last executing test programs: 3m36.256983667s ago: executing program 1 (id=106): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xbb) 3m35.911397238s ago: executing program 1 (id=108): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x10000006, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) close_range(r0, 0xffffffffffffffff, 0x0) 3m34.929027579s ago: executing program 1 (id=112): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r2, 0x2, 0x5, 0x6, 0x10, 0x9}, &(0x7f0000000280)=0x14) 3m34.579724209s ago: executing program 1 (id=114): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000440)={[{@nodelalloc}, {@dioread_lock}, {@bsdgroups}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xc}}, {@data_err_ignore}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x2}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x578, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) fallocate(r0, 0x20, 0x12a, 0x3000001) 3m33.884672471s ago: executing program 1 (id=118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x4) 3m33.337047308s ago: executing program 1 (id=123): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 3m32.955341309s ago: executing program 32 (id=123): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 3m21.103619096s ago: executing program 4 (id=173): unshare(0x22020400) socket(0x40000000015, 0x5, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0xfffffffffffffffd, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x0, 0x3, 0xfffffffffffffffd, 0x5}, 0x0, 0x0, 0x0, 0x0) 3m20.782488906s ago: executing program 4 (id=175): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000380)={0xc, 0x8, 0x144, {&(0x7f0000001140)}}, 0x69) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @local}, r1}}, 0x48) 3m20.390333009s ago: executing program 4 (id=178): r0 = socket(0x21, 0x2, 0xa) r1 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x0, 0x2b4}) close_range(r0, r1, 0x0) personality(0x5000002) ppoll(0x0, 0x0, &(0x7f0000000600)={0x0, 0x3938700}, 0x0, 0x0) 3m20.062933719s ago: executing program 4 (id=180): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000600)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r0, &(0x7f00000002c0)=""/201, 0xc9) 3m19.617819742s ago: executing program 4 (id=184): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m18.860650966s ago: executing program 4 (id=189): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x81}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) 3m18.249923805s ago: executing program 33 (id=189): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x10000, @dev={0xfe, 0x80, '\x00', 0x21}, 0x81}, 0x1c) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x4}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8) 2m16.842234165s ago: executing program 5 (id=545): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x57) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) writev(r0, &(0x7f0000001240)=[{&(0x7f0000001140)="cd00bd0f", 0x4}], 0x1) 2m16.261805463s ago: executing program 5 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050003000001ff0000004400000008000300", @ANYRES32=r3, @ANYBLOB="0c00238005001f00000000002c00238006000400b100000006000100520000"], 0x54}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000840) 2m15.666882781s ago: executing program 5 (id=554): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x100, 0x6, 0xe, 0x80000000, 0x5}) 2m12.570572297s ago: executing program 5 (id=578): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000600)="$eJzs0c9r03AYx/H3803apoMpVfGwgSs4jCmTJZ168FQ8VWjAgxfBoqWL6zBT2hRxY4NdRJDp/gJBD6JHFfQkouB5eBA8+OOym6yHncSDRLJ8B/4Pfl+QfPI88E0envSSflIC/uyudmmwx+IAnxBsYErynlJ5vtH1T52beXBe1xs6n+ucSJZXbnTiOBpUz1Wp/NMo65MVyFtjDJKXHFWUhQbyZXe125FrIWmDJTUfUmlRe4DVpu89ZMIe58hVLFJ3gwuKvrgtODg7dJhNlldOLS51FqKF6Ga9PnfWP+37Z7L548h/jXj3RfGYNbyQUkjZW6PQ5u6WPcaMIF5PfbekNqLYZnPLOnl8ZoTydkgR3rsjSt/sXlVd4gTOlWz4JoeFJ1gh0y3KCpvri3HkN5GL6pUE9mf7V0HhrFuW070Vz9+7rOR38VlDdhwJtim4AfVawFy2Gg7xgZRHt5uT+W62fzAlb7Ov7O/VXs/uL3Q1yTGeFrnTGQ4HQRE+ihtSz64KjO+9ToVMZz+Yd/qMDr7uPxiGYRiGYRiGYRj/gb8BAAD//02CXF4=") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents(r0, &(0x7f00000002c0)=""/201, 0xc9) 2m12.224318288s ago: executing program 5 (id=579): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r0, r2, r3) 2m11.795501171s ago: executing program 5 (id=580): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x3}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m11.136677042s ago: executing program 34 (id=580): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x3}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) 2m1.703848214s ago: executing program 3 (id=624): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r0], 0x21c}}, 0x0) 2m1.310674146s ago: executing program 3 (id=628): io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xfffffeb2, 0x2}]}}}]}, 0x9c}}, 0x0) 2m0.932826467s ago: executing program 3 (id=629): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x1c, r2, 0x201, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000800) 2m0.552999939s ago: executing program 3 (id=631): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 1m59.752299614s ago: executing program 3 (id=632): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0xa, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x3, 0x100, 0x6, 0xe, 0x80000000, 0x5}) 1m59.137022173s ago: executing program 3 (id=635): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x31a, 0x4) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x4800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) 1m58.515863882s ago: executing program 35 (id=635): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x31a, 0x4) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000)=0x4800, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) 3.864527441s ago: executing program 6 (id=1355): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) shutdown(r2, 0x1) 3.702462136s ago: executing program 6 (id=1356): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) 3.676635657s ago: executing program 7 (id=1358): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x40000) syz_emit_ethernet(0x46, &(0x7f0000000240)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) syz_open_dev$loop(0x0, 0x950, 0x143000) 3.392764375s ago: executing program 7 (id=1359): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffe6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) close(r0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=')\x00', 0x2}], 0x1) 3.152505683s ago: executing program 7 (id=1362): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x2a79, 0x4) recvmmsg(r0, &(0x7f0000007840), 0x4000000000002c9, 0x10103, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.9053033s ago: executing program 7 (id=1363): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000480)={0x1, &(0x7f00000004c0)=[{0x6, 0xfe}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 2.718536696s ago: executing program 6 (id=1365): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.6114897s ago: executing program 7 (id=1366): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a", 0x7}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd) 2.436276015s ago: executing program 7 (id=1368): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 1.902118021s ago: executing program 0 (id=1369): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xfff2}, {0xffe0}}}, 0x24}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="00250000000000003c0012800b000100697036746e6c00002c00028008000100", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004010) 1.745316366s ago: executing program 6 (id=1371): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) 1.718226338s ago: executing program 0 (id=1373): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz1\x00', 0x8}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) r2 = dup3(r1, r0, 0x80000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, 0x0) 1.509711064s ago: executing program 0 (id=1375): r0 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x1000, 0x0, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x8) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000440)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@any_dev={0x3, 0x127, 0x0, 0x0, 0x1000, 0x1d6, 0xffffffffffffffff, 0x0, 0xa}}}, 0x0) r4 = eventfd2(0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000200)=r4, 0x1) io_uring_enter(r0, 0x6516, 0x6d93, 0x8, 0x0, 0x0) 1.413213747s ago: executing program 6 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.412742007s ago: executing program 2 (id=1377): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = syz_io_uring_setup(0x227, &(0x7f0000000040)={0x0, 0xe7a0, 0x400, 0x2, 0x389}, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1.214743683s ago: executing program 6 (id=1378): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x800, &(0x7f00000004c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4437, &(0x7f0000008940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x161442, 0xb6) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 1.176216364s ago: executing program 2 (id=1379): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(r1, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x3, 0x1fd}) 1.173405184s ago: executing program 0 (id=1380): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 831.995965ms ago: executing program 0 (id=1381): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$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") mkdir(&(0x7f0000000200)='./file0\x00', 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000001000/0x3000)=nil) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 831.864705ms ago: executing program 2 (id=1382): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 629.687571ms ago: executing program 2 (id=1383): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xc8, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 320.29223ms ago: executing program 0 (id=1384): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x1, 0x0) capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f0000000080)={0x5, 0x6, 0x5, 0x3, 0x4, 0x6}) 261.343482ms ago: executing program 2 (id=1385): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x400c0d4, 0x0, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) 0s ago: executing program 2 (id=1386): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/66, 0x33e000, 0x1000}, 0x1c) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2000000}, 0x10) kernel console output (not intermixed with test programs): ] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 165.456078][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.489240][ T27] usb 1-1: config 0 descriptor?? [ 165.597095][ T7530] dvmrp8: entered allmulticast mode [ 165.705157][ T7554] loop5: detected capacity change from 0 to 32768 [ 165.833414][ T7554] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 165.879115][ T7554] JBD2: Ignoring recovery information on journal [ 165.944538][ T27] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x5 [ 166.015076][ T7557] loop3: detected capacity change from 0 to 32768 [ 166.022904][ T27] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 166.031611][ T27] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 166.040292][ T27] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 166.049114][ T27] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 166.074686][ T27] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 166.151896][ T7557] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.163449][ T7554] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 166.303593][ T5834] usb 1-1: USB disconnect, device number 7 [ 166.369762][ T7557] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50. [ 166.429762][ T7557] XFS (loop3): Tail block (0x29) overwrite detected. Updated to 0x30 [ 166.461323][ T7571] fido_id[7571]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 166.548524][ T7557] XFS (loop3): Ending clean mount [ 166.571709][ T6528] ocfs2: Unmounting device (7,5) on (node local) [ 166.878196][ T5771] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 166.899161][ T59] dvmrp8 (unregistering): left allmulticast mode [ 168.776163][ T7609] loop2: detected capacity change from 0 to 32768 [ 168.813126][ T7615] dvmrp8: entered allmulticast mode [ 168.863707][ T7609] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 169.069170][ T7609] XFS (loop2): Ending clean mount [ 169.101243][ T7609] XFS (loop2): Quotacheck needed: Please wait. [ 169.195094][ T7609] XFS (loop2): Quotacheck: Done. [ 169.580325][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 170.262006][ T12] dvmrp8 (unregistering): left allmulticast mode [ 171.253044][ T7683] loop2: detected capacity change from 0 to 4096 [ 171.580598][ T7695] netlink: 'syz.0.472': attribute type 3 has an invalid length. [ 171.593029][ T7695] netlink: 152 bytes leftover after parsing attributes in process `syz.0.472'. [ 171.739195][ T7697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.026810][ T7654] loop5: detected capacity change from 0 to 65536 [ 172.057755][ T7711] loop2: detected capacity change from 0 to 128 [ 172.077798][ T7711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 172.100858][ T7654] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 172.118213][ T7711] System zones: 1-3, 19-19, 35-36 [ 172.140355][ T7711] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 172.177207][ T7711] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.224216][ T7711] EXT4-fs warning (device loop2): verify_group_input:151: Cannot add at group 65541 (only 1 groups) [ 172.302771][ T7654] XFS (loop5): Ending clean mount [ 172.411043][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 172.570437][ T7726] loop3: detected capacity change from 0 to 256 [ 172.635999][ T7730] loop2: detected capacity change from 0 to 512 [ 172.675667][ T7730] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 172.707503][ T7726] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 172.773462][ T7730] EXT4-fs (loop2): 1 truncate cleaned up [ 172.851288][ T7730] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.927905][ T28] audit: type=1800 audit(1782159400.810:10): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.479" name="file1" dev="loop3" ino=1048607 res=0 errno=0 [ 173.015280][ T6528] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 173.316296][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.192719][ T7757] loop5: detected capacity change from 0 to 4096 [ 174.523263][ T7769] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 175.138976][ T7747] dvmrp8: entered allmulticast mode [ 175.160965][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.493'. [ 175.468059][ T7787] loop5: detected capacity change from 0 to 512 [ 175.509656][ T7787] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 175.865631][ T7787] EXT4-fs (loop5): failed to open journal device unknown-block(11,127) -6 [ 176.194651][ T7800] loop3: detected capacity change from 0 to 4096 [ 176.281179][ T7800] ntfs: (device loop3): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 176.345090][ T7800] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 176.394547][ T7800] ntfs: volume version 3.1. [ 176.448297][ T27] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 176.546669][ T59] dvmrp8 (unregistering): left allmulticast mode [ 176.660471][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 176.688953][ T27] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 176.742813][ T27] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.779263][ T27] usb 6-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.854609][ T27] usb 6-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 176.902620][ T27] usb 6-1: config 7 interface 0 has no altsetting 0 [ 176.927030][ T27] usb 6-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 176.951108][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.519277][ T27] input: HID 0458:5010 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:7.0/0003:0458:5010.000A/input/input11 [ 177.607057][ T7836] loop3: detected capacity change from 0 to 512 [ 177.657446][ T27] kye 0003:0458:5010.000A: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.5-1/input0 [ 177.674289][ T7836] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.505: Unrecognised inode hash code 255 [ 177.692330][ T27] usb 6-1: USB disconnect, device number 4 [ 177.717981][ T7836] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.505: Corrupt directory, running e2fsck is recommended [ 177.740798][ T7836] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 177.751231][ T7836] EXT4-fs error (device loop3): ext4_iget_extra_inode:4739: inode #15: comm syz.3.505: corrupted in-inode xattr: e_name out of bounds [ 177.777171][ T7836] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.505: couldn't read orphan inode 15 (err -117) [ 177.883482][ T7836] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.129811][ T7841] fido_id[7841]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 178.346981][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.168948][ T7865] process 'syz.3.509' launched './file0' with NULL argv: empty string added [ 179.211263][ T7845] loop2: detected capacity change from 0 to 131072 [ 179.216639][ T7865] Invalid argument reading file caps for ./file0 [ 179.269533][ T7845] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.309800][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.343790][ T7845] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 179.489342][ T7845] F2FS-fs (loop2): access invalid blkaddr:0 [ 179.495337][ T7845] CPU: 0 PID: 7845 Comm: syz.2.508 Not tainted syzkaller #0 [ 179.502681][ T7845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.512830][ T7845] Call Trace: [ 179.516155][ T7845] [ 179.519138][ T7845] dump_stack_lvl+0x18c/0x250 [ 179.523878][ T7845] ? show_regs_print_info+0x20/0x20 [ 179.529143][ T7845] ? __up_read+0x2b8/0x6b0 [ 179.533608][ T7845] ? __lock_acquire+0x7d80/0x7d80 [ 179.538692][ T7845] f2fs_is_valid_blkaddr+0xe6c/0x15c0 [ 179.544131][ T7845] sanity_check_extent_cache+0xfc/0x1f0 [ 179.549730][ T7845] f2fs_iget+0x32d0/0x46f0 [ 179.554266][ T7845] f2fs_lookup+0x37f/0x780 [ 179.558752][ T7845] ? f2fs_encrypted_symlink_getattr+0x50/0x50 [ 179.564875][ T7845] ? d_hash_and_lookup+0x1b0/0x1b0 [ 179.570047][ T7845] ? __init_waitqueue_head+0xa8/0x140 [ 179.575494][ T7845] __lookup_slow+0x2a1/0x400 [ 179.580190][ T7845] ? lookup_one_len+0x2e0/0x2e0 [ 179.585125][ T7845] ? down_read+0x1ac/0x2e0 [ 179.589608][ T7845] lookup_slow+0x53/0x70 [ 179.593923][ T7845] walk_component+0x2ad/0x3e0 [ 179.598675][ T7845] path_lookupat+0x148/0x420 [ 179.603330][ T7845] filename_lookup+0x22d/0x580 [ 179.608270][ T7845] ? hashlen_string+0x110/0x110 [ 179.613211][ T7845] ? strncpy_from_user+0x1a1/0x2f0 [ 179.618399][ T7845] ? getname_flags+0x20a/0x500 [ 179.623233][ T7845] user_path_at_empty+0x42/0x60 [ 179.628188][ T7845] path_setxattr+0x253/0x590 [ 179.632847][ T7845] ? simple_xattrs_free+0x150/0x150 [ 179.638126][ T7845] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 179.644158][ T7845] ? lock_chain_count+0x20/0x20 [ 179.649160][ T7845] __x64_sys_lsetxattr+0xb8/0xd0 [ 179.654161][ T7845] do_syscall_64+0x55/0xb0 [ 179.658623][ T7845] ? clear_bhb_loop+0x40/0x90 [ 179.663355][ T7845] ? clear_bhb_loop+0x40/0x90 [ 179.668108][ T7845] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.674059][ T7845] RIP: 0033:0x7f39e899ce59 [ 179.678522][ T7845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.698267][ T7845] RSP: 002b:00007f39e9901028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 179.706736][ T7845] RAX: ffffffffffffffda RBX: 00007f39e8c15fa0 RCX: 00007f39e899ce59 [ 179.714760][ T7845] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 00002000000000c0 [ 179.722791][ T7845] RBP: 00007f39e8a32e6f R08: 0000000000000001 R09: 0000000000000000 [ 179.730809][ T7845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.738950][ T7845] R13: 00007f39e8c16038 R14: 00007f39e8c15fa0 R15: 00007ffc5882da48 [ 179.747019][ T7845] [ 179.752408][ T7845] F2FS-fs (loop2): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 179.791735][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.830685][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.877895][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.922617][ T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.940725][ T5779] kernel read not supported for file /video9 (pid: 5779 comm: kworker/0:3) [ 179.978946][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.008966][ T8] usb 1-1: config 0 descriptor?? [ 180.195125][ T7886] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 180.439570][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 180.460717][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 180.468264][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 180.475704][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 180.495921][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 180.538064][ T8] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 180.547467][ T8] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 180.586127][ T8] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 180.744850][ T27] usb 1-1: USB disconnect, device number 8 [ 180.833780][ T7893] fido_id[7893]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 181.290259][ T7909] loop3: detected capacity change from 0 to 256 [ 181.737584][ T7907] loop5: detected capacity change from 0 to 32768 [ 181.772165][ T7907] [ 181.772165][ T7907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.772165][ T7907] [ 181.799329][ T7907] [ 181.799329][ T7907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.799329][ T7907] [ 181.811281][ T7907] [ 181.811281][ T7907] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.811281][ T7907] [ 181.831965][ T7907] ERROR: (device loop5): diWrite: ixpxd invalid [ 181.831965][ T7907] [ 181.846415][ T7907] ERROR: (device loop5): txCommit: [ 181.846415][ T7907] [ 181.909912][ T6528] [ 181.909912][ T6528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.909912][ T6528] [ 181.948181][ T6528] [ 181.948181][ T6528] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 181.948181][ T6528] [ 182.205332][ T7915] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.214771][ T7915] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.224057][ T7915] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.230843][ T7915] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.237113][ T7915] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 182.305331][ T7915] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 182.456549][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.534'. [ 182.547423][ T7931] netlink: 'syz.0.533': attribute type 27 has an invalid length. [ 182.647071][ T7931] bond0: (slave bond_slave_0): Releasing backup interface [ 182.714501][ T7929] netlink: 65011 bytes leftover after parsing attributes in process `syz.2.534'. [ 182.883881][ T7939] loop5: detected capacity change from 0 to 512 [ 182.931700][ T7939] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 182.998968][ T7945] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 183.028253][ T5766] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.508316][ T7956] syz.0.546 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 183.540176][ T5785] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.556411][ T7958] loop5: detected capacity change from 0 to 1024 [ 183.603360][ T7960] loop2: detected capacity change from 0 to 512 [ 183.625563][ T7958] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.638763][ T7958] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.668309][ T7960] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 183.674127][ T7958] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: block 8: comm syz.5.545: lblock 8 mapped to illegal pblock 8 (length 8) [ 183.681288][ T28] audit: type=1800 audit(1782159411.570:11): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.545" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 183.718599][ T28] audit: type=1800 audit(1782159411.570:12): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.545" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 183.742819][ T7958] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.545: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 183.772302][ T7964] EXT4-fs error (device loop5): ext4_map_blocks:720: inode #15: comm syz.5.545: lblock 0 mapped to illegal pblock 0 (length 1) [ 183.791603][ T7960] EXT4-fs (loop2): 1 truncate cleaned up [ 183.828873][ T7960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.991774][ T6528] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.062703][ T7940] loop3: detected capacity change from 0 to 32768 [ 184.101152][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.174023][ T7940] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 184.258147][ T5785] Bluetooth: hci3: command 0x0c1a tx timeout [ 184.258769][ T5778] Bluetooth: hci1: command 0x0c1a tx timeout [ 184.264422][ T5785] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.340857][ T7940] XFS (loop3): Ending clean mount [ 184.434844][ T7986] netlink: 24 bytes leftover after parsing attributes in process `syz.5.549'. [ 184.660820][ T5771] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 184.978174][ T27] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 185.160194][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.178393][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.190792][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.236052][ T27] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.246883][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.258491][ T27] usb 6-1: config 0 descriptor?? [ 185.692551][ T27] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 185.736608][ T27] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 186.338053][ T5785] Bluetooth: hci3: command 0x0c1a tx timeout [ 186.768100][ T5811] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 186.979937][ T5811] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 187.010021][ T5811] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.016755][ T5811] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 187.048034][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.061098][ C0] plantronics 0003:047F:FFFF.000C: usb_submit_urb(ctrl) failed: -1 [ 187.070413][ T5811] usb 4-1: config 0 descriptor?? [ 187.552627][ T5811] kye 0003:0458:5017.000D: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 187.578942][ T5811] kye 0003:0458:5017.000D: ignoring exceeding usage max [ 187.600873][ T5811] kye 0003:0458:5017.000D: hidraw1: USB HID v0.7f Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 187.632179][ T5811] kye 0003:0458:5017.000D: tablet-enabling feature report not found [ 187.650630][ T5811] kye 0003:0458:5017.000D: tablet enabling failed [ 187.809411][ T8046] loop5: detected capacity change from 0 to 8 [ 187.830446][ T6489] usb 4-1: USB disconnect, device number 7 [ 187.926645][ T5779] usb 6-1: USB disconnect, device number 5 [ 188.033620][ T6528] SQUASHFS error: lzo decompression failed, data probably corrupt [ 188.047025][ T6528] SQUASHFS error: Failed to read block 0x1dd: -5 [ 188.055472][ T6528] SQUASHFS error: Unable to read metadata cache entry [1db] [ 188.067018][ T6528] SQUASHFS error: Unable to read inode 0xa7 [ 188.075392][ T6528] SQUASHFS error: Unable to read metadata cache entry [1db] [ 188.086432][ T6528] SQUASHFS error: Unable to read inode 0xa7 [ 188.539153][ T8044] loop2: detected capacity change from 0 to 32768 [ 188.589579][ T8044] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.577 (8044) [ 188.650525][ T8044] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 188.686812][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.717988][ T8044] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 188.726785][ T8044] BTRFS info (device loop2): use zlib compression, level 3 [ 188.773925][ T8044] BTRFS info (device loop2): turning on sync discard [ 188.797419][ T8044] BTRFS info (device loop2): using free space tree [ 188.883541][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.947543][ T8044] BTRFS info (device loop2): enabling ssd optimizations [ 189.003894][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.078700][ T28] audit: type=1800 audit(1782159416.990:13): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.577" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 189.200617][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.471864][ T5772] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 189.516820][ T8] IPVS: starting estimator thread 0... [ 189.620075][ T8077] IPVS: using max 18 ests per chain, 43200 per kthread [ 189.762470][ T5941] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5941) [ 190.372561][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.399652][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.408576][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.434219][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.448854][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.458557][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.719437][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 190.874270][ T8108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.594'. [ 190.937952][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 190.963748][ T27] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 191.003460][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.036708][ T27] usb 4-1: config 0 descriptor?? [ 191.064121][ T27] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 191.295831][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 191.598405][ T5811] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 191.679354][ T5811] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 192.024495][ T8126] fido_id[8126]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.000E/report_descriptor': No such file or directory [ 192.118382][ T5811] usb 4-1: USB disconnect, device number 8 [ 192.225763][ T8095] chnl_net:caif_netlink_parms(): no params data found [ 192.588049][ T5778] Bluetooth: hci3: command tx timeout [ 192.640568][ T59] hsr_slave_0: left promiscuous mode [ 192.785955][ T59] hsr_slave_1: left promiscuous mode [ 192.841624][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.861092][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.881511][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.889080][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.914018][ T59] bridge_slave_1: left allmulticast mode [ 192.928323][ T59] bridge_slave_1: left promiscuous mode [ 192.941911][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.983815][ T59] bridge_slave_0: left allmulticast mode [ 193.001936][ T59] bridge_slave_0: left promiscuous mode [ 193.022406][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.194100][ T59] veth1_macvtap: left promiscuous mode [ 193.208662][ T59] veth0_macvtap: left promiscuous mode [ 193.214403][ T59] veth1_vlan: left promiscuous mode [ 193.250541][ T59] veth0_vlan: left promiscuous mode [ 193.925746][ T8153] loop3: detected capacity change from 0 to 32768 [ 194.118322][ T8153] read_mapping_page failed! [ 194.123421][ T8153] ERROR: (device loop3): txCommit: [ 194.123421][ T8153] [ 194.297471][ T8153] ERROR: (device loop3): diAllocBit: iag inconsistent [ 194.297471][ T8153] [ 194.321119][ T8153] ialloc: diAlloc returned -5! [ 194.426040][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.433117][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.667878][ T5778] Bluetooth: hci3: command tx timeout [ 194.818923][ T8176] overlayfs: failed to clone lowerpath [ 195.263210][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 195.506787][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 195.518054][ T9] usb 1-1: config 0 has no interface number 0 [ 195.524237][ T9] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.582217][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 195.598063][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.606252][ T9] usb 1-1: Product: syz [ 195.627931][ T9] usb 1-1: Manufacturer: syz [ 195.632762][ T9] usb 1-1: SerialNumber: syz [ 195.664649][ T9] usb 1-1: config 0 descriptor?? [ 195.706069][ T9] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 196.188987][ T59] team0 (unregistering): Port device team_slave_1 removed [ 196.247602][ T27] usb 1-1: USB disconnect, device number 9 [ 196.279691][ T27] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 196.380879][ T59] team0 (unregistering): Port device team_slave_0 removed [ 196.609023][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.738129][ T5778] Bluetooth: hci3: command tx timeout [ 196.746409][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.918214][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 197.127975][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 197.153164][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.197411][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.222191][ T9] usb 3-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 197.242903][ T9] usb 3-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 197.267987][ T9] usb 3-1: Product: syz [ 197.276649][ T9] usb 3-1: Manufacturer: syz [ 197.305286][ T9] usb 3-1: config 0 descriptor?? [ 197.788237][ T9] hid-generic 0003:25DD:F3D2.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.2-1/input0 [ 198.049523][ T27] usb 3-1: USB disconnect, device number 6 [ 198.060387][ T59] bond0 (unregistering): Released all slaves [ 198.360028][ T8095] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.367245][ T8095] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.394234][ T8095] bridge_slave_0: entered allmulticast mode [ 198.412827][ T8095] bridge_slave_0: entered promiscuous mode [ 198.484295][ T8095] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.509337][ T8095] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.516732][ T8095] bridge_slave_1: entered allmulticast mode [ 198.559621][ T8095] bridge_slave_1: entered promiscuous mode [ 198.755990][ T8095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.784873][ T8095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.818575][ T5778] Bluetooth: hci3: command tx timeout [ 198.858975][ T8216] Bluetooth: MGMT ver 1.22 [ 199.067980][ T8095] team0: Port device team_slave_0 added [ 199.090417][ T8095] team0: Port device team_slave_1 added [ 199.153647][ T8223] netlink: 32 bytes leftover after parsing attributes in process `syz.3.628'. [ 199.201768][ T8223] netem: unknown loss type 13 [ 199.207072][ T8223] netem: change failed [ 199.288937][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.322657][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.399269][ T8095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.444516][ T8095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.481746][ T8095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.544686][ T8095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.654701][ T8231] loop2: detected capacity change from 0 to 2048 [ 199.771794][ T8095] hsr_slave_0: entered promiscuous mode [ 199.799400][ T8095] hsr_slave_1: entered promiscuous mode [ 199.820278][ T8095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.853044][ T8095] Cannot create hsr debugfs directory [ 199.901503][ T8231] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.913357][ T8235] loop3: detected capacity change from 0 to 1024 [ 199.954697][ T8235] EXT4-fs: Ignoring removed bh option [ 200.099358][ T8235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.177442][ T8235] EXT4-fs error (device loop3): ext4_find_dest_de:2115: inode #12: block 7: comm syz.3.631: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 200.284726][ T8235] EXT4-fs (loop3): Remounting filesystem read-only [ 200.320480][ T8235] overlayfs: cleanup of 'index/#a' failed (-5) [ 200.956113][ T8095] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.975614][ T8084] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.170815][ T8248] loop2: detected capacity change from 0 to 4096 [ 201.225877][ T142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.357861][ T8095] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.400945][ T8095] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.433288][ T8095] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.593197][ T8248] EXT4-fs: Ignoring removed orlov option [ 201.612559][ T142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.647570][ T8248] EXT4-fs (loop2): Test dummy encryption mode enabled [ 201.735058][ T8248] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.980725][ T142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.259399][ T142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.384198][ T8248] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 202.473876][ T8095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.662558][ T8095] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.695203][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.846790][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.854105][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.871157][ T5785] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 202.883049][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 202.910645][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 202.938677][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 202.949825][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 202.957265][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.964539][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.973513][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.522503][ T8095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.260975][ T8298] block nbd0: server does not support multiple connections per device. [ 204.282641][ T8298] block nbd0: shutting down sockets [ 204.359362][ T5833] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.385663][ T8095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.511826][ T8275] chnl_net:caif_netlink_parms(): no params data found [ 204.621862][ T5833] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 204.648003][ T5833] usb 1-1: config 0 interface 0 has no altsetting 0 [ 204.655005][ T5833] usb 1-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 204.702189][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.722568][ T5833] usb 1-1: config 0 descriptor?? [ 204.997689][ T8275] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.019857][ T8275] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.027259][ T8275] bridge_slave_0: entered allmulticast mode [ 205.036753][ T8275] bridge_slave_0: entered promiscuous mode [ 205.058801][ T5785] Bluetooth: hci1: command tx timeout [ 205.144924][ T8275] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.174508][ T8275] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.188976][ T5833] kye 0003:0458:5017.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 205.203394][ T8275] bridge_slave_1: entered allmulticast mode [ 205.215546][ T5833] kye 0003:0458:5017.0010: ignoring exceeding usage max [ 205.228094][ T8275] bridge_slave_1: entered promiscuous mode [ 205.264774][ T5833] kye 0003:0458:5017.0010: hidraw0: USB HID v0.7f Device [HID 0458:5017] on usb-dummy_hcd.0-1/input0 [ 205.307318][ T5833] kye 0003:0458:5017.0010: tablet-enabling feature report not found [ 205.331916][ T5833] kye 0003:0458:5017.0010: tablet enabling failed [ 205.355679][ T8275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.399082][ T5833] usb 1-1: USB disconnect, device number 10 [ 205.411514][ T8275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.464196][ T142] hsr_slave_0: left promiscuous mode [ 205.480279][ T142] hsr_slave_1: left promiscuous mode [ 205.508617][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.516131][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.532370][ T8327] fido_id[8327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 205.562658][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.578299][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.599704][ T142] bridge_slave_1: left allmulticast mode [ 205.605419][ T142] bridge_slave_1: left promiscuous mode [ 205.619092][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.634132][ T142] bridge_slave_0: left allmulticast mode [ 205.643674][ T142] bridge_slave_0: left promiscuous mode [ 205.656251][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.736256][ T142] veth1_macvtap: left promiscuous mode [ 205.748803][ T142] veth0_macvtap: left promiscuous mode [ 205.769135][ T142] veth1_vlan: left promiscuous mode [ 205.774579][ T142] veth0_vlan: left promiscuous mode [ 205.906015][ T8322] loop2: detected capacity change from 0 to 32768 [ 206.026489][ T8322] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 206.350390][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 206.962794][ T5811] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 207.126944][ T142] team0 (unregistering): Port device team_slave_1 removed [ 207.149026][ T5785] Bluetooth: hci1: command tx timeout [ 207.191723][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 207.207395][ T142] team0 (unregistering): Port device team_slave_0 removed [ 207.209322][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.225026][ T5811] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 207.235795][ T5811] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 207.247074][ T5811] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 207.260533][ T5811] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 207.271550][ T5811] usb 3-1: config 1 interface 1 has no altsetting 0 [ 207.289228][ T5833] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 207.303449][ T5811] usb 3-1: string descriptor 0 read error: -22 [ 207.309876][ T5811] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 207.319583][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.360121][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.446687][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.512059][ T5833] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.520452][ T5833] usb 1-1: config 0 has no interface number 0 [ 207.526633][ T5833] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 207.544316][ T5833] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 207.569256][ T5833] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.578775][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.591999][ T5833] usb 1-1: config 0 descriptor?? [ 207.599926][ T8345] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 207.636106][ T5833] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 207.804856][ T5811] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 207.826824][ T5833] usb 1-1: USB disconnect, device number 11 [ 207.833038][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 208.080320][ T142] bond0 (unregistering): Released all slaves [ 208.248209][ T8275] team0: Port device team_slave_0 added [ 208.256932][ T8275] team0: Port device team_slave_1 added [ 208.279275][ T5811] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 208.313716][ T5811] usb 3-1: USB disconnect, device number 7 [ 208.338812][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.346420][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.411375][ T8275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.436710][ T8275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.445686][ T8275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.472096][ T8275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.552681][ T8275] hsr_slave_0: entered promiscuous mode [ 208.559955][ T8275] hsr_slave_1: entered promiscuous mode [ 208.566386][ T8275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.574674][ T8275] Cannot create hsr debugfs directory [ 208.634095][ T8095] veth0_vlan: entered promiscuous mode [ 208.757639][ T8095] veth1_vlan: entered promiscuous mode [ 208.936418][ T142] IPVS: stop unused estimator thread 0... [ 209.141588][ T8095] veth0_macvtap: entered promiscuous mode [ 209.184007][ T8095] veth1_macvtap: entered promiscuous mode [ 209.219855][ T5785] Bluetooth: hci1: command tx timeout [ 209.274227][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.309135][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.329767][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.342508][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.356928][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.401276][ T8275] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 209.445657][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.462911][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.474133][ T8095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.490338][ T8095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.504858][ T8095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.516649][ T8275] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 209.551863][ T8275] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 209.564650][ T8275] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 209.583592][ T8095] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.597092][ T8095] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.611848][ T8095] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.623451][ T8095] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.807249][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.838975][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.923894][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.948187][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.036325][ T8275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.086727][ T8275] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.125469][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.132635][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.217232][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.224499][ T4201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.426697][ T8275] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.496667][ T8275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.569357][ T8382] netlink: 'syz.0.657': attribute type 4 has an invalid length. [ 210.820579][ T23] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 211.031032][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.067869][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.104529][ T23] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.146711][ T23] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.180689][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.193381][ T8275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.214893][ T23] usb 7-1: config 0 descriptor?? [ 211.300435][ T5785] Bluetooth: hci1: command tx timeout [ 211.486738][ T8385] loop2: detected capacity change from 0 to 32768 [ 211.522093][ T8385] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 211.672436][ T23] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x5 [ 211.686050][ T8385] XFS (loop2): Ending clean mount [ 211.708233][ T23] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 211.716316][ T23] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 211.740218][ T23] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 211.776760][ T23] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 211.839512][ T23] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 211.929344][ T5772] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 212.045634][ T23] usb 7-1: USB disconnect, device number 2 [ 212.174941][ T8417] fido_id[8417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 212.335981][ T8275] veth0_vlan: entered promiscuous mode [ 212.393373][ T8275] veth1_vlan: entered promiscuous mode [ 212.567360][ T8275] veth0_macvtap: entered promiscuous mode [ 212.606450][ T8275] veth1_macvtap: entered promiscuous mode [ 212.675268][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.757928][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.767807][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.836575][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.858802][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.886508][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.922964][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.956440][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.997893][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.018023][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.038340][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.054634][ T8275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.077974][ T8275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.097675][ T8445] netlink: 232 bytes leftover after parsing attributes in process `syz.0.668'. [ 213.109635][ T8275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.132396][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.668'. [ 213.151568][ T8275] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.178007][ T8275] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.209568][ T8275] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.237932][ T8275] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.523575][ T4201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.557878][ T4201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.651382][ T4201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.684919][ T4201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.908721][ T5833] kernel write not supported for file /456/clear_refs (pid: 5833 comm: kworker/0:4) [ 213.996383][ T8464] loop6: detected capacity change from 0 to 1024 [ 214.029109][ T8464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 214.047971][ T6489] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 214.130054][ T8464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.274066][ T6489] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 214.305038][ T6489] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.332260][ T6489] usb 1-1: config 0 descriptor?? [ 214.360964][ T8095] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.373990][ T6489] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 214.727970][ T1195] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 214.941840][ T1195] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.973688][ T1195] usb 3-1: config 0 has no interface number 0 [ 214.998784][ T1195] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.037240][ T1195] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.068100][ T1195] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 215.077235][ T1195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.120955][ T1195] usb 3-1: config 0 descriptor?? [ 215.207719][ T6489] gspca_stv06xx: I2C: Read error writing address: -71 [ 215.245932][ T6489] usb 1-1: USB disconnect, device number 12 [ 215.428698][ T971] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 215.465627][ T8487] loop6: detected capacity change from 0 to 40427 [ 215.484586][ T8487] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 215.504993][ T8487] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 215.537734][ T8487] F2FS-fs (loop6): invalid crc value [ 215.631248][ T971] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 215.640618][ T1195] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0012/input/input13 [ 215.650329][ T971] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.703806][ T971] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.744903][ T971] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.777756][ T971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.852273][ T1195] holtek_kbd 0003:04D9:A055.0012: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 215.957735][ T1195] usb 3-1: USB disconnect, device number 8 [ 215.976576][ T8487] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 216.011386][ T8487] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 216.041987][ T971] usb 8-1: usb_control_msg returned -32 [ 216.047653][ T971] usbtmc 8-1:16.0: can't read capabilities [ 216.186693][ T8515] fido_id[8515]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 216.190509][ T5833] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 216.345576][ T8095] syz-executor: attempt to access beyond end of device [ 216.345576][ T8095] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 216.384066][ T8095] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 216.407969][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 216.427778][ T5833] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 216.455867][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.465268][ T8518] usbtmc 8-1:16.0: INITIATE_CLEAR returned 0 [ 216.476361][ T5833] usb 1-1: Product: syz [ 216.480984][ T5833] usb 1-1: Manufacturer: syz [ 216.485755][ T5833] usb 1-1: SerialNumber: syz [ 216.508942][ T5833] usb 1-1: config 0 descriptor?? [ 216.530032][ T5833] gspca_main: se401-2.14.0 probing 047d:5003 [ 216.679780][ T6489] usb 8-1: USB disconnect, device number 2 [ 216.950201][ T5833] gspca_se401: Wrong descriptor type [ 217.130111][ T8535] (null): rxe_set_mtu: Set mtu to 256 [ 217.137811][ T8535] vcan0 speed is unknown, defaulting to 1000 [ 217.161402][ T8535] vcan0 speed is unknown, defaulting to 1000 [ 217.183964][ T8535] vcan0 speed is unknown, defaulting to 1000 [ 217.197291][ T5833] usb 1-1: USB disconnect, device number 13 [ 217.555846][ T8546] loop7: detected capacity change from 0 to 128 [ 217.595408][ T8546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 217.612505][ T8546] System zones: 1-3, 19-19, 35-36 [ 217.644473][ T8546] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 217.737288][ T8535] infiniband syz1: set active [ 217.745275][ T23] vcan0 speed is unknown, defaulting to 1000 [ 217.781424][ T8546] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 217.813478][ T8535] infiniband syz1: added vcan0 [ 217.981208][ T8535] RDS/IB: syz1: added [ 217.986704][ T8535] smc: adding ib device syz1 with port count 1 [ 217.993676][ T8535] smc: ib device syz1 port 1 has pnetid [ 218.006173][ T23] vcan0 speed is unknown, defaulting to 1000 [ 218.014239][ T8546] EXT4-fs warning (device loop7): verify_group_input:151: Cannot add at group 1919252079 (only 1 groups) [ 218.027795][ T8535] vcan0 speed is unknown, defaulting to 1000 [ 218.224886][ T8275] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.545663][ T8535] vcan0 speed is unknown, defaulting to 1000 [ 218.688188][ T23] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 218.835950][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.694'. [ 218.887942][ T23] usb 8-1: Using ep0 maxpacket: 8 [ 218.894908][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.918031][ T23] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 218.927794][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.938876][ T23] usb 8-1: config 0 descriptor?? [ 219.000149][ T8535] vcan0 speed is unknown, defaulting to 1000 [ 219.221440][ T23] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 219.632566][ T6489] usb 8-1: USB disconnect, device number 3 [ 219.658443][ T8535] vcan0 speed is unknown, defaulting to 1000 [ 220.068825][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 220.100261][ T8607] netem: unknown loss type 0 [ 220.105385][ T8607] netem: change failed [ 220.279594][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 220.295281][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.319389][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.335975][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 220.362455][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.416061][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.436152][ T23] usb 3-1: config 0 descriptor?? [ 220.710031][ T8623] syz.6.705[8623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.710297][ T8623] syz.6.705[8623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 220.954463][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0013/input/input14 [ 221.144602][ T23] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 221.195844][ T23] usb 3-1: USB disconnect, device number 9 [ 221.357007][ T8636] fido_id[8636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 222.243060][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801cb9b800: rx timeout, send abort [ 222.254996][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801cb9b800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 222.396718][ T8648] loop7: detected capacity change from 0 to 40427 [ 222.419989][ T8648] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 222.436838][ T8648] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 222.467623][ T8648] F2FS-fs (loop7): invalid crc value [ 222.558054][ T5834] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 222.722133][ T8676] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 222.773484][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.794825][ T8648] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 222.823043][ T5834] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 222.847946][ T8648] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 222.878665][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.910235][ T5834] usb 1-1: config 0 descriptor?? [ 223.178076][ T5834] usbhid 1-1:0.0: can't add hid device: -71 [ 223.184172][ T5834] usbhid: probe of 1-1:0.0 failed with error -71 [ 223.202773][ T5834] usb 1-1: USB disconnect, device number 14 [ 223.246437][ T8275] syz-executor: attempt to access beyond end of device [ 223.246437][ T8275] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 223.271814][ T8275] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 223.408359][ T27] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 223.628629][ T27] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 223.648096][ T27] usb 7-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 223.662998][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.690607][ T27] usb 7-1: config 0 descriptor?? [ 223.696385][ T8684] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 223.798656][ T5834] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 223.969467][ T8700] loop7: detected capacity change from 0 to 1024 [ 224.000403][ T27] usbhid 7-1:0.0: can't add hid device: -71 [ 224.010923][ T27] usbhid: probe of 7-1:0.0 failed with error -71 [ 224.025708][ T27] usb 7-1: USB disconnect, device number 3 [ 224.032158][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 224.041603][ T5834] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.058854][ T5834] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 224.068598][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.090968][ T8700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 224.100604][ T5834] usb 1-1: config 0 descriptor?? [ 224.111807][ T5834] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 224.129277][ T5834] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 224.149020][ T8700] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.238959][ T8700] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 3: comm syz.7.722: lblock 3 mapped to illegal pblock 3 (length 3) [ 224.268087][ T8700] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 224.284263][ T8700] EXT4-fs (loop7): This should not happen!! Data will be lost [ 224.284263][ T8700] [ 224.302537][ T28] audit: type=1804 audit(1782159452.210:14): pid=8705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.722" name="/newroot/12/file1/file1" dev="loop7" ino=15 res=1 errno=0 [ 224.309767][ T8705] EXT4-fs error (device loop7): ext4_map_blocks:610: inode #15: block 3: comm syz.7.722: lblock 3 mapped to illegal pblock 3 (length 2) [ 224.356465][ T27] usb 1-1: USB disconnect, device number 15 [ 224.377790][ T27] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 224.487643][ T59] EXT4-fs error (device loop7): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 224.567725][ T59] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 224.628534][ T59] EXT4-fs (loop7): This should not happen!! Data will be lost [ 224.628534][ T59] [ 224.655469][ T8275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 224.861846][ T8698] loop2: detected capacity change from 0 to 32768 [ 224.900256][ T8716] loop6: detected capacity change from 0 to 8 [ 224.941688][ T8698] JBD2: Ignoring recovery information on journal [ 225.081958][ T8716] SQUASHFS error: Failed to read block 0x657: -5 [ 225.089984][ T8698] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 225.128238][ T8716] SQUASHFS error: Unable to read metadata cache entry [655] [ 225.146219][ T8716] SQUASHFS error: Unable to read directory block [655:3] [ 225.442194][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 225.777211][ T8739] loop7: detected capacity change from 0 to 2048 [ 225.897642][ T8739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.154829][ T8749] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 226.529585][ T8763] autofs4:pid:8763:autofs_fill_super: called with bogus options [ 226.588334][ T5813] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.778548][ T5813] usb 3-1: Using ep0 maxpacket: 8 [ 226.807292][ T5813] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 226.817026][ T5813] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.840329][ T5813] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.851422][ T5813] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.882763][ T5813] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.910201][ T5813] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 226.939856][ T5813] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.177319][ T5813] usb 3-1: usb_control_msg returned -32 [ 227.193838][ T5813] usbtmc 3-1:16.0: can't read capabilities [ 227.365913][ T8784] macvlan1: entered promiscuous mode [ 227.384429][ T8784] macvlan1: left promiscuous mode [ 227.659956][ T8778] loop6: detected capacity change from 0 to 32768 [ 227.672943][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 227.685079][ T8778] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 227.716939][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 227.736094][ T8778] overlayfs: overlapping lowerdir path [ 227.755398][ T27] usb 3-1: USB disconnect, device number 10 [ 227.893218][ T5941] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10 [ 228.318106][ T6489] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 228.528083][ T6489] usb 1-1: Using ep0 maxpacket: 16 [ 228.535999][ T6489] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.560559][ T6489] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.595532][ T6489] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 228.606821][ T6489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.622707][ T6489] usb 1-1: Product: syz [ 228.630797][ T6489] usb 1-1: Manufacturer: syz [ 228.635483][ T6489] usb 1-1: SerialNumber: syz [ 228.758176][ T5833] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 228.868350][ T6489] usb 1-1: 0:2 : does not exist [ 228.893285][ T6489] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 228.946747][ T6489] usb 1-1: USB disconnect, device number 16 [ 228.953076][ T5833] usb 8-1: Using ep0 maxpacket: 16 [ 228.988248][ T8797] loop6: detected capacity change from 0 to 32768 [ 228.998352][ T5833] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 229.031627][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.056242][ T5833] usb 8-1: Product: syz [ 229.068858][ T5833] usb 8-1: Manufacturer: syz [ 229.073950][ T5833] usb 8-1: SerialNumber: syz [ 229.163774][ T8797] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 229.179165][ T8797] XFS (loop6): Mounting V5 filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a in no-recovery mode. Filesystem will be inconsistent. [ 229.319609][ T8813] loop2: detected capacity change from 0 to 32768 [ 229.344350][ T8813] (syz.2.754,8813,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.348818][ T8095] XFS (loop6): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 229.439358][ T8813] (syz.2.754,8813,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 229.561941][ T8813] JBD2: Ignoring recovery information on journal [ 229.617712][ T5833] snd-usb-audio: probe of 8-1:1.0 failed with error -71 [ 229.649535][ T5833] usb 8-1: USB disconnect, device number 4 [ 229.772646][ T8813] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 229.920440][ T8813] (syz.2.754,8813,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=20946, name_len=138 [ 230.120137][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 230.236291][ T8838] loop6: detected capacity change from 0 to 4096 [ 230.478008][ T28] audit: type=1800 audit(1782159458.380:15): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.758" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 230.489192][ T8844] netlink: 428 bytes leftover after parsing attributes in process `syz.7.761'. [ 230.561927][ T8844] netlink: 12 bytes leftover after parsing attributes in process `syz.7.761'. [ 230.578192][ T28] audit: type=1800 audit(1782159458.440:16): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.758" name="file1" dev="loop6" ino=33 res=0 errno=0 [ 231.094314][ T8857] loop6: detected capacity change from 0 to 4096 [ 231.115462][ T8857] ntfs3: loop6: Different NTFS sector size (2048) and media sector size (512). [ 232.035564][ T8884] loop7: detected capacity change from 0 to 1764 [ 232.058933][ T8882] vcan0 speed is unknown, defaulting to 1000 [ 232.791831][ T28] audit: type=1326 audit(1782159460.700:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8905 comm="syz.2.775" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39e899ce59 code=0x0 [ 232.916869][ T8877] loop6: detected capacity change from 0 to 32768 [ 233.096970][ T8877] read_mapping_page failed! [ 233.112371][ T8877] ERROR: (device loop6): txCommit: [ 233.112371][ T8877] [ 233.149508][ T8877] ERROR: (device loop6): remounting filesystem as read-only [ 234.295655][ T8924] loop7: detected capacity change from 0 to 32768 [ 234.307159][ T8932] loop2: detected capacity change from 0 to 16384 [ 234.353006][ T8924] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 234.445652][ T8924] XFS (loop7): Ending clean mount [ 234.496455][ T8951] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.548800][ T8924] XFS (loop7): User initiated shutdown received. [ 234.565154][ T8924] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 234.607960][ T8924] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 234.711091][ T28] audit: type=1800 audit(1782159462.620:18): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.782" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 234.774028][ T8275] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 235.512505][ T8967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 235.868415][ T27] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 235.984270][ T971] IPVS: starting estimator thread 0... [ 236.089387][ T8987] IPVS: using max 20 ests per chain, 48000 per kthread [ 236.127971][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 236.135706][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.153573][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50507, setting to 1024 [ 236.167615][ T27] usb 1-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 236.179108][ T27] usb 1-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 236.187553][ T27] usb 1-1: Product: syz [ 236.207362][ T27] usb 1-1: Manufacturer: syz [ 236.218794][ T27] usb 1-1: config 0 descriptor?? [ 236.236985][ T8972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 236.328169][ T5833] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.379458][ T8995] vcan0 speed is unknown, defaulting to 1000 [ 236.530945][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 236.549935][ T5833] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 236.567730][ T5833] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 236.605871][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.623546][ T5833] usb 3-1: Product: syz [ 236.640375][ T5833] usb 3-1: Manufacturer: syz [ 236.656422][ T5833] usb 3-1: SerialNumber: syz [ 236.706294][ T27] hid-generic 0003:25DD:F3D2.0014: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 236.934172][ T5833] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 236.980752][ T27] usb 1-1: USB disconnect, device number 17 [ 237.129186][ T5833] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 237.570956][ T9009] loop6: detected capacity change from 0 to 32768 [ 237.594708][ T9009] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.802 (9009) [ 237.735759][ T9009] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 237.798380][ T9009] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 237.837348][ T9009] BTRFS info (device loop6): setting nodatacow, compression disabled [ 237.867882][ T9009] BTRFS info (device loop6): turning on flush-on-commit [ 237.889010][ T9009] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 237.956731][ T9009] BTRFS info (device loop6): use lzo compression, level 0 [ 237.966879][ T9009] BTRFS info (device loop6): setting nodatasum [ 237.997383][ T9009] BTRFS info (device loop6): use no compression [ 238.019304][ T5833] usb 3-1: USB disconnect, device number 11 [ 238.025738][ T9009] BTRFS info (device loop6): trying to use backup root at mount time [ 238.044779][ T9009] BTRFS info (device loop6): max_inline at 0 [ 238.064846][ T9009] BTRFS info (device loop6): using free space tree [ 238.193911][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.229261][ T49] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 238.341717][ T9009] BTRFS warning (device loop6): couldn't read tree root [ 238.383199][ T9009] BTRFS warning (device loop6): try to load backup roots slot 1 [ 238.413993][ T49] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 238.484407][ T9009] BTRFS warning (device loop6): couldn't read tree root [ 238.505847][ T9009] BTRFS warning (device loop6): try to load backup roots slot 2 [ 238.541117][ T4201] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 238.572186][ T9009] BTRFS warning (device loop6): couldn't read tree root [ 238.597942][ T9009] BTRFS warning (device loop6): try to load backup roots slot 3 [ 238.658753][ T9009] BTRFS info (device loop6): enabling ssd optimizations [ 238.665802][ T9009] BTRFS info (device loop6): auto enabling async discard [ 238.758281][ T9009] BTRFS info (device loop6): rebuilding free space tree [ 238.838994][ T9009] BTRFS info (device loop6): checking UUID tree [ 239.460846][ T8095] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.060481][ T9045] loop2: detected capacity change from 0 to 40427 [ 240.061402][ T9078] loop6: detected capacity change from 0 to 4096 [ 240.099590][ T9045] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 240.125125][ T9045] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 240.181370][ T9045] F2FS-fs (loop2): Found nat_bits in checkpoint [ 240.302047][ T9078] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 240.332623][ T9078] ntfs3: loop6: Failed to initialize $Extend/$ObjId. [ 240.538248][ T42] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22. [ 240.545626][ T9045] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 240.579896][ T8095] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 240.598358][ T9045] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 240.602105][ T8095] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 240.643520][ T8095] ntfs3: loop6: ino=3, ntfs_set_state failed, -22. [ 240.709177][ T11] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22. [ 240.818085][ T28] audit: type=1800 audit(1782159468.720:19): pid=9045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.805" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=11 res=0 errno=0 [ 241.018009][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 241.206159][ T11] kworker/u4:0: attempt to access beyond end of device [ 241.206159][ T11] loop2: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 241.234624][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 241.291225][ T23] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 241.317993][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.326104][ T23] usb 1-1: Product: syz [ 241.348112][ T23] usb 1-1: Manufacturer: syz [ 241.353749][ T23] usb 1-1: SerialNumber: syz [ 241.394361][ T23] usb 1-1: config 0 descriptor?? [ 241.660564][ T23] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 018 [ 241.970195][ T9088] i2c i2c-1: failure reading data [ 242.001570][ T5813] usb 1-1: USB disconnect, device number 18 [ 242.381155][ T9115] loop2: detected capacity change from 0 to 4096 [ 242.848971][ T9115] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 243.207323][ T9133] loop2: detected capacity change from 0 to 512 [ 243.271307][ T9134] binder: 9131:9134 ioctl c0306201 200000000080 returned -14 [ 243.299106][ T9134] binder: 9131:9134 ioctl c0306201 2000000003c0 returned -14 [ 243.551887][ T6489] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 243.761215][ T6489] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 243.788259][ T6489] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 243.821700][ T6489] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 243.841271][ T6489] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 243.857150][ T6489] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 243.876441][ T6489] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 243.886527][ T6489] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 243.899791][ T6489] usb 7-1: Product: syz [ 243.906924][ T6489] usb 7-1: Manufacturer: syz [ 243.942097][ T6489] cdc_wdm 7-1:1.0: skipping garbage [ 243.956528][ T6489] cdc_wdm 7-1:1.0: skipping garbage [ 243.982629][ T6489] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 243.998098][ T6489] cdc_wdm 7-1:1.0: Unknown control protocol [ 244.463783][ T9140] loop7: detected capacity change from 0 to 32768 [ 244.555952][ T9140] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.791015][ T9140] XFS (loop7): Ending clean mount [ 244.849438][ T9140] XFS (loop7): Quotacheck needed: Please wait. [ 244.885557][ T5813] usb 7-1: USB disconnect, device number 4 [ 245.029342][ T9140] XFS (loop7): Quotacheck: Done. [ 245.312719][ T8275] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 247.196288][ T9238] netlink: 24 bytes leftover after parsing attributes in process `syz.6.851'. [ 247.375203][ T9245] loop2: detected capacity change from 0 to 24 [ 247.518174][ T9250] binder: 9248:9250 ioctl 40046205 0 returned -22 [ 247.994386][ T9262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.859'. [ 248.005509][ T9262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.008167][ T971] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 248.199736][ T9262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.251335][ T971] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.273133][ T971] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.291338][ T971] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.307329][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.578063][ T971] usb 1-1: usb_control_msg returned -32 [ 248.597992][ T971] usbtmc 1-1:16.0: can't read capabilities [ 248.710701][ T9275] loop7: detected capacity change from 0 to 4096 [ 248.953118][ T9267] loop6: detected capacity change from 0 to 32768 [ 248.984002][ T9284] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 248.994350][ T9282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.862'. [ 249.018226][ T9282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.862'. [ 249.094390][ T9267] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 249.247463][ T9292] loop2: detected capacity change from 0 to 512 [ 249.308248][ T9292] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 249.465014][ T9292] EXT4-fs (loop2): 1 truncate cleaned up [ 249.521991][ T9292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.617049][ T8095] ocfs2: Unmounting device (7,6) on (node local) [ 249.727477][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.061604][ T9306] loop9: detected capacity change from 0 to 7 [ 250.111053][ T9306] Dev loop9: unable to read RDB block 7 [ 250.124248][ T9306] loop9: AHDI p2 p3 [ 