program 4 (id=1410): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000080)=0x3) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000580)={r1}) 2.80790824s ago: executing program 2 (id=1411): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x8008b, 0xffffffff, 0x2}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) 2.699695839s ago: executing program 3 (id=1412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 2.51695705s ago: executing program 4 (id=1413): r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup=r1, r2, 0x11, 0x0, r1}, 0x11) 2.456584212s ago: executing program 5 (id=1414): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000004c0), 0xd0, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000280)=""/201}, 0x20) 2.359268462s ago: executing program 1 (id=1415): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, r4, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000002, 0x0, 0x0, 0x16}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r0, r6, &(0x7f0000000540)={0x0, 0xb685, 0x100, 0x2, 0x80a3, 0x0, r0}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd131, 0x2000, 0x3, 0x3b4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d2c, 0x8000, 0x1, 0x3bc, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf91b, 0x400, 0x2, 0x28b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4cdf, 0x40000, 0x0, 0x1f3}}], 0x4, &(0x7f00000025c0)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, r5, '\x00', {0x1, 0xe53, 0x0, 0x0}}, &(0x7f0000002640)) 2.341821752s ago: executing program 2 (id=1416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 2.193371361s ago: executing program 3 (id=1417): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 2.176950056s ago: executing program 4 (id=1418): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c000180", @ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x440c0}, 0x40040) 2.079497061s ago: executing program 5 (id=1419): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) 1.951300539s ago: executing program 2 (id=1420): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r1, &(0x7f0000005280), 0x4000000000001cd, 0x1008c811) 1.836569059s ago: executing program 4 (id=1421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x58, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x39, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0x4803, @void, @val, @val={0x3, 0x1, 0xe}, @void, @val={0x6, 0x2, 0x4}, @val={0x5, 0x3, {0x0, 0xca, 0x10}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @void, @void}}]}, 0x58}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.602901927s ago: executing program 3 (id=1422): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @private=0xa010101, {[@cipso={0x86, 0x78, 0xffffffffffffffff, [{0x0, 0x12, "4e6cd874a90c12a03fd9893856e6382e"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0xe, "0134ac43735601e584b703c8"}, {0x5, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0xa, "ed66554900000000"}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0xd, "c8f46976e79ea788f03d9d"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 1.508513626s ago: executing program 1 (id=1423): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 1.44168085s ago: executing program 5 (id=1424): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x6, {0x0, 0x0, 0x0, 0x0, {0xf, 0x3}, {0xa, 0xc}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0xc0956febbce12c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1.358368349s ago: executing program 2 (id=1425): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="6461783d6e657665722c63616368655f73747261746567793d64697361626c65642c63616368655f73747261746567793d7265616461686561642c6461782c757365725f78617474722c61636c2c0037ab5561a2b119f1c4cb2edfc57c7995dfc791fc094cc4cfd7411cd65d7bc50a4f64c8ab92f52470d4"], 0x3, 0x1cc, &(0x7f0000001f80)="$eJzsmL9r20AUx793suW6U7uWQgs11B0qS3JbCqVQTx66FPqLUig1tWrcynWxNMSGgDNmyt+QPyFkDxmyZgtkTQKBLBkzX7jTObr4R+KADYa8z/D8fXfPT++drCcwCIK4tRwdnh0srx7f50A/jwJyev3ESmO4Ed/ZeF98uFv1tn7svNnfrO4N53sMQIjpry9zb1csxFl810vq2xntFPTnJ3AUkFf6Mzie6fWvYHC0/gmOL1qzPsM3rf8g1W0Z7zi/m2Hg/GqHdSlcaTxpfGnKZn2yjtMVhvqgOCEEM/ajbu9vLQyDzqiwJ2/dTJi1DKPqq3C8BYS+ZULdr2ziDM7GVeeX4IHD07oMho9av0ZOnw0f6f9BJu3fGtO/FXV79ky6HStkN5Ni5I8iWpvDRbXIYH59kZhWoJ+IHNItftXjZ4o7WJAuLgn5/CxAGXMS6fwQ6wxPjflpzrFS3Pr/Lur2njdbtUbQCP75fvmV+8J1X/olNZsTO2byDfLn1Xy6a+TPToi1mY2lWhx3vMRe+H5iRycuYKv5x1F8kvhMr5mo98E9Jl99KFraJwiCIAiCIAiCIAiCIAiCmDmPwNS/oNfgf1DR5wEAAP//WYhnbQ==") r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) getdents64(r0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 1.263082356s ago: executing program 3 (id=1426): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0)={[0x8000000008]}, 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 816.138482ms ago: executing program 2 (id=1427): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = eventfd2(0x0, 0x1) writev(r0, 0x0, 0x0) 433.27054ms ago: executing program 4 (id=1428): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xa, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 356.451374ms ago: executing program 1 (id=1429): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x143403, 0x147) fcntl$setlease(r0, 0x400, 0x1) 355.907304ms ago: executing program 2 (id=1430): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) alarm(0x8) 47.464431ms ago: executing program 5 (id=1431): syz_mount_image$vfat(&(0x7f0000001040), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001240)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_winnt}, {@utf8}, {@shortname_mixed}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@rodir}, {@shortname_mixed}, {@rodir}, {@fat=@debug}, {@shortname_mixed}, {@shortname_winnt}, {@numtail}, {@utf8no}, {@utf8no}, {@uni_xlateno}]}, 0x1, 0x28e, &(0x7f0000001500)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 47.279685ms ago: executing program 3 (id=1432): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1433): openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2008800, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): ff939a7948 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 185.318780][ T5619] RAX: 0000000000000000 RBX: 00007fddd80344bb RCX: 00007fddd7f9f397 [ 185.318803][ T5619] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff939a7a00 [ 185.318825][ T5619] RBP: 00007fff939a7a00 R08: 00007fff939a8a00 R09: 00000000ffffffff [ 185.318854][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff939a8a90 [ 185.318876][ T5619] R13: 00007fddd80344bb R14: 000000000002d321 R15: 00007fff939a8ad0 [ 185.318925][ T5619] [ 185.355952][ T5619] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 186.720532][ T5746] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 186.870358][ T5746] usb 6-1: Using ep0 maxpacket: 16 [ 186.872836][ T5746] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 186.875550][ T5746] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.875602][ T5746] usb 6-1: config 0 interface 0 has no altsetting 0 [ 186.875650][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.951233][ T5746] usb 6-1: config 0 descriptor?? [ 186.969076][ T7216] loop0: detected capacity change from 0 to 256 [ 186.978947][ T7216] exfat: Deprecated parameter 'utf8' [ 186.978977][ T7216] exfat: Deprecated parameter 'utf8' [ 186.979074][ T7216] exfat: Deprecated parameter 'utf8' [ 187.008342][ T7216] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 187.069856][ T7222] loop2: detected capacity change from 0 to 512 [ 187.124495][ T7222] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.547: inode has both inline data and extents flags [ 187.124553][ T7222] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 187.125887][ T7222] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.547: couldn't read orphan inode 15 (err -117) [ 187.125968][ T7222] loop2: lost filesystem error report for type 5 error -117 [ 187.142133][ T7222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.485890][ T7226] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 2. Delete some EAs or run e2fsck. [ 187.529036][ T5746] input: HID 05ac:0269 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:05AC:0269.000A/input/input17 [ 187.652930][ T5746] magicmouse 0003:05AC:0269.000A: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.5-1/input0 [ 187.683980][ T7233] loop4: detected capacity change from 0 to 128 [ 187.795662][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.709385][ T10] usb 6-1: USB disconnect, device number 11 [ 189.289283][ T7252] loop0: detected capacity change from 0 to 40427 [ 189.294774][ T7252] F2FS-fs (loop0): invalid crc value [ 189.392332][ T7257] netlink: 32 bytes leftover after parsing attributes in process `syz.2.559'. [ 189.397422][ T7252] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 189.434591][ T7252] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0 [ 189.434635][ T7252] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 189.434679][ T7252] F2FS-fs (loop0): Start checkpoint disabled! [ 189.441121][ T7252] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0 [ 189.441515][ T7252] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 189.515852][ T7261] ieee802154 phy0 wpan0: encryption failed: -22 [ 189.951763][ T7275] loop4: detected capacity change from 0 to 128 [ 191.217710][ T7276] loop5: detected capacity change from 0 to 32768 [ 191.235361][ T7276] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.568 (7276) [ 191.534149][ T7276] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.534202][ T7276] BTRFS info (device loop5): using sha256 checksum algorithm [ 191.675236][ T7282] loop1: detected capacity change from 0 to 32768 [ 191.739951][ T7287] loop0: detected capacity change from 0 to 131072 [ 191.866597][ T7287] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 191.972207][ T7282] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 191.989725][ T7287] XFS (loop0): Starting recovery (logdev: internal) [ 192.064883][ T7287] XFS (loop0): Ending recovery (logdev: internal) [ 192.108173][ T7276] BTRFS info (device loop5): enabling ssd optimizations [ 192.108211][ T7276] BTRFS info (device loop5): turning on async discard [ 192.108238][ T7276] BTRFS info (device loop5): enabling free space tree [ 192.302032][ T7282] XFS (loop1): Ending clean mount [ 192.317297][ T31] audit: type=1800 audit(1789778508.032:28): pid=7287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.567" name="file1" dev="loop0" ino=38 res=0 errno=0 [ 192.403649][ T5622] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.462577][ T5619] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 192.907086][ T7338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.578'. [ 192.926933][ T5620] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 193.268425][ T5893] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 193.441214][ T5893] usb 1-1: Using ep0 maxpacket: 16 [ 193.441975][ T5893] usb 1-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 193.443348][ T5893] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.443401][ T5893] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.443450][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.521936][ T5893] usb 1-1: config 0 descriptor?? [ 193.713835][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.713942][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.019490][ T5893] input: HID 05ac:0269 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:0269.000B/input/input18 [ 194.144893][ T5893] magicmouse 0003:05AC:0269.000B: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.0-1/input0 [ 194.444935][ T7361] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 194.496912][ T7359] loop4: detected capacity change from 0 to 1024 [ 195.375222][ T5768] usb 1-1: USB disconnect, device number 6 [ 195.419506][ T7376] loop3: detected capacity change from 0 to 256 [ 195.484044][ T7375] loop1: detected capacity change from 0 to 4096 [ 195.500395][ T7375] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 195.607920][ T7375] ntfs3(loop1): ino=19, mi_enum_attr [ 195.607971][ T7375] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 195.690950][ T7379] loop5: detected capacity change from 0 to 2048 [ 195.705996][ T7379] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 195.786038][ T7381] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 196.037965][ T7386] loop3: detected capacity change from 0 to 512 [ 196.052319][ T7386] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 196.052354][ T7386] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.060631][ T7385] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 3044605952 [ 196.060668][ T7385] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15) [ 196.076556][ T7386] EXT4-fs (loop3): 1 truncate cleaned up [ 196.086862][ T7386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.163011][ T7385] Remounting filesystem read-only [ 196.163034][ T7385] NILFS (loop5): error -5 truncating bmap (ino=15) [ 196.213092][ T7392] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd12 [ 196.216980][ T7386] EXT4-fs error (device loop3): ext4_generic_delete_entry:2674: inode #2: block 13: comm syz.3.590: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 196.232367][ T7386] EXT4-fs (loop3): Remounting filesystem read-only [ 196.232403][ T7386] EXT4-fs warning (device loop3): ext4_rename_delete:3739: inode #2: comm syz.3.590: Deleting old file: nlink 5, error=-117 [ 196.335543][ T5622] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer [ 196.450610][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.568429][ T7401] loop2: detected capacity change from 0 to 4096 [ 197.101375][ T7413] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 197.469440][ T59] IPVS: starting estimator thread 0... [ 197.562310][ T7429] IPVS: using max 22 ests per chain, 52800 per kthread [ 198.070464][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.143491][ T7449] loop3: detected capacity change from 0 to 256 [ 198.426752][ T7454] loop4: detected capacity change from 0 to 512 [ 198.632548][ T7454] EXT4-fs warning (device loop4): dx_probe:800: inode #2: comm syz.4.622: Unrecognised inode hash code 255 [ 198.632600][ T7454] EXT4-fs warning (device loop4): dx_probe:933: inode #2: comm syz.4.622: Corrupt directory, running e2fsck is recommended [ 198.941836][ T7454] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 198.959280][ T7454] EXT4-fs error (device loop4): ext4_iget_extra_inode:5209: inode #15: comm syz.4.622: corrupted in-inode xattr: invalid ea_ino [ 198.959343][ T7454] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 198.973520][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 198.973557][ C0] EXT4-fs (loop4): initial error at time 1789778514: ext4_iget_extra_inode:5209: inode 15 [ 198.973609][ C0] EXT4-fs (loop4): last error at time 1789778514: ext4_iget_extra_inode:5209: inode 15 [ 199.022272][ T7454] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.622: couldn't read orphan inode 15 (err -117) [ 199.022326][ T7454] loop4: lost filesystem error report for type 5 error -117 [ 199.075497][ T7454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.183089][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 199.183806][ T30] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 199.185578][ T30] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 199.185625][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 199.185674][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.229599][ T7454] EXT4-fs (loop4): shut down requested (2) [ 199.245982][ T30] usb 2-1: config 0 descriptor?? [ 199.296475][ T7454] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 199.367635][ T7448] loop2: detected capacity change from 0 to 131072 [ 199.371157][ T7448] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name [ 199.371205][ T7448] F2FS-fs (loop2): Test dummy encryption mode enabled [ 199.372530][ T7448] F2FS-fs (loop2): invalid crc value [ 199.487924][ T7448] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 199.488992][ T7448] loop2: lost filesystem error report for type 5 error -117 [ 199.500077][ T7448] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 199.506111][ T7448] F2FS-fs (loop2): f2fs_disable_checkpoint starts, unusable: 0 [ 199.506149][ T7448] F2FS-fs (loop2): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 199.506192][ T7448] F2FS-fs (loop2): Start checkpoint disabled! [ 199.538517][ T7448] F2FS-fs (loop2): f2fs_disable_checkpoint finishes, err:0 [ 199.559463][ T7448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 199.578733][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.639137][ T7448] fscrypt: AES-256-XTS using blk-crypto-fallback [ 199.781161][ T30] input: HID 05ac:0269 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:0269.000C/input/input19 [ 199.911564][ T7468] process 'syz.4.627' launched '/dev/fd/3' with NULL argv: empty string added [ 200.050811][ T30] magicmouse 0003:05AC:0269.000C: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.1-1/input0 [ 200.725890][ T7466] loop3: detected capacity change from 0 to 32768 [ 200.778932][ T7466] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 200.869239][ T7466] XFS (loop3): Ending clean mount [ 201.038354][ T9] usb 2-1: USB disconnect, device number 7 [ 201.183841][ T5617] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 201.260850][ T5617] XFS (loop3): xfs_log_unmount_write: will fix summary counters at next mount [ 201.438618][ T7482] loop0: detected capacity change from 0 to 512 [ 201.495377][ T7486] loop5: detected capacity change from 0 to 1024 [ 201.534916][ T7482] EXT4-fs error (device loop0): ext4_xattr_inode_iget:470: comm syz.0.642: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 201.534962][ T7482] loop0: lost filesystem error report for type 5 error -117 [ 201.540316][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 201.540349][ C0] EXT4-fs (loop0): initial error at time 1789778517: ext4_xattr_inode_iget:470 [ 201.540388][ C0] EXT4-fs (loop0): last error at time 1789778517: ext4_xattr_inode_iget:470 [ 201.582336][ T7482] EXT4-fs (loop0): 1 orphan inode deleted [ 201.598856][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.983089][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.138015][ T7500] netlink: 88 bytes leftover after parsing attributes in process `syz.4.634'. [ 202.388662][ T7507] loop2: detected capacity change from 0 to 128 [ 202.500835][ T7509] loop5: detected capacity change from 0 to 128 [ 202.534601][ T7509] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 202.665378][ T7516] loop0: detected capacity change from 0 to 1024 [ 202.666698][ T7516] EXT4-fs: Ignoring removed oldalloc option [ 202.666765][ T7516] EXT4-fs: Ignoring removed bh option [ 202.746800][ T7521] loop2: detected capacity change from 0 to 64 [ 202.747609][ T7516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.747736][ T7516] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.857241][ T7516] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.644: lblock 0 mapped to illegal pblock 0 (length 1) [ 202.901166][ T7516] EXT4-fs (loop0): Remounting filesystem read-only [ 203.203262][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 203.318941][ T9] hid_parser_main: 11 callbacks suppressed [ 203.318975][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 203.319013][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 203.419317][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 203.570396][ T5745] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 203.721280][ T5745] usb 6-1: Using ep0 maxpacket: 8 [ 203.723828][ T5745] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 203.727252][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.849081][ T7536] fido_id[7536]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.879280][ T5745] pvrusb2: Hardware description: Terratec Grabster AV400 [ 203.879308][ T5745] pvrusb2: ********** [ 203.879320][ T5745] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 203.879342][ T5745] pvrusb2: Important functionality might not be entirely working. [ 203.879358][ T5745] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 203.879378][ T5745] pvrusb2: ********** [ 204.067933][ T2350] pvrusb2: Invalid write control endpoint [ 204.266951][ T7530] pvrusb2: Invalid write control endpoint [ 204.268388][ T5893] usb 6-1: USB disconnect, device number 12 [ 204.353084][ T7548] block nbd1: server does not support multiple connections per device. [ 204.358807][ T7548] block nbd1: shutting down sockets [ 204.459698][ T2350] pvrusb2: Invalid write control endpoint [ 204.459719][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 204.459735][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 204.459749][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 204.459767][ T2350] pvrusb2: Device being rendered inoperable [ 204.459802][ T2350] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 204.459863][ T2350] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 204.483611][ T2350] pvrusb2: Attached sub-driver cx25840 [ 204.483633][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 204.483650][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 205.130945][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 205.291015][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 205.294083][ T30] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 205.312374][ T30] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 205.312419][ T30] usb 4-1: Product: syz [ 205.312445][ T30] usb 4-1: Manufacturer: syz [ 205.312471][ T30] usb 4-1: SerialNumber: syz [ 205.373924][ T30] usb 4-1: config 0 descriptor?? [ 205.488539][ T30] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 206.089189][ T30] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 206.319719][ T30] usb 4-1: USB disconnect, device number 3 [ 207.027063][ T31] audit: type=1807 audit(1789778522.752:29): action=measure uid>1 res=1 [ 207.027472][ T7600] ima: policy update completed [ 207.027646][ T31] audit: type=1802 audit(1789778522.752:30): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.3.678" res=1 errno=0 [ 207.250438][ T2097] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.358759][ T7606] loop5: detected capacity change from 0 to 4096 [ 207.369589][ T7606] EXT4-fs (loop5): Test dummy encryption mode enabled [ 207.400363][ T7606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.420405][ T2097] usb 3-1: Using ep0 maxpacket: 8 [ 207.421414][ T2097] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 207.425123][ T2097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.435520][ T2097] pvrusb2: Hardware description: Terratec Grabster AV400 [ 207.435544][ T2097] pvrusb2: ********** [ 207.435556][ T2097] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 207.435576][ T2097] pvrusb2: Important functionality might not be entirely working. [ 207.435591][ T2097] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 207.435609][ T2097] pvrusb2: ********** [ 207.492402][ T7612] loop4: detected capacity change from 0 to 512 [ 207.521325][ T7612] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 207.546277][ T7612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 207.546452][ T7612] System zones: 1-12 [ 207.546848][ T7612] EXT4-fs (loop4): orphan cleanup on readonly fs [ 207.589390][ T7612] EXT4-fs error (device loop4): ext4_validate_block_bitmap:444: comm syz.4.682: bg 0: block 361: padding at end of block bitmap is not set [ 207.589480][ T7612] loop4: lost filesystem error report for type 5 error -117 [ 207.590687][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 207.590718][ C1] EXT4-fs (loop4): initial error at time 1789778523: ext4_validate_block_bitmap:444 [ 207.590763][ C1] EXT4-fs (loop4): last error at time 1789778523: ext4_validate_block_bitmap:444 [ 207.612153][ T7612] EXT4-fs (loop4): Remounting filesystem read-only [ 207.612818][ T7612] EXT4-fs (loop4): 1 truncate cleaned up [ 207.664943][ T7606] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 207.677175][ T7612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 207.719439][ T2350] pvrusb2: Invalid write control endpoint [ 207.768853][ T7606] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 207.950086][ T7612] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.682: error -EUCLEAN reading directory block [ 207.997292][ T7598] pvrusb2: Invalid write control endpoint [ 208.002148][ T2097] usb 3-1: USB disconnect, device number 6 [ 208.033681][ T2350] pvrusb2: Invalid write control endpoint [ 208.033703][ T2350] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 208.033719][ T2350] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 208.033732][ T2350] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 208.033750][ T2350] pvrusb2: Device being rendered inoperable [ 208.047806][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.079822][ T2350] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 208.079889][ T2350] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 208.099470][ T2350] pvrusb2: Attached sub-driver cx25840 [ 208.099493][ T2350] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 208.099511][ T2350] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 208.317616][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 209.240484][ T30] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 209.393511][ T7644] loop2: detected capacity change from 0 to 512 [ 209.411502][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 209.421096][ T30] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 209.423023][ T30] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 209.423075][ T30] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.423123][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 209.423171][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.427095][ T30] usb 1-1: config 0 descriptor?? [ 209.525804][ T7644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.861632][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.262574][ T7658] loop5: detected capacity change from 0 to 1024 [ 210.306492][ T7658] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.325622][ T30] hid-alps 0003:044E:120B.000E: failed read register (-71) [ 210.325734][ T30] hid-alps 0003:044E:120B.000E: failed U1_DEV_CTRL_1 (-71) [ 210.351919][ T30] hid-alps 0003:044E:120B.000E: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 210.404050][ T30] usb 1-1: USB disconnect, device number 7 [ 210.804325][ T7661] fido_id[7661]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 210.879079][ T7652] loop3: detected capacity change from 0 to 131072 [ 210.887593][ T7652] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 210.887628][ T7652] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 210.898636][ T7652] F2FS-fs (loop3): invalid crc value [ 211.013824][ T7652] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 211.052479][ T7652] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 211.052523][ T7652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 211.257177][ T7671] loop0: detected capacity change from 0 to 256 [ 211.271324][ T7671] FAT-fs (loop0): invalid media value (0x29) [ 211.271359][ T7671] FAT-fs (loop0): Can't find a valid FAT filesystem [ 211.277162][ C1] F2FS-fs (loop3): inconsistent node block, node_type:0, nid:8, node_footer[nid:5,ino:5,ofs:0,cpver:1219692001,blkaddr:15361] [ 211.628753][ T7676] netlink: 88 bytes leftover after parsing attributes in process `syz.5.706'. [ 211.679540][ T7642] loop4: detected capacity change from 0 to 32768 [ 211.701843][ T7678] Bluetooth: MGMT ver 1.23 [ 211.769941][ T7642] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.797449][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 211.797485][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 211.797525][ T7688] netlink: 'syz.2.708': attribute type 14 has an invalid length. [ 212.056876][ T7642] XFS (loop4): Ending clean mount [ 212.260223][ T5621] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 212.321821][ T5621] XFS (loop4): xfs_log_unmount_write: will fix summary counters at next mount [ 212.692814][ T7700] C: renamed from veth1_to_team (while UP) [ 212.729358][ T7700] netlink: 'syz.1.714': attribute type 3 has an invalid length. [ 212.729390][ T7700] netlink: 116 bytes leftover after parsing attributes in process `syz.1.714'. [ 212.729983][ T7700] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 213.088121][ T7706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'. [ 213.189342][ T7706] ipvlan2: entered allmulticast mode [ 213.189376][ T7706] syz_tun: entered allmulticast mode [ 213.530776][ T30] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.568714][ T7723] netlink: 88 bytes leftover after parsing attributes in process `syz.2.725'. [ 213.684441][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 213.685445][ T30] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 213.686957][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.687007][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.687047][ T30] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 213.687110][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.763310][ T30] usb 5-1: config 0 descriptor?? [ 214.225226][ T30] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 214.225275][ T30] lua 0003:1E7D:2C2E.000F: unknown main item tag 0x0 [ 214.225310][ T30] lua 0003:1E7D:2C2E.000F: item fetching failed at offset 2/38 [ 214.228838][ T30] lua 0003:1E7D:2C2E.000F: parse failed [ 214.228963][ T30] lua 0003:1E7D:2C2E.000F: probe with driver lua failed with error -22 [ 214.424208][ T30] usb 5-1: USB disconnect, device number 9 [ 214.536278][ T7727] loop5: detected capacity change from 0 to 32768 [ 214.579796][ T7727] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 214.835030][ T7727] XFS (loop5): Ending clean mount [ 215.214680][ T7765] loop3: detected capacity change from 0 to 512 [ 215.228189][ T5622] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.288160][ T7765] EXT4-fs error (device loop3): ext4_xattr_inode_iget:470: comm syz.3.738: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 215.288228][ T7765] loop3: lost filesystem error report for type 5 error -117 [ 215.290371][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 215.290404][ C1] EXT4-fs (loop3): initial error at time 1789778531: ext4_xattr_inode_iget:470 [ 215.290443][ C1] EXT4-fs (loop3): last error at time 1789778531: ext4_xattr_inode_iget:470 [ 215.308404][ T5622] XFS (loop5): xfs_log_unmount_write: will fix summary counters at next mount [ 215.368050][ T7765] EXT4-fs (loop3): 1 orphan inode deleted [ 215.410092][ T7765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.777535][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.834884][ T7774] loop5: detected capacity change from 0 to 512 [ 215.859242][ T7774] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.958213][ T7774] EXT4-fs (loop5): 1 truncate cleaned up [ 215.983244][ T7774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.017002][ T7783] loop0: detected capacity change from 0 to 512 [ 216.058636][ T7774] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.742: corrupted xattr entries [ 216.061651][ T7783] EXT4-fs warning (device loop0): dx_probe:800: inode #2: comm syz.0.743: Unrecognised inode hash code 255 [ 216.061696][ T7783] EXT4-fs warning (device loop0): dx_probe:933: inode #2: comm syz.0.743: Corrupt directory, running e2fsck is recommended [ 216.126579][ T7774] EXT4-fs error (device loop5): get_max_inline_xattr_value_size:72: inode #15: comm syz.5.742: corrupt xattr in inline inode [ 216.148042][ T7774] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.742: corrupted xattr entries [ 216.187155][ T7790] EXT4-fs error (device loop5): xattr_find_entry:333: inode #15: comm syz.5.742: corrupted xattr entries [ 216.312521][ T7783] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 216.312667][ T7783] EXT4-fs error (device loop0): ext4_iget_extra_inode:5209: inode #15: comm syz.0.743: corrupted in-inode xattr: invalid ea_ino [ 216.312714][ T7783] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 216.318809][ T7783] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.743: couldn't read orphan inode 15 (err -117) [ 216.318865][ T7783] loop0: lost filesystem error report for type 5 error -117 [ 216.320319][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 216.320350][ C0] EXT4-fs (loop0): initial error at time 1789778532: ext4_iget_extra_inode:5209: inode 15 [ 216.320398][ C0] EXT4-fs (loop0): last error at time 1789778532: ext4_orphan_get:1406 [ 216.358122][ T7783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.438003][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.453538][ T7789] nvme nvme0: rdma_resolve_addr failed (-19). [ 216.532054][ T7783] EXT4-fs (loop0): shut down requested (2) [ 216.589308][ T7783] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 217.040565][ T7808] loop1: detected capacity change from 0 to 64 [ 217.186587][ T7808] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 217.227524][ T7808] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 217.477624][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.990635][ T2097] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 218.152589][ T2097] usb 5-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 218.163651][ T2097] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.163706][ T2097] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.193232][ T2097] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 218.193371][ T2097] usb 5-1: Product: syz [ 218.193399][ T2097] usb 5-1: Manufacturer: syz [ 218.324342][ T7842] netlink: 88 bytes leftover after parsing attributes in process `syz.0.766'. [ 218.718856][ T7849] loop3: detected capacity change from 0 to 1024 [ 218.729536][ T2097] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:046D:C299.0010/input/input22 [ 218.730076][ T7849] EXT4-fs: Ignoring removed oldalloc option [ 218.730144][ T7849] EXT4-fs: Ignoring removed bh option [ 218.805156][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 218.805293][ T7849] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.813131][ T7853] loop5: detected capacity change from 0 to 128 [ 218.818570][ T2097] logitech 0003:046D:C299.0010: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.4-1/input0 [ 218.838796][ T2097] logitech 0003:046D:C299.0010: Force feedback support for Logitech Gaming Wheels [ 218.888530][ T7849] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm syz.3.772: lblock 0 mapped to illegal pblock 0 (length 1) [ 218.928124][ T7849] EXT4-fs (loop3): Remounting filesystem read-only [ 219.186485][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 219.254486][ T30] usb 5-1: USB disconnect, device number 10 [ 219.408509][ T7862] fido_id[7862]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 219.935028][ T7870] loop0: detected capacity change from 0 to 256 [ 220.006584][ T7876] netlink: 'syz.5.777': attribute type 16 has an invalid length. [ 220.006619][ T7876] netlink: 'syz.5.777': attribute type 17 has an invalid length. [ 220.111435][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.117168][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.497468][ T7876] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.497613][ T7876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.505949][ T7876] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.506088][ T7876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.585888][ T7891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'. [ 220.642332][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.0.785'. [ 221.370758][ T4927] Bluetooth: hci3: command 0x0406 tx timeout [ 221.381858][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 221.381906][ T5635] Bluetooth: hci1: command 0x0406 tx timeout [ 221.381981][ T4927] Bluetooth: hci0: command 0x0406 tx timeout [ 221.588628][ T7914] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 221.642901][ T7918] loop2: detected capacity change from 0 to 512 [ 221.679382][ T7918] EXT4-fs warning (device loop2): dx_probe:800: inode #2: comm syz.2.794: Unrecognised inode hash code 255 [ 221.679432][ T7918] EXT4-fs warning (device loop2): dx_probe:933: inode #2: comm syz.2.794: Corrupt directory, running e2fsck is recommended [ 221.791598][ T7882] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.791634][ T7882] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 221.819527][ T7918] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 221.819648][ T7918] EXT4-fs error (device loop2): ext4_iget_extra_inode:5209: inode #15: comm syz.2.794: corrupted in-inode xattr: invalid ea_ino [ 221.819702][ T7918] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.828580][ T7918] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.794: couldn't read orphan inode 15 (err -117) [ 221.828630][ T7918] loop2: lost filesystem error report for type 5 error -117 [ 221.830606][ C1] EXT4-fs (loop2): error count since last fsck: 2 [ 221.830638][ C1] EXT4-fs (loop2): initial error at time 1789778537: ext4_iget_extra_inode:5209: inode 15 [ 221.830695][ C1] EXT4-fs (loop2): last error at time 1789778537: ext4_orphan_get:1406 [ 221.904582][ T7918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.958319][ T7918] EXT4-fs (loop2): shut down requested (2) [ 221.998036][ T7918] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 222.032613][ T7882] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 222.032647][ T7882] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 222.108309][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.285030][ T7882] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.285068][ T7882] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 222.374139][ T7923] loop1: detected capacity change from 0 to 32768 [ 222.389769][ T7882] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 222.389802][ T7882] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 222.406565][ T7923] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.796 (7923) [ 222.436999][ T7882] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 222.437033][ T7882] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 222.466232][ T7923] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 222.466288][ T7923] BTRFS info (device loop1): using sha256 checksum algorithm [ 222.724222][ T7923] BTRFS info (device loop1): enabling ssd optimizations [ 222.724266][ T7923] BTRFS info (device loop1): turning on async discard [ 222.724295][ T7923] BTRFS info (device loop1): enabling free space tree [ 222.938968][ T5620] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 223.076198][ T7950] loop2: detected capacity change from 0 to 512 [ 223.146442][ T7950] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 223.206946][ T7950] EXT4-fs (loop2): 1 truncate cleaned up [ 223.226203][ T7950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.661958][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.073654][ T7976] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 224.136673][ T7980] loop1: detected capacity change from 0 to 64 [ 225.655736][ T7978] loop2: detected capacity change from 0 to 32768 [ 225.709298][ T7978] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 225.914801][ T8032] loop1: detected capacity change from 0 to 256 [ 225.957884][ T7978] XFS (loop2): Ending clean mount [ 225.999524][ T8019] loop3: detected capacity change from 0 to 4096 [ 226.088688][ T8035] loop5: detected capacity change from 0 to 1024 [ 226.118294][ T8035] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 226.118342][ T8035] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 226.148618][ T8035] jbd2_journal_init_inode: Cannot locate journal superblock [ 226.148645][ T8035] EXT4-fs (loop5): Could not load journal inode [ 226.237798][ T8019] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 226.492612][ T8019] ntfs3(loop3): Failed to load $Extend (-22). [ 226.492650][ T8019] ntfs3(loop3): Failed to initialize $Extend. [ 226.579548][ T5618] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 226.660159][ T7999] loop4: detected capacity change from 0 to 32768 [ 226.708207][ T7999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.813 (7999) [ 226.737639][ T7999] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 226.737690][ T7999] BTRFS info (device loop4): using sha256 checksum algorithm [ 226.968991][ T7999] BTRFS info (device loop4): enabling ssd optimizations [ 226.969032][ T7999] BTRFS info (device loop4): turning on async discard [ 226.969061][ T7999] BTRFS info (device loop4): enabling free space tree [ 227.016253][ T8070] netlink: 88 bytes leftover after parsing attributes in process `syz.1.830'. [ 227.105337][ T8072] tap0: tun_chr_ioctl cmd 1074025677 [ 227.105453][ T8072] tap0: linktype set to 1 [ 227.141242][ T5621] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 227.273102][ T8074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.832'. [ 227.958752][ T31] audit: type=1400 audit(1789778543.682:31): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=8089 comm="syz.0.836" name="p" offset=58 [ 227.985383][ T8093] loop2: detected capacity change from 0 to 128 [ 228.008815][ T8093] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 228.547626][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 228.959789][ T8115] sd 0:0:1:0: PR command failed: 1026 [ 228.959855][ T8115] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 228.959920][ T8115] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 229.273870][ T8122] loop1: detected capacity change from 0 to 2048 [ 229.293249][ T8122] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 229.296662][ T8123] loop3: detected capacity change from 0 to 2048 [ 229.322713][ T8122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 229.373824][ T8123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.414152][ T8123] EXT4-fs (loop3): shut down requested (1) [ 229.678534][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.921493][ T5893] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 230.027944][ T8146] loop2: detected capacity change from 0 to 256 [ 230.063532][ T8148] loop5: detected capacity change from 0 to 512 [ 230.072520][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 230.074271][ T5893] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 230.079388][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 230.079441][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.116957][ T5893] usb 5-1: config 0 descriptor?? [ 230.155764][ T8146] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 230.164091][ T8148] EXT4-fs warning (device loop5): dx_probe:800: inode #2: comm syz.5.855: Unrecognised inode hash code 255 [ 230.164136][ T8148] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.855: Corrupt directory, running e2fsck is recommended [ 230.247621][ T8148] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 230.247756][ T8148] EXT4-fs error (device loop5): ext4_iget_extra_inode:5209: inode #15: comm syz.5.855: corrupted in-inode xattr: invalid ea_ino [ 230.247805][ T8148] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 230.263466][ T8148] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.855: couldn't read orphan inode 15 (err -117) [ 230.263519][ T8148] loop5: lost filesystem error report for type 5 error -117 [ 230.314610][ T8148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.458174][ T8148] EXT4-fs (loop5): shut down requested (2) [ 230.494104][ T8148] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 230.508540][ T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 230.650815][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 230.655274][ T30] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 230.659197][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.659244][ T30] usb 2-1: Product: syz [ 230.659270][ T30] usb 2-1: Manufacturer: syz [ 230.659297][ T30] usb 2-1: SerialNumber: syz [ 230.728998][ T30] usb 2-1: config 0 descriptor?? [ 230.742536][ T30] gspca_main: se401-2.14.0 probing 047d:5003 [ 230.843371][ T5893] input: HID 258a:6a88 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:258A:6A88.0011/input/input23 [ 230.877620][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.269301][ T30] gspca_se401: ExtraFeatures: 255 [ 231.356952][ T5893] itetech 0003:258A:6A88.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 231.379793][ T5893] usb 5-1: USB disconnect, device number 11 [ 231.492625][ T30] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input24 [ 231.683109][ T8183] fido_id[8183]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 231.739848][ T30] usb 2-1: USB disconnect, device number 8 [ 231.925083][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'. [ 231.953471][ T5768] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 232.100365][ T5768] usb 1-1: Using ep0 maxpacket: 32 [ 232.101572][ T5768] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 232.102351][ T5768] usb 1-1: config 0 has no interfaces? [ 232.139322][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.139373][ T5768] usb 1-1: Product: syz [ 232.139400][ T5768] usb 1-1: Manufacturer: syz [ 232.139427][ T5768] usb 1-1: SerialNumber: syz [ 232.234674][ T5768] usb 1-1: config 0 descriptor?? [ 232.468108][ T10] usb 1-1: USB disconnect, device number 8 [ 233.427761][ T8237] set_capacity_and_notify: 1 callbacks suppressed [ 233.427792][ T8237] loop5: detected capacity change from 0 to 1024 [ 233.444470][ T8237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.528067][ T8237] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.896184][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 234.143487][ T8256] loop3: detected capacity change from 0 to 64 [ 234.159625][ T8255] binder: 8252:8255 ioctl c0306201 0 returned -14 [ 234.529115][ T8267] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 234.869492][ T8277] fuse-io-uring is disabled by module parameter [ 234.897380][ T8276] loop0: detected capacity change from 0 to 2048 [ 234.981078][ T8276] loop0: p1 < > p2 p3 p4 < p5 p6 > [ 234.981121][ T8276] loop0: partition table partially beyond EOD, truncated [ 234.981361][ T8276] loop0: p1 start 3405774849 is beyond EOD, truncated [ 235.023184][ T8276] loop0: p3 start 4225 is beyond EOD, truncated [ 235.048418][ T8276] loop0: p6 start 4225 is beyond EOD, truncated [ 235.166902][ T8291] loop4: detected capacity change from 0 to 64 [ 235.277045][ T8291] BFS-fs: bfs_readdir(): Bad f_pos=00000002 for loop4:00000002 [ 235.333032][ T8286] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 235.424132][ T5640] udevd[5640]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 235.463995][ T5631] udevd[5631]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 235.471911][ T5971] udevd[5971]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 235.563016][ T8286] bond1 (unregistering): Released all slaves [ 236.281808][ T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 236.432320][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 236.433889][ T30] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 236.436197][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.436248][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.436288][ T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 236.436352][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.512690][ T30] usb 2-1: config 0 descriptor?? [ 236.518363][ T8322] loop2: detected capacity change from 0 to 2048 [ 236.559158][ T8322] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 236.559198][ T8322] UDF-fs: Scanning with blocksize 512 failed [ 236.673212][ T8322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 236.940367][ T5745] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 236.966682][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 236.966728][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 236.966762][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 236.966807][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 236.966844][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 236.968052][ T30] microsoft 0003:045E:07DA.0012: ignoring exceeding usage max [ 237.016879][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 237.016924][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 237.016960][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 237.016994][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 237.017028][ T30] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0 [ 237.072411][ T30] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0012/input/input26 [ 237.091953][ T5745] usb 5-1: Using ep0 maxpacket: 32 [ 237.092724][ T5745] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b27, bcdDevice= 0.00 [ 237.094113][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.129167][ T5745] usb 5-1: config 0 descriptor?? [ 237.202386][ T30] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 237.287218][ T30] usb 2-1: USB disconnect, device number 9 [ 237.555209][ T8344] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 237.577740][ T5745] hid (null): report_id 7532 is invalid [ 237.607758][ T5745] hid-corsair-void 0003:1B1C:1B27.0013: report_id 7532 is invalid [ 237.607800][ T5745] hid-corsair-void 0003:1B1C:1B27.0013: item 0 4 1 8 parsing failed [ 237.610221][ T5745] hid-corsair-void 0003:1B1C:1B27.0013: parse failed (reason: -22) [ 237.635458][ T5745] hid-corsair-void 0003:1B1C:1B27.0013: probe with driver hid-corsair-void failed with error -22 [ 237.712292][ T8344] bond1 (unregistering): Released all slaves [ 237.753248][ T8353] fido_id[8353]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 237.814762][ T8356] jffs2: notice: (8356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 237.824715][ T9] usb 5-1: USB disconnect, device number 12 [ 237.966793][ T8360] netlink: 136 bytes leftover after parsing attributes in process `syz.0.934'. [ 238.007093][ T8362] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(13) [ 238.302643][ T8370] loop3: detected capacity change from 0 to 256 [ 239.309663][ T8395] loop3: detected capacity change from 0 to 64 [ 239.483433][ T9] lg-g15 0003:046D:0A07.0014: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 239.537352][ T8403] : renamed from bond0 (while UP) [ 239.648457][ T9] input: Logitech Z-10 LCD Menu Keys as /devices/virtual/misc/uhid/0003:046D:0A07.0014/input/input27 [ 239.852600][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 240.000621][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 240.003698][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 240.024989][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.025032][ T10] usb 1-1: Product: syz [ 240.025058][ T10] usb 1-1: Manufacturer: syz [ 240.025084][ T10] usb 1-1: SerialNumber: syz [ 240.114628][ T10] usb 1-1: config 0 descriptor?? [ 240.154045][ T8408] fido_id[8408]: Failed to read report descriptor at '/sys/devices/virtual/misc/uhid/0003:046D:0A07.0014/report_descriptor': No such device [ 240.229956][ T8415] block2mtd: illegal erase size [ 240.354268][ T10] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 240.443344][ T8420] MTRR 0 not used [ 240.492384][ T8424] loop3: detected capacity change from 0 to 128 [ 240.502236][ T8424] EXT4-fs: Ignoring removed nobh option [ 240.541797][ T8424] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 240.545929][ T8424] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 240.631732][ T8424] fscrypt (loop3, inode 12): Reserved bits set in encryption policy [ 240.728827][ T8428] loop2: detected capacity change from 0 to 164 [ 240.803309][ T5617] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 240.813221][ T10] usb write operation failed. (-71) [ 240.891322][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 240.891973][ T10] dvbdev: DVB: registering new adapter (Terratec H7) [ 240.892033][ T10] usb 1-1: media controller created [ 240.901327][ T10] usb read operation failed. (-71) [ 240.902896][ T10] usb write operation failed. (-71) [ 240.949425][ T10] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 241.023280][ T8428] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 241.039917][ T10] usb 1-1: USB disconnect, device number 9 [ 241.123868][ T8428] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 241.162818][ T8428] Symlink component flag not implemented [ 241.163868][ T8428] Symlink component flag not implemented (7) [ 241.179757][ T8428] Symlink component flag not implemented (7) [ 241.216412][ T8442] netlink: 56 bytes leftover after parsing attributes in process `syz.5.969'. [ 241.254411][ T8444] capability: warning: `syz.4.970' uses 32-bit capabilities (legacy support in use) [ 241.258812][ T8444] program syz.4.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.394626][ T8446] loop2: detected capacity change from 0 to 1024 [ 241.448045][ T8446] hfsplus: bad catalog file entry [ 241.843496][ T4189] hfsplus: bad catalog file entry [ 241.951485][ T8454] loop3: detected capacity change from 0 to 256 [ 241.952642][ T8454] exfat: Deprecated parameter 'utf8' [ 241.952692][ T8454] exfat: Deprecated parameter 'utf8' [ 241.956941][ T8454] exfat: Deprecated parameter 'utf8' [ 242.041705][ T8454] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 242.615020][ T8467] loop2: detected capacity change from 0 to 128 [ 242.697834][ T8470] xt_hashlimit: size too large, truncated to 1048576 [ 242.908641][ T8467] syz.2.982: attempt to access beyond end of device [ 242.908641][ T8467] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 242.918987][ T8467] syz.2.982: attempt to access beyond end of device [ 242.918987][ T8467] loop2: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 242.919035][ T8467] buffer_io_error: 138 callbacks suppressed [ 242.919055][ T8467] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 242.919111][ T8467] syz.2.982: attempt to access beyond end of device [ 242.919111][ T8467] loop2: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 242.919151][ T8467] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 242.925792][ T8467] syz.2.982: attempt to access beyond end of device [ 242.925792][ T8467] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 242.956890][ T8467] syz.2.982: attempt to access beyond end of device [ 242.956890][ T8467] loop2: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 242.956940][ T8467] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 242.956978][ T8467] syz.2.982: attempt to access beyond end of device [ 242.956978][ T8467] loop2: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 242.957017][ T8467] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 242.972014][ T8467] syz.2.982: attempt to access beyond end of device [ 242.972014][ T8467] loop2: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 243.024495][ T8467] syz.2.982: attempt to access beyond end of device [ 243.024495][ T8467] loop2: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 243.024707][ T8467] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 243.024750][ T8467] syz.2.982: attempt to access beyond end of device [ 243.024750][ T8467] loop2: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 243.024791][ T8467] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 243.035239][ T8467] syz.2.982: attempt to access beyond end of device [ 243.035239][ T8467] loop2: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 243.106582][ T8467] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 243.106634][ T8467] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 243.126837][ T8467] Buffer I/O error on dev loop2, logical block 119, lost async page write [ 243.126885][ T8467] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 243.186903][ T8477] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 243.524717][ T8473] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 243.547329][ T8473] bond1 (unregistering): Released all slaves [ 243.655820][ T8490] ieee802154 phy0 wpan0: encryption failed: -22 [ 243.842214][ T8495] rnbd_client L202: map_device: Unknown parameter or missing value 's' [ 244.096027][ T8501] loop5: detected capacity change from 0 to 256 [ 244.538480][ T8513] block2mtd: parameter too long [ 244.574913][ T8516] loop5: detected capacity change from 0 to 164 [ 244.803085][ T8493] loop0: detected capacity change from 0 to 32768 [ 244.808077][ T8493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.993 (8493) [ 244.889070][ T8520] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) ! [ 245.013343][ T8493] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.013399][ T8493] BTRFS info (device loop0): using crc32c checksum algorithm [ 245.059334][ T8526] loop3: detected capacity change from 0 to 128 [ 245.163037][ T8526] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 245.167607][ T8526] ext4 filesystem being mounted at /200/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.209501][ T8542] loop1: detected capacity change from 0 to 128 [ 245.271947][ T31] audit: type=1326 audit(1789778561.002:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8522 comm="syz.3.1004" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f98b9e159 code=0x0 [ 245.358994][ T8547] loop5: detected capacity change from 0 to 512 [ 245.374888][ T8547] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 245.395811][ T8493] BTRFS info (device loop0): enabling ssd optimizations [ 245.395855][ T8493] BTRFS info (device loop0): turning on flush-on-commit [ 245.395903][ T8493] BTRFS info (device loop0): enabling free space tree [ 245.395931][ T8493] BTRFS info (device loop0): enabling auto defrag [ 245.395961][ T8493] BTRFS info (device loop0): use lzo compression, level 1 [ 245.395999][ T8493] BTRFS info (device loop0): max_inline set to 4096 [ 245.633677][ T8556] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1008'. [ 245.692411][ T5619] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 245.790697][ T59] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 246.016362][ T5617] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.271074][ T30] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 246.452484][ T30] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 3.00 [ 246.471592][ T30] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 246.494783][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.494824][ T30] usb 3-1: Product: syz [ 246.494851][ T30] usb 3-1: Manufacturer: syz [ 246.494878][ T30] usb 3-1: SerialNumber: syz [ 246.514140][ T30] pl2303 3-1:1.0: pl2303 converter detected [ 246.655210][ T30] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 246.794281][ T30] usb 3-1: USB disconnect, device number 7 [ 246.952180][ T30] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 246.961992][ T30] pl2303 3-1:1.0: device disconnected [ 247.629655][ T8594] loop5: detected capacity change from 0 to 512 [ 247.633677][ T8594] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 247.672235][ T8594] EXT4-fs (loop5): 1 truncate cleaned up [ 247.678978][ T8594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.728853][ T8599] loop0: detected capacity change from 0 to 128 [ 247.853581][ T8594] EXT4-fs error (device loop5): ext4_generic_delete_entry:2674: inode #2: block 13: comm syz.5.1030: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 247.859249][ T8594] EXT4-fs (loop5): Remounting filesystem read-only [ 247.859280][ T8594] EXT4-fs warning (device loop5): ext4_rename_delete:3739: inode #2: comm syz.5.1030: Deleting old file: nlink 5, error=-117 [ 247.996756][ T8599] bio_check_eod: 74 callbacks suppressed [ 247.996803][ T8599] syz.0.1029: attempt to access beyond end of device [ 247.996803][ T8599] loop0: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 247.997691][ T8599] syz.0.1029: attempt to access beyond end of device [ 247.997691][ T8599] loop0: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 247.997735][ T8599] buffer_io_error: 46 callbacks suppressed [ 247.997755][ T8599] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 247.997792][ T8599] syz.0.1029: attempt to access beyond end of device [ 247.997792][ T8599] loop0: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 247.997833][ T8599] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 248.013613][ T8599] syz.0.1029: attempt to access beyond end of device [ 248.013613][ T8599] loop0: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 248.014742][ T8599] syz.0.1029: attempt to access beyond end of device [ 248.014742][ T8599] loop0: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 248.014786][ T8599] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 248.014842][ T8599] syz.0.1029: attempt to access beyond end of device [ 248.014842][ T8599] loop0: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 248.014882][ T8599] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 248.054559][ T8599] syz.0.1029: attempt to access beyond end of device [ 248.054559][ T8599] loop0: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 248.055549][ T8599] syz.0.1029: attempt to access beyond end of device [ 248.055549][ T8599] loop0: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 248.055593][ T8599] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 248.055630][ T8599] syz.0.1029: attempt to access beyond end of device [ 248.055630][ T8599] loop0: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 248.102231][ T8599] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 248.102905][ T8599] syz.0.1029: attempt to access beyond end of device [ 248.102905][ T8599] loop0: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 248.119477][ T8599] Buffer I/O error on dev loop0, logical block 107, lost async page write [ 248.119524][ T8599] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 248.179787][ T8599] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 248.179837][ T8599] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 248.802813][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.050334][ T8621] jffs2: notice: (8621) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 249.958616][ T8647] loop1: detected capacity change from 0 to 256 [ 250.003329][ T8647] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 250.516448][ T8666] loop1: detected capacity change from 0 to 8 [ 250.534167][ T8666] unable to read xattr id index table [ 250.632319][ T8659] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 250.632362][ T8659] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 250.635108][ T31] audit: type=1400 audit(1789778566.362:33): apparmor="STATUS" info="unsupported interface version" error=-93 profile="unconfined" pid=8668 comm="syz.3.1065" offset=16 [ 250.655708][ T8659] vhci_hcd vhci_hcd.0: Device attached [ 250.713682][ T5745] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 250.854754][ T8676] loop5: detected capacity change from 0 to 512 [ 250.881025][ T2097] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 250.882628][ T30] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 250.885578][ T8676] EXT4-fs error (device loop5): ext4_read_inode_bitmap:140: comm syz.5.1067: Invalid inode bitmap blk 4 in block_group 0 [ 250.885629][ T8676] loop5: lost filesystem error report for type 5 error -117 [ 250.890318][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 250.890350][ C0] EXT4-fs (loop5): initial error at time 1789778566: ext4_read_inode_bitmap:140 [ 250.890389][ C0] EXT4-fs (loop5): last error at time 1789778566: ext4_read_inode_bitmap:140 [ 250.911581][ T5745] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.912311][ T5745] usb 3-1: config 0 has no interfaces? [ 250.912357][ T5745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.926900][ T5745] usb 3-1: config 0 descriptor?? [ 250.936221][ T8676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.056308][ T8682] dyndbg: expected <4096 bytes into control [ 251.066191][ T30] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.067821][ T30] usb 2-1: config 1 has an invalid descriptor of length 237, skipping remainder of the config [ 251.067858][ T30] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 251.071002][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.071040][ T30] usb 2-1: SerialNumber: syz [ 251.203084][ T8670] usb 37-1: recv xbuf, 0 [ 251.224067][ T5745] usb 3-1: USB disconnect, device number 8 [ 251.250057][ T62] vhci_hcd vhci_hcd.2: stop threads [ 251.264316][ T62] vhci_hcd vhci_hcd.2: release socket [ 251.286000][ T62] vhci_hcd vhci_hcd.2: disconnect device [ 251.358695][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.449892][ T30] usb 2-1: 0:2 : does not exist [ 251.580754][ T8694] loop5: detected capacity change from 0 to 4096 [ 251.585138][ T8694] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.585165][ T8694] EXT4-fs (loop5): Test dummy encryption mode enabled [ 251.590575][ T8694] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0002] [ 251.590722][ T8694] System zones: 0-5 [ 251.664044][ T8694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.732851][ T30] usb 2-1: USB disconnect, device number 10 [ 251.835665][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.997952][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.357391][ T8716] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1084'. [ 252.587917][ T31] audit: type=1400 audit(1789778568.312:34): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name=66226F pid=8719 comm="syz.3.1086" name=66226F offset=55 [ 253.148590][ T8731] batman_adv: batadv0: Adding interface: macsec1 [ 253.148617][ T8731] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.148669][ T8731] batman_adv: batadv0: Interface activated: macsec1 [ 253.267230][ T8739] ima: policy update failed [ 253.267682][ T31] audit: type=1802 audit(1789778568.992:35): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1095" res=0 errno=0 [ 253.316334][ T8746] loop4: detected capacity change from 0 to 128 [ 253.468764][ T8746] bio_check_eod: 32 callbacks suppressed [ 253.468791][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.468791][ T8746] loop4: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 253.492030][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.492030][ T8746] loop4: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 253.492082][ T8746] buffer_io_error: 18 callbacks suppressed [ 253.492102][ T8746] Buffer I/O error on dev loop4, logical block 87, lost async page write [ 253.492139][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.492139][ T8746] loop4: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 253.492180][ T8746] Buffer I/O error on dev loop4, logical block 88, lost async page write [ 253.507160][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.507160][ T8746] loop4: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 253.508160][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.508160][ T8746] loop4: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 253.508206][ T8746] Buffer I/O error on dev loop4, logical block 91, lost async page write [ 253.508244][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.508244][ T8746] loop4: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 253.508284][ T8746] Buffer I/O error on dev loop4, logical block 92, lost async page write [ 253.554022][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.554022][ T8746] loop4: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 253.559598][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.559598][ T8746] loop4: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 253.559644][ T8746] Buffer I/O error on dev loop4, logical block 103, lost async page write [ 253.559682][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.559682][ T8746] loop4: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 253.559722][ T8746] Buffer I/O error on dev loop4, logical block 104, lost async page write [ 253.566043][ T8746] syz.4.1096: attempt to access beyond end of device [ 253.566043][ T8746] loop4: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 253.568847][ T8746] Buffer I/O error on dev loop4, logical block 107, lost async page write [ 253.568888][ T8746] Buffer I/O error on dev loop4, logical block 108, lost async page write [ 253.658101][ T8746] Buffer I/O error on dev loop4, logical block 119, lost async page write [ 253.658151][ T8746] Buffer I/O error on dev loop4, logical block 120, lost async page write [ 253.717536][ T30] hid_parser_main: 14 callbacks suppressed [ 253.717573][ T30] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 253.717613][ T30] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 253.753823][ T30] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz0] on syz0 [ 253.810634][ T8754] loop2: detected capacity change from 0 to 4096 [ 253.838776][ T31] audit: type=1326 audit(1789778569.562:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8755 comm="syz.3.1103" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f98b9e159 code=0x0 [ 254.008024][ T8761] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 254.344635][ T8766] can0: slcan on ttyS3. [ 254.513858][ T8773] fido_id[8773]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.908243][ T8767] can0 (unregistered): slcan off ttyS3. [ 255.088455][ T8790] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1111'. [ 255.139177][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.139265][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.250447][ T5893] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 255.400424][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 255.403034][ T5893] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 255.426748][ T5893] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 255.426790][ T5893] usb 2-1: Product: syz [ 255.426816][ T5893] usb 2-1: Manufacturer: syz [ 255.426842][ T5893] usb 2-1: SerialNumber: syz [ 255.446405][ T5893] usb 2-1: config 0 descriptor?? [ 255.486345][ T5893] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 255.649432][ T8804] loop2: detected capacity change from 0 to 512 [ 255.690985][ T8804] EXT4-fs (loop2): 1 truncate cleaned up [ 255.698471][ T8804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.779921][ T8811] C: renamed from veth1_to_team (while UP) [ 255.818188][ T8804] EXT4-fs error (device loop2): ext4_validate_block_bitmap:444: comm syz.2.1118: bg 0: block 465: padding at end of block bitmap is not set [ 255.825513][ T8811] netlink: 'syz.5.1123': attribute type 3 has an invalid length. [ 255.825571][ T8811] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1123'. [ 255.828397][ T8811] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 255.865777][ T8812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1120'. [ 255.887473][ T8804] EXT4-fs (loop2): Remounting filesystem read-only [ 256.090826][ T5618] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.238373][ T5893] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 256.347251][ T5893] usb 2-1: USB disconnect, device number 11 [ 256.583195][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 256.731807][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 256.733135][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 256.742344][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.742397][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.742437][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.742501][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.752130][ T10] usb 1-1: config 0 descriptor?? [ 256.992235][ T5893] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 257.141463][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 257.146218][ T5893] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 257.163365][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.163418][ T5893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.163489][ T5893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 257.163554][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.182578][ T5893] usb 3-1: config 0 descriptor?? [ 257.229895][ T10] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0 [ 257.229973][ T10] lua 0003:1E7D:2C2E.0016: unknown main item tag 0x0 [ 257.230008][ T10] lua 0003:1E7D:2C2E.0016: item fetching failed at offset 2/38 [ 257.248156][ T10] lua 0003:1E7D:2C2E.0016: parse failed [ 257.248289][ T10] lua 0003:1E7D:2C2E.0016: probe with driver lua failed with error -22 [ 257.514778][ T10] usb 1-1: USB disconnect, device number 10 [ 257.682567][ T5893] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 257.682613][ T5893] microsoft 0003:045E:07DA.0017: ignoring exceeding usage max [ 257.685810][ T5893] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 257.685840][ T5893] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 257.685871][ T5893] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 257.685897][ T5893] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 257.685922][ T5893] microsoft 0003:045E:07DA.0017: unknown main item tag 0x0 [ 257.687985][ T5893] microsoft 0003:045E:07DA.0017: implement() called with n (56) > 32! (kworker/0:6) [ 257.872437][ T5893] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 258.190075][ T5893] usb 3-1: USB disconnect, device number 9 [ 258.355057][ T8865] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1142'. [ 259.114427][ T8892] loop3: detected capacity change from 0 to 128 [ 259.167160][ T8892] bio_check_eod: 32 callbacks suppressed [ 259.167190][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.167190][ T8892] loop3: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 259.169712][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.169712][ T8892] loop3: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 259.169759][ T8892] buffer_io_error: 18 callbacks suppressed [ 259.169779][ T8892] Buffer I/O error on dev loop3, logical block 87, lost async page write [ 259.169828][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.169828][ T8892] loop3: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 259.169869][ T8892] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 259.240814][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.240814][ T8892] loop3: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 259.243370][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.243370][ T8892] loop3: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 259.243415][ T8892] Buffer I/O error on dev loop3, logical block 91, lost async page write [ 259.243453][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.243453][ T8892] loop3: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 259.243491][ T8892] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 259.243958][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.243958][ T8892] loop3: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 259.244635][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.244635][ T8892] loop3: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 259.244680][ T8892] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 259.244717][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.244717][ T8892] loop3: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 259.244758][ T8892] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 259.312288][ T8892] syz.3.1154: attempt to access beyond end of device [ 259.312288][ T8892] loop3: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 259.338056][ T8892] Buffer I/O error on dev loop3, logical block 107, lost async page write [ 259.338105][ T8892] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 259.369766][ T8892] Buffer I/O error on dev loop3, logical block 119, lost async page write [ 259.369816][ T8892] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 259.883971][ T8900] loop4: detected capacity change from 0 to 4096 [ 259.908782][ T8900] EXT4-fs (loop4): Test dummy encryption mode enabled [ 259.941495][ T8900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.123857][ T8900] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 260.467996][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.597679][ T8923] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1170'. [ 260.659155][ T8925] loop5: detected capacity change from 0 to 256 [ 260.773074][ T8925] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66dc59, utbl_chksum : 0xe619d30d) [ 260.856738][ T8930] netlink: 'syz.4.1176': attribute type 5 has an invalid length. [ 261.641297][ T8947] loop1: detected capacity change from 0 to 128 [ 261.954213][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 261.974204][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 261.977709][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.001130][ T8954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1187'. [ 262.008551][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.028966][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.037827][ T8954] ipvlan2: entered allmulticast mode [ 262.037855][ T8954] syz_tun: entered allmulticast mode [ 262.095510][ T5623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 262.097696][ T5623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 262.098095][ T5623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 262.139729][ T5623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 262.149915][ T5623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 262.380440][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 262.542235][ T10] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice= 1.00 [ 262.547945][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.547999][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.548057][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.607395][ T10] metro_usb 6-1:1.0: Metrologic USB to Serial converter detected [ 262.652290][ T10] usb 6-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 262.877205][ T8957] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 262.879921][ T10] usb 6-1: USB disconnect, device number 13 [ 262.907919][ T10] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 262.908543][ T10] metro_usb 6-1:1.0: device disconnected [ 263.386913][ T8995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1199'. [ 263.452530][ T5626] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 263.698228][ T9001] loop3: detected capacity change from 0 to 128 [ 263.764589][ T9000] loop5: detected capacity change from 0 to 2048 [ 263.814371][ T9004] loop1: detected capacity change from 0 to 512 [ 263.830191][ T9004] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 263.903220][ T9004] EXT4-fs (loop1): 1 truncate cleaned up [ 263.918535][ T9000] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.933674][ T9004] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.075040][ T9004] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1203: corrupted xattr entries [ 264.079750][ T9004] EXT4-fs error (device loop1): get_max_inline_xattr_value_size:72: inode #15: comm syz.1.1203: corrupt xattr in inline inode [ 264.209734][ T9004] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1203: corrupted xattr entries [ 264.226276][ T9010] EXT4-fs error (device loop1): xattr_find_entry:333: inode #15: comm syz.1.1203: corrupted xattr entries [ 264.251334][ T52] Bluetooth: hci6: command tx timeout [ 264.275464][ T9015] loop2: detected capacity change from 0 to 1024 [ 264.438272][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.851900][ T9024] loop3: detected capacity change from 0 to 64 [ 264.914999][ T9024] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. Mounting read-only. [ 264.979440][ T9024] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. leaving read-only. [ 265.277468][ T9019] loop2: detected capacity change from 0 to 32768 [ 265.304131][ T9019] (syz.2.1209,9019,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 265.305935][ T9019] (syz.2.1209,9019,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 265.470928][ T9019] (syz.2.1209,9019,1):ocfs2_block_check_validate:400 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 265.516019][ T9019] JBD2: Ignoring recovery information on journal [ 265.905856][ T9019] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 265.970560][ T187] kernel write not supported for file /snd/seq (pid: 187 comm: kworker/0:2) [ 266.340410][ T52] Bluetooth: hci6: command tx timeout [ 266.366741][ T5618] ocfs2: Unmounting device (7,2) on (node local) [ 266.463397][ T9058] loop1: detected capacity change from 0 to 512 [ 266.491140][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.491261][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.491423][ T8951] bridge_slave_0: entered allmulticast mode [ 266.499526][ T9058] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.1234: inode has both inline data and extents flags [ 266.499590][ T9058] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 266.500296][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 266.500331][ C0] EXT4-fs (loop1): initial error at time 1789778582: ext4_orphan_get:1403: inode 15 [ 266.500378][ C0] EXT4-fs (loop1): last error at time 1789778582: ext4_orphan_get:1403: inode 15 [ 266.515200][ T9058] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1234: couldn't read orphan inode 15 (err -117) [ 266.515254][ T9058] loop1: lost filesystem error report for type 5 error -117 [ 266.547712][ T9058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.608112][ T8951] bridge_slave_0: entered promiscuous mode [ 266.631819][ T8951] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.634462][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.634680][ T8951] bridge_slave_1: entered allmulticast mode [ 266.657248][ T8951] bridge_slave_1: entered promiscuous mode [ 266.765305][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.073036][ T8951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.113574][ T8951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.593678][ T8951] team0: Port device team_slave_0 added [ 267.635996][ T8951] team0: Port device team_slave_1 added [ 267.832022][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.832050][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.832097][ T8951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.834542][ T8951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.834565][ T8951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.834612][ T8951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.116128][ T9085] loop1: detected capacity change from 0 to 512 [ 268.174160][ T9085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.213140][ T8951] hsr_slave_0: entered promiscuous mode [ 268.235028][ T8951] hsr_slave_1: entered promiscuous mode [ 268.236019][ T8951] debugfs: 'hsr0' already exists in 'hsr' [ 268.236048][ T8951] Cannot create hsr debugfs directory [ 268.420627][ T52] Bluetooth: hci6: command tx timeout [ 268.466355][ T5620] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.751590][ T9099] kAFS: unable to lookup cell '(G' [ 268.753213][ T9097] kAFS: unable to lookup cell '(G' [ 269.842356][ T9125] loop5: detected capacity change from 0 to 256 [ 269.857549][ T9125] FAT-fs (loop5): invalid media value (0x29) [ 269.857585][ T9125] FAT-fs (loop5): Can't find a valid FAT filesystem [ 269.908240][ T9127] netlink: 'syz.3.1246': attribute type 16 has an invalid length. [ 269.908278][ T9127] netlink: 'syz.3.1246': attribute type 17 has an invalid length. [ 270.156238][ T8951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.337833][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.362229][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.503939][ T52] Bluetooth: hci6: command tx timeout [ 270.537735][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.537879][ T9127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.558378][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.558542][ T9127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.823448][ T9116] loop2: detected capacity change from 0 to 32768 [ 270.845211][ T9116] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.947328][ T9127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.092943][ T9116] XFS (loop2): Ending clean mount [ 271.168431][ T8951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.270998][ T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 271.373773][ T5618] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 271.376622][ T8951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.387104][ T5618] XFS (loop2): xfs_log_unmount_write: will fix summary counters at next mount [ 271.440360][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 271.441141][ T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 271.444284][ T10] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.444334][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 271.444380][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.494647][ T10] usb 6-1: config 0 descriptor?? [ 271.497454][ T9159] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1256'. [ 271.800386][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 271.853480][ T8951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.952103][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 271.953785][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 271.958609][ T9] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 271.958650][ T9] usb 5-1: config 0 has no interface number 0 [ 271.994490][ T10] mcp2221 0003:04D8:00DD.0018: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 272.003753][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.003804][ T9] usb 5-1: Product: syz [ 272.003868][ T9] usb 5-1: Manufacturer: syz [ 272.003898][ T9] usb 5-1: SerialNumber: syz [ 272.045552][ T9] usb 5-1: config 0 descriptor?? [ 272.050011][ T9] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 272.270899][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 272.298968][ T9] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 272.397254][ T5745] usb 6-1: USB disconnect, device number 14 [ 272.705609][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 272.706553][ T9] usb 5-1: USB disconnect, device number 13 [ 272.761571][ T9177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1266'. [ 272.825400][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 272.902938][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 272.904033][ T9] quatech2 5-1:0.51: device disconnected [ 272.941015][ T9180] loop3: detected capacity change from 0 to 2048 [ 272.974419][ T8951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 273.004894][ T8951] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.018637][ T8951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 273.034521][ T4977] loop3: p1 < > p2 p3 p4 < p5 p6 > [ 273.034557][ T4977] loop3: partition table partially beyond EOD, truncated [ 273.034803][ T4977] loop3: p1 start 3405774849 is beyond EOD, truncated [ 273.042881][ T8951] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.069796][ T4977] loop3: p3 start 4225 is beyond EOD, truncated [ 273.084125][ T8951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 273.088325][ T4977] loop3: p6 start 4225 is beyond EOD, truncated [ 273.112833][ T8951] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.115407][ T8951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 273.148566][ T8951] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.157964][ T9180] loop3: p1 < > p2 p3 p4 < p5 p6 > [ 273.157999][ T9180] loop3: partition table partially beyond EOD, truncated [ 273.158233][ T9180] loop3: p1 start 3405774849 is beyond EOD, truncated [ 273.188737][ T9180] loop3: p3 start 4225 is beyond EOD, truncated [ 273.209035][ T9180] loop3: p6 start 4225 is beyond EOD, truncated [ 273.348728][ T9194] binder: 9193:9194 ioctl c0306201 0 returned -14 [ 273.422954][ T8951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.491940][ T8951] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.583155][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.583281][ T7809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.618237][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.618368][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.092524][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 274.241534][ T9] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 274.243048][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.243092][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 274.247094][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.247133][ T9] usb 4-1: Product: syz [ 274.247158][ T9] usb 4-1: Manufacturer: syz [ 274.247183][ T9] usb 4-1: SerialNumber: syz [ 274.362603][ T9224] loop4: detected capacity change from 0 to 256 [ 274.465519][ T9224] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 274.594683][ T9230] loop2: detected capacity change from 0 to 128 [ 274.616475][ T9] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 274.686418][ T9230] bio_check_eod: 116 callbacks suppressed [ 274.686448][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.686448][ T9230] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 274.687305][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.687305][ T9230] loop2: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 274.687350][ T9230] buffer_io_error: 74 callbacks suppressed [ 274.687370][ T9230] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 274.687408][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.687408][ T9230] loop2: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 274.687449][ T9230] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 274.692190][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.692190][ T9230] loop2: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 274.693126][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.693126][ T9230] loop2: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 274.693170][ T9230] Buffer I/O error on dev loop2, logical block 91, lost async page write [ 274.693207][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.693207][ T9230] loop2: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 274.695547][ T9230] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 274.698181][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.698181][ T9230] loop2: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 274.699106][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.699106][ T9230] loop2: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 274.699149][ T9230] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 274.699185][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.699185][ T9230] loop2: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 274.700619][ T9230] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 274.704950][ T9230] syz.2.1288: attempt to access beyond end of device [ 274.704950][ T9230] loop2: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 274.709598][ T9230] Buffer I/O error on dev loop2, logical block 107, lost async page write [ 274.709644][ T9230] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 274.713866][ T9230] Buffer I/O error on dev loop2, logical block 119, lost async page write [ 274.713916][ T9230] Buffer I/O error on dev loop2, logical block 120, lost async page write [ 275.043776][ T5745] usb 4-1: USB disconnect, device number 4 [ 275.099079][ T9238] loop5: detected capacity change from 0 to 2048 [ 275.154536][ T5745] usblp0: removed [ 275.246637][ T9238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.311853][ T9240] loop4: detected capacity change from 0 to 2048 [ 275.409311][ T9238] EXT4-fs (loop5): shut down requested (1) [ 275.427174][ T5642] udevd[5642]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 275.428803][ T5648] udevd[5648]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 275.446209][ T5639] udevd[5639]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 275.492254][ T9240] loop4: p1 < > p2 p3 p4 < p5 p6 > [ 275.492291][ T9240] loop4: partition table partially beyond EOD, truncated [ 275.515962][ T9240] loop4: p1 start 3405774849 is beyond EOD, truncated [ 275.528332][ T9240] loop4: p3 start 4225 is beyond EOD, truncated [ 275.667801][ T9240] loop4: p6 start 4225 is beyond EOD, truncated [ 275.805777][ T9251] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.823205][ T5640] udevd[5640]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 275.835870][ T5642] udevd[5642]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 275.843845][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.845814][ T5994] udevd[5994]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 276.129604][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1295'. [ 276.129640][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1295'. [ 276.217404][ T8951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.390990][ T8951] veth0_vlan: entered promiscuous mode [ 276.446155][ T8951] veth1_vlan: entered promiscuous mode [ 276.611362][ T9267] sd 0:0:1:0: PR command failed: 1026 [ 276.611427][ T9267] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 276.611490][ T9267] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 276.648556][ T8951] veth0_macvtap: entered promiscuous mode [ 276.749274][ T9248] loop2: detected capacity change from 0 to 32768 [ 276.775659][ T8951] veth1_macvtap: entered promiscuous mode [ 276.875847][ T9248] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 276.979770][ T5640] udevd[5640]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 276.980063][ T5639] udevd[5639]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 276.980165][ T5971] udevd[5971]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 277.016928][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.045906][ T8951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.088870][ T9248] XFS (loop2): Ending clean mount [ 277.107819][ T9282] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd20 [ 277.211192][ T62] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.254208][ T62] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.254369][ T62] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.254434][ T62] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.759413][ T9287] loop5: detected capacity change from 0 to 4096 [ 277.802073][ T9287] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 277.842716][ T9287] ntfs3(loop5): Failed to load $Extend (-22). [ 277.842752][ T9287] ntfs3(loop5): Failed to initialize $Extend. [ 277.988051][ T5618] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 278.409793][ T9291] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 278.409831][ T9291] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 278.545194][ T9306] loop5: detected capacity change from 0 to 128 [ 278.582256][ T9306] FAT-fs (loop5): data area starts beyond volume (414 > 128) [ 278.582293][ T9306] FAT-fs (loop5): Can't find a valid FAT filesystem [ 279.038154][ T9314] loop3: detected capacity change from 0 to 256 [ 280.080334][ T9312] loop1: detected capacity change from 0 to 131072 [ 280.084098][ T9312] F2FS-fs (loop1): Wrong secs_per_zone / total_sections (512, 24) [ 280.084135][ T9312] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 280.084191][ T9312] F2FS-fs (loop1): Test dummy encryption mode enabled [ 280.085158][ T9312] F2FS-fs (loop1): invalid crc value [ 280.192089][ T9312] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 280.192202][ T9312] loop1: lost filesystem error report for type 5 error -117 [ 280.212407][ T9312] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 280.216639][ T9312] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0 [ 280.216677][ T9312] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0 [ 280.216722][ T9312] F2FS-fs (loop1): Start checkpoint disabled! [ 280.253087][ T9312] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0 [ 280.263420][ T9312] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 280.263459][ T9312] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 280.377877][ T9334] netlink: 27 bytes leftover after parsing attributes in process `syz.5.1324'. [ 281.387057][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.889819][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.320411][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.341222][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.342403][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.344324][ T5626] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.346183][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.470551][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.498608][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 282.499051][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 282.499427][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 282.504748][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 282.505540][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 282.601333][ T9376] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1340'. [ 282.984992][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.008977][ T9405] loop1: detected capacity change from 0 to 128 [ 284.118526][ T9405] bio_check_eod: 32 callbacks suppressed [ 284.118554][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.118554][ T9405] loop1: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 284.119332][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.119332][ T9405] loop1: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 284.119377][ T9405] buffer_io_error: 18 callbacks suppressed [ 284.119396][ T9405] Buffer I/O error on dev loop1, logical block 87, lost async page write [ 284.119433][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.119433][ T9405] loop1: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 284.119473][ T9405] Buffer I/O error on dev loop1, logical block 88, lost async page write [ 284.121378][ T5893] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 284.199652][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.199652][ T9405] loop1: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 284.215426][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.215426][ T9405] loop1: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 284.215482][ T9405] Buffer I/O error on dev loop1, logical block 91, lost async page write [ 284.215524][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.215524][ T9405] loop1: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 284.217080][ T9405] Buffer I/O error on dev loop1, logical block 92, lost async page write [ 284.219169][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.219169][ T9405] loop1: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 284.220126][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.220126][ T9405] loop1: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 284.220172][ T9405] Buffer I/O error on dev loop1, logical block 103, lost async page write [ 284.247484][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.247484][ T9405] loop1: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 284.247537][ T9405] Buffer I/O error on dev loop1, logical block 104, lost async page write [ 284.248208][ T9405] syz.1.1352: attempt to access beyond end of device [ 284.248208][ T9405] loop1: rw=2049, sector=210, nr_sectors = 6 limit=128 [ 284.280813][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 284.297526][ T5893] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 284.302012][ T5893] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.302085][ T5893] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 284.302128][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 284.314172][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.314215][ T5893] usb 4-1: Product: syz [ 284.314241][ T5893] usb 4-1: Manufacturer: syz [ 284.314267][ T5893] usb 4-1: SerialNumber: syz [ 284.354921][ T5893] usb 4-1: config 0 descriptor?? [ 284.418686][ T9405] Buffer I/O error on dev loop1, logical block 107, lost async page write [ 284.418734][ T9405] Buffer I/O error on dev loop1, logical block 108, lost async page write [ 284.456557][ T9405] Buffer I/O error on dev loop1, logical block 119, lost async page write [ 284.456607][ T9405] Buffer I/O error on dev loop1, logical block 120, lost async page write [ 284.518017][ T35] bridge_slave_1: left allmulticast mode [ 284.539561][ T35] bridge_slave_1: left promiscuous mode [ 284.566170][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.571869][ T5626] Bluetooth: hci3: command tx timeout [ 284.662617][ T35] bridge_slave_0: left allmulticast mode [ 284.663589][ T35] bridge_slave_0: left promiscuous mode [ 284.663878][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.857360][ T5893] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 285.174745][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.191995][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.193939][ T35] bond0 (unregistering): Released all slaves [ 285.216526][ T5768] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 285.234422][ T9411] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1354'. [ 285.275860][ T5893] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 285.276509][ T5893] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 285.380390][ T5768] usb 5-1: Using ep0 maxpacket: 16 [ 285.381185][ T5768] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 285.382359][ T5768] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.383689][ T5768] usb 5-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 285.383724][ T5768] usb 5-1: Manufacturer: syz [ 285.431350][ T5768] usb 5-1: config 0 descriptor?? [ 285.445189][ T5893] usb 4-1: USB disconnect, device number 5 [ 285.639793][ T4189] IPVS: starting estimator thread 0... [ 285.664299][ T5768] usbhid 5-1:0.0: can't add hid device: -71 [ 285.664426][ T5768] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 285.694129][ T5768] usb 5-1: USB disconnect, device number 14 [ 285.740358][ T9428] IPVS: using max 23 ests per chain, 55200 per kthread [ 286.493641][ T9443] loop1: detected capacity change from 0 to 1024 [ 286.650639][ T5626] Bluetooth: hci3: command tx timeout [ 286.702552][ T9443] hfsplus: bad catalog file entry [ 286.818857][ T35] hsr_slave_0: left promiscuous mode [ 286.858687][ T35] hsr_slave_1: left promiscuous mode [ 286.873107][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.873172][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.898719][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.898751][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.088395][ T62] hfsplus: bad catalog file entry [ 287.256262][ T35] veth1_macvtap: left promiscuous mode [ 287.256361][ T35] veth0_macvtap: left promiscuous mode [ 287.256578][ T35] veth1_vlan: left promiscuous mode [ 287.256704][ T35] veth0_vlan: left promiscuous mode [ 288.294350][ T35] team0 (unregistering): Port device team_slave_1 removed [ 288.325314][ T35] team0 (unregistering): Port device team_slave_0 removed [ 288.730564][ T5626] Bluetooth: hci3: command tx timeout [ 288.933549][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 289.304057][ T9481] loop2: detected capacity change from 0 to 131072 [ 289.352155][ T9481] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 289.550497][ T9481] XFS (loop2): Starting recovery (logdev: internal) [ 289.622331][ T9481] XFS (loop2): Ending recovery (logdev: internal) [ 289.729493][ T9503] loop1: detected capacity change from 0 to 64 [ 289.850473][ T5618] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 290.741250][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 290.811220][ T5626] Bluetooth: hci3: command tx timeout [ 290.897344][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 290.908287][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 290.920975][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.921032][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.921183][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 290.921251][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.933902][ T10] usb 4-1: config 0 descriptor?? [ 291.408985][ T10] hid_parser_main: 8 callbacks suppressed [ 291.409017][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.409051][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.423508][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.423550][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.423590][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.423623][ T10] microsoft 0003:045E:07DA.0019: ignoring exceeding usage max [ 291.442425][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.442470][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.442504][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.442538][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.442572][ T10] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0 [ 291.558708][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.562493][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.562652][ T9371] bridge_slave_0: entered allmulticast mode [ 291.582770][ T9371] bridge_slave_0: entered promiscuous mode [ 291.598073][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0019/input/input29 [ 291.602023][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.603879][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.604100][ T9371] bridge_slave_1: entered allmulticast mode [ 291.728538][ T9371] bridge_slave_1: entered promiscuous mode [ 291.734451][ T10] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 291.805200][ T9542] rnbd_client L202: map_device: Unknown parameter or missing value 's' [ 291.833289][ T10] usb 4-1: USB disconnect, device number 6 [ 291.894617][ T9546] loop4: detected capacity change from 0 to 128 [ 291.897419][ T9546] EXT4-fs: Ignoring removed nobh option [ 291.948026][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 291.965441][ T9546] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 291.965934][ T9546] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.105404][ T9546] fscrypt (loop4, inode 12): Reserved bits set in encryption policy [ 292.140435][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.159339][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.202165][ T9544] mmap: syz.1.1397 (9544) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 292.304575][ T5621] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 292.487549][ T9371] team0: Port device team_slave_0 added [ 292.503524][ T9371] team0: Port device team_slave_1 added [ 292.822151][ T9557] fido_id[9557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 292.966999][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.972827][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.972879][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.979467][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.979492][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.979540][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.189882][ T9568] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1399'. [ 293.252636][ T9371] hsr_slave_0: entered promiscuous mode [ 293.294162][ T9371] hsr_slave_1: entered promiscuous mode [ 293.319533][ T9371] debugfs: 'hsr0' already exists in 'hsr' [ 293.319560][ T9371] Cannot create hsr debugfs directory [ 293.441800][ T9572] loop5: detected capacity change from 0 to 512 [ 293.516788][ T9572] EXT4-fs (loop5): 1 truncate cleaned up [ 293.548813][ T9572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.584631][ T9578] loop3: detected capacity change from 0 to 256 [ 293.608636][ T9578] exfat: Deprecated parameter 'utf8' [ 293.677363][ T9572] EXT4-fs error (device loop5): ext4_validate_block_bitmap:444: comm syz.5.1402: bg 0: block 465: padding at end of block bitmap is not set [ 293.682342][ T9572] EXT4-fs (loop5): Remounting filesystem read-only [ 293.707348][ T9578] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 293.779321][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1403'. [ 293.996756][ T5622] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.177506][ T9585] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 294.247856][ T9585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 294.261536][ T9585] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 294.336072][ T9590] loop3: detected capacity change from 0 to 1024 [ 294.471045][ T9590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.583646][ T5626] block nbd1: Receive control failed (result -32) [ 295.018941][ T5617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.733794][ T9624] block nbd0: reconnected socket [ 295.733825][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 295.773060][ T5626] block nbd0: Receive control failed (result -32) [ 295.929476][ T9625] batman_adv: batadv0: Adding interface: macvtap1 [ 295.929503][ T9625] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.929551][ T9625] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 296.018812][ T62] bridge_slave_1: left allmulticast mode [ 296.018853][ T62] bridge_slave_1: left promiscuous mode [ 296.019118][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.047887][ T62] bridge_slave_0: left allmulticast mode [ 296.047933][ T62] bridge_slave_0: left promiscuous mode [ 296.049240][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.402600][ T9640] loop2: detected capacity change from 0 to 16 [ 296.441375][ T9640] erofs (device loop2): DAX unsupported by block device. Turning off DAX. [ 296.445347][ T9640] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 296.445734][ T9640] erofs (device loop2): mounted with root inode @ nid 36. [ 296.492298][ T9640] erofs (device loop2): readahead error at folio 7 @ nid 36 [ 296.492339][ T9640] erofs (device loop2): readahead error at folio 6 @ nid 36 [ 296.492370][ T9640] erofs (device loop2): bogus lookback distance 0 @ lcn 47 of nid 36 [ 296.492404][ T9640] erofs (device loop2): readahead error at folio 5 @ nid 36 [ 296.492980][ T9640] erofs (device loop2): bogus lookback distance 0 @ lcn 38 of nid 36 [ 296.493016][ T9640] erofs (device loop2): readahead error at folio 4 @ nid 36 [ 296.493098][ T9640] erofs (device loop2): readahead error at folio 3 @ nid 36 [ 296.493129][ T9640] erofs (device loop2): readahead error at folio 2 @ nid 36 [ 296.494680][ T9640] erofs (device loop2): readahead error at folio 1 @ nid 36 [ 296.494976][ T9640] erofs (device loop2): bogus lookback distance 0 @ lcn 4 of nid 36 [ 296.495011][ T9640] erofs (device loop2): readahead error at folio 0 @ nid 36 [ 296.495164][ T9640] bio_check_eod: 32 callbacks suppressed [ 296.495186][ T9640] syz.2.1425: attempt to access beyond end of device [ 296.495186][ T9640] loop2: rw=524288, sector=89, nr_sectors = 1 limit=16 [ 296.495462][ T9640] syz.2.1425: attempt to access beyond end of device [ 296.495462][ T9640] loop2: rw=524288, sector=65642, nr_sectors = 1 limit=16 [ 296.495626][ T9640] syz.2.1425: attempt to access beyond end of device [ 296.495626][ T9640] loop2: rw=524288, sector=98797, nr_sectors = 1 limit=16 [ 296.497029][ T9640] syz.2.1425: attempt to access beyond end of device [ 296.497029][ T9640] loop2: rw=524288, sector=36, nr_sectors = 1 limit=16 [ 296.546493][ T9640] erofs (device loop2): bogus lookback distance 0 @ lcn 4 of nid 36 [ 296.563731][ T9640] syz.2.1425: attempt to access beyond end of device [ 296.563731][ T9640] loop2: rw=0, sector=89, nr_sectors = 1 limit=16 [ 296.563948][ T9640] syz.2.1425: attempt to access beyond end of device [ 296.563948][ T9640] loop2: rw=0, sector=65642, nr_sectors = 1 limit=16 [ 296.708338][ T9640] erofs (device loop2): read error -5 @ 0 of nid 36 [ 296.708448][ T9640] erofs (device loop2): failed to readdir of logical block 0 of nid 36 [ 296.708766][ T9641] erofs (device loop2): bogus lookback distance 0 @ lcn 4 of nid 36 [ 296.709736][ T9641] syz.2.1425: attempt to access beyond end of device [ 296.709736][ T9641] loop2: rw=0, sector=89, nr_sectors = 1 limit=16 [ 296.709909][ T9641] syz.2.1425: attempt to access beyond end of device [ 296.709909][ T9641] loop2: rw=0, sector=65642, nr_sectors = 1 limit=16 [ 296.716872][ T9641] erofs (device loop2): read error -5 @ 0 of nid 36 [ 296.716967][ T9641] erofs (device loop2): failed to readdir of logical block 0 of nid 36 [ 296.849488][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.878793][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.896562][ T62] bond0 (unregistering): Released all slaves [ 296.923929][ T62] bond1 (unregistering): Released all slaves [ 296.983917][ T31] audit: type=1326 audit(1789778612.712:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 296.984004][ T31] audit: type=1326 audit(1789778612.712:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.006004][ T31] audit: type=1326 audit(1789778612.732:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.008984][ T31] audit: type=1326 audit(1789778612.732:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.009100][ T31] audit: type=1326 audit(1789778612.732:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.021716][ T31] audit: type=1326 audit(1789778612.742:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.021800][ T31] audit: type=1326 audit(1789778612.742:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.021873][ T31] audit: type=1326 audit(1789778612.742:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.026190][ T31] audit: type=1326 audit(1789778612.752:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.026267][ T31] audit: type=1326 audit(1789778612.752:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9645 comm="syz.2.1427" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306799e159 code=0x7ffc0000 [ 297.414900][ T9638] vxlan0: entered promiscuous mode [ 297.414938][ T9638] vxlan0: entered allmulticast mode [ 297.738508][ T9656] loop5: detected capacity change from 0 to 256 [ 297.907174][ T9371] [ 297.909560][ T9371] ====================================================== [ 297.915398][ T9660] loop4: detected capacity change from 0 to 512 [ 297.923161][ T9371] WARNING: possible circular locking dependency detected [ 297.930196][ T9371] syzkaller #0 Tainted: G L [ 297.936198][ T9371] ------------------------------------------------------ [ 297.943221][ T9371] syz-executor/9371 is trying to acquire lock: [ 297.949389][ T9371] ffff88801d2bcaa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x3b/0x70 [ 297.959309][ T9371] [ 297.959309][ T9371] but task is already holding lock: [ 297.966691][ T9371] ffffffff8fe1f940 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xcd/0x260 [ 297.975511][ T9371] [ 297.975511][ T9371] which lock already depends on the new lock. [ 297.975511][ T9371] [ 297.985935][ T9371] [ 297.985935][ T9371] the existing dependency chain (in reverse order) is: [ 297.994965][ T9371] [ 297.994965][ T9371] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 298.002214][ T9371] lock_acquire+0x1d1/0x380 [ 298.007266][ T9371] __mutex_lock+0x1a4/0x1bd0 [ 298.012404][ T9371] get_device_parent+0xff/0x4c0 [ 298.017820][ T9371] device_add+0xc3b/0x1970 [ 298.022797][ T9371] device_create_groups_vargs+0x1f8/0x270 [ 298.029056][ T9371] device_create+0xed/0x130 [ 298.034096][ T9371] msr_device_create+0x31/0x70 [ 298.039431][ T9371] cpuhp_invoke_callback+0x3b4/0x9a0 [ 298.045275][ T9371] cpuhp_thread_fun+0x3e9/0x7c0 [ 298.050703][ T9371] smpboot_thread_fn+0x3d3/0xab0 [ 298.056198][ T9371] kthread+0x373/0x450 [ 298.060903][ T9371] ret_from_fork+0x730/0xd60 [ 298.066036][ T9371] ret_from_fork_asm+0x1a/0x30 [ 298.071346][ T9371] [ 298.071346][ T9371] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 298.078990][ T9371] lock_acquire+0x1d1/0x380 [ 298.084026][ T9371] cpuhp_thread_fun+0x146/0x7c0 [ 298.089430][ T9371] smpboot_thread_fn+0x3d3/0xab0 [ 298.094908][ T9371] kthread+0x373/0x450 [ 298.099519][ T9371] ret_from_fork+0x730/0xd60 [ 298.104641][ T9371] ret_from_fork_asm+0x1a/0x30 [ 298.109946][ T9371] [ 298.109946][ T9371] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 298.117707][ T9371] lock_acquire+0x1d1/0x380 [ 298.122745][ T9371] cpus_read_lock+0x42/0x170 [ 298.127888][ T9371] static_key_slow_inc+0x12/0x30 [ 298.133366][ T9371] nbd_genl_reconnect_sock_cb+0x39f/0x990 [ 298.139852][ T9371] nbd_genl_foreach_sock+0x2ab/0x3e0 [ 298.145683][ T9371] nbd_genl_reconfigure+0x861/0xde0 [ 298.151431][ T9371] genl_family_rcv_msg_doit+0x214/0x300 [ 298.157528][ T9371] genl_rcv_msg+0x560/0x800 [ 298.162574][ T9371] netlink_rcv_skb+0x159/0x420 [ 298.167880][ T9371] genl_rcv+0x28/0x40 [ 298.172402][ T9371] netlink_unicast+0x585/0x850 [ 298.177715][ T9371] netlink_sendmsg+0x8b0/0xda0 [ 298.183019][ T9371] ____sys_sendmsg+0xa4d/0xbe0 [ 298.188314][ T9371] ___sys_sendmsg+0x190/0x1e0 [ 298.193524][ T9371] __sys_sendmsg+0x160/0x210 [ 298.198659][ T9371] do_syscall_64+0x123/0x790 [ 298.203777][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.210205][ T9371] [ 298.210205][ T9371] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 298.217885][ T9371] lock_acquire+0x1d1/0x380 [ 298.222922][ T9371] __mutex_lock+0x1a4/0x1bd0 [ 298.228087][ T9371] nbd_queue_rq+0x42d/0xfa0 [ 298.233173][ T9371] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 298.239270][ T9371] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 298.246142][ T9371] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 298.252670][ T9371] blk_mq_run_work_fn+0x135/0x380 [ 298.258238][ T9371] process_one_work+0xac7/0x1b10 [ 298.263826][ T9371] worker_thread+0x5ef/0xe50 [ 298.268974][ T9371] kthread+0x373/0x450 [ 298.273586][ T9371] ret_from_fork+0x730/0xd60 [ 298.278706][ T9371] ret_from_fork_asm+0x1a/0x30 [ 298.283996][ T9371] [ 298.283996][ T9371] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 298.291228][ T9371] lock_acquire+0x1d1/0x380 [ 298.296261][ T9371] __mutex_lock+0x1a4/0x1bd0 [ 298.301379][ T9371] nbd_queue_rq+0xba/0xfa0 [ 298.306355][ T9371] blk_mq_dispatch_rq_list+0x428/0x1e60 [ 298.312511][ T9371] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 298.319389][ T9371] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 298.325938][ T9371] blk_mq_run_work_fn+0x135/0x380 [ 298.331697][ T9371] process_one_work+0xac7/0x1b10 [ 298.337208][ T9371] worker_thread+0x5ef/0xe50 [ 298.342528][ T9371] kthread+0x373/0x450 [ 298.347151][ T9371] ret_from_fork+0x730/0xd60 [ 298.352285][ T9371] ret_from_fork_asm+0x1a/0x30 [ 298.357600][ T9371] [ 298.357600][ T9371] -> #5 (set->srcu){.+.+}-{0:0}: [ 298.364756][ T9371] lock_sync+0xb5/0x120 [ 298.369543][ T9371] __synchronize_srcu+0xa2/0x300 [ 298.375021][ T9371] blk_mq_quiesce_queue+0x149/0x1c0 [ 298.380762][ T9371] elevator_switch+0x17b/0x7e0 [ 298.386070][ T9371] elevator_change+0x352/0x530 [ 298.391381][ T9371] elevator_set_default+0x29e/0x360 [ 298.397121][ T9371] blk_register_queue+0x48e/0x630 [ 298.402682][ T9371] __add_disk+0x7dd/0xf10 [ 298.407563][ T9371] add_disk_fwnode+0x118/0x480 [ 298.412855][ T9371] nbd_dev_add+0x779/0xb10 [ 298.417825][ T9371] nbd_init+0x2c5/0x2e0 [ 298.422512][ T9371] do_one_initcall+0x11c/0x6f0 [ 298.427808][ T9371] kernel_init_freeable+0x6ea/0x7b0 [ 298.433630][ T9371] kernel_init+0x21/0x1e0 [ 298.438510][ T9371] ret_from_fork+0x730/0xd60 [ 298.443672][ T9371] ret_from_fork_asm+0x1a/0x30 [ 298.448974][ T9371] [ 298.448974][ T9371] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 298.456825][ T9371] lock_acquire+0x1d1/0x380 [ 298.461869][ T9371] __mutex_lock+0x1a4/0x1bd0 [ 298.466999][ T9371] elevator_change+0x1bc/0x530 [ 298.472309][ T9371] elv_iosched_store+0x3be/0x460 [ 298.477791][ T9371] queue_attr_store+0x25f/0x2f0 [ 298.483171][ T9371] sysfs_kf_write+0xf2/0x150 [ 298.488489][ T9371] kernfs_fop_write_iter+0x3e0/0x5f0 [ 298.494408][ T9371] vfs_write+0x6af/0x1050 [ 298.499303][ T9371] ksys_write+0x12a/0x250 [ 298.504209][ T9371] do_syscall_64+0x123/0x790 [ 298.509337][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.515771][ T9371] [ 298.515771][ T9371] -> #3 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 298.524415][ T9371] lock_acquire+0x1d1/0x380 [ 298.529452][ T9371] blk_alloc_queue+0x610/0x790 [ 298.534844][ T9371] blk_mq_alloc_queue+0x174/0x290 [ 298.540420][ T9371] __blk_mq_alloc_disk+0x29/0x120 [ 298.546081][ T9371] null_add_dev+0xdf8/0x1df0 [ 298.551297][ T9371] null_init+0x36b/0x460 [ 298.556119][ T9371] do_one_initcall+0x11c/0x6f0 [ 298.561434][ T9371] kernel_init_freeable+0x6ea/0x7b0 [ 298.567180][ T9371] kernel_init+0x21/0x1e0 [ 298.572310][ T9371] ret_from_fork+0x730/0xd60 [ 298.577435][ T9371] ret_from_fork_asm+0x1a/0x30 [ 298.582733][ T9371] [ 298.582733][ T9371] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 298.590050][ T9371] lock_acquire+0x1d1/0x380 [ 298.595101][ T9371] fs_reclaim_acquire+0xc4/0x100 [ 298.600587][ T9371] kmem_cache_alloc_lru_noprof+0x5f/0x6a0 [ 298.606879][ T9371] alloc_inode+0x183/0x250 [ 298.611946][ T9371] iget_locked+0x1d9/0x6d0 [ 298.616936][ T9371] kernfs_get_inode+0x46/0x470 [ 298.622242][ T9371] kernfs_get_tree+0x636/0xbb0 [ 298.627539][ T9371] vfs_get_tree+0x92/0x320 [ 298.632533][ T9371] path_mount+0x7d0/0x24c0 [ 298.637494][ T9371] __x64_sys_mount+0x293/0x310 [ 298.642798][ T9371] do_syscall_64+0x123/0x790 [ 298.647931][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.654360][ T9371] [ 298.654360][ T9371] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 298.662392][ T9371] lock_acquire+0x1d1/0x380 [ 298.667457][ T9371] down_write+0x8b/0x1f0 [ 298.672315][ T9371] kernfs_remove_by_name_ns+0x51/0x120 [ 298.678382][ T9371] device_links_driver_bound+0xed/0xca0 [ 298.684488][ T9371] driver_bound+0xf0/0x220 [ 298.689446][ T9371] really_probe+0x3d4/0xa60 [ 298.694490][ T9371] __driver_probe_device+0x210/0x460 [ 298.700325][ T9371] driver_probe_device+0x4a/0x140 [ 298.705901][ T9371] __device_attach_driver+0x1df/0x320 [ 298.711911][ T9371] bus_for_each_drv+0x159/0x1e0 [ 298.717301][ T9371] __device_attach+0x1e4/0x4d0 [ 298.722612][ T9371] device_initial_probe+0xaf/0xd0 [ 298.728184][ T9371] bus_probe_device+0x64/0x160 [ 298.733506][ T9371] device_add+0x121d/0x1970 [ 298.738582][ T9371] faux_device_create_with_groups+0x1d9/0x300 [ 298.745205][ T9371] regulator_dummy_init+0x1e/0x40 [ 298.750779][ T9371] regulator_init+0x14e/0x180 [ 298.755999][ T9371] do_one_initcall+0x11c/0x6f0 [ 298.761298][ T9371] kernel_init_freeable+0x6ea/0x7b0 [ 298.767063][ T9371] kernel_init+0x21/0x1e0 [ 298.771940][ T9371] ret_from_fork+0x730/0xd60 [ 298.777065][ T9371] ret_from_fork_asm+0x1a/0x30 [ 298.782368][ T9371] [ 298.782368][ T9371] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 298.791114][ T9371] check_prev_add+0xeb/0xe60 [ 298.796271][ T9371] __lock_acquire+0x1528/0x1f40 [ 298.801657][ T9371] lock_acquire+0x1d1/0x380 [ 298.806697][ T9371] down_read+0x99/0x4c0 [ 298.811392][ T9371] kernfs_remove+0x3b/0x70 [ 298.816371][ T9371] sysfs_remove_dir+0xc8/0x110 [ 298.821694][ T9371] __kobject_del+0xe2/0x220 [ 298.826743][ T9371] kobject_del+0x3f/0x60 [ 298.831527][ T9371] cleanup_glue_dir+0x203/0x260 [ 298.836966][ T9371] device_del+0x63b/0x9b0 [ 298.841887][ T9371] unregister_netdevice_many_notify+0x1503/0x2150 [ 298.848985][ T9371] unregister_netdevice_queue+0x30b/0x3c0 [ 298.855292][ T9371] nsim_destroy+0x23e/0x970 [ 298.860420][ T9371] __nsim_dev_port_del+0x194/0x2b0 [ 298.866092][ T9371] nsim_dev_reload_destroy+0x10a/0x490 [ 298.872122][ T9371] nsim_drv_remove+0x52/0x1e0 [ 298.877363][ T9371] device_remove+0xcb/0x180 [ 298.882412][ T9371] device_release_driver_internal+0x44e/0x620 [ 298.889036][ T9371] bus_remove_device+0x2bc/0x560 [ 298.894514][ T9371] device_del+0x376/0x9b0 [ 298.899397][ T9371] device_unregister+0x1d/0xe0 [ 298.904741][ T9371] del_device_store+0x346/0x480 [ 298.910146][ T9371] bus_attr_store+0x74/0xb0 [ 298.915195][ T9371] sysfs_kf_write+0xf2/0x150 [ 298.920353][ T9371] kernfs_fop_write_iter+0x3e0/0x5f0 [ 298.926195][ T9371] vfs_write+0x6af/0x1050 [ 298.931074][ T9371] ksys_write+0x12a/0x250 [ 298.935958][ T9371] do_syscall_64+0x123/0x790 [ 298.941081][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.947528][ T9371] [ 298.947528][ T9371] other info that might help us debug this: [ 298.947528][ T9371] [ 298.957871][ T9371] Chain exists of: [ 298.957871][ T9371] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 298.957871][ T9371] [ 298.971305][ T9371] Possible unsafe locking scenario: [ 298.971305][ T9371] [ 298.978758][ T9371] CPU0 CPU1 [ 298.984120][ T9371] ---- ---- [ 298.989483][ T9371] lock(gdp_mutex); [ 298.993391][ T9371] lock(cpuhp_state-up); [ 299.000257][ T9371] lock(gdp_mutex); [ 299.006683][ T9371] rlock(&root->kernfs_supers_rwsem); [ 299.012153][ T9371] [ 299.012153][ T9371] *** DEADLOCK *** [ 299.012153][ T9371] [ 299.020308][ T9371] locks held by syz-executor/9371: 8, last CPU#0: [ 299.026728][ T9371] #0: ffff888036774460 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 299.035783][ T9371] #1: ffff8880751c7080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 299.045600][ T9371] #2: ffff88802a9d91e8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 299.055684][ T9371] #3: ffffffff9023ca00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 299.066016][ T9371] #4: ffff88802cce6128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 299.076626][ T9371] #5: ffff888023368258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 299.086722][ T9371] #6: ffffffff90cd62c0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x1a6/0x970 [ 299.095775][ T9371] #7: ffffffff8fe1f940 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xcd/0x260 [ 299.104982][ T9371] [ 299.104982][ T9371] stack backtrace: [ 299.110885][ T9371] CPU: 0 UID: 0 PID: 9371 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 299.121932][ T9371] Tainted: [L]=SOFTLOCKUP [ 299.126282][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 299.136347][ T9371] Call Trace: [ 299.139670][ T9371] [ 299.142602][ T9371] dump_stack_lvl+0x100/0x190 [ 299.147329][ T9371] print_circular_bug.cold+0x178/0x1be [ 299.152856][ T9371] check_noncircular+0x146/0x160 [ 299.157831][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.163494][ T9371] check_prev_add+0xeb/0xe60 [ 299.168128][ T9371] __lock_acquire+0x1528/0x1f40 [ 299.173009][ T9371] lock_acquire+0x1d1/0x380 [ 299.177527][ T9371] ? kernfs_remove+0x3b/0x70 [ 299.182149][ T9371] ? __pfx___might_resched+0x10/0x10 [ 299.187484][ T9371] down_read+0x99/0x4c0 [ 299.191667][ T9371] ? kernfs_remove+0x3b/0x70 [ 299.196289][ T9371] ? find_held_lock+0x2b/0x80 [ 299.200995][ T9371] ? __pfx_down_read+0x10/0x10 [ 299.205777][ T9371] ? kernfs_root+0xee/0x2a0 [ 299.210304][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.215992][ T9371] kernfs_remove+0x3b/0x70 [ 299.220448][ T9371] sysfs_remove_dir+0xc8/0x110 [ 299.225229][ T9371] __kobject_del+0xe2/0x220 [ 299.229758][ T9371] kobject_del+0x3f/0x60 [ 299.234023][ T9371] cleanup_glue_dir+0x203/0x260 [ 299.238895][ T9371] device_del+0x63b/0x9b0 [ 299.243250][ T9371] ? __pfx_device_del+0x10/0x10 [ 299.248166][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.253819][ T9371] ? netdev_unregister_kobject+0x2da/0x540 [ 299.259653][ T9371] unregister_netdevice_many_notify+0x1503/0x2150 [ 299.266118][ T9371] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 299.272924][ T9371] ? __pfx___mutex_lock+0x10/0x10 [ 299.277966][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.283618][ T9371] ? kvfree_call_rcu+0x1c0/0x4f0 [ 299.288619][ T9371] unregister_netdevice_queue+0x30b/0x3c0 [ 299.294378][ T9371] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 299.300662][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.306337][ T9371] nsim_destroy+0x23e/0x970 [ 299.310870][ T9371] ? nsim_dev_reload_destroy+0x90/0x490 [ 299.316540][ T9371] ? nsim_dev_reload_destroy+0x10a/0x490 [ 299.322338][ T9371] __nsim_dev_port_del+0x194/0x2b0 [ 299.327502][ T9371] nsim_dev_reload_destroy+0x10a/0x490 [ 299.333026][ T9371] nsim_drv_remove+0x52/0x1e0 [ 299.337750][ T9371] ? __pfx_nsim_bus_remove+0x10/0x10 [ 299.343062][ T9371] device_remove+0xcb/0x180 [ 299.347601][ T9371] device_release_driver_internal+0x44e/0x620 [ 299.353701][ T9371] ? __entry_text_end+0x102035/0x102039 [ 299.359626][ T9371] bus_remove_device+0x2bc/0x560 [ 299.364594][ T9371] ? __pfx_bus_remove_device+0x10/0x10 [ 299.370078][ T9371] ? __pfx_device_remove_attrs+0x10/0x10 [ 299.375754][ T9371] device_del+0x376/0x9b0 [ 299.380115][ T9371] ? __pfx_device_del+0x10/0x10 [ 299.384992][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.390654][ T9371] ? __lock_acquire+0x5c0/0x1f40 [ 299.395650][ T9371] device_unregister+0x1d/0xe0 [ 299.400440][ T9371] del_device_store+0x346/0x480 [ 299.405321][ T9371] ? __pfx_del_device_store+0x10/0x10 [ 299.410717][ T9371] ? find_held_lock+0x2b/0x80 [ 299.415422][ T9371] ? sysfs_file_kobj+0xe4/0x290 [ 299.420306][ T9371] ? sysfs_file_kobj+0xe4/0x290 [ 299.425193][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.430846][ T9371] ? __pfx_del_device_store+0x10/0x10 [ 299.436242][ T9371] bus_attr_store+0x74/0xb0 [ 299.440760][ T9371] ? __pfx_bus_attr_store+0x10/0x10 [ 299.445971][ T9371] sysfs_kf_write+0xf2/0x150 [ 299.450600][ T9371] kernfs_fop_write_iter+0x3e0/0x5f0 [ 299.455917][ T9371] ? __pfx_sysfs_kf_write+0x10/0x10 [ 299.461159][ T9371] vfs_write+0x6af/0x1050 [ 299.465521][ T9371] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 299.471365][ T9371] ? __pfx_vfs_write+0x10/0x10 [ 299.476155][ T9371] ? __schedule+0x126b/0x6920 [ 299.480868][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.486525][ T9371] ? sched_clock_cpu+0x6c/0x570 [ 299.491412][ T9371] ksys_write+0x12a/0x250 [ 299.495772][ T9371] ? __pfx_ksys_write+0x10/0x10 [ 299.500648][ T9371] ? srso_alias_return_thunk+0x5/0xfbef5 [ 299.506346][ T9371] do_syscall_64+0x123/0x790 [ 299.510954][ T9371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.516862][ T9371] RIP: 0033:0x7fccd5b5e98e [ 299.521283][ T9371] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 299.540915][ T9371] RSP: 002b:00007ffee57dffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.549369][ T9371] RAX: ffffffffffffffda RBX: 000055555b09b500 RCX: 00007fccd5b5e98e [ 299.557372][ T9371] RDX: 0000000000000001 RSI: 00007ffee57e0040 RDI: 0000000000000005 [ 299.565356][ T9371] RBP: 00007fccd5c358ee R08: 0000000000000000 R09: 0000000000000000 [ 299.573338][ T9371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.581324][ T9371] R13: 00007ffee57e0040 R14: 00007fccd6954620 R15: 0000000000000003 [ 299.589323][ T9371] [ 299.664337][ T5893] logitech-hidpp-device 0005:046D:B012.001A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 299.689849][ T9660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.689971][ T9660] ext4 filesystem being mounted at /231/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.731707][ T4189] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.733504][ T4189] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.733633][ T4189] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.734275][ T4189] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.761303][ T5768] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 299.910744][ T5768] usb 3-1: Using ep0 maxpacket: 32 [ 299.911915][ T5768] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 299.916468][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.916522][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.916575][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.918485][ T5768] usb 3-1: config 0 descriptor?? [ 299.920618][ T5768] hub 3-1:0.0: USB hub found [ 299.949607][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.991797][ T9666] fido_id[9666]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 300.071156][ T62] hsr_slave_0: left promiscuous mode [ 300.074104][ T62] hsr_slave_1: left promiscuous mode [ 300.075384][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.075412][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.108039][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.108069][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.134530][ T62] veth1_macvtap: left promiscuous mode [ 300.134577][ T62] veth0_macvtap: left promiscuous mode [ 300.134675][ T62] veth1_vlan: left promiscuous mode [ 300.134737][ T62] veth0_vlan: left promiscuous mode [ 300.149369][ T5768] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 300.292607][ T62] team0 (unregistering): Port device team_slave_1 removed [ 300.299051][ T62] team0 (unregistering): Port device team_slave_0 removed [ 300.405235][ T9371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.409368][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.412493][ T9371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.419709][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.421300][ T9371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.427267][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.428428][ T9371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.433676][ T9371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 300.558489][ T5768] hid_parser_main: 8 callbacks suppressed [ 300.558524][ T5768] hid-generic 0003:046D:C31C.001B: unknown main item tag 0x0 [ 300.566740][ T5768] hid-generic 0003:046D:C31C.001B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 300.600375][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.625145][ T9371] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.669058][ T997] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.669144][ T997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.678547][ T997] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.678634][ T997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.747696][ T9371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.813031][ T62] IPVS: stop unused estimator thread 0... [ 300.921916][ T5745] usb 3-1: USB disconnect, device number 10 [ 301.235478][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.269629][ T9371] veth0_vlan: entered promiscuous mode [ 301.275970][ T9371] veth1_vlan: entered promiscuous mode [ 301.302489][ T9371] veth0_macvtap: entered promiscuous mode [ 301.313578][ T9371] veth1_macvtap: entered promiscuous mode [ 301.343039][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.355075][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.390937][ T4578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.392673][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.392735][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.392790][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.432859][ T9371] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 301.465498][ T997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.465530][ T997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.468338][ T9371] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 301.496848][ T4578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.496879][ T4578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50