last executing test programs: 46.563374786s ago: executing program 1 (id=365): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) write$bt_hci(r0, &(0x7f0000000180)=ANY=[], 0xa) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 46.448487059s ago: executing program 1 (id=367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 45.522588372s ago: executing program 1 (id=375): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000c42000/0x4000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 44.437515619s ago: executing program 1 (id=379): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000000)={[{@nodioread_nolock}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@nojournal_checksum}, {@resgid}, {@acl}, {@barrier}]}, 0x0, 0x47f, &(0x7f0000000680)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 43.671474249s ago: executing program 1 (id=382): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) mmap$binder(&(0x7f00006ff000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x6000) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000700000/0x1000)=nil, 0x1000}, 0x1}) 42.868869599s ago: executing program 1 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x149f, &(0x7f0000001600)={0x0, 0x3ddc, 0x8, 0x2, 0x33}, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) close(r0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 42.547809078s ago: executing program 32 (id=385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_io_uring_setup(0x149f, &(0x7f0000001600)={0x0, 0x3ddc, 0x8, 0x2, 0x33}, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) close(r0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) 3.146172731s ago: executing program 4 (id=621): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) 3.002364184s ago: executing program 3 (id=622): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}}}, 0xb8}}, 0x2c000010) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x0, 0x0}) 2.950233976s ago: executing program 4 (id=624): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c"], 0x38, 0x24834bca8dcb414f}, 0x4000010) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x4008040) ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) 2.814384909s ago: executing program 3 (id=625): socket(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r1 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x90000001}) ppoll(&(0x7f0000000080)=[{r0, 0x1010}, {r1, 0x58}], 0x2, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) 2.749357161s ago: executing program 4 (id=626): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)={[0x9]}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff06, 0xfa00, {0x2, &(0x7f00000000c0), 0x111, 0x5}}, 0xffffffa5) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x3}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.576739835s ago: executing program 3 (id=629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0xb}, {}, {0xc, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20040054) 2.576599345s ago: executing program 4 (id=630): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0xd27, 0x4d) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000380)="f2a3caf12c99b40132fd592132e08f0f952c87a30e5747a2d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546ce2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4351633c58424e", 0x5f}], 0x1}}], 0x1, 0xc840) 2.452526948s ago: executing program 0 (id=632): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000000002) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000380)={0x40000, 0x0, {[0x7d, 0x8, 0x2, 0xbdf1, 0x6, 0x6, 0x0, 0x1]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.40095282s ago: executing program 3 (id=633): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file2\x00', 0x8, &(0x7f00000001c0)={[{@clear_cache}, {@space_cache}, {@discard}, {@notreelog}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x5}}]}, 0x1, 0x50ed, &(0x7f00000051c0)="$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") open(0x0, 0x14b27e, 0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x7ffffffe, 0x8ffff) 2.216374314s ago: executing program 0 (id=634): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 1.876415092s ago: executing program 2 (id=635): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x2, 0x8, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) 1.691062447s ago: executing program 4 (id=637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x8000}}, {@dax_never}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd6f0}) 1.530491561s ago: executing program 3 (id=640): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x7d, 0x1507, &(0x7f0000001800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x4) sendfile(r0, r0, 0x0, 0x7a680000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000000)=0x1) sendfile(r1, r1, 0x0, 0xa) 1.284959628s ago: executing program 2 (id=642): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.257215558s ago: executing program 0 (id=643): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x8, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0xff}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x1d98, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x2, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xcb, 0x800, 0x1, 0x6c1b, 0x0, 0x3, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xa77e]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3) 1.132974891s ago: executing program 4 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x7c, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@TCA_CHAIN={0x8, 0xb, 0xa}, @filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2a1, 0x20000000, 0x3, 0x40, 0xfffffffa, {0x0, 0x1, 0x3ff, 0x3ff, 0x10, 0x8001}, {0x6, 0x1, 0x90, 0x9, 0x2, 0x7}, 0xf, 0x4, 0x3}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4884) 1.132761361s ago: executing program 5 (id=645): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800) openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xf63, @loopback={0xffffffffffff0000}, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x9, @loopback, 0x7fff}, 0x1c) 1.132564981s ago: executing program 2 (id=646): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.037835364s ago: executing program 5 (id=647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newtaction={0x14, 0x32, 0xa01, 0x0, 0x3}, 0x14}}, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) 938.656867ms ago: executing program 2 (id=648): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 824.988419ms ago: executing program 5 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 684.419583ms ago: executing program 5 (id=650): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001740)={0x0, 0x8, &(0x7f0000000740)="8af7a39ac7136fdc"}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x53, 0x7, 0x2008, {0x1000, 0x1}, {0x74, 0x2}, @ramp={0x6, 0x1, {0x1c33, 0xf, 0x4, 0x5}}}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000140)={@loopback, @private=0xa010102, 0x0, "8dab673b8bc79d7fd0eebfcbf1fd8e2049442daadb0ac028dcb1bd239749c5fa", 0x6, 0x10000, 0x10, 0x5}, 0x3c) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) 573.672225ms ago: executing program 5 (id=651): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84, &(0x7f0000000000)=ANY=[], 0x8b, 0x2e3, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x104) 524.951607ms ago: executing program 2 (id=652): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1a04447, &(0x7f0000000240)=ANY=[], 0x0, 0x20d, &(0x7f0000000480)="$eJzsmb9rFEEUx78zu7m7RBFEsLAxYIoIyd7unoqNYPwLhMRfnYdZQ3STk90VcgGRYGNj63/gv2ARECzs7NJqoYJo4YGNlcXIzM7uTvaH5jTBIu8DN/OdmTfvzbwbXrMgCOLQ8unjjw/PrlxcmgNwFDNo6/mvVmHDDfv3HS3evXizfuzRdtkfGzO+DeD1goVEj4WiWJ/R/RJErq+B46zWN8DgaH0bHNe1DsBwS+t7hh5MahEGzp1BuHx3NQxc2Xiy8WXTK59vtMWwDEBeXVi7zx8PN+/3wzCI4mFHeY30zITI4uQzpnGDeIXyriCKzXitav7s0QLHJSN/8v+6+fTJlhw7EI9l74Ln+fPA4WndA8NilhO04ThOkRLj/qfswr9Vf/8/ihM1SztHgD1uH0MwKHF8/jKajed+7+dn09I09vOoZdHSf/EBhvhrIf5b9Oy57YtDZsxMSsFMzydH22+ruz4f5AWn65eef//yUF76X0NA1+zK0s5U1ViItGDs7a2i+a3m9WlXyZL1w4adj7vJ2oNuPNycX13rrwQrwbrv9y6451z3vN9VhSht0YSNjqpPU4b/iQbbFmtho58kkbcBJJGXj/20NSru4svBN7WHq/rHMXsm9cGyGtyuj8H0j6teqlmr8fAEQRAEQRAEQRAEQRAEQRBjcRpMf0UTLP+gVsW/qqx/BQAA//9LzlT6") mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) 406.834409ms ago: executing program 0 (id=653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) syz_emit_vhci(0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000030a010800000000000000000a0000070900010073797a31000000000900030073797a3100000020140000001100010000000000000000000700000a"], 0x54}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) close(0x3) 291.233203ms ago: executing program 3 (id=654): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 133.890167ms ago: executing program 0 (id=655): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x10, 0x0, 0x1300) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0xfffffff9, @empty, 0x200001}, 0x80, 0x0}, 0xc008810) 104.426677ms ago: executing program 2 (id=656): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6d, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 653.51µs ago: executing program 5 (id=657): r0 = syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x1, 0x19a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000000)) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x20000001}) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) 0s ago: executing program 0 (id=658): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) kernel console output (not intermixed with test programs): mode: none. [ 80.421996][ T1227] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 80.485202][ T4498] EXT4-fs (loop4): shut down requested (1) [ 80.527757][ T1227] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 80.787490][ T4271] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 80.979557][ T4201] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.029946][ T4556] loop1: detected capacity change from 0 to 16 [ 81.104906][ T4556] erofs: (device loop1): mounted with root inode @ nid 36. [ 81.257505][ T4201] usb 4-1: Using ep0 maxpacket: 32 [ 81.387364][ T4271] usb 3-1: string descriptor 0 read error: -22 [ 81.393617][ T4271] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 81.403125][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.432861][ T4271] usb 3-1: config 0 descriptor?? [ 81.447473][ T4201] usb 4-1: unable to get BOS descriptor or descriptor too short [ 81.499096][ T4271] usbtest 3-1:0.0: FX2 device [ 81.503731][ T4561] loop1: detected capacity change from 0 to 512 [ 81.503834][ T4271] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 81.547706][ T4201] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.558406][ T4561] EXT4-fs (loop1): Ignoring removed bh option [ 81.561585][ T4201] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 81.578523][ T4201] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 81.635663][ T4561] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.102: corrupted in-inode xattr [ 81.658023][ T4561] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.102: couldn't read orphan inode 15 (err -117) [ 81.670807][ T4561] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000001,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000001,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 81.797563][ T4201] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 81.814908][ T4201] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.826324][ T4201] usb 4-1: Product: syz [ 81.833451][ T4201] usb 4-1: Manufacturer: syz [ 81.845376][ T4201] usb 4-1: SerialNumber: syz [ 81.848790][ T4568] netlink: 260 bytes leftover after parsing attributes in process `syz.0.104'. [ 81.887605][ T4299] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.887863][ T4534] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 82.065628][ T4574] loop1: detected capacity change from 0 to 256 [ 82.077473][ T4574] exfat: Deprecated parameter 'utf8' [ 82.116956][ T4572] loop0: detected capacity change from 0 to 4096 [ 82.124270][ T4574] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 82.167402][ T4299] usb 5-1: Using ep0 maxpacket: 32 [ 82.208185][ T4572] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 82.288373][ T21] usb 3-1: USB disconnect, device number 3 [ 82.328097][ T4299] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 82.340207][ T4299] usb 5-1: config 0 has no interface number 0 [ 82.417603][ T4201] usb 4-1: MIDIStreaming interface descriptor not found [ 82.463089][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.528291][ T4299] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 82.548477][ T4193] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 82.559211][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.576086][ T4201] usb 4-1: USB disconnect, device number 3 [ 82.582394][ T4299] usb 5-1: Product: syz [ 82.586600][ T4299] usb 5-1: Manufacturer: syz [ 82.649144][ T4299] usb 5-1: SerialNumber: syz [ 82.703066][ T4299] usb 5-1: config 0 descriptor?? [ 82.745166][ T4587] loop0: detected capacity change from 0 to 256 [ 82.770430][ T4299] smsc95xx v2.0.0 [ 82.832614][ T4587] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 82.970621][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.075272][ T4596] loop3: detected capacity change from 0 to 1024 [ 83.173356][ T4608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.210063][ T4299] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 83.245079][ T4299] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 83.497658][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.603635][ T4619] input: syz1 as /devices/virtual/input/input6 [ 83.680075][ T9] hfsplus: b-tree write err: -5, ino 8 [ 83.926266][ T4624] loop3: detected capacity change from 0 to 512 [ 84.052700][ T4627] loop2: detected capacity change from 0 to 512 [ 84.099911][ T4624] EXT4-fs (loop3): Ignoring removed bh option [ 84.106248][ T4624] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 84.157361][ T4624] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.171668][ T4627] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.294747][ T4627] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 84.310461][ T4624] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 84.331699][ T4615] loop0: detected capacity change from 0 to 131072 [ 84.338291][ C1] sched: RT throttling activated [ 84.357923][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.368587][ T4627] EXT4-fs (loop2): 1 truncate cleaned up [ 84.374749][ T4627] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000003,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,nombcache,. Quota mode: none. [ 84.378704][ T4624] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 84.396176][ T4299] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000020: -71 [ 84.404319][ T4624] System zones: 0-2, 18-18, 34-35 [ 84.426216][ T4624] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bh,mblk_io_submit,,errors=continue. Quota mode: none. [ 84.428239][ T4615] XFS: ikeep mount option is deprecated. [ 84.494813][ T4624] EXT4-fs (loop3): shut down requested (0) [ 84.512850][ T4299] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 84.536475][ T4299] usb 5-1: USB disconnect, device number 2 [ 84.554014][ T4615] XFS (loop0): Mounting V5 Filesystem [ 84.608075][ T4271] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.704166][ T4615] XFS (loop0): Starting recovery (logdev: internal) [ 84.746880][ T4615] XFS (loop0): Ending recovery (logdev: internal) [ 84.787066][ T4615] XFS (loop0): Unmounting Filesystem [ 84.967617][ T4271] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.968994][ T4653] ip_tables: iptables: counters copy to user failed while replacing table [ 84.995123][ T4653] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.057691][ T4271] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=8b.40 [ 85.090045][ T4271] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 85.134194][ T4271] usb 2-1: Manufacturer: syz [ 85.165778][ T4271] usb 2-1: config 0 descriptor?? [ 85.233521][ T4271] gspca_main: spca501-2.14.0 probing 0000:0000 [ 85.417036][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.533295][ T4659] loop0: detected capacity change from 0 to 128 [ 85.557811][ T4659] EXT4-fs (loop0): Test dummy encryption mode enabled [ 85.584413][ T4659] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 85.595967][ T4655] loop2: detected capacity change from 0 to 32768 [ 85.636107][ T4659] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.657620][ T4271] gspca_spca501: reg write: error -71 [ 85.667677][ T4655] JBD2: Ignoring recovery information on journal [ 85.667693][ T4271] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 85.729710][ T4655] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 85.747729][ T4375] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 85.776391][ T4271] spca501: probe of 2-1:0.0 failed with error -22 [ 85.837838][ T4271] usb 2-1: USB disconnect, device number 3 [ 85.861610][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 86.032020][ T4672] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 86.137479][ T4375] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 86.175516][ T4375] usb 5-1: config 0 has no interface number 0 [ 86.203289][ T4375] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.259945][ T4375] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.303333][ T4375] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.345854][ T4375] usb 5-1: config 0 interface 1 has no altsetting 0 [ 86.373026][ T4375] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 86.390332][ T4375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.410203][ T4375] usb 5-1: config 0 descriptor?? [ 86.443058][ T4690] vivid-002: ================= START STATUS ================= [ 86.455872][ T4690] vivid-002: Radio HW Seek Mode: Bounded [ 86.463722][ T4690] vivid-002: Radio Programmable HW Seek: false [ 86.470873][ T4690] vivid-002: RDS Rx I/O Mode: Block I/O [ 86.476693][ T4690] vivid-002: Generate RBDS Instead of RDS: false [ 86.499695][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.513335][ T4690] vivid-002: RDS Reception: true [ 86.532858][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.575624][ T4690] vivid-002: RDS Program Type: 0 inactive [ 86.587476][ T4690] vivid-002: RDS PS Name: inactive [ 86.592766][ T4690] vivid-002: RDS Radio Text: inactive [ 86.627545][ T4690] vivid-002: RDS Traffic Announcement: false inactive [ 86.634412][ T4690] vivid-002: RDS Traffic Program: false inactive [ 86.669458][ T4690] vivid-002: RDS Music: false inactive [ 86.675016][ T4690] vivid-002: ================== END STATUS ================== [ 86.742043][ T4699] ip_tables: iptables: counters copy to user failed while replacing table [ 86.853865][ T1111] cfg80211: failed to load regulatory.db [ 86.985928][ T4709] set_capacity_and_notify: 1 callbacks suppressed [ 86.985944][ T4709] loop2: detected capacity change from 0 to 512 [ 87.068310][ T4709] EXT4-fs (loop2): Ignoring removed oldalloc option [ 87.116136][ T4712] device wlan0 entered promiscuous mode [ 87.128046][ T4375] uclogic 0003:145F:0212.0002: pen parameters not found [ 87.136032][ T4375] uclogic 0003:145F:0212.0002: interface is invalid, ignoring [ 87.141688][ T4709] EXT4-fs (loop2): mounted filesystem without journal. Opts: auto_da_alloc,max_dir_size_kb=0x0000000000000e6b,mb_optimize_scan=0x0000000000000000,oldalloc,,errors=continue. Quota mode: writeback. [ 87.238759][ T4712] device macsec1 entered promiscuous mode [ 87.255935][ T4709] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.280929][ T1111] usb 5-1: USB disconnect, device number 3 [ 87.374252][ T4716] device macsec2 entered promiscuous mode [ 87.405287][ T4716] Zero length message leads to an empty skb [ 87.443736][ T4709] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.156: bg 0: block 217: padding at end of block bitmap is not set [ 87.619920][ T4721] loop3: detected capacity change from 0 to 512 [ 87.627454][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.699199][ T4723] loop1: detected capacity change from 0 to 256 [ 87.746623][ T4721] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 87.782481][ T4721] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 87.944845][ T4721] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.160: corrupted in-inode xattr [ 88.057339][ T4721] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.160: couldn't read orphan inode 15 (err -117) [ 88.096295][ T4721] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 88.292328][ T4736] loop2: detected capacity change from 0 to 512 [ 88.426173][ T4736] FAT-fs (loop2): bogus logical sector size 2303 [ 88.472942][ T4736] FAT-fs (loop2): Can't find a valid FAT filesystem [ 88.548147][ T4742] loop4: detected capacity change from 0 to 512 [ 88.607820][ T4742] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.647564][ T4742] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.697495][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.724138][ T4742] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.171: Invalid block bitmap block 0 in block_group 0 [ 88.730254][ T4750] loop0: detected capacity change from 0 to 256 [ 88.750703][ T4742] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 88.787772][ T4742] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.171: attempt to clear invalid blocks 983261 len 1 [ 88.829842][ T4742] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.171: Invalid inode table block 0 in block_group 0 [ 88.909944][ T4742] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 88.933447][ T4742] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 88.957811][ T4232] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.970812][ T4742] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.171: Invalid inode table block 0 in block_group 0 [ 89.007725][ T4742] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 89.097466][ T4742] EXT4-fs error (device loop4): ext4_truncate:4286: inode #11: comm syz.4.171: mark_inode_dirty error [ 89.103475][ T4750] FAT-fs (loop0): Directory bread(block 64) failed [ 89.117495][ T4750] FAT-fs (loop0): Directory bread(block 65) failed [ 89.126662][ T4750] FAT-fs (loop0): Directory bread(block 66) failed [ 89.145399][ T4742] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 89.163142][ T4750] FAT-fs (loop0): Directory bread(block 67) failed [ 89.181678][ T4742] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.171: Invalid inode table block 0 in block_group 0 [ 89.188198][ T4750] FAT-fs (loop0): Directory bread(block 68) failed [ 89.202091][ T4750] FAT-fs (loop0): Directory bread(block 69) failed [ 89.209668][ T4750] FAT-fs (loop0): Directory bread(block 70) failed [ 89.216585][ T4750] FAT-fs (loop0): Directory bread(block 71) failed [ 89.223816][ T4750] FAT-fs (loop0): Directory bread(block 72) failed [ 89.231754][ T4750] FAT-fs (loop0): Directory bread(block 73) failed [ 89.233750][ T4742] EXT4-fs (loop4): 1 truncate cleaned up [ 89.259055][ T4742] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none. [ 89.379188][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.407254][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.417063][ T4232] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 89.443793][ T4232] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.464187][ T4232] usb 4-1: config 0 descriptor?? [ 89.567561][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.675254][ T4774] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.684330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.737890][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.852036][ T4781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.868053][ T4781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.899161][ T4781] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.970560][ T4232] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 89.986646][ T4232] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 90.013789][ T4232] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 90.032058][ T4232] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 90.047757][ T4232] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 90.081026][ T4781] syz.0.185 (4781) used greatest stack depth: 18768 bytes left [ 90.103165][ T4232] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 90.179780][ T4789] loop2: detected capacity change from 0 to 8 [ 90.263228][ T4789] SQUASHFS error: zlib decompression failed, data probably corrupt [ 90.285378][ T4789] SQUASHFS error: Failed to read block 0x9b: -5 [ 90.321268][ T4789] SQUASHFS error: Unable to read metadata cache entry [99] [ 90.361969][ T4789] SQUASHFS error: Unable to read inode 0x127 [ 90.497399][ T4232] playstation 0003:054C:0DF2.0003: Invalid byte count transferred, expected 64 got 41 [ 90.513818][ T4232] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense firmware info: -22 [ 90.546066][ T4232] playstation 0003:054C:0DF2.0003: Failed to get firmware info from DualSense [ 90.580186][ T4232] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 90.614665][ T4232] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 90.691619][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.759893][ T1111] usb 4-1: USB disconnect, device number 4 [ 90.856575][ T4811] vcan0: tx drop: invalid sa for name 0x00000000000000f0 [ 90.912390][ T4809] fido_id[4809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 91.140910][ T4823] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 91.155323][ T4824] bridge0: port 3(syz_tun) entered blocking state [ 91.186259][ T4824] bridge0: port 3(syz_tun) entered disabled state [ 91.217001][ T4824] device syz_tun entered promiscuous mode [ 91.235415][ T4824] bridge0: port 3(syz_tun) entered blocking state [ 91.242441][ T4824] bridge0: port 3(syz_tun) entered forwarding state [ 91.383885][ T4830] netlink: 'syz.2.207': attribute type 3 has an invalid length. [ 91.419569][ T4830] netlink: 'syz.2.207': attribute type 7 has an invalid length. [ 91.446983][ T4830] netlink: 198628 bytes leftover after parsing attributes in process `syz.2.207'. [ 91.655891][ T4233] kernel read not supported for file /video9 (pid: 4233 comm: kworker/0:5) [ 91.655936][ T4232] kernel write not supported for file /sequencer (pid: 4232 comm: kworker/1:7) [ 91.827781][ T4851] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.853697][ T4851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.861679][ T4851] IPv6: NLM_F_CREATE should be set when creating new route [ 91.869552][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.938673][ T4851] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 91.946395][ T4851] IPv6: NLM_F_CREATE should be set when creating new route [ 91.958353][ T4233] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.019639][ T4858] loop3: detected capacity change from 0 to 1024 [ 92.106385][ T4856] loop4: detected capacity change from 0 to 8192 [ 92.207968][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 92.247541][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 92.267290][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.286996][ T4856] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 92.287335][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 92.308867][ T4856] REISERFS (device loop4): using ordered data mode [ 92.315846][ T4856] reiserfs: using flush barriers [ 92.325528][ T4229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 92.347692][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.359228][ T4271] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 92.376957][ T4233] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.396472][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.418468][ T4233] usb 2-1: config 0 descriptor?? [ 92.430751][ T4856] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 92.487559][ T4229] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 92.497524][ T4856] REISERFS (device loop4): checking transaction log (loop4) [ 92.526047][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.536914][ T4856] REISERFS (device loop4): Using r5 hash to sort names [ 92.557998][ T4229] usb 1-1: Product: syz [ 92.562269][ T4229] usb 1-1: Manufacturer: syz [ 92.575317][ T4856] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 92.577372][ T4229] usb 1-1: SerialNumber: syz [ 92.614257][ T4229] usb 1-1: config 0 descriptor?? [ 92.651313][ T4856] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 92.698173][ T4233] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 92.757571][ T4271] usb 3-1: unable to get BOS descriptor or descriptor too short [ 92.847894][ T4271] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 92.856300][ T4271] usb 3-1: config 100 has no interface number 0 [ 92.863714][ T4271] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 92.874834][ T4271] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 92.908023][ T4229] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux1 [ 92.932303][ T4271] usb 3-1: config 100 interface 173 has no altsetting 0 [ 92.957584][ T4233] usb 2-1: USB disconnect, device number 4 [ 92.961545][ T4232] net_ratelimit: 11 callbacks suppressed [ 92.961560][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.153854][ T4232] usb 1-1: USB disconnect, device number 3 [ 93.187719][ T4271] usb 3-1: string descriptor 0 read error: -22 [ 93.194114][ T4271] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 93.223761][ T4271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.268422][ T4860] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 93.271764][ T4875] loop8: detected capacity change from 0 to 8 [ 93.285856][ T4860] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 93.292103][ T4875] Dev loop8: unable to read RDB block 8 [ 93.305941][ T4875] loop8: unable to read partition table [ 93.312181][ T4875] loop8: partition table beyond EOD, truncated [ 93.325219][ T4875] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 93.329565][ T4271] metro_usb 3-1:100.173: Metrologic USB to Serial converter detected [ 93.360056][ T4271] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 93.588158][ T4860] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 93.635772][ T4299] usb 3-1: USB disconnect, device number 4 [ 93.663557][ T4299] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 93.681944][ T4299] metro_usb 3-1:100.173: device disconnected [ 93.737641][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.895957][ T4884] loop4: detected capacity change from 0 to 64 [ 93.941402][ T4882] loop3: detected capacity change from 0 to 8192 [ 93.977665][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.018070][ T4882] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 94.027464][ T4882] REISERFS (device loop3): using ordered data mode [ 94.034087][ T4882] reiserfs: using flush barriers [ 94.041308][ T4882] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.057352][ T4233] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 94.061500][ T4882] REISERFS (device loop3): checking transaction log (loop3) [ 94.075010][ T4882] REISERFS (device loop3): Using r5 hash to sort names [ 94.077845][ T4884] hfs: keylen 1794 too large [ 94.083754][ T4882] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 94.107546][ T4884] hfs: keylen 1794 too large [ 94.146209][ T4888] hfs: keylen 1794 too large [ 94.418591][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.451393][ T4233] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.505041][ T4233] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.548749][ T4233] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.568980][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.595289][ T4233] usb 2-1: config 0 descriptor?? [ 94.885622][ T4913] loop3: detected capacity change from 0 to 256 [ 94.952213][ T4913] exfat: Deprecated parameter 'utf8' [ 94.964003][ T4913] exfat: Deprecated parameter 'utf8' [ 94.985643][ T4913] exfat: Deprecated parameter 'utf8' [ 95.017474][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.033398][ T4913] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 95.068685][ T4901] loop4: detected capacity change from 0 to 32768 [ 95.091873][ T4233] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 95.138695][ T4233] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 95.161311][ T4901] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 95.188292][ T4901] JBD2: Ignoring recovery information on journal [ 95.254928][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.267852][ T4901] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 95.320800][ T4919] loop0: detected capacity change from 0 to 1024 [ 95.392842][ T1111] usb 2-1: USB disconnect, device number 5 [ 95.519205][ T4920] fido_id[4920]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 95.730837][ T4925] input: syz1 as /devices/virtual/input/input8 [ 95.810394][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.946139][ T4931] loop3: detected capacity change from 0 to 512 [ 96.016431][ T4931] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.249: inode #1: comm syz.3.249: iget: illegal inode # [ 96.016583][ T4934] loop1: detected capacity change from 0 to 512 [ 96.044918][ T4931] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.249: error while reading EA inode 1 err=-117 [ 96.057889][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.074300][ T4931] EXT4-fs (loop3): 1 orphan inode deleted [ 96.093987][ T4931] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,noblock_validity,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000004,errors=continue,dioread_lock,noblock_validity,prjquota,,errors=continue. Quota mode: writeback. [ 96.165480][ T4931] netlink: 27 bytes leftover after parsing attributes in process `syz.3.249'. [ 96.185280][ T4934] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.250: corrupted in-inode xattr [ 96.228022][ T4934] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.250: couldn't read orphan inode 15 (err -117) [ 96.246589][ T4934] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 96.448521][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.582715][ T4940] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 96.830451][ T4944] ntfs3: loop3: ino=21, "file1" fallocate(0x20) is not supported [ 97.098906][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.674275][ T4970] input: syz0 as /devices/virtual/input/input9 [ 97.730914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.887298][ T4977] input: syz0 as /devices/virtual/input/input10 [ 98.074660][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 98.142080][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.446464][ T4992] set_capacity_and_notify: 2 callbacks suppressed [ 98.446480][ T4992] loop3: detected capacity change from 0 to 256 [ 98.538653][ T4992] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 322, start 00008005) [ 98.608784][ T4992] FAT-fs (loop3): Filesystem has been set read-only [ 98.669415][ T4992] FAT-fs (loop3): error, invalid access to FAT (entry 0x00008005) [ 98.746637][ T4994] loop4: detected capacity change from 0 to 4096 [ 98.770956][ T4999] loop1: detected capacity change from 0 to 512 [ 98.786055][ T4979] loop0: detected capacity change from 0 to 32768 [ 98.809521][ T4994] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 98.838206][ T4979] XFS: ikeep mount option is deprecated. [ 98.929357][ T4999] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,init_itable,grpjquota=,sysvgroups,abort,,errors=continue. Quota mode: writeback. [ 98.978298][ T1111] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.004654][ T4999] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.039920][ T4979] XFS (loop0): Mounting V5 Filesystem [ 99.167498][ T4299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.257722][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 99.355173][ T4979] XFS (loop0): Ending clean mount [ 99.414234][ T4979] XFS (loop0): Quotacheck needed: Please wait. [ 99.420880][ T1111] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.467308][ T1111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.521685][ T5019] loop3: detected capacity change from 0 to 1024 [ 99.534305][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.607547][ T1111] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 99.624118][ T5024] loop4: detected capacity change from 0 to 512 [ 99.634968][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 99.656980][ T4979] XFS (loop0): Quotacheck: Done. [ 99.675105][ T1111] usb 3-1: SerialNumber: syz [ 99.734732][ T5024] EXT4-fs (loop4): Ignoring removed nobh option [ 99.750149][ T1111] usb 3-1: 0:2 : does not exist [ 99.858178][ T5024] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,journal_ioprio=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 99.886994][ T4193] XFS (loop0): Unmounting Filesystem [ 99.903832][ T5029] loop1: detected capacity change from 0 to 4096 [ 99.922908][ T5024] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.934631][ T5029] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 100.017983][ T4199] hfsplus: node 4:3 still has 1 user(s)! [ 100.235225][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.483822][ T5041] 0x000000000010-0x000000000020 : "" [ 100.500983][ T5041] ftl_cs: FTL header corrupt! [ 100.660365][ T1111] usb 3-1: USB disconnect, device number 5 [ 100.683389][ T5047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.717819][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.774981][ T5049] loop1: detected capacity change from 0 to 256 [ 100.833655][ T5049] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 101.172476][ T5061] loop0: detected capacity change from 0 to 512 [ 101.199104][ T5064] loop3: detected capacity change from 0 to 22 [ 101.255592][ T5064] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 101.262613][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.272248][ T5061] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 101.285359][ T5066] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 101.286204][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.304394][ T5067] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d) [ 101.306695][ T5066] hpfs: filesystem error: improperly stopped [ 101.330472][ T5064] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 101.345309][ T5066] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 101.364411][ T5066] hpfs: You really don't want any checks? You are crazy... [ 101.365228][ T5061] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.299: invalid indirect mapped block 4294967295 (level 1) [ 101.376129][ T26] audit: type=1800 audit(1786094529.650:4): pid=5067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.300" name="file1" dev="loop4" ino=1048597 res=0 errno=0 [ 101.413523][ T5066] hpfs: hpfs_map_sector(): read error [ 101.427943][ T5066] hpfs: code page support is disabled [ 101.435594][ T5066] hpfs: hpfs_map_4sectors(): unaligned read [ 101.472006][ T5066] hpfs: hpfs_map_4sectors(): unaligned read [ 101.478089][ T5061] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.299: invalid indirect mapped block 4294967295 (level 1) [ 101.482318][ T5066] hpfs: filesystem error: unable to find root dir [ 101.495451][ T5061] EXT4-fs (loop0): 2 truncates cleaned up [ 101.508530][ T5061] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000087,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback. [ 101.569692][ T5066] [ 101.642488][ T5061] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.299: bg 0: block 5: invalid block bitmap [ 101.695357][ T5074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.303'. [ 102.207682][ T4233] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 102.227770][ T5086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.297461][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.467329][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 102.587437][ T4233] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 102.621337][ T4233] usb 4-1: config 179 has no interface number 0 [ 102.644651][ T4233] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 102.707529][ T4233] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 102.749628][ T4233] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 102.764320][ T4233] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 102.789707][ T5082] (syz.1.306,5082,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.804310][ T5082] (syz.1.306,5082,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.813550][ T4233] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 102.839412][ T4233] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 102.843387][ T5082] JBD2: Ignoring recovery information on journal [ 102.853488][ T4233] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.889878][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.913145][ T5080] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.929084][ T5082] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 102.958161][ T5117] sctp: [Deprecated]: syz.0.318 (pid 5117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.958161][ T5117] Use struct sctp_sack_info instead [ 103.106530][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 103.259591][ T13] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11 [ 103.342335][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.357618][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 103.455448][ T1111] usb 4-1: USB disconnect, device number 5 [ 103.462442][ T5127] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 103.472576][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 103.474067][ T1111] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 103.519110][ T5127] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.325: invalid indirect mapped block 32768 (level 2) [ 103.540156][ T5127] EXT4-fs (loop0): Remounting filesystem read-only [ 103.547982][ T5127] EXT4-fs (loop0): 1 orphan inode deleted [ 103.553796][ T5127] EXT4-fs (loop0): 1 truncate cleaned up [ 103.598682][ T5131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 103.604044][ T5127] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 103.629604][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 103.690927][ T5127] EXT4-fs (loop0): shut down requested (1) [ 103.797672][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.917573][ T21] usb 3-1: config 1 interface 0 has no altsetting 0 [ 104.049122][ T5140] set_capacity_and_notify: 5 callbacks suppressed [ 104.049140][ T5140] loop0: detected capacity change from 0 to 4096 [ 104.117406][ T21] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.40 [ 104.136080][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.152348][ T5145] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.163972][ T21] usb 3-1: Product: syz [ 104.194598][ T21] usb 3-1: Manufacturer: syz [ 104.200719][ T21] usb 3-1: SerialNumber: syz [ 104.372033][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.576578][ T5158] loop3: detected capacity change from 0 to 2048 [ 104.633529][ T5158] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.684649][ T1111] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 104.953331][ T5173] loop3: detected capacity change from 0 to 2048 [ 105.058125][ T5173] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 105.087661][ T1111] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.098787][ T1111] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.108816][ T5174] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 105.109382][ T5173] attempt to access beyond end of device [ 105.109382][ T5173] loop3: rw=524288, want=33554432, limit=2048 [ 105.120035][ T1111] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.143184][ T4232] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.151508][ T1111] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.165359][ T1111] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 105.187802][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.216270][ T5173] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 105.231680][ T5173] NILFS error (device loop3): nilfs_bmap_last_key: broken bmap (inode number=16) [ 105.244048][ T5173] NILFS (loop3): error -5 truncating bmap (ino=16) [ 105.251081][ T21] usbhid 3-1:1.0: can't add hid device: -71 [ 105.257055][ T21] usbhid: probe of 3-1:1.0 failed with error -71 [ 105.268704][ T21] usb 3-1: USB disconnect, device number 6 [ 105.408096][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.416254][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.486322][ T5179] loop3: detected capacity change from 0 to 256 [ 105.517754][ T5179] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d) [ 105.577891][ T4232] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 105.589255][ T4232] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 105.599382][ T4232] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 105.609742][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.638441][ T5169] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 105.693685][ T5181] tap0: tun_chr_ioctl cmd 2148553947 [ 105.727880][ T5181] tap0: tun_chr_ioctl cmd 1074025698 [ 105.867312][ T4232] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.928431][ T5183] loop2: detected capacity change from 0 to 32768 [ 105.979970][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.993998][ T4233] usb 5-1: USB disconnect, device number 4 [ 106.003393][ T5183] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 106.028756][ T5183] JBD2: Ignoring recovery information on journal [ 106.090199][ T5183] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 106.127605][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 106.227624][ T5183] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid fs_generation of #1 [ 106.246593][ T5183] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 106.252126][ T5191] ima: policy update failed [ 106.256809][ T5183] OCFS2: File system is now read-only. [ 106.262379][ T26] audit: type=1807 audit(1786160070.536:5): action=measure UNKNOWN=f res=0 [ 106.267252][ T5183] (syz.2.347,5183,0):ocfs2_search_chain:1783 ERROR: status = -30 [ 106.283589][ T26] audit: type=1802 audit(1786160070.536:6): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.350" res=0 errno=0 [ 106.284034][ T5183] (syz.2.347,5183,0):ocfs2_search_chain:1893 ERROR: status = -30 [ 106.309001][ T5183] (syz.2.347,5183,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30 [ 106.317437][ T5183] (syz.2.347,5183,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30 [ 106.325812][ T5183] (syz.2.347,5183,0):__ocfs2_claim_clusters:2387 ERROR: status = -30 [ 106.330743][ T1111] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71) [ 106.333976][ T5183] (syz.2.347,5183,0):__ocfs2_claim_clusters:2395 ERROR: status = -30 [ 106.350484][ T5183] (syz.2.347,5183,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 106.353473][ T1111] gud 2-1:1.0: Failed to get connectors (error=-71) [ 106.359170][ T5183] (syz.2.347,5183,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 106.359201][ T5183] (syz.2.347,5183,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 106.359730][ T5183] (syz.2.347,5183,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 106.372661][ T26] audit: type=1802 audit(1786160070.556:7): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.350" res=0 errno=0 [ 106.376096][ T5183] (syz.2.347,5183,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 106.390373][ T1111] gud: probe of 2-1:1.0 failed with error -71 [ 106.392907][ T5183] (syz.2.347,5183,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 106.435698][ T5183] (syz.2.347,5183,0):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30 [ 106.445037][ T5183] (syz.2.347,5183,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30 [ 106.454141][ T5183] (syz.2.347,5183,0):ocfs2_symlink:1911 ERROR: status = -30 [ 106.461877][ T5183] (syz.2.347,5183,0):ocfs2_symlink:2065 ERROR: status = -30 [ 106.477724][ T4232] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 106.499371][ T1111] usb 2-1: USB disconnect, device number 6 [ 106.505343][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 106.544578][ T4232] usb 4-1: Product: syz [ 106.553759][ T4232] usb 4-1: Manufacturer: syz [ 106.560072][ T4232] usb 4-1: SerialNumber: syz [ 106.567787][ T4232] usb 4-1: config 0 descriptor?? [ 106.574712][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.593788][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 106.611868][ T4232] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 106.706591][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.767345][ T4233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.001486][ T5197] loop2: detected capacity change from 0 to 32768 [ 107.051501][ T4378] loop2: p1 < > p3 < p5 p6 > p4 [ 107.064319][ T4378] loop2: partition table partially beyond EOD, truncated [ 107.105939][ T4378] loop2: p4 start 4294967295 is beyond EOD, truncated [ 107.124205][ T4378] loop2: p6 start 2164271104 is beyond EOD, truncated [ 107.132448][ T5205] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.169679][ T5197] loop2: p1 < > p3 < p5 p6 > p4 [ 107.174814][ T5197] loop2: partition table partially beyond EOD, truncated [ 107.186421][ T5197] loop2: p4 start 4294967295 is beyond EOD, truncated [ 107.194369][ T5197] loop2: p6 start 2164271104 is beyond EOD, truncated [ 107.207282][ T4233] usb 1-1: Using ep0 maxpacket: 8 [ 107.327520][ T4233] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 107.346156][ T4233] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 107.365649][ T4233] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 107.375295][ T4232] usb 4-1: USB disconnect, device number 6 [ 107.382828][ T4233] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 129 [ 107.465355][ T4233] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.501352][ T4233] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.507338][ T5211] loop2: detected capacity change from 0 to 1024 [ 107.552057][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.636230][ T5211] EXT4-fs (loop2): Ignoring removed bh option [ 107.658116][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.722663][ T5220] loop1: detected capacity change from 0 to 1024 [ 107.734189][ T5211] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,journal_ioprio=0x0000000000000004,. Quota mode: none. [ 107.820714][ T26] audit: type=1800 audit(1786160072.106:8): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.358" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 107.833669][ T4378] udevd[4378]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 107.833973][ T5199] netlink: 40 bytes leftover after parsing attributes in process `syz.4.353'. [ 107.840579][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 107.843440][ T4603] udevd[4603]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 107.847513][ T4233] usb 1-1: GET_CAPABILITIES returned 0 [ 107.847550][ T4233] usbtmc 1-1:16.0: can't read capabilities [ 107.893868][ T4379] udevd[4379]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 107.895996][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 107.936702][ T4378] udevd[4378]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 108.088475][ T4233] usb 1-1: USB disconnect, device number 4 [ 108.245938][ T1111] kernel write not supported for file /input/mice (pid: 1111 comm: kworker/1:2) [ 108.625723][ T5241] loop4: detected capacity change from 0 to 1024 [ 108.734250][ T5241] hfsplus: failed to load root directory [ 108.855564][ T5241] netlink: 192 bytes leftover after parsing attributes in process `syz.4.369'. [ 108.943700][ T5242] loop2: detected capacity change from 0 to 32768 [ 108.956546][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.048076][ T5242] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 109.056616][ T5242] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 109.168719][ T5242] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 109.185555][ T4229] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 109.194438][ T4229] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 109.670130][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.377'. [ 110.008376][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.203494][ T5266] loop1: detected capacity change from 0 to 512 [ 110.274681][ T5258] loop0: detected capacity change from 0 to 131072 [ 110.283366][ T4229] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1088ms [ 110.298694][ T4229] gfs2: fsid=syz:syz.0: jid=0: Done [ 110.306029][ T5242] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 110.315778][ T5266] EXT4-fs (loop1): orphan cleanup on readonly fs [ 110.317480][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.356738][ T5266] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.379: ea_inode with extended attributes [ 110.394626][ T5258] F2FS-fs (loop0): invalid crc value [ 110.518718][ T5258] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.558725][ T5258] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 110.587617][ T5266] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.379: error while reading EA inode 11 err=-117 [ 110.637928][ T5266] EXT4-fs (loop1): 1 orphan inode deleted [ 110.643720][ T5266] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,dioread_lock,debug_want_extra_isize=0x0000000000000006,nojournal_checksum,resgid=0x0000000000000000,acl,barrier,,errors=continue. Quota mode: none. [ 110.666275][ T5258] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 111.088381][ T1111] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.196630][ T5264] loop3: detected capacity change from 0 to 32768 [ 111.405353][ T5264] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 111.443412][ T5274] loop4: detected capacity change from 0 to 32768 [ 111.585667][ T5264] (syz.3.378,5264,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount [ 111.742452][ T5278] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #64 has bitmap size 448 but physical max of 256 [ 111.880984][ T5278] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 111.947492][ T5278] OCFS2: File system is now read-only. [ 111.953192][ T5278] (syz.3.378,5278,1):ocfs2_test_suballoc_bit:2814 ERROR: read group 64 failed -30 [ 112.013131][ T5278] (syz.3.378,5278,1):ocfs2_test_suballoc_bit:2825 ERROR: status = -30 [ 112.024690][ T5280] device erspan0 entered promiscuous mode [ 112.039708][ T5278] (syz.3.378,5278,1):ocfs2_test_inode_bit:2887 ERROR: test suballoc bit failed -30 [ 112.049673][ T5280] device vlan2 entered promiscuous mode [ 112.097731][ T5278] (syz.3.378,5278,1):ocfs2_test_inode_bit:2896 ERROR: status = -30 [ 112.133643][ T5278] (syz.3.378,5278,1):ocfs2_get_parent:166 ERROR: test inode bit failed -30 [ 112.148824][ T4201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.248731][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 113.103389][ T5299] loop4: detected capacity change from 0 to 2048 [ 113.178152][ T4201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.198110][ T5299] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 113.304091][ T5292] chnl_net:caif_netlink_parms(): no params data found [ 113.328277][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.607891][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.664737][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.705363][ T5292] device bridge_slave_0 entered promiscuous mode [ 113.708208][ T5312] input: syz1 as /devices/virtual/input/input12 [ 113.723716][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.743544][ T5301] loop0: detected capacity change from 0 to 32768 [ 113.746373][ T5287] loop2: detected capacity change from 0 to 32768 [ 113.784925][ T5301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.381 (5301) [ 113.786336][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.842414][ T5292] device bridge_slave_1 entered promiscuous mode [ 113.855487][ T5301] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 113.895953][ T5301] BTRFS info (device loop0): setting nodatacow, compression disabled [ 113.917974][ T5301] BTRFS info (device loop0): turning on flush-on-commit [ 113.928474][ T5287] JBD2: Ignoring recovery information on journal [ 113.937992][ T5292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.957983][ T5301] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 113.968563][ T5301] BTRFS info (device loop0): use lzo compression, level 0 [ 113.975833][ T5301] BTRFS info (device loop0): setting nodatasum [ 113.984444][ T5301] BTRFS info (device loop0): use no compression [ 113.990897][ T5301] BTRFS info (device loop0): trying to use backup root at mount time [ 113.999197][ T5301] BTRFS info (device loop0): max_inline at 0 [ 114.005221][ T5301] BTRFS info (device loop0): using free space tree [ 114.012013][ T5301] BTRFS info (device loop0): has skinny extents [ 114.030904][ T5292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.084436][ T5287] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 114.180693][ T5292] team0: Port device team_slave_0 added [ 114.209662][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.220368][ T5292] team0: Port device team_slave_1 added [ 114.237418][ T4201] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.242275][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.252599][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.329875][ T145] BTRFS warning (device loop0): checksum verify failed on 5332992 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 114.354642][ T5301] BTRFS warning (device loop0): couldn't read tree root [ 114.365592][ T156] BTRFS warning (device loop0): checksum verify failed on 5324800 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 114.398914][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 114.407917][ T5292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.429264][ T5301] BTRFS warning (device loop0): couldn't read tree root [ 114.444224][ T5301] BTRFS error (device loop0): parent transid verify failed on 5255168 wanted 5 found 7 [ 114.467634][ T5301] BTRFS warning (device loop0): couldn't read tree root [ 114.488731][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.495728][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.547422][ T5301] BTRFS info (device loop0): enabling ssd optimizations [ 114.561166][ T5301] BTRFS info (device loop0): clearing free space tree [ 114.568168][ T4201] usb 5-1: Using ep0 maxpacket: 8 [ 114.571018][ T5292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.584606][ T5301] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.596872][ T5301] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.707436][ T4201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 114.749204][ T4201] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 114.764034][ T5292] device hsr_slave_0 entered promiscuous mode [ 114.788543][ T4201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.798496][ T5292] device hsr_slave_1 entered promiscuous mode [ 114.808712][ T5301] BTRFS info (device loop0): creating free space tree [ 114.826096][ T5292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.834465][ T4201] usb 5-1: config 0 descriptor?? [ 114.846927][ T5301] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.857480][ T5292] Cannot create hsr debugfs directory [ 114.875466][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 114.906350][ T5301] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.931661][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.008007][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.036398][ T5347] loop2: detected capacity change from 0 to 8192 [ 115.086167][ T5347] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 115.107559][ T5347] REISERFS (device loop2): using ordered data mode [ 115.137928][ T5347] reiserfs: using flush barriers [ 115.144668][ T5347] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 115.168230][ T5347] REISERFS (device loop2): checking transaction log (loop2) [ 115.169016][ T4201] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 115.245373][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.265774][ T4201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.445027][ T5347] REISERFS (device loop2): Using rupasov hash to sort names [ 115.507764][ T5347] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 115.860294][ T5373] loop0: detected capacity change from 0 to 2048 [ 115.902739][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.908979][ T5373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.085926][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.293648][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.367694][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.485592][ T5292] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 116.547103][ T5292] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 116.589036][ T5371] usb 5-1: USB disconnect, device number 5 [ 116.705324][ T5375] loop3: detected capacity change from 0 to 32768 [ 116.733930][ T5292] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 116.756882][ T5391] loop0: detected capacity change from 0 to 16 [ 116.791283][ T5292] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 116.816066][ T5375] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 116.820580][ T5393] loop2: detected capacity change from 0 to 256 [ 116.844139][ T5391] erofs: (device loop0): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 116.878967][ T5393] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.931545][ T4229] Bluetooth: hci0: command 0x041b tx timeout [ 117.123212][ T5375] syz.3.409 (5375) used greatest stack depth: 18304 bytes left [ 117.223815][ T5404] loop4: detected capacity change from 0 to 64 [ 117.231154][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.262738][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.316303][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 117.328825][ T5371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.331702][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.337513][ T5404] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing [ 117.403197][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.424413][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.451406][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.488080][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.508115][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.523236][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.533699][ T5402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 117.667351][ T4375] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 117.780758][ T5414] team0 (unregistering): Port device team_slave_0 removed [ 117.876802][ T5414] team0 (unregistering): Port device team_slave_1 removed [ 117.943810][ T4375] usb 4-1: Using ep0 maxpacket: 16 [ 118.037956][ T4375] usb 4-1: unable to get BOS descriptor or descriptor too short [ 118.127974][ T4375] usb 4-1: config 3 has an invalid interface number: 71 but max is 0 [ 118.136692][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.144135][ T4375] usb 4-1: config 3 has no interface number 0 [ 118.160606][ T4375] usb 4-1: config 3 interface 71 has no altsetting 0 [ 118.243950][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 118.255660][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 118.301288][ T5292] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.336151][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 118.348734][ T4375] usb 4-1: New USB device found, idVendor=1546, idProduct=1104, bcdDevice=b6.0d [ 118.363409][ T26] audit: type=1800 audit(1786160082.646:9): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.428" name="bmAttributes" dev="configfs" ino=37160 res=0 errno=0 [ 118.384491][ T4375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.404332][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 118.413271][ T4256] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.420566][ T4256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.428661][ T4375] usb 4-1: Product: syz [ 118.437439][ T4375] usb 4-1: Manufacturer: syz [ 118.451796][ T5443] device ipvlan2 entered promiscuous mode [ 118.453320][ T4375] usb 4-1: SerialNumber: syz [ 118.494593][ T5443] team0: Device ipvlan2 failed to register rx_handler [ 118.501917][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.533841][ T5446] loop0: detected capacity change from 0 to 1024 [ 118.818067][ T4375] cdc_ether 4-1:3.71: invalid descriptor buffer length [ 118.828261][ T5446] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000006,nodioread_nolock,,errors=continue. Quota mode: none. [ 118.848962][ T4375] usb 4-1: bad CDC descriptors [ 118.865135][ T5446] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.867120][ T4375] usb 4-1: USB disconnect, device number 7 [ 118.932946][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 118.963922][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 118.994926][ T5446] EXT4-fs (loop0): shut down requested (2) [ 119.007702][ T4233] Bluetooth: hci0: command 0x040f tx timeout [ 119.015760][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 119.029733][ T4256] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.036904][ T4256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.050744][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 119.285654][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 119.308288][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 119.329121][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 119.379335][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 119.404617][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 119.413155][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.428710][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 119.447871][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 119.466453][ T5457] loop3: detected capacity change from 0 to 256 [ 119.468033][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 119.502110][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 119.530273][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 119.555496][ T5457] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 119.579343][ T5292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 119.633700][ T5368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.636333][ T5459] pimreg: tun_chr_ioctl cmd 1074812117 [ 119.704715][ T5461] pimreg: tun_chr_ioctl cmd 1074025673 [ 119.770757][ T26] audit: type=1800 audit(1786160084.056:10): pid=5457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.434" name="bus" dev="loop3" ino=1048598 res=0 errno=0 [ 119.812663][ T5464] loop4: detected capacity change from 0 to 512 [ 120.086754][ T144] device hsr_slave_0 left promiscuous mode [ 120.146054][ T5464] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.435: inode #1048320: comm syz.4.435: iget: illegal inode # [ 120.181799][ T144] device hsr_slave_1 left promiscuous mode [ 120.262930][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.281305][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.327406][ T5464] EXT4-fs (loop4): Remounting filesystem read-only [ 120.357278][ T5464] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.435: error while reading EA inode 1048320 err=-117 [ 120.374210][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.382226][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.391105][ T5482] program syz.3.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 120.402745][ T144] device bridge_slave_1 left promiscuous mode [ 120.414932][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.429805][ T5464] EXT4-fs (loop4): Remounting filesystem read-only [ 120.446108][ T5464] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.435: inode #1048320: comm syz.4.435: iget: illegal inode # [ 120.493070][ T144] device bridge_slave_0 left promiscuous mode [ 120.510558][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.536874][ T5464] EXT4-fs (loop4): Remounting filesystem read-only [ 120.557401][ T5464] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.435: error while reading EA inode 1048320 err=-117 [ 120.641861][ T5464] EXT4-fs (loop4): Remounting filesystem read-only [ 120.650692][ T144] device veth1_macvtap left promiscuous mode [ 120.665214][ T144] device veth0_macvtap left promiscuous mode [ 120.677404][ T5464] EXT4-fs (loop4): 1 orphan inode deleted [ 120.683388][ T144] device veth1_vlan left promiscuous mode [ 120.690292][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.709672][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=remount-ro,debug_want_extra_isize=0x0000000000000036,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,acl,min_batch_time=0x0000000000000101,. Quota mode: none. [ 120.733993][ T144] device veth0_vlan left promiscuous mode [ 120.858311][ T4201] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 121.087293][ T4375] Bluetooth: hci0: command 0x0419 tx timeout [ 121.124749][ T5494] loop0: detected capacity change from 0 to 4096 [ 121.127585][ T4201] usb 4-1: Using ep0 maxpacket: 8 [ 121.169689][ T5479] loop2: detected capacity change from 0 to 32768 [ 121.246038][ T5497] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 121.284752][ T5479] JBD2: Ignoring recovery information on journal [ 121.291338][ T4201] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 121.310906][ T4201] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 121.392223][ T4201] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 121.460279][ T4201] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 121.479601][ T5479] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.514437][ T4201] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 121.583584][ T4201] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 121.623514][ T4201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.727720][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.747477][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 121.927538][ T4201] usb 4-1: usb_control_msg returned -32 [ 121.934407][ T4201] usbtmc 4-1:16.0: can't read capabilities [ 122.166249][ T144] team0 (unregistering): Port device team_slave_1 removed [ 122.183565][ T144] team0 (unregistering): Port device team_slave_0 removed [ 122.205555][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.241546][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.372931][ T5510] loop0: detected capacity change from 0 to 1024 [ 122.387644][ T4229] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 122.467766][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.538938][ T5510] hfsplus: xattr searching failed [ 122.557770][ T5511] process 'syz.0.448' launched './file0' with NULL argv: empty string added [ 122.593329][ T4201] usb 4-1: USB disconnect, device number 8 [ 122.595529][ T5511] hfsplus: xattr searching failed [ 122.639751][ T144] bond0 (unregistering): Released all slaves [ 122.660097][ T5511] hfsplus: xattr searching failed [ 122.694483][ T5513] loop4: detected capacity change from 0 to 128 [ 122.757436][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.793118][ T5513] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 122.812560][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.837843][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.997627][ T4229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.035491][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.043403][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.053776][ T4256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.073630][ T4229] usb 3-1: Product: syz [ 123.096888][ T5292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.107247][ T4229] usb 3-1: Manufacturer: syz [ 123.118289][ T4229] usb 3-1: SerialNumber: syz [ 123.602092][ T21] kernel read not supported for file /video9 (pid: 21 comm: kworker/1:0) [ 123.667390][ T4233] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.728464][ T5545] loop0: detected capacity change from 0 to 1024 [ 123.887465][ T4201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.907361][ T4233] usb 4-1: Using ep0 maxpacket: 32 [ 123.920170][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.939240][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.965697][ T5545] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 124.037624][ T4233] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 124.077258][ T4233] usb 4-1: config 0 has no interface number 0 [ 124.088335][ T5371] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 124.088369][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.144938][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.191534][ T5292] device veth0_vlan entered promiscuous mode [ 124.216648][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.245069][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.261456][ T5292] device veth1_vlan entered promiscuous mode [ 124.283804][ T4233] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 124.293903][ T4229] cdc_ncm 3-1:1.0: bind() failure [ 124.317426][ T4229] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 124.324246][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.345336][ T4233] usb 4-1: Product: syz [ 124.355298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 124.363508][ T4229] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 124.370742][ T4233] usb 4-1: Manufacturer: syz [ 124.377595][ T5371] usb 5-1: Using ep0 maxpacket: 8 [ 124.379698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 124.398478][ T4229] usbtest: probe of 3-1:1.1 failed with error -71 [ 124.410986][ T4233] usb 4-1: SerialNumber: syz [ 124.434392][ T4233] usb 4-1: config 0 descriptor?? [ 124.445389][ T4229] usb 3-1: USB disconnect, device number 7 [ 124.459007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.499898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.517378][ T5371] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.519523][ T4233] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 124.535547][ T5371] usb 5-1: config 179 has no interface number 0 [ 124.548087][ T5292] device veth0_macvtap entered promiscuous mode [ 124.557383][ T5371] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 124.566253][ T5292] device veth1_macvtap entered promiscuous mode [ 124.600725][ T5371] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 124.608327][ T4372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.635521][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.647415][ T5371] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 124.651835][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.681959][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.687222][ T5371] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 124.700871][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.726006][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.743663][ T5371] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.746308][ T4233] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 124.777282][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.797690][ T5371] usb 5-1: config 179 interface 65 has no altsetting 0 [ 124.802199][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.804612][ T5371] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 124.826246][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.846151][ T4233] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 124.893615][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.905615][ T5564] loop0: detected capacity change from 0 to 256 [ 124.960714][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.977742][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.988396][ T5371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.013065][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.021249][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.026871][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.070746][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.078633][ T5371] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input13 [ 125.132575][ T5564] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d) [ 125.170573][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.191411][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.260995][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.307198][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.340859][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.363678][ T5533] loop3: detected capacity change from 0 to 256 [ 125.385057][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.426039][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.441671][ T21] usb 4-1: USB disconnect, device number 9 [ 125.447300][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 125.469788][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.487448][ T21] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 125.514852][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.545712][ T21] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 125.566510][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.593606][ T21] quatech2 4-1:0.51: device disconnected [ 125.627819][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.639010][ T5368] usb 5-1: USB disconnect, device number 6 [ 125.647242][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.661504][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.682614][ T5368] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 125.695088][ T5292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.727223][ T5292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.751990][ T5574] loop0: detected capacity change from 0 to 1024 [ 125.766851][ T5292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.803630][ T5292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.896524][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.057686][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.072734][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.129765][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.189611][ T4271] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.239709][ T1227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.251549][ T5566] loop2: detected capacity change from 0 to 32768 [ 126.275670][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.297880][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.319826][ T5566] XFS: ikeep mount option is deprecated. [ 126.328936][ T3097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.417367][ T13] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 126.467713][ T4271] usb 1-1: Using ep0 maxpacket: 8 [ 126.486505][ T5566] XFS (loop2): Mounting V5 Filesystem [ 126.528962][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.547447][ T4229] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 126.597519][ T4271] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 126.647373][ T4271] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.675238][ T5591] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 126.685600][ T13] usb 4-1: Using ep0 maxpacket: 8 [ 126.707493][ T4271] usb 1-1: config 0 has no interface number 0 [ 126.727801][ T5591] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 126.749460][ T5566] XFS (loop2): Ending clean mount [ 126.773626][ T5566] XFS (loop2): Quotacheck needed: Please wait. [ 126.808922][ T13] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 126.846168][ T13] usb 4-1: config 0 has no interface number 0 [ 126.887348][ T13] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 126.897617][ T4271] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 126.936140][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.954705][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.965215][ T4271] usb 1-1: Product: syz [ 126.973286][ T4271] usb 1-1: Manufacturer: syz [ 126.978399][ T4229] usb 5-1: unable to get BOS descriptor or descriptor too short [ 126.991688][ T13] usb 4-1: config 0 descriptor?? [ 127.007093][ T4271] usb 1-1: SerialNumber: syz [ 127.017109][ T5566] XFS (loop2): Quotacheck: Done. [ 127.021903][ T4271] usb 1-1: config 0 descriptor?? [ 127.067938][ T4229] usb 5-1: config 100 has an invalid interface number: 173 but max is 0 [ 127.080648][ T4229] usb 5-1: config 100 has no interface number 0 [ 127.090188][ T4271] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 127.114555][ T4271] usb 1-1: Failed to create links for entity 6 [ 127.121096][ T4229] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 127.142049][ T4271] usb 1-1: Failed to register entities (-22). [ 127.162341][ T4229] usb 5-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid maxpacket 64468, setting to 8 [ 127.174379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.197345][ T13] viperboard 4-1:0.143: version 0.00 found at bus 004 address 010 [ 127.210559][ T4187] XFS (loop2): Unmounting Filesystem [ 127.276820][ T4229] usb 5-1: config 100 interface 173 has no altsetting 0 [ 127.337589][ T13] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 127.341369][ T5368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.357493][ T13] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 127.374835][ T5578] ucsi_ccg 0-0008: failed to get FW build information [ 127.516036][ T5578] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 127.531643][ T5578] ucsi_ccg: probe of 0-0008 failed with error -110 [ 127.559492][ T5578] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 127.561734][ T4229] usb 5-1: string descriptor 0 read error: -22 [ 127.587370][ T4229] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 127.596471][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.673714][ T5581] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 127.686677][ T5581] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 127.702569][ T5368] usb 4-1: USB disconnect, device number 10 [ 127.766945][ T4229] metro_usb 5-1:100.173: Metrologic USB to Serial converter detected [ 127.824144][ T4229] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 127.879828][ T4201] usb 1-1: USB disconnect, device number 5 [ 128.027411][ T5581] metro-usb ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 128.046529][ T145] hfsplus: b-tree write err: -5, ino 25 [ 128.056307][ T5368] usb 5-1: USB disconnect, device number 7 [ 128.100675][ T145] hfsplus: b-tree write err: -5, ino 4 [ 128.106809][ T5368] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 128.137527][ T145] hfsplus: b-tree write err: -5, ino 2 [ 128.154545][ T5368] metro_usb 5-1:100.173: device disconnected [ 128.333613][ T5627] bridge0: port 3(syz_tun) entered blocking state [ 128.370124][ T4201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.379695][ T5627] bridge0: port 3(syz_tun) entered disabled state [ 128.422125][ T5627] device syz_tun entered promiscuous mode [ 128.461580][ T5627] bridge0: port 3(syz_tun) entered blocking state [ 128.468305][ T5627] bridge0: port 3(syz_tun) entered forwarding state [ 128.733521][ T5639] loop4: detected capacity change from 0 to 256 [ 128.878355][ T5639] FAT-fs (loop4): Directory bread(block 64) failed [ 128.928401][ T5639] FAT-fs (loop4): Directory bread(block 65) failed [ 128.935069][ T5639] FAT-fs (loop4): Directory bread(block 66) failed [ 129.000963][ T5639] FAT-fs (loop4): Directory bread(block 67) failed [ 129.048570][ T5639] FAT-fs (loop4): Directory bread(block 68) failed [ 129.084766][ T5639] FAT-fs (loop4): Directory bread(block 69) failed [ 129.104647][ T5639] FAT-fs (loop4): Directory bread(block 70) failed [ 129.123581][ T5639] FAT-fs (loop4): Directory bread(block 71) failed [ 129.143543][ T5639] FAT-fs (loop4): Directory bread(block 72) failed [ 129.163719][ T5639] FAT-fs (loop4): Directory bread(block 73) failed [ 129.265123][ T5658] loop3: detected capacity change from 0 to 64 [ 129.763219][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 130.447562][ T5371] net_ratelimit: 3 callbacks suppressed [ 130.447581][ T5371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.905420][ T5695] loop2: detected capacity change from 0 to 512 [ 131.278294][ T5695] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.479: inode #1: comm syz.2.479: iget: illegal inode # [ 131.387649][ T5695] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.479: error while reading EA inode 1 err=-117 [ 131.488918][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.510122][ T5695] EXT4-fs (loop2): 1 orphan inode deleted [ 131.516786][ T5695] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000000003,norecovery,noinit_itable,noblock_validity,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000004,errors=continue,dioread_lock,noblock_validity,prjquota,,errors=continue. Quota mode: writeback. [ 131.621685][ T5707] team0 (unregistering): Port device team_slave_0 removed [ 131.750338][ T5713] loop5: detected capacity change from 0 to 7 [ 131.757275][ T4201] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 131.766901][ T5714] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 131.773975][ T5707] team0 (unregistering): Port device team_slave_1 removed [ 131.781715][ T5713] Dev loop5: unable to read RDB block 7 [ 131.788918][ T5714] kernel profiling enabled (shift: 5) [ 131.792472][ T5713] loop5: unable to read partition table [ 131.803660][ T5713] loop5: partition table beyond EOD, truncated [ 131.820762][ T5713] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 131.849904][ T5695] netlink: 27 bytes leftover after parsing attributes in process `syz.2.479'. [ 132.081487][ T5720] loop2: detected capacity change from 0 to 512 [ 132.167452][ T5720] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 132.197518][ T4201] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.210947][ T4201] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.221627][ T4201] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.231908][ T4201] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.241685][ T5720] EXT4-fs (loop2): orphan cleanup on readonly fs [ 132.245543][ T4201] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 132.260478][ T4201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.323168][ T5728] loop4: detected capacity change from 0 to 128 [ 132.379011][ T5720] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 132.431459][ T5720] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 132.457396][ T5720] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #13: comm syz.2.484: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 132.508216][ T5720] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.484: couldn't read orphan inode 13 (err -117) [ 132.533650][ T5371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.537804][ T5720] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,noblock_validity,min_batch_time=0x00000000000052ad,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 132.560143][ T5729] loop5: detected capacity change from 0 to 8192 [ 132.620942][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.623003][ T5729] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 132.657398][ T5729] REISERFS (device loop5): using ordered data mode [ 132.664161][ T5729] reiserfs: using flush barriers [ 132.686482][ T5729] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 132.703451][ T5729] REISERFS (device loop5): checking transaction log (loop5) [ 132.723683][ T5720] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 132.732083][ T5729] REISERFS (device loop5): Using r5 hash to sort names [ 132.739514][ T5729] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 132.749793][ T5720] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 132.767723][ T5720] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 132.776893][ T5720] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8 [ 132.929595][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.936041][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.081336][ T5738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.197026][ T5725] loop3: detected capacity change from 0 to 32768 [ 133.311118][ T5725] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 133.368385][ T5747] loop5: detected capacity change from 0 to 4096 [ 133.388008][ T5747] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 133.457350][ T4201] gud 1-1:1.0: USB-1: Failed to add properties (ret=-71) [ 133.473952][ T4201] gud 1-1:1.0: Failed to get connectors (error=-71) [ 133.481103][ T4201] gud: probe of 1-1:1.0 failed with error -71 [ 133.529340][ T4201] usb 1-1: USB disconnect, device number 6 [ 133.568019][ T5368] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.605420][ T26] audit: type=1800 audit(1786160097.886:11): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.494" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 133.641765][ T5371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.658015][ T4199] ocfs2: Unmounting device (7,3) on (node local) [ 133.832080][ T5368] usb 3-1: Using ep0 maxpacket: 8 [ 133.891950][ T5752] loop5: detected capacity change from 0 to 128 [ 133.968845][ T5368] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.993617][ T5368] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 134.009477][ T5368] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.034096][ T5368] usb 3-1: config 0 descriptor?? [ 134.069921][ T5752] attempt to access beyond end of device [ 134.069921][ T5752] loop5: rw=2049, want=1041, limit=128 [ 134.203654][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.215163][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.308174][ T5368] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 134.529702][ T5368] usb 3-1: USB disconnect, device number 8 [ 134.693080][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.826372][ T5738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.870600][ T5738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.223083][ T5738] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.232655][ T5738] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.242253][ T5738] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.251424][ T5738] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.378944][ T5750] device erspan0 entered promiscuous mode [ 135.384816][ T5750] device vlan2 entered promiscuous mode [ 135.439682][ T5766] loop4: detected capacity change from 0 to 512 [ 135.468063][ T5765] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 135.532965][ T4375] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.625349][ T5766] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 135.647640][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.669959][ T5766] EXT4-fs (loop4): orphan cleanup on readonly fs [ 135.682770][ T5766] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 135.728878][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.742113][ T5766] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 135.749533][ T5766] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz.4.503: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 135.783685][ T5779] syzkaller1: tun_chr_ioctl cmd 1074025698 [ 135.790611][ T5766] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.503: couldn't read orphan inode 13 (err -117) [ 135.820039][ T5766] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000002,noblock_validity,min_batch_time=0x00000000000052ad,grpquota,debug,journal_dev=0x0000000000000001,grpid,inode_readahead_blks=0x0000000000002000,,errors=continue. Quota mode: writeback. [ 135.888716][ T5766] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 135.914884][ T5779] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 135.930466][ T5766] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 135.941177][ T5766] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 135.949679][ T5766] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 136.143282][ T5795] loop4: detected capacity change from 0 to 128 [ 136.164518][ T5783] loop0: detected capacity change from 0 to 8192 [ 136.197332][ T4271] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.275356][ T5796] attempt to access beyond end of device [ 136.275356][ T5796] loop4: rw=2049, want=369, limit=128 [ 136.504682][ T5799] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 136.532560][ T5799] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.551155][ T145] attempt to access beyond end of device [ 136.551155][ T145] loop4: rw=1, want=1041, limit=128 [ 136.577539][ T4271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.593674][ T4271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 136.605529][ T4271] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 136.615823][ T4271] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.629347][ T4271] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 136.638829][ T4271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.778997][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.788648][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.843105][ T5818] set_capacity_and_notify: 1 callbacks suppressed [ 136.843125][ T5818] loop0: detected capacity change from 0 to 2048 [ 136.964963][ T5833] loop2: detected capacity change from 0 to 512 [ 136.990917][ T5818] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 137.057001][ T5834] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.060068][ T5833] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 137.082599][ T5818] attempt to access beyond end of device [ 137.082599][ T5818] loop0: rw=524288, want=33554432, limit=2048 [ 137.144076][ T5833] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.211821][ T5818] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 137.250409][ T5818] NILFS error (device loop0): nilfs_bmap_last_key: broken bmap (inode number=16) [ 137.264378][ T5818] NILFS (loop0): error -5 truncating bmap (ino=16) [ 137.509535][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 137.694314][ T5858] device wlan0 entered promiscuous mode [ 137.702370][ T5858] device macsec1 entered promiscuous mode [ 137.734177][ T5858] device macsec2 entered promiscuous mode [ 137.797360][ T4271] gud 4-1:1.0: USB-1: Failed to add properties (ret=-71) [ 137.815481][ T4201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.817293][ T4271] gud 4-1:1.0: Failed to get connectors (error=-71) [ 137.837254][ T4271] gud: probe of 4-1:1.0 failed with error -71 [ 137.880026][ T4271] usb 4-1: USB disconnect, device number 11 [ 138.067295][ T4233] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.131138][ T5855] loop0: detected capacity change from 0 to 32768 [ 138.190962][ T5855] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 138.214586][ T5855] JBD2: Ignoring recovery information on journal [ 138.304124][ T5855] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 138.311825][ T5867] loop2: detected capacity change from 0 to 32768 [ 138.380866][ T5867] XFS (loop2): Mounting V5 Filesystem [ 138.427620][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.447870][ T4233] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.459207][ T4233] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 138.466441][ T5867] XFS (loop2): Ending clean mount [ 138.477636][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.496399][ T4233] usb 5-1: config 0 descriptor?? [ 138.667078][ T4187] XFS (loop2): Unmounting Filesystem [ 138.857624][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.982593][ T4233] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 139.028945][ T4233] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 139.123666][ T5879] loop3: detected capacity change from 0 to 32768 [ 139.197512][ T4233] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 139.627395][ T4233] cp2112 0003:10C4:EA90.0005: error setting SMBus config [ 139.729418][ T4233] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 139.791871][ T4233] usb 5-1: USB disconnect, device number 8 [ 139.897458][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.129065][ T5882] fido_id[5882]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 140.251208][ T5881] loop2: detected capacity change from 0 to 131072 [ 140.261278][ T4201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.360609][ T5881] F2FS-fs (loop2): invalid crc value [ 140.408163][ T5881] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.448022][ T5881] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 140.470866][ T5881] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 140.557330][ T4233] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 140.593892][ T4193] ocfs2: Unmounting device (7,0) on (node local) [ 140.600621][ T5370] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 140.807262][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 140.847416][ T5789] block2mtd: error: cannot open device [ 140.927529][ T4233] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 140.956413][ T4233] usb 5-1: config 0 has no interface number 0 [ 140.972990][ T4233] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 141.012786][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.075619][ T4233] usb 5-1: config 0 descriptor?? [ 141.242191][ T5898] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 141.297335][ T4233] viperboard 5-1:0.143: version 0.00 found at bus 005 address 009 [ 141.349687][ T5885] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 141.377480][ T4233] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 141.403550][ T4233] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 141.515759][ T4233] usb 5-1: USB disconnect, device number 9 [ 141.732271][ T5892] loop0: detected capacity change from 0 to 131072 [ 141.752455][ T4201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.816298][ T5892] F2FS-fs (loop0): invalid crc value [ 141.865767][ T5892] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.909260][ T5892] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 141.957385][ T5370] usb 4-1: not running at top speed; connect to a high speed hub [ 141.967000][ T5892] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 141.997418][ T13] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 142.059014][ T5370] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.098622][ T5370] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 142.129577][ T5370] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 142.328620][ T5370] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 142.353499][ T5370] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 142.377634][ T13] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 142.387463][ T5370] usb 4-1: Product: syz [ 142.395872][ T5370] usb 4-1: Manufacturer: syz [ 142.459550][ T5370] sisusb 4-1:1.0: Invalid USB2VGA device [ 142.465271][ T5370] sisusb: probe of 4-1:1.0 failed with error -22 [ 142.518829][ T13] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.537427][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 142.555855][ T13] usb 6-1: SerialNumber: syz [ 142.783601][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.877453][ T5368] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 142.929878][ T4271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.199523][ T5957] netlink: 'syz.4.552': attribute type 7 has an invalid length. [ 143.238108][ T5957] netlink: 'syz.4.552': attribute type 8 has an invalid length. [ 143.277540][ T5368] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 143.293295][ T13] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 143.304657][ T5368] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.342475][ T5963] netlink: 'syz.0.554': attribute type 1 has an invalid length. [ 143.381446][ T5967] loop4: detected capacity change from 0 to 512 [ 143.459954][ T5368] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 143.509430][ T5967] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback. [ 143.540807][ T5368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.559666][ T5967] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.570911][ T5368] usb 3-1: Product: syz [ 143.575191][ T5368] usb 3-1: Manufacturer: syz [ 143.639024][ T5368] iuu_phoenix 3-1:1.0: iuu_phoenix converter detected [ 143.665255][ T5368] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 143.677401][ T4229] usb 6-1: USB disconnect, device number 2 [ 143.742140][ T4229] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 143.827280][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 143.852401][ T5368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.922980][ T5936] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: 3 is not a unsigned long [ 143.971491][ T4375] usb 3-1: USB disconnect, device number 9 [ 143.983368][ T5981] loop4: detected capacity change from 0 to 4096 [ 143.992241][ T4375] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 144.007914][ T4375] iuu_phoenix 3-1:1.0: device disconnected [ 144.021794][ T5981] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 144.067487][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 144.116508][ T26] audit: type=1800 audit(1786225644.393:12): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.558" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 144.165296][ T4229] usb 4-1: USB disconnect, device number 12 [ 144.187535][ T13] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 144.198353][ T13] usb 1-1: config 0 has no interface number 0 [ 144.204517][ T13] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 144.234896][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.275040][ T13] usb 1-1: config 0 descriptor?? [ 144.477592][ T13] viperboard 1-1:0.143: version 0.00 found at bus 001 address 007 [ 144.544903][ T5974] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 144.557489][ T13] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 144.586673][ T13] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 144.636554][ T13] usb 1-1: USB disconnect, device number 7 [ 144.946590][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.087859][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.326313][ T6036] loop2: detected capacity change from 0 to 256 [ 145.361468][ T6034] loop0: detected capacity change from 0 to 1024 [ 145.395714][ T6036] exfat: Deprecated parameter 'utf8' [ 145.458750][ T6036] exfat: Deprecated parameter 'utf8' [ 145.464357][ T6036] exfat: Deprecated parameter 'utf8' [ 145.513870][ T6034] attempt to access beyond end of device [ 145.513870][ T6034] loop0: rw=2057, want=65536, limit=1024 [ 145.537278][ T6034] attempt to access beyond end of device [ 145.537278][ T6034] loop0: rw=1, want=2310, limit=1024 [ 145.567284][ T6036] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 145.607440][ T6034] attempt to access beyond end of device [ 145.607440][ T6034] loop0: rw=1, want=4358, limit=1024 [ 145.677499][ T6034] attempt to access beyond end of device [ 145.677499][ T6034] loop0: rw=1, want=6406, limit=1024 [ 145.687294][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.696949][ T26] audit: type=1800 audit(1786225645.973:13): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.572" name=38F3CD4498BEE8 dev="loop2" ino=1048605 res=0 errno=0 [ 145.721327][ T6034] attempt to access beyond end of device [ 145.721327][ T6034] loop0: rw=1, want=8454, limit=1024 [ 145.776537][ T6050] loop5: detected capacity change from 0 to 16 [ 145.777428][ T6034] attempt to access beyond end of device [ 145.777428][ T6034] loop0: rw=1, want=10502, limit=1024 [ 145.833405][ T6034] attempt to access beyond end of device [ 145.833405][ T6034] loop0: rw=1, want=12550, limit=1024 [ 145.863625][ T6050] erofs: (device loop5): mounted with root inode @ nid 36. [ 145.905528][ T6034] attempt to access beyond end of device [ 145.905528][ T6034] loop0: rw=1, want=14598, limit=1024 [ 145.967395][ T6034] attempt to access beyond end of device [ 145.967395][ T6034] loop0: rw=1, want=16646, limit=1024 [ 145.970821][ T4233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.986993][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.023392][ T6034] attempt to access beyond end of device [ 146.023392][ T6034] loop0: rw=1, want=18694, limit=1024 [ 146.075697][ T5292] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 1050 @ nid 46 [ 146.087691][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.107540][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.132245][ T5292] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 146.209124][ T13] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 146.229270][ T5292] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 146.247242][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 146.247273][ T13] usb 5-1: SerialNumber: syz [ 146.422702][ T6068] loop0: detected capacity change from 0 to 512 [ 146.530413][ T13] usb 5-1: 0:2 : does not exist [ 146.534385][ T6068] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.580: bad orphan inode 15 [ 146.537040][ T6068] ext4_test_bit(bit=14, block=5) = 0 [ 146.537065][ T6068] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,lazytime,journal_dev=0x0000000000000003,min_batch_time=0x000000000000004a,nobarrier,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 146.580659][ T13] usb 5-1: USB disconnect, device number 10 [ 146.628993][ C1] vkms_vblank_simulate: vblank timer overrun [ 146.630842][ T6068] netlink: 48 bytes leftover after parsing attributes in process `syz.0.580'. [ 146.880098][ T4603] udevd[4603]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.017586][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.197235][ T6092] loop4: detected capacity change from 0 to 256 [ 147.526959][ T6104] loop3: detected capacity change from 0 to 512 [ 147.732956][ T6104] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,discard,quota,,errors=continue. Quota mode: writeback. [ 147.765536][ T5370] logitech-hidpp-device 0005:046D:B012.0006: Device not connected [ 147.772946][ T6104] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.085652][ T5370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.206902][ T6135] intel_xhci_usb_sw: probe of pcspkr failed with error -22 [ 148.270793][ T6139] bridge0: port 3(syz_tun) entered disabled state [ 148.409517][ T6139] device syz_tun left promiscuous mode [ 148.417402][ T6139] bridge0: port 3(syz_tun) entered disabled state [ 148.760496][ T6161] loop0: detected capacity change from 0 to 128 [ 148.826853][ T6161] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 148.866492][ T6166] loop3: detected capacity change from 0 to 256 [ 148.886504][ T6161] hpfs: filesystem error: improperly stopped [ 148.906943][ T6161] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 148.948689][ T6161] hpfs: You really don't want any checks? You are crazy... [ 148.977521][ T6161] hpfs: hpfs_map_sector(): read error [ 148.983237][ T6161] hpfs: code page support is disabled [ 148.997366][ T6161] hpfs: hpfs_map_4sectors(): unaligned read [ 149.013770][ T6161] hpfs: hpfs_map_4sectors(): unaligned read [ 149.027356][ T4229] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.047398][ T6161] hpfs: filesystem error: unable to find root dir [ 149.129229][ T6161] hpfs: hpfs_map_4sectors(): unaligned read [ 149.129907][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.177801][ T6161] hpfs: hpfs_map_sector(): read error [ 149.255280][ T6171] loop3: detected capacity change from 0 to 512 [ 149.365925][ T6171] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.610: iget: bad i_size value: 38620345925642 [ 149.404811][ T6156] loop4: detected capacity change from 0 to 32768 [ 149.425936][ T6156] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.606 (6156) [ 149.468151][ T6151] loop2: detected capacity change from 0 to 32768 [ 149.475642][ T6171] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.610: couldn't read orphan inode 15 (err -117) [ 149.527378][ T6156] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 149.552058][ T6151] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 149.560564][ T6156] BTRFS info (device loop4): disabling tree log [ 149.577516][ T6156] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 149.583180][ T6151] JBD2: Ignoring recovery information on journal [ 149.597347][ T6156] BTRFS info (device loop4): turning on sync discard [ 149.614427][ T6156] BTRFS info (device loop4): using free space tree [ 149.621419][ T6156] BTRFS info (device loop4): has skinny extents [ 149.708056][ T6171] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 149.752657][ T6151] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 149.834789][ T6171] overlayfs: conflicting lowerdir path [ 149.835367][ T6189] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.610: bg 0: block 5: invalid block bitmap [ 149.932304][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079e8c800: rx timeout, send abort [ 149.944265][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079e8c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 150.019263][ T9] BTRFS warning (device loop4): checksum verify failed on 5332992 wanted 0x45c4daa94c2fee9c24887d4bee8f983cd8ca9d8901c4a5aa51fab9bc8d8bf5d6 found 0x361110c500152a7a7481bc498496390649afa9c0c5943a81629a4ff60bd66304 level 0 [ 150.068456][ T6156] BTRFS warning (device loop4): couldn't read tree root [ 150.343561][ T6198] input: syz1 as /devices/virtual/input/input14 [ 150.436523][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.811228][ T6156] BTRFS error (device loop4): open_ctree failed: -22 [ 151.057481][ T6208] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 151.427488][ T6208] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.434810][ T6217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.463471][ T6208] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.498317][ T5368] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.653856][ T6223] Illegal XDP return value 32768, expect packet loss! [ 151.707507][ T6208] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 151.737042][ T6208] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.768922][ T6208] usb 6-1: Product: syz [ 151.773151][ T6208] usb 6-1: Manufacturer: syz [ 151.798831][ T6208] usb 6-1: SerialNumber: syz [ 152.049548][ T6205] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.174603][ T6241] netlink: 36 bytes leftover after parsing attributes in process `syz.0.628'. [ 152.254877][ T13] usb 6-1: USB disconnect, device number 3 [ 152.527864][ T21] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.573918][ T6253] loop3: detected capacity change from 0 to 32768 [ 152.596299][ T6255] loop0: detected capacity change from 0 to 512 [ 152.598883][ T4187] ocfs2: Unmounting device (7,2) on (node local) [ 152.639155][ T6253] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.633 (6253) [ 152.657963][ T6255] EXT4-fs (loop0): Ignoring removed bh option [ 152.682502][ T6253] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 152.691671][ T6253] BTRFS info (device loop3): force clearing of disk cache [ 152.698889][ T6253] BTRFS info (device loop3): enabling disk space caching [ 152.705951][ T6253] BTRFS info (device loop3): turning on sync discard [ 152.712733][ T6253] BTRFS info (device loop3): disabling tree log [ 152.719133][ T6253] BTRFS info (device loop3): metadata ratio 5 [ 152.725537][ T6253] BTRFS info (device loop3): disk space caching is enabled [ 152.732844][ T6253] BTRFS info (device loop3): has skinny extents [ 152.746274][ T6255] EXT4-fs error (device loop0): ext4_iget_extra_inode:4573: inode #15: comm syz.0.634: corrupted in-inode xattr [ 152.800408][ T6255] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.634: couldn't read orphan inode 15 (err -117) [ 152.888134][ T6255] EXT4-fs (loop0): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000001,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000001,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 153.009809][ T6253] BTRFS info (device loop3): enabling ssd optimizations [ 153.021465][ T6253] BTRFS info (device loop3): clearing free space tree [ 153.028453][ T6253] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.038780][ T6253] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.184643][ T6287] loop4: detected capacity change from 0 to 1024 [ 153.294079][ T6287] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,barrier=0x0000000000008000,dax=never,min_batch_time=0x0000000000000003,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 153.714591][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 153.776651][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 153.879230][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 153.892944][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 153.919616][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 153.958408][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 153.979072][ T6311] loop3: detected capacity change from 0 to 256 [ 153.987624][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 154.007807][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 154.010256][ T5366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.024012][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 154.093911][ T4194] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 154.134929][ T6311] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 154.200219][ T6317] loop5: detected capacity change from 0 to 64 [ 154.248133][ T6321] loop2: detected capacity change from 0 to 16 [ 154.327457][ T6321] erofs: (device loop2): mounted with root inode @ nid 36. [ 154.353961][ T6317] hfs: hfs: Invalid key length: 94 [ 154.389416][ T6321] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.416264][ T6317] hfs: request for non-existent node 1542 in B*Tree [ 154.445684][ T6317] hfs: request for non-existent node 1542 in B*Tree [ 154.488952][ T6317] hfs: request for non-existent node 1542 in B*Tree [ 154.495985][ T6317] hfs: request for non-existent node 1542 in B*Tree [ 154.545063][ T6326] loop3: detected capacity change from 0 to 512 [ 154.636454][ T6326] EXT4-fs (loop3): Ignoring removed bh option [ 154.687985][ T4372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.749960][ T145] ------------[ cut here ]------------ [ 154.755532][ T145] kernel BUG at fs/hfs/inode.c:447! [ 154.761081][ T145] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 154.767183][ T145] CPU: 0 PID: 145 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 154.768848][ T6326] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.654: corrupted in-inode xattr [ 154.774746][ T145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.796890][ T145] Workqueue: writeback wb_workfn (flush-7:5) [ 154.803360][ T145] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 154.809278][ T145] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 51 cc 8d ff e9 43 fe ff ff e8 97 a9 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 154.828927][ T145] RSP: 0018:ffffc900016bf3a0 EFLAGS: 00010293 [ 154.835188][ T145] RAX: ffffffff82305319 RBX: ffff88805b43a898 RCX: ffff88801bcd3b80 [ 154.843181][ T145] RDX: 0000000000000000 RSI: ffffffff8c4e3080 RDI: 0000000000000000 [ 154.851200][ T145] RBP: ffffc900016bf530 R08: ffff88801bcd3b80 R09: 0000000000000003 [ 154.859177][ T145] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 154.867196][ T145] R13: 1ffff920002d7e78 R14: 0000000000000000 R15: ffff88805b43a858 [ 154.875203][ T145] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 154.884153][ T145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.890742][ T145] CR2: 0000200000514ff4 CR3: 0000000062cf8000 CR4: 00000000003506f0 [ 154.899130][ T145] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 154.907118][ T145] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 154.915198][ T145] Call Trace: [ 154.918733][ T145] [ 154.921921][ T145] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 154.927489][ T145] ? __writeback_single_inode+0x46d/0xda0 [ 154.933249][ T145] ? __rwlock_init+0x140/0x140 [ 154.938117][ T145] __writeback_single_inode+0x6c4/0xda0 [ 154.943931][ T145] writeback_sb_inodes+0xaaa/0x1750 [ 154.949147][ T145] ? queue_io+0x530/0x530 [ 154.953475][ T145] ? move_expired_inodes+0x722/0x770 [ 154.958758][ T145] ? stack_trace_save+0xf0/0xf0 [ 154.963615][ T145] ? rcu_is_watching+0x11/0xa0 [ 154.968387][ T145] ? queue_io+0x3ba/0x530 [ 154.972807][ T145] wb_writeback+0x44a/0xbc0 [ 154.977316][ T145] ? rcu_lock_release+0x20/0x20 [ 154.982168][ T145] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 154.988150][ T145] ? __lock_acquire+0x7b50/0x7b50 [ 154.993180][ T145] ? _raw_spin_unlock_irq+0x1f/0x40 [ 154.998382][ T145] wb_workfn+0x43a/0xf20 [ 155.002636][ T145] ? inode_wait_for_writeback+0x220/0x220 [ 155.008364][ T145] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 155.014349][ T145] ? __lock_acquire+0x7b50/0x7b50 [ 155.019396][ T145] ? read_lock_is_recursive+0x10/0x10 [ 155.024778][ T145] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 155.030777][ T145] ? _raw_spin_unlock_irq+0x1f/0x40 [ 155.035977][ T145] process_one_work+0x867/0xff0 [ 155.040831][ T145] ? worker_detach_from_pool+0x240/0x240 [ 155.046472][ T145] ? lockdep_hardirqs_off+0x70/0x100 [ 155.051762][ T145] ? _raw_spin_lock_irq+0xb7/0xf0 [ 155.056800][ T145] ? _raw_spin_lock_irqsave+0x100/0x100 [ 155.062343][ T145] ? wq_worker_running+0x97/0x170 [ 155.067385][ T145] worker_thread+0xad7/0x12a0 [ 155.072164][ T145] kthread+0x42e/0x520 [ 155.076231][ T145] ? rcu_lock_release+0x20/0x20 [ 155.081080][ T145] ? kthread_blkcg+0xd0/0xd0 [ 155.085674][ T145] ret_from_fork+0x1f/0x30 [ 155.090097][ T145] [ 155.093118][ T145] Modules linked in: [ 155.104283][ T6326] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.654: couldn't read orphan inode 15 (err -117) [ 155.130854][ T145] ---[ end trace 79948d1be77eabac ]--- [ 155.136376][ T145] RIP: 0010:hfs_write_inode+0xa19/0xa20 [ 155.142667][ T6326] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000001,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000001,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 155.205052][ T145] Code: 8d ff e9 05 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 50 fe ff ff 4c 89 f7 e8 51 cc 8d ff e9 43 fe ff ff e8 97 a9 48 ff <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 54 53 48 89 fb 49 bf 00 00 [ 155.238182][ T145] RSP: 0018:ffffc900016bf3a0 EFLAGS: 00010293 [ 155.248985][ T145] RAX: ffffffff82305319 RBX: ffff88805b43a898 RCX: ffff88801bcd3b80 [ 155.257382][ T145] RDX: 0000000000000000 RSI: ffffffff8c4e3080 RDI: 0000000000000000 [ 155.265390][ T145] RBP: ffffc900016bf530 R08: ffff88801bcd3b80 R09: 0000000000000003 [ 155.278494][ T145] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 155.286641][ T145] R13: 1ffff920002d7e78 R14: 0000000000000000 R15: ffff88805b43a858 [ 155.295157][ T145] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 155.304526][ T145] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.314057][ T145] CR2: 00007fe55b6d82f8 CR3: 000000002a8dd000 CR4: 00000000003506e0 [ 155.322269][ T145] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 155.335262][ T145] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 155.344153][ T145] Kernel panic - not syncing: Fatal exception [ 155.350314][ T145] Kernel Offset: disabled [ 155.354645][ T145] Rebooting in 86400 seconds..