250.135132][ T9306] loop9: partition table partially beyond EOD, truncated [ 250.150597][ T9306] loop9: p2 size 150995456 extends beyond EOD, truncated [ 250.335802][ T5941] udevd[5941]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 250.808057][ T23] usb 1-1: USB disconnect, device number 19 [ 251.806414][ T9352] loop7: detected capacity change from 0 to 128 [ 251.870810][ T9352] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 251.990584][ T9352] FAT-fs (loop7): error, invalid FAT chain (i_pos 548, last_block 8) [ 252.024630][ T9352] FAT-fs (loop7): Filesystem has been set read-only [ 252.048159][ T9352] FAT-fs (loop7): error, corrupted file size (i_pos 548, 522) [ 252.956733][ T9378] sock: sock_set_timeout: `syz.7.888' (pid 9378) tries to set negative timeout [ 253.613700][ T9396] tap0: tun_chr_ioctl cmd 1074025675 [ 253.643886][ T9396] tap0: persist enabled [ 253.649422][ T9396] tap0: tun_chr_ioctl cmd 1074025675 [ 253.655380][ T9396] tap0: persist disabled [ 253.663486][ T9399] loop6: detected capacity change from 0 to 164 [ 253.748463][ T5941] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.154941][ T28] audit: type=1326 audit(1782159482.060:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e899ce59 code=0x7ffc0000 [ 254.207566][ T28] audit: type=1326 audit(1782159482.060:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e899ce59 code=0x7ffc0000 [ 254.258557][ T28] audit: type=1326 audit(1782159482.060:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e899ce59 code=0x7ffc0000 [ 254.299665][ T9420] loop7: detected capacity change from 0 to 256 [ 254.323617][ T28] audit: type=1326 audit(1782159482.060:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e899ce59 code=0x7ffc0000 [ 254.358639][ T5813] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 254.435050][ T28] audit: type=1326 audit(1782159482.060:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e899ce59 code=0x7ffc0000 [ 254.519396][ T28] audit: type=1326 audit(1782159482.060:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f39e899ce59 code=0x7ffc0000 [ 254.568604][ T5813] usb 7-1: Using ep0 maxpacket: 32 [ 254.577072][ T28] audit: type=1326 audit(1782159482.150:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39e895d68e code=0x7ffc0000 [ 254.613649][ T5813] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 254.622666][ T5813] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 254.653610][ T5813] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 254.683364][ T28] audit: type=1326 audit(1782159482.150:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39e895d68e code=0x7ffc0000 [ 254.717756][ T5813] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 254.753655][ T5813] usb 7-1: config 0 interface 0 has no altsetting 0 [ 254.772052][ T28] audit: type=1326 audit(1782159482.160:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39e895d68e code=0x7ffc0000 [ 254.816990][ T5813] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 254.832080][ T5813] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 254.852764][ T5813] usb 7-1: Product: syz [ 254.857012][ T5813] usb 7-1: Manufacturer: syz [ 254.877316][ T28] audit: type=1326 audit(1782159482.160:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9416 comm="syz.2.902" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f39e895d68e code=0x7ffc0000 [ 254.902032][ T5813] usb 7-1: SerialNumber: syz [ 254.939037][ T5813] usb 7-1: config 0 descriptor?? [ 254.955009][ T5813] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 254.988136][ T5813] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 255.287117][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 255.287126][ T5811] usb 7-1: USB disconnect, device number 5 [ 255.300860][ T9414] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 255.308951][ T9441] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 255.318701][ T5811] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 255.378044][ T5813] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 255.593095][ T5813] usb 8-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 255.621922][ T5813] usb 8-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 255.637156][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.655702][ T5813] usb 8-1: Product: syz [ 255.665818][ T5813] usb 8-1: Manufacturer: syz [ 255.676204][ T5813] usb 8-1: SerialNumber: syz [ 255.707011][ T5813] usb 8-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 255.873077][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.883100][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.158213][ T9435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.180763][ T5813] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 256.191409][ T9435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.234129][ T5813] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 256.265687][ T5813] usb 8-1: media controller created [ 256.365506][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.726055][ T9477] netlink: 'syz.2.913': attribute type 34 has an invalid length. [ 256.751391][ T5813] usb 8-1: USB disconnect, device number 5 [ 256.838411][ T5811] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 257.044544][ T5811] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 257.064174][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.091464][ T5811] usb 1-1: Product: syz [ 257.120787][ T5811] usb 1-1: Manufacturer: syz [ 257.125474][ T5811] usb 1-1: SerialNumber: syz [ 257.161103][ T5811] usb 1-1: config 0 descriptor?? [ 257.286330][ T9490] loop6: detected capacity change from 0 to 128 [ 257.316524][ T9490] EXT4-fs: inline encryption not supported [ 257.334962][ T9490] EXT4-fs (loop6): Test dummy encryption mode enabled [ 257.409759][ T9490] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.430260][ T9490] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 257.454734][ T9490] EXT4-fs (loop6): resizing filesystem from 64 to 1 blocks [ 257.462394][ T9490] EXT4-fs warning (device loop6): ext4_resize_fs:2048: can't shrink FS - resize aborted [ 257.516638][ T8095] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.692587][ T5811] usb 1-1: Firmware version (0.0) predates our first public release. [ 257.718407][ T5811] usb 1-1: Please update to version 0.2 or newer [ 257.735768][ T5811] usb 1-1: Firmware: build [ 257.813216][ T9506] loop7: detected capacity change from 0 to 1764 [ 257.981718][ T5811] usb 1-1: USB disconnect, device number 20 [ 258.441754][ T9523] gtp0: entered promiscuous mode [ 258.446785][ T9523] gtp0: entered allmulticast mode [ 259.833176][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 260.043795][ T27] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 260.068046][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.083293][ T27] usb 3-1: Product: syz [ 260.098751][ T27] usb 3-1: Manufacturer: syz [ 260.103437][ T27] usb 3-1: SerialNumber: syz [ 260.140239][ T27] usb 3-1: config 0 descriptor?? [ 260.608680][ T27] usb 3-1: Firmware version (0.0) predates our first public release. [ 260.634531][ T27] usb 3-1: Please update to version 0.2 or newer [ 260.645807][ T27] usb 3-1: Firmware: build [ 260.881356][ T27] usb 3-1: USB disconnect, device number 12 [ 261.205177][ T9609] input: syz0 as /devices/virtual/input/input15 [ 261.260304][ T9599] loop6: detected capacity change from 0 to 32768 [ 261.316306][ T9599] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 261.414630][ T9604] loop7: detected capacity change from 0 to 32768 [ 261.546200][ T9599] XFS (loop6): Ending clean mount [ 261.855998][ T8095] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 262.473432][ T9635] trusted_key: syz.6.961 sent an empty control message without MSG_MORE. [ 262.870060][ T5813] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 263.075721][ T9641] loop6: detected capacity change from 0 to 40427 [ 263.093350][ T5813] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 263.108096][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.119670][ T5813] usb 3-1: Product: syz [ 263.123900][ T5813] usb 3-1: Manufacturer: syz [ 263.129347][ T5813] usb 3-1: SerialNumber: syz [ 263.135737][ T9641] F2FS-fs (loop6): invalid crc value [ 263.146426][ T5813] usb 3-1: config 0 descriptor?? [ 263.155363][ T9641] F2FS-fs (loop6): Found nat_bits in checkpoint [ 263.275193][ T9641] F2FS-fs (loop6): Start checkpoint disabled! [ 263.320207][ T9641] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 263.378647][ T5813] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 263.613245][ T2949] kworker/u4:6: attempt to access beyond end of device [ 263.613245][ T2949] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 263.637530][ T2949] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 263.645726][ T2949] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 263.778425][ T5813] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 263.799092][ T5813] usb 3-1: USB disconnect, device number 13 [ 264.147016][ T9662] loop7: detected capacity change from 0 to 1024 [ 264.225259][ T9662] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.382590][ T8275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.623414][ T27] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 264.729503][ T9675] loop7: detected capacity change from 0 to 8192 [ 264.767468][ T9675] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 264.791440][ T9675] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal [ 264.811841][ T9675] REISERFS (device loop7): using ordered data mode [ 264.827915][ T9675] reiserfs: using flush barriers [ 264.837232][ T9675] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 264.853733][ T27] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 264.856962][ T9675] REISERFS (device loop7): checking transaction log (loop7) [ 264.900327][ T9675] REISERFS (device loop7): Using r5 hash to sort names [ 264.909606][ T9675] REISERFS (device loop7): using 3.5.x disk format [ 264.918432][ T27] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 264.924817][ T9675] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 264.937931][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.945981][ T27] usb 7-1: Product: syz [ 264.998157][ T27] usb 7-1: Manufacturer: syz [ 265.003093][ T27] usb 7-1: SerialNumber: syz [ 265.041322][ T27] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 265.489869][ T9670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.508814][ T9670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.526817][ T27] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 265.560521][ T27] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 265.579413][ T27] usb 7-1: media controller created [ 265.636345][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.766921][ T9677] loop2: detected capacity change from 0 to 32768 [ 265.832845][ T9677] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 265.857510][ T27] usb 7-1: USB disconnect, device number 6 [ 265.943944][ T9677] XFS (loop2): Ending clean mount [ 265.999971][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 266.109089][ T5772] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 266.215809][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.260452][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.280260][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.297919][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.334945][ T9683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 266.376652][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 266.613608][ T9700] loop6: detected capacity change from 0 to 128 [ 266.621419][ T9700] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.710143][ T9700] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 266.781936][ T971] usb 1-1: USB disconnect, device number 21 [ 266.855319][ T59] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 267.298005][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 267.495367][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.533446][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.555551][ T8] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 267.572312][ T8] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 267.588317][ T8] usb 7-1: Manufacturer: syz [ 267.605415][ T8] usb 7-1: config 0 descriptor?? [ 267.666983][ T9721] loop2: detected capacity change from 0 to 4096 [ 267.711499][ T9721] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 267.858012][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 267.858029][ T28] audit: type=1800 audit(1782159495.760:69): pid=9721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.992" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 268.318853][ T9731] loop2: detected capacity change from 0 to 256 [ 268.536568][ T8] input: syz Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0015/input/input16 [ 268.638866][ T8] input: syz Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0015/input/input17 [ 268.687084][ T8] input: syz Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0015/input/input18 [ 268.713107][ T8] input: syz Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.0015/input/input19 [ 268.763460][ T8] uclogic 0003:256C:006D.0015: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.6-1/input0 [ 268.822241][ T8] usb 7-1: USB disconnect, device number 7 [ 269.211388][ T9741] fido_id[9741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 269.353343][ T9753] input: syz0 as /devices/virtual/input/input20 [ 271.198120][ T5813] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 271.418160][ T5813] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 271.427289][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.466290][ T5813] usb 8-1: Product: syz [ 271.481616][ T5813] usb 8-1: Manufacturer: syz [ 271.486299][ T5813] usb 8-1: SerialNumber: syz [ 271.539385][ T5813] usb 8-1: config 0 descriptor?? [ 271.656053][ T9818] loop2: detected capacity change from 0 to 512 [ 271.741835][ T9818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.777883][ T9818] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.100816][ T2949] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 272.158001][ T2949] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 17 with error 28 [ 272.197998][ T2949] EXT4-fs (loop2): This should not happen!! Data will be lost [ 272.197998][ T2949] [ 272.207756][ T2949] EXT4-fs (loop2): Total free blocks count 0 [ 272.233706][ T9810] loop6: detected capacity change from 0 to 40427 [ 272.238321][ T2949] EXT4-fs (loop2): Free/Dirty block details [ 272.246153][ T2949] EXT4-fs (loop2): free_blocks=65280 [ 272.279199][ T2949] EXT4-fs (loop2): dirty_blocks=17 [ 272.284416][ T2949] EXT4-fs (loop2): Block reservation details [ 272.299922][ T9810] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 272.319054][ T2949] EXT4-fs (loop2): i_reserved_data_blocks=17 [ 272.340549][ T9810] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 272.381244][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.395691][ T9810] F2FS-fs (loop6): invalid crc value [ 272.468110][ T9810] F2FS-fs (loop6): Found nat_bits in checkpoint [ 272.629148][ T5813] usb 8-1: Firmware version (0.0) predates our first public release. [ 272.669570][ T5813] usb 8-1: Please update to version 0.2 or newer [ 272.778237][ T9810] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 272.785413][ T9810] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 272.804055][ T5813] usb 8-1: USB disconnect, device number 6 [ 273.072878][ T9839] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 273.089076][ T9810] F2FS-fs (loop6): Stopped filesystem due to reason: 0 [ 273.668050][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 273.878382][ T8] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 273.905321][ T8] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 273.931319][ T8] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 273.958363][ T9864] loop8: detected capacity change from 0 to 7 [ 273.969743][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.991604][ T9864] Dev loop8: unable to read RDB block 7 [ 274.001610][ T9864] loop8: unable to read partition table [ 274.013193][ T9864] loop8: partition table beyond EOD, truncated [ 274.022978][ T9847] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 274.047398][ T9864] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 274.052804][ T8] usb 8-1: Quirk or no altest; falling back to MIDI 1.0 [ 274.379684][ T9874] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 274.471162][ T8] usb 8-1: USB disconnect, device number 7 [ 275.611072][ T9884] loop6: detected capacity change from 0 to 32768 [ 275.664791][ T9884] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 275.834432][ T9884] XFS (loop6): Ending clean mount [ 276.200040][ T8095] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 277.081442][ T9952] gre0: entered allmulticast mode [ 277.102562][ T9950] gre0: left allmulticast mode [ 277.238511][ T23] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 277.461310][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 277.496222][ T9967] netlink: 'syz.2.1053': attribute type 1 has an invalid length. [ 277.501832][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.555430][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.578054][ T23] usb 1-1: SerialNumber: syz [ 277.601653][ T9967] 8021q: adding VLAN 0 to HW filter on device bond3 [ 277.686515][ T9971] syz_tun: entered promiscuous mode [ 277.722698][ T9971] syz_tun: left promiscuous mode [ 277.863936][ T9980] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only [ 278.049664][ T9982] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 278.343837][ T23] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 278.430486][ T9997] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 278.472986][ T9997] overlayfs: failed to set xattr on upper [ 278.495656][ T9997] overlayfs: ...falling back to redirect_dir=nofollow. [ 278.530148][ T9997] overlayfs: ...falling back to index=off. [ 278.557977][ T9997] overlayfs: ...falling back to uuid=null. [ 278.819601][ T5833] usb 1-1: USB disconnect, device number 22 [ 278.849437][ T5833] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 279.022759][T10013] loop6: detected capacity change from 0 to 256 [ 279.055586][T10013] exfat: Deprecated parameter 'utf8' [ 279.136927][T10013] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 279.798021][ T23] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 279.897045][T10041] IPVS: persistence engine module ip_vs_pe_ not found [ 280.008357][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 280.016034][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.048287][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26469, setting to 1024 [ 280.100552][ T23] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 280.137940][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.174003][ T23] usb 7-1: config 0 descriptor?? [ 280.190599][T10033] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 280.489552][T10064] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1081'. [ 280.634482][ T23] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 280.672420][ T23] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 280.852752][ T23] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 281.058178][ T23] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 281.464776][ T23] ft260 0003:0403:6030.0016: failed to retrieve status: -71 [ 281.486979][ T23] ft260 0003:0403:6030.0016: failed to reset I2C controller: -71 [ 281.559435][T10062] loop2: detected capacity change from 0 to 40427 [ 281.591858][ T23] usb 7-1: USB disconnect, device number 8 [ 281.604068][T10062] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 281.643390][T10062] F2FS-fs (loop2): invalid crc value [ 281.671936][T10062] F2FS-fs (loop2): Found nat_bits in checkpoint [ 281.873029][T10062] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 282.390519][ T5772] syz-executor: attempt to access beyond end of device [ 282.390519][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 282.411856][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 282.800876][T10122] loop6: detected capacity change from 0 to 8 [ 282.850351][T10122] SQUASHFS error: Unable to read inode 0x127 [ 284.617922][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 284.800262][ T8] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.820148][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.842754][ T8] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.856830][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.865482][ T8] usb 7-1: SerialNumber: syz [ 284.872957][T10190] loop7: detected capacity change from 0 to 32768 [ 284.921075][T10190] ocfs2: Slot 0 on device (7,7) was already allocated to this node! [ 284.970643][T10190] JBD2: Ignoring recovery information on journal [ 285.106925][T10190] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 285.125712][ T8] usb 7-1: 0:2 : does not exist [ 285.181321][ T8] usb 7-1: USB disconnect, device number 9 [ 285.329046][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.383658][T10202] loop2: detected capacity change from 0 to 1024 [ 285.575753][T10202] hfsplus: b-tree write err: -5, ino 3 [ 286.116105][ T8275] ocfs2: Unmounting device (7,7) on (node local) [ 286.207908][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 286.420894][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.440005][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.469341][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 286.498162][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.516662][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.566240][ T23] usb 3-1: config 0 descriptor?? [ 286.864437][T10223] capability: warning: `syz.7.1118' uses 32-bit capabilities (legacy support in use) [ 287.033103][ T23] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 287.063110][ T23] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 287.631109][T10227] loop6: detected capacity change from 0 to 40427 [ 287.654247][T10227] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 287.673518][T10227] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 287.706515][T10227] F2FS-fs (loop6): invalid crc value [ 288.052814][T10227] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 288.067978][T10227] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 288.097069][T10242] loop7: detected capacity change from 0 to 4096 [ 288.233368][ T28] audit: type=1800 audit(1782159772.138:70): pid=10227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1119" name="file1" dev="loop6" ino=10 res=0 errno=0 [ 288.343932][ T8095] syz-executor: attempt to access beyond end of device [ 288.343932][ T8095] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 288.369377][ T8095] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 288.747996][ T5813] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 288.941650][ T5813] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.972936][ T5813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.991908][ T5813] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 289.014750][ T5813] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 289.037936][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.062027][ T5813] usb 8-1: config 0 descriptor?? [ 289.067956][T10249] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 289.130286][ T971] usb 3-1: USB disconnect, device number 14 [ 289.317456][ T27] usb 8-1: USB disconnect, device number 8 [ 291.499089][T10331] loop7: detected capacity change from 0 to 16 [ 291.565136][T10331] erofs: (device loop7): mounted with root inode @ nid 36. [ 291.886350][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1161'. [ 291.924115][T10342] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 291.953216][T10342] gretap0: entered promiscuous mode [ 292.190801][T10349] loop2: detected capacity change from 0 to 16 [ 292.216102][T10349] erofs: (device loop2): erofs_superblock_csum_verify: invalid checksum 0x3f3bd8e3, 0x7bbbea8c expected [ 292.234922][ T5941] udevd[5941]: incorrect erofs checksum on /dev/loop2 [ 292.425845][T10354] loop6: detected capacity change from 0 to 4096 [ 292.717953][ T5811] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 292.920525][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.975709][ T5811] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.032821][ T5811] usb 8-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 293.075509][ T5811] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 293.097334][ T5811] usb 8-1: Manufacturer: syz [ 293.130372][ T5811] usb 8-1: config 0 descriptor?? [ 293.336642][T10376] loop2: detected capacity change from 0 to 16 [ 293.372499][T10376] erofs: (device loop2): mounted with root inode @ nid 36. [ 293.445582][T10378] netlink: 204 bytes leftover after parsing attributes in process `syz.6.1175'. [ 293.464954][T10376] overlayfs: failed to clone upperpath [ 293.487962][T10378] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1175'. [ 293.960025][ T5813] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 294.167966][ T5813] usb 7-1: Using ep0 maxpacket: 8 [ 294.179787][ T5813] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.191810][ T5811] uclogic 0003:256C:006D.0018: v1 frame probing failed: -71 [ 294.207211][ T5811] uclogic 0003:256C:006D.0018: failed probing parameters: -71 [ 294.215272][ T5813] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 294.225070][ T5811] uclogic: probe of 0003:256C:006D.0018 failed with error -71 [ 294.233471][ T5813] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.250724][ T5811] usb 8-1: USB disconnect, device number 9 [ 294.263083][ T5813] usb 7-1: config 0 descriptor?? [ 294.290623][ T5813] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 294.409237][T10394] syzkaller1: entered promiscuous mode [ 294.414826][T10394] syzkaller1: entered allmulticast mode [ 294.908173][ T971] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 295.024873][T10403] input: syz0 as /devices/virtual/input/input21 [ 295.133603][ T971] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 295.147925][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.156020][ T971] usb 3-1: Product: syz [ 295.168070][ T971] usb 3-1: Manufacturer: syz [ 295.172782][ T971] usb 3-1: SerialNumber: syz [ 295.213517][ T971] usb 3-1: config 0 descriptor?? [ 295.281317][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 295.304607][T10409] xfrm1: entered promiscuous mode [ 295.315128][T10409] xfrm1: entered allmulticast mode [ 295.321638][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 295.534946][ T5813] gspca_vc032x: reg_w err -71 [ 295.551943][ T5813] vc032x: probe of 7-1:0.0 failed with error -71 [ 295.582567][ T5813] usb 7-1: USB disconnect, device number 10 [ 295.782668][T10419] netlink: 11 bytes leftover after parsing attributes in process `syz.0.1191'. [ 295.795358][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1191'. [ 295.805181][T10419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1191'. [ 295.908773][T10413] syz.0.1190 (10413) used greatest stack depth: 17400 bytes left [ 296.113797][T10428] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1195'. [ 296.274573][ T971] usb 3-1: non-Atmel transceiver xxxxec08 [ 296.285345][T10433] input: syz1 as /devices/virtual/input/input22 [ 296.478222][ T971] usb 3-1: Firmware version (0.0) predates our first public release. [ 296.507899][ T971] usb 3-1: Please update to version 0.2 or newer [ 296.520914][ T971] usb 3-1: atusb_probe: initialization failed, error = -19 [ 296.550554][ T971] usb 3-1: USB disconnect, device number 15 [ 299.120756][ T28] audit: type=1326 audit(1782159783.018:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10500 comm="syz.0.1224" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f938c79ce59 code=0x0 [ 300.889738][T10548] veth0: entered promiscuous mode [ 300.989291][T10551] loop7: detected capacity change from 0 to 256 [ 300.997476][T10551] exfat: Deprecated parameter 'utf8' [ 301.016147][T10551] exfat: Deprecated parameter 'namecase' [ 301.029185][T10551] exfat: Unknown parameter 'seclabel' [ 301.183671][T10547] veth0: left promiscuous mode [ 301.673341][T10568] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 301.722385][T10568] netlink: 'syz.2.1253': attribute type 4 has an invalid length. [ 301.747880][T10568] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1253'. [ 302.636927][T10575] loop6: detected capacity change from 0 to 8192 [ 302.697036][T10575] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 302.727921][T10575] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 302.737257][T10575] REISERFS (device loop6): using ordered data mode [ 302.807972][T10575] reiserfs: using flush barriers [ 302.835030][T10575] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 302.862741][T10575] REISERFS (device loop6): checking transaction log (loop6) [ 303.122465][T10575] REISERFS (device loop6): Using tea hash to sort names [ 303.140120][T10575] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 304.178029][ T5813] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 304.220553][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1272'. [ 304.377989][ T5813] usb 7-1: Using ep0 maxpacket: 8 [ 304.386300][ T5813] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 304.421463][ T5813] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 304.448977][ T5813] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.469014][ T5813] usb 7-1: Product: syz [ 304.473267][ T5813] usb 7-1: Manufacturer: syz [ 304.498257][ T5813] usb 7-1: SerialNumber: syz [ 304.643355][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1276'. [ 305.314438][T10641] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1283'. [ 305.591948][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 305.755899][ T5813] snd-usb-audio: probe of 7-1:1.0 failed with error -71 [ 305.800458][ T5813] usb 7-1: USB disconnect, device number 11 [ 305.955191][T10655] loop7: detected capacity change from 0 to 512 [ 306.937290][T10688] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 307.935288][T10695] loop7: detected capacity change from 0 to 40427 [ 307.955521][T10695] F2FS-fs (loop7): Invalid SB checksum offset: 0 [ 307.964718][T10695] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 307.974419][T10695] F2FS-fs (loop7): invalid crc value [ 308.092802][T10695] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 308.109380][T10695] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 308.254166][ T8275] syz-executor: attempt to access beyond end of device [ 308.254166][ T8275] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 308.320849][ T8275] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 308.348002][ T8275] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 309.060680][T10722] loop7: detected capacity change from 0 to 512 [ 309.115326][T10722] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.183704][T10722] ext4 filesystem being mounted at /166/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.341211][ T8275] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.577475][T10729] loop7: detected capacity change from 0 to 256 [ 309.737656][T10729] FAT-fs (loop7): Directory bread(block 64) failed [ 309.750249][T10729] FAT-fs (loop7): Directory bread(block 65) failed [ 309.764482][T10729] FAT-fs (loop7): Directory bread(block 66) failed [ 309.776456][T10731] vcan0 speed is unknown, defaulting to 1000 [ 309.783359][T10729] FAT-fs (loop7): Directory bread(block 67) failed [ 309.801421][T10729] FAT-fs (loop7): Directory bread(block 68) failed [ 309.818499][T10729] FAT-fs (loop7): Directory bread(block 69) failed [ 309.841255][T10729] FAT-fs (loop7): Directory bread(block 70) failed [ 309.861966][T10729] FAT-fs (loop7): Directory bread(block 71) failed [ 309.886794][T10729] FAT-fs (loop7): Directory bread(block 72) failed [ 309.901483][T10729] FAT-fs (loop7): Directory bread(block 73) failed [ 310.011887][T10733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 310.082939][T10729] xt_hashlimit: size too large, truncated to 1048576 [ 311.819072][ T5833] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 312.007923][ T8] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 312.025852][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 312.040269][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.061680][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.084231][ T5833] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 312.104465][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.125850][ T5833] usb 7-1: config 0 descriptor?? [ 312.208008][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 312.220965][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.237950][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.248084][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.268241][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.297940][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.322956][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.595747][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 312.618030][ T8] usbtmc 1-1:16.0: can't read capabilities [ 312.766439][ T5833] usb 7-1: string descriptor 0 read error: -71 [ 312.804695][ T5833] usb 7-1: Max retries (5) exceeded reading string descriptor 200 [ 312.838281][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.847417][ T5833] letsketch: probe of 0003:6161:4D15.0019 failed with error -32 [ 312.848880][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.864267][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.868947][ T5833] usb 7-1: USB disconnect, device number 12 [ 312.891184][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.900377][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.912430][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.921565][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.936960][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.946075][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.955156][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.964233][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.974501][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.983650][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 312.992790][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 313.001906][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 313.053544][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 313.080806][ T8] usb 1-1: USB disconnect, device number 23 [ 313.549808][T10773] input: syz1 as /devices/virtual/input/input23 [ 313.751853][T10777] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 313.767041][T10777] syzkaller0: owner set to 0 [ 314.728196][ T27] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 314.917977][ T27] usb 7-1: Using ep0 maxpacket: 8 [ 314.929403][ T27] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.948266][ T27] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.958452][ T27] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.969704][ T27] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.983803][ T27] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 314.993309][ T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.226325][ T27] usb 7-1: GET_CAPABILITIES returned 0 [ 315.233941][ T27] usbtmc 7-1:16.0: can't read capabilities [ 315.444054][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.453247][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.462368][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.472811][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.481957][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.491078][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.503696][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.512836][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.521953][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.532515][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.541659][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.550763][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.572476][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.581687][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.595947][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 315.605205][ C0] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 315.614463][ C0] dummy_hcd dummy_hcd.6: timer fired with no URBs pending? [ 315.638202][ T27] usb 7-1: USB disconnect, device number 13 [ 315.882965][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 316.095412][T10820] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 316.665043][T10838] syz_tun: entered promiscuous mode [ 316.673686][T10838] syz_tun: left promiscuous mode [ 317.323602][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.330887][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.678976][T10862] vcan0 speed is unknown, defaulting to 1000 [ 318.405696][T10870] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1369'. [ 318.437955][T10870] ip6tnl1: entered promiscuous mode [ 318.616263][T10874] input: syz1 as /devices/virtual/input/input24 [ 319.811102][T10898] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1383'. [ 319.952085][T10890] loop6: detected capacity change from 0 to 32768 [ 319.996619][T10890] JBD2: Ignoring recovery information on journal [ 320.121166][T10890] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 320.373234][T10890] [ 320.375644][T10890] ====================================================== [ 320.382697][T10890] WARNING: possible circular locking dependency detected [ 320.389763][T10890] syzkaller #0 Not tainted [ 320.394209][T10890] ------------------------------------------------------ [ 320.401294][T10890] syz.6.1378/10890 is trying to acquire lock: [ 320.407391][T10890] ffff88805dc63498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}, at: ocfs2_xattr_set+0xbe8/0x13a0 [ 320.419659][T10890] [ 320.419659][T10890] but task is already holding lock: [ 320.427049][T10890] ffff88805dc606f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 320.436631][T10890] [ 320.436631][T10890] which lock already depends on the new lock. [ 320.436631][T10890] [ 320.447077][T10890] [ 320.447077][T10890] the existing dependency chain (in reverse order) is: [ 320.456134][T10890] [ 320.456134][T10890] -> #3 (&oi->ip_xattr_sem){++++}-{3:3}: [ 320.464017][T10890] down_read+0x46/0x2e0 [ 320.468752][T10890] ocfs2_init_acl+0x30a/0x770 [ 320.473991][T10890] ocfs2_mknod+0x1427/0x2310 [ 320.479149][T10890] ocfs2_mkdir+0x196/0x430 [ 320.484126][T10890] vfs_mkdir+0x2a5/0x470 [ 320.488923][T10890] do_mkdirat+0x1dc/0x450 [ 320.493816][T10890] __x64_sys_mkdirat+0x89/0xa0 [ 320.499138][T10890] do_syscall_64+0x55/0xb0 [ 320.504127][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.510599][T10890] [ 320.510599][T10890] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 320.519162][T10890] down_read+0x46/0x2e0 [ 320.523898][T10890] ocfs2_start_trans+0x3a8/0x6f0 [ 320.529416][T10890] ocfs2_modify_bh+0xe4/0x4c0 [ 320.534758][T10890] ocfs2_local_read_info+0x1433/0x17d0 [ 320.540795][T10890] dquot_load_quota_sb+0x734/0xb30 [ 320.546479][T10890] dquot_load_quota_inode+0x2d7/0x5c0 [ 320.552428][T10890] ocfs2_enable_quotas+0x1c4/0x4a0 [ 320.558112][T10890] ocfs2_fill_super+0x4187/0x5030 [ 320.563708][T10890] mount_bdev+0x21c/0x2c0 [ 320.568601][T10890] legacy_get_tree+0xea/0x180 [ 320.573846][T10890] vfs_get_tree+0x8c/0x280 [ 320.578828][T10890] do_new_mount+0x24a/0xa40 [ 320.583917][T10890] __se_sys_mount+0x2e7/0x3d0 [ 320.589253][T10890] do_syscall_64+0x55/0xb0 [ 320.594229][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.600733][T10890] [ 320.600733][T10890] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 320.608269][T10890] ocfs2_start_trans+0x2a9/0x6f0 [ 320.613779][T10890] ocfs2_remove_btree_range+0x816/0x15e0 [ 320.619992][T10890] ocfs2_commit_truncate+0xc27/0x24b0 [ 320.625937][T10890] ocfs2_evict_inode+0x1a0b/0x41a0 [ 320.631627][T10890] evict+0x4b7/0x8a0 [ 320.636092][T10890] vfs_rmdir+0x378/0x4b0 [ 320.640896][T10890] do_rmdir+0x29f/0x590 [ 320.645618][T10890] __x64_sys_unlinkat+0xc4/0xe0 [ 320.651034][T10890] do_syscall_64+0x55/0xb0 [ 320.656027][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.662497][T10890] [ 320.662497][T10890] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{3:3}: [ 320.673084][T10890] __lock_acquire+0x37ef/0x7d80 [ 320.678507][T10890] lock_acquire+0x19e/0x420 [ 320.683579][T10890] down_write+0x97/0x200 [ 320.688396][T10890] ocfs2_xattr_set+0xbe8/0x13a0 [ 320.693836][T10890] __vfs_setxattr+0x437/0x470 [ 320.699083][T10890] __vfs_setxattr_noperm+0x12a/0x5e0 [ 320.704937][T10890] vfs_setxattr+0x16b/0x2f0 [ 320.710021][T10890] path_setxattr+0x33a/0x590 [ 320.715191][T10890] __x64_sys_setxattr+0xbb/0xd0 [ 320.720609][T10890] do_syscall_64+0x55/0xb0 [ 320.725601][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.732077][T10890] [ 320.732077][T10890] other info that might help us debug this: [ 320.732077][T10890] [ 320.742347][T10890] Chain exists of: [ 320.742347][T10890] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 320.742347][T10890] [ 320.759372][T10890] Possible unsafe locking scenario: [ 320.759372][T10890] [ 320.766865][T10890] CPU0 CPU1 [ 320.772265][T10890] ---- ---- [ 320.777660][T10890] lock(&oi->ip_xattr_sem); [ 320.782289][T10890] lock(&journal->j_trans_barrier); [ 320.790145][T10890] lock(&oi->ip_xattr_sem); [ 320.797305][T10890] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7); [ 320.804660][T10890] [ 320.804660][T10890] *** DEADLOCK *** [ 320.804660][T10890] [ 320.812844][T10890] 3 locks held by syz.6.1378/10890: [ 320.818084][T10890] #0: ffff888075b10418 (sb_writers#17){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 320.827388][T10890] #1: ffff88805dc609d8 (&sb->s_type->i_mutex_key#31){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0 [ 320.837911][T10890] #2: ffff88805dc606f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x495/0x13a0 [ 320.847908][T10890] [ 320.847908][T10890] stack backtrace: [ 320.853830][T10890] CPU: 1 PID: 10890 Comm: syz.6.1378 Not tainted syzkaller #0 [ 320.861332][T10890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.871443][T10890] Call Trace: [ 320.874764][T10890] [ 320.877734][T10890] dump_stack_lvl+0x18c/0x250 [ 320.882463][T10890] ? load_image+0x420/0x420 [ 320.887010][T10890] ? show_regs_print_info+0x20/0x20 [ 320.892282][T10890] ? print_circular_bug+0x12b/0x1a0 [ 320.897539][T10890] check_noncircular+0x2fc/0x400 [ 320.902573][T10890] ? look_up_lock_class+0x75/0x140 [ 320.907763][T10890] ? print_deadlock_bug+0x5d0/0x5d0 [ 320.913005][T10890] ? lockdep_lock+0xf5/0x230 [ 320.917707][T10890] ? lockdep_unlock+0x146/0x2e0 [ 320.922619][T10890] ? _find_first_zero_bit+0xd6/0x100 [ 320.927960][T10890] __lock_acquire+0x37ef/0x7d80 [ 320.932874][T10890] ? _raw_spin_unlock+0x40/0x40 [ 320.937796][T10890] ? verify_lock_unused+0x140/0x140 [ 320.943069][T10890] lock_acquire+0x19e/0x420 [ 320.947708][T10890] ? ocfs2_xattr_set+0xbe8/0x13a0 [ 320.952793][T10890] ? __rwlock_init+0x150/0x150 [ 320.957617][T10890] ? __might_sleep+0xe0/0xe0 [ 320.962292][T10890] ? read_lock_is_recursive+0x20/0x20 [ 320.967804][T10890] ? _raw_spin_unlock+0x28/0x40 [ 320.972714][T10890] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 320.978488][T10890] ? ocfs2_xattr_block_find+0x15b/0x4e0 [ 320.984136][T10890] down_write+0x97/0x200 [ 320.988464][T10890] ? ocfs2_xattr_set+0xbe8/0x13a0 [ 320.993543][T10890] ? down_read_killable+0x340/0x340 [ 320.998810][T10890] ocfs2_xattr_set+0xbe8/0x13a0 [ 321.003728][T10890] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 321.009501][T10890] ? __lock_acquire+0x1336/0x7d80 [ 321.014661][T10890] ? verify_lock_unused+0x140/0x140 [ 321.019911][T10890] ? ____kasan_slab_free+0x126/0x1f0 [ 321.025335][T10890] ? aa_get_newest_label+0xfd/0x5c0 [ 321.030637][T10890] ? end_current_label_crit_section+0x170/0x170 [ 321.036937][T10890] ? posix_xattr_acl+0x93/0xb0 [ 321.041835][T10890] ? ocfs2_xattr_trusted_get+0x40/0x40 [ 321.047348][T10890] __vfs_setxattr+0x437/0x470 [ 321.052077][T10890] __vfs_setxattr_noperm+0x12a/0x5e0 [ 321.057429][T10890] vfs_setxattr+0x16b/0x2f0 [ 321.061983][T10890] ? xattr_permission+0x460/0x460 [ 321.067107][T10890] ? __mnt_want_write+0x223/0x2a0 [ 321.072195][T10890] ? path_setxattr+0x2ec/0x590 [ 321.077064][T10890] path_setxattr+0x33a/0x590 [ 321.081719][T10890] ? simple_xattrs_free+0x150/0x150 [ 321.086984][T10890] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 321.093037][T10890] ? lock_chain_count+0x20/0x20 [ 321.097939][T10890] __x64_sys_setxattr+0xbb/0xd0 [ 321.102849][T10890] do_syscall_64+0x55/0xb0 [ 321.107315][T10890] ? clear_bhb_loop+0x40/0x90 [ 321.112041][T10890] ? clear_bhb_loop+0x40/0x90 [ 321.116765][T10890] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.122713][T10890] RIP: 0033:0x7fef6cd9ce59 [ 321.127169][T10890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.146822][T10890] RSP: 002b:00007fef6dbcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 321.155296][T10890] RAX: ffffffffffffffda RBX: 00007fef6d015fa0 RCX: 00007fef6cd9ce59 [ 321.163320][T10890] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000 [ 321.171502][T10890] RBP: 00007fef6ce32e6f R08: 0000000000000000 R09: 0000000000000000 [ 321.179589][T10890] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000 [ 321.187621][T10890] R13: 00007fef6d016038 R14: 00007fef6d015fa0 R15: 00007ffc6ccc87b8 [ 321.195648][T10890] [ 321.381745][ T8095] ocfs2: Unmounting device (7,6) on (node local) [ 321.543028][T10912] loop7: detected capacity change from 0 to 32768 [ 321.575880][T10912] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 321.622083][T10912] XFS (loop7): Ending clean mount [ 321.685631][ T8275] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd