last executing test programs: 1m52.431056132s ago: executing program 1 (id=2626): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad", 0x1) 1m51.971946099s ago: executing program 1 (id=2632): r0 = fanotify_init(0x20, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) fanotify_mark(r0, 0x2, 0x1, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1m51.642277941s ago: executing program 1 (id=2635): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x468fe4e8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xa}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4048000) 1m51.335539321s ago: executing program 1 (id=2638): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000580)=ANY=[@ANYBLOB='zero_size_dir,iocharset=iso8ep_last_dots,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macgaelic,sys_tz,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,\x00'], 0xfd, 0x152d, &(0x7f00000034c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) 1m50.657835098s ago: executing program 1 (id=2644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 1m46.407627503s ago: executing program 1 (id=2681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x410}, 0x1, 0x0, 0x0, 0x40010}, 0x4008004) 1m45.692860369s ago: executing program 32 (id=2681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x410}, 0x1, 0x0, 0x0, 0x40010}, 0x4008004) 8.912035415s ago: executing program 0 (id=3397): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000001300)=0xffff0002) 8.255416779s ago: executing program 0 (id=3405): r0 = socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @empty}}, [0x0, 0x7ffffffffffffd, 0x72219, 0x0, 0x400000000000, 0x2, 0x5, 0x4c8, 0x0, 0x0, 0x10, 0x4, 0x0, 0xfffffffffffffffe, 0x9]}, &(0x7f0000000000)=0x100) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 8.005442357s ago: executing program 0 (id=3409): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x62d0, &(0x7f000001fb40)="$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") unlink(&(0x7f0000000280)='./file1\x00') syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a0ac28, &(0x7f0000000200)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 5.08903436s ago: executing program 0 (id=3429): prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) r0 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.744724288s ago: executing program 3 (id=3432): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xf, 0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xd, [0x5, 0x1, 0xc, 0x9, 0x1, 0xfd, 0x3, 0xa, 0x1, 0xa, 0xc, 0x0, 0xb, 0xf, 0x5, 0xa], 0x1, [0x3, 0x9, 0x9, 0xfc00, 0x77, 0x0, 0x8834, 0x40, 0x4, 0xc445, 0xffff, 0x1008, 0x6, 0xb840, 0x9, 0x3], [0x9, 0xde, 0x1ff, 0x4, 0x8, 0x4, 0xb, 0xd, 0x3, 0x1, 0x4, 0x7, 0x7, 0x268, 0x7fe, 0x2d]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff00000000017c1200040042800c00018006000600894f0000970002809470c4b9d425894604f2ef9d2877c76e6cff2cc03746b35836c0acd8948b974978ed58bdf5911ccfaed74609301189929cf0be024fe625adfb8a2230958e80bbcd69193952aff71c16a71b319c97f68d31a04ce3e42faf6f9a9080bc71d6fc8e88a759a2622cf548697149accdc2c647d3d025be3f7e971d8dcc3968e0c25aee12f24713c04065f88e291eec1dc708de4772dc0004"], 0xc0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4.635625818s ago: executing program 0 (id=3433): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) 4.411200068s ago: executing program 3 (id=3435): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905080000"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.026547296s ago: executing program 2 (id=3437): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x10, 0x1}, 0x94) 3.932309576s ago: executing program 4 (id=3438): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001380)=""/4085, 0xff5}], 0x1}, 0x7}], 0x1, 0x120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 3.724370722s ago: executing program 2 (id=3439): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x8, 0x8007, 0xd95, 0x6, 0x13, "00000000000000dd"}) write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc) 3.713564716s ago: executing program 4 (id=3440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [{0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3.109513185s ago: executing program 4 (id=3441): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8080, &(0x7f0000000040)={[{@usrquota}, {@journal_dev}]}, 0x1, 0x63c, &(0x7f0000001bc0)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r0, 0xa348, 0x3) 2.815798172s ago: executing program 5 (id=3443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x203, 0x70bd2a, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x90) 2.559532487s ago: executing program 5 (id=3444): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000aff000000060a0b0400000000000000000200000014000000110001"], 0x3c}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100000e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) 2.443765704s ago: executing program 4 (id=3445): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/cgroups\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 2.185837964s ago: executing program 5 (id=3446): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) close_range(r0, 0xffffffffffffffff, 0x0) 2.183953513s ago: executing program 3 (id=3447): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f0000000080)=[{0x50, 0x8001, 0x0, 0x0}, {0xd, 0x0, 0x0, 0x0}], 0x2}) 2.10972723s ago: executing program 2 (id=3448): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x2a020400) bind$inet(r0, 0x0, 0x0) 2.012403513s ago: executing program 4 (id=3449): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 1.876869545s ago: executing program 5 (id=3450): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x80) 1.862486645s ago: executing program 4 (id=3451): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.851951077s ago: executing program 2 (id=3452): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) close(r0) 1.780306664s ago: executing program 0 (id=3453): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f00000001c0)={0x20, 0xb, 0xb, {0xb, 0x8, "c2868517b2dc8c0192"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.669831742s ago: executing program 5 (id=3454): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x6) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0) 1.4405504s ago: executing program 5 (id=3455): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d360887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) 1.235066784s ago: executing program 2 (id=3456): setresuid(0x0, 0xee00, 0x0) r0 = inotify_init() close_range(r0, 0xffffffffffffffff, 0x0) 689.947416ms ago: executing program 2 (id=3457): setrlimit(0x8, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) mlockall(0x2) 313.848278ms ago: executing program 3 (id=3458): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x4, 0x0, &(0x7f0000000000)) 193.429736ms ago: executing program 3 (id=3459): r0 = socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x1c000, 0x800}, 0x20) 0s ago: executing program 3 (id=3460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) kernel console output (not intermixed with test programs): FAT-fs (loop3): Directory bread(block 67) failed [ 357.184601][T11041] EXT4-fs (loop0): orphan cleanup on readonly fs [ 357.199214][T11041] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 357.254209][T11037] FAT-fs (loop3): Directory bread(block 68) failed [ 357.254252][T11037] FAT-fs (loop3): Directory bread(block 69) failed [ 357.254433][T11037] FAT-fs (loop3): Directory bread(block 70) failed [ 357.254515][T11037] FAT-fs (loop3): Directory bread(block 71) failed [ 357.254616][T11037] FAT-fs (loop3): Directory bread(block 72) failed [ 357.254699][T11037] FAT-fs (loop3): Directory bread(block 73) failed [ 357.302530][T11041] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 357.380085][ T5844] uclogic 0003:2179:0053.0016: interface is invalid, ignoring [ 357.458302][T11041] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 357.484684][ C1] EXT4-fs (loop0): initial error at time 357: ext4_mb_generate_buddy:1317 [ 357.484717][ C1] EXT4-fs (loop0): last error at time 357: ext4_mb_generate_buddy:1317 [ 357.578860][ T5844] usb 2-1: USB disconnect, device number 14 [ 357.640328][T11041] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.2217: corrupted inode contents [ 357.640385][T11041] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 357.961754][T11041] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #12: comm syz.0.2217: mark_inode_dirty error [ 357.961793][T11041] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 357.962319][T11041] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.2217: corrupted inode contents [ 357.962349][T11041] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 358.002677][T11041] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.2217: mark_inode_dirty error [ 358.002778][T11041] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 358.036576][T11041] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.2217: corrupted inode contents [ 358.036613][T11041] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 358.069608][T11041] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 358.070502][T11041] loop0: lost filesystem error report for type 5 error -117 [ 358.085222][T11041] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #12: comm syz.0.2217: corrupted inode contents [ 358.085321][T11041] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 358.090403][T11041] EXT4-fs error (device loop0): ext4_truncate:4690: inode #12: comm syz.0.2217: mark_inode_dirty error [ 358.090443][T11041] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 358.153954][T11041] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 358.153983][T11041] loop0: lost filesystem error report for type 5 error -117 [ 358.173188][T11041] EXT4-fs (loop0): 1 truncate cleaned up [ 358.266193][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.270613][T11041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 358.398357][T11046] loop3: detected capacity change from 0 to 512 [ 358.494686][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.600929][T11046] EXT4-fs (loop3): 1 truncate cleaned up [ 358.603921][T11053] comedi comedi3: aio_iiro_16: I/O base address or length out of range [ 358.611891][T11046] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.722402][T11057] loop1: detected capacity change from 0 to 256 [ 358.742094][T11057] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x246f1341, utbl_chksum : 0xe619d30d) [ 358.865244][T11063] loop0: detected capacity change from 0 to 512 [ 358.950814][T11063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.416980][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.539055][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.811347][T11087] loop0: detected capacity change from 0 to 128 [ 359.960871][T11091] loop4: detected capacity change from 0 to 128 [ 360.021214][T11091] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.036649][T11087] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 360.036778][T11087] hpfs: filesystem error: improperly stopped [ 360.036820][T11087] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 360.036867][T11087] hpfs: You really don't want any checks? You are crazy... [ 360.036894][T11087] hpfs: Code page index out of array [ 360.036909][T11087] hpfs: code page support is disabled [ 360.044512][T11087] hpfs: hpfs_map_4sectors(): unaligned read [ 360.044792][T11087] hpfs: hpfs_map_4sectors(): unaligned read [ 360.044826][T11087] hpfs: filesystem error: unable to find root dir [ 360.288647][ T38] audit: type=1800 audit(359.822:172): pid=11091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2239" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 360.408492][T11099] tipc: Started in network mode [ 360.408541][T11099] tipc: Node identity befda2c3d3ee, cluster identity 4711 [ 360.433547][T11099] tipc: Enabled bearer , priority 10 [ 360.744565][ T5836] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.767575][ T6073] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 360.933121][ T6073] usb 2-1: Using ep0 maxpacket: 16 [ 360.935918][ T6073] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 360.936048][ T6073] usb 2-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.936079][ T6073] usb 2-1: config 0 interface 0 has no altsetting 0 [ 360.936114][ T6073] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 360.936138][ T6073] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.025992][ T6073] usb 2-1: config 0 descriptor?? [ 361.028674][T11101] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.470367][ T6073] hid_parser_main: 73 callbacks suppressed [ 361.470395][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470427][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470455][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470483][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470510][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470550][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470578][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470605][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470632][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.470659][ T6073] samsung 0003:0419:0001.0017: unknown main item tag 0x0 [ 361.706743][ T6073] samsung 0003:0419:0001.0017: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 361.746418][ T6073] usb 2-1: USB disconnect, device number 15 [ 361.898201][T11117] loop2: detected capacity change from 0 to 512 [ 362.060770][T11115] fido_id[11115]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 362.115824][T11117] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #11: comm syz.2.2250: unexpected EA_INODE flag [ 362.115862][T11117] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 362.116311][T11117] EXT4-fs (loop2): Remounting filesystem read-only [ 362.131081][T11117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.384189][ T821] tipc: Node number set to 1830003395 [ 362.404440][T11111] sp0: Synchronizing with TNC [ 362.434294][T11112] [U] è` [ 362.459747][ T37] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 362.613806][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 362.613840][ T37] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42414, setting to 1024 [ 362.613865][ T37] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 362.613901][ T37] usb 1-1: New USB device found, idVendor=0404, idProduct=ffff, bcdDevice= 0.00 [ 362.613922][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.693491][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.915615][ T37] usb 1-1: config 0 descriptor?? [ 362.916631][T11124] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 363.126019][ T37] usbhid 1-1:0.0: can't add hid device: -71 [ 363.126110][ T37] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 363.191453][ T37] usb 1-1: USB disconnect, device number 9 [ 363.946298][T11151] loop3: detected capacity change from 0 to 64 [ 364.141067][T11151] bio_check_eod: 44 callbacks suppressed [ 364.141089][T11151] syz.3.2261: attempt to access beyond end of device [ 364.141089][T11151] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 364.141381][T11151] Buffer I/O error on dev loop3, logical block 512, async page read [ 364.141845][T11151] syz.3.2261: attempt to access beyond end of device [ 364.141845][T11151] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 364.141876][T11151] Buffer I/O error on dev loop3, logical block 56576, async page read [ 364.215298][T11154] syz.3.2261: attempt to access beyond end of device [ 364.215298][T11154] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 364.215325][T11154] Buffer I/O error on dev loop3, logical block 512, async page read [ 364.215403][T11154] syz.3.2261: attempt to access beyond end of device [ 364.215403][T11154] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 364.215421][T11154] Buffer I/O error on dev loop3, logical block 56576, async page read [ 364.383074][ T38] audit: type=1326 audit(363.992:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11160 comm="syz.2.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4ee5c819 code=0x7ffc0000 [ 364.386557][ T38] audit: type=1326 audit(363.992:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11160 comm="syz.2.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8b4ee5c819 code=0x7ffc0000 [ 364.386912][ T38] audit: type=1326 audit(363.992:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11160 comm="syz.2.2267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4ee5c819 code=0x7ffc0000 [ 364.725981][T11169] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2271'. [ 365.216947][ T821] kernel write not supported for file /dsp1 (pid: 821 comm: kworker/0:2) [ 365.826978][ T821] kernel read not supported for file /media2 (pid: 821 comm: kworker/0:2) [ 366.579506][T11208] net_ratelimit: 2934 callbacks suppressed [ 366.579531][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.602964][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.603203][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.603392][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.603579][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.603873][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.604076][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.668464][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.668686][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 366.668878][T11208] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 367.360224][T11202] loop0: detected capacity change from 0 to 32768 [ 367.485428][T11202] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 367.678708][ T6073] kernel write not supported for file /uinput (pid: 6073 comm: kworker/0:7) [ 367.806998][T11228] loop2: detected capacity change from 0 to 64 [ 367.827581][T11202] XFS (loop0): Ending clean mount [ 368.058144][ T5833] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 368.543254][T11234] loop1: detected capacity change from 0 to 8192 [ 369.636196][T11236] loop4: detected capacity change from 0 to 32768 [ 370.324073][T11259] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2311'. [ 370.648044][T11268] loop2: detected capacity change from 0 to 512 [ 370.663244][T11268] EXT4-fs: inline encryption not supported [ 370.663281][T11268] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.692905][T11268] EXT4-fs (loop2): Test dummy encryption mode enabled [ 370.734543][T11268] EXT4-fs (loop2): orphan cleanup on readonly fs [ 370.768419][T11268] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2314: inode #13: comm syz.2.2314: iget: illegal inode # [ 370.768459][T11268] loop2: lost filesystem error report for type 5 error -117 [ 370.769796][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 370.769818][ C1] EXT4-fs (loop2): initial error at time 370: ext4_orphan_get:1397 [ 370.769835][ C1] EXT4-fs (loop2): last error at time 370: ext4_orphan_get:1397 [ 370.819782][T11268] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2314: couldn't read orphan inode 13 (err -117) [ 370.819819][T11268] loop2: lost filesystem error report for type 5 error -117 [ 370.869091][T11268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 370.918024][T11268] EXT4-fs error (device loop2): ext4_resize_begin:60: comm syz.2.2314: resize_inode disabled but reserved GDT blocks non-zero [ 371.151496][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.472433][T11284] netlink: 'syz.2.2318': attribute type 10 has an invalid length. [ 371.499884][T11286] loop3: detected capacity change from 0 to 256 [ 371.611738][T11290] netlink: 'syz.2.2318': attribute type 10 has an invalid length. [ 371.611763][T11290] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2318'. [ 371.614449][T11284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.617484][T11284] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 371.617540][T11290] batadv0: entered promiscuous mode [ 371.617560][T11290] batadv0: entered allmulticast mode [ 371.825040][T11290] bond0: (slave batadv0): Releasing backup interface [ 371.955650][T11290] bridge0: port 3(batadv0) entered blocking state [ 371.956239][T11290] bridge0: port 3(batadv0) entered disabled state [ 372.010519][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2328'. [ 372.147585][T11302] loop3: detected capacity change from 0 to 128 [ 372.209986][ T1169] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 372.210028][ T1169] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 372.237454][ T38] audit: type=1326 audit(371.822:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4ee5c819 code=0x7ffc0000 [ 372.237633][ T38] audit: type=1326 audit(371.822:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4ee5c819 code=0x7ffc0000 [ 372.285922][ T38] audit: type=1326 audit(371.892:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f8b4ee5c819 code=0x7ffc0000 [ 372.286017][ T38] audit: type=1326 audit(371.892:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8b4ee56597 code=0x7ffc0000 [ 372.286065][ T38] audit: type=1326 audit(371.892:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b4edfdb99 code=0x7ffc0000 [ 372.286203][ T38] audit: type=1326 audit(371.892:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4ee5c819 code=0x7ffc0000 [ 372.286258][ T38] audit: type=1326 audit(371.892:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11303 comm="syz.2.2329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b4ee5c819 code=0x7ffc0000 [ 372.828119][T11316] loop1: detected capacity change from 0 to 64 [ 373.205656][ T37] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 373.281882][T11329] netlink: 'syz.4.2340': attribute type 10 has an invalid length. [ 373.325738][T11329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.342017][T11329] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 373.375393][ T37] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 373.375423][ T37] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 373.375444][ T37] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 373.375464][ T37] usb 3-1: config 220 has no interface number 2 [ 373.375645][ T37] usb 3-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 1024 [ 373.375673][ T37] usb 3-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 373.375701][ T37] usb 3-1: config 220 interface 0 has no altsetting 0 [ 373.375719][ T37] usb 3-1: config 220 interface 76 has no altsetting 0 [ 373.375739][ T37] usb 3-1: config 220 interface 1 has no altsetting 0 [ 373.461984][ T37] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 373.462017][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.462037][ T37] usb 3-1: Product: syz [ 373.462053][ T37] usb 3-1: Manufacturer: syz [ 373.462067][ T37] usb 3-1: SerialNumber: syz [ 373.511498][T11329] netlink: 'syz.4.2340': attribute type 10 has an invalid length. [ 373.511533][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2340'. [ 373.511571][T11329] batadv0: entered promiscuous mode [ 373.511592][T11329] batadv0: entered allmulticast mode [ 373.555937][ T820] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 373.645653][T11329] bond0: (slave batadv0): Releasing backup interface [ 373.695202][ T37] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 373.695245][ T37] uvcvideo 3-1:220.0: No valid video chain found. [ 373.697405][ T37] usb 3-1: selecting invalid altsetting 0 [ 373.728733][ T37] usb 3-1: selecting invalid altsetting 0 [ 373.728770][ T37] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 373.767879][ T37] usb 3-1: USB disconnect, device number 19 [ 373.779818][ T820] usb 4-1: Using ep0 maxpacket: 16 [ 373.825820][ T820] usb 4-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01 [ 373.825852][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.825874][ T820] usb 4-1: Product: syz [ 373.825891][ T820] usb 4-1: Manufacturer: syz [ 373.825906][ T820] usb 4-1: SerialNumber: syz [ 373.893422][T11329] bridge0: port 3(batadv0) entered blocking state [ 373.893723][T11329] bridge0: port 3(batadv0) entered disabled state [ 373.999526][ T820] usb 4-1: config 0 descriptor?? [ 374.021356][ T820] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected. [ 374.218040][ T820] pwc: Warning: more than 1 configuration available. [ 374.343922][ T1551] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 374.343946][ T1551] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 374.637515][ T820] pwc: send_video_command error -71 [ 374.637534][ T820] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 374.637654][ T820] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 374.685326][ T820] usb 4-1: USB disconnect, device number 10 [ 376.515367][T11369] loop4: detected capacity change from 0 to 32768 [ 376.713779][T11388] loop1: detected capacity change from 0 to 512 [ 376.715901][T11388] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 376.764615][T11388] EXT4-fs (loop1): 1 truncate cleaned up [ 376.767693][T11388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.147825][T11399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2373'. [ 377.438984][ T5835] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.641408][ T6073] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 377.793576][ T6073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.793613][ T6073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.793636][ T6073] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.793680][ T6073] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.793705][ T6073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.918225][ T6073] usb 3-1: config 0 descriptor?? [ 378.199029][T11417] tipc: Started in network mode [ 378.199080][T11417] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 378.504385][T11417] tipc: Enabled bearer , priority 10 [ 378.542364][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 378.670797][ T6073] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 378.700480][ T6073] usb 3-1: USB disconnect, device number 20 [ 378.796308][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.998849][T11435] [U] zÍwó,€Îlé¹MLï}¨•ó|¡²®%†þþë«p®,HÐð±Ò?)ñô [ 378.998888][T11435] [U] £QÎÄÑZ!¾v¨vrŽ" Y [ 379.037071][T11435] [U] 2eO [ 379.037092][T11435] [U] سèéšñÎÕ׿•œµªG³ªÏä²V¾×èã÷–u”$F‚V9cª~SΦ»«m“HÅ;5kg zYYTRþt‘èÐÓ°ý;[°€Ú’‹‰ [ 379.037107][T11435] [U] ÿUIñîE(H»¥yñGP¼b”©ËÅÏ KÏÙSÌœÂm•jt/YÏ [ 379.037119][T11435] [U] ­Ýé1iÖæ-f>C…ªV¾=ôȯ!^øŽ&9r+LÿŠ…ÞõMGYñBÉ." [ 379.037151][T11435] [U] !šTí·¥ ú(²æ˜ãTK§tø@Îâ¢q¼|ùº"}~ªýÒ˜ÜoÄR”¤xï¨åÙˉù8«©oôû±º¶Ôû¦MxÀf+Ÿv,$Í=stÆÀœÀ¥®EåÕ\g&5Þ ÛˇEQ¢A ÞoÕ9òõ­¤Ô„z`M*þüowg=ú¦ÀHÀ‰Á;í—j|HGÞp´•@6livï”TÓ4ò^a¥‘å{wf2éÄ,ÒEMiô`á›g¥UÍõIáøº-Aú7þ:š^WPlºó^vžq•…cƒ}2 ÿ8R „H’‘U?V¢è¨kÜ;¼7ÏÉ¿ß8§±•5¿±NŠØ!Ÿ Š4 C~þ¼#¬çÚGü–_U¼: ÍÜLnûà*4QÀv¹¢O¼9ÅŒ¾u°f{]á}Žž-ý í-IË [c¬M [ 379.037258][T11435] [U] ‚]‡ÐžÁÓ¤ 8rËïsôˆ©ŠÚyp²ÛÛå~Qâ¹ù_ê´‡YøàT|vðP áùYË:ì!"®þ¥p…•´âRJéZÀ4¤Xd§¼Às–w³„]1ÍÏŸå÷Ó¦•å1‡'à<˜ÚJ ¥?¦iw1U #½-´ýzjê;‡Á¼{ä›OakÚr{§âÓ¤­ûÅ÷6ëƒLÉv¯S4÷xì—1büŸ¿x¨2ùéŒi‡Ìþ¥dwÝܶ—mr,h«%j`¹o7Q¾­£Î…Ó8î$¦ª2Hbý£U¶–85f™ ¨é¢%Šœ‘&à ß,è_†g¸ãWñÆ”Dç“vš@ù9ĨM¹ô–%þ ánfÕoýMéoPsÏHÓµ¢#»^\ÊíVòj; [ 379.216047][T11434] [U] ˜À5]©åi#ÚR-yÚ›YW.ôöîíÔ±(*ÔSøÏë%ÕîðíübŽ™}ÆJý3k]‹ìè–‚FóÉ¿˜¦l­›Nm‡Ç·_EÂ’Š—’E¡=@f¨%_‰DØ=K¬ž¥qžmç'ŠrRP1¬¹´MtÐÁpˆ'~æ/¼þ]îör}£ÆT&=›á½ñSÎ7ÆØûàƒ7 [ 379.276230][T11431] fido_id[11431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 379.442307][T11441] loop0: detected capacity change from 0 to 1024 [ 379.510007][ T5912] tipc: Node number set to 4269801488 [ 379.874197][T11454] loop3: detected capacity change from 0 to 256 [ 379.881152][ T38] audit: type=1800 audit(379.482:183): pid=11441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2392" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 379.996303][T11454] FAT-fs (loop3): Directory bread(block 64) failed [ 379.996338][T11454] FAT-fs (loop3): Directory bread(block 65) failed [ 379.996440][T11454] FAT-fs (loop3): Directory bread(block 66) failed [ 379.996464][T11454] FAT-fs (loop3): Directory bread(block 67) failed [ 379.996567][T11454] FAT-fs (loop3): Directory bread(block 68) failed [ 379.996589][T11454] FAT-fs (loop3): Directory bread(block 69) failed [ 379.996692][T11454] FAT-fs (loop3): Directory bread(block 70) failed [ 379.996715][T11454] FAT-fs (loop3): Directory bread(block 71) failed [ 379.996820][T11454] FAT-fs (loop3): Directory bread(block 72) failed [ 379.996844][T11454] FAT-fs (loop3): Directory bread(block 73) failed [ 380.309179][ T1031] kworker/u8:7: attempt to access beyond end of device [ 380.309179][ T1031] loop3: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 380.412682][ T1031] kworker/u8:7: attempt to access beyond end of device [ 380.412682][ T1031] loop3: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 380.412836][ T1031] kworker/u8:7: attempt to access beyond end of device [ 380.412836][ T1031] loop3: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 380.412995][ T1031] kworker/u8:7: attempt to access beyond end of device [ 380.412995][ T1031] loop3: rw=1, sector=1448, nr_sectors = 32 limit=256 [ 381.337620][ T6073] bridge0: entered promiscuous mode [ 381.355789][T11488] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 381.449797][ T5844] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 381.613850][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.613908][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.613938][ T5844] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.613966][ T5844] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 381.613982][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.794189][T11498] netlink: 'syz.0.2420': attribute type 6 has an invalid length. [ 381.871538][ T5844] usb 2-1: config 0 descriptor?? [ 381.892984][T11502] loop2: detected capacity change from 0 to 512 [ 382.317203][ T5844] hid_parser_main: 470 callbacks suppressed [ 382.317231][ T5844] hid-rmi 0003:0461:4E72.0019: unknown main item tag 0x6 [ 382.317262][ T5844] hid-rmi 0003:0461:4E72.0019: item fetching failed at offset 9/11 [ 382.318055][ T5844] hid-rmi 0003:0461:4E72.0019: parse failed [ 382.318166][ T5844] hid-rmi 0003:0461:4E72.0019: probe with driver hid-rmi failed with error -22 [ 382.513860][ T5912] usb 2-1: USB disconnect, device number 16 [ 382.747096][T11481] loop4: detected capacity change from 0 to 32768 [ 382.748220][T11481] xfs: Deprecated parameter 'attr2' [ 382.748240][T11481] XFS: attr2 mount option is deprecated. [ 382.873740][ T5844] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 382.935831][T11481] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 383.030793][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 383.033382][ T5844] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 383.033412][ T5844] usb 1-1: config 0 has no interface number 0 [ 383.071400][ T5844] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 383.071433][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.071454][ T5844] usb 1-1: Product: syz [ 383.071469][ T5844] usb 1-1: Manufacturer: syz [ 383.071484][ T5844] usb 1-1: SerialNumber: syz [ 383.078590][ T5844] usb 1-1: config 0 descriptor?? [ 383.115503][T11481] XFS (loop4): Ending clean mount [ 383.733035][ T5844] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 383.733097][ T5844] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 383.734127][ T5844] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 383.734985][ T5844] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 383.819389][ T5844] usb 1-1: USB disconnect, device number 10 [ 384.149278][ T5836] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 385.447945][T11578] loop0: detected capacity change from 0 to 64 [ 385.794408][T11585] loop3: detected capacity change from 0 to 512 [ 385.827116][T11585] EXT4-fs (loop3): 1 truncate cleaned up [ 385.854540][T11585] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.196226][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.669861][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 386.822155][ T5912] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 386.822187][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.852349][ T5912] usb 3-1: config 0 descriptor?? [ 387.158511][T11620] loop4: detected capacity change from 0 to 8 [ 387.250974][T11620] SQUASHFS error: Failed to read block 0x8f: -5 [ 387.251561][ T38] audit: type=1800 audit(386.862:184): pid=11620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2468" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 387.376005][T11624] Bluetooth: MGMT ver 1.23 [ 387.466790][T11626] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2471'. [ 387.498109][T11626] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2471'. [ 387.528835][ T5912] usb 3-1: Cannot set autoneg [ 387.529045][ T5912] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 387.617148][ T5912] usb 3-1: USB disconnect, device number 21 [ 387.857985][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2472'. [ 388.554679][T11654] loop0: detected capacity change from 0 to 1024 [ 388.652951][T11654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.744216][T11654] EXT4-fs error (device loop0): ext4_generic_delete_entry:2673: inode #12: block 7: comm syz.0.2485: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 389.006449][T11654] EXT4-fs (loop0): Remounting filesystem read-only [ 389.338064][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.107582][T11695] loop3: detected capacity change from 0 to 128 [ 391.188110][T11722] loop2: detected capacity change from 0 to 512 [ 391.207929][T11725] loop1: detected capacity change from 0 to 1024 [ 391.237630][T11729] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 391.265515][T11725] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 391.374359][T11731] vlan2: entered allmulticast mode [ 391.374382][T11731] bond0: entered allmulticast mode [ 391.374396][T11731] bond_slave_0: entered allmulticast mode [ 391.374417][T11731] bond_slave_1: entered allmulticast mode [ 391.553109][T11722] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2516: corrupted inode contents [ 391.553163][T11722] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 391.557640][T11722] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 391.557690][T11722] loop2: lost filesystem error report for type 5 error -117 [ 391.585888][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 391.585913][ C0] EXT4-fs (loop2): initial error at time 391: ext4_do_update_inode:5690: inode 15 [ 391.585978][ C0] EXT4-fs (loop2): last error at time 391: ext4_orphan_del:303 [ 391.716460][T11722] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #15: comm syz.2.2516: corrupted inode contents [ 391.716495][T11722] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 391.718484][T11722] EXT4-fs error (device loop2): ext4_evict_inode:315: inode #15: comm syz.2.2516: mark_inode_dirty error [ 391.718518][T11722] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 391.735343][T11722] EXT4-fs (loop2): 1 orphan inode deleted [ 391.768595][ T38] audit: type=1326 audit(391.372:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 391.768772][ T38] audit: type=1326 audit(391.372:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 391.827151][ T38] audit: type=1326 audit(391.432:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 391.827212][ T38] audit: type=1326 audit(391.432:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 391.827258][ T38] audit: type=1326 audit(391.432:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 391.837668][ T38] audit: type=1326 audit(391.432:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 391.865543][ T38] audit: type=1326 audit(391.442:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 391.865698][ T38] audit: type=1326 audit(391.472:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 391.878687][ T38] audit: type=1326 audit(391.482:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11733 comm="syz.1.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd7ae0c819 code=0x7ffc0000 [ 392.031507][T11722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.246622][T11743] binder: 11742:11743 ioctl c018620c 200000000380 returned -22 [ 392.388924][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.605277][T11752] loop4: detected capacity change from 0 to 256 [ 392.697133][T11752] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 392.747708][T11752] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff) [ 393.300110][T11767] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 393.596287][T11780] Bluetooth: MGMT ver 1.23 [ 394.111723][T11801] tipc: Started in network mode [ 394.111754][T11801] tipc: Node identity ac141441, cluster identity 4711 [ 394.180367][T11801] tipc: Enabled bearer , priority 10 [ 394.584936][T11820] loop2: detected capacity change from 0 to 512 [ 394.667496][T11820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.730187][T11820] EXT4-fs (loop2): resizing filesystem from 128 to 2 blocks [ 394.730217][T11820] EXT4-fs warning (device loop2): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 394.937933][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.226853][T11830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2561'. [ 395.240378][ T37] tipc: Node number set to 2886997057 [ 395.304755][T11832] loop4: detected capacity change from 0 to 256 [ 395.668051][T11832] FAT-fs (loop4): Directory bread(block 64) failed [ 395.668085][T11832] FAT-fs (loop4): Directory bread(block 65) failed [ 395.668295][T11832] FAT-fs (loop4): Directory bread(block 66) failed [ 395.668322][T11832] FAT-fs (loop4): Directory bread(block 67) failed [ 395.668427][T11832] FAT-fs (loop4): Directory bread(block 68) failed [ 395.668461][T11832] FAT-fs (loop4): Directory bread(block 69) failed [ 395.668564][T11832] FAT-fs (loop4): Directory bread(block 70) failed [ 395.668588][T11832] FAT-fs (loop4): Directory bread(block 71) failed [ 395.668697][T11832] FAT-fs (loop4): Directory bread(block 72) failed [ 395.668721][T11832] FAT-fs (loop4): Directory bread(block 73) failed [ 396.976490][T11875] loop3: detected capacity change from 0 to 8 [ 397.633934][T11887] netlink: 'syz.0.2587': attribute type 12 has an invalid length. [ 397.635773][T11887] netlink: 'syz.0.2587': attribute type 29 has an invalid length. [ 397.635796][T11887] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2587'. [ 397.678214][T11860] loop4: detected capacity change from 0 to 32768 [ 397.722210][T11860] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 397.852974][T11860] XFS (loop4): Ending clean mount [ 397.926045][T11897] netlink: 'syz.3.2588': attribute type 3 has an invalid length. [ 397.926069][T11897] netlink: 'syz.3.2588': attribute type 1 has an invalid length. [ 397.926084][T11897] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2588'. [ 398.391196][T11905] loop0: detected capacity change from 0 to 256 [ 398.495574][T11905] FAT-fs (loop0): Directory bread(block 64) failed [ 398.495606][T11905] FAT-fs (loop0): Directory bread(block 65) failed [ 398.495693][T11905] FAT-fs (loop0): Directory bread(block 66) failed [ 398.495713][T11905] FAT-fs (loop0): Directory bread(block 67) failed [ 398.495802][T11905] FAT-fs (loop0): Directory bread(block 68) failed [ 398.495823][T11905] FAT-fs (loop0): Directory bread(block 69) failed [ 398.495910][T11905] FAT-fs (loop0): Directory bread(block 70) failed [ 398.495930][T11905] FAT-fs (loop0): Directory bread(block 71) failed [ 398.496017][T11905] FAT-fs (loop0): Directory bread(block 72) failed [ 398.496036][T11905] FAT-fs (loop0): Directory bread(block 73) failed [ 398.496530][T11860] XFS (loop4): Corruption warning: Metadata has LSN (2:16) ahead of current LSN (1:112). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 398.496567][T11860] XFS (loop4): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 [ 398.496609][T11860] XFS (loop4): Unmount and run xfs_repair [ 398.496621][T11860] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 398.496652][T11860] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 398.496669][T11860] 00000010: 00 00 00 00 00 00 00 20 00 00 00 02 00 00 00 10 ....... ........ [ 398.496686][T11860] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 398.496702][T11860] 00000030: 00 00 00 00 ca b4 20 ce 00 00 11 40 00 00 40 37 ...... ....@..@7 [ 398.496719][T11860] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 398.496735][T11860] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 398.496752][T11860] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 398.496769][T11860] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 398.497059][T11860] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x20 len 8 error 74 [ 398.497567][T11860] loop4: lost filesystem error report for type 5 error -117 [ 398.497714][T11860] XFS (loop4): Failed to initialize disk quotas, err -117. [ 398.751993][T11860] XFS (loop4): User initiated shutdown received. [ 398.752878][T11860] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:456). Shutting down filesystem. [ 398.752929][T11860] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 398.855607][ T5836] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 399.899226][T11917] loop0: detected capacity change from 0 to 256 [ 400.178948][T11921] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2600'. [ 400.178973][T11921] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2600'. [ 400.322095][T11917] FAT-fs (loop0): Directory bread(block 64) failed [ 400.322149][T11917] FAT-fs (loop0): Directory bread(block 65) failed [ 400.322262][T11917] FAT-fs (loop0): Directory bread(block 66) failed [ 400.322286][T11917] FAT-fs (loop0): Directory bread(block 67) failed [ 400.322388][T11917] FAT-fs (loop0): Directory bread(block 68) failed [ 400.322412][T11917] FAT-fs (loop0): Directory bread(block 69) failed [ 400.322515][T11917] FAT-fs (loop0): Directory bread(block 70) failed [ 400.322540][T11917] FAT-fs (loop0): Directory bread(block 71) failed [ 400.322642][T11917] FAT-fs (loop0): Directory bread(block 72) failed [ 400.322665][T11917] FAT-fs (loop0): Directory bread(block 73) failed [ 400.390005][T11904] loop2: detected capacity change from 0 to 32768 [ 400.698508][T11904] (syz.2.2591,11904,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 400.725376][T11904] (syz.2.2591,11904,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 401.118146][T11904] JBD2: Ignoring recovery information on journal [ 401.486950][T11939] vlan3: entered promiscuous mode [ 401.486976][T11939] syz_tun: entered promiscuous mode [ 401.503897][T11904] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 401.688777][T11948] loop1: detected capacity change from 0 to 128 [ 401.819367][T11950] tipc: Enabling of bearer rejected, failed to enable media [ 402.455630][T11966] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2621'. [ 403.088854][T11982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2630'. [ 403.178237][T11985] loop0: detected capacity change from 0 to 512 [ 403.408534][T11985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.874691][T12004] loop1: detected capacity change from 0 to 256 [ 403.966094][T12004] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 404.166766][T12009] loop3: detected capacity change from 0 to 1024 [ 404.522197][ T5837] ocfs2: Unmounting device (7,2) on (node local) [ 404.672199][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.697908][T12016] loop3: detected capacity change from 0 to 512 [ 404.742025][T12016] EXT4-fs warning (device loop3): dx_probe:801: inode #2: comm syz.3.2643: Unrecognised inode hash code 4 [ 404.742059][T12016] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.2643: Corrupt directory, running e2fsck is recommended [ 404.907383][T12014] loop4: detected capacity change from 0 to 4096 [ 404.921207][T12014] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 404.921239][T12014] NILFS (loop4): mounting unchecked fs [ 404.921252][T12014] NILFS (loop4): recovery required for readonly filesystem [ 404.921266][T12014] NILFS (loop4): write access will be enabled during recovery [ 405.122000][T12016] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 405.122152][T12016] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2643: corrupted in-inode xattr: invalid ea_ino [ 405.122182][T12016] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.139727][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 405.139750][ C1] EXT4-fs (loop3): initial error at time 404: ext4_iget_extra_inode:5128: inode 15 [ 405.139775][ C1] EXT4-fs (loop3): last error at time 404: ext4_iget_extra_inode:5128: inode 15 [ 405.214595][T12016] EXT4-fs (loop3): Remounting filesystem read-only [ 405.226773][T12016] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.397870][T12014] NILFS (loop4): norecovery option specified, skipping roll-forward recovery [ 405.403627][ T6025] udevd[6025]: incorrect nilfs2 checksum on /dev/loop4 [ 405.597177][ T5834] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.665488][ T8400] udevd[8400]: incorrect nilfs2 checksum on /dev/loop4 [ 406.061972][T12039] loop3: detected capacity change from 0 to 16 [ 406.372092][T12044] loop2: detected capacity change from 0 to 512 [ 406.454147][T12044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.548938][T12039] erofs (device loop3): algorithm 1 isn't enabled on this kernel [ 406.683423][T12052] loop4: detected capacity change from 0 to 8 [ 406.779962][T12052] SQUASHFS error: Failed to read block 0x6a4: -5 [ 406.779988][T12052] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 406.946328][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.915924][T12081] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2673'. [ 408.287615][T12085] loop0: detected capacity change from 0 to 1024 [ 409.100368][T12075] loop4: detected capacity change from 0 to 32768 [ 409.503890][T12103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2684'. [ 409.795168][ T2188] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.819498][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 409.877533][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 409.884288][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 409.911589][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 409.913219][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.444914][T12115] loop0: detected capacity change from 0 to 164 [ 410.621961][T12115] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 410.643272][T12115] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 410.842259][T12117] can0: slcan on ttyprintk. [ 411.122465][T12115] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 411.294663][ T5844] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 411.476353][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short [ 411.478917][ T5844] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 185, changing to 7 [ 411.530071][ T5844] usb 5-1: string descriptor 0 read error: -22 [ 411.530220][ T5844] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 411.530245][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.668078][T12116] can0 (unregistered): slcan off ttyprintk. [ 411.991794][ T5842] Bluetooth: hci2: command tx timeout [ 412.008285][ T2188] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.219471][ T5844] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 412.305964][ T5844] usb 5-1: USB disconnect, device number 13 [ 413.115434][T12155] loop3: detected capacity change from 0 to 256 [ 413.250114][ T5959] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 413.419939][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 413.422739][ T5959] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 86 [ 413.423211][ T2188] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.458923][ T5959] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 413.458952][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.458969][ T5959] usb 5-1: Product: syz [ 413.458982][ T5959] usb 5-1: Manufacturer: syz [ 413.458997][ T5959] usb 5-1: SerialNumber: syz [ 413.508142][ T5959] usb 5-1: config 0 descriptor?? [ 413.544430][T12153] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 413.616908][ T5959] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 413.863097][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 413.903095][ T1031] usb 5-1: Failed to submit usb control message: -32 [ 413.903151][ T1031] usb 5-1: unable to send the bmi data to the device: -32 [ 413.903170][ T1031] usb 5-1: unable to get target info from device [ 413.903186][ T1031] usb 5-1: could not get target info (-32) [ 413.903296][ T1031] usb 5-1: could not probe fw (-32) [ 413.906889][ T5844] usb 5-1: USB disconnect, device number 14 [ 414.082120][ T5842] Bluetooth: hci2: command tx timeout [ 414.144827][T12149] loop2: detected capacity change from 0 to 32768 [ 414.380296][ T2188] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.394347][T12149] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 414.407229][ T5819] kernel read not supported for file /sysvipc/msg (pid: 5819 comm: kworker/0:3) [ 414.576071][T12149] XFS (loop2): Ending clean mount [ 414.729002][T12180] loop3: detected capacity change from 0 to 2048 [ 414.776364][ T5837] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 414.832105][T12180] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 414.939370][ T8400] udevd[8400]: incorrect nilfs2 checksum on /dev/loop3 [ 414.980938][T12188] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.151739][ T5842] Bluetooth: hci2: command tx timeout [ 416.418662][T12204] loop4: detected capacity change from 0 to 256 [ 416.542177][T12204] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 416.612578][T12204] exFAT-fs (loop4): valid_size(150994954) is greater than size(10) [ 416.613814][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 416.613831][ T38] audit: type=1800 audit(416.222:199): pid=12204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2725" name="file1" dev="loop4" ino=1048739 res=0 errno=0 [ 417.440712][T12228] loop0: detected capacity change from 0 to 64 [ 417.735418][T12218] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2729'. [ 417.991414][T12239] sg_write: data in/out 327646/48 bytes for SCSI command 0x0-- guessing data in; [ 417.991414][T12239] program syz.3.2738 not setting count and/or reply_len properly [ 418.229770][ T5842] Bluetooth: hci2: command tx timeout [ 418.336332][T12243] loop2: detected capacity change from 0 to 2048 [ 418.366590][T12243] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 418.496655][T12254] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 418.545987][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'. [ 418.683526][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'. [ 419.137980][T12252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'. [ 419.225251][T12268] loop2: detected capacity change from 0 to 64 [ 419.539475][T12106] chnl_net:caif_netlink_parms(): no params data found [ 420.095198][ T5494] 8021q: adding VLAN 0 to HW filter on device eth1 [ 420.114702][ T5844] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 420.233695][T12291] netlink: 'syz.2.2754': attribute type 1 has an invalid length. [ 420.274875][ T5844] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 420.274908][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.274929][ T5844] usb 1-1: Product: syz [ 420.274944][ T5844] usb 1-1: Manufacturer: syz [ 420.274959][ T5844] usb 1-1: SerialNumber: syz [ 420.322721][ T5844] usb 1-1: config 0 descriptor?? [ 420.338604][ T5844] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 420.394702][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2755'. [ 420.423116][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2755'. [ 420.423140][T12293] nbd: socks must be embedded in a SOCK_ITEM attr [ 420.545958][ T5844] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 420.580038][ T5844] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 420.580101][ T5844] usb 1-1: media controller created [ 420.970780][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 421.095950][ T5844] DVB: Unable to find symbol mt352_attach() [ 421.198407][ T5844] DVB: Unable to find symbol nxt6000_attach() [ 421.198420][ T5844] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 421.227001][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 421.257380][ T5844] dvb-usb: schedule remote query interval to 1000 msecs. [ 421.257398][ T5844] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 421.257770][ T5844] dvb-usb: bulk message failed: -22 (7/0) [ 421.257786][ T5844] dvb-usb: bulk message failed: -22 (7/0) [ 421.297402][ T5844] usb 1-1: USB disconnect, device number 11 [ 421.491709][ T2188] bridge0: port 3(team0) entered disabled state [ 421.874571][ T2188] bridge_slave_1: left allmulticast mode [ 421.874671][ T2188] bridge_slave_1: left promiscuous mode [ 421.874980][ T2188] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.877210][ T5844] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 422.042957][ T2188] bridge_slave_0: left promiscuous mode [ 422.043165][ T2188] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.233092][T12326] loop3: detected capacity change from 0 to 4096 [ 422.236540][T12326] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 422.270949][T12328] loop0: detected capacity change from 0 to 512 [ 422.273998][T12328] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.276751][T12328] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 422.276787][T12328] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 422.457305][T12326] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 422.556579][T12328] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.2770: Allocating blocks 41-42 which overlap fs metadata [ 422.556620][T12328] loop0: lost filesystem error report for type 5 error -117 [ 422.569139][ C1] EXT4-fs (loop0): initial error at time 422: ext4_mb_mark_diskspace_used:4222 [ 422.569265][ C1] EXT4-fs (loop0): last error at time 422: ext4_mb_mark_diskspace_used:4222 [ 422.660671][T12328] EXT4-fs (loop0): Remounting filesystem read-only [ 422.660837][T12328] Quota error (device loop0): write_blk: dquota write failed [ 422.660855][T12328] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 422.661194][T12328] Quota error (device loop0): write_blk: dquota write failed [ 422.661311][T12328] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 422.661474][T12328] EXT4-fs (loop0): 1 truncate cleaned up [ 422.665291][T12328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.885262][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.475674][ T32] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 423.636302][ T32] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 423.636334][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.636349][ T32] usb 4-1: Product: syz [ 423.636359][ T32] usb 4-1: Manufacturer: syz [ 423.636370][ T32] usb 4-1: SerialNumber: syz [ 423.679544][T12345] loop0: detected capacity change from 0 to 2048 [ 423.725948][T12345] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 423.731196][ T32] usb 4-1: config 0 descriptor?? [ 423.989511][ T32] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 424.432140][ T32] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 424.439413][ T32] usb 4-1: USB disconnect, device number 11 [ 425.123822][ T2188] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 425.159145][ T2188] bond_slave_0: left allmulticast mode [ 425.191202][ T2188] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 425.231684][ T2188] bond_slave_1: left allmulticast mode [ 425.234212][ T2188] bond0 (unregistering): Released all slaves [ 425.257993][ T2188] bond1 (unregistering): Released all slaves [ 425.281794][ T2188] bond2 (unregistering): Released all slaves [ 425.560923][T12360] loop2: detected capacity change from 0 to 128 [ 425.614133][T12360] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 425.657100][T12360] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.248020][T12369] loop3: detected capacity change from 0 to 1764 [ 426.529183][T12106] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.529530][T12106] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.531312][T12106] bridge_slave_0: entered allmulticast mode [ 426.552972][T12106] bridge_slave_0: entered promiscuous mode [ 426.586169][ T2188] tipc: Disabling bearer [ 426.740498][ T2188] tipc: Left network mode [ 426.742415][T12106] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.742746][T12106] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.743082][T12106] bridge_slave_1: entered allmulticast mode [ 426.777466][T12106] bridge_slave_1: entered promiscuous mode [ 426.974519][T12106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.027325][T12106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.492604][T12403] loop2: detected capacity change from 0 to 512 [ 427.619082][T12403] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 427.619544][T12403] EXT4-fs (loop2): orphan cleanup on readonly fs [ 427.933897][T12403] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.2801: corrupted inode contents [ 427.933932][T12403] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 427.944728][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 427.944754][ C1] EXT4-fs (loop2): initial error at time 427: ext4_do_update_inode:5690: inode 16 [ 427.944786][ C1] EXT4-fs (loop2): last error at time 427: ext4_do_update_inode:5690: inode 16 [ 427.944994][T12403] EXT4-fs (loop2): Remounting filesystem read-only [ 427.945405][T12403] EXT4-fs (loop2): 1 truncate cleaned up [ 427.990768][ T1551] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 427.990848][ T1551] Quota error (device loop2): write_blk: dquota write failed [ 427.990892][ T1551] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 427.990947][ T1551] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 427.991001][ T1551] Quota error (device loop2): write_blk: dquota write failed [ 427.991037][ T1551] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 427.991291][ T1551] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 427.991346][ T1551] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 428.367273][ T1551] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 428.371851][T12403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.657808][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.431727][ T5494] 8021q: adding VLAN 0 to HW filter on device eth2 [ 429.466332][T12106] team0: Port device team_slave_0 added [ 429.493313][T12106] team0: Port device team_slave_1 added [ 429.523144][T12438] sg_write: data in/out 439262/690 bytes for SCSI command 0x0-- guessing data in; [ 429.523144][T12438] program syz.2.2810 not setting count and/or reply_len properly [ 429.984553][T12450] loop0: detected capacity change from 0 to 512 [ 430.005513][T12450] EXT4-fs: Ignoring removed nobh option [ 430.005539][T12450] EXT4-fs: Ignoring removed mblk_io_submit option [ 430.046109][T12450] EXT4-fs (loop0): orphan cleanup on readonly fs [ 430.046134][T12450] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 430.181960][T12106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.181977][T12106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.182005][T12106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.216399][T12450] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2816: attempt to clear invalid blocks 2 len 1 [ 430.216549][T12450] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 430.231820][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 430.231846][ C1] EXT4-fs (loop0): initial error at time 429: ext4_clear_blocks:876: inode 13 [ 430.231874][ C1] EXT4-fs (loop0): last error at time 429: ext4_clear_blocks:876: inode 13 [ 430.281156][T12450] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 430.384194][T12106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.384212][T12106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.384241][T12106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.538040][T12106] hsr_slave_0: entered promiscuous mode [ 430.546465][T12106] hsr_slave_1: entered promiscuous mode [ 430.548617][T12106] debugfs: 'hsr0' already exists in 'hsr' [ 430.548643][T12106] Cannot create hsr debugfs directory [ 430.591522][T12450] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2816: invalid indirect mapped block 1819239214 (level 0) [ 430.591564][T12450] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 430.621045][T12450] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.2816: invalid indirect mapped block 1819239214 (level 1) [ 430.621085][T12450] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 430.668014][T12450] EXT4-fs (loop0): 1 truncate cleaned up [ 430.714529][T12450] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.848257][T12450] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work [ 431.143932][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.225817][T12463] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2823'. [ 431.460085][T12471] binder: 12469:12471 ioctl c0306201 200000000280 returned -22 [ 431.678309][ T38] audit: type=1326 audit(431.282:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.3.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e96ffc819 code=0x7ffc0000 [ 431.679376][ T38] audit: type=1326 audit(431.282:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.3.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e96ffc819 code=0x7ffc0000 [ 431.695464][ T38] audit: type=1326 audit(431.302:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.3.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e96ffc819 code=0x7ffc0000 [ 431.696685][ T38] audit: type=1326 audit(431.302:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.3.2829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7e96ffc819 code=0x7ffc0000 [ 432.300572][T12490] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2834'. [ 432.301032][T12490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2834'. [ 432.791525][T12478] loop0: detected capacity change from 0 to 32768 [ 433.721348][ T2188] hsr_slave_0: left promiscuous mode [ 434.162057][ T2188] hsr_slave_1: left promiscuous mode [ 434.165687][ T2188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.165793][ T2188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.425895][ T2188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.425935][ T2188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.798404][ T2188] veth1_macvtap: left promiscuous mode [ 434.798691][ T2188] veth0_macvtap: left promiscuous mode [ 434.818044][ T2188] veth0_vlan: left promiscuous mode [ 434.986519][T12536] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2844'. [ 436.923550][ T2188] team_slave_1 (unregistering): left promiscuous mode [ 436.923599][ T2188] team_slave_1 (unregistering): left allmulticast mode [ 437.011191][ T2188] team0 (unregistering): Port device team_slave_1 removed [ 437.089098][ T2188] team_slave_0 (unregistering): left promiscuous mode [ 437.089136][ T2188] team_slave_0 (unregistering): left allmulticast mode [ 437.133444][ T2188] team0 (unregistering): Port device team_slave_0 removed [ 437.750665][ T5494] 8021q: adding VLAN 0 to HW filter on device eth3 [ 438.102338][T12565] loop4: detected capacity change from 0 to 256 [ 438.130436][T12565] exfat: Deprecated parameter 'namecase' [ 438.130505][T12565] exfat: Deprecated parameter 'namecase' [ 438.213928][T12565] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 438.434487][T12569] loop2: detected capacity change from 0 to 64 [ 439.410406][T12584] input: syz0 as /devices/virtual/input/input16 [ 440.294338][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.718242][T12607] loop4: detected capacity change from 0 to 1024 [ 442.482452][ T5494] 8021q: adding VLAN 0 to HW filter on device eth4 [ 442.638178][T12652] loop3: detected capacity change from 0 to 128 [ 442.893601][T12652] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 442.970226][ T32] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 443.139482][T12106] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 443.141736][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 443.162777][ T32] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 443.162807][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.288541][ T32] usb 5-1: config 0 descriptor?? [ 443.343692][ T32] gspca_main: sq930x-2.14.0 probing 041e:403c [ 443.508124][T12652] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 443.655298][T12106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.704882][T12106] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 443.980099][ T32] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 443.980205][ T32] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 444.022666][ T32] usb 5-1: USB disconnect, device number 15 [ 444.171218][T12671] net_ratelimit: 2678 callbacks suppressed [ 444.171238][T12671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.229174][T12106] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.257931][T12106] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 444.373919][T12106] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.503986][T12106] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 444.613967][T12106] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.959813][ T32] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 444.963932][ T6073] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 445.061294][ T5834] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 445.123771][ T6073] usb 5-1: Using ep0 maxpacket: 8 [ 445.181800][ T32] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 445.181829][ T32] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 445.181847][ T32] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 445.181866][ T32] usb 1-1: config 220 has no interface number 2 [ 445.181925][ T32] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 445.181969][ T32] usb 1-1: config 220 interface 0 has no altsetting 0 [ 445.181987][ T32] usb 1-1: config 220 interface 76 has no altsetting 0 [ 445.182014][ T32] usb 1-1: config 220 interface 1 has no altsetting 0 [ 445.192018][ T6073] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 445.192078][ T6073] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 445.192102][ T6073] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 445.192125][ T6073] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 445.192147][ T6073] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 445.192186][ T6073] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 445.192207][ T6073] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.343325][ T32] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 445.343356][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.343378][ T32] usb 1-1: Product: syz [ 445.343394][ T32] usb 1-1: Manufacturer: syz [ 445.343409][ T32] usb 1-1: SerialNumber: syz [ 445.688851][ T6073] usb 5-1: usb_control_msg returned -71 [ 445.688902][ T6073] usbtmc 5-1:16.0: can't read capabilities [ 445.776366][ T32] usb 1-1: selecting invalid altsetting 0 [ 445.800330][ T32] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 445.800368][ T32] uvcvideo 1-1:220.0: No valid video chain found. [ 445.957978][ T6073] usb 5-1: USB disconnect, device number 16 [ 446.096302][ T32] usb 1-1: selecting invalid altsetting 0 [ 446.096345][ T32] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 446.267320][ T32] usb 1-1: USB disconnect, device number 12 [ 446.339353][ T38] kauditd_printk_skb: 10 callbacks suppressed [ 446.339371][ T38] audit: type=1326 audit(445.942:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8606c819 code=0x7ffc0000 [ 446.372679][ T38] audit: type=1326 audit(445.982:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8606c819 code=0x7ffc0000 [ 446.376995][ T38] audit: type=1326 audit(445.982:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8606c819 code=0x7ffc0000 [ 446.377188][ T38] audit: type=1326 audit(445.982:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8606c819 code=0x7ffc0000 [ 446.377383][ T38] audit: type=1326 audit(445.982:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fbd8606c819 code=0x7ffc0000 [ 446.607131][ T38] audit: type=1326 audit(446.122:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd8606c819 code=0x7ffc0000 [ 446.607173][ T38] audit: type=1326 audit(446.212:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd8606c582 code=0x7ffc0000 [ 446.607205][ T38] audit: type=1326 audit(446.212:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fbd8606c617 code=0x7ffc0000 [ 446.607257][ T38] audit: type=1326 audit(446.212:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbd86029511 code=0x7ffc0000 [ 446.651116][ T38] audit: type=1326 audit(446.212:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12699 comm="syz.0.2908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbd8606d609 code=0x7ffc0000 [ 446.765532][ T5842] Bluetooth: hci4: unexpected event for opcode 0x080f [ 446.869845][ T5819] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 447.041184][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 447.056307][ T5819] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 447.056360][ T5819] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.056387][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.056483][ T5819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 447.074836][T12707] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 447.074915][T12707] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 447.112168][ T5819] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 447.112197][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.112232][ T5819] usb 4-1: Product: syz [ 447.112246][ T5819] usb 4-1: Manufacturer: syz [ 447.112260][ T5819] usb 4-1: SerialNumber: syz [ 447.200010][ T5819] usb 4-1: config 0 descriptor?? [ 447.201626][T12706] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 447.326985][T12106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.361160][T12712] vhci_hcd: connection closed [ 447.425541][ T5819] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 447.449099][T12715] loop4: detected capacity change from 0 to 256 [ 447.468331][ T5819] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17 [ 447.592956][T12717] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 447.592979][T12717] netlink: 'syz.0.2913': attribute type 2 has an invalid length. [ 447.865004][T12106] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.927957][T12707] vhci_hcd vhci_hcd.0: Device attached [ 447.949224][ C0] powermate: config urb returned -71 [ 447.949446][ C0] powermate: config urb returned -71 [ 447.949708][ C0] powermate: config urb returned -71 [ 448.151113][ T820] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 448.177699][ T2188] vhci_hcd vhci_hcd.2: stop threads [ 448.182876][ T2188] vhci_hcd vhci_hcd.2: release socket [ 448.325330][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.325748][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.479725][ T820] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 448.521946][ T2188] vhci_hcd vhci_hcd.2: disconnect device [ 448.529015][ T5844] usb 4-1: USB disconnect, device number 12 [ 448.529183][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 448.631643][ T3600] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.631820][ T3600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.777057][ T820] usb 37-1: enqueue for inactive port 0 [ 448.844142][ T820] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 448.950451][ T5959] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 449.112682][ T5959] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 449.112734][ T5959] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 449.112768][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.152817][ T5959] usb 5-1: config 0 descriptor?? [ 449.634656][T12740] loop2: detected capacity change from 0 to 512 [ 449.779231][ T5959] lenovo 0003:17EF:6067.001A: item fetching failed at offset 2/40 [ 449.787109][ T5959] lenovo 0003:17EF:6067.001A: hid_parse failed [ 449.787365][ T5959] lenovo 0003:17EF:6067.001A: probe with driver lenovo failed with error -22 [ 449.991359][ T5959] usb 5-1: USB disconnect, device number 17 [ 450.046105][T12740] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2920: bg 0: block 16: invalid block bitmap [ 450.046193][T12740] loop2: lost filesystem error report for type 5 error -117 [ 450.049776][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 450.049802][ C1] EXT4-fs (loop2): initial error at time 449: ext4_validate_block_bitmap:432 [ 450.049858][ C1] EXT4-fs (loop2): last error at time 449: ext4_validate_block_bitmap:432 [ 450.050725][T12740] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 450.050782][T12740] loop2: lost filesystem error report for type 5 error -117 [ 450.053578][T12740] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.2920: attempt to clear invalid blocks 1669132790 len 1 [ 450.053696][T12740] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 450.328159][T12740] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2920: invalid indirect mapped block 4294967295 (level 1) [ 450.328225][T12740] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 450.338675][T12740] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.2920: invalid indirect mapped block 4294967295 (level 2) [ 450.338797][T12740] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 450.341711][T12740] EXT4-fs (loop2): 1 truncate cleaned up [ 450.396572][T12740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 450.795853][ T5842] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 450.796067][ T5842] Bluetooth: hci4: Injecting HCI hardware error event [ 450.812058][ T5842] Bluetooth: hci4: hardware error 0x00 [ 451.116228][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 451.512088][ T5912] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 451.661068][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 451.663786][ T5912] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.663822][ T5912] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.663856][ T5912] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 451.663880][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.723579][ T5912] usb 5-1: config 0 descriptor?? [ 452.090584][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2934'. [ 452.098930][T12106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.168526][ T5912] dragonrise 0003:0079:0011.001B: unknown main item tag 0x0 [ 452.168562][ T5912] dragonrise 0003:0079:0011.001B: unknown main item tag 0x0 [ 452.168590][ T5912] dragonrise 0003:0079:0011.001B: unknown main item tag 0x0 [ 452.168617][ T5912] dragonrise 0003:0079:0011.001B: unknown main item tag 0x0 [ 452.168644][ T5912] dragonrise 0003:0079:0011.001B: unknown main item tag 0x0 [ 452.168670][ T5912] dragonrise 0003:0079:0011.001B: unbalanced collection at end of report description [ 452.218639][ T5912] dragonrise 0003:0079:0011.001B: parse failed [ 452.218724][ T5912] dragonrise 0003:0079:0011.001B: probe with driver dragonrise failed with error -22 [ 452.566296][ T821] usb 5-1: USB disconnect, device number 18 [ 452.817718][T12797] loop2: detected capacity change from 0 to 512 [ 452.908717][T12797] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 453.109843][ T5842] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 453.167941][T12797] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 453.272877][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 453.272903][ C1] EXT4-fs (loop2): initial error at time 452: ext4_mb_generate_buddy:1317 [ 453.272927][ C1] EXT4-fs (loop2): last error at time 452: ext4_mb_generate_buddy:1317 [ 453.330469][T12797] __quota_error: 36 callbacks suppressed [ 453.330493][T12797] Quota error (device loop2): write_blk: dquota write failed [ 453.330511][T12797] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 453.330627][T12797] Quota error (device loop2): write_blk: dquota write failed [ 453.330750][T12797] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 453.330807][T12797] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.2940: Failed to acquire dquot type 1 [ 453.330831][T12797] loop2: lost filesystem error report for type 5 error -28 [ 453.335848][T12797] EXT4-fs (loop2): 1 truncate cleaned up [ 453.363345][T12797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.588923][T12106] veth0_vlan: entered promiscuous mode [ 453.689775][T12797] EXT4-fs error (device loop2): __ext4_remount:6837: comm syz.2.2940: Abort forced by user [ 453.715165][T12106] veth1_vlan: entered promiscuous mode [ 453.808471][T12797] EXT4-fs (loop2): Remounting filesystem read-only [ 453.808495][T12797] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 454.034537][ T5837] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.542379][T12106] veth0_macvtap: entered promiscuous mode [ 454.661153][T12106] veth1_macvtap: entered promiscuous mode [ 454.963597][T12106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.103308][T12106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.159138][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.159419][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.159463][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.159504][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.224507][T12846] netlink: 'syz.2.2955': attribute type 1 has an invalid length. [ 455.882709][T12856] loop2: detected capacity change from 0 to 256 [ 457.327713][T12870] netlink: 'syz.0.2963': attribute type 7 has an invalid length. [ 457.327735][T12870] netlink: 'syz.0.2963': attribute type 8 has an invalid length. [ 457.327749][T12870] netlink: 'syz.0.2963': attribute type 13 has an invalid length. [ 457.360033][ T6073] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 457.496632][T12858] lo speed is unknown, defaulting to 1000 [ 457.534103][ T6073] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 457.534135][ T6073] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 457.534155][ T6073] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 457.534176][ T6073] usb 3-1: config 220 has no interface number 2 [ 457.534249][ T6073] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 457.534278][ T6073] usb 3-1: config 220 interface 0 has no altsetting 0 [ 457.534297][ T6073] usb 3-1: config 220 interface 76 has no altsetting 0 [ 457.534316][ T6073] usb 3-1: config 220 interface 1 has no altsetting 0 [ 457.681438][ T6073] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 457.681474][ T6073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.681496][ T6073] usb 3-1: Product: syz [ 457.681511][ T6073] usb 3-1: Manufacturer: syz [ 457.681526][ T6073] usb 3-1: SerialNumber: syz [ 457.755237][T12858] lo speed is unknown, defaulting to 1000 [ 457.764334][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.764392][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.129005][ T6073] usb 3-1: selecting invalid altsetting 0 [ 458.232915][ T6073] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 458.232948][ T6073] uvcvideo 3-1:220.0: No valid video chain found. [ 458.306824][ T6073] usb 3-1: selecting invalid altsetting 0 [ 458.306932][ T6073] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 458.354903][ T6073] usb 3-1: USB disconnect, device number 22 [ 458.562360][T12858] lo speed is unknown, defaulting to 1000 [ 458.619431][T12858] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 458.619471][T12858] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 458.619523][T12858] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 458.688961][T12858] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 458.838988][ T3600] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.839026][ T3600] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.540869][T12858] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 459.803465][ T5844] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 459.991955][ T5844] usb 1-1: Using ep0 maxpacket: 16 [ 459.994312][ T5844] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.994368][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 459.994395][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 459.994416][ T5844] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 459.994437][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.995861][ T5844] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 459.995887][ T5844] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 459.995906][ T5844] usb 1-1: Manufacturer: syz [ 460.137057][ T5844] usb 1-1: config 0 descriptor?? [ 460.581332][ T5844] rc_core: IR keymap rc-hauppauge not found [ 460.581354][ T5844] Registered IR keymap rc-empty [ 460.651252][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 460.669837][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 460.707573][ T5844] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 460.794846][ T5844] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 460.965261][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.014269][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.030878][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.079791][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.116514][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.150827][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.174886][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.206936][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.226915][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.239801][ T5844] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 461.393098][ T5844] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 461.393128][ T5844] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 461.508098][ T5844] usb 1-1: USB disconnect, device number 13 [ 462.075028][ T5842] Bluetooth: hci2: command tx timeout [ 462.516530][T12858] lo speed is unknown, defaulting to 1000 [ 462.598024][T12858] lo speed is unknown, defaulting to 1000 [ 462.618962][T12858] lo speed is unknown, defaulting to 1000 [ 462.844398][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2980'. [ 462.865786][T12858] lo speed is unknown, defaulting to 1000 [ 463.123455][T12858] lo speed is unknown, defaulting to 1000 [ 463.512268][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 464.222471][T12934] loop5: detected capacity change from 0 to 32768 [ 464.389243][T12983] geneve1: entered promiscuous mode [ 464.528553][T12983] macsec1: entered promiscuous mode [ 464.528818][T12983] macsec1: entered allmulticast mode [ 464.528907][T12983] geneve1: entered allmulticast mode [ 464.745812][T12983] geneve1: left allmulticast mode [ 464.746095][T12983] geneve1: left promiscuous mode [ 465.710487][T13020] loop2: detected capacity change from 0 to 1024 [ 465.794885][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3017'. [ 465.794907][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3017'. [ 465.794965][T13024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3017'. [ 465.872482][T13020] hfsplus: bad catalog file entry [ 465.954451][ T13] hfsplus: bad catalog file entry [ 465.999800][T12736] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 466.019842][ T5844] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 466.151888][T12736] usb 5-1: Using ep0 maxpacket: 16 [ 466.169005][T12736] usb 5-1: unable to get BOS descriptor or descriptor too short [ 466.203236][T13031] loop5: detected capacity change from 0 to 256 [ 466.283896][T12736] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.286853][T12736] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 466.286886][T12736] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.286906][T12736] usb 5-1: Product: syz [ 466.286920][T12736] usb 5-1: Manufacturer: syz [ 466.286935][T12736] usb 5-1: SerialNumber: syz [ 466.340162][T13031] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 466.381786][ T5844] usb 1-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87 [ 466.381814][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.454845][ T5844] usb 1-1: config 0 descriptor?? [ 466.532545][ T5844] usb-storage 1-1:0.0: USB Mass Storage device detected [ 466.717074][T13040] exFAT-fs (loop5): start_clu is invalid cluster(0xffffffff) [ 466.738038][T12736] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 466.775870][T12736] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 467.092983][ T5844] usb 1-1: USB disconnect, device number 14 [ 467.252550][ T37] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 467.412901][ T37] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 467.412930][ T37] usb 4-1: config 0 has no interface number 0 [ 467.413960][ T37] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 467.413986][ T37] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 467.414013][ T37] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 467.414039][ T37] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 467.414066][ T37] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 467.414092][ T37] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 467.414137][ T37] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 467.414161][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.638956][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3029'. [ 467.674699][ T37] usb 4-1: config 0 descriptor?? [ 467.675657][T13044] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 467.675805][T13044] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 467.778735][T13059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3031'. [ 467.858514][ T37] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 467.988668][T13061] loop5: detected capacity change from 0 to 128 [ 468.008219][T13065] netlink: 532 bytes leftover after parsing attributes in process `syz.4.3034'. [ 468.040636][ T37] usb 4-1: USB disconnect, device number 13 [ 468.060705][T13061] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 468.088929][ T37] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 468.350279][T13074] loop2: detected capacity change from 0 to 16 [ 468.358660][T13074] erofs (device loop2): DAX unsupported by block device. Turning off DAX. [ 468.384473][T13074] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 468.384883][T13074] erofs (device loop2): mounted with root inode @ nid 36. [ 468.473735][T13074] erofs (device loop2): read error -117 @ 0 of nid 36 [ 468.674053][T13077] erofs (device loop2): read error -117 @ 0 of nid 36 [ 468.678052][T12106] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.752569][T12736] usb 5-1: USB disconnect, device number 19 [ 469.016444][T13087] loop4: detected capacity change from 0 to 512 [ 469.070258][T13087] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 469.098051][T13087] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.3043: invalid indirect mapped block 4294967295 (level 1) [ 469.098092][T13087] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 469.106381][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 469.106406][ C1] EXT4-fs (loop4): initial error at time 468: ext4_free_branches:1023: inode 11 [ 469.106453][ C1] EXT4-fs (loop4): last error at time 468: ext4_free_branches:1023: inode 11 [ 469.192942][T13090] loop3: detected capacity change from 0 to 256 [ 469.310792][T13090] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 469.331988][T13087] EXT4-fs (loop4): Remounting filesystem read-only [ 469.332364][T13087] EXT4-fs (loop4): 2 truncates cleaned up [ 469.370735][T13087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.463865][T13087] EXT4-fs warning (device loop4): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 469.687438][T13090] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff) [ 469.726987][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.279149][T13145] loop4: detected capacity change from 0 to 1024 [ 471.373265][T13145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.589293][T13157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3073'. [ 471.644954][T13158] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = -1, id = 0 [ 471.682001][T13152] netlink: 'syz.2.3071': attribute type 29 has an invalid length. [ 471.682714][T13153] netlink: 'syz.2.3071': attribute type 29 has an invalid length. [ 471.807248][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.894801][T13149] IPVS: stopping master sync thread 13158 ... [ 472.505559][T13180] loop5: detected capacity change from 0 to 64 [ 472.691080][T13185] loop4: detected capacity change from 0 to 2048 [ 472.727000][T13185] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 473.366572][T13201] loop4: detected capacity change from 0 to 256 [ 474.956538][T13231] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3106'. [ 475.761017][ T5913] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 475.915273][ T5913] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 475.915324][ T5913] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 475.915351][ T5913] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.915374][ T5913] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 475.915402][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 475.915435][ T5913] usb 5-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 475.915457][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.005754][ T5913] usb 5-1: config 0 descriptor?? [ 476.162158][T13268] loop5: detected capacity change from 0 to 1024 [ 476.523254][ T5913] hid-alps 0003:044E:120C.001C: item fetching failed at offset 6/8 [ 476.524167][ T5913] hid-alps 0003:044E:120C.001C: parse failed [ 476.524297][ T5913] hid-alps 0003:044E:120C.001C: probe with driver hid-alps failed with error -22 [ 476.689404][T12736] usb 5-1: USB disconnect, device number 20 [ 476.770897][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3128'. [ 477.140192][T13286] loop2: detected capacity change from 0 to 16 [ 477.237706][T13286] erofs (device loop2): mounted with root inode @ nid 36. [ 477.266051][ T38] audit: type=1800 audit(476.872:260): pid=13286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3130" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 477.855088][T13297] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3136'. [ 478.041054][T13301] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = -1, id = 0 [ 478.043151][T13300] IPVS: stopping master sync thread 13301 ... [ 478.332412][T13308] loop2: detected capacity change from 0 to 1024 [ 478.339855][T12736] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 478.531090][T12736] usb 5-1: Using ep0 maxpacket: 16 [ 478.534984][T12736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.535019][T12736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.535042][T12736] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.535085][T12736] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.535109][T12736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.626267][T12736] usb 5-1: config 0 descriptor?? [ 479.089068][T12736] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 479.233569][T12736] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 479.233608][T12736] microsoft 0003:045E:07DA.001D: no inputs found [ 479.233623][T12736] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 479.288381][T13323] loop5: detected capacity change from 0 to 128 [ 479.353591][ T5844] usb 5-1: USB disconnect, device number 21 [ 479.667661][T13331] IPVS: stopping master sync thread 13332 ... [ 479.699185][T13325] fido_id[13325]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 480.529744][ T5913] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 480.681941][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 480.681990][ T5913] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 480.682036][ T5913] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 480.682061][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.746271][ T5913] usb 5-1: config 0 descriptor?? [ 480.871062][T13356] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3163'. [ 480.871099][T13356] tipc: Invalid UDP bearer configuration [ 480.871132][T13356] tipc: Enabling of bearer rejected, failed to enable media [ 481.268740][ T5913] saitek 0003:06A3:0621.001E: reserved main item tag 0xd [ 481.268850][ T5913] saitek 0003:06A3:0621.001E: unknown main item tag 0x6 [ 481.268878][ T5913] saitek 0003:06A3:0621.001E: invalid report_size 2034501046 [ 481.268896][ T5913] saitek 0003:06A3:0621.001E: item 0 4 1 7 parsing failed [ 481.302215][ T5913] saitek 0003:06A3:0621.001E: parse failed [ 481.302334][ T5913] saitek 0003:06A3:0621.001E: probe with driver saitek failed with error -22 [ 481.417818][ T37] usb 5-1: USB disconnect, device number 22 [ 481.966761][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3173'. [ 481.966787][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3173'. [ 481.966816][T13378] netlink: 'syz.3.3173': attribute type 18 has an invalid length. [ 482.542801][T13391] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 482.996068][T13405] netlink: 'syz.0.3184': attribute type 1 has an invalid length. [ 482.996093][T13405] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3184'. [ 483.238983][T13409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3186'. [ 483.239009][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3186'. [ 483.343041][T13411] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3187'. [ 483.343068][T13411] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 483.812134][T13421] geneve2: entered promiscuous mode [ 483.836737][ T2188] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 60012 - 0 [ 483.836794][ T2188] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 60012 - 0 [ 483.836832][ T2188] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 60012 - 0 [ 483.836871][ T2188] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 60012 - 0 [ 486.379027][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3218'. [ 487.377073][T13500] loop5: detected capacity change from 0 to 1024 [ 487.394721][T13500] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 488.743238][T13539] loop4: detected capacity change from 0 to 136 [ 489.724028][T13536] loop2: detected capacity change from 0 to 32768 [ 490.023002][T13536] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 490.281280][T13536] XFS (loop2): Ending clean mount [ 490.383771][ T5837] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 490.511553][T13576] loop5: detected capacity change from 0 to 8 [ 490.663898][T13576] SQUASHFS error: zlib decompression failed, data probably corrupt [ 490.663938][T13576] SQUASHFS error: Failed to read block 0x9b: -5 [ 490.663957][T13576] SQUASHFS error: Unable to read metadata cache entry [99] [ 490.663974][T13576] SQUASHFS error: Unable to read inode 0x127 [ 492.348237][T13613] loop5: detected capacity change from 0 to 2048 [ 492.551849][T13618] loop3: detected capacity change from 0 to 2048 [ 492.585753][T13613] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.619880][T12736] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 492.866730][T12736] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 492.866785][T12736] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 492.866811][T12736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.925331][T12736] usb 5-1: config 0 descriptor?? [ 492.926987][T13614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.051373][T13618] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 493.148632][T12106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.216876][T13618] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 493.246484][T13618] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 493.434783][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.434822][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.436479][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.436512][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.436539][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.436565][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.436592][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.436618][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.436653][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.436679][T12736] cherry 0003:046A:0027.001F: unknown main item tag 0x0 [ 493.586076][T12736] cherry 0003:046A:0027.001F: hidraw0: USB HID v7b.fd Device [HID 046a:0027] on usb-dummy_hcd.4-1/input0 [ 493.752318][T12736] usb 5-1: USB disconnect, device number 23 [ 493.850468][T13630] program syz.2.3284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.085582][ C1] sd 0:0:1:0: [sda] tag#2227 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 494.085636][ C1] sd 0:0:1:0: [sda] tag#2227 CDB: Write(6) 0a 00 00 00 00 00 [ 494.206379][T13634] fido_id[13634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 495.286802][T13667] raw_sendmsg: syz.4.3300 forgot to set AF_INET. Fix it! [ 495.396016][T13666] loop2: detected capacity change from 0 to 4096 [ 495.439724][T13670] loop5: detected capacity change from 0 to 1024 [ 495.440917][T13670] EXT4-fs: inline encryption not supported [ 495.529958][T13670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 495.723766][T13677] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 495.790717][T13666] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 495.820525][T12106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 496.023511][T13666] NILFS (loop2): mounting fs with errors [ 496.407948][T13666] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 496.432172][T13666] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 496.432210][T13666] NILFS error (device loop2): nilfs_readdir: bad page in #2 [ 497.559791][ T6073] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 497.561507][T13689] loop5: detected capacity change from 0 to 32768 [ 497.802378][ T6073] usb 1-1: config 0 interface 0 has no altsetting 0 [ 497.802423][ T6073] usb 1-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 497.802450][ T6073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.840352][ T6073] usb 1-1: config 0 descriptor?? [ 498.117851][T13722] loop4: detected capacity change from 0 to 1764 [ 498.186532][T13722] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 498.304271][ T6073] ryos 0003:1E7D:31CE.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.0-1/input0 [ 498.424149][T13729] veth0_virt_wifi: entered promiscuous mode [ 498.475466][ T5913] usb 1-1: USB disconnect, device number 15 [ 498.630450][T13729] veth0_virt_wifi: left promiscuous mode [ 498.933079][T13734] fido_id[13734]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 499.287067][T13746] RDS: rds_bind could not find a transport for ::4002:0:20:0, load rds_tcp or rds_rdma? [ 500.060892][T13768] loop5: detected capacity change from 0 to 8 [ 500.191495][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3347'. [ 500.747067][T13753] loop2: detected capacity change from 0 to 32768 [ 500.801450][T13753] [ 500.801450][T13753] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 500.801450][T13753] [ 500.934225][T13753] ERROR: (device loop2): diWrite: ixpxd invalid [ 500.934225][T13753] [ 501.161363][T13753] ERROR: (device loop2): txCommit: [ 501.161363][T13753] [ 501.176719][T13753] jfs_mkdir: dtSearch returned -17 [ 501.411428][ T5837] [ 501.411428][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.411428][ T5837] [ 501.415496][ T5837] [ 501.415496][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.415496][ T5837] [ 501.464583][T13766] loop3: detected capacity change from 0 to 32768 [ 501.617632][T13766] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 501.689864][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.777050][T13766] XFS (loop3): Ending clean mount [ 501.951887][ T5834] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 502.058720][T13807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3358'. [ 503.054132][T13821] Invalid ELF header magic: != ELF [ 503.230787][T13827] loop4: detected capacity change from 0 to 512 [ 503.235122][T13827] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 503.297555][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3372'. [ 503.789210][T13844] loop3: detected capacity change from 0 to 64 [ 503.796230][T13827] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 503.796944][T13827] Quota error (device loop4): write_blk: dquota write failed [ 503.796990][T13827] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 503.869656][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 503.869676][ C0] EXT4-fs (loop4): initial error at time 503: ext4_mb_generate_buddy:1317 [ 503.869704][ C0] EXT4-fs (loop4): last error at time 503: ext4_mb_generate_buddy:1317 [ 503.942546][T13827] Quota error (device loop4): write_blk: dquota write failed [ 503.942682][T13827] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 503.942753][T13827] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.3371: Failed to acquire dquot type 1 [ 503.942777][T13827] loop4: lost filesystem error report for type 5 error -28 [ 503.944831][T13827] EXT4-fs (loop4): 1 truncate cleaned up [ 503.947880][T13827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.126003][T13804] loop5: detected capacity change from 0 to 32768 [ 504.127119][T13804] xfs: Unknown parameter 'func' [ 504.201073][ T821] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 504.352196][ T821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.352225][ T821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 504.352277][ T821] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 504.352302][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.458303][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.520667][ T821] usb 4-1: config 0 descriptor?? [ 504.953829][ T821] Bluetooth: Can't get state to change to load configuration err [ 504.953849][ T821] Bluetooth: Loading sysconfig file failed [ 504.953884][ T821] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 505.048544][ T821] usb 4-1: USB disconnect, device number 14 [ 505.537168][T13869] loop5: detected capacity change from 0 to 4096 [ 505.538196][T13869] EXT4-fs: inline encryption not supported [ 505.579735][T13869] EXT4-fs (loop5): Test dummy encryption mode enabled [ 505.615900][T13869] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 505.616292][T13869] System zones: 0-5 [ 505.630177][T13873] mkiss: ax0: crc mode is auto. [ 505.757678][T13869] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.912553][T13869] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 506.260835][T12106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.108171][ T10] hsr0: entered promiscuous mode [ 507.194811][T13915] loop5: detected capacity change from 0 to 512 [ 507.224519][T13915] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 507.257932][T13915] EXT4-fs (loop5): orphan cleanup on readonly fs [ 507.258608][T13915] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3408: Block bitmap for bg 0 marked uninitialized [ 507.258637][T13915] loop5: lost filesystem error report for type 5 error -117 [ 507.259675][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 507.259697][ C0] EXT4-fs (loop5): initial error at time 506: ext4_read_block_bitmap_nowait:517 [ 507.259770][ C0] EXT4-fs (loop5): last error at time 506: ext4_read_block_bitmap_nowait:517 [ 507.313875][T13887] loop3: detected capacity change from 0 to 32768 [ 507.545672][T13915] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 507.545700][T13915] loop5: lost filesystem error report for type 5 error -117 [ 507.555504][T13915] EXT4-fs (loop5): 1 orphan inode deleted [ 507.617718][T13915] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 507.719052][T13915] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 507.759995][T13915] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 507.794030][T13915] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3408: Block bitmap for bg 0 marked uninitialized [ 507.832620][T13915] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3408: Block bitmap for bg 0 marked uninitialized [ 507.870550][T13915] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3408: Block bitmap for bg 0 marked uninitialized [ 507.897442][T13915] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3408: Block bitmap for bg 0 marked uninitialized [ 507.919442][T13915] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3408: Block bitmap for bg 0 marked uninitialized [ 508.277399][T13927] tipc: Started in network mode [ 508.277428][T13927] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 508.277468][T13927] tipc: Enabling of bearer rejected, failed to enable media [ 508.307218][T13915] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.3408: Block bitmap for bg 0 marked uninitialized [ 508.499483][T13929] loop4: detected capacity change from 0 to 512 [ 508.507754][T13929] EXT4-fs: inline encryption not supported [ 508.507899][T13929] EXT4-fs: Ignoring removed i_version option [ 508.572696][T13929] EXT4-fs (loop4): 1 orphan inode deleted [ 508.585684][T12106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.623816][T13923] loop2: detected capacity change from 0 to 32768 [ 508.693220][T13929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 508.929007][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.217610][T13941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.609001][T13948] loop3: detected capacity change from 0 to 1024 [ 509.938891][T13957] loop4: detected capacity change from 0 to 64 [ 509.972151][T13957] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 510.057921][T13962] loop2: detected capacity change from 0 to 64 [ 510.299847][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 510.465299][T13969] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 510.575426][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.575456][ T10] usb 6-1: config 0 has no interface number 0 [ 510.575503][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.575530][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.575553][ T10] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.575597][ T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 510.575632][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.734352][ T10] usb 6-1: config 0 descriptor?? [ 511.139830][ T821] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 511.336487][ T821] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 511.336518][ T821] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 511.336540][ T821] usb 4-1: config 1 has no interface number 0 [ 511.336649][ T821] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 511.336679][ T821] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 511.336708][ T821] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 511.336807][ T821] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0 [ 511.336841][ T821] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.388467][ T10] uclogic 0003:28BD:0042.0021: failed retrieving string descriptor #100: -71 [ 511.388631][ T10] uclogic 0003:28BD:0042.0021: failed retrieving pen parameters: -71 [ 511.388687][ T10] uclogic 0003:28BD:0042.0021: pen probing failed: -71 [ 511.388734][ T10] uclogic 0003:28BD:0042.0021: failed probing parameters: -71 [ 511.388961][ T10] uclogic 0003:28BD:0042.0021: probe with driver uclogic failed with error -71 [ 511.440035][ T821] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 511.440119][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.440140][ T821] usb 4-1: Product: syz [ 511.440156][ T821] usb 4-1: Manufacturer: syz [ 511.440205][ T821] usb 4-1: SerialNumber: syz [ 511.548485][ T10] usb 6-1: USB disconnect, device number 2 [ 511.590619][T13975] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 512.005744][T13975] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 512.218065][T13990] loop4: detected capacity change from 0 to 1024 [ 512.228440][ T821] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 512.228570][ T821] cdc_ncm 4-1:1.1: bind() failure [ 512.261711][T13990] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 512.276064][ T821] usb 4-1: USB disconnect, device number 15 [ 512.286969][T13990] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 512.287412][T13990] EXT4-fs (loop4): orphan cleanup on readonly fs [ 512.376796][T13990] EXT4-fs error (device loop4): ext4_free_blocks:6718: comm syz.4.3441: Freeing blocks not in datazone - block = 0, count = 4096 [ 512.376834][T13990] loop4: lost filesystem error report for type 5 error -117 [ 512.426370][T13990] EXT4-fs (loop4): 1 orphan inode deleted [ 512.455234][T13990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 512.605582][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.191811][ T37] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 513.374070][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.374098][ T37] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 513.374152][ T37] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 513.374176][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.379392][T14017] netlink: 'syz.4.3451': attribute type 10 has an invalid length. [ 513.472294][ T37] usb 4-1: config 0 descriptor?? [ 513.485837][ T37] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 513.485898][ T37] dvb-usb: bulk message failed: -22 (3/0) [ 513.573772][ T37] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 513.574828][ T37] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 513.574887][ T37] usb 4-1: media controller created [ 513.577742][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 513.671806][ T5959] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 513.676168][ T37] dvb-usb: bulk message failed: -22 (6/0) [ 513.676298][ T37] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 513.723964][T14003] dvb-usb: bulk message failed: -22 (2/0) [ 513.737050][ T37] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 513.816866][ T37] dvb-usb: schedule remote query interval to 150 msecs. [ 513.816891][ T37] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 513.837269][ T37] usb 4-1: USB disconnect, device number 16 [ 513.864489][ T5959] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 513.864518][ T5959] usb 1-1: config 0 has no interface number 0 [ 513.864566][ T5959] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 513.864594][ T5959] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.864618][ T5959] usb 1-1: config 0 interface 1 has no altsetting 0 [ 513.864653][ T5959] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 513.864676][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.934119][ T5959] usb 1-1: config 0 descriptor?? [ 514.127366][T14017] batadv0: left allmulticast mode [ 514.127402][T14017] batadv0: left promiscuous mode [ 514.176699][T14017] bridge0: port 3(batadv0) entered disabled state [ 514.270675][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 514.301225][T14017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.420455][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 514.423350][ T10] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 514.423377][ T10] usb 6-1: config 0 has no interface number 0 [ 514.423427][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 514.423455][ T10] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 514.488352][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 514.488385][ T10] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 514.488406][ T10] usb 6-1: Product: syz [ 514.488421][ T10] usb 6-1: SerialNumber: syz [ 514.530608][ T37] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 514.585929][ T10] usb 6-1: config 0 descriptor?? [ 514.592268][ T5959] uclogic 0003:2179:0053.0022: failed retrieving string descriptor #100: -71 [ 514.592327][ T5959] uclogic 0003:2179:0053.0022: failed retrieving pen parameters: -71 [ 514.592345][ T5959] uclogic 0003:2179:0053.0022: pen probing failed: -71 [ 514.592363][ T5959] uclogic 0003:2179:0053.0022: failed probing parameters: -71 [ 514.592483][ T5959] uclogic 0003:2179:0053.0022: probe with driver uclogic failed with error -71 [ 514.649548][ T5959] usb 1-1: USB disconnect, device number 16 [ 514.764720][ T10] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 514.862183][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input21 [ 515.013411][T14023] list_add double add: new=ffff888037527e18, prev=ffff888037527e18, next=ffff88803eeb0078. [ 515.014220][T14023] ------------[ cut here ]------------ [ 515.014231][T14023] kernel BUG at lib/list_debug.c:37! [ 515.014276][T14023] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 515.014321][T14023] CPU: 0 UID: 0 PID: 14023 Comm: syz.5.3455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 515.014351][T14023] Tainted: [L]=SOFTLOCKUP [ 515.014359][T14023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 515.014373][T14023] RIP: 0010:__list_add_valid_or_report+0xa5/0x130 [ 515.014402][T14023] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 02 ed 85 06 cc 48 c7 c7 c0 48 a8 8b 4c 89 fe 4c 89 f2 48 89 d9 e8 2c b2 72 fc 90 <0f> 0b 48 c7 c7 a0 46 a8 8b e8 1d b2 72 fc 90 0f 0b 48 c7 c7 60 47 [ 515.014432][T14023] RSP: 0018:ffffc9000808f310 EFLAGS: 00010246 [ 515.014451][T14023] RAX: 0000000000000058 RBX: ffff88803eeb0078 RCX: cd0fcd54ed6f5200 [ 515.014467][T14023] RDX: ffffc90011a90000 RSI: 000000000001afda RDI: 000000000001afdb [ 515.014482][T14023] RBP: 1ffff11007dd6010 R08: 0000000000000000 R09: 0000000000000000 [ 515.014496][T14023] R10: dffffc0000000000 R11: fffff52001011e11 R12: 1ffff11006ea4fc3 [ 515.014512][T14023] R13: dffffc0000000000 R14: ffff888037527e18 R15: ffff888037527e18 [ 515.014528][T14023] FS: 00007fc8d72f66c0(0000) GS:ffff888125eb6000(0000) knlGS:0000000000000000 [ 515.014546][T14023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.014560][T14023] CR2: 00007ffe1ff2db68 CR3: 0000000067aae000 CR4: 00000000003526f0 [ 515.014580][T14023] Call Trace: [ 515.014593][T14023] [ 515.014605][T14023] usb_hcd_link_urb_to_ep+0x1d2/0x330 [ 515.014634][T14023] dummy_urb_enqueue+0x290/0x760 [ 515.014660][T14023] ? usb_hcd_map_urb_for_dma+0x3cb/0xd40 [ 515.014689][T14023] usb_hcd_submit_urb+0x323/0x1b50 [ 515.014718][T14023] cm109_input_ev+0x1df/0x3d0 [ 515.014746][T14023] ? __pfx_cm109_input_ev+0x10/0x10 [ 515.014771][T14023] input_event_dispose+0x80/0x6b0 [ 515.014793][T14023] input_inject_event+0x1d7/0x320 [ 515.014813][T14023] ? input_inject_event+0xb0/0x320 [ 515.014833][T14023] kd_sound_helper+0x101/0x210 [ 515.014859][T14023] ? input_handler_for_each_handle+0x28/0x1c0 [ 515.014886][T14023] ? __pfx_kd_sound_helper+0x10/0x10 [ 515.014911][T14023] input_handler_for_each_handle+0x101/0x1c0 [ 515.014937][T14023] kd_mksound+0x96/0x130 [ 515.014961][T14023] ? __pfx_kd_mksound+0x10/0x10 [ 515.014986][T14023] ? atomic_notifier_call_chain+0x26/0x180 [ 515.015017][T14023] do_con_write+0x3357/0x5930 [ 515.015072][T14023] ? __pfx_do_con_write+0x10/0x10 [ 515.015101][T14023] ? do_raw_spin_lock+0x12b/0x2f0 [ 515.015139][T14023] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.015166][T14023] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 515.015196][T14023] con_write+0x31/0x2e0 [ 515.015226][T14023] n_tty_write+0xd55/0x1220 [ 515.015257][T14023] ? __pfx_n_tty_write+0x10/0x10 [ 515.015277][T14023] ? __pfx_woken_wake_function+0x10/0x10 [ 515.015306][T14023] ? rcu_is_watching+0x15/0xb0 [ 515.015342][T14023] ? __pfx_n_tty_write+0x10/0x10 [ 515.015363][T14023] file_tty_write+0x561/0xa10 [ 515.015392][T14023] vfs_write+0x629/0xba0 [ 515.015439][T14023] ? __pfx_vfs_write+0x10/0x10 [ 515.015473][T14023] ? __fget_files+0x2a/0x420 [ 515.015503][T14023] ksys_write+0x156/0x270 [ 515.015534][T14023] ? __pfx_ksys_write+0x10/0x10 [ 515.015562][T14023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.015581][T14023] do_syscall_64+0x15f/0xf80 [ 515.015604][T14023] ? trace_irq_disable+0x3b/0x140 [ 515.015623][T14023] ? clear_bhb_loop+0x40/0x90 [ 515.015643][T14023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.015660][T14023] RIP: 0033:0x7fc8d909c819 [ 515.015690][T14023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.015706][T14023] RSP: 002b:00007fc8d72f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 515.015726][T14023] RAX: ffffffffffffffda RBX: 00007fc8d9315fa0 RCX: 00007fc8d909c819 [ 515.015739][T14023] RDX: 0000000000000375 RSI: 0000200000001040 RDI: 0000000000000004 [ 515.015753][T14023] RBP: 00007fc8d9132c91 R08: 0000000000000000 R09: 0000000000000000 [ 515.015765][T14023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.015776][T14023] R13: 00007fc8d9316038 R14: 00007fc8d9315fa0 R15: 00007fff46515138 [ 515.015796][T14023] [ 515.015806][T14023] Modules linked in: [ 515.015846][T14023] ---[ end trace 0000000000000000 ]--- [ 515.016232][T14023] RIP: 0010:__list_add_valid_or_report+0xa5/0x130 [ 515.016256][T14023] Code: 74 12 b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d e9 02 ed 85 06 cc 48 c7 c7 c0 48 a8 8b 4c 89 fe 4c 89 f2 48 89 d9 e8 2c b2 72 fc 90 <0f> 0b 48 c7 c7 a0 46 a8 8b e8 1d b2 72 fc 90 0f 0b 48 c7 c7 60 47 [ 515.016269][T14023] RSP: 0018:ffffc9000808f310 EFLAGS: 00010246 [ 515.016284][T14023] RAX: 0000000000000058 RBX: ffff88803eeb0078 RCX: cd0fcd54ed6f5200 [ 515.016295][T14023] RDX: ffffc90011a90000 RSI: 000000000001afda RDI: 000000000001afdb [ 515.016307][T14023] RBP: 1ffff11007dd6010 R08: 0000000000000000 R09: 0000000000000000 [ 515.016317][T14023] R10: dffffc0000000000 R11: fffff52001011e11 R12: 1ffff11006ea4fc3 [ 515.016329][T14023] R13: dffffc0000000000 R14: ffff888037527e18 R15: ffff888037527e18 [ 515.016341][T14023] FS: 00007fc8d72f66c0(0000) GS:ffff888125eb6000(0000) knlGS:0000000000000000 [ 515.016356][T14023] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 515.016367][T14023] CR2: 00007ffe1ff2db68 CR3: 0000000067aae000 CR4: 00000000003526f0 [ 515.016387][T14023] Kernel panic - not syncing: Fatal exception [ 515.017034][T14023] Kernel Offset: disabled